@kl-c/matrixos 0.1.22 → 0.1.24

package/dist/cli-node/index.js

@@ -2145,7 +2145,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.1.22",
+    version: "0.1.24",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -67078,6 +67078,48 @@ var require_src = __commonJS((exports, module2) => {
   module2.exports = { cursor, scroll, erase, beep };
 });
 
+// packages/omo-opencode/src/cli/config-manager/write-gateway-env.ts
+import { existsSync as existsSync26, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync6, chmodSync as chmodSync3 } from "fs";
+import { join as join26 } from "path";
+function writeGatewayEnvToken(key, token) {
+  const configDir = getConfigDir();
+  if (!existsSync26(configDir))
+    mkdirSync9(configDir, { recursive: true });
+  const envPath = join26(configDir, GATEWAY_ENV_FILENAME);
+  const entries = new Map;
+  if (existsSync26(envPath)) {
+    const existing = readFileSync15(envPath, "utf-8");
+    for (const rawLine of existing.split(`
+`)) {
+      const line = rawLine.trim();
+      if (line.length === 0 || line.startsWith("#"))
+        continue;
+      const withoutExport = line.replace(/^(export\s+)/i, "");
+      const eqIndex = withoutExport.indexOf("=");
+      if (eqIndex === -1)
+        continue;
+      const k = withoutExport.slice(0, eqIndex).trim();
+      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(k))
+        continue;
+      entries.set(k, withoutExport.slice(eqIndex + 1).trim());
+    }
+  }
+  entries.set(key, token);
+  const next = [...entries.entries()].map(([k, v]) => `${k}=${v}`).join(`
+`) + `
+`;
+  writeFileSync6(envPath, next, { mode: 384 });
+  chmodSync3(envPath, 384);
+  return envPath;
+}
+function writeGatewayEnv(token) {
+  return writeGatewayEnvToken("TELEGRAM_BOT_TOKEN", token);
+}
+var GATEWAY_ENV_FILENAME = ".klc-gateway.env";
+var init_write_gateway_env = __esm(() => {
+  init_config_context();
+});
+
 // node_modules/.bun/zod@4.4.3/node_modules/zod/v4/core/core.js
 function $constructor(name2, initializer, params) {
   function init(inst, def) {
@@ -107576,7 +107618,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   var LDD_PATH = "/usr/bin/ldd";
   var SELF_PATH = "/proc/self/exe";
   var MAX_LENGTH = 2048;
-  var readFileSync44 = (path18) => {
+  var readFileSync45 = (path18) => {
     const fd = fs17.openSync(path18, "r");
     const buffer = Buffer.alloc(MAX_LENGTH);
     const bytesRead = fs17.readSync(fd, buffer, 0, MAX_LENGTH, 0);
@@ -107599,7 +107641,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   module2.exports = {
     LDD_PATH,
     SELF_PATH,
-    readFileSync: readFileSync44,
+    readFileSync: readFileSync45,
     readFile
   };
 });
@@ -107642,7 +107684,7 @@ var require_elf = __commonJS((exports2, module2) => {
 var require_detect_libc = __commonJS((exports2, module2) => {
   var childProcess = __require("child_process");
   var { isLinux, getReport } = require_process();
-  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync44 } = require_filesystem();
+  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync45 } = require_filesystem();
   var { interpreterPath } = require_elf();
   var cachedFamilyInterpreter;
   var cachedFamilyFilesystem;
@@ -107733,7 +107775,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyFilesystem = null;
     try {
-      const lddContent = readFileSync44(LDD_PATH);
+      const lddContent = readFileSync45(LDD_PATH);
       cachedFamilyFilesystem = getFamilyFromLddContent(lddContent);
     } catch (e) {}
     return cachedFamilyFilesystem;
@@ -107756,7 +107798,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyInterpreter = null;
     try {
-      const selfContent = readFileSync44(SELF_PATH);
+      const selfContent = readFileSync45(SELF_PATH);
       const path18 = interpreterPath(selfContent);
       cachedFamilyInterpreter = familyFromInterpreterPath(path18);
     } catch (e) {}
@@ -107818,7 +107860,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedVersionFilesystem = null;
     try {
-      const lddContent = readFileSync44(LDD_PATH);
+      const lddContent = readFileSync45(LDD_PATH);
       const versionMatch = lddContent.match(RE_GLIBC_VERSION);
       if (versionMatch) {
         cachedVersionFilesystem = versionMatch[1];
@@ -117634,19 +117676,19 @@ __export(exports_generate, {
   executeGenerateCommand: () => executeGenerateCommand,
   ProfileNotFoundError: () => ProfileNotFoundError
 });
-import { existsSync as existsSync70, readFileSync as readFileSync54, realpathSync as realpathSync10 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute6, join as join75, resolve as resolve16 } from "path";
+import { existsSync as existsSync70, readFileSync as readFileSync56, realpathSync as realpathSync10 } from "fs";
+import { dirname as dirname28, isAbsolute as isAbsolute6, join as join76, resolve as resolve16 } from "path";
 function profilesDirFor(opts) {
   if (opts.profilesDir)
     return opts.profilesDir;
   if (opts.cwd)
-    return join75(opts.cwd, PROFILES_RELATIVE);
