tg-agent 0.1.0

package/.env.example

@@ -0,0 +1,50 @@
+# Required
+TELEGRAM_BOT_TOKEN=
+
+# Optional allowlist (comma-separated user IDs)
+TELEGRAM_ALLOWED_USER_IDS=
+
+# Codex auth location (optional)
+CODEX_HOME=~/.codex
+
+# Runtime dirs
+AGENT_DIR=~/.tg-agent
+WORKSPACE_DIR=~/
+SESSION_DIR=~/.codex/tg-sessions
+
+# Model selection
+LLM_PROVIDER=openai-codex
+LLM_MODEL=gpt-5.2
+OPENAI_API_KEY=
+
+# Limits
+MAX_SESSIONS=3
+MAX_CONCURRENT=3
+SESSION_TTL_MIN=60
+MAX_HISTORY_MESSAGES=40
+
+# Timeouts
+MODEL_TIMEOUT_MS=60000
+MODEL_TIMEOUT_STREAM_MS=300000
+
+# Fetch tool
+FETCH_MAX_BYTES=200000
+FETCH_TIMEOUT_MS=60000
+FETCH_PROXY_URL=
+
+# Proxy for model + global traffic (or use standard HTTP(S)_PROXY / ALL_PROXY)
+PROXY_URL=
+
+# MCP
+
+# TLS (optional)
+NODE_EXTRA_CA_CERTS=
+NODE_TLS_REJECT_UNAUTHORIZED=
+
+# Logging
+LOG_AGENT_EVENTS=1
+LOG_AGENT_STREAM=0
+
+# Output / prompt
+SYSTEM_PROMPT=You are Codex running locally. Be concise and practical.
+TELEGRAM_PARSE_MODE=

