teleton 0.8.3 → 0.8.5

package/dist/{chunk-35MX4ZUI.js → chunk-PK3TVFBT.js}

@@ -7,13 +7,13 @@ import {
   EMBEDDING_CACHE_MAX_ENTRIES,
   EMBEDDING_CACHE_TTL_DAYS,
   VOYAGE_BATCH_SIZE
-} from "./chunk-C4NKJT2Z.js";
+} from "./chunk-L3LPVF4Z.js";
 import {
   fetchWithTimeout
 } from "./chunk-XQUHC3JZ.js";
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
+} from "./chunk-KYSAHDYE.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{chunk-2ERTYRHA.js → chunk-Z63KUQX4.js}

@@ -2,25 +2,20 @@ import {
   getModelsForProvider
 } from "./chunk-WFTC3JJW.js";
 import {
-  CONFIGURABLE_KEYS,
   TonProxyManager,
   WorkspaceSecurityError,
   adaptPlugin,
   clearPromptCache,
-  deleteNestedValue,
   deletePluginSecret,
   ensurePluginDeps,
   getBlocklistConfig,
-  getNestedValue,
   getPluginPriorities,
   getTokenUsage,
   getTonProxyManager,
   getTriggersConfig,
   listPluginSecretKeys,
-  readRawConfig,
   resetPluginPriority,
   setBlocklistConfig,
-  setNestedValue,
   setPluginPriority,
   setTonProxyManager,
   setTriggersConfig,
@@ -28,14 +23,19 @@ import {
   validatePath,
   validateReadPath,
   validateWritePath,
-  writePluginSecret,
-  writeRawConfig
-} from "./chunk-7MWKT67G.js";
+  writePluginSecret
+} from "./chunk-6U6VA2OT.js";
 import {
+  CONFIGURABLE_KEYS,
+  deleteNestedValue,
+  getNestedValue,
   invalidateEndpointCache,
   invalidateTonClientCache,
-  setToncenterApiKey
-} from "./chunk-FUNF6H4W.js";
+  readRawConfig,
+  setNestedValue,
+  setToncenterApiKey,
+  writeRawConfig
+} from "./chunk-M6M4DCDU.js";
 import {
   getErrorMessage
 } from "./chunk-3UFPFWYP.js";
@@ -49,7 +49,7 @@ import {
 import {
   WORKSPACE_PATHS,
   WORKSPACE_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   addLogListener,
   clearLogListeners,
@@ -591,7 +591,7 @@ function createMemoryRoutes(deps) {
 import { Hono as Hono5 } from "hono";
 import { readFileSync, writeFileSync } from "fs";
 import { join } from "path";
-var SOUL_FILES = ["SOUL.md", "SECURITY.md", "STRATEGY.md", "MEMORY.md"];
+var SOUL_FILES = ["SOUL.md", "SECURITY.md", "STRATEGY.md", "MEMORY.md", "HEARTBEAT.md"];
 function isSoulFile(filename) {
   return SOUL_FILES.includes(filename);
 }
@@ -1342,6 +1342,18 @@ function createConfigRoutes(deps) {
         400
       );
     }
+    if (key.startsWith("heartbeat.") && key !== "heartbeat.self_configurable") {
+      const config = deps.agent.getConfig();
+      if (config.heartbeat?.self_configurable !== true) {
+        return c.json(
+          {
+            success: false,
+            error: `Heartbeat config is locked (self_configurable: false). Set heartbeat.self_configurable to true first.`
+          },
+          403
+        );
+      }
+    }
     let body;
     try {
       body = await c.req.json();
@@ -1465,6 +1477,18 @@ function createConfigRoutes(deps) {
         400
       );
     }
+    if (key.startsWith("heartbeat.") && key !== "heartbeat.self_configurable") {
+      const config = deps.agent.getConfig();
+      if (config.heartbeat?.self_configurable !== true) {
+        return c.json(
+          {
+            success: false,
+            error: `Heartbeat config is locked (self_configurable: false). Set heartbeat.self_configurable to true first.`
+          },
+          403
+        );
+      }
+    }
     try {
       const raw = readRawConfig(deps.configPath);
       deleteNestedValue(raw, key);
@@ -1805,7 +1829,7 @@ var MarketplaceService = class {
         const fileRes = await fetch(item.download_url);
         if (!fileRes.ok) throw new Error(`Failed to download ${item.name}: ${fileRes.status}`);
         const content = await fileRes.text();
-        writeFileSync3(target, content, "utf-8");
+        writeFileSync3(target, content, { encoding: "utf-8", mode: 384 });
       }
     }
   }