-  return join75(REPO_ROOT, PROFILES_RELATIVE);
+    return join76(opts.cwd, PROFILES_RELATIVE);
+  return join76(REPO_ROOT, PROFILES_RELATIVE);
 }
 function loadProfile(name2, options = {}) {
   const fs21 = options.fs ?? defaultFS2;
   const dir = profilesDirFor(options);
-  const path27 = join75(dir, `${name2}.json`);
+  const path27 = join76(dir, `${name2}.json`);
   if (!fs21.existsSync(path27)) {
     throw new ProfileNotFoundError(name2);
   }
@@ -117659,7 +117701,7 @@ function listProfiles(options = {}) {
   const known = options.knownNames ?? ["trader", "plumber"];
   const out = [];
   for (const name2 of known) {
-    const path27 = join75(dir, `${name2}.json`);
+    const path27 = join76(dir, `${name2}.json`);
     if (fs21.existsSync(path27)) {
       try {
         const raw = JSON.parse(fs21.readFileSync(path27, "utf-8"));
@@ -117732,7 +117774,7 @@ var init_generate = __esm(() => {
   init_src4();
   init_src4();
   REPO_ROOT = resolve16(dirname28(new URL(import.meta.url).pathname), "..", "..", "..", "..", "..");
-  defaultFS2 = { existsSync: existsSync70, readFileSync: readFileSync54, realpathSync: realpathSync10 };
+  defaultFS2 = { existsSync: existsSync70, readFileSync: readFileSync56, realpathSync: realpathSync10 };
   ProfileNotFoundError = class ProfileNotFoundError extends Error {
     profileName;
     constructor(profileName) {
@@ -117884,8 +117926,8 @@ var exports_profile_resolve = {};
 __export(exports_profile_resolve, {
   executeProfileResolveCommand: () => executeProfileResolveCommand
 });
-import { existsSync as existsSync72, readdirSync as readdirSync15, readFileSync as readFileSync55 } from "fs";
-import { join as join77, resolve as resolve17, dirname as dirname29 } from "path";
+import { existsSync as existsSync72, readdirSync as readdirSync15, readFileSync as readFileSync57 } from "fs";
+import { join as join78, resolve as resolve17, dirname as dirname29 } from "path";
 function executeProfileResolveCommand(args) {
   if (args.options.help) {
     return {
@@ -117910,7 +117952,7 @@ function executeProfileResolveCommand(args) {
 ` };
   }
   const name2 = nameRaw.endsWith(".json") ? nameRaw.slice(0, -5) : nameRaw;
-  const profilesDir = join77(REPO_ROOT2, PROFILES_RELATIVE2);
+  const profilesDir = join78(REPO_ROOT2, PROFILES_RELATIVE2);
   if (!existsSync72(profilesDir)) {
     return { exitCode: 1, stdout: `error: profiles directory not found at ${profilesDir}
 ` };
@@ -117930,8 +117972,8 @@ function executeProfileResolveCommand(args) {
   const registry2 = {};
   for (const file3 of profileFiles) {
     try {
-      const filePath = join77(profilesDir, file3);
-      const raw = JSON.parse(readFileSync55(filePath, "utf-8"));
+      const filePath = join78(profilesDir, file3);
+      const raw = JSON.parse(readFileSync57(filePath, "utf-8"));
       const profile2 = ProfileSchema.parse(raw);
       registry2[profile2.name] = profile2;
     } catch {}
@@ -117993,8 +118035,8 @@ __export(exports_export, {
   getShell: () => getShell,
   executeExportCommand: () => executeExportCommand
 });
-import { existsSync as existsSync73, readFileSync as readFileSync56, writeFileSync as writeFileSync25, copyFileSync as copyFileSync7, realpathSync as realpathSync11, mkdirSync as mkdirSync26 } from "fs";
-import { isAbsolute as isAbsolute7, join as join78, resolve as resolve18, dirname as dirname30 } from "path";
+import { existsSync as existsSync73, readFileSync as readFileSync58, writeFileSync as writeFileSync25, copyFileSync as copyFileSync7, realpathSync as realpathSync11, mkdirSync as mkdirSync26 } from "fs";
+import { isAbsolute as isAbsolute7, join as join79, resolve as resolve18, dirname as dirname30 } from "path";
 import { spawnSync as spawnSync3 } from "child_process";
 function setShell(shell) {
   activeShell = shell;
@@ -118035,7 +118077,7 @@ function executeExportCommand(args) {
     return { exitCode: 1, stdout: `error: generate failed: ${message}
 ` };
   }
-  const pkgPath = join78(absoluteTargetDir, "package.json");
+  const pkgPath = join79(absoluteTargetDir, "package.json");
   let pkg;
   try {
     pkg = JSON.parse(fs21.readFileSync(pkgPath, "utf-8"));
@@ -118075,7 +118117,7 @@ ${packResult.stdout}
     return { exitCode: 1, stdout: `error: npm pack produced no tarball name in output
 ` };
   }
-  let tgzPath = join78(absoluteTargetDir, tgzName);
+  let tgzPath = join79(absoluteTargetDir, tgzName);
   if (args.options.output) {
     const outputPath = args.options.output;
     const absoluteOutput = isAbsolute7(outputPath) ? outputPath : resolve18(process.cwd(), outputPath);
@@ -118117,7 +118159,7 @@ var init_export = __esm(() => {
   activeShell = defaultShell;
   defaultExportFS = {
     existsSync: existsSync73,
-    readFileSync: readFileSync56,
+    readFileSync: readFileSync58,
     writeFileSync: writeFileSync25,
     copyFileSync: copyFileSync7,
     realpathSync: realpathSync11,
@@ -118125,6 +118167,107 @@ var init_export = __esm(() => {
   };
 });
 
