teleton 0.7.3 → 0.7.5

package/dist/cli/index.js

@@ -1,7 +1,10 @@
+import {
+  getModelsForProvider
+} from "../chunk-QOQWUUA4.js";
 import {
   TelegramUserClient,
   main
-} from "../chunk-BU453WX4.js";
+} from "../chunk-OGMVWDVU.js";
 import "../chunk-WIKM24GZ.js";
 import "../chunk-U7FQYCBQ.js";
 import {
@@ -13,7 +16,7 @@ import {
   readRawConfig,
   setNestedValue,
   writeRawConfig
-} from "../chunk-A4GCOHCE.js";
+} from "../chunk-G2LLMJXJ.js";
 import {
   ConfigSchema,
   DealsConfigSchema,
@@ -24,33 +27,31 @@ import {
   loadWallet,
   saveWallet,
   walletExists
-} from "../chunk-DAMCNMYL.js";
+} from "../chunk-AVDWXYQ7.js";
+import "../chunk-5UVXJMOX.js";
 import "../chunk-TSKJCWQQ.js";
 import {
   getErrorMessage
 } from "../chunk-XBE4JB7C.js";
-import "../chunk-5PLZ3KSO.js";
+import "../chunk-DMXTIRUW.js";
 import {
   getClaudeCodeApiKey,
-  isClaudeCodeTokenValid
-} from "../chunk-JQDLW7IE.js";
-import {
   getProviderMetadata,
   getSupportedProviders,
+  isClaudeCodeTokenValid,
   validateApiKeyFormat
-} from "../chunk-RMLQS3X6.js";
+} from "../chunk-CB2Y45HA.js";
 import "../chunk-OCLG5GKI.js";
-import "../chunk-RBU6JXD3.js";
-import "../chunk-UCN6TI25.js";
-import "../chunk-FNV5FF35.js";
-import "../chunk-XBKSS6DM.js";
+import "../chunk-2GLHOJ5C.js";
+import "../chunk-LCCVZ4D2.js";
+import "../chunk-VFA7QMCZ.js";
 import {
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-RO62LO6Z.js";
+} from "../chunk-YP25WTQK.js";
 import {
   fetchWithTimeout
-} from "../chunk-VAUJSSD3.js";
-import "../chunk-4DU3C27M.js";
+} from "../chunk-XQUHC3JZ.js";
+import "../chunk-R4YSJ4EY.js";
 import {
   TELETON_ROOT
 } from "../chunk-EYWNOHMJ.js";
@@ -360,12 +361,12 @@ import { join } from "path";
 import YAML from "yaml";
 import ora2 from "ora";
 var STEPS = [
-  { label: "Agent", desc: "Name & mode" },
-  { label: "Provider", desc: "LLM & API key" },
-  { label: "Telegram", desc: "Credentials" },
-  { label: "Config", desc: "Model & policies" },
-  { label: "Modules", desc: "Optional features" },
+  { label: "Agent", desc: "Name" },
+  { label: "Provider", desc: "LLM, key & model" },
+  { label: "Config", desc: "Policies" },
+  { label: "Modules", desc: "Optional API keys" },
   { label: "Wallet", desc: "TON blockchain" },
+  { label: "Telegram", desc: "Credentials" },
   { label: "Connect", desc: "Telegram auth" }
 ];
 function redraw(currentStep) {
@@ -377,114 +378,9 @@ function redraw(currentStep) {
 function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var MODEL_OPTIONS = {
-  anthropic: [
-    {
-      value: "claude-opus-4-6",
-      name: "Claude Opus 4.6",
-      description: "Most capable, 1M ctx, $5/M"
-    },
-    {
-      value: "claude-opus-4-5-20251101",
-      name: "Claude Opus 4.5",
-      description: "Previous gen, 200K ctx, $5/M"
-    },
-    { value: "claude-sonnet-4-0", name: "Claude Sonnet 4", description: "Balanced, $3/M" },
-    {
-      value: "claude-haiku-4-5-20251001",
-      name: "Claude Haiku 4.5",
-      description: "Fast & cheap, $1/M"
-    },
-    {
-      value: "claude-haiku-4-5-20251001",
-      name: "Claude Haiku 4.5",
-      description: "Fast & cheap, $1/M"
-    }
-  ],
-  openai: [
-    { value: "gpt-5", name: "GPT-5", description: "Most capable, 400K ctx, $1.25/M" },
-    { value: "gpt-4o", name: "GPT-4o", description: "Balanced, 128K ctx, $2.50/M" },
-    { value: "gpt-4.1", name: "GPT-4.1", description: "1M ctx, $2/M" },
-    { value: "gpt-4.1-mini", name: "GPT-4.1 Mini", description: "1M ctx, cheap, $0.40/M" },
-    { value: "o3", name: "o3", description: "Reasoning, 200K ctx, $2/M" }
-  ],
-  google: [
