2 Commits

  • security: remove all hardcoded paths, usernames, IPs, and chat IDs from tracked files
    - start.sh: use dirname instead of hardcoded path
    - src/zcode.js: remove hardcoded chat_id fallback
    - src/utils/rtk.js: use 'rtk' from PATH instead of hardcoded binary path
    - src/telegram-bot.ts: use process.cwd() instead of hardcoded path
    - TELEGRAM_SETUP.md: replace token/chat_id with placeholders
    - QUICKSTART.md: sanitize all references
    - SERVICE_MAP.md: use relative paths instead of absolute
  • feat: full service exposure with grammy bot + claudegram patterns
    - Rewrote bot/index.js using grammy (@grammyjs/auto-retry + runner)
    - Added deduplication.js (adapted from claudegram)
    - Added request-queue.js (per-chat sequential processing)
    - Added message-sender.js (chunking + Markdown fallback)
    - Wired all JS-shim services: tools, skills, agents, config, RTK
    - Added function calling support to ZAIProvider.chat()
    - Added dynamic command routing (tools, skills, agents, model, stats)
    - Added per-agent delegation commands (/agent_coder, /agent_architect, etc.)
    - Added dedup + queue patterns from claudegram's battle-tested codebase
    - Updated zcode.js to pass agents to initBot()
    - Updated README feature comparison table to reflect real capabilities