package/dist/cli/index.js

@@ -7,47 +7,45 @@ import {
 import {
   TelegramUserClient,
   main
-} from "../chunk-33Z47EXI.js";
+} from "../chunk-LM6AL6LN.js";
 import "../chunk-NVKBBTI6.js";
+import "../chunk-5K4YDCVU.js";
+import "../chunk-2MZP75SH.js";
+import "../chunk-LD24DWWE.js";
 import "../chunk-H7MFXJZK.js";
+import "../chunk-6U6VA2OT.js";
 import {
   CONFIGURABLE_KEYS,
   deleteNestedValue,
-  getNestedValue,
-  readRawConfig,
-  setNestedValue,
-  writeRawConfig
-} from "../chunk-7MWKT67G.js";
-import {
   generateWallet,
+  getNestedValue,
   importWallet,
   loadWallet,
+  readRawConfig,
   saveWallet,
-  walletExists
-} from "../chunk-FUNF6H4W.js";
-import {
-  configExists,
-  getDefaultConfigPath
-} from "../chunk-AEHTQI3H.js";
+  setNestedValue,
+  walletExists,
+  writeRawConfig
+} from "../chunk-M6M4DCDU.js";
 import {
   ConfigSchema,
   DealsConfigSchema,
+  configExists,
   ensureWorkspace,
+  getDefaultConfigPath,
   isNewWorkspace
-} from "../chunk-AERHOXGC.js";
-import "../chunk-XDZDOKIF.js";
-import "../chunk-GHMXWAXI.js";
-import "../chunk-ALKAAG4O.js";
+} from "../chunk-FSL2MOYK.js";
+import "../chunk-35X3V6OW.js";
 import {
   getErrorMessage
 } from "../chunk-3UFPFWYP.js";
 import "../chunk-7TECSLJ4.js";
-import "../chunk-35MX4ZUI.js";
+import "../chunk-PK3TVFBT.js";
 import "../chunk-VFA7QMCZ.js";
 import {
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-C4NKJT2Z.js";
-import "../chunk-LVTKJQ7O.js";
+} from "../chunk-L3LPVF4Z.js";
+import "../chunk-4KURCUWD.js";
 import {
   getClaudeCodeApiKey,
   isClaudeCodeTokenValid
@@ -61,11 +59,11 @@ import {
   fetchWithTimeout
 } from "../chunk-XQUHC3JZ.js";
 import "../chunk-R4YSJ4EY.js";
-import "../chunk-LC4TV3KL.js";
-import "../chunk-CUE4UZXR.js";
+import "../chunk-GUX6ZFVF.js";
+import "../chunk-KYSAHDYE.js";
 import {
   TELETON_ROOT
-} from "../chunk-EYWNOHMJ.js";
+} from "../chunk-L653KKCR.js";
 import "../chunk-NQ6FZKCE.js";
 import "../chunk-4L66JHQE.js";
 import "../chunk-3RG5ZIWI.js";
@@ -391,7 +389,7 @@ function sleep(ms) {
 }
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-IX3BFPPH.js");
+    const { SetupServer } = await import("../setup-server-VJ3MGUSM.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -1122,6 +1120,12 @@ Get it at: ${providerMeta.consoleUrl}`,
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 18e5,
+      prompt: "Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply NO_ACTION.",
+      self_configurable: false
+    },
     plugins: {},
     ...selectedProvider === "cocoon" ? { cocoon: { port: cocoonInstance } } : {},
     tonapi_key: tonapiKey,
@@ -1288,6 +1292,12 @@ async function runNonInteractiveOnboarding(options, prompter) {
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 18e5,
+      prompt: "Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply NO_ACTION.",
+      self_configurable: false
+    },
     mcp: { servers: {} },
     plugins: {},
     tavily_api_key: options.tavilyApiKey
@@ -1964,7 +1974,7 @@ program.command("start").description("Start the Teleton agent").option("-c, --co
       if (options.jsonCredentials) {
         process.env.TELETON_JSON_CREDENTIALS = "true";
       }
-      const { startApiOnly } = await import("../bootstrap-DDFVEMYI.js");
+      const { startApiOnly } = await import("../bootstrap-SPDT3XBQ.js");
       await startApiOnly({ config: options.config, apiPort: options.apiPort });
       return;
     }

package/dist/{client-5KD25NOP.js → client-G62EZT6U.js}

@@ -8,13 +8,13 @@ import {
   loadContextFromTranscript,
   registerCocoonModels,
   registerLocalModels
-} from "./chunk-LVTKJQ7O.js";
+} from "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/harden-permissions-6BLHRCQJ.js

