teleton 0.8.4 → 0.8.6

package/dist/cli/index.js

@@ -1,16 +1,16 @@
 import {
   ensureTlsCert
-} from "../chunk-5SEMA47R.js";
+} from "../chunk-RILOEIK6.js";
 import {
   getModelsForProvider
-} from "../chunk-WFTC3JJW.js";
+} from "../chunk-3NO7QU7W.js";
 import {
   TelegramUserClient,
   main
-} from "../chunk-UMUONAD6.js";
-import "../chunk-NVKBBTI6.js";
-import "../chunk-H7MFXJZK.js";
-import "../chunk-LZQOX6YY.js";
+} from "../chunk-4MFN75ZK.js";
+import "../chunk-K3QSIIMZ.js";
+import "../chunk-7KI25UJU.js";
+import "../chunk-6IFNQWIM.js";
 import {
   CONFIGURABLE_KEYS,
   deleteNestedValue,
@@ -23,48 +23,58 @@ import {
   setNestedValue,
   walletExists,
   writeRawConfig
-} from "../chunk-JROBTXWY.js";
+} from "../chunk-ZHRDETCX.js";
 import {
   ConfigSchema,
   DealsConfigSchema,
   configExists,
-  ensureWorkspace,
-  getDefaultConfigPath,
-  isNewWorkspace
-} from "../chunk-NH2CNRKJ.js";
-import "../chunk-XDZDOKIF.js";
-import "../chunk-GHMXWAXI.js";
-import "../chunk-ALKAAG4O.js";
+  getDefaultConfigPath
+} from "../chunk-2UUGRY5B.js";
+import "../chunk-7TECSLJ4.js";
+import "../chunk-AX5NBEHX.js";
+import "../chunk-F6S3L3OV.js";
+import "../chunk-ULVL2W3D.js";
+import "../chunk-QYZBWU2D.js";
+import "../chunk-OMQIAWEU.js";
+import "../chunk-4L66JHQE.js";
+import "../chunk-TTOZCZWE.js";
+import "../chunk-Z5WY7BSB.js";
+import "../chunk-VFA7QMCZ.js";
+import "../chunk-ZGKE3OTA.js";
+import "../chunk-UJ54YT2T.js";
+import "../chunk-WSL4KIOI.js";
+import "../chunk-EKCXKL5M.js";
 import {
   getErrorMessage
 } from "../chunk-3UFPFWYP.js";
-import "../chunk-7TECSLJ4.js";
-import "../chunk-35MX4ZUI.js";
-import "../chunk-VFA7QMCZ.js";
+import "../chunk-PCT7GYBP.js";
+import {
+  ensureWorkspace,
+  isNewWorkspace
+} from "../chunk-CXTZPOTA.js";
 import {
   TELEGRAM_MAX_MESSAGE_LENGTH
-} from "../chunk-C4NKJT2Z.js";
-import "../chunk-LVTKJQ7O.js";
+} from "../chunk-J4WDJ7XS.js";
+import "../chunk-D3GT6YIY.js";
 import {
   getClaudeCodeApiKey,
   isClaudeCodeTokenValid
-} from "../chunk-WTDAICGT.js";
+} from "../chunk-R6W4DJRK.js";
 import {
   getProviderMetadata,
   getSupportedProviders,
   validateApiKeyFormat
-} from "../chunk-6OOHHJ4N.js";
+} from "../chunk-TFTNZZDH.js";
 import {
   fetchWithTimeout
 } from "../chunk-XQUHC3JZ.js";
 import "../chunk-R4YSJ4EY.js";
-import "../chunk-LC4TV3KL.js";
-import "../chunk-CUE4UZXR.js";
+import "../chunk-4MG2AROG.js";
+import "../chunk-BT2I3ETV.js";
 import {
   TELETON_ROOT
-} from "../chunk-EYWNOHMJ.js";
-import "../chunk-NQ6FZKCE.js";
-import "../chunk-4L66JHQE.js";
+} from "../chunk-L653KKCR.js";
+import "../chunk-V3S3NXBQ.js";
 import "../chunk-3RG5ZIWI.js";
 
 // src/cli/index.ts
@@ -388,7 +398,7 @@ function sleep(ms) {
 }
 async function onboardCommand(options = {}) {
   if (options.ui) {
-    const { SetupServer } = await import("../setup-server-VDY64CWW.js");
+    const { SetupServer } = await import("../setup-server-YWAPKZVE.js");
     const port = parseInt(options.uiPort || "7777") || 7777;
     const url = `http://localhost:${port}/setup`;
     const blue2 = "\x1B[34m";
@@ -431,14 +441,14 @@ ${blue2}  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25
     } else {
       await runInteractiveOnboarding(options, prompter);
     }
-  } catch (err) {
-    if (err instanceof CancelledError) {
+  } catch (error) {
+    if (error instanceof CancelledError) {
       console.log(`
   ${DIM("Setup cancelled. No changes were made.")}
