talon-agent 5.6.0 → 5.8.0

package/README.md

@@ -78,6 +78,9 @@ brew install dylanneve1/talon/talon
 # Debian / Ubuntu — download the .deb for your arch from the release, then:
 sudo apt install ./talon_<version>_amd64.deb     # or _arm64.deb
 
+# Fedora / RHEL — download the .rpm for your arch from the release, then:
+sudo dnf install ./talon-<version>-1.x86_64.rpm  # or .aarch64.rpm
+
 # Direct download — grab talon-<os>-<arch> from the release, verify, run:
 chmod +x talon-linux-x64 && ./talon-linux-x64 --version
 # macOS, if Gatekeeper blocks an unsigned binary:
@@ -87,6 +90,10 @@ xattr -d com.apple.quarantine ./talon-darwin-arm64
 Verify a direct download against the release `SHA256SUMS`:
 `sha256sum -c SHA256SUMS --ignore-missing`.
 
+**Server only, no Telegram?** Run the daemon with just the client bridge,
+reached by the companion app and talon-node: see
+[docs/server-install.md](docs/server-install.md).
+
 > The binary runs the full interactive/agent CLI (`setup`, `start`, `chat`,
 > `doctor`, …) and supervises MCP children like any other install shape. The one
 > gap: a plugin shipping its MCP server as TypeScript source (`mcpServerPath`)
@@ -249,6 +256,7 @@ The `native` frontend turns the daemon into a **client bridge** — a versioned
 - **Local (desktop):** the app connects to a Talon on the same machine and launches one if needed (`TALON_FRONTEND_OVERRIDE=desktop`).
 - **Remote (mobile/LAN):** point the app at `host:port` + token; the bridge requires `Authorization: Bearer …` (or `?token=` on the SSE stream) whenever a token is set.
 - **Encryption:** off-loopback binds serve **HTTPS by default** with a persistent self-signed certificate (`~/.talon/keys/`); the companion pins its SHA-256 fingerprint on first connect and refuses any change afterwards. The daemon logs the fingerprint at startup and `/health` advertises it. Opt out (or in, on loopback) with `"tls": false` / `true` in the `native` section.
+- **From anywhere, certificate-only (Immich-style):** put your reverse proxy (Caddy, nginx, Traefik, Cloudflare Tunnel) in front with client-certificate auth; import the `.p12` in the companion, which also switches to your home-network address whenever it answers. Talon still authenticates with its token — see [docs/mtls.md](docs/mtls.md).
 
 The app **keeps itself up to date** — it watches this repo's releases and installs the next one itself (silently on a rooted/Shizuku phone, swap-and-relaunch on desktop; see [docs/companion-updates.md](docs/companion-updates.md)). It provides multi-chat history, live streaming with reasoning + tool-call visibility, per-chat model/effort/reset, and **settings sync** — read and change the daemon's own config (default model, display name, timezone, pulse/heartbeat/dream) and restart it. See [apps/companion/README.md](apps/companion/README.md).
 
@@ -529,7 +537,7 @@ Commands: `/model`, `/effort`, `/context`, `/status`, `/reset`, `/rename`, `/res
 
