
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@t2000/gateway
Advanced tools
Personal AI financial advisor — local gateway with Telegram, WebChat, and heartbeat
Personal AI financial advisor — local gateway with Telegram, WebChat, and heartbeat.
Website · GitHub · CLI · SDK · MCP
The gateway turns t2000 from a CLI tool into a personal AI financial advisor that runs locally on your machine and talks to you on Telegram or a local WebChat. It uses your own LLM API key (Claude or GPT) and never sends your private keys anywhere.
User (Telegram/WebChat) → Gateway → LLM (Claude/GPT) → t2000 SDK → Sui Blockchain
npm i -g @t2000/cli
t2000 init # Guided setup: wallet, PIN, AI, Telegram, safeguards
t2000 gateway # Start the gateway
Open http://localhost:2000 for WebChat, or message your Telegram bot.
┌─────────────────────────────────┐
│ Gateway │
│ ┌─────────┐ ┌────────────┐ │
│ │ WebChat │ │ Telegram │ │
│ └────┬─────┘ └─────┬──────┘ │
│ └───────┬────────┘ │
│ Agent Loop │
│ ┌─────┬─────┬─────┐ │
│ │ LLM │Tools│Confirm│ │
│ └─────┴─────┴─────┘ │
│ Heartbeat Scheduler │
└─────────────────────────────────┘
↓
@t2000/sdk → Sui
| Component | Description |
|---|---|
| Agent Loop | Processes messages, calls LLM, executes tools, manages confirmation flow |
| WebChat | Hono-powered local web UI at localhost:2000 with SSE streaming |
| Telegram | grammY-powered bot with allowlisted users, PIN unlock, message splitting |
| Heartbeat | Cron scheduler for morning briefings, yield monitoring, DCA execution, health checks |
| Logger | Structured JSON logs to ~/.t2000/logs/gateway.log with auto-rotation |
Config lives at ~/.t2000/config.json. Set via CLI:
# LLM
t2000 config set llm.provider anthropic
t2000 config set llm.apiKey sk-ant-...
t2000 config set llm.model claude-sonnet-4-20250514
# Telegram
t2000 config set channels.telegram.enabled true
t2000 config set channels.telegram.botToken 123456:ABC...
t2000 config set channels.telegram.allowedUsers '["12345"]'
# WebChat
t2000 config set channels.webchat.port 2000
# Heartbeat
t2000 config set heartbeat.morningBriefing.enabled true
t2000 config set heartbeat.morningBriefing.schedule "0 8 * * *"
{
"llm": {
"provider": "anthropic",
"apiKey": "sk-ant-...",
"model": "claude-sonnet-4-20250514"
},
"channels": {
"telegram": {
"enabled": true,
"botToken": "123456:ABC...",
"allowedUsers": ["12345"]
},
"webchat": {
"enabled": true,
"port": 2000
}
},
"heartbeat": {
"morningBriefing": { "enabled": true, "schedule": "0 8 * * *" },
"yieldMonitor": { "enabled": true, "schedule": "*/30 * * * *" },
"dcaExecutor": { "enabled": true, "schedule": "0 9 * * 1" },
"healthCheck": { "enabled": true, "schedule": "*/15 * * * *" }
}
}
t2000 gateway # Start (foreground)
t2000 gateway --port 3000 # Custom port
t2000 gateway --no-telegram # Skip Telegram
t2000 gateway --no-heartbeat # Skip heartbeat
t2000 gateway --verbose # Debug logging
t2000 gateway install # Install as daemon (launchd/systemd)
t2000 gateway uninstall # Remove daemon
t2000 gateway status # Check if running
t2000 gateway logs # Tail logs
t2000 gateway logs -f # Follow mode
For 24/7 operation (heartbeat tasks, Telegram always-on):
t2000 gateway install
pnpm install
pnpm --filter @t2000/gateway build
pnpm --filter @t2000/gateway test
pnpm --filter @t2000/gateway typecheck
MIT
FAQs
Personal AI financial advisor — local gateway with Telegram, WebChat, and heartbeat
The npm package @t2000/gateway receives a total of 0 weekly downloads. As such, @t2000/gateway popularity was classified as not popular.
We found that @t2000/gateway demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.