@kl-c/matrixos 0.1.21 → 0.1.23

package/dist/cli-node/index.js

@@ -2145,7 +2145,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.1.21",
+    version: "0.1.23",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -67078,6 +67078,48 @@ var require_src = __commonJS((exports, module2) => {
   module2.exports = { cursor, scroll, erase, beep };
 });
 
+// packages/omo-opencode/src/cli/config-manager/write-gateway-env.ts
+import { existsSync as existsSync26, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync6, chmodSync as chmodSync3 } from "fs";
+import { join as join26 } from "path";
+function writeGatewayEnvToken(key, token) {
+  const configDir = getConfigDir();
+  if (!existsSync26(configDir))
+    mkdirSync9(configDir, { recursive: true });
+  const envPath = join26(configDir, GATEWAY_ENV_FILENAME);
+  const entries = new Map;
+  if (existsSync26(envPath)) {
+    const existing = readFileSync15(envPath, "utf-8");
+    for (const rawLine of existing.split(`
+`)) {
+      const line = rawLine.trim();
+      if (line.length === 0 || line.startsWith("#"))
+        continue;
+      const withoutExport = line.replace(/^(export\s+)/i, "");
+      const eqIndex = withoutExport.indexOf("=");
+      if (eqIndex === -1)
+        continue;
+      const k = withoutExport.slice(0, eqIndex).trim();
+      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(k))
+        continue;
+      entries.set(k, withoutExport.slice(eqIndex + 1).trim());
+    }
+  }
+  entries.set(key, token);
+  const next = [...entries.entries()].map(([k, v]) => `${k}=${v}`).join(`
+`) + `
+`;
+  writeFileSync6(envPath, next, { mode: 384 });
+  chmodSync3(envPath, 384);
+  return envPath;
+}
+function writeGatewayEnv(token) {
+  return writeGatewayEnvToken("TELEGRAM_BOT_TOKEN", token);
+}
+var GATEWAY_ENV_FILENAME = ".klc-gateway.env";
+var init_write_gateway_env = __esm(() => {
+  init_config_context();
+});
+
 // node_modules/.bun/zod@4.4.3/node_modules/zod/v4/core/core.js
 function $constructor(name2, initializer, params) {
   function init(inst, def) {
@@ -107576,7 +107618,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   var LDD_PATH = "/usr/bin/ldd";
   var SELF_PATH = "/proc/self/exe";
   var MAX_LENGTH = 2048;
-  var readFileSync44 = (path18) => {
+  var readFileSync45 = (path18) => {
     const fd = fs17.openSync(path18, "r");
     const buffer = Buffer.alloc(MAX_LENGTH);
     const bytesRead = fs17.readSync(fd, buffer, 0, MAX_LENGTH, 0);
@@ -107599,7 +107641,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   module2.exports = {
     LDD_PATH,
     SELF_PATH,
-    readFileSync: readFileSync44,
+    readFileSync: readFileSync45,
     readFile
   };
 });
@@ -107642,7 +107684,7 @@ var require_elf = __commonJS((exports2, module2) => {
 var require_detect_libc = __commonJS((exports2, module2) => {
   var childProcess = __require("child_process");
   var { isLinux, getReport } = require_process();
-  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync44 } = require_filesystem();
+  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync45 } = require_filesystem();
   var { interpreterPath } = require_elf();
   var cachedFamilyInterpreter;
   var cachedFamilyFilesystem;
@@ -107733,7 +107775,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyFilesystem = null;
     try {
-      const lddContent = readFileSync44(LDD_PATH);
+      const lddContent = readFileSync45(LDD_PATH);
       cachedFamilyFilesystem = getFamilyFromLddContent(lddContent);
     } catch (e) {}
     return cachedFamilyFilesystem;
@@ -107756,7 +107798,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyInterpreter = null;
     try {
-      const selfContent = readFileSync44(SELF_PATH);