-    { value: "gemini-2.5-flash", name: "Gemini 2.5 Flash", description: "Fast, 1M ctx, $0.30/M" },
-    {
-      value: "gemini-2.5-pro",
-      name: "Gemini 2.5 Pro",
-      description: "Most capable, 1M ctx, $1.25/M"
-    },
-    { value: "gemini-2.0-flash", name: "Gemini 2.0 Flash", description: "Cheap, 1M ctx, $0.10/M" }
-  ],
-  xai: [
-    { value: "grok-4-fast", name: "Grok 4 Fast", description: "Vision, 2M ctx, $0.20/M" },
-    { value: "grok-4", name: "Grok 4", description: "Reasoning, 256K ctx, $3/M" },
-    { value: "grok-3", name: "Grok 3", description: "Stable, 131K ctx, $3/M" }
-  ],
-  groq: [
-    {
-      value: "meta-llama/llama-4-maverick-17b-128e-instruct",
-      name: "Llama 4 Maverick",
-      description: "Vision, 131K ctx, $0.20/M"
-    },
-    { value: "qwen/qwen3-32b", name: "Qwen3 32B", description: "Reasoning, 131K ctx, $0.29/M" },
-    {
-      value: "deepseek-r1-distill-llama-70b",
-      name: "DeepSeek R1 70B",
-      description: "Reasoning, 131K ctx, $0.75/M"
-    },
-    {
-      value: "llama-3.3-70b-versatile",
-      name: "Llama 3.3 70B",
-      description: "General purpose, 131K ctx, $0.59/M"
-    }
-  ],
-  openrouter: [
-    { value: "anthropic/claude-opus-4.5", name: "Claude Opus 4.5", description: "200K ctx, $5/M" },
-    { value: "openai/gpt-5", name: "GPT-5", description: "400K ctx, $1.25/M" },
-    { value: "google/gemini-2.5-flash", name: "Gemini 2.5 Flash", description: "1M ctx, $0.30/M" },
-    {
-      value: "deepseek/deepseek-r1",
-      name: "DeepSeek R1",
-      description: "Reasoning, 64K ctx, $0.70/M"
-    },
-    { value: "x-ai/grok-4", name: "Grok 4", description: "256K ctx, $3/M" }
-  ],
-  moonshot: [
-    { value: "kimi-k2.5", name: "Kimi K2.5", description: "Free, 256K ctx, multimodal" },
-    {
-      value: "kimi-k2-thinking",
-      name: "Kimi K2 Thinking",
-      description: "Free, 256K ctx, reasoning"
-    }
-  ],
-  mistral: [
-    {
-      value: "devstral-small-2507",
-      name: "Devstral Small",
-      description: "Coding, 128K ctx, $0.10/M"
-    },
-    {
-      value: "devstral-medium-latest",
-      name: "Devstral Medium",
-      description: "Coding, 262K ctx, $0.40/M"
-    },
-    {
-      value: "mistral-large-latest",
-      name: "Mistral Large",
-      description: "General, 128K ctx, $2/M"
-    },
-    {
-      value: "magistral-small",
-      name: "Magistral Small",
-      description: "Reasoning, 128K ctx, $0.50/M"
-    }
-  ]
-};
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-BVVD2PR6.js");
+    const { SetupServer } = await import("../setup-server-G7UG2DI3.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -539,9 +435,7 @@ ${blue2}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25
   }
 }
 async function runInteractiveOnboarding(options, prompter) {
-  let selectedFlow = "quick";
   let selectedProvider = "anthropic";
-  const dealsEnabled = true;
   let selectedModel = "";
   let apiKey = "";
   let apiId = 0;
@@ -549,16 +443,16 @@ async function runInteractiveOnboarding(options, prompter) {
   let phone = "";
   let userId = 0;
   let tonapiKey;
+  let toncenterApiKey;
   let tavilyApiKey;
   let botToken;
   let botUsername;
-  let dmPolicy = "open";
-  let groupPolicy = "open";
+  let dmPolicy = "admin-only";
+  let groupPolicy = "admin-only";
   let requireMention = true;
   let maxAgenticIterations = "5";
+  let execMode = "off";
   let cocoonInstance = 1e4;
-  let buyMaxFloorPercent = 100;
-  let sellMinFloorPercent = 105;
   console.clear();
   console.log();
   console.log(wizardFrame(0, STEPS));
@@ -585,7 +479,8 @@ async function runInteractiveOnboarding(options, prompter) {
   spinner.start(DIM("Creating workspace..."));