+// packages/omo-opencode/src/cli/gateway-set-token.ts
+var exports_gateway_set_token = {};
+__export(exports_gateway_set_token, {
+  executeGatewaySetTokenCommand: () => executeGatewaySetTokenCommand
+});
+function isValidType(type2) {
+  return VALID_TYPES.includes(type2);
+}
+async function readMaskedToken(prompt) {
+  return new Promise((resolve19, reject) => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+      reject(new Error("Interactive mode requires a TTY. Use --token <value> instead."));
+      return;
+    }
+    process.stdout.write(prompt);
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding("utf8");
+    let token = "";
+    const onData = (data) => {
+      const chunk = typeof data === "string" ? data : data.toString("utf8");
+      for (const char of chunk) {
+        const code = char.charCodeAt(0);
+        if (code === 13 || code === 10) {
+          process.stdout.write(`
+`);
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.off("data", onData);
+          resolve19(token);
+          return;
+        }
+        if (code === 127 || code === 8) {
+          if (token.length > 0) {
+            token = token.slice(0, -1);
+            process.stdout.write("\b \b");
+          }
+          continue;
+        }
+        if (code === 3) {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.off("data", onData);
+          process.stdout.write(`
+`);
+          reject(new Error("Cancelled."));
+          return;
+        }
+        if (code >= 32) {
+          token += char;
+        }
+      }
+    };
+    process.stdin.on("data", onData);
+  });
+}
+async function executeGatewaySetTokenCommand(args) {
+  const type2 = args.options.type;
+  if (!isValidType(type2)) {
+    return {
+      exitCode: 1,
+      stdout: `error: invalid type "${type2}". Valid types: ${VALID_TYPES.join(", ")}
+`
+    };
+  }
+  let token;
+  if (args.options.interactive || !args.options.token) {
+    try {
+      token = await readMaskedToken(`Token ${type2} bot: `);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return { exitCode: 1, stdout: `error: ${message}
+` };
+    }
+  } else {
+    token = args.options.token;
+  }
+  if (!token || token.length === 0) {
+    return { exitCode: 1, stdout: `error: token is required
+` };
+  }
+  try {
+    const envPath = writeGatewayEnvToken(TYPE_TO_KEY[type2], token);
+    return { exitCode: 0, stdout: `${envPath}
+` };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { exitCode: 1, stdout: `error: ${message}
+` };
+  }
+}
+var VALID_TYPES, TYPE_TO_KEY;
+var init_gateway_set_token = __esm(() => {
+  init_write_gateway_env();
+  VALID_TYPES = ["telegram", "discord"];
+  TYPE_TO_KEY = {
+    telegram: "TELEGRAM_BOT_TOKEN",
+    discord: "DISCORD_BOT_TOKEN"
+  };
+});
+
 // packages/omo-opencode/src/cli/rgpd-command.ts
 var exports_rgpd_command = {};
 __export(exports_rgpd_command, {
@@ -120724,24 +120867,9 @@ var i2 = `${styleText2("gray", S_BAR)}  `;
 // packages/omo-opencode/src/cli/tui-installer.ts
 init_shared();
 init_config_manager();
+init_write_gateway_env();
 var import_picocolors4 = __toESM(require_picocolors(), 1);
 
