teleton 0.8.4 → 0.8.5

package/dist/{chunk-JROBTXWY.js → chunk-M6M4DCDU.js}

@@ -1,7 +1,7 @@
 import {
   ConfigSchema,
   expandPath
-} from "./chunk-NH2CNRKJ.js";
+} from "./chunk-FSL2MOYK.js";
 import {
   COINGECKO_API_URL,
   tonapiFetch
@@ -14,7 +14,7 @@ import {
 } from "./chunk-XQUHC3JZ.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";
@@ -807,6 +807,40 @@ var CONFIGURABLE_KEYS = {
     mask: identity,
     parse: identity
   },
+  // ─── Heartbeat ─────────────────────────────────────────────────────
+  "heartbeat.enabled": {
+    type: "boolean",
+    category: "Agent",
+    label: "Heartbeat Enabled",
+    description: "Enable periodic heartbeat timer",
+    sensitive: false,
+    hotReload: "instant",
+    validate: enumValidator(["true", "false"]),
+    mask: identity,
+    parse: (v) => v === "true"
+  },
+  "heartbeat.interval_ms": {
+    type: "number",
+    category: "Agent",
+    label: "Heartbeat Interval (ms)",
+    description: "Heartbeat interval in milliseconds (min 60000)",
+    sensitive: false,
+    hotReload: "restart",
+    validate: numberInRange(6e4, 864e5),
+    mask: identity,
+    parse: (v) => Number(v)
+  },
+  "heartbeat.self_configurable": {
+    type: "boolean",
+    category: "Agent",
+    label: "Heartbeat Self-Configurable",
+    description: "Allow agent to modify heartbeat config at runtime",
+    sensitive: false,
+    hotReload: "instant",
+    validate: enumValidator(["true", "false"]),
+    mask: identity,
+    parse: (v) => v === "true"
+  },
   // ─── Developer ─────────────────────────────────────────────────────
   "dev.hot_reload": {
     type: "boolean",

package/dist/{chunk-35MX4ZUI.js → chunk-PK3TVFBT.js}

@@ -7,13 +7,13 @@ import {
   EMBEDDING_CACHE_MAX_ENTRIES,
   EMBEDDING_CACHE_TTL_DAYS,
   VOYAGE_BATCH_SIZE
-} from "./chunk-C4NKJT2Z.js";
+} from "./chunk-L3LPVF4Z.js";
 import {
   fetchWithTimeout
 } from "./chunk-XQUHC3JZ.js";
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
+} from "./chunk-KYSAHDYE.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{chunk-G7PCW63M.js → chunk-Z63KUQX4.js}

@@ -24,7 +24,7 @@ import {
   validateReadPath,
   validateWritePath,
   writePluginSecret
-} from "./chunk-LZQOX6YY.js";
+} from "./chunk-6U6VA2OT.js";
 import {
   CONFIGURABLE_KEYS,
   deleteNestedValue,
@@ -35,7 +35,7 @@ import {
   setNestedValue,
   setToncenterApiKey,
   writeRawConfig
-} from "./chunk-JROBTXWY.js";
+} from "./chunk-M6M4DCDU.js";
 import {
   getErrorMessage
 } from "./chunk-3UFPFWYP.js";
@@ -49,7 +49,7 @@ import {
 import {
   WORKSPACE_PATHS,
   WORKSPACE_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   addLogListener,
   clearLogListeners,
@@ -591,7 +591,7 @@ function createMemoryRoutes(deps) {
 import { Hono as Hono5 } from "hono";
 import { readFileSync, writeFileSync } from "fs";
 import { join } from "path";
-var SOUL_FILES = ["SOUL.md", "SECURITY.md", "STRATEGY.md", "MEMORY.md"];
+var SOUL_FILES = ["SOUL.md", "SECURITY.md", "STRATEGY.md", "MEMORY.md", "HEARTBEAT.md"];
 function isSoulFile(filename) {
   return SOUL_FILES.includes(filename);
 }
@@ -1342,6 +1342,18 @@ function createConfigRoutes(deps) {
         400
       );
     }
+    if (key.startsWith("heartbeat.") && key !== "heartbeat.self_configurable") {
+      const config = deps.agent.getConfig();
+      if (config.heartbeat?.self_configurable !== true) {
+        return c.json(
+          {
+            success: false,
+            error: `Heartbeat config is locked (self_configurable: false). Set heartbeat.self_configurable to true first.`
+          },
+          403
+        );
+      }
+    }
     let body;
     try {
       body = await c.req.json();
@@ -1465,6 +1477,18 @@ function createConfigRoutes(deps) {
         400
       );
     }
+    if (key.startsWith("heartbeat.") && key !== "heartbeat.self_configurable") {
+      const config = deps.agent.getConfig();
+      if (config.heartbeat?.self_configurable !== true) {
+        return c.json(
+          {
+            success: false,
+            error: `Heartbeat config is locked (self_configurable: false). Set heartbeat.self_configurable to true first.`
+          },
+          403
+        );
+      }
+    }
     try {
       const raw = readRawConfig(deps.configPath);
       deleteNestedValue(raw, key);
@@ -1805,7 +1829,7 @@ var MarketplaceService = class {
         const fileRes = await fetch(item.download_url);
         if (!fileRes.ok) throw new Error(`Failed to download ${item.name}: ${fileRes.status}`);
         const content = await fileRes.text();
-        writeFileSync3(target, content, "utf-8");
+        writeFileSync3(target, content, { encoding: "utf-8", mode: 384 });
       }
     }
   }