+      const selfContent = readFileSync45(SELF_PATH);
       const path18 = interpreterPath(selfContent);
       cachedFamilyInterpreter = familyFromInterpreterPath(path18);
     } catch (e) {}
@@ -107818,7 +107860,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedVersionFilesystem = null;
     try {
-      const lddContent = readFileSync44(LDD_PATH);
+      const lddContent = readFileSync45(LDD_PATH);
       const versionMatch = lddContent.match(RE_GLIBC_VERSION);
       if (versionMatch) {
         cachedVersionFilesystem = versionMatch[1];
@@ -117634,7 +117676,7 @@ __export(exports_generate, {
   executeGenerateCommand: () => executeGenerateCommand,
   ProfileNotFoundError: () => ProfileNotFoundError
 });
-import { existsSync as existsSync70, readFileSync as readFileSync54, realpathSync as realpathSync10 } from "fs";
+import { existsSync as existsSync70, readFileSync as readFileSync55, realpathSync as realpathSync10 } from "fs";
 import { dirname as dirname28, isAbsolute as isAbsolute6, join as join75, resolve as resolve16 } from "path";
 function profilesDirFor(opts) {
   if (opts.profilesDir)
@@ -117732,7 +117774,7 @@ var init_generate = __esm(() => {
   init_src4();
   init_src4();
   REPO_ROOT = resolve16(dirname28(new URL(import.meta.url).pathname), "..", "..", "..", "..", "..");
-  defaultFS2 = { existsSync: existsSync70, readFileSync: readFileSync54, realpathSync: realpathSync10 };
+  defaultFS2 = { existsSync: existsSync70, readFileSync: readFileSync55, realpathSync: realpathSync10 };
   ProfileNotFoundError = class ProfileNotFoundError extends Error {
     profileName;
     constructor(profileName) {
@@ -117884,7 +117926,7 @@ var exports_profile_resolve = {};
 __export(exports_profile_resolve, {
   executeProfileResolveCommand: () => executeProfileResolveCommand
 });
-import { existsSync as existsSync72, readdirSync as readdirSync15, readFileSync as readFileSync55 } from "fs";
+import { existsSync as existsSync72, readdirSync as readdirSync15, readFileSync as readFileSync56 } from "fs";
 import { join as join77, resolve as resolve17, dirname as dirname29 } from "path";
 function executeProfileResolveCommand(args) {
   if (args.options.help) {
@@ -117931,7 +117973,7 @@ function executeProfileResolveCommand(args) {
   for (const file3 of profileFiles) {
     try {
       const filePath = join77(profilesDir, file3);
-      const raw = JSON.parse(readFileSync55(filePath, "utf-8"));
+      const raw = JSON.parse(readFileSync56(filePath, "utf-8"));
       const profile2 = ProfileSchema.parse(raw);
       registry2[profile2.name] = profile2;
     } catch {}
@@ -117993,7 +118035,7 @@ __export(exports_export, {
   getShell: () => getShell,
   executeExportCommand: () => executeExportCommand
 });
-import { existsSync as existsSync73, readFileSync as readFileSync56, writeFileSync as writeFileSync25, copyFileSync as copyFileSync7, realpathSync as realpathSync11, mkdirSync as mkdirSync26 } from "fs";
+import { existsSync as existsSync73, readFileSync as readFileSync57, writeFileSync as writeFileSync25, copyFileSync as copyFileSync7, realpathSync as realpathSync11, mkdirSync as mkdirSync26 } from "fs";
 import { isAbsolute as isAbsolute7, join as join78, resolve as resolve18, dirname as dirname30 } from "path";
 import { spawnSync as spawnSync3 } from "child_process";
 function setShell(shell) {
@@ -118117,7 +118159,7 @@ var init_export = __esm(() => {
   activeShell = defaultShell;
   defaultExportFS = {
     existsSync: existsSync73,
-    readFileSync: readFileSync56,
+    readFileSync: readFileSync57,
     writeFileSync: writeFileSync25,
     copyFileSync: copyFileSync7,
     realpathSync: realpathSync11,
@@ -118125,6 +118167,107 @@ var init_export = __esm(() => {
   };
 });
 
