@inetafrica/open-claudia 1.19.3 → 1.19.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## v1.19.5
+- Stop printing the Web UI admin password in startup logs.
+
+## v1.19.4
+- Legacy/static env-only deployments with no persisted `auth.json` owner now treat configured `TELEGRAM_CHAT_ID` chats as owners for shared auth commands. This fixes authorized test chats being blocked from `/codex_login` when no `isOwner` metadata exists yet.
+
 ## v1.19.3
 - Owner-only auth commands now recognize chats marked as `isOwner: true` in `auth.json`, not only the first `TELEGRAM_CHAT_ID`. This fixes owner-authenticated Telegram chats being blocked from `/codex_login` and `/codex_setup_token`.
 

package/bot-agent.js

@@ -332,7 +332,9 @@ function isOwner(msg) {
   if (chatId === CHAT_ID) return true;
   try {
     const auth = JSON.parse(fs.readFileSync(AUTH_FILE, "utf-8"));
-    return Array.isArray(auth.authorized) && auth.authorized.some((a) => String(a.chatId) === chatId && a.isOwner === true);
+    const authorized = Array.isArray(auth.authorized) ? auth.authorized : [];
+    if (authorized.some((a) => String(a.chatId) === chatId && a.isOwner === true)) return true;
+    if (!authorized.some((a) => a.isOwner === true) && CHAT_IDS.includes(chatId)) return true;
   } catch (e) {}
   return false;
 }

package/bot.js

@@ -663,7 +663,9 @@ function isOwner(msg) {
   if (chatId === CHAT_ID) return true;
   try {
     const auth = JSON.parse(fs.readFileSync(AUTH_FILE, "utf-8"));
-    return Array.isArray(auth.authorized) && auth.authorized.some((a) => String(a.chatId) === chatId && a.isOwner === true);
+    const authorized = Array.isArray(auth.authorized) ? auth.authorized : [];
+    if (authorized.some((a) => String(a.chatId) === chatId && a.isOwner === true)) return true;
+    if (!authorized.some((a) => a.isOwner === true) && CHAT_IDS.includes(chatId)) return true;
   } catch (e) {}
   return false;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "1.19.3",
+  "version": "1.19.5",
   "description": "Your always-on AI coding assistant — Claude Code, Cursor Agent, and OpenAI Codex via Telegram",
   "main": "bot.js",
   "bin": {

package/web.js

@@ -700,9 +700,8 @@ function startWebServer() {
   });
 
   server.listen(PORT, () => {
-    const pw = getPassword();
     console.log(`Web UI running on http://localhost:${PORT}`);
-    console.log(`Admin password: ${pw}`);
+    console.log("Admin password configured.");
   });
 
   return server;