teleton 0.8.1 → 0.8.3

package/dist/chunk-WTDAICGT.js

@@ -0,0 +1,175 @@
+import {
+  createLogger
+} from "./chunk-NQ6FZKCE.js";
+
+// src/providers/claude-code-credentials.ts
+import { readFileSync, writeFileSync, existsSync } from "fs";
+import { execSync } from "child_process";
+import { homedir } from "os";
+import { join } from "path";
+var log = createLogger("ClaudeCodeCreds");
+var OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
+var OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+var OAUTH_SCOPES = "user:profile user:inference user:sessions:claude_code user:mcp_servers";
+var cachedToken = null;
+var cachedExpiresAt = 0;
+var cachedRefreshToken = null;
+function getClaudeConfigDir() {
+  return process.env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude");
+}
+function getCredentialsFilePath() {
+  return join(getClaudeConfigDir(), ".credentials.json");
+}
+function readCredentialsFile() {
+  const filePath = getCredentialsFilePath();
+  if (!existsSync(filePath)) return null;
+  try {
+    const raw = readFileSync(filePath, "utf-8");
+    return JSON.parse(raw);
+  } catch (e) {
+    log.warn({ err: e, path: filePath }, "Failed to parse Claude Code credentials file");
+    return null;
+  }
+}
+function readKeychainCredentials() {
+  const serviceNames = ["Claude Code-credentials", "Claude Code"];
+  for (const service of serviceNames) {
+    try {
+      const raw = execSync(`security find-generic-password -s "${service}" -w`, {
+        encoding: "utf-8",
+        stdio: ["pipe", "pipe", "pipe"]
+      }).trim();
+      return JSON.parse(raw);
+    } catch {
+    }
+  }
+  return null;
+}
+function readCredentials() {
+  if (process.platform === "darwin") {
+    const keychainCreds = readKeychainCredentials();
+    if (keychainCreds) return keychainCreds;
+    log.debug("Keychain read failed, falling back to credentials file");
+  }
+  return readCredentialsFile();
+}
+function extractToken(creds) {
+  const oauth = creds.claudeAiOauth;
+  if (!oauth?.accessToken) {
+    log.warn("Claude Code credentials found but missing accessToken");
+    return null;
+  }
+  return {
+    token: oauth.accessToken,
+    expiresAt: oauth.expiresAt ?? 0,
+    refreshToken: oauth.refreshToken
+  };
+}
+function getClaudeCodeApiKey(fallbackKey) {
+  if (cachedToken && Date.now() < cachedExpiresAt) {
+    return cachedToken;
+  }
+  const creds = readCredentials();
+  if (creds) {
+    const extracted = extractToken(creds);
+    if (extracted) {
+      cachedToken = extracted.token;
+      cachedExpiresAt = extracted.expiresAt;
+      cachedRefreshToken = extracted.refreshToken ?? null;
+      log.debug("Claude Code credentials loaded successfully");
+      return cachedToken;
+    }
+  }
+  if (fallbackKey && fallbackKey.length > 0) {
+    log.warn("Claude Code credentials not found, using fallback api_key from config");
+    return fallbackKey;
+  }