-// packages/omo-opencode/src/cli/config-manager/write-gateway-env.ts
-init_config_context();
-import { existsSync as existsSync26, mkdirSync as mkdirSync9, writeFileSync as writeFileSync6, chmodSync as chmodSync3 } from "fs";
-import { join as join26 } from "path";
-var GATEWAY_ENV_FILENAME = ".klc-gateway.env";
-function writeGatewayEnv(token) {
-  const configDir = getConfigDir();
-  if (!existsSync26(configDir))
-    mkdirSync9(configDir, { recursive: true });
-  const envPath = join26(configDir, GATEWAY_ENV_FILENAME);
-  writeFileSync6(envPath, `TELEGRAM_BOT_TOKEN=${token}
-`, { mode: 384 });
-  chmodSync3(envPath, 384);
-  return envPath;
-}
-
 // packages/omo-opencode/src/cli/tui-install-prompts.ts
 init_model_fallback();
 
@@ -122143,6 +122271,13 @@ init_zod();
 var CronConfigSchema = exports_external.object({
   enabled: exports_external.boolean().default(true)
 }).strict();
+// packages/omo-opencode/src/config/schema/dashboard.ts
+init_zod();
+var DashboardConfigSchema = exports_external.object({
+  enabled: exports_external.boolean().optional(),
+  port: exports_external.number().int().min(1).max(65535).optional(),
+  gateway_passphrase: exports_external.string().optional()
+});
 // packages/omo-opencode/src/config/schema/default-mode.ts
 init_zod();
 var DefaultModeConfigSchema = exports_external.object({
@@ -122650,6 +122785,7 @@ var OhMyOpenCodeConfigSchema = exports_external.object({
   morpheus: MorpheusConfigSchema.optional(),
   start_work: StartWorkConfigSchema.optional(),
   gateway: GatewayConfigSectionSchema,
+  dashboard: DashboardConfigSchema.optional(),
   watchdog: WatchdogConfigSchema.optional(),
   egress: EgressConfigSectionSchema,
   cron: CronConfigSchema.optional(),
@@ -123529,7 +123665,7 @@ var BOULDER_STATE_PATH = `${BOULDER_DIR}/${BOULDER_FILE}`;
 var NOTEPAD_DIR = "notepads";
 var NOTEPAD_BASE_PATH = `${BOULDER_DIR}/${NOTEPAD_DIR}`;
 // packages/boulder-state/src/top-level-task.ts
-import { existsSync as existsSync30, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync30, readFileSync as readFileSync17 } from "fs";
 var TODO_HEADING_PATTERN = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN = /^##\s+/;
@@ -123556,7 +123692,7 @@ function readCurrentTopLevelTask(planPath) {
     return null;
   }
   try {
-    const content = readFileSync16(planPath, "utf-8");
+    const content = readFileSync17(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     let section = "other";
     for (const line of lines) {
@@ -123608,7 +123744,7 @@ function resolveBoulderPlanPathForWork(directory, work) {
   return resolveBoulderPlanPath(directory, work);
 }
 // packages/boulder-state/src/storage/plan-progress.ts
-import { existsSync as existsSync32, readFileSync as readFileSync17, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
+import { existsSync as existsSync32, readFileSync as readFileSync18, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
 var TODO_HEADING_PATTERN2 = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN2 = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN2 = /^##\s+/;
@@ -123621,7 +123757,7 @@ function getPlanProgress(planPath) {
     return { total: 0, completed: 0, isComplete: false };
   }
   try {
-    const content = readFileSync17(planPath, "utf-8");
+    const content = readFileSync18(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     const hasStructuredSections = lines.some((line) => TODO_HEADING_PATTERN2.test(line) || FINAL_VERIFICATION_HEADING_PATTERN2.test(line));
     if (hasStructuredSections) {
@@ -123737,14 +123873,14 @@ function selectMirrorWork(state) {
   return sorted[0] ?? null;
 }
 // packages/boulder-state/src/storage/read-state.ts
-import { existsSync as existsSync33, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync33, readFileSync as readFileSync19 } from "fs";
 function readBoulderState(directory) {
   const filePath = getBoulderFilePath(directory);
   if (!existsSync33(filePath)) {
     return null;
   }
   try {
-    const content = readFileSync18(filePath, "utf-8");
+    const content = readFileSync19(filePath, "utf-8");
     const parsed = JSON.parse(content);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return null;
@@ -123810,7 +123946,7 @@ init_state();
 // packages/omo-opencode/src/features/run-continuation-state/constants.ts
 var CONTINUATION_MARKER_DIR = ".omo/run-continuation";
 // packages/omo-opencode/src/features/run-continuation-state/storage.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync11, readFileSync as readFileSync19, rmSync as rmSync2, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync11, readFileSync as readFileSync20, rmSync as rmSync2, writeFileSync as writeFileSync8 } from "fs";
 import { join as join30 } from "path";
 function getMarkerPath(directory, sessionID) {
   return join30(directory, CONTINUATION_MARKER_DIR, `${sessionID}.json`);
@@ -123820,7 +123956,7 @@ function readContinuationMarker(directory, sessionID) {
   if (!existsSync34(markerPath))
     return null;
   try {
-    const raw = readFileSync19(markerPath, "utf-8");
+    const raw = readFileSync20(markerPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
       return null;
@@ -123885,7 +124021,7 @@ async function isSessionInBoulderLineage(input) {
 // packages/omo-opencode/src/hooks/the-operator/session-last-agent.ts
 init_shared();
 init_compaction_marker();
-import { readFileSync as readFileSync20, readdirSync as readdirSync5 } from "fs";
+import { readFileSync as readFileSync21, readdirSync as readdirSync5 } from "fs";
 import { join as join31 } from "path";
 var defaultSessionLastAgentDeps = {
   getMessageDir,
@@ -123946,7 +124082,7 @@ async function getLastAgentFromSession(sessionID, client3, deps = {}) {
   try {
     const messages = readdirSync5(messageDir).filter((fileName) => fileName.endsWith(".json")).map((fileName) => {
       try {
-        const content = readFileSync20(join31(messageDir, fileName), "utf-8");
+        const content = readFileSync21(join31(messageDir, fileName), "utf-8");
         const parsed = JSON.parse(content);
         return {
           fileName,
@@ -123989,7 +124125,7 @@ init_agent_display_names();
 
 // packages/omo-opencode/src/hooks/ralph-loop/storage.ts
 init_frontmatter2();
-import { existsSync as existsSync35, readFileSync as readFileSync21, writeFileSync as writeFileSync9, unlinkSync as unlinkSync5, mkdirSync as mkdirSync12 } from "fs";
+import { existsSync as existsSync35, readFileSync as readFileSync22, writeFileSync as writeFileSync9, unlinkSync as unlinkSync5, mkdirSync as mkdirSync12 } from "fs";
 import { dirname as dirname12, join as join32 } from "path";
 
 // packages/omo-opencode/src/hooks/ralph-loop/constants.ts
@@ -124007,7 +124143,7 @@ function readState(directory, customPath) {
     return null;
   }
   try {
-    const content = readFileSync21(filePath, "utf-8");
+    const content = readFileSync22(filePath, "utf-8");
     const { data, body } = parseFrontmatter(content);
     const active = data.active;
     const iteration = data.iteration;
@@ -124582,7 +124718,7 @@ function createTimestampedStdoutController(stdout2 = process.stdout) {
 // packages/telemetry-core/src/activity-state.ts
 init_atomic_write();
 init_xdg_data_dir();
-import { existsSync as existsSync36, mkdirSync as mkdirSync13, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync13, readFileSync as readFileSync23 } from "fs";
 import { basename as basename6, join as join33 } from "path";
 var POSTHOG_ACTIVITY_STATE_FILE = "posthog-activity.json";
 function resolveTelemetryStateDir(product, options = {}) {
@@ -124626,7 +124762,7 @@ function readPostHogActivityState(stateDir, diagnostics) {
     return {};
   }
   try {
-    const stateContent = readFileSync22(stateFilePath, "utf-8");
+    const stateContent = readFileSync23(stateFilePath, "utf-8");
     const stateJson = JSON.parse(stateContent);
     if (!isPostHogActivityState(stateJson)) {
       return {};
@@ -131745,7 +131881,7 @@ async function getLocalVersion(options = {}) {
   }
 }
 // packages/omo-opencode/src/cli/doctor/checks/system.ts
-import { existsSync as existsSync47, readFileSync as readFileSync32 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync33 } from "fs";
 