+// packages/omo-opencode/src/cli/gateway-set-token.ts
+var exports_gateway_set_token = {};
+__export(exports_gateway_set_token, {
+  executeGatewaySetTokenCommand: () => executeGatewaySetTokenCommand
+});
+function isValidType(type2) {
+  return VALID_TYPES.includes(type2);
+}
+async function readMaskedToken(prompt) {
+  return new Promise((resolve19, reject) => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+      reject(new Error("Interactive mode requires a TTY. Use --token <value> instead."));
+      return;
+    }
+    process.stdout.write(prompt);
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding("utf8");
+    let token = "";
+    const onData = (data) => {
+      const chunk = typeof data === "string" ? data : data.toString("utf8");
+      for (const char of chunk) {
+        const code = char.charCodeAt(0);
+        if (code === 13 || code === 10) {
+          process.stdout.write(`
+`);
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.off("data", onData);
+          resolve19(token);
+          return;
+        }
+        if (code === 127 || code === 8) {
+          if (token.length > 0) {
+            token = token.slice(0, -1);
+            process.stdout.write("\b \b");
+          }
+          continue;
+        }
+        if (code === 3) {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.off("data", onData);
+          process.stdout.write(`
+`);
+          reject(new Error("Cancelled."));
+          return;
+        }
+        if (code >= 32) {
+          token += char;
+        }
+      }
+    };
+    process.stdin.on("data", onData);
+  });
+}
+async function executeGatewaySetTokenCommand(args) {
+  const type2 = args.options.type;
+  if (!isValidType(type2)) {
+    return {
+      exitCode: 1,
+      stdout: `error: invalid type "${type2}". Valid types: ${VALID_TYPES.join(", ")}
+`
+    };
+  }
+  let token;
+  if (args.options.interactive || !args.options.token) {
+    try {
+      token = await readMaskedToken(`Token ${type2} bot: `);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return { exitCode: 1, stdout: `error: ${message}
+` };
+    }
+  } else {
+    token = args.options.token;
+  }
+  if (!token || token.length === 0) {
+    return { exitCode: 1, stdout: `error: token is required
+` };
+  }
+  try {
+    const envPath = writeGatewayEnvToken(TYPE_TO_KEY[type2], token);
+    return { exitCode: 0, stdout: `${envPath}
+` };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { exitCode: 1, stdout: `error: ${message}
+` };
+  }
+}
+var VALID_TYPES, TYPE_TO_KEY;
+var init_gateway_set_token = __esm(() => {
+  init_write_gateway_env();
+  VALID_TYPES = ["telegram", "discord"];
+  TYPE_TO_KEY = {
+    telegram: "TELEGRAM_BOT_TOKEN",
+    discord: "DISCORD_BOT_TOKEN"
+  };
+});
+
 // packages/omo-opencode/src/cli/rgpd-command.ts
 var exports_rgpd_command = {};
 __export(exports_rgpd_command, {
@@ -120724,24 +120867,9 @@ var i2 = `${styleText2("gray", S_BAR)}  `;
 // packages/omo-opencode/src/cli/tui-installer.ts
 init_shared();
 init_config_manager();
+init_write_gateway_env();
 var import_picocolors4 = __toESM(require_picocolors(), 1);
 
