teleton 0.8.0 → 0.8.2

package/dist/{chunk-PHSAHTK4.js → chunk-YOSUPUAJ.js}

@@ -1,6 +1,6 @@
 import {
   createLogger
-} from "./chunk-RCMD3U65.js";
+} from "./chunk-NQ6FZKCE.js";
 
 // src/config/providers.ts
 var PROVIDER_REGISTRY = {
@@ -30,12 +30,12 @@ var PROVIDER_REGISTRY = {
   },
   openai: {
     id: "openai",
-    displayName: "OpenAI (GPT-4o)",
+    displayName: "OpenAI (GPT-5.4)",
     envVar: "OPENAI_API_KEY",
     keyPrefix: "sk-",
     keyHint: "sk-proj-...",
     consoleUrl: "https://platform.openai.com/api-keys",
-    defaultModel: "gpt-4o",
+    defaultModel: "gpt-5.4",
     utilityModel: "gpt-4o-mini",
     toolLimit: 128,
     piAiProvider: "openai"
@@ -207,13 +207,17 @@ function validateApiKeyFormat(provider, key) {
 }
 
 // src/providers/claude-code-credentials.ts
-import { readFileSync, existsSync } from "fs";
+import { readFileSync, writeFileSync, existsSync } from "fs";
 import { execSync } from "child_process";
 import { homedir } from "os";
 import { join } from "path";
 var log = createLogger("ClaudeCodeCreds");
+var OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
+var OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+var OAUTH_SCOPES = "user:profile user:inference user:sessions:claude_code user:mcp_servers";
 var cachedToken = null;
 var cachedExpiresAt = 0;
+var cachedRefreshToken = null;
 function getClaudeConfigDir() {
   return process.env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude");
 }
@@ -261,7 +265,8 @@ function extractToken(creds) {
   }
   return {
     token: oauth.accessToken,
-    expiresAt: oauth.expiresAt ?? 0
+    expiresAt: oauth.expiresAt ?? 0,
+    refreshToken: oauth.refreshToken
   };
 }
 function getClaudeCodeApiKey(fallbackKey) {
@@ -274,6 +279,7 @@ function getClaudeCodeApiKey(fallbackKey) {
     if (extracted) {
       cachedToken = extracted.token;
       cachedExpiresAt = extracted.expiresAt;
+      cachedRefreshToken = extracted.refreshToken ?? null;
       log.debug("Claude Code credentials loaded successfully");
       return cachedToken;
     }
@@ -284,20 +290,82 @@ function getClaudeCodeApiKey(fallbackKey) {
   }
   throw new Error("No Claude Code credentials found. Run 'claude login' or set api_key in config.");
 }
-function refreshClaudeCodeApiKey() {
+async function performOAuthRefresh(refreshToken) {
+  try {
+    const res = await fetch(OAUTH_TOKEN_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        grant_type: "refresh_token",
+        refresh_token: refreshToken,
+        client_id: OAUTH_CLIENT_ID,
+        scope: OAUTH_SCOPES
+      })
+    });
+    if (!res.ok) {
+      log.warn(`OAuth token refresh failed: ${res.status} ${res.statusText}`);
+      return null;
+    }
+    const data = await res.json();
+    if (!data.access_token || !data.expires_in) {
+      log.warn("OAuth token refresh: unexpected response shape");
+      return null;
+    }
+    const newExpiresAt = Date.now() + data.expires_in * 1e3;
+    const newRefreshToken = data.refresh_token ?? refreshToken;
+    const filePath = getCredentialsFilePath();
+    try {
+      const existing = existsSync(filePath) ? JSON.parse(readFileSync(filePath, "utf-8")) : {};
+      const updated = {
+        ...existing,
+        claudeAiOauth: {
+          ...existing.claudeAiOauth,
+          accessToken: data.access_token,
+          refreshToken: newRefreshToken,
+          expiresAt: newExpiresAt
+        }
+      };
+      writeFileSync(filePath, JSON.stringify(updated, null, 2), { mode: 384 });
+    } catch (e) {
+      log.warn({ err: e }, "Failed to persist refreshed OAuth credentials to disk");
+    }
+    cachedToken = data.access_token;
+    cachedExpiresAt = newExpiresAt;
+    cachedRefreshToken = newRefreshToken;
+    log.info("Claude Code OAuth token refreshed successfully");
+    return cachedToken;
+  } catch (e) {
+    log.warn({ err: e }, "OAuth token refresh request failed");
+    return null;
+  }
+}
+async function refreshClaudeCodeApiKey() {
   cachedToken = null;
   cachedExpiresAt = 0;
+  if (!cachedRefreshToken) {
+    const creds2 = readCredentials();
+    if (creds2) {
+      const extracted = extractToken(creds2);
+      cachedRefreshToken = extracted?.refreshToken ?? null;
+    }
+  }
+  if (cachedRefreshToken) {
+    const refreshed = await performOAuthRefresh(cachedRefreshToken);
+    if (refreshed) return refreshed;
+    log.warn("OAuth refresh failed, falling back to disk read");
+  }
   const creds = readCredentials();
   if (creds) {
     const extracted = extractToken(creds);
     if (extracted) {
       cachedToken = extracted.token;
       cachedExpiresAt = extracted.expiresAt;
+      cachedRefreshToken = extracted.refreshToken ?? null;
       log.info("Claude Code credentials refreshed from disk");
       return cachedToken;
     }
   }
-  log.warn("Failed to refresh Claude Code credentials from disk");
+  log.warn("Failed to refresh Claude Code credentials");
   return null;
 }
 function isClaudeCodeTokenValid() {