 `);
       process.exit(0);
     }
-    throw err;
+    throw error;
   }
 }
 async function runInteractiveOnboarding(options, prompter) {
@@ -452,6 +462,7 @@ async function runInteractiveOnboarding(options, prompter) {
   let tonapiKey;
   let toncenterApiKey;
   let tavilyApiKey;
+  let telegramMode = "user";
   let botToken;
   let botUsername;
   let dmPolicy = "admin-only";
@@ -515,6 +526,23 @@ async function runInteractiveOnboarding(options, prompter) {
     const updated = identity.replace("[Your name - pick one or ask your human]", agentName.trim());
     writeFileSync(workspace.identityPath, updated, "utf-8");
   }
+  telegramMode = await select({
+    message: "Telegram mode",
+    default: "user",
+    theme: inquirerTheme,
+    choices: [
+      {
+        value: "user",
+        name: "User Account (full power)",
+        description: "Log in with your personal Telegram account"
+      },
+      {
+        value: "bot",
+        name: "Bot Telegram (simpler setup)",
+        description: "Use a Telegram bot token \u2014 no phone number needed"
+      }
+    ]
+  });
   STEPS[0].value = agentName;
   redraw(1);
   const providers = getSupportedProviders();
@@ -603,8 +631,8 @@ Token will auto-refresh when it expires.`,
         default: true,
         theme: inquirerTheme
       });
-    } catch (err) {
-      if (err instanceof CancelledError) throw err;
+    } catch (error) {
+      if (error instanceof CancelledError) throw error;
       prompter.warn(
         "Claude Code credentials not found. Make sure Claude Code is installed and authenticated (claude login)."
       );
@@ -706,41 +734,47 @@ Get it at: ${providerMeta.consoleUrl}`,
     }
   });
   userId = parseInt(userIdStr);
-  dmPolicy = await select({
-    message: "DM policy (private messages)",
-    default: "admin-only",
-    theme: inquirerTheme,
-    choices: [
-      {
-        value: "admin-only",
-        name: "Admin Only",
-        description: "Only admins can DM the agent"
-      },
-      { value: "allowlist", name: "Allowlist", description: "Only specific users" },
-      { value: "open", name: "Open", description: "Reply to everyone" },
-      { value: "disabled", name: "Disabled", description: "Ignore all DMs" }
-    ]
-  });
-  groupPolicy = await select({
-    message: "Group policy",
-    default: "admin-only",
-    theme: inquirerTheme,
-    choices: [
-      {
-        value: "admin-only",
-        name: "Admin Only",
-        description: "Only admins can trigger the agent"
-      },
-      { value: "allowlist", name: "Allowlist", description: "Only specific groups" },
-      { value: "open", name: "Open", description: "Reply in all groups" },
-      { value: "disabled", name: "Disabled", description: "Ignore all group messages" }
-    ]
-  });
-  requireMention = await confirm({
-    message: "Require @mention in groups?",
-    default: true,
-    theme: inquirerTheme
-  });
+  if (telegramMode === "bot") {
+    dmPolicy = "admin-only";
+    groupPolicy = "admin-only";
+    requireMention = true;
+  } else {
+    dmPolicy = await select({
+      message: "DM policy (private messages)",
+      default: "admin-only",
+      theme: inquirerTheme,
+      choices: [
+        {
+          value: "admin-only",
+          name: "Admin Only",
+          description: "Only admins can DM the agent"
+        },
+        { value: "allowlist", name: "Allowlist", description: "Only specific users" },
