comisai 1.0.10 → 1.0.12

package/README.md

@@ -9,13 +9,13 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/comisai"><img src="https://img.shields.io/npm/v/comisai" alt="npm version" /></a>
   <a href="https://github.com/comisai/comis/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-06B6D4?style=flat" alt="License" /></a>
-  <a href="https://discord.gg/comis"><img src="https://img.shields.io/badge/discord-join-5865F2?style=flat&logo=discord&logoColor=white" alt="Discord" /></a>
+  <a href="https://discord.gg/FsqgJkpp"><img src="https://img.shields.io/badge/discord-join-5865F2?style=flat&logo=discord&logoColor=white" alt="Discord" /></a>
   <a href="https://nodejs.org"><img src="https://img.shields.io/node/v/comisai" alt="Node" /></a>
 </p>
 
 <p align="center">
   <a href="https://docs.comis.ai">Docs</a> &middot;
-  <a href="https://discord.gg/comis">Discord</a> &middot;
+  <a href="https://discord.gg/FsqgJkpp">Discord</a> &middot;
   <a href="https://twitter.com/comis_ai">Twitter</a> &middot;
   <a href="#quick-start">Quick Start</a>
 </p>
@@ -168,7 +168,7 @@ shared (Result type, utilities)
 <p align="center">
   <a href="https://github.com/comisai/comis"><strong>GitHub</strong></a> &middot;
   <a href="https://docs.comis.ai"><strong>Docs</strong></a> &middot;
-  <a href="https://discord.gg/comis"><strong>Discord</strong></a> &middot;
+  <a href="https://discord.gg/FsqgJkpp"><strong>Discord</strong></a> &middot;
   <a href="https://twitter.com/comis_ai"><strong>Twitter</strong></a> &middot;
   <a href="https://github.com/comisai/comis/issues"><strong>Issues</strong></a>
 </p>

package/node_modules/@comis/agent/dist/executor/pi-executor.d.ts

@@ -50,10 +50,7 @@ import type { AgentExecutor } from "./types.js";
  *
  * Extracted as a named function for independent unit testing.
  */
-export declare function createBeforeToolCallGuard(stepCounter: StepCounter, budgetGuard: BudgetGuard, circuitBreaker: CircuitBreaker, toolRetryBreaker?: ToolRetryBreaker, messageSendLimiter?: MessageSendLimiter): (context: unknown, _signal?: AbortSignal) => Promise<{
-    block: boolean;
-    reason: string;
-} | undefined>;
+export declare function createBeforeToolCallGuard(stepCounter: StepCounter, budgetGuard: BudgetGuard, circuitBreaker: CircuitBreaker, toolRetryBreaker?: ToolRetryBreaker, messageSendLimiter?: MessageSendLimiter): (context: unknown, _signal?: AbortSignal) => Promise<import("../safety/message-send-limiter.js").MessageSendVerdict | undefined>;
 /**
  * Merge SDK session stats into execution result for token totals (R-13).
  *

package/node_modules/@comis/agent/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/agent",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "AI agent executor, budget control, and session management for Comis",

package/node_modules/@comis/channels/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/channels",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Chat platform adapters — Discord, Telegram, Slack, WhatsApp, Signal, iMessage, IRC, LINE",

