metheus-governance-mcp-cli 0.2.91 → 0.2.93

package/README.md

@@ -31,7 +31,7 @@ Install creates local provider settings templates here:
 These files are for local provider bot secrets, local transport options, and optional per-bot local AI binding.
 
 - Store locally:
-  - `TELEGRAM_BOT_TOKEN` or named Telegram bot mappings such as `TELEGRAM_BOT_RYOAI_BOT_TOKEN`
+  - `TELEGRAM_BOT_TOKEN` or named Telegram bot mappings such as `TELEGRAM_BOT_RYOAI_TOKEN`
   - `SLACK_BOT_TOKEN`
   - `KAKAOTALK_BOT_TOKEN`
 - Server-side Metheus stores project chat destination metadata separately:
@@ -48,21 +48,21 @@ Example templates:
 TELEGRAM_API_BASE_URL=
 TELEGRAM_AUTO_CLEAR_WEBHOOK=true
 TELEGRAM_ALLOWED_UPDATES=message,edited_message
-TELEGRAM_DEFAULT_BOT_KEY=ryoai_bot
+TELEGRAM_DEFAULT_BOT_KEY=ryoai
 
 # Legacy fallback
 TELEGRAM_BOT_TOKEN=
 
 # Preferred named bot mapping
-TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID=
+TELEGRAM_BOT_RYOAI_SERVER_BOT_ID=
 # Optional fallback only when server bot binding is unavailable
-# TELEGRAM_BOT_RYOAI_BOT_USERNAME=<bot_username>
-TELEGRAM_BOT_RYOAI_BOT_TOKEN=
-TELEGRAM_BOT_RYOAI_BOT_ROLE_PROFILE=monitor
-TELEGRAM_BOT_RYOAI_BOT_AI_CLIENT=gpt
-TELEGRAM_BOT_RYOAI_BOT_AI_MODEL=gpt-5.4
-TELEGRAM_BOT_RYOAI_BOT_AI_PERMISSION_MODE=read_only
-TELEGRAM_BOT_RYOAI_BOT_AI_REASONING_EFFORT=low
+# TELEGRAM_BOT_RYOAI_USERNAME=<bot_username>
+TELEGRAM_BOT_RYOAI_TOKEN=
+TELEGRAM_BOT_RYOAI_ROLE_PROFILE=monitor
+TELEGRAM_BOT_RYOAI_AI_CLIENT=gpt
+TELEGRAM_BOT_RYOAI_AI_MODEL=gpt-5.4
+TELEGRAM_BOT_RYOAI_AI_PERMISSION_MODE=read_only
+TELEGRAM_BOT_RYOAI_AI_REASONING_EFFORT=low
 
 # ~/.metheus/slack.env
 SLACK_BOT_TOKEN=
@@ -164,6 +164,8 @@ metheus-governance-mcp-cli setup --project-id <project_uuid> --ctxpack-key "<ctx
 - `~/.metheus/kakaotalk.env`
 - `~/.metheus/bot-runner.json`
 
+When `telegram.env` already exists, bootstrap/setup keeps your secrets but auto-normalizes the file to the latest named-entry layout so stale keys such as `TELEGRAM_BOT_<NAME>_BOT_*` are rewritten to `TELEGRAM_BOT_<NAME>_*`.
+
 Fill provider bot secrets and provider-local transport options locally. Project chat destination identifiers should be managed on the Metheus server as project chat destinations, not as local env values and not inside legacy Chat Hooks/webhooks.