   const workspace = await ensureWorkspace({
     workspaceDir: options.workspace,
-    ensureTemplates: true
+    ensureTemplates: true,
+    silent: true
   });
   const isNew = isNewWorkspace(workspace);
   spinner.succeed(DIM(`Workspace: ${workspace.root}`));
@@ -613,20 +508,7 @@ async function runInteractiveOnboarding(options, prompter) {
     const updated = identity.replace("[Your name - pick one or ask your human]", agentName.trim());
     writeFileSync(workspace.identityPath, updated, "utf-8");
   }
-  selectedFlow = await select({
-    message: "Installation mode",
-    default: "quick",
-    theme: inquirerTheme,
-    choices: [
-      {
-        value: "quick",
-        name: "\u26A1 QuickStart",
-        description: "Minimal configuration (recommended)"
-      },
-      { value: "advanced", name: "\u2699  Advanced", description: "Detailed configuration" }
-    ]
-  });
-  STEPS[0].value = `${agentName} (${selectedFlow})`;
+  STEPS[0].value = agentName;
   redraw(1);
   const providers = getSupportedProviders();
   selectedProvider = await select({
@@ -776,63 +658,9 @@ Get it at: ${providerMeta.consoleUrl}`,
     const maskedKey = apiKey.length > 10 ? apiKey.slice(0, 6) + "..." + apiKey.slice(-4) : "***";
     STEPS[1].value = `${providerMeta.displayName}  ${DIM(maskedKey)}`;
   }
-  redraw(2);
-  noteBox(
-    "You need Telegram credentials from https://my.telegram.org/apps\nCreate an application and note the API ID and API Hash",
-    "Telegram",
-    TON
-  );
-  const envApiId = process.env.TELETON_TG_API_ID;
-  const envApiHash = process.env.TELETON_TG_API_HASH;
-  const envPhone = process.env.TELETON_TG_PHONE;
-  const apiIdStr = options.apiId ? options.apiId.toString() : await input({
-    message: envApiId ? "API ID (from env)" : "API ID (from my.telegram.org)",
-    default: envApiId,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || isNaN(parseInt(value))) return "Invalid API ID (must be a number)";
-      return true;
-    }
-  });
-  apiId = parseInt(apiIdStr);
-  apiHash = options.apiHash ? options.apiHash : await input({
-    message: envApiHash ? "API Hash (from env)" : "API Hash (from my.telegram.org)",
-    default: envApiHash,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || value.length < 10) return "Invalid API Hash";
-      return true;
-    }
-  });
-  phone = options.phone ? options.phone : await input({
-    message: envPhone ? "Phone number (from env)" : "Phone number (international format)",
-    default: envPhone,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || !value.startsWith("+")) return "Must start with +";
-      return true;
-    }
-  });
-  noteBox(
-    "To get your Telegram User ID:\n1. Open @userinfobot on Telegram\n2. Send /start\n3. Note the ID displayed",
-    "User ID",
-    TON
-  );
-  const userIdStr = options.userId ? options.userId.toString() : await input({
-    message: "Your Telegram User ID (for admin rights)",
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || isNaN(parseInt(value))) return "Invalid User ID";
-      return true;
-    }
-  });
-  userId = parseInt(userIdStr);
-  STEPS[2].value = `${phone} (ID: ${userId})`;
-  redraw(3);
   selectedModel = providerMeta.defaultModel;
-  if (selectedFlow === "advanced" && selectedProvider !== "cocoon" && selectedProvider !== "local") {
-    const modelKey = selectedProvider === "claude-code" ? "anthropic" : selectedProvider;
-    const providerModels = MODEL_OPTIONS[modelKey] || [];
+  if (selectedProvider !== "cocoon" && selectedProvider !== "local") {
+    const providerModels = getModelsForProvider(selectedProvider);
     const modelChoices = [
