nodal-agents 0.8.7 → 0.8.8

package/README.md

@@ -46,7 +46,7 @@ Every agent runs on the model **you** choose, with the tools **you** grant, in a
 ### 🏠 Own your whole stack
 
 - **Local-first** — single command, embedded Postgres, zero cloud dependency.
-- **Your data & keys** — conversations, memory, and credentials never leave your machine; API keys are AES-256-GCM encrypted at rest.
+- **Your data & keys** — conversations, memory, and credentials never leave your machine, and every credential is AES-256-GCM encrypted at rest: API keys, OAuth tokens, MCP server secrets, the bot tokens of every messaging channel, and your webhook secrets.
 - **Workspaces** — multiple isolated workspaces on one install (personal vs work), each with its own agents, skills, connectors, jobs, and memory.
 - **No markup** — bring your own API keys; you pay the provider directly, nothing on top.
 

package/cli.js

@@ -13085,6 +13085,33 @@ var init_model_catalog = __esm({
           contextWindow: 1048576,
           pricing: { inputPerMillionUsd: 1.4, outputPerMillionUsd: 4.4 }
         },
+        {
+          modelId: "z-ai/glm-5.3-flash",
+          label: "GLM 5.3 Flash",
+          // The cheap, fast sibling of 5.3 — ~19x cheaper in, ~18x cheaper out,
+          // and a LARGER context (1.31M vs 1.05M). Two real differences from the
+          // full 5.3, both read off OpenRouter's /api/v1/models on 2026-08-28:
+          //   - it is MULTIMODAL (input_modalities: text, image, video) where 5.3
+          //     is text-only, so it is in VISION_MODEL_IDS below;
+          //   - reasoning is supported (`reasoning`, `reasoning_effort` are in
+          //     supported_parameters) but NOT mandatory the way 5.2/5.3's is —
+          //     nothing upstream says this one always thinks, so 'off' stays on
+          //     the UI scale rather than being hidden on a guess.
+          // forcedToolChoice:false follows the family posture: `tool_choice` is
+          // accepted, but nothing states 'required' is honoured, and the runtime
+          // tool_choice floor relaxes it anyway.
+          capabilities: {
+            tools: true,
+            forcedToolChoice: false,
+            reasoning: true,
+            reasoningControl: {
+              kind: "effort",
+              levels: ["low", "medium", "high", "max"]
+            }
+          },
+          contextWindow: 1310720,
+          pricing: { inputPerMillionUsd: 0.075, outputPerMillionUsd: 0.25 }
+        },
         // Moonshot (Kimi)
         {
           modelId: "moonshotai/kimi-k2.6",
@@ -13242,6 +13269,10 @@ var init_model_catalog = __esm({
       "openai/gpt-5.6-luna-pro",
       "openai/gpt-5.6-terra-pro",
       "qwen/qwen3.8-max",
+      // Verified via OpenRouter /api/v1/models input_modalities on 2026-08-28:
+      // z-ai/glm-5.3-flash reports ["text","image","video"]. The full z-ai/glm-5.3
+      // reports ["text"] only and is deliberately NOT in this set.
+      "z-ai/glm-5.3-flash",
       // Verified via OpenRouter /api/v1/models input_modalities (2026-07-20).
       // qwen/qwen3.7-max is deliberately absent — text-only per the same source.
       "x-ai/grok-4.5",
@@ -15604,6 +15635,17 @@ async function assertMasterKeyRestorable(db, options = {}) {
     return Object.values(env).some((v) => typeof v === "string" && isEncrypted(v));
   });
   if (hasEncryptedMcp) throw missingKeyError("a stored MCP server secret");
+  const bindingRows = await db.select({ credentials: channelBindings.credentials }).from(channelBindings);
+  const hasEncryptedBinding = bindingRows.some(
+    (r) => !!r.credentials && isEncrypted(r.credentials)
+  );
+  if (hasEncryptedBinding) throw missingKeyError("a stored channel credential");
+  const agentRows = await db.select({ botToken: agents.telegramBotToken }).from(agents);
+  const hasEncryptedBotToken = agentRows.some((r) => !!r.botToken && isEncrypted(r.botToken));
+  if (hasEncryptedBotToken) throw missingKeyError("a stored channel credential (bot token)");
+  const webhookRows = await db.select({ secret: webhookTriggers.secret }).from(webhookTriggers);
+  const hasEncryptedWebhookSecret = webhookRows.some((r) => !!r.secret && isEncrypted(r.secret));
+  if (hasEncryptedWebhookSecret) throw missingKeyError("a stored webhook secret");
 }
 function missingKeyError(what) {
   return new Error(
@@ -15617,11 +15659,15 @@ var init_master_key_guard = __esm({
     init_llm_keys();
     init_connectors();
     init_mcp();
+    init_channel_bindings();
+    init_agents();
+    init_webhooks();
     init_src3();
   }
 });
 