package/README.md

@@ -0,0 +1,152 @@
+# tg-agent
+
+一个在本地运行的 Telegram DM 机器人，用 Codex 账号驱动的 agent 来处理对话、工具调用与会话管理。支持多会话、会话持久化、/stop 中断、工具状态回写，适合在 macOS 上长期跑。
+
+## 功能
+
+- Telegram DM 交互（仅私聊）
+- 多会话管理：/new /list /use /close /reset
+- 会话持久化：默认保存到 `~/.codex/tg-sessions`
+- 运行中可取消：/stop
+- 自动 Markdown 渲染：优先 MarkdownV2，失败回退 Markdown，再回退纯文本
+- 多 Provider / 多 Model 选择（支持 Codex / antigravity / Gemini CLI 等）
+- OAuth 登录与注销（/login, /logout）
+- 工具调用：内置 `fetch`，可选 MCP（HTTP/stdio）
+- 代理支持：模型与工具请求可分别配置
+
+## 快速开始
+
+1) 安装依赖
+
+```bash
+npm install
+```
+
+2) 配置环境变量
+
+复制并修改 `.env`：
+
+```bash
+cp .env.example .env
+```
+
+最小必需配置示例：
+
+```env
+TELEGRAM_BOT_TOKEN=YOUR_BOT_TOKEN
+TELEGRAM_ALLOWED_USER_IDS=123456789
+PROXY_URL=socks5h://127.0.0.1:7890
+LLM_PROVIDER=openai-codex
+LLM_MODEL=codex-latest
+```
+
+3) 运行
+
+```bash
+npm run dev
+```
+
+或构建后运行：
+
+```bash
+npm run build
+npm start
+```
+
+## 使用说明
+
+在 Telegram 私聊中发送：
+
+- `/new [title]` 创建会话
+- `/list` 列出会话
+- `/use <id>` 切换会话
+- `/close [id]` 关闭会话
+- `/reset` 清空当前会话历史
+- `/stop` 终止当前正在处理的请求
+- `/providers` 列出可用 Provider
+- `/models [provider]` 列出模型
+- `/provider <name>` 设置当前会话 Provider
+- `/model <provider>/<model>` 设置当前会话模型
+- `/mcp` 查看 MCP 服务器与连接状态
+- `/status` 查看当前会话模型设置
+- `/login <provider>` OAuth 登录
+- `/logout <provider>` 退出登录
+
+默认仅支持私聊（DM）。
+
+## 环境变量
+
+`.env.example` 已列出所有可配置项。常用说明如下：
+
+- `TELEGRAM_BOT_TOKEN`：必填
+- `TELEGRAM_ALLOWED_USER_IDS`：可选，逗号分隔白名单用户 ID
+- `AGENT_DIR`：agent 配置与缓存目录（默认 `~/.tg-agent`）
+- `WORKSPACE_DIR`：工具操作的工作目录
+- `SESSION_DIR`：会话持久化目录
+- `LLM_PROVIDER`：模型提供方（默认 `openai-codex`）
+- `LLM_MODEL`：模型 ID，例如 `codex-latest`
+- `PROXY_URL`：模型与全局流量代理
+- `FETCH_PROXY_URL`：仅用于 `fetch` 工具的代理（必须是 HTTP/HTTPS）
+MCP 配置通过 `~/.tg-agent/config.toml` 提供，示例见下。
+
+## Codex 认证
+
+优先使用本机 Codex OAuth 凭据（`codex login` 写入的配置）。
+也可以在 Telegram 内执行 `/login openai-codex`，将凭据保存到 `AGENT_DIR/auth.json`。
+如果运行时提示缺少权限或无法找到凭据，请重新执行：
+
+```bash
+codex login
+```
+
+## MCP 配置
+
+在 `~/.tg-agent/config.toml` 中添加 MCP 服务器：
+
+```toml
+[mcp_servers.context7]
+type = "stdio"
+command = "npx"
+args = ["-y", "@upstash/context7-mcp@latest"]
+
+[mcp_servers.Notion]
+url = "https://mcp.notion.com/mcp"
+```
+
+## 打包发布
+
+构建并生成可执行入口：
+
+```bash
+npm run build
+```
+
+本地验证打包内容：
+
+```bash
+npm pack
+```
+
+发布到 npm（可选）：
+
+```bash
+npm publish
+```
+
+安装后可直接使用：
+
+```bash
+tg-agent
+```
+
+## 常见问题
+
+- `Bad Request: can't parse entities`: 说明文本不符合 MarkdownV2 规则，当前实现会自动降级。
+- `No Codex OAuth credentials found`: 执行 `codex login`。
+- `insufficient permissions`: 检查组织/项目权限或 OAuth scope。
+- 网络错误：检查代理配置与 TLS 证书设置。
+
+## 安全说明
+
+- 不要提交 `.env` 到仓库。
+- 建议开启 `TELEGRAM_ALLOWED_USER_IDS` 白名单。

package/dist/auth.js

@@ -0,0 +1,71 @@
+import { config } from "./config.js";
+import { readCodexOAuth } from "./codexAuth.js";
+export function resolveApiKeyForProvider(providerRaw) {
+    const provider = providerRaw.trim().toLowerCase();
+    if (provider === "openai-codex" || provider === "codex") {
+        const codex = readCodexOAuth();
+        if (codex) {
+            return { apiKey: codex.accessToken, source: `codex:${codex.source}` };
+        }
+        throw new Error("No Codex OAuth credentials found. Run `codex login`.");
+    }
+    if (config.openaiApiKey) {
+        return { apiKey: config.openaiApiKey, source: "env:OPENAI_API_KEY" };
+    }
+    throw new Error(`No API key for provider: ${providerRaw}`);
+}
+function resolveProxyUrl() {
+    const candidates = [
+        { key: "PROXY_URL", value: process.env.PROXY_URL },
+        { key: "FETCH_PROXY_URL", value: process.env.FETCH_PROXY_URL },
+        { key: "HTTPS_PROXY", value: process.env.HTTPS_PROXY },
+        { key: "https_proxy", value: process.env.https_proxy },
+        { key: "HTTP_PROXY", value: process.env.HTTP_PROXY },
+        { key: "http_proxy", value: process.env.http_proxy },
+        { key: "ALL_PROXY", value: process.env.ALL_PROXY },
+        { key: "all_proxy", value: process.env.all_proxy },
+    ];
+    for (const entry of candidates) {
+        const raw = entry.value?.trim();
+        if (raw) {
+            return { url: raw, source: entry.key };
+        }
+    }
+    return null;
+}
+function detectProxyKind(url) {
+    const lower = url.toLowerCase();
+    if (lower.startsWith("socks5://") || lower.startsWith("socks4://") || lower.startsWith("socks://")) {
+        return "socks";
+    }
+    if (lower.startsWith("https://")) {
+        return "https";
+    }
+    return "http";
+}
+export function resolveProxyInfo() {
+    const resolved = resolveProxyUrl();
+    if (!resolved)
+        return null;
+    return { url: resolved.url, kind: detectProxyKind(resolved.url), source: resolved.source };
+}
+export function resolveFetchProxyInfo() {
+    const candidates = [
+        { key: "FETCH_PROXY_URL", value: process.env.FETCH_PROXY_URL },
+        { key: "HTTPS_PROXY", value: process.env.HTTPS_PROXY },
+        { key: "https_proxy", value: process.env.https_proxy },
+        { key: "HTTP_PROXY", value: process.env.HTTP_PROXY },
+        { key: "http_proxy", value: process.env.http_proxy },
+    ];
+    for (const entry of candidates) {
+        const raw = entry.value?.trim();
+        if (!raw)
+            continue;
+        const kind = detectProxyKind(raw);
+        if (kind === "socks") {
+            continue;
+        }
+        return { url: raw, kind, source: entry.key };
+    }
+    return null;
+}