package/dist/cli/index.js

@@ -1,11 +1,14 @@
+import {
+  ensureTlsCert
+} from "../chunk-5SEMA47R.js";
 import {
   getModelsForProvider
-} from "../chunk-OJCLKU5Z.js";
+} from "../chunk-WFTC3JJW.js";
 import {
   TelegramUserClient,
   main
-} from "../chunk-H36RFKRI.js";
-import "../chunk-WIKM24GZ.js";
+} from "../chunk-2IZU3REP.js";
+import "../chunk-H7MFXJZK.js";
 import {
   CONFIGURABLE_KEYS,
   configExists,
@@ -15,7 +18,7 @@ import {
   readRawConfig,
   setNestedValue,
   writeRawConfig
-} from "../chunk-RQBAMUCV.js";
+} from "../chunk-GGXJLMOH.js";
 import {
   ConfigSchema,
   DealsConfigSchema,
@@ -26,27 +29,28 @@ import {
   loadWallet,
   saveWallet,
   walletExists
-} from "../chunk-JHYZYFZJ.js";
-import "../chunk-TVRZJIZX.js";
-import "../chunk-7TECSLJ4.js";
+} from "../chunk-7YKSXOQQ.js";
+import "../chunk-55SKE6YH.js";
+import "../chunk-W25Z7CM6.js";
 import {
   getErrorMessage
-} from "../chunk-XBE4JB7C.js";
-import "../chunk-QVBSUYVX.js";
+} from "../chunk-3UFPFWYP.js";
+import "../chunk-7TECSLJ4.js";
+import "../chunk-J73TA3UM.js";
 import {
   getClaudeCodeApiKey,
   getProviderMetadata,
   getSupportedProviders,
   isClaudeCodeTokenValid,
   validateApiKeyFormat
-} from "../chunk-PHSAHTK4.js";
-import "../chunk-P36I6OIV.js";
-import "../chunk-SD4NLLYG.js";
-import "../chunk-U56QTM46.js";
+} from "../chunk-YOSUPUAJ.js";
+import "../chunk-LC4TV3KL.js";
+import "../chunk-VYKW7FMV.js";
+import "../chunk-HEDJCLA6.js";
 import "../chunk-VFA7QMCZ.js";
 import {
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-IJBWWQE4.js";
+} from "../chunk-C4NKJT2Z.js";
 import {
   fetchWithTimeout
 } from "../chunk-XQUHC3JZ.js";
@@ -54,8 +58,8 @@ import "../chunk-R4YSJ4EY.js";
 import {
   TELETON_ROOT
 } from "../chunk-EYWNOHMJ.js";
-import "../chunk-RCMD3U65.js";
-import "../chunk-NUGDTPE4.js";
+import "../chunk-NQ6FZKCE.js";
+import "../chunk-4L66JHQE.js";
 import "../chunk-3RG5ZIWI.js";
 