-// packages/omo-opencode/src/cli/config-manager/write-gateway-env.ts
-init_config_context();
-import { existsSync as existsSync26, mkdirSync as mkdirSync9, writeFileSync as writeFileSync6, chmodSync as chmodSync3 } from "fs";
-import { join as join26 } from "path";
-var GATEWAY_ENV_FILENAME = ".klc-gateway.env";
-function writeGatewayEnv(token) {
-  const configDir = getConfigDir();
-  if (!existsSync26(configDir))
-    mkdirSync9(configDir, { recursive: true });
-  const envPath = join26(configDir, GATEWAY_ENV_FILENAME);
-  writeFileSync6(envPath, `TELEGRAM_BOT_TOKEN=${token}
-`, { mode: 384 });
-  chmodSync3(envPath, 384);
-  return envPath;
-}
-
 // packages/omo-opencode/src/cli/tui-install-prompts.ts
 init_model_fallback();
 
@@ -123529,7 +123657,7 @@ var BOULDER_STATE_PATH = `${BOULDER_DIR}/${BOULDER_FILE}`;
 var NOTEPAD_DIR = "notepads";
 var NOTEPAD_BASE_PATH = `${BOULDER_DIR}/${NOTEPAD_DIR}`;
 // packages/boulder-state/src/top-level-task.ts
-import { existsSync as existsSync30, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync30, readFileSync as readFileSync17 } from "fs";
 var TODO_HEADING_PATTERN = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN = /^##\s+/;
@@ -123556,7 +123684,7 @@ function readCurrentTopLevelTask(planPath) {
     return null;
   }
   try {
-    const content = readFileSync16(planPath, "utf-8");
+    const content = readFileSync17(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     let section = "other";
     for (const line of lines) {
@@ -123608,7 +123736,7 @@ function resolveBoulderPlanPathForWork(directory, work) {
   return resolveBoulderPlanPath(directory, work);
 }
 // packages/boulder-state/src/storage/plan-progress.ts
-import { existsSync as existsSync32, readFileSync as readFileSync17, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
+import { existsSync as existsSync32, readFileSync as readFileSync18, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
 var TODO_HEADING_PATTERN2 = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN2 = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN2 = /^##\s+/;
@@ -123621,7 +123749,7 @@ function getPlanProgress(planPath) {
     return { total: 0, completed: 0, isComplete: false };
   }
   try {
-    const content = readFileSync17(planPath, "utf-8");
+    const content = readFileSync18(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     const hasStructuredSections = lines.some((line) => TODO_HEADING_PATTERN2.test(line) || FINAL_VERIFICATION_HEADING_PATTERN2.test(line));
     if (hasStructuredSections) {
@@ -123737,14 +123865,14 @@ function selectMirrorWork(state) {
   return sorted[0] ?? null;
 }
 // packages/boulder-state/src/storage/read-state.ts
-import { existsSync as existsSync33, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync33, readFileSync as readFileSync19 } from "fs";
 function readBoulderState(directory) {
   const filePath = getBoulderFilePath(directory);
   if (!existsSync33(filePath)) {
     return null;
   }
   try {
-    const content = readFileSync18(filePath, "utf-8");
+    const content = readFileSync19(filePath, "utf-8");
     const parsed = JSON.parse(content);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return null;
@@ -123810,7 +123938,7 @@ init_state();
 // packages/omo-opencode/src/features/run-continuation-state/constants.ts
 var CONTINUATION_MARKER_DIR = ".omo/run-continuation";
 // packages/omo-opencode/src/features/run-continuation-state/storage.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync11, readFileSync as readFileSync19, rmSync as rmSync2, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync11, readFileSync as readFileSync20, rmSync as rmSync2, writeFileSync as writeFileSync8 } from "fs";
 import { join as join30 } from "path";
 function getMarkerPath(directory, sessionID) {
   return join30(directory, CONTINUATION_MARKER_DIR, `${sessionID}.json`);
@@ -123820,7 +123948,7 @@ function readContinuationMarker(directory, sessionID) {
   if (!existsSync34(markerPath))
     return null;
   try {
-    const raw = readFileSync19(markerPath, "utf-8");
+    const raw = readFileSync20(markerPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
       return null;
@@ -123885,7 +124013,7 @@ async function isSessionInBoulderLineage(input) {
 // packages/omo-opencode/src/hooks/the-operator/session-last-agent.ts
 init_shared();
 init_compaction_marker();
-import { readFileSync as readFileSync20, readdirSync as readdirSync5 } from "fs";
+import { readFileSync as readFileSync21, readdirSync as readdirSync5 } from "fs";
 import { join as join31 } from "path";
 var defaultSessionLastAgentDeps = {
   getMessageDir,
@@ -123946,7 +124074,7 @@ async function getLastAgentFromSession(sessionID, client3, deps = {}) {
   try {
     const messages = readdirSync5(messageDir).filter((fileName) => fileName.endsWith(".json")).map((fileName) => {
       try {
-        const content = readFileSync20(join31(messageDir, fileName), "utf-8");
+        const content = readFileSync21(join31(messageDir, fileName), "utf-8");
         const parsed = JSON.parse(content);
         return {
           fileName,
@@ -123989,7 +124117,7 @@ init_agent_display_names();
 
 // packages/omo-opencode/src/hooks/ralph-loop/storage.ts
 init_frontmatter2();
-import { existsSync as existsSync35, readFileSync as readFileSync21, writeFileSync as writeFileSync9, unlinkSync as unlinkSync5, mkdirSync as mkdirSync12 } from "fs";
+import { existsSync as existsSync35, readFileSync as readFileSync22, writeFileSync as writeFileSync9, unlinkSync as unlinkSync5, mkdirSync as mkdirSync12 } from "fs";
 import { dirname as dirname12, join as join32 } from "path";
 
 // packages/omo-opencode/src/hooks/ralph-loop/constants.ts
@@ -124007,7 +124135,7 @@ function readState(directory, customPath) {
     return null;
   }
   try {
-    const content = readFileSync21(filePath, "utf-8");
+    const content = readFileSync22(filePath, "utf-8");
     const { data, body } = parseFrontmatter(content);
     const active = data.active;
     const iteration = data.iteration;
@@ -124582,7 +124710,7 @@ function createTimestampedStdoutController(stdout2 = process.stdout) {
 // packages/telemetry-core/src/activity-state.ts
 init_atomic_write();
 init_xdg_data_dir();
-import { existsSync as existsSync36, mkdirSync as mkdirSync13, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync13, readFileSync as readFileSync23 } from "fs";
 import { basename as basename6, join as join33 } from "path";
 var POSTHOG_ACTIVITY_STATE_FILE = "posthog-activity.json";
 function resolveTelemetryStateDir(product, options = {}) {
@@ -124626,7 +124754,7 @@ function readPostHogActivityState(stateDir, diagnostics) {
     return {};
   }
   try {
-    const stateContent = readFileSync22(stateFilePath, "utf-8");
+    const stateContent = readFileSync23(stateFilePath, "utf-8");
     const stateJson = JSON.parse(stateContent);
     if (!isPostHogActivityState(stateJson)) {
       return {};
@@ -131745,7 +131873,7 @@ async function getLocalVersion(options = {}) {
   }
 }
 // packages/omo-opencode/src/cli/doctor/checks/system.ts
-import { existsSync as existsSync47, readFileSync as readFileSync32 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync33 } from "fs";
 