+  throw new Error("No Claude Code credentials found. Run 'claude login' or set api_key in config.");
+}
+async function performOAuthRefresh(refreshToken) {
+  try {
+    const res = await fetch(OAUTH_TOKEN_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        grant_type: "refresh_token",
+        refresh_token: refreshToken,
+        client_id: OAUTH_CLIENT_ID,
+        scope: OAUTH_SCOPES
+      })
+    });
+    if (!res.ok) {
+      log.warn(`OAuth token refresh failed: ${res.status} ${res.statusText}`);
+      return null;
+    }
+    const data = await res.json();
+    if (!data.access_token || !data.expires_in) {
+      log.warn("OAuth token refresh: unexpected response shape");
+      return null;
+    }
+    const newExpiresAt = Date.now() + data.expires_in * 1e3;
+    const newRefreshToken = data.refresh_token ?? refreshToken;
+    const filePath = getCredentialsFilePath();
+    try {
+      const existing = existsSync(filePath) ? JSON.parse(readFileSync(filePath, "utf-8")) : {};
+      const updated = {
+        ...existing,
+        claudeAiOauth: {
+          ...existing.claudeAiOauth,
+          accessToken: data.access_token,
+          refreshToken: newRefreshToken,
+          expiresAt: newExpiresAt
+        }
+      };
+      writeFileSync(filePath, JSON.stringify(updated, null, 2), { mode: 384 });
+    } catch (e) {
+      log.warn({ err: e }, "Failed to persist refreshed OAuth credentials to disk");
+    }
+    cachedToken = data.access_token;
+    cachedExpiresAt = newExpiresAt;
+    cachedRefreshToken = newRefreshToken;
+    log.info("Claude Code OAuth token refreshed successfully");
+    return cachedToken;
+  } catch (e) {
+    log.warn({ err: e }, "OAuth token refresh request failed");
+    return null;
+  }
+}
+async function refreshClaudeCodeApiKey() {
+  cachedToken = null;
+  cachedExpiresAt = 0;
+  if (!cachedRefreshToken) {
+    const creds2 = readCredentials();
+    if (creds2) {
+      const extracted = extractToken(creds2);
+      cachedRefreshToken = extracted?.refreshToken ?? null;
+    }
+  }
+  if (cachedRefreshToken) {
+    const refreshed = await performOAuthRefresh(cachedRefreshToken);
+    if (refreshed) return refreshed;
+    log.warn("OAuth refresh failed, falling back to disk read");
+  }
+  const creds = readCredentials();
+  if (creds) {
+    const extracted = extractToken(creds);
+    if (extracted) {
+      cachedToken = extracted.token;
+      cachedExpiresAt = extracted.expiresAt;
+      cachedRefreshToken = extracted.refreshToken ?? null;
+      log.info("Claude Code credentials refreshed from disk");
+      return cachedToken;
+    }
+  }
+  log.warn("Failed to refresh Claude Code credentials");
+  return null;
+}
+function isClaudeCodeTokenValid() {
+  return cachedToken !== null && Date.now() < cachedExpiresAt;
+}
+
+export {
+  getClaudeCodeApiKey,
+  refreshClaudeCodeApiKey,
+  isClaudeCodeTokenValid
+};