package/node_modules/@comis/cli/dist/wizard/steps/06-channels.js

@@ -130,6 +130,37 @@ async function validateLineLive(channelToken) {
         clearTimeout(timeout);
     }
 }
+/**
+ * Fetch the most recent sender's user ID from the bot's getUpdates endpoint.
+ *
+ * Calls getUpdates with a short timeout. Returns the first message sender's
+ * user ID and name, or null if no messages are available.
+ */
+async function fetchTelegramSenderId(token) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5000);
+    try {
+        const response = await fetch(`https://api.telegram.org/bot${token}/getUpdates?limit=5&allowed_updates=["message"]`, { method: "GET", signal: controller.signal });
+        if (!response.ok)
+            return null;
+        const data = (await response.json());
+        if (!data.ok || !data.result.length)
+            return null;
+        for (const update of data.result.reverse()) {
+            const from = update.message?.from;
+            if (from) {
+                return { userId: from.id, firstName: from.first_name };
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
 // ---------- Per-Channel Handlers ----------
 /**
  * Collect Discord bot token and optional guild IDs with live validation.
@@ -456,17 +487,63 @@ export const channelsStep = {
                 message: "Grant admin access to specific senders?",
             });
             if (wantTrust) {
-                prompter.note(info("Enter YOUR user ID (not the bot ID).\nTelegram: message @userinfobot to get yours.\nDiscord: enable Developer Mode → right-click your name → Copy User ID."));
-                const input = await prompter.text({
-                    message: "Your sender IDs (comma-separated)",
-                    placeholder: "e.g. 678314278",
-                    validate: (v) => v.trim().length === 0 ? "At least one sender ID required" : undefined,
-                });
-                const entries = input
-                    .split(",")
-                    .map((s) => s.trim())
-                    .filter((s) => s.length > 0)
-                    .map((senderId) => ({ senderId, level: "admin" }));
+                const telegramConfig = configs.find((c) => c.type === "telegram");
+                let detectedId = null;
+                if (telegramConfig?.botToken) {
+                    const wantDetect = await prompter.confirm({
+                        message: "Auto-detect your Telegram user ID? (send any message to your bot first)",
+                    });
+                    if (wantDetect) {
+                        const spin = prompter.spinner();
+                        spin.start("Checking for messages...");
+                        const sender = await fetchTelegramSenderId(telegramConfig.botToken);
+                        if (sender) {
+                            spin.stop(`Found: ${sender.firstName} (${sender.userId})`);
+                            const useIt = await prompter.confirm({
+                                message: `Use ${sender.userId} as your admin sender ID?`,
+                            });
+                            if (useIt) {
+                                detectedId = String(sender.userId);
+                            }
+                        }
+                        else {
+                            spin.stop("No messages found");
+                            prompter.log.warn("Send a message to your bot in Telegram and try again, or enter your ID manually below.");
+                        }
+                    }
+                }
+                const hasOtherChannels = configs.some((c) => c.type !== "telegram" && c.type !== "whatsapp" && c.type !== "signal" && c.type !== "irc");
+                let senderIds;
+                if (detectedId && !hasOtherChannels) {
+                    senderIds = [detectedId];
+                }
+                else {
+                    if (detectedId) {
+                        prompter.note(info("Add sender IDs for your other channels.\nDiscord: enable Developer Mode → right-click your name → Copy User ID."));
+                    }
+                    else {
+                        prompter.note(info("Enter YOUR user ID (not the bot ID).\nTelegram: send a message to your bot, then re-run setup to auto-detect — or find it via Telegram API.\nDiscord: enable Developer Mode → right-click your name → Copy User ID."));
+                    }
+                    const input = await prompter.text({
+                        message: "Your sender IDs (comma-separated)",
+                        placeholder: detectedId ? `e.g. ${detectedId}, <discord-id>` : "e.g. 678314278",
+                        defaultValue: detectedId ? `${detectedId}, ` : "",
+                        validate: (v) => v.trim().length === 0 ? "At least one sender ID required" : undefined,
+                    });
+                    senderIds = input
+                        .split(",")
+                        .map((s) => s.trim())
+                        .filter((s) => s.length > 0);
+                }
+                const entries = senderIds.map((senderId) => ({ senderId, level: "admin" }));
+                if (telegramConfig && senderIds.length > 0) {
+                    const restrictBot = await prompter.confirm({
+                        message: "Restrict Telegram bot to only respond to these senders?",
+                    });
+                    if (restrictBot) {
+                        telegramConfig.allowFrom = senderIds;
+                    }
+                }
                 return updateState(state, { channels: configs, senderTrustEntries: entries });
             }
         }