 // packages/omo-opencode/src/cli/doctor/checks/system-binary.ts
 init_extract_semver();
@@ -131941,7 +132069,7 @@ function compareVersions3(current, minimum) {
 
 // packages/omo-opencode/src/cli/doctor/checks/system-plugin.ts
 init_shared();
-import { existsSync as existsSync45, readFileSync as readFileSync30 } from "fs";
+import { existsSync as existsSync45, readFileSync as readFileSync31 } from "fs";
 function detectConfigPath() {
   const paths2 = getOpenCodeConfigPaths({ binary: "opencode", version: null });
   if (existsSync45(paths2.configJsonc))
@@ -131992,7 +132120,7 @@ function getPluginInfo() {
     };
   }
   try {
-    const content = readFileSync30(configPath, "utf-8");
+    const content = readFileSync31(configPath, "utf-8");
     const parsedConfig = parseJsonc(content);
     const pluginEntry = findPluginEntry2(parsedConfig.plugin ?? []);
     if (!pluginEntry) {
@@ -132034,7 +132162,7 @@ init_file_utils2();
 init_checker();
 init_auto_update_checker();
 init_package_json_locator();
-import { existsSync as existsSync46, readFileSync as readFileSync31, readdirSync as readdirSync7 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync32, readdirSync as readdirSync7 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { homedir as homedir11 } from "os";
 import { join as join41 } from "path";
@@ -132066,7 +132194,7 @@ function readPackageJson(filePath) {
   if (!existsSync46(filePath))
     return null;
   try {
-    const content = readFileSync31(filePath, "utf-8");
+    const content = readFileSync32(filePath, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -132200,7 +132328,7 @@ var defaultDeps6 = {
   getLatestPluginVersion,
   getSuggestedInstallTag,
   configExists: existsSync47,
-  readConfigFile: (path14) => readFileSync32(path14, "utf-8"),
+  readConfigFile: (path14) => readFileSync33(path14, "utf-8"),
   parseConfigContent: (content) => parseJsonc(content)
 };
 var BUN_POSTINSTALL_HELPER_PACKAGE_NAME = "@code-yeongyu/comment-checker";
@@ -132345,7 +132473,7 @@ async function checkSystem(deps = defaultDeps6) {
 
 // packages/omo-opencode/src/config/validate.ts
 init_src();
-import { readFileSync as readFileSync33 } from "fs";
+import { readFileSync as readFileSync34 } from "fs";
 import { homedir as homedir12 } from "os";
 import { dirname as dirname18, relative as relative5 } from "path";
 init_shared();
@@ -132390,7 +132518,7 @@ function schemaMessages(configPath, rawConfig) {
 }
 function parseLayerConfig(configPath) {
   try {
-    const content = readFileSync33(configPath, "utf-8");
+    const content = readFileSync34(configPath, "utf-8");
     const rawConfig = parseJsonc(content);
     if (!isPlainRecord(rawConfig)) {
       return {
@@ -132459,7 +132587,7 @@ function validatePluginConfig(directory) {
 