package/dist/cli/index.js

@@ -7,10 +7,13 @@ import {
 import {
   TelegramUserClient,
   main
-} from "../chunk-UMUONAD6.js";
+} from "../chunk-LM6AL6LN.js";
 import "../chunk-NVKBBTI6.js";
+import "../chunk-5K4YDCVU.js";
+import "../chunk-2MZP75SH.js";
+import "../chunk-LD24DWWE.js";
 import "../chunk-H7MFXJZK.js";
-import "../chunk-LZQOX6YY.js";
+import "../chunk-6U6VA2OT.js";
 import {
   CONFIGURABLE_KEYS,
   deleteNestedValue,
@@ -23,7 +26,7 @@ import {
   setNestedValue,
   walletExists,
   writeRawConfig
-} from "../chunk-JROBTXWY.js";
+} from "../chunk-M6M4DCDU.js";
 import {
   ConfigSchema,
   DealsConfigSchema,
@@ -31,20 +34,18 @@ import {
   ensureWorkspace,
   getDefaultConfigPath,
   isNewWorkspace
-} from "../chunk-NH2CNRKJ.js";
-import "../chunk-XDZDOKIF.js";
-import "../chunk-GHMXWAXI.js";
-import "../chunk-ALKAAG4O.js";
+} from "../chunk-FSL2MOYK.js";
+import "../chunk-35X3V6OW.js";
 import {
   getErrorMessage
 } from "../chunk-3UFPFWYP.js";
 import "../chunk-7TECSLJ4.js";
-import "../chunk-35MX4ZUI.js";
+import "../chunk-PK3TVFBT.js";
 import "../chunk-VFA7QMCZ.js";
 import {
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-C4NKJT2Z.js";
-import "../chunk-LVTKJQ7O.js";
+} from "../chunk-L3LPVF4Z.js";
+import "../chunk-4KURCUWD.js";
 import {
   getClaudeCodeApiKey,
   isClaudeCodeTokenValid
@@ -58,11 +59,11 @@ import {
   fetchWithTimeout
 } from "../chunk-XQUHC3JZ.js";
 import "../chunk-R4YSJ4EY.js";
-import "../chunk-LC4TV3KL.js";
-import "../chunk-CUE4UZXR.js";
+import "../chunk-GUX6ZFVF.js";
+import "../chunk-KYSAHDYE.js";
 import {
   TELETON_ROOT
-} from "../chunk-EYWNOHMJ.js";
+} from "../chunk-L653KKCR.js";
 import "../chunk-NQ6FZKCE.js";
 import "../chunk-4L66JHQE.js";
 import "../chunk-3RG5ZIWI.js";
@@ -388,7 +389,7 @@ function sleep(ms) {
 }
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-VDY64CWW.js");
+    const { SetupServer } = await import("../setup-server-VJ3MGUSM.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -1119,6 +1120,12 @@ Get it at: ${providerMeta.consoleUrl}`,
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 18e5,
+      prompt: "Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply NO_ACTION.",
+      self_configurable: false
+    },
     plugins: {},
     ...selectedProvider === "cocoon" ? { cocoon: { port: cocoonInstance } } : {},
     tonapi_key: tonapiKey,
@@ -1285,6 +1292,12 @@ async function runNonInteractiveOnboarding(options, prompter) {
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 18e5,
+      prompt: "Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply NO_ACTION.",
+      self_configurable: false
+    },
     mcp: { servers: {} },
     plugins: {},
     tavily_api_key: options.tavilyApiKey
@@ -1961,7 +1974,7 @@ program.command("start").description("Start the Teleton agent").option("-c, --co
       if (options.jsonCredentials) {
         process.env.TELETON_JSON_CREDENTIALS = "true";
       }
-      const { startApiOnly } = await import("../bootstrap-NNEI3Z5H.js");
+      const { startApiOnly } = await import("../bootstrap-SPDT3XBQ.js");
       await startApiOnly({ config: options.config, apiPort: options.apiPort });
       return;
     }

package/dist/{client-5KD25NOP.js → client-G62EZT6U.js}

@@ -8,13 +8,13 @@ import {
   loadContextFromTranscript,
   registerCocoonModels,
   registerLocalModels
-} from "./chunk-LVTKJQ7O.js";
+} from "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/harden-permissions-6BLHRCQJ.js

