@mulmobridge/telegram 0.1.3 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -0
- package/package.json +4 -4
package/README.md
CHANGED
|
@@ -32,6 +32,24 @@ yarn telegram
|
|
|
32
32
|
| `MULMOCLAUDE_AUTH_TOKEN` | No | Bearer token override | reads from file |
|
|
33
33
|
| `TELEGRAM_POLL_TIMEOUT_SEC` | No | Long-poll timeout | `25` |
|
|
34
34
|
|
|
35
|
+
### Auth token persistence across server restarts
|
|
36
|
+
|
|
37
|
+
The MulmoClaude server regenerates a fresh bearer token on every startup and writes it to `~/mulmoclaude/.session-token`. The bridge reads that file once at launch and keeps the token in memory — so if the server restarts while the bridge is running, the bridge keeps using the **old** token and every API call returns **401**, silently.
|
|
38
|
+
|
|
39
|
+
**Fix**: set `MULMOCLAUDE_AUTH_TOKEN` to the same long random value on **both** the server and the bridge. The server uses it verbatim instead of regenerating, so the token survives restarts and the bridge stays authenticated.
|
|
40
|
+
|
|
41
|
+
```bash
|
|
42
|
+
# Server (one-time setup — same value across restarts)
|
|
43
|
+
MULMOCLAUDE_AUTH_TOKEN=long-random-string yarn dev
|
|
44
|
+
|
|
45
|
+
# Bridge (separate process / machine — same value)
|
|
46
|
+
MULMOCLAUDE_AUTH_TOKEN=long-random-string \
|
|
47
|
+
<bridge-specific-envs> \
|
|
48
|
+
npx <this-package>@latest
|
|
49
|
+
```
|
|
50
|
+
|
|
51
|
+
Recommended: at least 32 characters of random data (the server logs a warning at startup for shorter values).
|
|
52
|
+
|
|
35
53
|
## Security
|
|
36
54
|
|
|
37
55
|
The bridge enforces a **chat-ID allowlist**. Only messages from listed chat IDs are forwarded to MulmoClaude. All other messages receive a one-time "Access denied" reply.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@mulmobridge/telegram",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "1.0.0",
|
|
4
4
|
"description": "Telegram bridge for MulmoBridge — connect a Telegram bot to MulmoClaude",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -30,12 +30,12 @@
|
|
|
30
30
|
"license": "MIT",
|
|
31
31
|
"author": "Receptron Team",
|
|
32
32
|
"dependencies": {
|
|
33
|
-
"@mulmobridge/client": "^0.
|
|
34
|
-
"@mulmobridge/protocol": "^0.
|
|
33
|
+
"@mulmobridge/client": "^1.0.0",
|
|
34
|
+
"@mulmobridge/protocol": "^1.0.0",
|
|
35
35
|
"dotenv": "^17.0.0"
|
|
36
36
|
},
|
|
37
37
|
"devDependencies": {
|
|
38
|
-
"@types/node": "^
|
|
38
|
+
"@types/node": "^26.1.1",
|
|
39
39
|
"typescript": "^6.0.3"
|
|
40
40
|
}
|
|
41
41
|
}
|