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-cache.ts
 init_shared();
-import { existsSync as existsSync48, readFileSync as readFileSync34 } from "fs";
+import { existsSync as existsSync48, readFileSync as readFileSync35 } from "fs";
 import { homedir as homedir13 } from "os";
 import { join as join42 } from "path";
 function getUserConfigDir2() {
@@ -132478,7 +132606,7 @@ function loadCustomProviderNames() {
     if (!existsSync48(configPath))
       continue;
     try {
-      const content = readFileSync34(configPath, "utf-8");
+      const content = readFileSync35(configPath, "utf-8");
       const data = parseJsonc(content);
       if (data?.provider && typeof data.provider === "object") {
         return Object.keys(data.provider);
@@ -132502,7 +132630,7 @@ function loadAvailableModelsFromCache() {
     return { providers: [], modelCount: 0, cacheExists: false };
   }
   try {
-    const content = readFileSync34(cacheFile, "utf-8");
+    const content = readFileSync35(cacheFile, "utf-8");
     const data = parseJsonc(content);
     const cacheProviders = Object.keys(data);
     let modelCount = 0;
@@ -132529,7 +132657,7 @@ init_model_capabilities2();
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-config.ts
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync35 } from "fs";
+import { readFileSync as readFileSync36 } from "fs";
 import { join as join43 } from "path";
 var PROJECT_CONFIG_DIR = join43(process.cwd(), ".opencode");
 function loadOmoConfig() {
@@ -132539,7 +132667,7 @@ function loadOmoConfig() {
   });
   if (projectDetected.format !== "none") {
     try {
-      const content = readFileSync35(projectDetected.path, "utf-8");
+      const content = readFileSync36(projectDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -132555,7 +132683,7 @@ function loadOmoConfig() {
   });
   if (userDetected.format !== "none") {
     try {
-      const content = readFileSync35(userDetected.path, "utf-8");
+      const content = readFileSync36(userDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -133136,13 +133264,13 @@ async function getGhCliInfo(dependencies = {}) {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-lsp.ts
-import { readFileSync as readFileSync37 } from "fs";
+import { readFileSync as readFileSync38 } from "fs";
 import { join as join47 } from "path";
 
 // packages/omo-opencode/src/mcp/lsp.ts
 init_zod();
 init_opencode_config_dir();
-import { existsSync as existsSync50, readFileSync as readFileSync36 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync37 } from "fs";
 import { delimiter as delimiter3, dirname as dirname20, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 
@@ -133286,7 +133414,7 @@ function findBootstrapRoot(candidates, pathExists) {
 }
 function readDaemonPackageVersion(root) {
   try {
-    const packageJson = JSON.parse(readFileSync36(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
+    const packageJson = JSON.parse(readFileSync37(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
     return DaemonPackageSchema.parse(packageJson).version;
   } catch (error51) {
     if (!(error51 instanceof Error))
@@ -133363,7 +133491,7 @@ function readOmoConfig(configDirectory) {
     return null;
   }
   try {
-    const content = readFileSync37(detected.path, "utf-8");
+    const content = readFileSync38(detected.path, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -133393,7 +133521,7 @@ function getInstalledLspServers(options = {}) {
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-mcp.ts
 init_shared();
-import { existsSync as existsSync51, readFileSync as readFileSync38 } from "fs";
+import { existsSync as existsSync51, readFileSync as readFileSync39 } from "fs";
 import { homedir as homedir16 } from "os";
 import { join as join48 } from "path";
 var BUILTIN_MCP_SERVERS = ["websearch", "context7", "grep_app", "lsp"];
@@ -133410,7 +133538,7 @@ function loadUserMcpConfig() {
     if (!existsSync51(configPath))
       continue;
     try {
-      const content = readFileSync38(configPath, "utf-8");
+      const content = readFileSync39(configPath, "utf-8");
       const config4 = parseJsonc(content);
       if (config4.mcpServers) {
         Object.assign(servers, config4.mcpServers);
@@ -133544,7 +133672,7 @@ async function checkTools() {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/telemetry.ts
-import { existsSync as existsSync52, readFileSync as readFileSync39 } from "fs";
+import { existsSync as existsSync52, readFileSync as readFileSync40 } from "fs";
 function isTelemetryState(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -133554,7 +133682,7 @@ function readLastActiveDay(stateFilePath) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync39(stateFilePath, "utf-8"));
+    parsed = JSON.parse(readFileSync40(stateFilePath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return "unreadable";
@@ -133629,7 +133757,7 @@ function expandHomeDirectory(directoryPath) {
 // packages/omo-opencode/src/cli/doctor/checks/team-mode.ts
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync40, promises as fs14 } from "fs";
+import { readFileSync as readFileSync41, promises as fs14 } from "fs";
 import path15 from "path";
 async function checkTeamMode() {
   const config4 = loadTeamModeConfig();
@@ -133666,7 +133794,7 @@ function loadTeamModeConfig() {
   if (!configPath)
     return { team_mode: undefined };
   try {
-    return parseJsonc(readFileSync40(configPath, "utf-8"));
+    return parseJsonc(readFileSync41(configPath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return { team_mode: undefined };
@@ -134098,7 +134226,7 @@ import {
   existsSync as existsSync55,
   mkdirSync as mkdirSync15,
   readdirSync as readdirSync8,
-  readFileSync as readFileSync42,
+  readFileSync as readFileSync43,
   renameSync as renameSync7,
   unlinkSync as unlinkSync8,
   writeFileSync as writeFileSync13
@@ -134131,7 +134259,7 @@ function getOpenCodeCliConfigDir(env2 = process.env) {
 }
 