package/node_modules/@comis/cli/dist/wizard/steps/10-write-config.js

@@ -131,6 +131,10 @@ function buildConfigObject(state) {
             if (ch.type === "discord" && ch.guildIds && ch.guildIds.length > 0) {
                 entry.guildIds = ch.guildIds;
             }
+            // Sender allowlist
+            if (ch.allowFrom && ch.allowFrom.length > 0) {
+                entry.allowFrom = ch.allowFrom;
+            }
             channels[ch.type] = entry;
         }
         config.channels = channels;

package/node_modules/@comis/cli/dist/wizard/types.d.ts

@@ -49,6 +49,7 @@ export type ChannelConfig = {
     appToken?: string;
     channelSecret?: string;
     guildIds?: string[];
+    allowFrom?: string[];
     validated?: boolean;
 };
 /** Per-tool-provider collected credentials. */

package/node_modules/@comis/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/cli",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Command-line interface for the Comis AI agent platform",

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -115,17 +115,17 @@
     "@comis/daemon"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.10",
-    "@comis/core": "1.0.10",
-    "@comis/infra": "1.0.10",
-    "@comis/memory": "1.0.10",
-    "@comis/gateway": "1.0.10",
-    "@comis/skills": "1.0.10",
-    "@comis/scheduler": "1.0.10",
-    "@comis/agent": "1.0.10",
-    "@comis/channels": "1.0.10",
-    "@comis/cli": "1.0.10",
-    "@comis/daemon": "1.0.10",
+    "@comis/shared": "1.0.12",
+    "@comis/core": "1.0.12",
+    "@comis/infra": "1.0.12",
+    "@comis/memory": "1.0.12",
+    "@comis/gateway": "1.0.12",
+    "@comis/skills": "1.0.12",
+    "@comis/scheduler": "1.0.12",
+    "@comis/agent": "1.0.12",
+    "@comis/channels": "1.0.12",
+    "@comis/cli": "1.0.12",
+    "@comis/daemon": "1.0.12",
     "@agentclientprotocol/sdk": "^0.15.0",
     "@clack/core": "^1.1.0",
     "@clack/prompts": "^1.1.0",
@@ -137,7 +137,7 @@
     "@grammyjs/runner": "^2.0.3",
     "@hapi/boom": "^10.0.1",
     "@homebridge/ciao": "^1.3.5",
-    "@hono/node-server": "^1.19.11",
+    "@hono/node-server": "^1.19.13",
     "@hono/node-ws": "^1.3.0",
     "@line/bot-sdk": "^10.6.0",
     "@mariozechner/pi-agent-core": "0.67.68",
@@ -160,9 +160,9 @@
     "diff": "8.0.4",
     "discord.js": "^14.25.1",
     "edge-tts-universal": "^1.4.0",
-    "file-type": "^21.3.0",
+    "file-type": "^21.3.2",
     "grammy": "^1.41.1",
-    "hono": "^4.12.5",
+    "hono": "^4.12.14",
     "hono-rate-limiter": "^0.5.3",
     "iconv-lite": "^0.7.2",
     "ignore": "^7.0.5",
@@ -174,7 +174,7 @@
     "linkedom": "^0.18.12",
     "lru-cache": "^11.2.6",
     "mailparser": "^3.9.6",
-    "music-metadata": "^11.12.1",
+    "music-metadata": "^11.12.3",
     "node-llama-cpp": "^3.17.1",
     "nodemailer": "^8.0.5",
     "openai": "^6.27.0",
@@ -187,9 +187,9 @@
     "proper-lockfile": "^4.1.2",
     "sharp": "^0.34.5",
     "sqlite-vec": "0.1.7-alpha.2",
-    "undici": "^7.22.0",
+    "undici": "^7.24.0",
     "ws": "^8.19.0",
-    "yaml": "^2.8.2",
+    "yaml": "^2.8.3",
     "zod": "^4.3.6"
   },
   "optionalDependencies": {

package/node_modules/@comis/core/dist/approval/approval-gate.test.d.ts

@@ -1 +0,0 @@
-export {};