 
 `~/.metheus/bot-runner.json` is the local automation profile for:
@@ -212,15 +214,15 @@ Direct commands:
 
 ```bash
 metheus-governance-mcp-cli bot list
-metheus-governance-mcp-cli bot show --provider telegram --bot-key ryoai_bot
+metheus-governance-mcp-cli bot show --provider telegram --bot-key ryoai
 metheus-governance-mcp-cli bot add --provider telegram
 metheus-governance-mcp-cli bot edit
 metheus-governance-mcp-cli bot edit --provider telegram
 metheus-governance-mcp-cli bot remove --provider telegram
-metheus-governance-mcp-cli bot set-default --provider telegram --bot-key ryoai_bot
-metheus-governance-mcp-cli bot migrate --provider telegram --bot-key ryoai_bot
+metheus-governance-mcp-cli bot set-default --provider telegram --bot-key ryoai
+metheus-governance-mcp-cli bot migrate --provider telegram --bot-key ryoai
 metheus-governance-mcp-cli bot global --provider telegram
-metheus-governance-mcp-cli bot verify --provider telegram --bot-key ryoai_bot
+metheus-governance-mcp-cli bot verify --provider telegram --bot-key ryoai
 ```
 
 Behavior:
@@ -269,11 +271,11 @@ Non-interactive examples:
 metheus-governance-mcp-cli bot global --provider telegram --non-interactive true --api-base-url http://127.0.0.1:8999/telegram --auto-clear-webhook false --allowed-updates message,edited_message,channel_post
 metheus-governance-mcp-cli bot add --provider telegram --non-interactive true --server-bot-id <server_bot_uuid> --token <telegram_bot_token> --default true
 metheus-governance-mcp-cli bot add --provider telegram --non-interactive true --server-bot-id <server_bot_uuid> --token <telegram_bot_token> --ai-client gpt --ai-model "gpt-5.4" --ai-permission-mode read_only --ai-reasoning-effort low
-metheus-governance-mcp-cli bot edit --provider telegram --bot-key ryoai_bot --non-interactive true --ai-client claude --ai-model "Sonnet 4.6r" --ai-permission-mode danger_full_access --ai-reasoning-effort high
-metheus-governance-mcp-cli bot set-default --provider telegram --bot-key ryoai_bot --non-interactive true
-metheus-governance-mcp-cli bot migrate --provider telegram --bot-key ryoai_bot --server-bot-id <server_bot_uuid> --bot-name <telegram_username> --role-profile monitor --ai-client gpt --ai-permission-mode read_only --ai-reasoning-effort low --non-interactive true
-metheus-governance-mcp-cli bot remove --provider telegram --bot-key ryoai_bot --non-interactive true
-metheus-governance-mcp-cli bot verify --provider telegram --bot-key ryoai_bot --json true
+metheus-governance-mcp-cli bot edit --provider telegram --bot-key ryoai --non-interactive true --ai-client claude --ai-model "Sonnet 4.6r" --ai-permission-mode danger_full_access --ai-reasoning-effort high
+metheus-governance-mcp-cli bot set-default --provider telegram --bot-key ryoai --non-interactive true
+metheus-governance-mcp-cli bot migrate --provider telegram --bot-key ryoai --server-bot-id <server_bot_uuid> --bot-name <telegram_username> --role-profile monitor --ai-client gpt --ai-permission-mode read_only --ai-reasoning-effort low --non-interactive true
+metheus-governance-mcp-cli bot remove --provider telegram --bot-key ryoai --non-interactive true
+metheus-governance-mcp-cli bot verify --provider telegram --bot-key ryoai --json true
 ```
 
 For direct Telegram adds, the CLI can derive the local entry key from the matched server bot name. You no longer need `--bot-key` or `--username` in the normal server-bound path. Treat `--bot-key` as an advanced override only when you intentionally want a different local suffix.

