@pedrohnas/opencode-telegram 1.3.0 → 1.3.2

package/docs/PROGRESS.md

@@ -455,7 +455,7 @@ e2e/
 
 ## Phase 6.5 — Production Hardening + Bot Control API ✅
 
-**Status:** Complete (unit tests pass, E2E written — awaiting E2E run)
+**Status:** Complete — deployed to prod as v1.3.0
 **Date:** 2026-02-08
 **Plan:** See `docs/plans/phase-6.5.md`
 **Audit:** See `docs/AUDIT.md`
@@ -472,21 +472,24 @@ e2e/
 | Type | Count | Status |
 |------|-------|--------|
 | Unit (bun test src/) | 295 | ✅ all pass |
-| E2E Phase 6.5 | 8 | Written, pending run |
+| E2E Phase 6.5 | 9 | ✅ all pass |
+| E2E Full regression | 41 | ✅ all pass |
 
 ### Files Created
 ```
 src/
   api-server.ts                    ← Hono app + createApiServer (Bot Control API)
   api-server.test.ts               ← 15 tests (all endpoints via app.request())
-deploy/
-  skills/
-    telegram-control/
-      SKILL.md                     ← AI skill doc for Bot Control API
 e2e/
-  phase-6.5.test.ts                ← 8 E2E tests (/model filtering + Bot Control API)
+  phase-6.5.test.ts                ← 9 E2E tests (/model filtering + Bot Control API)
+docs/plans/
+  phase-6.5.md                     ← Phase plan
 ```
 