 ## Production
 
-**Docker:** the image runs the daemon on Bun (`bun src/index.ts`); `~/.talon` and `~/.claude` are bind-mounted from the host into the container's `HOME=/home/bun`.
+**Docker:** the image runs the daemon on Bun (`bun src/index.ts`); `~/.talon` and `~/.claude` are bind-mounted from the host into the container's `HOME=/home/bun`. Prebuilt images are on GHCR (`ghcr.io/dylanneve1/talon:latest`), and a first boot can be configured entirely from `TALON_*` environment variables — see **[docs/docker.md](docs/docker.md)** for the quick install, and **[docs/truenas.md](docs/truenas.md)** for a step-by-step TrueNAS SCALE install.
 
 ```bash
 docker compose up -d
@@ -537,6 +545,8 @@ docker compose up -d
 
 A Node 24 + tsx image is kept as a fallback for one release cycle: `docker build --build-arg RUNTIME=node -t talon .` (or set `build.args.RUNTIME` in `docker-compose.yml`). Mount paths are the same for both. See [`packaging/README.md`](packaging/README.md#docker-image) for the build's details.
 
+The image is also ready for the **Antigravity (`agy`) backend**: add `-f docker-compose.agy.yml` to mount `~/.gemini` and the `agy` binary (or bake the binary in with `AGY_DOWNLOAD_URL` + `AGY_SHA256`). See [docs/docker.md](docs/docker.md#antigravity-agy-backend).
+
 **Systemd:** unit file at `packaging/systemd/talon.service` — copy to `/etc/systemd/system/`, set `User=` and `WorkingDirectory=`, then `systemctl enable --now talon`.
 
 **Health endpoint:** `GET http://localhost:19876/health` returns JSON with uptime, memory, queue depth, active sessions, and last activity timestamp.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "talon-agent",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "description": "Multi-frontend AI agent with full tool access, streaming, cron jobs, and plugin system",
   "author": "Dylan Neve",
   "license": "MIT",

package/src/core/config/index.ts

@@ -192,6 +192,16 @@ const nativeConfigSchema = z
      * working zero-config).
      */
     tls: z.boolean().optional(),
+    /**
+     * The URL other devices should dial, when it isn't the bind address —
+     * a container (Docker, TrueNAS) or anything behind NAT or a proxy,
+     * where the bridge only sees its internal IP. Used for pairing links,
+     * node installers and `/mesh`. e.g. "https://truenas.lan:19880".
+     */
+    publicUrl: z
+      .string()
+      .regex(/^https?:\/\/\S+$/, "native.publicUrl must be an http(s) URL")
+      .optional(),
   })
   .strict();
 

package/src/core/mesh/links/bridge-links.ts

@@ -40,6 +40,11 @@ export type MeshBridgeInfo = {
   token?: string;
   /** TLS certificate SHA-256 (absent over plain HTTP). */
   fingerprint?: string;
+  /**
+   * The operator's `native.publicUrl`: what devices dial when the bind
+   * address isn't reachable as-is (containers, NAT, proxies).
+   */
+  publicUrl?: string;
 };
 
 export class BridgeLinks {
@@ -261,9 +266,10 @@ export class BridgeLinks {
   }
 
   /**
-   * The bridge base URL a NEW host should dial: an explicit override wins;
-   * otherwise derive from the bridge's bind. A wildcard bind maps to this
-   * host's first external IPv4; a loopback bind is unreachable from other
+   * The bridge base URL a NEW host should dial: an explicit override wins,
+   * then the configured `native.publicUrl`; otherwise derive from the
+   * bridge's bind. A wildcard bind maps to this host's first external IPv4;
+   * a loopback bind is unreachable from other
    * machines, so it's an error rather than a link that can't work.
    */
   private bridgeBaseUrl(
@@ -277,6 +283,10 @@ export class BridgeLinks {
       }
       return url;
     }
+    // Inside a container the "first external IPv4" is the container's own
+    // bridge-network address, which no phone can reach — the operator's
+    // public URL is the only right answer there.
+    if (info.publicUrl) return info.publicUrl.trim().replace(/\/+$/, "");
     let host = info.host;
     if (host === "0.0.0.0" || host === "::") {
       const external = firstExternalIPv4();

package/src/frontend/native/index.ts

@@ -185,6 +185,9 @@ export function createNativeFrontend(
         port: server.getPort(),
         ...(listen.token ? { token: listen.token } : {}),
         ...(fingerprint ? { fingerprint } : {}),
+        ...(config.native?.publicUrl
+          ? { publicUrl: config.native.publicUrl }
+          : {}),
       });
       await writeBridgeDiscovery({
         port: server.getPort(),