package/cli.mjs

@@ -749,32 +749,32 @@ function providerEnvTemplate(provider) {
       "# TELEGRAM_BOT_TOKEN=<bot token>",
       "#",
       "# Preferred v2 multi-bot mapping:",
-      "# TELEGRAM_DEFAULT_BOT_KEY=ryoai_bot",
-      "# TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID=<server bot uuid>",
-      "# TELEGRAM_BOT_RYOAI_BOT_USERNAME=<optional fallback username when server binding is unavailable>",
-      "# TELEGRAM_BOT_RYOAI_BOT_TOKEN=<bot token>",
-      "# TELEGRAM_BOT_RYOAI_BOT_ROLE_PROFILE=monitor",
-      "# TELEGRAM_BOT_RYOAI_BOT_AI_CLIENT=gpt",
-      "# TELEGRAM_BOT_RYOAI_BOT_AI_MODEL=gpt-5.4",
-      "# TELEGRAM_BOT_RYOAI_BOT_AI_PERMISSION_MODE=read_only",
-      "# TELEGRAM_BOT_RYOAI_BOT_AI_REASONING_EFFORT=low",
+      "# TELEGRAM_DEFAULT_BOT_KEY=ryoai",
+      "# TELEGRAM_BOT_RYOAI_SERVER_BOT_ID=<server bot uuid>",
+      "# TELEGRAM_BOT_RYOAI_USERNAME=<optional fallback username when server binding is unavailable>",
+      "# TELEGRAM_BOT_RYOAI_TOKEN=<bot token>",
+      "# TELEGRAM_BOT_RYOAI_ROLE_PROFILE=monitor",
+      "# TELEGRAM_BOT_RYOAI_AI_CLIENT=gpt",
+      "# TELEGRAM_BOT_RYOAI_AI_MODEL=gpt-5.4",
+      "# TELEGRAM_BOT_RYOAI_AI_PERMISSION_MODE=read_only",
+      "# TELEGRAM_BOT_RYOAI_AI_REASONING_EFFORT=low",
       "",
       "TELEGRAM_API_BASE_URL=",
       "TELEGRAM_AUTO_CLEAR_WEBHOOK=true",
       "TELEGRAM_ALLOWED_UPDATES=message,edited_message",
-      "TELEGRAM_DEFAULT_BOT_KEY=ryoai_bot",
+      "TELEGRAM_DEFAULT_BOT_KEY=ryoai",
       "",
       "# Legacy fallback (still supported)",
       "TELEGRAM_BOT_TOKEN=",
       "",
       "# Preferred named bot entry",
-      "TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID=",
-      "TELEGRAM_BOT_RYOAI_BOT_TOKEN=",
-      "TELEGRAM_BOT_RYOAI_BOT_ROLE_PROFILE=",
-      "TELEGRAM_BOT_RYOAI_BOT_AI_CLIENT=",
-      "TELEGRAM_BOT_RYOAI_BOT_AI_MODEL=",
-      "TELEGRAM_BOT_RYOAI_BOT_AI_PERMISSION_MODE=",
-      "TELEGRAM_BOT_RYOAI_BOT_AI_REASONING_EFFORT=",
+      "TELEGRAM_BOT_RYOAI_SERVER_BOT_ID=",
+      "TELEGRAM_BOT_RYOAI_TOKEN=",
+      "TELEGRAM_BOT_RYOAI_ROLE_PROFILE=",
+      "TELEGRAM_BOT_RYOAI_AI_CLIENT=",
+      "TELEGRAM_BOT_RYOAI_AI_MODEL=",
+      "TELEGRAM_BOT_RYOAI_AI_PERMISSION_MODE=",
+      "TELEGRAM_BOT_RYOAI_AI_REASONING_EFFORT=",
       "",
     ].join("\n");
   }
@@ -1053,7 +1053,12 @@ function ensureProviderEnvTemplate(provider) {
   const filePath = providerEnvFilePath(provider);
   try {
     if (fs.existsSync(filePath)) {
-      return { filePath, created: false, existed: true };
+      return {
+        filePath,
+        created: false,
+        existed: true,
+        normalized: normalizeExistingProviderEnvFile(provider, filePath),
+      };
     }
     fs.mkdirSync(path.dirname(filePath), { recursive: true });
     fs.writeFileSync(filePath, providerEnvTemplate(provider), "utf8");
@@ -2636,11 +2641,21 @@ function parseSimpleEnvText(rawText) {
   return out;
 }
 
+function formatProviderEnvValue(rawValue) {
+  const text = String(rawValue ?? "");
+  if (!text) return "";
+  if (/^[A-Za-z0-9_./:@,\-]+$/.test(text)) {
+    return text;
+  }
+  return JSON.stringify(text);
+}