@@ -0,0 +1,100 @@
+import {
+  TELETON_ROOT,
+  WORKSPACE_PATHS
+} from "./chunk-L653KKCR.js";
+import {
+  createLogger
+} from "./chunk-NQ6FZKCE.js";
+import "./chunk-3RG5ZIWI.js";
+
+// src/workspace/harden-permissions.ts
+import { chmodSync, existsSync, readdirSync, statSync } from "fs";
+import { join } from "path";
+var log = createLogger("Permissions");
+var TARGET_MODE = 384;
+var TARGET_DIR_MODE = 448;
+var ROOT_FILES = [
+  "config.yaml",
+  "wallet.json",
+  "telegram_session.txt",
+  "telegram-offset.json",
+  "teleton.db",
+  "teleton.db-wal",
+  "teleton.db-shm"
+];
+var SECURE_DIRS = ["secrets", "plugins", "tls"];
+function hardenExistingPermissions() {
+  let hardened = 0;
+  for (const file of ROOT_FILES) {
+    hardened += hardenFile(join(TELETON_ROOT, file));
+  }
+  for (const path of [
+    WORKSPACE_PATHS.MEMORY,
+    WORKSPACE_PATHS.IDENTITY,
+    WORKSPACE_PATHS.SOUL,
+    WORKSPACE_PATHS.USER,
+    WORKSPACE_PATHS.STRATEGY,
+    WORKSPACE_PATHS.SECURITY,
+    WORKSPACE_PATHS.HEARTBEAT
+  ]) {
+    hardened += hardenFile(path);
+  }
+  hardened += hardenDirectory(WORKSPACE_PATHS.MEMORY_DIR, TARGET_MODE);
+  hardened += hardenDirectory(WORKSPACE_PATHS.DOWNLOADS_DIR, TARGET_MODE);
+  for (const dir of SECURE_DIRS) {
+    const dirPath = join(TELETON_ROOT, dir);
+    if (existsSync(dirPath)) {
+      try {
+        const stat = statSync(dirPath);
+        if ((stat.mode & 511) !== TARGET_DIR_MODE) {
+          chmodSync(dirPath, TARGET_DIR_MODE);
+          hardened++;
+        }
+      } catch {
+      }
+    }
+  }
+  hardened += hardenDirectory(WORKSPACE_PATHS.PLUGINS_DIR, TARGET_MODE);
+  if (hardened > 0) {
+    log.info(`Hardened permissions on ${hardened} existing file(s)`);
+  }
+}
+function hardenFile(filePath) {
+  if (!existsSync(filePath)) return 0;
+  try {
+    const stat = statSync(filePath);
+    if ((stat.mode & 511) !== TARGET_MODE) {
+      chmodSync(filePath, TARGET_MODE);
+      return 1;
+    }
+  } catch {
+  }
+  return 0;
+}
+function hardenDirectory(dirPath, fileMode) {
+  if (!existsSync(dirPath)) return 0;
+  let count = 0;
+  try {
+    const entries = readdirSync(dirPath, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = join(dirPath, entry.name);
+      if (entry.isFile()) {
+        try {
+          const stat = statSync(fullPath);
+          if ((stat.mode & 511) !== fileMode) {
+            chmodSync(fullPath, fileMode);
+            count++;
+          }
+        } catch {
+        }
+      } else if (entry.isDirectory()) {
+        count += hardenDirectory(fullPath, fileMode);
+      }
+    }
+  } catch {
+  }
+  return count;
+}
+export {
+  hardenExistingPermissions
+};

package/dist/index.js

@@ -1,29 +1,29 @@
 import {
   TeletonApp,
   main
-} from "./chunk-33Z47EXI.js";
+} from "./chunk-LM6AL6LN.js";
 import "./chunk-NVKBBTI6.js";
+import "./chunk-5K4YDCVU.js";
+import "./chunk-2MZP75SH.js";
+import "./chunk-LD24DWWE.js";
 import "./chunk-H7MFXJZK.js";
-import "./chunk-7MWKT67G.js";
-import "./chunk-FUNF6H4W.js";
-import "./chunk-AEHTQI3H.js";
-import "./chunk-AERHOXGC.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
+import "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
+import "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";

package/dist/{local-IHKJFQJS.js → local-HQ3UJ7KR.js}

@@ -1,7 +1,7 @@
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+} from "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{memory-QMJRM3XJ.js → memory-BJH724PQ.js}

@@ -17,7 +17,8 @@ import {
   parseTemporalIntent,
   runMigrations,
   setSchemaVersion
-} from "./chunk-GHMXWAXI.js";
+} from "./chunk-2MZP75SH.js";
+import "./chunk-35X3V6OW.js";
 import {
   AnthropicEmbeddingProvider,
   CachedEmbeddingProvider,
@@ -26,15 +27,15 @@ import {
   deserializeEmbedding,
   hashText,
   serializeEmbedding
-} from "./chunk-35MX4ZUI.js";
+} from "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+} from "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import {
   TaskStore,

package/dist/{memory-hook-VUNWZ3NY.js → memory-hook-LUAKTXU5.js}

@@ -1,16 +1,16 @@
 import {
   consolidateOldMemoryFiles,
   saveSessionMemory
-} from "./chunk-ALKAAG4O.js";
+} from "./chunk-LD24DWWE.js";
 import "./chunk-3UFPFWYP.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
+import "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{migrate-5VBAP52B.js → migrate-C4LBLOZH.js}