 // packages/omo-opencode/src/cli/doctor/checks/system-binary.ts
 init_extract_semver();
@@ -131941,7 +132077,7 @@ function compareVersions3(current, minimum) {
 
 // packages/omo-opencode/src/cli/doctor/checks/system-plugin.ts
 init_shared();
-import { existsSync as existsSync45, readFileSync as readFileSync30 } from "fs";
+import { existsSync as existsSync45, readFileSync as readFileSync31 } from "fs";
 function detectConfigPath() {
   const paths2 = getOpenCodeConfigPaths({ binary: "opencode", version: null });
   if (existsSync45(paths2.configJsonc))
@@ -131992,7 +132128,7 @@ function getPluginInfo() {
     };
   }
   try {
-    const content = readFileSync30(configPath, "utf-8");
+    const content = readFileSync31(configPath, "utf-8");
     const parsedConfig = parseJsonc(content);
     const pluginEntry = findPluginEntry2(parsedConfig.plugin ?? []);
     if (!pluginEntry) {
@@ -132034,7 +132170,7 @@ init_file_utils2();
 init_checker();
 init_auto_update_checker();
 init_package_json_locator();
-import { existsSync as existsSync46, readFileSync as readFileSync31, readdirSync as readdirSync7 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync32, readdirSync as readdirSync7 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { homedir as homedir11 } from "os";
 import { join as join41 } from "path";
@@ -132066,7 +132202,7 @@ function readPackageJson(filePath) {
   if (!existsSync46(filePath))
     return null;
   try {
-    const content = readFileSync31(filePath, "utf-8");
+    const content = readFileSync32(filePath, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -132200,7 +132336,7 @@ var defaultDeps6 = {
   getLatestPluginVersion,
   getSuggestedInstallTag,
   configExists: existsSync47,
-  readConfigFile: (path14) => readFileSync32(path14, "utf-8"),
+  readConfigFile: (path14) => readFileSync33(path14, "utf-8"),
   parseConfigContent: (content) => parseJsonc(content)
 };
 var BUN_POSTINSTALL_HELPER_PACKAGE_NAME = "@code-yeongyu/comment-checker";
@@ -132345,7 +132481,7 @@ async function checkSystem(deps = defaultDeps6) {
 
 // packages/omo-opencode/src/config/validate.ts
 init_src();
-import { readFileSync as readFileSync33 } from "fs";
+import { readFileSync as readFileSync34 } from "fs";
 import { homedir as homedir12 } from "os";
 import { dirname as dirname18, relative as relative5 } from "path";
 init_shared();
@@ -132390,7 +132526,7 @@ function schemaMessages(configPath, rawConfig) {
 }
 function parseLayerConfig(configPath) {
   try {
-    const content = readFileSync33(configPath, "utf-8");
+    const content = readFileSync34(configPath, "utf-8");
     const rawConfig = parseJsonc(content);
     if (!isPlainRecord(rawConfig)) {
       return {
@@ -132459,7 +132595,7 @@ function validatePluginConfig(directory) {
 
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-cache.ts
 init_shared();
-import { existsSync as existsSync48, readFileSync as readFileSync34 } from "fs";
+import { existsSync as existsSync48, readFileSync as readFileSync35 } from "fs";
 import { homedir as homedir13 } from "os";
 import { join as join42 } from "path";
 function getUserConfigDir2() {
@@ -132478,7 +132614,7 @@ function loadCustomProviderNames() {
     if (!existsSync48(configPath))
       continue;
     try {
-      const content = readFileSync34(configPath, "utf-8");
+      const content = readFileSync35(configPath, "utf-8");
       const data = parseJsonc(content);
       if (data?.provider && typeof data.provider === "object") {
         return Object.keys(data.provider);
@@ -132502,7 +132638,7 @@ function loadAvailableModelsFromCache() {
     return { providers: [], modelCount: 0, cacheExists: false };
   }
   try {
-    const content = readFileSync34(cacheFile, "utf-8");
+    const content = readFileSync35(cacheFile, "utf-8");
     const data = parseJsonc(content);
     const cacheProviders = Object.keys(data);
     let modelCount = 0;
@@ -132529,7 +132665,7 @@ init_model_capabilities2();
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-config.ts
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync35 } from "fs";
+import { readFileSync as readFileSync36 } from "fs";
 import { join as join43 } from "path";
 var PROJECT_CONFIG_DIR = join43(process.cwd(), ".opencode");
 function loadOmoConfig() {
@@ -132539,7 +132675,7 @@ function loadOmoConfig() {
   });
   if (projectDetected.format !== "none") {
     try {
-      const content = readFileSync35(projectDetected.path, "utf-8");
+      const content = readFileSync36(projectDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -132555,7 +132691,7 @@ function loadOmoConfig() {
   });
   if (userDetected.format !== "none") {
     try {
-      const content = readFileSync35(userDetected.path, "utf-8");
+      const content = readFileSync36(userDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -133136,13 +133272,13 @@ async function getGhCliInfo(dependencies = {}) {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-lsp.ts
-import { readFileSync as readFileSync37 } from "fs";
+import { readFileSync as readFileSync38 } from "fs";
 import { join as join47 } from "path";
 