 // src/cli/index.ts
@@ -379,7 +383,7 @@ function sleep(ms) {
 }
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-QXED3D2L.js");
+    const { SetupServer } = await import("../setup-server-IZBUOJRU.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -402,9 +406,8 @@ ${blue2}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25
 `);
     const server = new SetupServer(port);
     await server.start();
-    process.on("SIGINT", async () => {
-      await server.stop();
-      process.exit(0);
+    process.on("SIGINT", () => {
+      void server.stop().then(() => process.exit(0));
     });
     await server.waitForLaunch();
     console.log("\n  Launch signal received \u2014 stopping setup server");
@@ -1110,6 +1113,7 @@ Get it at: ${providerMeta.consoleUrl}`,
         audit: { log_commands: true }
       }
     },
+    ton_proxy: { enabled: false, port: 8080 },
     plugins: {},
     ...selectedProvider === "cocoon" ? { cocoon: { port: cocoonInstance } } : {},
     tonapi_key: tonapiKey,
@@ -1275,6 +1279,7 @@ async function runNonInteractiveOnboarding(options, prompter) {
         audit: { log_commands: true }
       }
     },
+    ton_proxy: { enabled: false, port: 8080 },
     mcp: { servers: {} },
     plugins: {},
     tavily_api_key: options.tavilyApiKey
@@ -1683,7 +1688,7 @@ function ensureMcpSection(raw) {
   return mcp2.servers;
 }
 function deriveServerName(pkg) {
-  const unscoped = pkg.includes("/") ? pkg.split("/").pop() : pkg;
+  const unscoped = pkg.includes("/") ? pkg.split("/").pop() ?? pkg : pkg;
   return unscoped.replace(/^server-/, "").replace(/^mcp-server-/, "").replace(/^mcp-/, "");
 }
 async function mcpAddCommand(pkg, extraArgs, options) {
@@ -1889,6 +1894,21 @@ Available: set, get, list, unset`);
   }
 }
 
+// src/cli/commands/api.ts
+import { createHash, randomBytes } from "crypto";
+async function apiRotateKeyCommand(options) {
+  const key = "tltn_" + randomBytes(32).toString("base64url");
+  const hash = createHash("sha256").update(key).digest("hex");
+  const raw = readRawConfig(options.config);
+  setNestedValue(raw, "api.key_hash", hash);
+  writeRawConfig(raw, options.config);
+  console.log(key);
+}
+async function apiFingerprintCommand() {
+  const tls = await ensureTlsCert(TELETON_ROOT);
+  console.log(tls.fingerprint);
+}
+
 // src/cli/index.ts
 import { readFileSync as readFileSync3, existsSync as existsSync3 } from "fs";
 import { dirname, join as join3 } from "path";
@@ -1927,7 +1947,7 @@ program.command("setup").description("Interactive wizard to set up Teleton").opt
     process.exit(1);
   }
 });
-program.command("start").description("Start the Teleton agent").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).option("--webui", "Enable WebUI server (overrides config)").option("--webui-port <port>", "WebUI server port (default: 7777)").action(async (options) => {
+program.command("start").description("Start the Teleton agent").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).option("--webui", "Enable WebUI server (overrides config)").option("--webui-port <port>", "WebUI server port (default: 7777)").option("--api", "Enable Management API server (overrides config)").option("--api-port <port>", "Management API port (default: 7778)").option("--json-credentials", "Output API credentials as JSON to stdout on start").action(async (options) => {
   try {
     if (!configExists(options.config)) {
       console.error("\u274C Configuration not found");
@@ -1941,6 +1961,15 @@ program.command("start").description("Start the Teleton agent").option("-c, --co
     if (options.webuiPort) {
       process.env.TELETON_WEBUI_PORT = options.webuiPort;
     }
+    if (options.api) {
+      process.env.TELETON_API_ENABLED = "true";
+    }
+    if (options.apiPort) {
+      process.env.TELETON_API_PORT = options.apiPort;
+    }
+    if (options.jsonCredentials) {
+      process.env.TELETON_JSON_CREDENTIALS = "true";
+    }
     await main(options.config);
   } catch (error) {
     console.error("Error:", getErrorMessage(error));
@@ -1995,6 +2024,22 @@ program.command("config").description("Manage configuration keys (set, get, list
     process.exit(1);
   }
 });
+program.command("api-rotate-key").description("Generate a new Management API key").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).action(async (options) => {
+  try {
+    await apiRotateKeyCommand({ config: options.config });
+  } catch (error) {
+    console.error("Error:", getErrorMessage(error));
+    process.exit(1);
+  }
+});
+program.command("api-fingerprint").description("Show TLS certificate fingerprint").action(async () => {
+  try {
+    await apiFingerprintCommand();
+  } catch (error) {
+    console.error("Error:", getErrorMessage(error));
+    process.exit(1);
+  }
+});
 program.action(() => {
   program.help();
 });

package/dist/{client-LNZTDQSA.js → client-YOOHI776.js}

@@ -8,13 +8,13 @@ import {
   loadContextFromTranscript,
   registerCocoonModels,
   registerLocalModels
-} from "./chunk-QVBSUYVX.js";
-import "./chunk-PHSAHTK4.js";
-import "./chunk-P36I6OIV.js";
+} from "./chunk-J73TA3UM.js";
+import "./chunk-YOSUPUAJ.js";
+import "./chunk-LC4TV3KL.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
+import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   chatWithContext,