+
 function normalizeTelegramBotEnvKey(rawValue, fallback = "") {
   const normalized = String(rawValue || "")
     .trim()
     .toLowerCase()
     .replace(/[^a-z0-9]+/g, "_")
+    .replace(/_bot$/g, "")
     .replace(/^_+|_+$/g, "");
   return normalized || fallback;
 }
@@ -2704,6 +2719,124 @@ function collectTelegramEnvBotEntries(parsedEnv) {
   return Array.from(entries.values());
 }
 
+function isTelegramEntryEnvKey(rawKey) {
+  return /^TELEGRAM_BOT_([A-Z0-9_]+)_(TOKEN|USERNAME|SERVER_BOT_ID|ROLE_PROFILE|AI_CLIENT|AI_MODEL|AI_PERMISSION_MODE|AI_REASONING_EFFORT)$/i
+    .test(String(rawKey || "").trim());
+}
+
+function telegramEntryCommentNameForEnv(entry) {
+  const current = safeObject(entry);
+  const username = normalizeTelegramBotUsername(current.username || "");
+  if (username) return username;
+  const key = normalizeTelegramBotEnvKey(current.key || "", "telegram_bot");
+  if (!key) return "telegram_bot";
+  return key.endsWith("_bot") ? key : `${key}_bot`;
+}
+
+function renderNormalizedTelegramEnv(parsedEnv) {
+  const parsed = safeObject(parsedEnv);
+  const entries = collectTelegramEnvBotEntries(parsed)
+    .filter((entry) => (
+      entry.token
+      || entry.username
+      || entry.serverBotID
+      || entry.roleProfile
+      || entry.client
+      || entry.model
+      || entry.permissionMode
+      || entry.reasoningEffort
+    ))
+    .sort((left, right) => String(left.key || "").localeCompare(String(right.key || "")));
+  const defaultBotKey = normalizeTelegramBotEnvKey(parsed.TELEGRAM_DEFAULT_BOT_KEY || "", "");
+  if (defaultBotKey) {
+    entries.sort((left, right) => {
+      if (left.key === defaultBotKey) return -1;
+      if (right.key === defaultBotKey) return 1;
+      return String(left.key || "").localeCompare(String(right.key || ""));
+    });
+  }
+  const lines = [
+    "# Metheus local Telegram bot settings",
+    "# Keep this file on your machine only. Do not commit it.",
+    "# Store Telegram bot secrets, AI bindings, and local transport options only.",
+    "",
+    `TELEGRAM_API_BASE_URL=${formatProviderEnvValue(parsed.TELEGRAM_API_BASE_URL || "")}`,
+    `TELEGRAM_AUTO_CLEAR_WEBHOOK=${boolFromRaw(parsed.TELEGRAM_AUTO_CLEAR_WEBHOOK, true) ? "true" : "false"}`,
+    `TELEGRAM_ALLOWED_UPDATES=${formatProviderEnvValue(String(parsed.TELEGRAM_ALLOWED_UPDATES || "").trim() || "message,edited_message")}`,
+    `TELEGRAM_DEFAULT_BOT_KEY=${formatProviderEnvValue(defaultBotKey || "")}`,
+    "",
+    "# Legacy fallback",
+    `TELEGRAM_BOT_TOKEN=${formatProviderEnvValue(parsed.TELEGRAM_BOT_TOKEN || "")}`,
+    "",
+  ];
+  if (!entries.length) {
+    lines.push("# No named Telegram bot entries configured yet", "");
+  } else {
+    entries.forEach((entry) => {
+      const upper = String(entry.key || "").trim().toUpperCase();
+      lines.push(
+        `# Telegram bot entry: ${telegramEntryCommentNameForEnv(entry)}`,
+        `TELEGRAM_BOT_${upper}_SERVER_BOT_ID=${formatProviderEnvValue(entry.serverBotID || "")}`,
+      );
+      if (String(entry.username || "").trim()) {
+        lines.push(`TELEGRAM_BOT_${upper}_USERNAME=${formatProviderEnvValue(entry.username || "")}`);