+        { value: "open", name: "Open", description: "Reply to everyone" },
+        { value: "disabled", name: "Disabled", description: "Ignore all DMs" }
+      ]
+    });
+    groupPolicy = await select({
+      message: "Group policy",
+      default: "admin-only",
+      theme: inquirerTheme,
+      choices: [
+        {
+          value: "admin-only",
+          name: "Admin Only",
+          description: "Only admins can trigger the agent"
+        },
+        { value: "allowlist", name: "Allowlist", description: "Only specific groups" },
+        { value: "open", name: "Open", description: "Reply in all groups" },
+        { value: "disabled", name: "Disabled", description: "Ignore all group messages" }
+      ]
+    });
+    requireMention = await confirm({
+      message: "Require @mention in groups?",
+      default: true,
+      theme: inquirerTheme
+    });
+  }
   maxAgenticIterations = await input({
     message: "Max agentic iterations (tool call loops per message)",
     default: "5",
@@ -766,11 +800,11 @@ Get it at: ${providerMeta.consoleUrl}`,
   STEPS[2].value = `${dmPolicy}/${groupPolicy}`;
   redraw(3);
   const extras = [];
-  const setupBot = await confirm({
+  const setupBot = telegramMode === "user" ? await confirm({
     message: `Add a Telegram bot token? ${DIM("(recommended \u2014 enables deals & inline buttons)")}`,
     default: true,
     theme: inquirerTheme
-  });
+  }) : false;
   if (setupBot) {
     noteBox(
       "Create a bot with @BotFather on Telegram:\n1. Send /newbot and follow the instructions\n2. Copy the bot token\n3. Enable inline mode: /setinline on the bot",
@@ -996,43 +1030,76 @@ Get it at: ${providerMeta.consoleUrl}`,
   }
   STEPS[4].value = `${wallet.address.slice(0, 8)}...${wallet.address.slice(-4)}`;
   redraw(5);
-  noteBox(
-    'To get your API credentials:\n\n  1. Go to https://my.telegram.org/apps\n  2. Log in with your phone number\n  3. Click "API development tools"\n  4. Create an application (any name/short name works)\n  5. Copy the API ID (number) and API Hash (hex string)\n\n\u26A0 Do NOT use a VPN \u2014 Telegram will block the login page.',
-    "Telegram",
-    TON
-  );
-  const envApiId = process.env.TELETON_TG_API_ID;
-  const envApiHash = process.env.TELETON_TG_API_HASH;
-  const envPhone = process.env.TELETON_TG_PHONE;
-  const apiIdStr = options.apiId ? options.apiId.toString() : await input({
-    message: envApiId ? "API ID (from env)" : "API ID (from my.telegram.org)",
-    default: envApiId,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || isNaN(parseInt(value))) return "Invalid API ID (must be a number)";
-      return true;
-    }
-  });
-  apiId = parseInt(apiIdStr);
-  apiHash = options.apiHash ? options.apiHash : await input({
-    message: envApiHash ? "API Hash (from env)" : "API Hash (from my.telegram.org)",
-    default: envApiHash,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || value.length < 10) return "Invalid API Hash";
-      return true;
-    }
-  });
-  phone = options.phone ? options.phone : await input({
-    message: envPhone ? "Phone number (from env)" : "Phone number (international format)",
-    default: envPhone,
-    theme: inquirerTheme,
-    validate: (value) => {
-      if (!value || !value.startsWith("+")) return "Must start with +";
-      return true;
+  if (telegramMode === "bot") {
+    noteBox(
