shadok-ai 0.15.24 → 0.15.26

package/README.md

@@ -296,6 +296,9 @@ Enter to skip; you can add it later from the web UI).
 
 ### Telegram (optional)
 
+The Telegram panel (header icon) carries a folded *How to set it up, step by step*
+guide, open until a token is saved and a group is bound.
+
 Add your bot to a group with **Topics** enabled, make it an admin with *Manage
 topics* (and *Delete messages* so `/secret` can scrub values), then in the group:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shadok-ai",
-  "version": "0.15.24",
+  "version": "0.15.26",
   "main": "dist/session.js",
   "scripts": {
     "test": "node --import tsx --test --test-timeout=120000 test/*.ts context/*/test/*.test.mjs",

package/public/index.html

@@ -836,6 +836,10 @@
   .fold > summary:hover { color: var(--text); }
   .fold > *:not(summary) { margin-top: 8px; }
   .fold-count { color: var(--amber); }
+  .tg-guide { margin-bottom: 12px; }
+  .tg-guide ol { margin: 8px 0 0; padding-left: 20px; font-size: 13px; line-height: 1.5; }
+  .tg-guide li { margin-bottom: 4px; }
+  .tg-guide code { font-size: 12px; }
   /* A field with no effect in the current mode (resume/continue) — visible but inert. */
   .na { opacity: .45; pointer-events: none; }
 