package/dist/{get-my-gifts-OMGKOEPM.js → get-my-gifts-Y7EN7RK4.js}

@@ -1,9 +1,9 @@
 import {
   telegramGetMyGiftsExecutor,
   telegramGetMyGiftsTool
-} from "./chunk-WIKM24GZ.js";
-import "./chunk-XBE4JB7C.js";
-import "./chunk-RCMD3U65.js";
+} from "./chunk-H7MFXJZK.js";
+import "./chunk-3UFPFWYP.js";
+import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   telegramGetMyGiftsExecutor,

package/dist/index.js

@@ -1,25 +1,26 @@
 import {
   TeletonApp,
   main
-} from "./chunk-H36RFKRI.js";
-import "./chunk-WIKM24GZ.js";
-import "./chunk-RQBAMUCV.js";
-import "./chunk-JHYZYFZJ.js";
-import "./chunk-TVRZJIZX.js";
+} from "./chunk-2IZU3REP.js";
+import "./chunk-H7MFXJZK.js";
+import "./chunk-GGXJLMOH.js";
+import "./chunk-7YKSXOQQ.js";
+import "./chunk-55SKE6YH.js";
+import "./chunk-W25Z7CM6.js";
+import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-XBE4JB7C.js";
-import "./chunk-QVBSUYVX.js";
-import "./chunk-PHSAHTK4.js";
-import "./chunk-P36I6OIV.js";
-import "./chunk-SD4NLLYG.js";
-import "./chunk-U56QTM46.js";
+import "./chunk-J73TA3UM.js";
+import "./chunk-YOSUPUAJ.js";
+import "./chunk-LC4TV3KL.js";
+import "./chunk-VYKW7FMV.js";
+import "./chunk-HEDJCLA6.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-IJBWWQE4.js";
+import "./chunk-C4NKJT2Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
-import "./chunk-NUGDTPE4.js";
+import "./chunk-NQ6FZKCE.js";
+import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   TeletonApp,

package/dist/{memory-AS7WKGTW.js → memory-Q6EWGK2S.js}

@@ -14,9 +14,10 @@ import {
   getDatabase,
   getSchemaVersion,
   initializeMemory,
+  parseTemporalIntent,
   runMigrations,
   setSchemaVersion
-} from "./chunk-SD4NLLYG.js";
+} from "./chunk-VYKW7FMV.js";
 import {
   AnthropicEmbeddingProvider,
   CachedEmbeddingProvider,
@@ -26,17 +27,17 @@ import {
   deserializeEmbedding,
   hashText,
   serializeEmbedding
-} from "./chunk-U56QTM46.js";
+} from "./chunk-HEDJCLA6.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-IJBWWQE4.js";
+import "./chunk-C4NKJT2Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
+import "./chunk-NQ6FZKCE.js";
 import {
   TaskStore,
   getTaskStore
-} from "./chunk-NUGDTPE4.js";
+} from "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   AnthropicEmbeddingProvider,
@@ -63,6 +64,7 @@ export {
   getTaskStore,
   hashText,
   initializeMemory,
+  parseTemporalIntent,
   runMigrations,
   serializeEmbedding,
   setSchemaVersion

package/dist/memory-hook-WUXJNVT5.js

@@ -0,0 +1,18 @@
+import {
+  consolidateOldMemoryFiles,
+  saveSessionMemory
+} from "./chunk-W25Z7CM6.js";
+import "./chunk-3UFPFWYP.js";
+import "./chunk-J73TA3UM.js";
+import "./chunk-YOSUPUAJ.js";
+import "./chunk-LC4TV3KL.js";
+import "./chunk-C4NKJT2Z.js";
+import "./chunk-XQUHC3JZ.js";
+import "./chunk-R4YSJ4EY.js";
+import "./chunk-EYWNOHMJ.js";
+import "./chunk-NQ6FZKCE.js";
+import "./chunk-3RG5ZIWI.js";
+export {
+  consolidateOldMemoryFiles,
+  saveSessionMemory
+};

package/dist/{migrate-POHWYEIW.js → migrate-WFU6COBN.js}

@@ -1,9 +1,9 @@
 import {
   getDatabase
-} from "./chunk-SD4NLLYG.js";
-import "./chunk-U56QTM46.js";
+} from "./chunk-VYKW7FMV.js";
+import "./chunk-HEDJCLA6.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-IJBWWQE4.js";
+import "./chunk-C4NKJT2Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import {
@@ -11,8 +11,8 @@ import {
 } from "./chunk-EYWNOHMJ.js";
 import {
   createLogger
-} from "./chunk-RCMD3U65.js";
-import "./chunk-NUGDTPE4.js";
+} from "./chunk-NQ6FZKCE.js";
+import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";
 
 // src/session/migrate.ts