+      "Create or use an existing bot with @BotFather on Telegram:\n1. Send /newbot and follow the instructions\n2. Copy the bot token (format: 123456:ABC-DEF...)\n3. Start the bot by sending /start to it",
+      "Bot Token",
+      TON
+    );
+    const tokenInput = await password({
+      message: "Bot token (from @BotFather)",
+      theme: inquirerTheme,
+      validate: (value = "") => {
+        if (!value) return "Bot token is required";
+        if (!/^[0-9]+:[A-Za-z0-9_-]+$/.test(value))
+          return "Invalid format (expected 123456:ABC...)";
+        return true;
+      }
+    });
+    botToken = tokenInput;
+    spinner.start(DIM("Validating bot token..."));
+    try {
+      const res = await fetchWithTimeout(`https://api.telegram.org/bot${botToken}/getMe`);
+      const data = await res.json();
+      if (!data.ok) {
+        spinner.warn(DIM("Bot token validation failed \u2014 saving anyway"));
+      } else {
+        botUsername = data.result.username;
+        spinner.succeed(DIM(`Bot verified: @${botUsername}`));
+      }
+    } catch {
+      spinner.warn(DIM("Could not validate bot token (network error) \u2014 saving anyway"));
     }
-  });
-  STEPS[5].value = phone;
+    STEPS[5].value = botUsername ? `@${botUsername}` : "bot token set";
+  } else {
+    noteBox(
+      'To get your API credentials:\n\n  1. Go to https://my.telegram.org/apps\n  2. Log in with your phone number\n  3. Click "API development tools"\n  4. Create an application (any name/short name works)\n  5. Copy the API ID (number) and API Hash (hex string)\n\n\u26A0 Do NOT use a VPN \u2014 Telegram will block the login page.',
+      "Telegram",
+      TON
+    );
+    const envApiId = process.env.TELETON_TG_API_ID;
+    const envApiHash = process.env.TELETON_TG_API_HASH;
+    const envPhone = process.env.TELETON_TG_PHONE;
+    const apiIdStr = options.apiId ? options.apiId.toString() : await input({
+      message: envApiId ? "API ID (from env)" : "API ID (from my.telegram.org)",
+      default: envApiId,
+      theme: inquirerTheme,
+      validate: (value) => {
+        if (!value || isNaN(parseInt(value))) return "Invalid API ID (must be a number)";
+        return true;
+      }
+    });
+    apiId = parseInt(apiIdStr);
+    apiHash = options.apiHash ? options.apiHash : await input({
+      message: envApiHash ? "API Hash (from env)" : "API Hash (from my.telegram.org)",
+      default: envApiHash,
+      theme: inquirerTheme,
+      validate: (value) => {
+        if (!value || value.length < 10) return "Invalid API Hash";
+        return true;
+      }
+    });
+    phone = options.phone ? options.phone : await input({
+      message: envPhone ? "Phone number (from env)" : "Phone number (international format)",
+      default: envPhone,
+      theme: inquirerTheme,
+      validate: (value) => {
+        if (!value || !value.startsWith("+")) return "Must start with +";
+        return true;
+      }
+    });
+    STEPS[5].value = phone;
+  }
   redraw(6);
   const config = {
     meta: {
@@ -1049,6 +1116,7 @@ Get it at: ${providerMeta.consoleUrl}`,
       temperature: 0.7,
       system_prompt: null,
       max_agentic_iterations: parseInt(maxAgenticIterations, 10),
+      toolset: "full",
       session_reset_policy: {
         daily_reset_enabled: true,
         daily_reset_hour: 4,
@@ -1057,9 +1125,10 @@ Get it at: ${providerMeta.consoleUrl}`,
       }
     },
     telegram: {
-      api_id: apiId,
-      api_hash: apiHash,
-      phone,
+      mode: telegramMode,