       ...providerModels,
       { value: "__custom__", name: "Custom", description: "Enter a model ID manually" }
@@ -853,78 +681,93 @@ Get it at: ${providerMeta.consoleUrl}`,
     } else {
       selectedModel = modelChoice;
     }
-    dmPolicy = await select({
-      message: "DM policy (private messages)",
-      default: "open",
-      theme: inquirerTheme,
-      choices: [
-        { value: "open", name: "Open", description: "Reply to everyone" },
-        { value: "allowlist", name: "Allowlist", description: "Only specific users" },
-        { value: "disabled", name: "Disabled", description: "No DM replies" }
-      ]
-    });
-    groupPolicy = await select({
-      message: "Group policy",
-      default: "open",
-      theme: inquirerTheme,
-      choices: [
-        { value: "open", name: "Open", description: "Reply in all groups" },
-        { value: "allowlist", name: "Allowlist", description: "Only specific groups" },
-        { value: "disabled", name: "Disabled", description: "No group replies" }
-      ]
-    });
-    requireMention = await confirm({
-      message: "Require @mention in groups?",
-      default: true,
-      theme: inquirerTheme
-    });
-    maxAgenticIterations = await input({
-      message: "Max agentic iterations (tool call loops per message)",
-      default: "5",
-      theme: inquirerTheme,
-      validate: (v) => {
-        const n = parseInt(v, 10);
-        return !isNaN(n) && n >= 1 && n <= 50 ? true : "Must be 1\u201350";
-      }
-    });
     const modelLabel = providerModels.find((m) => m.value === selectedModel)?.name ?? selectedModel;
-    STEPS[3].value = `${modelLabel}, ${dmPolicy}/${groupPolicy}`;
-  } else {
-    STEPS[3].value = `${selectedModel} (defaults)`;
+    STEPS[1].value = `${STEPS[1].value ?? providerMeta.displayName}, ${modelLabel}`;
   }
-  redraw(4);
-  const extras = [];
-  if (dealsEnabled) {
-    const customizeStrategy = await confirm({
-      message: `Customize trading thresholds? ${DIM("(default: buy \u2264 floor, sell \u2265 floor +5%)")}`,
-      default: false,
-      theme: inquirerTheme
-    });
-    if (customizeStrategy) {
-      const buyInput = await input({
-        message: "Max buy price (% of floor price)",
-        default: "100",
-        theme: inquirerTheme,
-        validate: (v) => {
-          const n = parseInt(v, 10);
-          return !isNaN(n) && n >= 50 && n <= 150 ? true : "Must be 50\u2013150";
-        }
-      });
-      buyMaxFloorPercent = parseInt(buyInput, 10);
-      const sellInput = await input({
-        message: "Min sell price (% of floor price)",
-        default: "105",
-        theme: inquirerTheme,
-        validate: (v) => {
-          const n = parseInt(v, 10);
-          return !isNaN(n) && n >= 100 && n <= 200 ? true : "Must be 100\u2013200";
-        }
-      });
-      sellMinFloorPercent = parseInt(sellInput, 10);
+  redraw(2);
+  noteBox(
+    "To get your Telegram User ID:\n1. Open @userinfobot on Telegram\n2. Send /start\n3. Note the ID displayed",
+    "User ID",
+    TON
+  );
+  const userIdStr = options.userId ? options.userId.toString() : await input({
+    message: "Your Telegram User ID (for admin rights)",
+    theme: inquirerTheme,
+    validate: (value) => {
+      if (!value || isNaN(parseInt(value))) return "Invalid User ID";
+      return true;
+    }
+  });
+  userId = parseInt(userIdStr);
+  dmPolicy = await select({
+    message: "DM policy (private messages)",
+    default: "admin-only",
+    theme: inquirerTheme,
+    choices: [
+      {
+        value: "admin-only",
+        name: "Admin Only",
+        description: "Only admins can DM the agent"
+      },