+      }
+      lines.push(
+        `TELEGRAM_BOT_${upper}_TOKEN=${formatProviderEnvValue(entry.token || "")}`,
+        `TELEGRAM_BOT_${upper}_ROLE_PROFILE=${formatProviderEnvValue(entry.roleProfile || "")}`,
+        `TELEGRAM_BOT_${upper}_AI_CLIENT=${formatProviderEnvValue(entry.client || "")}`,
+        `TELEGRAM_BOT_${upper}_AI_MODEL=${formatProviderEnvValue(entry.model || "")}`,
+        `TELEGRAM_BOT_${upper}_AI_PERMISSION_MODE=${formatProviderEnvValue(entry.permissionMode || "")}`,
+        `TELEGRAM_BOT_${upper}_AI_REASONING_EFFORT=${formatProviderEnvValue(entry.reasoningEffort || "")}`,
+        "",
+      );
+    });
+  }
+  const knownKeys = new Set([
+    "TELEGRAM_API_BASE_URL",
+    "TELEGRAM_AUTO_CLEAR_WEBHOOK",
+    "TELEGRAM_ALLOWED_UPDATES",
+    "TELEGRAM_DEFAULT_BOT_KEY",
+    "TELEGRAM_BOT_TOKEN",
+  ]);
+  entries.forEach((entry) => {
+    const upper = String(entry.key || "").trim().toUpperCase();
+    knownKeys.add(`TELEGRAM_BOT_${upper}_SERVER_BOT_ID`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_USERNAME`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_TOKEN`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_ROLE_PROFILE`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_AI_CLIENT`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_AI_MODEL`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_AI_PERMISSION_MODE`);
+    knownKeys.add(`TELEGRAM_BOT_${upper}_AI_REASONING_EFFORT`);
+  });
+  const extras = Object.keys(parsed)
+    .filter((key) => !knownKeys.has(key) && !isTelegramEntryEnvKey(key))
+    .sort((left, right) => left.localeCompare(right));
+  if (extras.length) {
+    lines.push("# Additional preserved keys");
+    extras.forEach((key) => {
+      lines.push(`${key}=${formatProviderEnvValue(parsed[key])}`);
+    });
+    lines.push("");
+  }
+  return `${lines.join("\n").replace(/\n{3,}/g, "\n\n").trimEnd()}\n`;
+}
+
+function normalizeExistingProviderEnvFile(provider, filePath) {
+  if (normalizeBotProvider(provider) !== "telegram") return false;
+  const raw = fs.readFileSync(filePath, "utf8");
+  const rendered = renderNormalizedTelegramEnv(parseSimpleEnvText(raw));
+  if (raw.replace(/\r\n/g, "\n") === rendered.replace(/\r\n/g, "\n")) {
+    return false;
+  }
+  fs.writeFileSync(filePath, rendered, {
+    encoding: "utf8",
+    mode: 0o600,
+  });
+  return true;
+}
+
 function resolveTelegramEnvConfig(parsedEnv, filePath, config, selectors = {}) {
   const parsed = safeObject(parsedEnv);
   const legacyToken = String(parsed.TELEGRAM_BOT_TOKEN || "").trim();
@@ -5078,8 +5211,8 @@ TELEGRAM_API_BASE_URL=http://127.0.0.1:8999/api
 TELEGRAM_AUTO_CLEAR_WEBHOOK=false
 TELEGRAM_ALLOWED_UPDATES=message,edited_message,channel_post
 TELEGRAM_DEFAULT_BOT_KEY=review
-TELEGRAM_BOT_RYOAI_BOT_USERNAME=RyoAI_bot
-TELEGRAM_BOT_RYOAI_BOT_TOKEN=ryoai-token
+TELEGRAM_BOT_RYOAI_USERNAME=RyoAI_bot
+TELEGRAM_BOT_RYOAI_TOKEN=ryoai-token
 TELEGRAM_BOT_REVIEW_SERVER_BOT_ID=bot-review
 TELEGRAM_BOT_REVIEW_USERNAME=ReviewBot
 TELEGRAM_BOT_REVIEW_TOKEN=review-token
@@ -5108,11 +5241,25 @@ TELEGRAM_BOT_REVIEW_TOKEN=review-token