+      api_id: telegramMode === "user" ? apiId : 0,
+      api_hash: telegramMode === "user" ? apiHash : "",
+      phone: telegramMode === "user" ? phone : "",
       session_name: "teleton_session",
       session_path: workspace.sessionPath,
       dm_policy: dmPolicy,
@@ -1076,7 +1145,8 @@ Get it at: ${providerMeta.consoleUrl}`,
       agent_channel: null,
       debounce_ms: 1500,
       bot_token: botToken,
-      bot_username: botUsername
+      bot_username: botUsername,
+      stream_mode: "all"
     },
     storage: {
       sessions_file: `${workspace.root}/sessions.json`,
@@ -1119,6 +1189,12 @@ Get it at: ${providerMeta.consoleUrl}`,
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 36e5,
+      prompt: "Execute your HEARTBEAT.md checklist now. Work through each item using tool calls.",
+      self_configurable: false
+    },
     plugins: {},
     ...selectedProvider === "cocoon" ? { cocoon: { port: cocoonInstance } } : {},
     tonapi_key: tonapiKey,
@@ -1130,44 +1206,52 @@ Get it at: ${providerMeta.consoleUrl}`,
   writeFileSync(workspace.configPath, configYaml, { encoding: "utf-8", mode: 384 });
   spinner.succeed(DIM(`Configuration saved: ${workspace.configPath}`));
   let telegramConnected = false;
-  const connectNow = await confirm({
-    message: `Connect to Telegram now? ${DIM("(verification code will be sent to your phone)")}`,
-    default: true,
-    theme: inquirerTheme
-  });
-  if (connectNow) {
-    console.log(
-      `
+  if (telegramMode === "bot") {
+    console.log(`
+  ${DIM("Bot mode \u2014 no Telegram auth required. Ready to start.")}
+`);
+    STEPS[6].value = "Bot mode \u2713";
+    telegramConnected = true;
+  } else {
+    const connectNow = await confirm({
+      message: `Connect to Telegram now? ${DIM("(verification code will be sent to your phone)")}`,
+      default: true,
+      theme: inquirerTheme
+    });
+    if (connectNow) {
+      console.log(
+        `
   ${DIM("Connecting to Telegram... Check your phone for the verification code.")}`
-    );
-    try {
-      const sessionPath = join(TELETON_ROOT, "telegram_session.txt");
-      const client = new TelegramUserClient({
-        apiId,
-        apiHash,
-        phone,
-        sessionPath
-      });
-      await client.connect();
-      const me = client.getMe();
-      await client.disconnect();
-      telegramConnected = true;
-      const displayName = `${me?.firstName || ""}${me?.username ? ` (@${me.username})` : ""}`;
-      console.log(`  ${GREEN("\u2713")} ${DIM("Telegram connected as")} ${CYAN(displayName)}
+      );
+      try {
+        const sessionPath = join(TELETON_ROOT, "telegram_session.txt");
+        const client = new TelegramUserClient({
+          apiId,
+          apiHash,
+          phone,
+          sessionPath
+        });
+        await client.connect();
+        const me = client.getMe();
+        await client.disconnect();
+        telegramConnected = true;
+        const displayName = `${me?.firstName || ""}${me?.username ? ` (@${me.username})` : ""}`;
+        console.log(`  ${GREEN("\u2713")} ${DIM("Telegram connected as")} ${CYAN(displayName)}
 `);
-      STEPS[6].value = `Connected${me?.username ? ` (@${me.username})` : ""}`;
-    } catch (err) {
-      prompter.warn(
-        `Telegram connection failed: ${err instanceof Error ? err.message : String(err)}
+        STEPS[6].value = `Connected${me?.username ? ` (@${me.username})` : ""}`;
+      } catch (error) {
+        prompter.warn(