package/dist/{chunk-KVXV7EF7.js → chunk-XDZDOKIF.js}

@@ -1,9 +1,9 @@
 import {
   getDatabase
-} from "./chunk-7U7BOHCL.js";
+} from "./chunk-GHMXWAXI.js";
 import {
   createLogger
-} from "./chunk-RCMD3U65.js";
+} from "./chunk-NQ6FZKCE.js";
 
 // src/session/store.ts
 import { randomUUID } from "crypto";

package/dist/cli/index.js

@@ -1,60 +1,72 @@
+import {
+  ensureTlsCert
+} from "../chunk-5SEMA47R.js";
 import {
   getModelsForProvider
-} from "../chunk-OJCLKU5Z.js";
+} from "../chunk-WFTC3JJW.js";
 import {
   TelegramUserClient,
   main
-} from "../chunk-5FNWBZ5K.js";
-import "../chunk-QBHRXLZS.js";
+} from "../chunk-33Z47EXI.js";
+import "../chunk-NVKBBTI6.js";
+import "../chunk-H7MFXJZK.js";
 import {
   CONFIGURABLE_KEYS,
-  configExists,
   deleteNestedValue,
-  getDefaultConfigPath,
   getNestedValue,
   readRawConfig,
   setNestedValue,
   writeRawConfig
-} from "../chunk-CGOXE4WP.js";
+} from "../chunk-7MWKT67G.js";
 import {
-  ConfigSchema,
-  DealsConfigSchema,
-  ensureWorkspace,
   generateWallet,
   importWallet,
-  isNewWorkspace,
   loadWallet,
   saveWallet,
   walletExists
-} from "../chunk-S6PHGKOC.js";
-import "../chunk-KVXV7EF7.js";
-import "../chunk-7TECSLJ4.js";
+} from "../chunk-FUNF6H4W.js";
+import {
+  configExists,
+  getDefaultConfigPath
+} from "../chunk-AEHTQI3H.js";
+import {
+  ConfigSchema,
+  DealsConfigSchema,
+  ensureWorkspace,
+  isNewWorkspace
+} from "../chunk-AERHOXGC.js";
+import "../chunk-XDZDOKIF.js";
+import "../chunk-GHMXWAXI.js";
+import "../chunk-ALKAAG4O.js";
 import {
   getErrorMessage
-} from "../chunk-XBE4JB7C.js";
-import "../chunk-AYWEJCDB.js";
+} from "../chunk-3UFPFWYP.js";
+import "../chunk-7TECSLJ4.js";
+import "../chunk-35MX4ZUI.js";
+import "../chunk-VFA7QMCZ.js";
+import {
+  TELEGRAM_MAX_MESSAGE_LENGTH
+} from "../chunk-C4NKJT2Z.js";
+import "../chunk-LVTKJQ7O.js";
 import {
   getClaudeCodeApiKey,
+  isClaudeCodeTokenValid
+} from "../chunk-WTDAICGT.js";
+import {
   getProviderMetadata,
   getSupportedProviders,
-  isClaudeCodeTokenValid,
   validateApiKeyFormat
-} from "../chunk-PHSAHTK4.js";
-import "../chunk-QV2GLOTK.js";
-import "../chunk-7U7BOHCL.js";
-import "../chunk-3S4GGLLR.js";
-import "../chunk-VFA7QMCZ.js";
-import {
-  TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-UP55PXFH.js";
+} from "../chunk-6OOHHJ4N.js";
 import {
   fetchWithTimeout
 } from "../chunk-XQUHC3JZ.js";
 import "../chunk-R4YSJ4EY.js";
+import "../chunk-LC4TV3KL.js";
+import "../chunk-CUE4UZXR.js";
 import {
   TELETON_ROOT
 } from "../chunk-EYWNOHMJ.js";
-import "../chunk-RCMD3U65.js";
+import "../chunk-NQ6FZKCE.js";
 import "../chunk-4L66JHQE.js";
 import "../chunk-3RG5ZIWI.js";
 
@@ -379,7 +391,7 @@ function sleep(ms) {
 }
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-32XGDPE6.js");
+    const { SetupServer } = await import("../setup-server-IX3BFPPH.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -1890,6 +1902,21 @@ Available: set, get, list, unset`);
   }
 }
 