 // packages/omo-opencode/src/mcp/lsp.ts
 init_zod();
 init_opencode_config_dir();
-import { existsSync as existsSync50, readFileSync as readFileSync36 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync37 } from "fs";
 import { delimiter as delimiter3, dirname as dirname20, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 
@@ -133286,7 +133422,7 @@ function findBootstrapRoot(candidates, pathExists) {
 }
 function readDaemonPackageVersion(root) {
   try {
-    const packageJson = JSON.parse(readFileSync36(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
+    const packageJson = JSON.parse(readFileSync37(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
     return DaemonPackageSchema.parse(packageJson).version;
   } catch (error51) {
     if (!(error51 instanceof Error))
@@ -133363,7 +133499,7 @@ function readOmoConfig(configDirectory) {
     return null;
   }
   try {
-    const content = readFileSync37(detected.path, "utf-8");
+    const content = readFileSync38(detected.path, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -133393,7 +133529,7 @@ function getInstalledLspServers(options = {}) {
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-mcp.ts
 init_shared();
-import { existsSync as existsSync51, readFileSync as readFileSync38 } from "fs";
+import { existsSync as existsSync51, readFileSync as readFileSync39 } from "fs";
 import { homedir as homedir16 } from "os";
 import { join as join48 } from "path";
 var BUILTIN_MCP_SERVERS = ["websearch", "context7", "grep_app", "lsp"];
@@ -133410,7 +133546,7 @@ function loadUserMcpConfig() {
     if (!existsSync51(configPath))
       continue;
     try {
-      const content = readFileSync38(configPath, "utf-8");
+      const content = readFileSync39(configPath, "utf-8");
       const config4 = parseJsonc(content);
       if (config4.mcpServers) {
         Object.assign(servers, config4.mcpServers);
@@ -133544,7 +133680,7 @@ async function checkTools() {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/telemetry.ts
-import { existsSync as existsSync52, readFileSync as readFileSync39 } from "fs";
+import { existsSync as existsSync52, readFileSync as readFileSync40 } from "fs";
 function isTelemetryState(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -133554,7 +133690,7 @@ function readLastActiveDay(stateFilePath) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync39(stateFilePath, "utf-8"));
+    parsed = JSON.parse(readFileSync40(stateFilePath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return "unreadable";
@@ -133629,7 +133765,7 @@ function expandHomeDirectory(directoryPath) {
 // packages/omo-opencode/src/cli/doctor/checks/team-mode.ts
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync40, promises as fs14 } from "fs";
+import { readFileSync as readFileSync41, promises as fs14 } from "fs";
 import path15 from "path";
 async function checkTeamMode() {
   const config4 = loadTeamModeConfig();
@@ -133666,7 +133802,7 @@ function loadTeamModeConfig() {
   if (!configPath)
     return { team_mode: undefined };
   try {
-    return parseJsonc(readFileSync40(configPath, "utf-8"));
+    return parseJsonc(readFileSync41(configPath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return { team_mode: undefined };
@@ -134098,7 +134234,7 @@ import {
   existsSync as existsSync55,
   mkdirSync as mkdirSync15,
   readdirSync as readdirSync8,
-  readFileSync as readFileSync42,
+  readFileSync as readFileSync43,
   renameSync as renameSync7,
   unlinkSync as unlinkSync8,
   writeFileSync as writeFileSync13
@@ -134131,7 +134267,7 @@ function getOpenCodeCliConfigDir(env2 = process.env) {
 }
 
 // packages/mcp-client-core/src/mcp-oauth/storage-index.ts
-import { chmodSync as chmodSync4, existsSync as existsSync54, readFileSync as readFileSync41, renameSync as renameSync6, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync as chmodSync4, existsSync as existsSync54, readFileSync as readFileSync42, renameSync as renameSync6, writeFileSync as writeFileSync12 } from "fs";
 import { join as join50 } from "path";
 var INDEX_FILE_NAME = "index.json";
 function isTokenIndex(value) {
@@ -134147,7 +134283,7 @@ function readTokenIndex(storageDir) {
   if (!existsSync54(indexPath))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync41(indexPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync42(indexPath, "utf-8"));
     return isTokenIndex(parsed) ? parsed : {};
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -134257,7 +134393,7 @@ function readTokenFile(filePath) {
   if (!existsSync55(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync42(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync43(filePath, "utf-8"));
     return isOAuthTokenData(parsed) ? parsed : null;
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -134270,7 +134406,7 @@ function readLegacyStore() {
   if (!existsSync55(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync42(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync43(filePath, "utf-8"));
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
       return null;
     const result = {};
@@ -135083,7 +135219,7 @@ function createEmbeddingPort() {
 // packages/learning-loop/src/codebase-scanner.ts
 var import_picomatch = __toESM(require_picomatch2(), 1);
 import { createHash as createHash5 } from "crypto";
-import { readdirSync as readdirSync9, readFileSync as readFileSync44, statSync as statSync7, existsSync as existsSync57 } from "fs";
+import { readdirSync as readdirSync9, readFileSync as readFileSync45, statSync as statSync7, existsSync as existsSync57 } from "fs";
 import { join as join52, relative as relative6, extname as extname3 } from "path";
 var EXT_TO_LANG = {
   ts: "typescript",
@@ -135151,7 +135287,7 @@ function defaultFs() {
       return readdirSync9(path18);
     },
     readFile(path18) {
-      return readFileSync44(path18, "utf-8");
+      return readFileSync45(path18, "utf-8");
     },
     stat(path18) {
       const s = statSync7(path18);
@@ -135504,7 +135640,7 @@ function formatSearchResults(result) {
 }
 