+          `Telegram connection failed: ${getErrorMessage(error)}
 You can authenticate later when running: teleton start`
-      );
-      STEPS[6].value = "Auth on first start";
-    }
-  } else {
-    console.log(`
+        );
+        STEPS[6].value = "Auth on first start";
+      }
+    } else {
+      console.log(`
   ${DIM("You can authenticate later when running: teleton start")}
 `);
-    STEPS[6].value = "Auth on first start";
+      STEPS[6].value = "Auth on first start";
+    }
   }
   console.clear();
   console.log();
@@ -1183,10 +1267,26 @@ You can authenticate later when running: teleton start`
 }
 async function runNonInteractiveOnboarding(options, prompter) {
   const selectedProvider = options.provider || "anthropic";
+  const nonInteractiveMode = options.mode || "user";
   const needsApiKey = selectedProvider !== "cocoon" && selectedProvider !== "local";
-  if (!options.apiId || !options.apiHash || !options.phone || !options.userId) {
-    prompter.error("Non-interactive mode requires: --api-id, --api-hash, --phone, --user-id");
-    process.exit(1);
+  if (nonInteractiveMode === "bot") {
+    if (!options.botToken) {
+      prompter.error("Non-interactive bot mode requires: --bot-token");
+      process.exit(1);
+    }
+    if (!/^[0-9]+:[A-Za-z0-9_-]+$/.test(options.botToken)) {
+      prompter.error("--bot-token format invalid (expected 123456:ABC...)");
+      process.exit(1);
+    }
+    if (!options.userId) {
+      prompter.error("Non-interactive bot mode requires: --user-id");
+      process.exit(1);
+    }
+  } else {
+    if (!options.apiId || !options.apiHash || !options.phone || !options.userId) {
+      prompter.error("Non-interactive mode requires: --api-id, --api-hash, --phone, --user-id");
+      process.exit(1);
+    }
   }
   if (needsApiKey && !options.apiKey) {
     prompter.error(`Non-interactive mode requires --api-key for provider "${selectedProvider}"`);
@@ -1216,6 +1316,7 @@ async function runNonInteractiveOnboarding(options, prompter) {
       temperature: 0.7,
       system_prompt: null,
       max_agentic_iterations: 5,
+      toolset: "full",
       session_reset_policy: {
         daily_reset_enabled: true,
         daily_reset_hour: 4,
@@ -1224,9 +1325,10 @@ async function runNonInteractiveOnboarding(options, prompter) {
       }
     },
     telegram: {
-      api_id: options.apiId,
-      api_hash: options.apiHash,
-      phone: options.phone,
+      mode: nonInteractiveMode,
+      api_id: nonInteractiveMode === "user" ? options.apiId ?? 0 : 0,
+      api_hash: nonInteractiveMode === "user" ? options.apiHash ?? "" : "",
+      phone: nonInteractiveMode === "user" ? options.phone ?? "" : "",
       session_name: "teleton_session",
       session_path: workspace.sessionPath,
       dm_policy: "admin-only",
@@ -1238,12 +1340,13 @@ async function runNonInteractiveOnboarding(options, prompter) {
       typing_simulation: true,
       rate_limit_messages_per_second: 1,
       rate_limit_groups_per_minute: 20,
-      admin_ids: [options.userId],
-      owner_id: options.userId,
+      admin_ids: [options.userId ?? 0],
+      owner_id: options.userId ?? 0,
       agent_channel: null,
       debounce_ms: 1500,
-      bot_token: void 0,
-      bot_username: void 0
+      bot_token: nonInteractiveMode === "bot" ? options.botToken : void 0,
+      bot_username: void 0,
+      stream_mode: "all"
     },
     storage: {
       sessions_file: `${workspace.root}/sessions.json`,