package/dist/cli.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "./index.js";

package/dist/codexAuth.js

@@ -0,0 +1,93 @@
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { execSync } from "node:child_process";
+const CODEX_AUTH_FILENAME = "auth.json";
+const CODEX_KEYCHAIN_SERVICE = "Codex Auth";
+function resolveCodexHome() {
+    const configured = process.env.CODEX_HOME?.trim();
+    const base = configured ? configured : "~/.codex";
+    return expandHome(base);
+}
+function resolveCodexAuthPath() {
+    return path.join(resolveCodexHome(), CODEX_AUTH_FILENAME);
+}
+function expandHome(inputPath) {
+    if (!inputPath.startsWith("~")) {
+        return inputPath;
+    }
+    return path.join(os.homedir(), inputPath.slice(1));
+}
+function computeKeychainAccount(codexHome) {
+    const hash = createHash("sha256").update(codexHome).digest("hex");
+    return `cli|${hash.slice(0, 16)}`;
+}
+function readCodexFromKeychain() {
+    if (process.platform !== "darwin") {
+        return null;
+    }
+    const codexHome = resolveCodexHome();
+    const account = computeKeychainAccount(codexHome);
+    try {
+        const secret = execSync(`security find-generic-password -s "${CODEX_KEYCHAIN_SERVICE}" -a "${account}" -w`, { encoding: "utf8", timeout: 5000, stdio: ["pipe", "pipe", "pipe"] }).trim();
+        const parsed = JSON.parse(secret);
+        const tokens = parsed.tokens;
+        const accessToken = tokens?.access_token;
+        const refreshToken = tokens?.refresh_token;
+        if (typeof accessToken !== "string" || !accessToken)
+            return null;
+        if (typeof refreshToken !== "string" || !refreshToken)
+            return null;
+        const lastRefreshRaw = parsed.last_refresh;
+        const lastRefresh = typeof lastRefreshRaw === "string" || typeof lastRefreshRaw === "number"
+            ? new Date(lastRefreshRaw).getTime()
+            : Date.now();
+        const expiresAt = Number.isFinite(lastRefresh)
+            ? lastRefresh + 60 * 60 * 1000
+            : Date.now() + 60 * 60 * 1000;
+        return {
+            accessToken,
+            refreshToken,
+            expiresAt,
+            source: "keychain",
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function readCodexFromFile() {
+    const authPath = resolveCodexAuthPath();
+    try {
+        const raw = fs.readFileSync(authPath, "utf8");
+        const parsed = JSON.parse(raw);
+        const tokens = parsed.tokens;
+        const accessToken = tokens?.access_token;
+        const refreshToken = tokens?.refresh_token;
+        if (typeof accessToken !== "string" || !accessToken)
+            return null;
+        if (typeof refreshToken !== "string" || !refreshToken)
+            return null;
+        let expiresAt = Date.now() + 60 * 60 * 1000;
+        try {
+            const stat = fs.statSync(authPath);
+            expiresAt = stat.mtimeMs + 60 * 60 * 1000;
+        }
+        catch {
+            // ignore
+        }
+        return {
+            accessToken,
+            refreshToken,
+            expiresAt,
+            source: "file",
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function readCodexOAuth() {
+    return readCodexFromKeychain() ?? readCodexFromFile();
+}