+      { value: "allowlist", name: "Allowlist", description: "Only specific users" },
+      { value: "open", name: "Open", description: "Reply to everyone" },
+      { value: "disabled", name: "Disabled", description: "Ignore all DMs" }
+    ]
+  });
+  groupPolicy = await select({
+    message: "Group policy",
+    default: "admin-only",
+    theme: inquirerTheme,
+    choices: [
+      {
+        value: "admin-only",
+        name: "Admin Only",
+        description: "Only admins can trigger the agent"
+      },
+      { value: "allowlist", name: "Allowlist", description: "Only specific groups" },
+      { value: "open", name: "Open", description: "Reply in all groups" },
+      { value: "disabled", name: "Disabled", description: "Ignore all group messages" }
+    ]
+  });
+  requireMention = await confirm({
+    message: "Require @mention in groups?",
+    default: true,
+    theme: inquirerTheme
+  });
+  maxAgenticIterations = await input({
+    message: "Max agentic iterations (tool call loops per message)",
+    default: "5",
+    theme: inquirerTheme,
+    validate: (v) => {
+      const n = parseInt(v, 10);
+      return !isNaN(n) && n >= 1 && n <= 50 ? true : "Must be 1\u201350";
     }
+  });
+  execMode = await select({
+    message: "Coding Agent (system execution)",
+    choices: [
+      { value: "off", name: "Disabled", description: "No system execution capability" },
+      {
+        value: "yolo",
+        name: "YOLO Mode",
+        description: "Full system access \u2014 STRONGLY RECOMMENDED to use a dedicated VPS"
+      }
+    ],
+    default: "off",
+    theme: inquirerTheme
+  });
+  STEPS[2].value = `${dmPolicy}/${groupPolicy}`;
+  redraw(3);
+  const extras = [];
+  const setupBot = await confirm({
+    message: `Add a Telegram bot token? ${DIM("(recommended \u2014 enables deals & inline buttons)")}`,
+    default: true,
+    theme: inquirerTheme
+  });
+  if (setupBot) {
     noteBox(
       "Create a bot with @BotFather on Telegram:\n1. Send /newbot and follow the instructions\n2. Copy the bot token\n3. Enable inline mode: /setinline on the bot",
-      "Deals Bot",
+      "Bot Token",
       TON
     );
     const tokenInput = await password({
@@ -945,6 +788,7 @@ Get it at: ${providerMeta.consoleUrl}`,
         botToken = tokenInput;
         botUsername = data.result.username;
         spinner.succeed(DIM(`Bot verified: @${botUsername}`));
+        extras.push("Bot");
       }
     } catch {
       spinner.warn(DIM("Could not validate bot token (network error) \u2014 saving anyway"));
@@ -958,17 +802,17 @@ Get it at: ${providerMeta.consoleUrl}`,
         }
       });
       botUsername = usernameInput;
+      extras.push("Bot");
     }
-    extras.push("Deals");
   }
   const setupTonapi = await confirm({
-    message: `Add a TonAPI key? ${DIM("(optional, recommended for 10x rate limits)")}`,
+    message: `Add a TonAPI key? ${DIM("(strongly recommended for TON features)")}`,
     default: false,
     theme: inquirerTheme
   });
   if (setupTonapi) {
     noteBox(
-      "Without key: 1 req/s (you will hit rate limits)\nWith free key: 10 req/s (recommended)\n\nOpen @tonapibot on Telegram \u2192 tap the mini app \u2192 generate a server key",
+      "Blockchain data \u2014 jettons, NFTs, prices, transaction history.\nWithout key: 1 req/s (you WILL hit rate limits)\nWith free key: 5 req/s\n\nOpen @tonapibot on Telegram \u2192 mini app \u2192 generate a server key",
       "TonAPI",
       TON
     );
@@ -983,6 +827,28 @@ Get it at: ${providerMeta.consoleUrl}`,
     tonapiKey = keyInput;
     extras.push("TonAPI");
   }
+  const setupToncenter = await confirm({