 // ../../packages/db/src/queries/channel-identity.ts
+import { createHash } from "crypto";
 async function resolveOwnerConversation(db, agentId, channel) {
   if (channel === "telegram") {
     const [row2] = await db.select({ chatId: telegramAllowedChats.chatId }).from(telegramAllowedChats).where(
@@ -15677,15 +15723,44 @@ async function getChannelBinding(db, agentId, channel) {
 async function listChannelBindings(db, agentId) {
   return db.select().from(channelBindings).where(eq(channelBindings.agentId, agentId));
 }
+function decryptChannelSecret(raw, what) {
+  if (!isEncrypted(raw)) return raw;
+  try {
+    return decrypt(raw);
+  } catch (err) {
+    throw new Error(
+      `failed to decrypt ${what}: ${err instanceof Error ? err.message : String(err)}. The master key at ~/.nodalai/secrets.key does not match the one this row was written with (restored backup? copied database?). Re-enter the credential from the dashboard to re-encrypt it under the current key.`
+    );
+  }
+}
+function encryptChannelCredentials(creds) {
+  return encrypt(JSON.stringify(creds));
+}
+function encryptChannelSecret(plaintext) {
+  return isEncrypted(plaintext) ? plaintext : encrypt(plaintext);
+}
+function credentialsFingerprint(creds) {
+  const canonical = JSON.stringify(
+    Object.keys(creds).sort().map((k) => [k, creds[k]])
+  );
+  return createHash("sha256").update(canonical).digest("hex");
+}
 async function getBindingCredentials(db, agentId, channel) {
   if (channel === "telegram") {
     const [row] = await db.select({ botToken: agents.telegramBotToken }).from(agents).where(eq(agents.id, agentId)).limit(1);
-    return row?.botToken ? { botToken: row.botToken } : null;
+    if (!row?.botToken) return null;
+    return {
+      botToken: decryptChannelSecret(row.botToken, `telegram bot token (agent ${agentId})`)
+    };
   }
   const binding = await getChannelBinding(db, agentId, channel);
   if (!binding) return null;
+  const json2 = decryptChannelSecret(
+    binding.credentials,
+    `${channel} credentials (agent ${agentId})`
+  );
   try {
-    const parsed = JSON.parse(binding.credentials);
+    const parsed = JSON.parse(json2);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     return parsed;
   } catch {
@@ -15738,6 +15813,7 @@ var init_channel_identity = __esm({
   "../../packages/db/src/queries/channel-identity.ts"() {
     "use strict";
     init_drizzle_orm();
+    init_src3();
     init_telegram_allowed_chats();
     init_channel_bindings();
     init_channel_allowed_conversations();
@@ -16214,8 +16290,12 @@ __export(src_exports, {
   createClient: () => createClient,
   createSkillRepo: () => createSkillRepo,
   credentials: () => credentials,
+  credentialsFingerprint: () => credentialsFingerprint,
+  decryptChannelSecret: () => decryptChannelSecret,
   decryptCredentialForDisplay: () => decryptCredentialForDisplay,
   desc: () => desc,
+  encryptChannelCredentials: () => encryptChannelCredentials,
+  encryptChannelSecret: () => encryptChannelSecret,
   entities: () => entities,
   entityLlmKeys: () => entityLlmKeys,
   entityMembers: () => entityMembers,
@@ -16349,7 +16429,7 @@ var init_local_auth = __esm({
 });
 
 // ../../packages/auth/src/lib/constant-time.ts
-import { createHash, timingSafeEqual } from "crypto";
+import { createHash as createHash2, timingSafeEqual } from "crypto";
 var init_constant_time = __esm({
   "../../packages/auth/src/lib/constant-time.ts"() {
     "use strict";
@@ -17911,7 +17991,7 @@ var init_logs = __esm({
 
 // ../../packages/checkpoints/src/checkpoints.ts
 import { execFile } from "child_process";
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 import { mkdir, writeFile } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
 import { join as join10 } from "path";
@@ -17922,7 +18002,7 @@ function workspaceKey(workspace) {
     norm = norm.toLowerCase().replace(/\//g, "\\");
   }
   norm = norm.replace(/[\\/]+$/, "");
-  return createHash2("sha256").update(norm).digest("hex").slice(0, 16);
+  return createHash3("sha256").update(norm).digest("hex").slice(0, 16);
 }
 async function git(store, workspace, args) {
   const key = workspaceKey(workspace);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodal-agents",
-  "version": "0.8.7",
+  "version": "0.8.8",
   "description": "Local-first AI agent platform with a web dashboard — install in one command.",
   "license": "MIT",
   "repository": {