@@ -1285,6 +1388,12 @@ async function runNonInteractiveOnboarding(options, prompter) {
       }
     },
     ton_proxy: { enabled: false, port: 8080 },
+    heartbeat: {
+      enabled: true,
+      interval_ms: 36e5,
+      prompt: "Execute your HEARTBEAT.md checklist now. Work through each item using tool calls.",
+      self_configurable: false
+    },
     mcp: { servers: {} },
     plugins: {},
     tavily_api_key: options.tavilyApiKey
@@ -1332,11 +1441,11 @@ async function checkConfig(workspaceDir) {
       status: "ok",
       message: "Valid"
     };
-  } catch (err) {
+  } catch (error) {
     return {
       name: "Config file",
       status: "error",
-      message: `Parse error: ${err instanceof Error ? err.message : String(err)}`
+      message: `Parse error: ${getErrorMessage(error)}`
     };
   }
 }
@@ -1815,12 +1924,12 @@ async function actionSet(key, value, configPath) {
           }
         });
       }
-    } catch (e) {
-      if (e instanceof CancelledError) {
+    } catch (error) {
+      if (error instanceof CancelledError) {
         console.log("Cancelled.");
         return;
       }
-      throw e;
+      throw error;
     }
   }
   const err = meta.validate(value);
@@ -1961,7 +2070,7 @@ program.command("start").description("Start the Teleton agent").option("-c, --co
       if (options.jsonCredentials) {
         process.env.TELETON_JSON_CREDENTIALS = "true";
       }
-      const { startApiOnly } = await import("../bootstrap-NNEI3Z5H.js");
+      const { startApiOnly } = await import("../bootstrap-PFBH6ALD.js");
       await startApiOnly({ config: options.config, apiPort: options.apiPort });
       return;
     }
@@ -2004,7 +2113,11 @@ program.command("doctor").description("Run system health checks").action(async (
 var mcp = program.command("mcp").description("Manage MCP (Model Context Protocol) servers");
 mcp.command("add <package> [args...]").description(
   "Add an MCP server (e.g. teleton mcp add @modelcontextprotocol/server-filesystem /tmp)"
-).option("-n, --name <name>", "Server name (auto-derived from package if omitted)").option("-s, --scope <scope>", "Tool scope: always | dm-only | group-only | admin-only", "always").option(
+).option("-n, --name <name>", "Server name (auto-derived from package if omitted)").option(
+  "-s, --scope <scope>",
+  "Tool scope: always | open | dm-only | group-only | admin-only | allowlist | disabled",
+  "always"
+).option(
   "-e, --env <KEY=VALUE...>",
   "Environment variables (repeatable)",
   (v, prev) => [...prev, v],

package/dist/{client-5KD25NOP.js → client-S5UIK6OG.js}

@@ -7,15 +7,16 @@ import {
   isOAuthToken,
   loadContextFromTranscript,
   registerCocoonModels,
-  registerLocalModels
-} from "./chunk-LVTKJQ7O.js";
-import "./chunk-WTDAICGT.js";
-import "./chunk-6OOHHJ4N.js";
+  registerLocalModels,
+  streamWithContext
+} from "./chunk-D3GT6YIY.js";
+import "./chunk-R6W4DJRK.js";
+import "./chunk-TFTNZZDH.js";
 import "./chunk-XQUHC3JZ.js";
 import "./chunk-R4YSJ4EY.js";
-import "./chunk-LC4TV3KL.js";
-import "./chunk-EYWNOHMJ.js";
-import "./chunk-NQ6FZKCE.js";
+import "./chunk-4MG2AROG.js";
+import "./chunk-L653KKCR.js";
+import "./chunk-V3S3NXBQ.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   chatWithContext,
@@ -26,5 +27,6 @@ export {
   isOAuthToken,
   loadContextFromTranscript,
   registerCocoonModels,
-  registerLocalModels
+  registerLocalModels,
+  streamWithContext
 };