 // packages/learning-loop/src/improvement.ts
-import { existsSync as existsSync58, mkdirSync as mkdirSync17, readFileSync as readFileSync45, writeFileSync as writeFileSync15 } from "fs";
+import { existsSync as existsSync58, mkdirSync as mkdirSync17, readFileSync as readFileSync46, writeFileSync as writeFileSync15 } from "fs";
 import { join as join53, basename as basename10 } from "path";
 function createImprovementStore(improvementsDir) {
   if (!existsSync58(improvementsDir)) {
@@ -135531,7 +135667,7 @@ function createImprovementStore(improvementsDir) {
   function get(id) {
     const filePath = join53(improvementsDir, `${id}.json`);
     try {
-      const raw = readFileSync45(filePath, "utf-8");
+      const raw = readFileSync46(filePath, "utf-8");
       return JSON.parse(raw);
     } catch {
       return null;
@@ -137985,10 +138121,10 @@ playwright-cli close
   allowedTools: ["Bash(playwright-cli:*)"]
 };
 // packages/skills-loader-core/src/features/builtin-skills/skill-file-loader.ts
-import { readFileSync as readFileSync48 } from "fs";
+import { readFileSync as readFileSync49 } from "fs";
 import { join as join63 } from "path";
 init_src();
-function createSharedSkillTemplateLoader(readFile3 = readFileSync48, skillsRootPath = sharedSkillsRootPath()) {
+function createSharedSkillTemplateLoader(readFile3 = readFileSync49, skillsRootPath = sharedSkillsRootPath()) {
   const cache = new Map;
   return (skillName) => {
     const cached2 = cache.get(skillName);
@@ -140348,7 +140484,7 @@ import {
   existsSync as existsSync65,
   mkdirSync as mkdirSync20,
   copyFileSync as copyFileSync3,
-  readFileSync as readFileSync49,
+  readFileSync as readFileSync50,
   writeFileSync as writeFileSync18,
   readdirSync as readdirSync10,
   statSync as statSync8,
@@ -140365,7 +140501,7 @@ async function snapshotCli(options = {}) {
     const realFs = {
       existsSync: existsSync65,
       mkdirSync: mkdirSync20,
-      readFileSync: readFileSync49,
+      readFileSync: readFileSync50,
       writeFileSync: writeFileSync18,
       copyFileSync: copyFileSync3,
       readdirSync: readdirSync10,
@@ -140431,7 +140567,7 @@ import {
   existsSync as existsSync66,
   mkdirSync as mkdirSync21,
   copyFileSync as copyFileSync4,
-  readFileSync as readFileSync50,
+  readFileSync as readFileSync51,
   writeFileSync as writeFileSync19,
   readdirSync as readdirSync11,
   statSync as statSync9,
@@ -140444,7 +140580,7 @@ async function restoreCli(options) {
   const realFs = {
     existsSync: existsSync66,
     mkdirSync: mkdirSync21,
-    readFileSync: readFileSync50,
+    readFileSync: readFileSync51,
     writeFileSync: writeFileSync19,
     copyFileSync: copyFileSync4,
     readdirSync: readdirSync11,
@@ -140459,7 +140595,7 @@ async function restoreCli(options) {
   try {
     restoreSnapshot(options.state, { snapshotDir, fs: realFs });
     const manifestPath = path19.join(snapshotDir, options.state, "manifest.json");
-    const raw = readFileSync50(manifestPath).toString("utf-8");
+    const raw = readFileSync51(manifestPath).toString("utf-8");
     const parsed = JSON.parse(raw);
     const fileCount = typeof parsed === "object" && parsed !== null && "files" in parsed && Array.isArray(parsed.files) ? parsed.files.length : 0;
     if (options.json) {
@@ -140483,7 +140619,7 @@ import {
   existsSync as existsSync67,
   mkdirSync as mkdirSync22,
   copyFileSync as copyFileSync5,
-  readFileSync as readFileSync51,
+  readFileSync as readFileSync52,
   writeFileSync as writeFileSync20,
   readdirSync as readdirSync12,
   statSync as statSync10,
@@ -140506,7 +140642,7 @@ async function snapshotListCli(options) {
   const realFs = {
     existsSync: existsSync67,
     mkdirSync: mkdirSync22,
-    readFileSync: readFileSync51,
+    readFileSync: readFileSync52,
     writeFileSync: writeFileSync20,
     copyFileSync: copyFileSync5,
     readdirSync: readdirSync12,
@@ -140537,7 +140673,7 @@ import {
   existsSync as existsSync68,
   mkdirSync as mkdirSync23,
   copyFileSync as copyFileSync6,
-  readFileSync as readFileSync52,
+  readFileSync as readFileSync53,
   writeFileSync as writeFileSync21,
   readdirSync as readdirSync13,
   statSync as statSync11,
@@ -140550,7 +140686,7 @@ async function snapshotPruneCli(options = {}) {
   const realFs = {
     existsSync: existsSync68,
     mkdirSync: mkdirSync23,
-    readFileSync: readFileSync52,
+    readFileSync: readFileSync53,
     writeFileSync: writeFileSync21,
     copyFileSync: copyFileSync6,
     readdirSync: readdirSync13,
@@ -141071,6 +141207,7 @@ async function traceCli(sessionId, options = {}) {
 
 // packages/omo-opencode/src/cli/dashboard.ts
 import * as path25 from "path";
+import { readFileSync as readFileSync55 } from "fs";
 
 // packages/omo-opencode/src/features/dashboard/data-provider.ts
 import * as os12 from "os";
@@ -141630,6 +141767,7 @@ function createDataProvider(config4) {
 }
 