+### Deployed
+- SKILL.md at `~/.claude/skills/telegram-control/` (WSL + VPS)
+- npm: `@pedrohnas/opencode-telegram@1.3.0`
+
 ### Files Modified
 ```
 src/

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pedrohnas/opencode-telegram",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "type": "module",
   "license": "MIT",
   "scripts": {

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-41-55-194Z.yml

@@ -1,36 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - generic [ref=e22]:
-      - generic [ref=e23]:
-        - button "Toggle between showing and hiding a shade over a wombat's head" [ref=e25] [cursor=pointer]
-        - button "Make the animated wombat visibly giggle" [ref=e30]
-      - generic [ref=e33]:
-        - heading "Sign In" [level=1] [ref=e34]
-        - generic [ref=e35]:
-          - generic [ref=e37]: Username
-          - textbox "Username" [ref=e38]:
-            - /placeholder: ""
-        - link "Forgot password?" [ref=e40] [cursor=pointer]:
-          - /url: /forgot
-        - generic [ref=e41]:
-          - generic [ref=e43]: Password
-          - generic [ref=e44]:
-            - textbox "Password" [ref=e45]:
-              - /placeholder: ""
-            - button "Show password" [ref=e46] [cursor=pointer]: Show
-        - button "Sign In" [ref=e48]
-      - link "Create Account" [ref=e49] [cursor=pointer]:
-        - /url: /signup

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-42-17-115Z.yml

@@ -1,36 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - generic [ref=e22]:
-      - generic [ref=e23]:
-        - button "Toggle between showing and hiding a shade over a wombat's head" [ref=e25] [cursor=pointer]
-        - button "Make the animated wombat visibly giggle" [ref=e30]
-      - generic [ref=e33]:
-        - heading "Sign In" [level=1] [ref=e34]
-        - generic [ref=e35]:
-          - generic [ref=e37]: Username
-          - textbox "Username" [ref=e38]:
-            - /placeholder: ""
-        - link "Forgot password?" [ref=e40] [cursor=pointer]:
-          - /url: /forgot
-        - generic [ref=e41]:
-          - generic [ref=e43]: Password
-          - generic [ref=e44]:
-            - textbox "Password" [ref=e45]:
-              - /placeholder: ""
-            - button "Show password" [ref=e46] [cursor=pointer]: Show
-        - button "Sign In" [ref=e48]
-      - link "Create Account" [ref=e49] [cursor=pointer]:
-        - /url: /signup

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-43-15-988Z.yml

@@ -1,26 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - heading "Two-Factor Authentication" [level=1] [ref=e20]
-    - generic [ref=e21]:
-      - generic [ref=e23]:
-        - img [ref=e25]
-        - heading "Security key" [level=2] [ref=e30]
-        - paragraph [ref=e31]: Click the button below when you are ready to authenticate.
-        - button "Use security key" [ref=e32]
-      - generic [ref=e33]:
-        - paragraph [ref=e34]: Unable to verify with your security key?
-        - link "Use a recovery code or request a reset" [ref=e35] [cursor=pointer]:
-          - /url: /login/recovery-code?next=%2F

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-43-26-107Z.yml

@@ -1,26 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - heading "Two-Factor Authentication" [level=1] [ref=e20]
-    - generic [ref=e21]:
-      - generic [ref=e23]:
-        - img [ref=e25]
-        - heading "Security key" [level=2] [ref=e30]
-        - paragraph [ref=e31]: Click the button below when you are ready to authenticate.
-        - button "Use security key" [ref=e32]
-      - generic [ref=e33]:
-        - paragraph [ref=e34]: Unable to verify with your security key?
-        - link "Use a recovery code or request a reset" [ref=e35] [cursor=pointer]:
-          - /url: /login/recovery-code?next=%2F

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-45-03-139Z.yml

@@ -1,29 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - generic [ref=e39]:
-    - alert [ref=e41]: Something went wrong. Please try again later.
-    - button "Close notification" [active] [ref=e42] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - heading "Two-Factor Authentication" [level=1] [ref=e20]
-    - generic [ref=e21]:
-      - generic [ref=e23]:
-        - img [ref=e25]
-        - heading "Security key" [level=2] [ref=e30]
-        - paragraph [ref=e31]: Click the button below when you are ready to authenticate.
-        - button "Use security key" [ref=e32]
-      - generic [ref=e33]:
-        - paragraph [ref=e34]: Unable to verify with your security key?
-        - link "Use a recovery code or request a reset" [ref=e35] [cursor=pointer]:
-          - /url: /login/recovery-code?next=%2F

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-45-21-579Z.yml

@@ -1,29 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - generic [ref=e39]:
-    - alert [ref=e41]: Something went wrong. Please try again later.
-    - button "Close notification" [active] [ref=e42] [cursor=pointer]: ×
-  - main [ref=e15]:
-    - link "Npm" [ref=e17] [cursor=pointer]:
-      - /url: /
-      - img [ref=e18]
-    - heading "Two-Factor Authentication" [level=1] [ref=e20]
-    - generic [ref=e21]:
-      - generic [ref=e23]:
-        - img [ref=e25]
-        - heading "Security key" [level=2] [ref=e30]
-        - paragraph [ref=e31]: Click the button below when you are ready to authenticate.
-        - button "Use security key" [ref=e32]
-      - generic [ref=e33]:
-        - paragraph [ref=e34]: Unable to verify with your security key?
-        - link "Use a recovery code or request a reset" [ref=e35] [cursor=pointer]:
-          - /url: /login/recovery-code?next=%2F

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-45-48-051Z.yml

@@ -1,30 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - main [ref=e45]:
-    - link "Npm" [ref=e47] [cursor=pointer]:
-      - /url: /
-      - img [ref=e48]
-    - heading "Two-Factor Authentication" [level=1] [ref=e50]
-    - generic [ref=e51]:
-      - generic [ref=e54]:
-        - img [ref=e56]
-        - heading "Use a Recovery Code" [level=2] [ref=e62]
-        - paragraph [ref=e63]: If you are unable to acces your two-factor device, enter one of your recovery codes to verify your identity.
-        - generic [ref=e64]:
-          - generic [ref=e66]: Recovery code
-          - textbox "Recovery code" [active] [ref=e67]:
-            - /placeholder: ""
-        - button "Verify" [ref=e69]
-      - generic [ref=e70]:
-        - paragraph [ref=e71]: Locked out?
-        - link "Try recovering your account" [ref=e72] [cursor=pointer]:
-          - /url: /recovery-support/message/recoveryCode

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-46-27-632Z.yml

@@ -1,33 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - generic [ref=e16]:
-    - alert [ref=e18]: Invalid recovery code.
-    - button "Close notification" [active] [ref=e19] [cursor=pointer]: ×
-  - main [ref=e21]:
-    - link "Npm" [ref=e23] [cursor=pointer]:
-      - /url: /
-      - img [ref=e24]
-    - heading "Two-Factor Authentication" [level=1] [ref=e26]
-    - generic [ref=e27]:
-      - generic [ref=e30]:
-        - img [ref=e32]
-        - heading "Use a Recovery Code" [level=2] [ref=e38]
-        - paragraph [ref=e39]: If you are unable to acces your two-factor device, enter one of your recovery codes to verify your identity.
-        - generic [ref=e40]:
-          - generic [ref=e42]: Recovery code
-          - textbox "Recovery code" [ref=e43]:
-            - /placeholder: ""
-        - button "Verify" [ref=e45]
-      - generic [ref=e46]:
-        - paragraph [ref=e47]: Locked out?
-        - link "Try recovering your account" [ref=e48] [cursor=pointer]:
-          - /url: /recovery-support/message/recoveryCode

package/.claude/skills/playwright-cli/data/page-2026-02-09T01-46-46-519Z.yml

@@ -1,33 +0,0 @@
-- generic [ref=e3]:
-  - region "Site notifications" [ref=e4]:
-    - generic [ref=e8]:
-      - generic [ref=e9]: ⚠️
-      - alert [ref=e11]:
-        - text: "Security Update: Classic tokens have been revoked. Granular tokens are now limited to 90 days and require 2FA by default. Update your CI/CD workflows to avoid disruption."
-        - link "Learn more about npm authentication changes" [ref=e12] [cursor=pointer]:
-          - /url: https://gh.io/all-npm-classic-tokens-revoked
-          - text: Learn more
-        - text: .
-      - button "Close notification" [ref=e13] [cursor=pointer]: ×
-  - generic [ref=e16]:
-    - alert [ref=e18]: Invalid recovery code.
-    - button "Close notification" [active] [ref=e19] [cursor=pointer]: ×
-  - main [ref=e21]:
-    - link "Npm" [ref=e23] [cursor=pointer]:
-      - /url: /
-      - img [ref=e24]
-    - heading "Two-Factor Authentication" [level=1] [ref=e26]
-    - generic [ref=e27]:
-      - generic [ref=e30]:
-        - img [ref=e32]
-        - heading "Use a Recovery Code" [level=2] [ref=e38]
-        - paragraph [ref=e39]: If you are unable to acces your two-factor device, enter one of your recovery codes to verify your identity.
-        - generic [ref=e40]:
-          - generic [ref=e42]: Recovery code
-          - textbox "Recovery code" [ref=e43]:
-            - /placeholder: ""
-        - button "Verify" [ref=e45]
-      - generic [ref=e46]:
-        - paragraph [ref=e47]: Locked out?
-        - link "Try recovering your account" [ref=e48] [cursor=pointer]:
-          - /url: /recovery-support/message/recoveryCode