@@ -0,0 +1,100 @@
+import {
+  TELETON_ROOT,
+  WORKSPACE_PATHS
+} from "./chunk-L653KKCR.js";
+import {
+  createLogger
+} from "./chunk-NQ6FZKCE.js";
+import "./chunk-3RG5ZIWI.js";
+
+// src/workspace/harden-permissions.ts
+import { chmodSync, existsSync, readdirSync, statSync } from "fs";
+import { join } from "path";
+var log = createLogger("Permissions");
+var TARGET_MODE = 384;
+var TARGET_DIR_MODE = 448;
+var ROOT_FILES = [
+  "config.yaml",
+  "wallet.json",
+  "telegram_session.txt",
+  "telegram-offset.json",
+  "teleton.db",
+  "teleton.db-wal",
+  "teleton.db-shm"
+];
+var SECURE_DIRS = ["secrets", "plugins", "tls"];
+function hardenExistingPermissions() {
+  let hardened = 0;
+  for (const file of ROOT_FILES) {
+    hardened += hardenFile(join(TELETON_ROOT, file));
+  }
+  for (const path of [
+    WORKSPACE_PATHS.MEMORY,
+    WORKSPACE_PATHS.IDENTITY,
+    WORKSPACE_PATHS.SOUL,
+    WORKSPACE_PATHS.USER,
+    WORKSPACE_PATHS.STRATEGY,
+    WORKSPACE_PATHS.SECURITY,
+    WORKSPACE_PATHS.HEARTBEAT
+  ]) {
+    hardened += hardenFile(path);
+  }
+  hardened += hardenDirectory(WORKSPACE_PATHS.MEMORY_DIR, TARGET_MODE);
+  hardened += hardenDirectory(WORKSPACE_PATHS.DOWNLOADS_DIR, TARGET_MODE);
+  for (const dir of SECURE_DIRS) {
+    const dirPath = join(TELETON_ROOT, dir);
+    if (existsSync(dirPath)) {
+      try {
+        const stat = statSync(dirPath);
+        if ((stat.mode & 511) !== TARGET_DIR_MODE) {
+          chmodSync(dirPath, TARGET_DIR_MODE);
+          hardened++;
+        }
+      } catch {
+      }
+    }
+  }
+  hardened += hardenDirectory(WORKSPACE_PATHS.PLUGINS_DIR, TARGET_MODE);
+  if (hardened > 0) {
+    log.info(`Hardened permissions on ${hardened} existing file(s)`);
+  }
+}
+function hardenFile(filePath) {
+  if (!existsSync(filePath)) return 0;
+  try {
+    const stat = statSync(filePath);
+    if ((stat.mode & 511) !== TARGET_MODE) {
+      chmodSync(filePath, TARGET_MODE);
+      return 1;
+    }
+  } catch {
+  }
+  return 0;
+}
+function hardenDirectory(dirPath, fileMode) {
+  if (!existsSync(dirPath)) return 0;
+  let count = 0;
+  try {
+    const entries = readdirSync(dirPath, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = join(dirPath, entry.name);
+      if (entry.isFile()) {
+        try {
+          const stat = statSync(fullPath);
+          if ((stat.mode & 511) !== fileMode) {
+            chmodSync(fullPath, fileMode);
+            count++;
+          }
+        } catch {
+        }
+      } else if (entry.isDirectory()) {
+        count += hardenDirectory(fullPath, fileMode);
+      }
+    }
+  } catch {
+  }
+  return count;
+}
+export {
+  hardenExistingPermissions
+};

package/dist/index.js

@@ -1,28 +1,29 @@
 import {
   TeletonApp,
   main
-} from "./chunk-UMUONAD6.js";
+} from "./chunk-LM6AL6LN.js";
 import "./chunk-NVKBBTI6.js";
+import "./chunk-5K4YDCVU.js";
+import "./chunk-2MZP75SH.js";
+import "./chunk-LD24DWWE.js";
 import "./chunk-H7MFXJZK.js";
-import "./chunk-LZQOX6YY.js";
-import "./chunk-JROBTXWY.js";
-import "./chunk-NH2CNRKJ.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
+import "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
+import "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-4L66JHQE.js";
 import "./chunk-3RG5ZIWI.js";

package/dist/{local-IHKJFQJS.js → local-HQ3UJ7KR.js}

@@ -1,7 +1,7 @@
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+} from "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{memory-QMJRM3XJ.js → memory-BJH724PQ.js}