     "telegram_env_v2_bot_name_override_selects_matching_token",
     telegramEnvV2ByUsername.ok
       && telegramEnvV2ByUsername.token === "ryoai-token"
-      && telegramEnvV2ByUsername.botKey === "ryoai_bot"
+      && telegramEnvV2ByUsername.botKey === "ryoai"
       && Array.isArray(telegramEnvV2ByUsername.allowedUpdates)
       && telegramEnvV2ByUsername.allowedUpdates.includes("channel_post"),
     `bot=${String(telegramEnvV2ByUsername.botKey || "(none)")} updates=${String((telegramEnvV2ByUsername.allowedUpdates || []).join(","))}`,
   );
+  const telegramEnvNormalizedText = renderNormalizedTelegramEnv(parseSimpleEnvText(`
+TELEGRAM_DEFAULT_BOT_KEY=ryoai_bot
+TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID=bot-ryoai
+TELEGRAM_BOT_RYOAI_BOT_TOKEN=ryoai-token
+  `));
+  push(
+    "telegram_env_existing_file_auto_normalizes_named_keys",
+    telegramEnvNormalizedText.includes("TELEGRAM_DEFAULT_BOT_KEY=ryoai")
+      && telegramEnvNormalizedText.includes("TELEGRAM_BOT_RYOAI_SERVER_BOT_ID=bot-ryoai")
+      && telegramEnvNormalizedText.includes("TELEGRAM_BOT_RYOAI_TOKEN=ryoai-token")
+      && telegramEnvNormalizedText.includes("# Telegram bot entry: ryoai_bot")
+      && !telegramEnvNormalizedText.includes("TELEGRAM_BOT_RYOAI_BOT_TOKEN"),
+    telegramEnvNormalizedText,
+  );
   const telegramSupport = getProviderSupport("telegram");
   push(
     "provider_support_telegram_full_runner",

package/lib/bot-commands.mjs

@@ -67,7 +67,11 @@ function suggestDisplayedAIModel(deps, clientName, rawModelValue = "") {
 }
 
 function normalizeServerBotIdentityText(rawValue) {
-  return String(rawValue || "").trim().replace(/^@+/, "").toLowerCase();
+  return String(rawValue || "")
+    .trim()
+    .replace(/^@+/, "")
+    .toLowerCase()
+    .replace(/_bot$/g, "");
 }
 
 function summarizeServerBotRoles(bots) {
@@ -437,6 +441,15 @@ function telegramEntryEnvKeys(botKey) {
   };
 }
 
+function telegramEntryCommentName(entry) {
+  const current = safeObject(entry);
+  const username = String(current.username || "").trim();
+  if (username) return username;
+  const key = String(current.key || "").trim();
+  if (!key) return "telegram_bot";
+  return key.endsWith("_bot") ? key : `${key}_bot`;
+}
+
 function persistTelegramUsername(entry) {
   const current = safeObject(entry);
   if (current.__preferServerIdentity) return "";
@@ -487,6 +500,11 @@ function telegramKnownKeys(parsedEnv, deps) {
   return keys;
 }
 
+function isTelegramEntryEnvKey(rawKey) {
+  return /^TELEGRAM_BOT_([A-Z0-9_]+)_(TOKEN|USERNAME|SERVER_BOT_ID|ROLE_PROFILE|AI_CLIENT|AI_MODEL|AI_PERMISSION_MODE|AI_REASONING_EFFORT)$/i
+    .test(String(rawKey || "").trim());
+}
+
 function renderTelegramEnv(parsedEnv, deps) {
   const parsed = safeObject(parsedEnv);
   const collectEntries = requireDependency(deps, "collectTelegramEnvBotEntries");
@@ -531,7 +549,7 @@ function renderTelegramEnv(parsedEnv, deps) {
     entries.forEach((entry) => {
       const keys = telegramEntryEnvKeys(entry.key);
       const entryLines = [
-        `# Telegram bot entry: ${entry.key}`,
+        `# Telegram bot entry: ${telegramEntryCommentName(entry)}`,