package/dist/config.js

@@ -0,0 +1,59 @@
+import path from "node:path";
+import dotenv from "dotenv";
+import { expandHome } from "./utils.js";
+dotenv.config();
+function parseNumber(value, fallback) {
+    if (!value) {
+        return fallback;
+    }
+    const parsed = Number.parseInt(value, 10);
+    return Number.isNaN(parsed) ? fallback : parsed;
+}
+function parseStringSet(value) {
+    if (!value) {
+        return new Set();
+    }
+    const items = value
+        .split(",")
+        .map((item) => item.trim())
+        .filter((item) => item.length > 0);
+    return new Set(items);
+}
+const sessionDirRaw = process.env.SESSION_DIR ?? "~/.codex/tg-sessions";
+const agentDirRaw = process.env.AGENT_DIR ?? "~/.tg-agent";
+const workspaceDirRaw = process.env.WORKSPACE_DIR ?? process.cwd();
+const modelProviderRaw = process.env.LLM_PROVIDER ?? "openai-codex";
+const modelRefRaw = process.env.LLM_MODEL ?? process.env.CODEX_MODEL ?? "gpt-5.2";
+const telegramParseModeRaw = process.env.TELEGRAM_PARSE_MODE ?? "";
+const telegramAllowedUsersRaw = process.env.TELEGRAM_ALLOWED_USER_IDS ?? "";
+export const config = {
+    telegramToken: process.env.TELEGRAM_BOT_TOKEN?.trim() ?? "",
+    openaiApiKey: process.env.OPENAI_API_KEY?.trim() ?? "",
+    modelProvider: modelProviderRaw.trim(),
+    modelRef: modelRefRaw.trim(),
+    telegramParseMode: telegramParseModeRaw.trim(),
+    telegramAllowedUsers: parseStringSet(telegramAllowedUsersRaw),
+    sessionDir: expandHome(sessionDirRaw),
+    agentDir: expandHome(agentDirRaw),
+    workspaceDir: path.resolve(expandHome(workspaceDirRaw)),
+    maxSessions: parseNumber(process.env.MAX_SESSIONS, 3),
+    maxConcurrent: parseNumber(process.env.MAX_CONCURRENT, 3),
+    sessionTtlMs: parseNumber(process.env.SESSION_TTL_MIN, 60) * 60 * 1000,
+    maxHistoryMessages: parseNumber(process.env.MAX_HISTORY_MESSAGES, 40),
+    maxOutputTokens: parseNumber(process.env.MAX_OUTPUT_TOKENS, 0),
+    fetchMaxBytes: parseNumber(process.env.FETCH_MAX_BYTES, 200_000),
+    fetchTimeoutMs: parseNumber(process.env.FETCH_TIMEOUT_MS, 60_000),
+    modelTimeoutMs: parseNumber(process.env.MODEL_TIMEOUT_MS, 60_000),
+    modelTimeoutStreamingMs: parseNumber(process.env.MODEL_TIMEOUT_STREAM_MS, 300_000),
+    systemPrompt: process.env.SYSTEM_PROMPT ??
+        "You are running in user's personal computer or VPS, using telegram bot to interact with user. Be concise and practical.",
+};
+export function assertConfig() {
+    const missing = [];
+    if (!config.telegramToken) {
+        missing.push("TELEGRAM_BOT_TOKEN");
+    }
+    if (missing.length > 0) {
+        throw new Error(`Missing env vars: ${missing.join(", ")}`);
+    }
+}