+// src/cli/commands/api.ts
+import { createHash, randomBytes } from "crypto";
+async function apiRotateKeyCommand(options) {
+  const key = "tltn_" + randomBytes(32).toString("base64url");
+  const hash = createHash("sha256").update(key).digest("hex");
+  const raw = readRawConfig(options.config);
+  setNestedValue(raw, "api.key_hash", hash);
+  writeRawConfig(raw, options.config);
+  console.log(key);
+}
+async function apiFingerprintCommand() {
+  const tls = await ensureTlsCert(TELETON_ROOT);
+  console.log(tls.fingerprint);
+}
+
 // src/cli/index.ts
 import { readFileSync as readFileSync3, existsSync as existsSync3 } from "fs";
 import { dirname, join as join3 } from "path";
@@ -1928,12 +1955,24 @@ program.command("setup").description("Interactive wizard to set up Teleton").opt
     process.exit(1);
   }
 });
-program.command("start").description("Start the Teleton agent").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).option("--webui", "Enable WebUI server (overrides config)").option("--webui-port <port>", "WebUI server port (default: 7777)").action(async (options) => {
+program.command("start").description("Start the Teleton agent").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).option("--webui", "Enable WebUI server (overrides config)").option("--webui-port <port>", "WebUI server port (default: 7777)").option("--api", "Enable Management API server (overrides config)").option("--api-port <port>", "Management API port (default: 7778)").option("--json-credentials", "Output API credentials as JSON to stdout on start").action(async (options) => {
   try {
+    if (options.api && !configExists(options.config)) {
+      if (options.apiPort) {
+        process.env.TELETON_API_PORT = options.apiPort;
+      }
+      if (options.jsonCredentials) {
+        process.env.TELETON_JSON_CREDENTIALS = "true";
+      }
+      const { startApiOnly } = await import("../bootstrap-DDFVEMYI.js");
+      await startApiOnly({ config: options.config, apiPort: options.apiPort });
+      return;
+    }
     if (!configExists(options.config)) {
       console.error("\u274C Configuration not found");
       console.error(`   Expected file: ${options.config}`);
       console.error("\n\u{1F4A1} Run first: teleton setup");
+      console.error("   Or use: teleton start --api (for API-only bootstrap)");
       process.exit(1);
     }
     if (options.webui) {
@@ -1942,6 +1981,15 @@ program.command("start").description("Start the Teleton agent").option("-c, --co
     if (options.webuiPort) {
       process.env.TELETON_WEBUI_PORT = options.webuiPort;
     }
+    if (options.api) {
+      process.env.TELETON_API_ENABLED = "true";
+    }
+    if (options.apiPort) {
+      process.env.TELETON_API_PORT = options.apiPort;
+    }
+    if (options.jsonCredentials) {
+      process.env.TELETON_JSON_CREDENTIALS = "true";
+    }
     await main(options.config);
   } catch (error) {
     console.error("Error:", getErrorMessage(error));
@@ -1996,6 +2044,22 @@ program.command("config").description("Manage configuration keys (set, get, list
     process.exit(1);
   }
 });
+program.command("api-rotate-key").description("Generate a new Management API key").option("-c, --config <path>", "Config file path", getDefaultConfigPath()).action(async (options) => {
+  try {
+    await apiRotateKeyCommand({ config: options.config });
+  } catch (error) {
+    console.error("Error:", getErrorMessage(error));
+    process.exit(1);
+  }
+});
+program.command("api-fingerprint").description("Show TLS certificate fingerprint").action(async () => {
+  try {
+    await apiFingerprintCommand();
+  } catch (error) {
+    console.error("Error:", getErrorMessage(error));
+    process.exit(1);
+  }
+});
 program.action(() => {
   program.help();
 });

package/dist/{client-MPHPIZB6.js → client-5KD25NOP.js}

@@ -8,13 +8,14 @@ import {
   loadContextFromTranscript,
   registerCocoonModels,
   registerLocalModels
-} from "./chunk-AYWEJCDB.js";
-import "./chunk-PHSAHTK4.js";
-import "./chunk-QV2GLOTK.js";
+} from "./chunk-LVTKJQ7O.js";
+import "./chunk-WTDAICGT.js";
+import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
+import "./chunk-LC4TV3KL.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
+import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   chatWithContext,

package/dist/{get-my-gifts-CC6HAVWB.js → get-my-gifts-Y7EN7RK4.js}

@@ -1,9 +1,9 @@
 import {
   telegramGetMyGiftsExecutor,
   telegramGetMyGiftsTool
-} from "./chunk-QBHRXLZS.js";
-import "./chunk-XBE4JB7C.js";
-import "./chunk-RCMD3U65.js";
+} from "./chunk-H7MFXJZK.js";
+import "./chunk-3UFPFWYP.js";
+import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   telegramGetMyGiftsExecutor,