@@ -2354,6 +2358,18 @@
       <p class="sec-note" id="tgStatus">…</p>
     </div>
     <div class="pin-body">
+    <details class="fold tg-guide" id="tgGuide">
+      <summary>How to set it up, step by step</summary>
+      <ol>
+        <li>In Telegram, open <b>@BotFather</b>, send <code>/newbot</code>, pick a name and a username ending in <code>bot</code>. It answers with a <b>token</b>.</li>
+        <li>Paste that token below and click <b>Save</b>. The status above turns 🟢 with the bot's name.</li>
+        <li>Create a Telegram <b>group</b>, open its settings and turn on <b>Topics</b>.</li>
+        <li>Add your bot to the group and make it an <b>admin</b> with <i>Manage topics</i> (and <i>Delete messages</i>, so <code>/secret</code> can scrub values).</li>
+        <li>In the group, send <code>/setup</code>. The status above now shows the bound group.</li>
+        <li>Send <code>/spawn &lt;name&gt;</code> (or create a topic by hand): each topic is one agent, also visible here as a tab.</li>
+      </ol>
+      <p class="check-hint">Optional: list chat ids under <i>Allowed chats</i> so only they can reach the bot.</p>
+    </details>
     <button id="tgUnbind" hidden title="Unbind the board group so you can /setup a fresh one (e.g. after it became a supergroup)">Unbind group</button>
     <label class="check"><input type="checkbox" id="tgEnabled"><span>Bot enabled</span></label>
     <div class="field">
@@ -2384,9 +2400,14 @@
 <div id="authOverlay" class="overlay" hidden>
   <div id="authPanel" class="sec-panel">
     <div class="sec-head">
-      <strong>Sign in to Claude</strong>
+      <strong id="authTitle">Sign in to Claude</strong>
+      <!-- Shown only for a VOLUNTARY re-login (opened from the panel / banner
+           while already signed in): that card is optional, so it must close.
+           The signed-OUT card has no ✕ on purpose — signing in is the only way
+           to make the instance usable, so it stays a funnel. -->
+      <button id="authClose" type="button" title="Cancel" hidden aria-label="Cancel">✕</button>
     </div>
-    <p class="sec-note">This instance isn't signed in to Claude, so it can't start any agent.</p>
+    <p class="sec-note" id="authNote">This instance isn't signed in to Claude, so it can't start any agent.</p>
     <div class="field">
       <span class="label">1 — Open this link and authorise</span>
       <a id="authLink" target="_blank" rel="noopener">starting…</a>
@@ -7655,6 +7676,8 @@
     if (!$("setupOverlay").hidden) { closeSetup(); e.preventDefault(); return; }
     if (!$("cronOverlay").hidden) { $("cronOverlay").hidden = true; e.preventDefault(); return; }
     if (!$("telegramOverlay").hidden) { $("telegramOverlay").hidden = true; e.preventDefault(); return; }
+    // Only a voluntary (dismissable) re-login card; the signed-out funnel ignores Escape.
+    if (!$("authOverlay").hidden && authDismissable) { closeAuthCard(); e.preventDefault(); return; }
     if ($("diffpanel").classList.contains("open")) { $("diffpanel").classList.remove("open"); e.preventDefault(); return; }
     // 2. A clickable dialog awaiting an answer → do nothing.
     if (active && active.dialogBubble) return;
@@ -8953,6 +8976,13 @@
     const err = s.tokenError ? ` — ${s.tokenError}` : "";
     $("tgStatus").textContent = `${dot} ${who}${grp}${err}`;
     $("tgUnbind").hidden = !s.boundGroup; // only offer unbind when a group is bound
+    // The guide unfolds on its own until the setup is done (token + bound group);
+    // once it is, it stays folded unless opened — decided once per opening of
+    // the panel, so saving a token never folds a guide the user is reading.
+    if (!$("tgGuide").dataset.auto) {
+      $("tgGuide").open = !(s.hasToken && s.boundGroup);
+      $("tgGuide").dataset.auto = "1";
+    }
     $("tgEnabled").checked = s.enabled;
     const tok = $("tgToken");
     tok.disabled = s.envOverride;
@@ -8970,6 +9000,7 @@
     }
   }
   async function loadTelegram() {
+    delete $("tgGuide").dataset.auto; // each opening of the panel re-decides the fold
     renderTelegram(await (await fetch("/telegram")).json());
   }
   async function putTelegram(patch) {
@@ -9113,8 +9144,31 @@
   // button and the expiry banner). Without it the server short-circuits to
   // {alreadySignedIn} and the card closes doing nothing — which is exactly the
   // no-op the signed-in re-login affordances would otherwise be.
+  // A voluntary re-login (force) is dismissable; the signed-out funnel is not.
+  // Tracked so Escape and a backdrop click only close the card they should.
+  let authDismissable = false;
+
+  // Close a VOLUNTARY re-login card, cancelling the pending `claude auth login`
+  // child on the server so it is not left waiting on stdin (DELETE /auth/login
+  // → cancelLogin). Never the way out of the signed-out funnel.
+  function closeAuthCard() {
+    if (!authDismissable) return;
+    fetch("/auth/login", { method: "DELETE" }).catch(() => {});
+    authDismissable = false;
+    $("authClose").hidden = true;
+    $("authOverlay").hidden = true;
+  }
+
   async function openAuthCard(force = false) {
     if (!$("authOverlay").hidden) return;   // a flow is already on screen
+    authDismissable = force;
+    $("authClose").hidden = !force;
+    // A forced re-login comes from a SIGNED-IN instance, so the "not signed in"
+    // copy would be wrong there; say what the card actually does.
+    $("authTitle").textContent = force ? "Re-login to Claude" : "Sign in to Claude";
+    $("authNote").textContent = force
+      ? "Renew this instance's Claude sign-in. Your agents keep running in the meantime."
+      : "This instance isn't signed in to Claude, so it can't start any agent.";
     $("authOverlay").hidden = false;
     $("authMsg").hidden = true;
     const link = $("authLink");
@@ -9175,6 +9229,10 @@
     }
   });
 
+  $("authClose").addEventListener("click", closeAuthCard);
+  // Backdrop click closes a dismissable (voluntary) card; the panel itself does not.
+  $("authOverlay").addEventListener("click", (e) => { if (e.target === $("authOverlay")) closeAuthCard(); });
+
   $("tgUnbind").addEventListener("click", () => { if (confirm("Unbind the current board group? You'll need to /setup a group again in Telegram.")) putTelegram({ unbindGroup: true }); });
   $("telegramBtn").addEventListener("click", () => { $("telegramOverlay").hidden = false; loadTelegram(); });
   $("telegramClose").addEventListener("click", () => { $("telegramOverlay").hidden = true; });