+    message: `Add a TonCenter API key? ${DIM("(optional, dedicated RPC endpoint)")}`,
+    default: false,
+    theme: inquirerTheme
+  });
+  if (setupToncenter) {
+    noteBox(
+      "Blockchain RPC \u2014 send transactions, check balances.\nWithout key: falls back to ORBS network (decentralized, slower)\nWith free key: dedicated RPC endpoint\n\nGo to https://toncenter.com \u2192 get a free API key (instant, no signup)",
+      "TonCenter",
+      TON
+    );
+    const keyInput = await input({
+      message: "TonCenter API key",
+      theme: inquirerTheme,
+      validate: (v) => {
+        if (!v || v.length < 10) return "Key too short";
+        return true;
+      }
+    });
+    toncenterApiKey = keyInput;
+    extras.push("TonCenter");
+  }
   const setupTavily = await confirm({
     message: `Enable web search? ${DIM("(free Tavily key \u2014 1,000 req/month)")}`,
     default: false,
@@ -1005,8 +871,8 @@ Get it at: ${providerMeta.consoleUrl}`,
     tavilyApiKey = keyInput;
     extras.push("Tavily");
   }
-  STEPS[4].value = extras.length ? extras.join(", ") : "defaults";
-  redraw(5);
+  STEPS[3].value = extras.length ? extras.join(", ") : "defaults";
+  redraw(4);
   let wallet;
   const existingWallet = walletExists() ? loadWallet() : null;
   if (existingWallet) {
@@ -1047,10 +913,38 @@ Get it at: ${providerMeta.consoleUrl}`,
       spinner.succeed(DIM("New TON wallet generated"));
     }
   } else {
-    spinner.start(DIM("Generating TON wallet..."));
-    wallet = await generateWallet();
-    saveWallet(wallet);
-    spinner.succeed(DIM("TON wallet generated"));
+    const walletAction = await select({
+      message: "TON Wallet",
+      default: "generate",
+      theme: inquirerTheme,
+      choices: [
+        {
+          value: "generate",
+          name: "Generate new wallet",
+          description: "Create a fresh TON wallet"
+        },
+        { value: "import", name: "Import from mnemonic", description: "Restore from 24-word seed" }
+      ]
+    });
+    if (walletAction === "import") {
+      const mnemonicInput = await input({
+        message: "Enter your 24-word mnemonic (space-separated)",
+        theme: inquirerTheme,
+        validate: (value = "") => {
+          const words = value.trim().split(/\s+/);
+          return words.length === 24 ? true : `Expected 24 words, got ${words.length}`;
+        }
+      });
+      spinner.start(DIM("Importing wallet..."));
+      wallet = await importWallet(mnemonicInput.trim().split(/\s+/));
+      saveWallet(wallet);
+      spinner.succeed(DIM(`Wallet imported: ${wallet.address}`));
+    } else {
+      spinner.start(DIM("Generating TON wallet..."));
+      wallet = await generateWallet();
+      saveWallet(wallet);
+      spinner.succeed(DIM("TON wallet generated"));
+    }
   }
   if (!existingWallet || wallet !== existingWallet) {
     const W = FRAME_WIDTH;
@@ -1093,7 +987,45 @@ Get it at: ${providerMeta.consoleUrl}`,
       theme: inquirerTheme
     });
   }
-  STEPS[5].value = `${wallet.address.slice(0, 8)}...${wallet.address.slice(-4)}`;
+  STEPS[4].value = `${wallet.address.slice(0, 8)}...${wallet.address.slice(-4)}`;
+  redraw(5);
+  noteBox(
+    'To get your API credentials:\n\n  1. Go to https://my.telegram.org/apps\n  2. Log in with your phone number\n  3. Click "API development tools"\n  4. Create an application (any name/short name works)\n  5. Copy the API ID (number) and API Hash (hex string)\n\n\u26A0 Do NOT use a VPN \u2014 Telegram will block the login page.',
+    "Telegram",
+    TON
+  );
+  const envApiId = process.env.TELETON_TG_API_ID;
+  const envApiHash = process.env.TELETON_TG_API_HASH;