package/dist/index.js

@@ -1,24 +1,30 @@
 import {
   TeletonApp,
   main
-} from "./chunk-5FNWBZ5K.js";
-import "./chunk-QBHRXLZS.js";
-import "./chunk-CGOXE4WP.js";
-import "./chunk-S6PHGKOC.js";
-import "./chunk-KVXV7EF7.js";
+} from "./chunk-33Z47EXI.js";
+import "./chunk-NVKBBTI6.js";
+import "./chunk-H7MFXJZK.js";
+import "./chunk-7MWKT67G.js";
+import "./chunk-FUNF6H4W.js";
+import "./chunk-AEHTQI3H.js";
+import "./chunk-AERHOXGC.js";
+import "./chunk-XDZDOKIF.js";
+import "./chunk-GHMXWAXI.js";
+import "./chunk-ALKAAG4O.js";
+import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-XBE4JB7C.js";
-import "./chunk-AYWEJCDB.js";
-import "./chunk-PHSAHTK4.js";
-import "./chunk-QV2GLOTK.js";
-import "./chunk-7U7BOHCL.js";
-import "./chunk-3S4GGLLR.js";
+import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-UP55PXFH.js";
+import "./chunk-C4NKJT2Z.js";
+import "./chunk-LVTKJQ7O.js";
+import "./chunk-WTDAICGT.js";
+import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
+import "./chunk-LC4TV3KL.js";
+import "./chunk-CUE4UZXR.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
+import "./chunk-NQ6FZKCE.js";
 import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/local-IHKJFQJS.js

@@ -0,0 +1,9 @@
+import {
+  LocalEmbeddingProvider
+} from "./chunk-CUE4UZXR.js";
+import "./chunk-EYWNOHMJ.js";
+import "./chunk-NQ6FZKCE.js";
+import "./chunk-3RG5ZIWI.js";
+export {
+  LocalEmbeddingProvider
+};

package/dist/{memory-UBHM7ILG.js → memory-QMJRM3XJ.js}

@@ -14,25 +14,28 @@ import {
   getDatabase,
   getSchemaVersion,
   initializeMemory,
+  parseTemporalIntent,
   runMigrations,
   setSchemaVersion
-} from "./chunk-7U7BOHCL.js";
+} from "./chunk-GHMXWAXI.js";
 import {
   AnthropicEmbeddingProvider,
   CachedEmbeddingProvider,
-  LocalEmbeddingProvider,
   NoopEmbeddingProvider,
   createEmbeddingProvider,
   deserializeEmbedding,
   hashText,
   serializeEmbedding
-} from "./chunk-3S4GGLLR.js";
+} from "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-UP55PXFH.js";
+import "./chunk-C4NKJT2Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
+import {
+  LocalEmbeddingProvider
+} from "./chunk-CUE4UZXR.js";
 import "./chunk-EYWNOHMJ.js";
-import "./chunk-RCMD3U65.js";
+import "./chunk-NQ6FZKCE.js";
 import {
   TaskStore,
   getTaskStore
@@ -63,6 +66,7 @@ export {
   getTaskStore,
   hashText,
   initializeMemory,
+  parseTemporalIntent,
   runMigrations,
   serializeEmbedding,
   setSchemaVersion

package/dist/memory-hook-VUNWZ3NY.js

@@ -0,0 +1,19 @@
+import {
+  consolidateOldMemoryFiles,
+  saveSessionMemory
+} from "./chunk-ALKAAG4O.js";
+import "./chunk-3UFPFWYP.js";
+import "./chunk-C4NKJT2Z.js";
+import "./chunk-LVTKJQ7O.js";
+import "./chunk-WTDAICGT.js";
+import "./chunk-6OOHHJ4N.js";
+import "./chunk-XQUHC3JZ.js";
+import "./chunk-R4YSJ4EY.js";
+import "./chunk-LC4TV3KL.js";
+import "./chunk-EYWNOHMJ.js";
+import "./chunk-NQ6FZKCE.js";
+import "./chunk-3RG5ZIWI.js";
+export {
+  consolidateOldMemoryFiles,
+  saveSessionMemory
+};

package/dist/{migrate-UBBEJ5BL.js → migrate-5VBAP52B.js}

@@ -1,17 +1,18 @@
 import {
   getDatabase
-} from "./chunk-7U7BOHCL.js";
-import "./chunk-3S4GGLLR.js";
+} from "./chunk-GHMXWAXI.js";
+import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-UP55PXFH.js";
+import "./chunk-C4NKJT2Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
+import "./chunk-CUE4UZXR.js";
 import {
   TELETON_ROOT
 } from "./chunk-EYWNOHMJ.js";
 import {
   createLogger
-} from "./chunk-RCMD3U65.js";
+} from "./chunk-NQ6FZKCE.js";
 import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";