@@ -17,7 +17,8 @@ import {
   parseTemporalIntent,
   runMigrations,
   setSchemaVersion
-} from "./chunk-GHMXWAXI.js";
+} from "./chunk-2MZP75SH.js";
+import "./chunk-35X3V6OW.js";
 import {
   AnthropicEmbeddingProvider,
   CachedEmbeddingProvider,
@@ -26,15 +27,15 @@ import {
   deserializeEmbedding,
   hashText,
   serializeEmbedding
-} from "./chunk-35MX4ZUI.js";
+} from "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
 import {
   LocalEmbeddingProvider
-} from "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+} from "./chunk-KYSAHDYE.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import {
   TaskStore,

package/dist/{memory-hook-VUNWZ3NY.js → memory-hook-LUAKTXU5.js}

@@ -1,16 +1,16 @@
 import {
   consolidateOldMemoryFiles,
   saveSessionMemory
-} from "./chunk-ALKAAG4O.js";
+} from "./chunk-LD24DWWE.js";
 import "./chunk-3UFPFWYP.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
+import "./chunk-4KURCUWD.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-GUX6ZFVF.js";
+import "./chunk-L653KKCR.js";
 import "./chunk-NQ6FZKCE.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{migrate-5VBAP52B.js → migrate-C4LBLOZH.js}

@@ -1,15 +1,16 @@
 import {
   getDatabase
-} from "./chunk-GHMXWAXI.js";
-import "./chunk-35MX4ZUI.js";
+} from "./chunk-2MZP75SH.js";
+import "./chunk-35X3V6OW.js";
+import "./chunk-PK3TVFBT.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-CUE4UZXR.js";
+import "./chunk-KYSAHDYE.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{paths-XA2RJH4S.js → paths-WMVV7ZAJ.js}

@@ -4,7 +4,7 @@ import {
   TELETON_ROOT,
   WORKSPACE_PATHS,
   WORKSPACE_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   ALLOWED_EXTENSIONS,

package/dist/{server-WWGVDFPW.js → server-4J56HS62.js}

@@ -1,6 +1,6 @@
 import {
   createSetupRoutes
-} from "./chunk-5LOHRZYY.js";
+} from "./chunk-7ZXUUDQQ.js";
 import {
   createConfigRoutes,
   createHooksRoutes,
@@ -16,32 +16,26 @@ import {
   createToolsRoutes,
   createWorkspaceRoutes,
   logInterceptor
-} from "./chunk-G7PCW63M.js";
+} from "./chunk-Z63KUQX4.js";
 import {
   ensureTlsCert
 } from "./chunk-5SEMA47R.js";
 import "./chunk-WFTC3JJW.js";
-import "./chunk-LZQOX6YY.js";
-import "./chunk-JROBTXWY.js";
-import "./chunk-NH2CNRKJ.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-WTDAICGT.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
 import {
   TELETON_ROOT
-} from "./chunk-EYWNOHMJ.js";
+} from "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";

package/dist/{server-AJCOURH7.js → server-I6TYJ36S.js}

@@ -13,27 +13,20 @@ import {
   createToolsRoutes,
   createWorkspaceRoutes,
   logInterceptor
-} from "./chunk-G7PCW63M.js";
+} from "./chunk-Z63KUQX4.js";
 import "./chunk-WFTC3JJW.js";
-import "./chunk-LZQOX6YY.js";
-import "./chunk-JROBTXWY.js";
-import "./chunk-NH2CNRKJ.js";
-import "./chunk-XDZDOKIF.js";
-import "./chunk-GHMXWAXI.js";
-import "./chunk-ALKAAG4O.js";
+import "./chunk-6U6VA2OT.js";
+import "./chunk-M6M4DCDU.js";
+import "./chunk-FSL2MOYK.js";
+import "./chunk-35X3V6OW.js";
 import "./chunk-3UFPFWYP.js";
 import "./chunk-7TECSLJ4.js";
-import "./chunk-35MX4ZUI.js";
 import "./chunk-VFA7QMCZ.js";
-import "./chunk-C4NKJT2Z.js";
-import "./chunk-LVTKJQ7O.js";
-import "./chunk-WTDAICGT.js";
+import "./chunk-L3LPVF4Z.js";
 import "./chunk-6OOHHJ4N.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-CUE4UZXR.js";
-import "./chunk-EYWNOHMJ.js";
+import "./chunk-L653KKCR.js";
 import {
   createLogger
 } from "./chunk-NQ6FZKCE.js";