 // packages/mcp-client-core/src/mcp-oauth/storage-index.ts
-import { chmodSync as chmodSync4, existsSync as existsSync54, readFileSync as readFileSync41, renameSync as renameSync6, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync as chmodSync4, existsSync as existsSync54, readFileSync as readFileSync42, renameSync as renameSync6, writeFileSync as writeFileSync12 } from "fs";
 import { join as join50 } from "path";
 var INDEX_FILE_NAME = "index.json";
 function isTokenIndex(value) {
@@ -134147,7 +134275,7 @@ function readTokenIndex(storageDir) {
   if (!existsSync54(indexPath))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync41(indexPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync42(indexPath, "utf-8"));
     return isTokenIndex(parsed) ? parsed : {};
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -134257,7 +134385,7 @@ function readTokenFile(filePath) {
   if (!existsSync55(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync42(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync43(filePath, "utf-8"));
     return isOAuthTokenData(parsed) ? parsed : null;
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -134270,7 +134398,7 @@ function readLegacyStore() {
   if (!existsSync55(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync42(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync43(filePath, "utf-8"));
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
       return null;
     const result = {};
@@ -135083,7 +135211,7 @@ function createEmbeddingPort() {
 // packages/learning-loop/src/codebase-scanner.ts
 var import_picomatch = __toESM(require_picomatch2(), 1);
 import { createHash as createHash5 } from "crypto";
-import { readdirSync as readdirSync9, readFileSync as readFileSync44, statSync as statSync7, existsSync as existsSync57 } from "fs";
+import { readdirSync as readdirSync9, readFileSync as readFileSync45, statSync as statSync7, existsSync as existsSync57 } from "fs";
 import { join as join52, relative as relative6, extname as extname3 } from "path";
 var EXT_TO_LANG = {
   ts: "typescript",
@@ -135151,7 +135279,7 @@ function defaultFs() {
       return readdirSync9(path18);
     },
     readFile(path18) {
-      return readFileSync44(path18, "utf-8");
+      return readFileSync45(path18, "utf-8");
     },
     stat(path18) {
       const s = statSync7(path18);
@@ -135504,7 +135632,7 @@ function formatSearchResults(result) {
 }
 