+  const envPhone = process.env.TELETON_TG_PHONE;
+  const apiIdStr = options.apiId ? options.apiId.toString() : await input({
+    message: envApiId ? "API ID (from env)" : "API ID (from my.telegram.org)",
+    default: envApiId,
+    theme: inquirerTheme,
+    validate: (value) => {
+      if (!value || isNaN(parseInt(value))) return "Invalid API ID (must be a number)";
+      return true;
+    }
+  });
+  apiId = parseInt(apiIdStr);
+  apiHash = options.apiHash ? options.apiHash : await input({
+    message: envApiHash ? "API Hash (from env)" : "API Hash (from my.telegram.org)",
+    default: envApiHash,
+    theme: inquirerTheme,
+    validate: (value) => {
+      if (!value || value.length < 10) return "Invalid API Hash";
+      return true;
+    }
+  });
+  phone = options.phone ? options.phone : await input({
+    message: envPhone ? "Phone number (from env)" : "Phone number (international format)",
+    default: envPhone,
+    theme: inquirerTheme,
+    validate: (value) => {
+      if (!value || !value.startsWith("+")) return "Must start with +";
+      return true;
+    }
+  });
+  STEPS[5].value = phone;
   redraw(6);
   const config = {
     meta: {
@@ -1141,16 +1073,11 @@ Get it at: ${providerMeta.consoleUrl}`,
     },
     storage: {
       sessions_file: `${workspace.root}/sessions.json`,
-      pairing_file: `${workspace.root}/pairing.json`,
       memory_file: `${workspace.root}/memory.json`,
       history_limit: 100
     },
     embedding: { provider: "local" },
-    deals: DealsConfigSchema.parse({
-      enabled: dealsEnabled,
-      buy_max_floor_percent: buyMaxFloorPercent,
-      sell_min_floor_percent: sellMinFloorPercent
-    }),
+    deals: DealsConfigSchema.parse({ enabled: !!botToken }),
     webui: {
       enabled: false,
       port: 7777,
@@ -1175,9 +1102,19 @@ Get it at: ${providerMeta.consoleUrl}`,
     },
     logging: { level: "info", pretty: true },
     mcp: { servers: {} },
+    capabilities: {
+      exec: {
+        mode: execMode,
+        scope: "admin-only",
+        allowlist: [],
+        limits: { timeout: 120, max_output: 5e4 },
+        audit: { log_commands: true }
+      }
+    },
     plugins: {},
     ...selectedProvider === "cocoon" ? { cocoon: { port: cocoonInstance } } : {},
     tonapi_key: tonapiKey,
+    toncenter_api_key: toncenterApiKey,
     tavily_api_key: tavilyApiKey
   };
   spinner.start(DIM("Saving configuration..."));
@@ -1284,9 +1221,9 @@ async function runNonInteractiveOnboarding(options, prompter) {
       phone: options.phone,
       session_name: "teleton_session",
       session_path: workspace.sessionPath,
-      dm_policy: "open",
+      dm_policy: "admin-only",
       allow_from: [],
-      group_policy: "open",
+      group_policy: "admin-only",
       group_allow_from: [],
       require_mention: true,
       max_message_length: TELEGRAM_MAX_MESSAGE_LENGTH,
@@ -1302,7 +1239,6 @@ async function runNonInteractiveOnboarding(options, prompter) {
     },
     storage: {
       sessions_file: `${workspace.root}/sessions.json`,
-      pairing_file: `${workspace.root}/pairing.json`,
       memory_file: `${workspace.root}/memory.json`,
       history_limit: 100
     },
@@ -1331,6 +1267,15 @@ async function runNonInteractiveOnboarding(options, prompter) {
       skip_unlimited_providers: false
     },
     logging: { level: "info", pretty: true },
+    capabilities: {
+      exec: {
+        mode: "off",
+        scope: "admin-only",
+        allowlist: [],
+        limits: { timeout: 120, max_output: 5e4 },
+        audit: { log_commands: true }
+      }
+    },
     mcp: { servers: {} },
     plugins: {},
     tavily_api_key: options.tavilyApiKey