@nordbyte/nordrelay 0.2.1

package/.env.example

@@ -0,0 +1,88 @@
+# Required: bot token from BotFather.
+TELEGRAM_BOT_TOKEN=123456789:replace-me
+
+# Required: comma-separated Telegram user ids that may administer and use the bot.
+# A fresh install only accepts messages from these admin user ids.
+TELEGRAM_ADMIN_USER_IDS=123456789
+
+# Optional role controls. Add non-admin operators or read-only users here.
+# Admin user ids are automatically allowed and do not need to be repeated.
+TELEGRAM_ALLOWED_USER_IDS=
+TELEGRAM_READONLY_USER_IDS=
+# Optional granular permission policy per role. Permissions: inspect, sessions,
+# prompt, files, settings, auth, admin. Admin always keeps admin permission.
+TELEGRAM_ROLE_POLICIES_JSON=
+
+# Backward-compatible alternative for this connector. Private chat ids usually
+# match the Telegram user id; group chat ids may be negative.
+TELEGRAM_ALLOWED_CHAT_IDS=
+
+# Optional explicit override. Keep false for private bots.
+TELEGRAM_ALLOW_ANY_CHAT=false
+
+# Agent access. Codex is enabled by default; Pi is opt-in and requires the
+# `pi` CLI from https://pi.dev/ on the host.
+NORDRELAY_CODEX_ENABLED=true
+NORDRELAY_PI_ENABLED=false
+NORDRELAY_DEFAULT_AGENT=codex
+
+# Codex defaults for newly created or reattached Telegram sessions.
+CODEX_API_KEY=
+CODEX_CLI_PATH=
+CODEX_USE_BUNDLED_CLI=false
+CODEX_MODEL=
+CODEX_SYNC_INTERVAL_MS=10000
+CODEX_SANDBOX_MODE=workspace-write
+CODEX_APPROVAL_POLICY=never
+
+# Optional extra launch profiles for /launch_profiles.
+# Example: [{"id":"review","label":"Review","sandboxMode":"workspace-write","approvalPolicy":"on-request"}]
+CODEX_LAUNCH_PROFILES_JSON=
+CODEX_DEFAULT_LAUNCH_PROFILE=default
+ENABLE_UNSAFE_LAUNCH_PROFILES=false
+
+# Pi coding agent defaults. PI_DEFAULT_MODEL accepts Pi model patterns such as
+# openai-codex/gpt-5.5. PI_DEFAULT_THINKING: off, minimal, low, medium, high, xhigh.
+PI_CLI_PATH=
+PI_SESSION_DIR=
+PI_DEFAULT_MODEL=
+PI_DEFAULT_THINKING=medium
+
+# Telegram output controls.
+CONNECTOR_LOG_FORMAT=text
+TOOL_VERBOSITY=summary
+SHOW_TURN_TOKEN_USAGE=false
+ENABLE_TELEGRAM_LOGIN=true
+ENABLE_TELEGRAM_REACTIONS=false
+TELEGRAM_RATE_LIMIT_MIN_INTERVAL_MS=80
+TELEGRAM_EDIT_MIN_INTERVAL_MS=1200
+TELEGRAM_CLI_MIRROR_MODE=status
+TELEGRAM_CLI_MIRROR_MIN_UPDATE_MS=4000
+TELEGRAM_NOTIFY_MODE=minimal
+TELEGRAM_QUIET_HOURS=
+TELEGRAM_REDACT_PATTERNS=
+MAX_FILE_SIZE=20971520
+ARTIFACT_RETENTION_DAYS=7
+ARTIFACT_MAX_TURNS=30
+ARTIFACT_MAX_INBOX_DIRS=30
+ARTIFACT_IGNORE_DIRS=
+ARTIFACT_IGNORE_GLOBS=
+TELEGRAM_AUTO_SEND_ARTIFACTS=false
+
+# Optional workspace guardrails. Leave WORKSPACE_ALLOWED_ROOTS empty to allow
+# all workspaces discovered from enabled agent state.
+WORKSPACE_ALLOWED_ROOTS=
+WORKSPACE_WARN_ROOTS=
+
+# Optional voice transcription fallback. Local parakeet-coreml is used first
+# when installed; OpenAI Whisper is used when OPENAI_API_KEY is set.
+OPENAI_API_KEY=
+VOICE_PREFERRED_BACKEND=auto
+VOICE_DEFAULT_LANGUAGE=
+VOICE_TRANSCRIBE_ONLY=false
+FASTER_WHISPER_PYTHON=.venv/bin/python
+FASTER_WHISPER_MODEL=base
+FASTER_WHISPER_DEVICE=cpu
+FASTER_WHISPER_COMPUTE_TYPE=int8
+FASTER_WHISPER_LANGUAGE=
+FASTER_WHISPER_TIMEOUT_MS=600000

package/Dockerfile

@@ -0,0 +1,19 @@
+FROM node:22-alpine
+
+RUN apk add --no-cache git bash
+
+WORKDIR /app
+
+COPY package.json package-lock.json* ./
+RUN if [ -f package-lock.json ]; then npm ci; else npm install; fi
+
+COPY . .
+RUN npm run build
+
+RUN adduser -D -u 1001 nordrelay \
+  && mkdir -p /workspace /home/nordrelay/.codex \
+  && chown -R nordrelay:nordrelay /workspace /home/nordrelay
+
+USER nordrelay
+
+CMD ["node", "dist/index.js"]

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ricardo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.