 // packages/omo-opencode/src/features/dashboard/server.ts
+init_write_gateway_env();
 var MIME = {
   ".html": "text/html; charset=utf-8",
   ".css": "text/css; charset=utf-8",
@@ -141653,8 +141791,8 @@ function createDashboardServer(dataProvider, config4) {
           const path25 = url3.pathname;
           const corsHeaders = {
             "Access-Control-Allow-Origin": "*",
-            "Access-Control-Allow-Methods": "GET, OPTIONS",
-            "Access-Control-Allow-Headers": "Content-Type"
+            "Access-Control-Allow-Methods": "GET, POST, PUT, OPTIONS",
+            "Access-Control-Allow-Headers": "Content-Type, x-passphrase"
           };
           if (req.method === "OPTIONS") {
             return new Response(null, { headers: corsHeaders });
@@ -141726,6 +141864,30 @@ function createDashboardServer(dataProvider, config4) {
                   return Response.json(dataProvider.getMemory(), { headers: jsonHeaders });
                 case "/api/skills":
                   return Response.json(dataProvider.getSkills(), { headers: jsonHeaders });
+                case "/api/gateway/token": {
+                  if (req.method !== "POST") {
+                    return new Response("Method Not Allowed", { status: 405, headers: corsHeaders });
+                  }
+                  const body = await req.json();
+                  const type2 = body.type;
+                  const token = body.token;
+                  const passphrase = body.passphrase;
+                  if (type2 !== "telegram" && type2 !== "discord") {
+                    return Response.json({ error: "Invalid type. Must be 'telegram' or 'discord'" }, { status: 400, headers: jsonHeaders });
+                  }
+                  if (typeof token !== "string" || token.length === 0) {
+                    return Response.json({ error: "Missing or empty token" }, { status: 400, headers: jsonHeaders });
+                  }
+                  if (!config4.gatewayPassphrase) {
+                    return Response.json({ error: "Passphrase not configured" }, { status: 400, headers: jsonHeaders });
+                  }
+                  if (passphrase !== config4.gatewayPassphrase) {
+                    return Response.json({ error: "Invalid passphrase" }, { status: 401, headers: jsonHeaders });
+                  }
+                  const key = type2 === "telegram" ? "TELEGRAM_BOT_TOKEN" : "DISCORD_BOT_TOKEN";
+                  const envPath = writeGatewayEnvToken(key, token);
+                  return Response.json({ ok: true, path: envPath }, { headers: jsonHeaders });
+                }
                 default:
                   return new Response("Not Found", { status: 404, headers: corsHeaders });
               }
@@ -141761,21 +141923,36 @@ function createDashboardServer(dataProvider, config4) {
       server2 = null;
     },
     get port() {
-      return config4.port;
+      return server2?.port ?? config4.port;
     }
   };
 }
 
 // packages/omo-opencode/src/cli/dashboard.ts
+init_config_context();
+init_jsonc_parser2();
+function loadGatewayPassphrase() {
+  try {
+    const configDir = getConfigDir();
+    const configPath = path25.join(configDir, "matrixos.jsonc");
+    const raw = readFileSync55(configPath, "utf-8");
+    const config4 = parseJsonc(raw);
+    const dashboard2 = config4.dashboard;
+    return typeof dashboard2?.gateway_passphrase === "string" ? dashboard2.gateway_passphrase : undefined;
+  } catch {
+    return;
+  }
+}
 async function dashboardCli(options) {
   const port = options.port ?? 9123;
   const host = options.host ?? "0.0.0.0";
   const frontendDir = path25.resolve(import.meta.dir, "../features/dashboard/frontend");
+  const gatewayPassphrase = loadGatewayPassphrase();
   console.log(`[dashboard] starting MaTrixOS dashboard on http://${host}:${port}`);
   console.log(`[dashboard] frontend: ${frontendDir}`);
   try {
     const dataProvider = createDataProvider();
-    const server2 = createDashboardServer(dataProvider, { port, host, frontendDir });
+    const server2 = createDashboardServer(dataProvider, { port, host, frontendDir, gatewayPassphrase });
     server2.start();
     console.log(`[dashboard] ready \u2014 http://${host}:${port}`);
     if (!options.daemon) {
@@ -141802,11 +141979,11 @@ async function dashboardCli(options) {
 }
 
 // packages/omo-opencode/src/cli/architect.ts
-import { join as join73 } from "path";
+import { join as join74 } from "path";
 var IMPROVEMENTS_DIR = ".matrixos/improvements";
 function getStore(directory) {
   const baseDir = directory ?? process.cwd();
-  return createImprovementStore(join73(baseDir, IMPROVEMENTS_DIR));
+  return createImprovementStore(join74(baseDir, IMPROVEMENTS_DIR));
 }
 async function architectReview(options) {
   const store4 = getStore(options.directory);
@@ -142280,6 +142457,20 @@ program2.command("export [name]").description("Export a mini-OS profile as a sta
   process.exit(result.exitCode);
 });
 program2.addCommand(createMcpOAuthCommand());
+var gateway = program2.command("gateway").description("Gateway configuration \u2014 bot token management");
+gateway.command("set-token <type>").description("Securely write a bot token to .klc-gateway.env (chmod 600). Valid types: telegram, discord").option("-t, --token <value>", "Token value (non-interactive)").option("-i, --interactive", "Prompt for token with masked input").addHelpText("after", `
+Examples:
+  $ matrixos gateway set-token telegram --token "123:ABC"
+  $ matrixos gateway set-token discord -i
+`).action(async (type2, options) => {
+  const { executeGatewaySetTokenCommand: executeGatewaySetTokenCommand2 } = await Promise.resolve().then(() => (init_gateway_set_token(), exports_gateway_set_token));
+  const result = await executeGatewaySetTokenCommand2({
+    positional: [type2],
+    options: { type: type2, token: options.token, interactive: options.interactive ?? false }
+  });
+  process.stdout.write(result.stdout);
+  process.exit(result.exitCode);
+});
 function runCli() {
   program2.parse();
 }