 // packages/learning-loop/src/improvement.ts
-import { existsSync as existsSync58, mkdirSync as mkdirSync17, readFileSync as readFileSync45, writeFileSync as writeFileSync15 } from "fs";
+import { existsSync as existsSync58, mkdirSync as mkdirSync17, readFileSync as readFileSync46, writeFileSync as writeFileSync15 } from "fs";
 import { join as join53, basename as basename10 } from "path";
 function createImprovementStore(improvementsDir) {
   if (!existsSync58(improvementsDir)) {
@@ -135531,7 +135659,7 @@ function createImprovementStore(improvementsDir) {
   function get(id) {
     const filePath = join53(improvementsDir, `${id}.json`);
     try {
-      const raw = readFileSync45(filePath, "utf-8");
+      const raw = readFileSync46(filePath, "utf-8");
       return JSON.parse(raw);
     } catch {
       return null;
@@ -137985,10 +138113,10 @@ playwright-cli close
   allowedTools: ["Bash(playwright-cli:*)"]
 };
 // packages/skills-loader-core/src/features/builtin-skills/skill-file-loader.ts
-import { readFileSync as readFileSync48 } from "fs";
+import { readFileSync as readFileSync49 } from "fs";
 import { join as join63 } from "path";
 init_src();
-function createSharedSkillTemplateLoader(readFile3 = readFileSync48, skillsRootPath = sharedSkillsRootPath()) {
+function createSharedSkillTemplateLoader(readFile3 = readFileSync49, skillsRootPath = sharedSkillsRootPath()) {
   const cache = new Map;
   return (skillName) => {
     const cached2 = cache.get(skillName);
@@ -140348,7 +140476,7 @@ import {
   existsSync as existsSync65,
   mkdirSync as mkdirSync20,
   copyFileSync as copyFileSync3,
-  readFileSync as readFileSync49,
+  readFileSync as readFileSync50,
   writeFileSync as writeFileSync18,
   readdirSync as readdirSync10,
   statSync as statSync8,
@@ -140365,7 +140493,7 @@ async function snapshotCli(options = {}) {
     const realFs = {
       existsSync: existsSync65,
       mkdirSync: mkdirSync20,
-      readFileSync: readFileSync49,
+      readFileSync: readFileSync50,
       writeFileSync: writeFileSync18,
       copyFileSync: copyFileSync3,
       readdirSync: readdirSync10,
@@ -140431,7 +140559,7 @@ import {
   existsSync as existsSync66,
   mkdirSync as mkdirSync21,
   copyFileSync as copyFileSync4,
-  readFileSync as readFileSync50,
+  readFileSync as readFileSync51,
   writeFileSync as writeFileSync19,
   readdirSync as readdirSync11,
   statSync as statSync9,
@@ -140444,7 +140572,7 @@ async function restoreCli(options) {
   const realFs = {
     existsSync: existsSync66,
     mkdirSync: mkdirSync21,
-    readFileSync: readFileSync50,
+    readFileSync: readFileSync51,
     writeFileSync: writeFileSync19,
     copyFileSync: copyFileSync4,
     readdirSync: readdirSync11,
@@ -140459,7 +140587,7 @@ async function restoreCli(options) {
   try {
     restoreSnapshot(options.state, { snapshotDir, fs: realFs });
     const manifestPath = path19.join(snapshotDir, options.state, "manifest.json");
-    const raw = readFileSync50(manifestPath).toString("utf-8");
+    const raw = readFileSync51(manifestPath).toString("utf-8");
     const parsed = JSON.parse(raw);
     const fileCount = typeof parsed === "object" && parsed !== null && "files" in parsed && Array.isArray(parsed.files) ? parsed.files.length : 0;
     if (options.json) {
@@ -140483,7 +140611,7 @@ import {
   existsSync as existsSync67,
   mkdirSync as mkdirSync22,
   copyFileSync as copyFileSync5,
-  readFileSync as readFileSync51,
+  readFileSync as readFileSync52,
   writeFileSync as writeFileSync20,
   readdirSync as readdirSync12,
   statSync as statSync10,
@@ -140506,7 +140634,7 @@ async function snapshotListCli(options) {
   const realFs = {
     existsSync: existsSync67,
     mkdirSync: mkdirSync22,
-    readFileSync: readFileSync51,
+    readFileSync: readFileSync52,
     writeFileSync: writeFileSync20,
     copyFileSync: copyFileSync5,
     readdirSync: readdirSync12,
@@ -140537,7 +140665,7 @@ import {
   existsSync as existsSync68,
   mkdirSync as mkdirSync23,
   copyFileSync as copyFileSync6,
-  readFileSync as readFileSync52,
+  readFileSync as readFileSync53,
   writeFileSync as writeFileSync21,
   readdirSync as readdirSync13,
   statSync as statSync11,
@@ -140550,7 +140678,7 @@ async function snapshotPruneCli(options = {}) {
   const realFs = {
     existsSync: existsSync68,
     mkdirSync: mkdirSync23,
-    readFileSync: readFileSync52,
+    readFileSync: readFileSync53,
     writeFileSync: writeFileSync21,
     copyFileSync: copyFileSync6,
     readdirSync: readdirSync13,
@@ -142280,6 +142408,20 @@ program2.command("export [name]").description("Export a mini-OS profile as a sta
   process.exit(result.exitCode);
 });
 program2.addCommand(createMcpOAuthCommand());
+var gateway = program2.command("gateway").description("Gateway configuration \u2014 bot token management");
+gateway.command("set-token <type>").description("Securely write a bot token to .klc-gateway.env (chmod 600). Valid types: telegram, discord").option("-t, --token <value>", "Token value (non-interactive)").option("-i, --interactive", "Prompt for token with masked input").addHelpText("after", `
+Examples:
+  $ matrixos gateway set-token telegram --token "123:ABC"
+  $ matrixos gateway set-token discord -i
+`).action(async (type2, options) => {
+  const { executeGatewaySetTokenCommand: executeGatewaySetTokenCommand2 } = await Promise.resolve().then(() => (init_gateway_set_token(), exports_gateway_set_token));
+  const result = await executeGatewaySetTokenCommand2({
+    positional: [type2],
+    options: { type: type2, token: options.token, interactive: options.interactive ?? false }
+  });
+  process.stdout.write(result.stdout);
+  process.exit(result.exitCode);
+});
 function runCli() {
   program2.parse();
 }