@@ -1,15 +1,16 @@
 import {
   getDatabase
-} from "./chunk-GHMXWAXI.js";
-import "./chunk-35MX4ZUI.js";
+} from "./chunk-2MZP75SH.js";
+import "./chunk-35X3V6OW.js";
+import "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-CUE4UZXR.js";
+import "./chunk-KYSAHDYE.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{paths-XA2RJH4S.js → paths-WMVV7ZAJ.js}

@@ -4,7 +4,7 @@ import {
   TELETON_ROOT,
   WORKSPACE_PATHS,
   WORKSPACE_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   ALLOWED_EXTENSIONS,

package/dist/{server-JF6FX772.js → server-4J56HS62.js}

@@ -1,6 +1,6 @@
 import {
   createSetupRoutes
-} from "./chunk-OIMAE24Q.js";
+} from "./chunk-7ZXUUDQQ.js";
 import {
   createConfigRoutes,
   createHooksRoutes,
@@ -16,33 +16,26 @@ import {
   createToolsRoutes,
   createWorkspaceRoutes,
   logInterceptor
-} from "./chunk-2ERTYRHA.js";
+} from "./chunk-Z63KUQX4.js";
 import {
   ensureTlsCert
 } from "./chunk-5SEMA47R.js";
 import "./chunk-WFTC3JJW.js";
-import "./chunk-7MWKT67G.js";
-import "./chunk-FUNF6H4W.js";
-import "./chunk-AEHTQI3H.js";
-import "./chunk-AERHOXGC.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{server-N4T7E25M.js → server-I6TYJ36S.js}

@@ -13,28 +13,20 @@ import {
   createToolsRoutes,
   createWorkspaceRoutes,
   logInterceptor
-} from "./chunk-2ERTYRHA.js";
+} from "./chunk-Z63KUQX4.js";
 import "./chunk-WFTC3JJW.js";
-import "./chunk-7MWKT67G.js";
-import "./chunk-FUNF6H4W.js";
-import "./chunk-AEHTQI3H.js";
-import "./chunk-AERHOXGC.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
-import "./chunk-WTDAICGT.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{setup-server-IX3BFPPH.js → setup-server-VJ3MGUSM.js}

@@ -1,18 +1,18 @@
 import {
   createSetupRoutes
-} from "./chunk-OIMAE24Q.js";
+} from "./chunk-7ZXUUDQQ.js";
 import "./chunk-WFTC3JJW.js";
-import "./chunk-FUNF6H4W.js";
-import "./chunk-AERHOXGC.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";
@@ -23,13 +23,12 @@ import { Hono } from "hono";
 import { serve } from "@hono/node-server";
 import { cors } from "hono/cors";
 import { bodyLimit } from "hono/body-limit";
-import { existsSync, readFileSync } from "fs";
+import { existsSync, readFileSync, writeFileSync } from "fs";
 import { join, dirname, resolve, relative } from "path";
 import { fileURLToPath } from "url";
-import { exec } from "child_process";
+import { spawn } from "child_process";
 import { platform } from "os";
 import { randomBytes } from "crypto";
-import { readFileSync as readYaml, writeFileSync } from "fs";
 import YAML from "yaml";
 var log = createLogger("Setup");
 function findWebDist() {
@@ -45,19 +44,19 @@ function findWebDist() {
 }
 function autoOpenBrowser(url) {
   const os = platform();
-  let cmd;
+  let prog;
   if (os === "darwin") {
-    cmd = `open "${url}"`;
+    prog = "open";
   } else if (os === "win32") {
-    cmd = `start "${url}"`;
+    prog = "explorer";
   } else {
-    cmd = `xdg-open "${url}"`;
+    prog = "xdg-open";
   }
-  exec(cmd, (err) => {
-    if (err) {
-      log.info(`Open this URL in your browser: ${url}`);
-    }
+  const child = spawn(prog, [url], { detached: true, stdio: "ignore" });
+  child.on("error", () => {
+    log.info(`Open this URL in your browser: ${url}`);
   });
+  child.unref();
 }
 var SetupServer = class {
   constructor(port = 7777) {
@@ -119,7 +118,7 @@ var SetupServer = class {
       try {
         const token = randomBytes(32).toString("hex");
         const configPath = join(TELETON_ROOT, "config.yaml");
-        const raw = readYaml(configPath, "utf-8");
+        const raw = readFileSync(configPath, "utf-8");
         const config = YAML.parse(raw);
         config.webui = { ...config.webui || {}, enabled: true, auth_token: token };
         writeFileSync(configPath, YAML.stringify(config), { encoding: "utf-8", mode: 384 });