         `${keys.serverBotID}=${formatEnvValue(entry.serverBotID || "")}`,
       ];
       if (String(entry.username || "").trim()) {
@@ -551,7 +569,7 @@ function renderTelegramEnv(parsedEnv, deps) {
   }
   const knownKeys = telegramKnownKeys(parsed, deps);
   const extras = Object.keys(parsed)
-    .filter((key) => !knownKeys.has(key))
+    .filter((key) => !knownKeys.has(key) && !isTelegramEntryEnvKey(key))
     .sort((left, right) => left.localeCompare(right));
   if (extras.length) {
     lines.push("# Additional preserved keys");

package/lib/selftest-bot-commands.mjs

@@ -391,12 +391,12 @@ export async function runSelftestBotCommands(push, deps) {
       const groupedState = parseSimpleEnvText(fs.readFileSync(telegramEnvPath, "utf8"));
     push(
       "bot_add_guided_autoresolves_server_bot_group_without_role_prompt",
-        String(groupedState.TELEGRAM_BOT_RYOAI_BOT_USERNAME || "").trim() === ""
-          && String(groupedState.TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID || "") === ""
-          && String(groupedState.TELEGRAM_BOT_RYOAI_BOT_ROLE_PROFILE || "") === ""
-          && String(groupedState.TELEGRAM_BOT_RYOAI_BOT_AI_CLIENT || "") === ""
-          && String(groupedState.TELEGRAM_BOT_RYOAI_BOT_AI_PERMISSION_MODE || "") === "",
-        `username=${String(groupedState.TELEGRAM_BOT_RYOAI_BOT_USERNAME || "")} server_bot_id=${String(groupedState.TELEGRAM_BOT_RYOAI_BOT_SERVER_BOT_ID || "")} role=${String(groupedState.TELEGRAM_BOT_RYOAI_BOT_ROLE_PROFILE || "")}`,
+        String(groupedState.TELEGRAM_BOT_RYOAI_USERNAME || "").trim() === ""
+          && String(groupedState.TELEGRAM_BOT_RYOAI_SERVER_BOT_ID || "") === ""
+          && String(groupedState.TELEGRAM_BOT_RYOAI_ROLE_PROFILE || "") === ""
+          && String(groupedState.TELEGRAM_BOT_RYOAI_AI_CLIENT || "") === ""
+          && String(groupedState.TELEGRAM_BOT_RYOAI_AI_PERMISSION_MODE || "") === "",
+        `username=${String(groupedState.TELEGRAM_BOT_RYOAI_USERNAME || "")} server_bot_id=${String(groupedState.TELEGRAM_BOT_RYOAI_SERVER_BOT_ID || "")} role=${String(groupedState.TELEGRAM_BOT_RYOAI_ROLE_PROFILE || "")}`,
       );
 
       const groupedEditResult = await runCLI({
@@ -410,7 +410,7 @@ export async function runSelftestBotCommands(push, deps) {
           ...env,
           METHEUS_SCRIPTED_PROMPT_ANSWERS: JSON.stringify([
             "1", // provider: telegram
-            "2", // bot entry: ryoai_bot
+            "2", // bot entry: ryoai
             "1", // keep token
             "2", // grouped role settings: edit one role
             "3", // select role to edit: worker
@@ -455,7 +455,7 @@ export async function runSelftestBotCommands(push, deps) {
         args: [
           "bot", "show",
           "--provider", "telegram",
-          "--bot-key", "ryoai_bot",
+          "--bot-key", "ryoai",
           "--base-url", `http://127.0.0.1:${groupedMock.port}`,
           "--json", "true",
         ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "metheus-governance-mcp-cli",
-  "version": "0.2.91",
+  "version": "0.2.93",
   "description": "Metheus Governance MCP CLI (setup + stdio proxy)",
   "type": "module",
   "files": [