titan-agent 6.1.1 → 6.2.1

package/README.md

@@ -26,7 +26,7 @@
 </p>
 
 <p align="center">
-  <a href="#-the-numbers"><img src="https://img.shields.io/badge/version-6.1.1-blueviolet" alt="v6.1.1"/></a>
+  <a href="#-the-numbers"><img src="https://img.shields.io/badge/version-6.2.1-blueviolet" alt="v6.2.1"/></a>
   <a href="#-36-llm-providers"><img src="https://img.shields.io/badge/providers-36-purple" alt="36 Providers"/></a>
   <a href="#-the-numbers"><img src="https://img.shields.io/badge/tools-248%2B-orange" alt="248+ Tools"/></a>
   <a href="#-build-anything-on-demand"><img src="https://img.shields.io/badge/widgets-109-pink" alt="109 Widgets"/></a>
@@ -46,11 +46,31 @@
 
 ## 🪵 NEW in v6.1 — Mission Chat + Desk view
 
-> Status: `v6.1.1` — stable npm `@latest` patch release. It adds Day-0 eval isolation and safety hardening on top of the `6.1.0` stable promotion.
+> Status: `v6.2.1` — TITAN Phone Desk safety hotfix: optional Dograh sidecar integration for Twilio/Telnyx voice workflows, approval-gated outbound calls, inbound admin/receptionist webhooks, opt-out enforcement, receipts, and a dashboard panel.
 > Install with `npm i -g titan-agent` (or `npm update -g titan-agent`).
 > The v6.0 "Presence" feature set below still applies — v6.1.0 layers
 > a beautiful new surface on top of it.
 
+## 📞 NEW in v6.2 — TITAN Phone Desk with Dograh
+
+TITAN can now connect to a self-hosted or hosted Dograh sidecar for Twilio/Telnyx-powered phone workflows without storing carrier credentials directly in TITAN. The integration is optional and disabled by default.
+
+What is verified in v6.2.1:
+
+- `GET /api/telephony/dograh/status` checks Dograh reachability and redacts the API key.
+- `GET /api/telephony/dograh/workflows` lists active Dograh workflows.
+- `POST /api/telephony/dograh/call` creates an approval request first, then starts an outbound Dograh call only when a matching approval action is supplied.
+- The `phone_call` tool is approval-request-only; it never dials directly from an LLM tool call.
+- `POST /api/telephony/dograh/inbound` handles inbound Dograh webhooks for admin-control and receptionist lines.
+- Admin control is restricted to configured E.164 `telephony.adminNumbers`.
+- Public/receptionist numbers do not receive admin privileges.
+- Campaign/cold-call mode is locked unless `allowCampaigns`, recording disclosure, opt-out keywords, and hourly rate limits are configured.
+- Inbound opt-out phrases are recorded and block future campaign calls to that number.
+- Phone numbers and Dograh API keys are redacted from responses, receipts, and UI lists.
+- `/tools/phone-desk` provides status, workflow, call-receipt, opt-out, and approval-request UI.
+
+Dograh is BSD-2-Clause. TITAN integrates with it as an external sidecar/API so the npm package stays lightweight and Dograh can own the Twilio/Telnyx credentials.
+
 Every TITAN canvas page now carries a **🪵 Mission Chat** launcher in
 the header (with a small **NEW** badge). Click it and you walk into a
 chat-style team-control surface — plus a literal **wood desk** view
@@ -349,7 +369,7 @@ curl -fsSL https://raw.githubusercontent.com/Djtony707/TITAN/main/install.sh | b
 **Or npm:**
 
 ```bash
-npm install -g titan-agent@next     # v6.0 beta channel
+npm install -g titan-agent          # stable latest release
 titan onboard                       # Interactive setup wizard
 titan gateway                       # Launches Mission Control at http://localhost:48420
 ```
@@ -367,7 +387,7 @@ Requirements: **Node ≥ 22** (pure ESM, no CJS). For GPU features (LoRA fine-tu
 
 ### Upgrading from v5.x
 
-Just run `npm install -g titan-agent@next`. The migration runner kicks in on first boot, takes an automatic backup first (`~/.titan/backups/`), then applies the schema migrations. If anything goes sideways, `titan backup restore <id>` puts you back.
+Just run `npm install -g titan-agent`. The migration runner kicks in on first boot, takes an automatic backup first (`~/.titan/backups/`), then applies the schema migrations. If anything goes sideways, `titan backup restore <id>` puts you back.
 
 ---
 
@@ -425,7 +445,7 @@ Start in supervised mode. Review what it does. Don't give it access to systems y
 
 | Thing                              | Count                            | Where to verify                                |
 | ---------------------------------- | -------------------------------- | ---------------------------------------------- |
-| **Version**                        | 6.1.1                            | `package.json` + `src/utils/constants.ts`      |
+| **Version**                        | 6.2.1                            | `package.json` + `src/utils/constants.ts`      |
 | **LLM providers**                  | 36 (4 native + 32 OpenAI-compat) | `src/providers/openai_compat.ts`               |
 | **Channel adapters**               | 19                               | `src/channels/*.ts` (minus base)               |
 | **Built-in skill modules**         | 91 files                         | `src/skills/builtin/`                          |

package/dist/agent/commandPost.js

@@ -750,14 +750,15 @@ function coalesceKey(opts) {
   const goalId = typeof opts.payload.goalId === "string" ? opts.payload.goalId : "";
   const model = typeof opts.payload.model === "string" ? opts.payload.model : "";
   const title = typeof opts.payload.title === "string" ? opts.payload.title : "";
-  const identity = goalId || model || title;
+  const identity = typeof opts.payload.approvalIdentity === "string" ? opts.payload.approvalIdentity : goalId || model || title;
   return `${opts.type}|${opts.requestedBy}|${kind}|${identity}`;
 }
 function createApproval(opts) {
   let autoApproveDeferred = false;
   try {
     const auto = config?.autoApprove;
-    if (auto?.enabled) {
+    const neverAutoApprove = opts.payload?.neverAutoApprove === true || opts.payload?.category === "telephony_outbound_call";
+    if (auto?.enabled && !neverAutoApprove) {
       const rules = auto.rules || [];
       if (shouldAutoApprove({ type: opts.type, payload: opts.payload }, { enabled: true, rules })) {
         autoApproveDeferred = true;