@andreprado/agentkit 0.1.0-alpha.2 → 0.1.0-alpha.20

package/src/cli/commands/channels.ts

@@ -0,0 +1,1315 @@
+import { createHmac } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+
+import type { ParsedArgs } from "../args";
+import { cloudFetch, cloudGet, cloudPost, readCloudError } from "../cloud-client";
+import { parseCloudApiUrl } from "../flags";
+import { loadAgentCapsule } from "../../runtime/config";
+import { readLocalDeployStateIfExists, type LocalDeployState } from "../../runtime/core/deploy-state";
+import { loadCapsuleEnv } from "../../runtime/env";
+import type { AgentChannel } from "../../index";
+
+type DeployState = LocalDeployState;
+
+type CloudChannel = {
+  id: string;
+  name: string;
+  type: "website" | "telegram" | "whatsapp" | "discord" | "slack";
+  provider: "agentkit" | "telegram" | "zapster" | "meta" | "discord" | "slack";
+  mode?: "interactions" | "bot";
+  status: string;
+  webhook_url: string;
+  required_secrets: Array<{ name: string; status: string }>;
+  buffer?: AgentChannel["buffer"];
+  audio?: AgentChannel["audio"];
+};
+
+type CloudDelivery = {
+  id: string;
+  channel_id: string;
+  direction: string;
+  status: string;
+  provider: {
+    event_id?: string;
+  };
+  received_at: string;
+  updated_at?: string;
+  error?: {
+    code: string;
+    message: string;
+  };
+  events?: Array<{
+    state: string;
+    message: string;
+    created_at: string;
+  }>;
+};
+
+type CloudChannelBuffer = {
+  channel_id: string;
+  deploy_id: string;
+  conversation_id: string;
+  job_id?: string;
+  delivery_id?: string;
+  buffered_delivery_ids: string[];
+  buffered_message_count: number;
+  buffered_char_count: number;
+  status: string;
+  first_received_at: string;
+  last_received_at: string;
+  available_at?: string;
+  age_ms: number;
+  stale: boolean;
+  message_preview: string;
+};
+
+type ChannelBufferActionResponse = {
+  buffer: CloudChannelBuffer | null;
+  job: {
+    id: string;
+    status: string;
+    conversation_id: string;
+  } | null;
+  cleared?: boolean;
+  retried?: boolean;
+};
+
+type ChannelSetupResponse = {
+  channel: CloudChannel;
+  setup?: {
+    provider: "telegram";
+    webhook_url: string;
+    status: "configured";
+    bot_username?: string;
+    get_webhook_info?: {
+      url: string;
+      pending_update_count: number;
+    };
+  };
+};
+
+type ChannelDoctorReport = {
+  channel: CloudChannel;
+  checks: Array<{
+    name: string;
+    status: "ok" | "warn" | "fail" | "unknown";
+    message: string;
+    fix?: string;
+  }>;
+  buffers: CloudChannelBuffer[];
+  last_delivery: {
+    inbound: CloudDelivery | null;
+    outbound: CloudDelivery | null;
+  };
+  probable_error: string | null;
+  suggested_fix: string | null;
+};
+
+export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
+  await loadLocalEnvIntoProcess(process.cwd());
+
+  const [subcommand, first, second, third] = args.positional;
+
+  if (subcommand === "list") {
+    const deployState = await readDeployStateIfExists(process.cwd());
+
+    if (deployState) {
+      const channels = await cloudGet<{ channels: CloudChannel[] }>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/deploys/${encodeURIComponent(deployState.deploy_id)}/channels`,
+      );
+      printChannelsTable(channels.channels);
+      return;
+    }
+
+    const capsule = await loadAgentCapsule(process.cwd());
+    printChannelsTable(
+      (capsule.config.channels ?? []).map((channel) => ({
+        id: "",
+        name: channel.name,
+        type: channel.type,
+        provider: channel.provider,
+        ...(channel.type === "discord" ? { mode: channel.mode } : {}),
+        status: "local_config",
+        webhook_url: "",
+        required_secrets: channel.secrets.map((name) => ({ name, status: "missing" })),
+      })),
+    );
+    return;
+  }
+
+  if (subcommand === "add") {
+    const type = first;
+    const name = second;
+
+    if (!type || !name || !isCliChannelType(type)) {
+      throw new Error("Usage: agentkit channels add <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot]");
+    }
+
+    const response = await createHostedChannel(type, name, args.flags.provider, args.flags.mode, args.flags.api);
+    printChannelStatus(response.channel);
+    printSecretRepairHint(response.channel);
+    return;
+  }
+
+  if (subcommand === "connect") {
+    const type = first;
+    const name = second;
+
+    if (!type || !name || !isCliChannelType(type)) {
+      throw new Error("Usage: agentkit channels connect <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot]");
+    }
+
+    const created = await createHostedChannel(type, name, args.flags.provider, args.flags.mode, args.flags.api);
+    let channel = created.channel;
+    printChannelStatus(channel);
+    printSecretRepairHint(channel);
+    console.log("Channel resource: created_or_updated");
+
+    if (hasMissingRequiredSecrets(channel)) {
+      console.log("Secrets: missing");
+      console.log("");
+      console.log("Connect blocked: set the missing managed secrets, then rerun this same command.");
+      console.log("Run: npm run agentkit -- secret sync --from-local");
+      process.exitCode = 1;
+      return;
+    }
+
+    console.log("Secrets: validated");
+
+    if (channel.type === "telegram") {
+      const setup = await applyTelegramWebhook(channel, args.flags.api);
+      channel = setup.channel ?? channel;
+      console.log("Telegram setWebhook: OK");
+      console.log("Telegram webhook confirmed.");
+      if (setup.setup?.get_webhook_info) {
+        console.log(`Telegram pending updates: ${setup.setup.get_webhook_info.pending_update_count}`);
+      }
+
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      printTelegramHumanNextStep(channel.name, setup.setup?.bot_username);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+      return;
+    }
+
+    if (channel.type === "discord") {
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      printDiscordHumanNextStep(channel);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+      return;
+    }
+
+    if (channel.type === "slack") {
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      printSlackHumanNextStep(channel);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+      return;
+    }
+
+    if (channel.type === "whatsapp" && channel.provider === "zapster") {
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      console.log(`Next human step: paste ${channel.webhook_url} into ${channel.provider}'s webhook settings.`);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+    } else if (channel.type === "whatsapp") {
+      console.log("Smoke: skipped until the provider webhook is configured.");
+      console.log(`Next human step: paste ${channel.webhook_url} into ${channel.provider}'s webhook settings.`);
+    } else {
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      console.log(`Next human step: use ${channel.webhook_url} from your website client.`);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+    }
+    return;
+  }
+
+  if (subcommand === "setup") {
+    if (!first) {
+      throw new Error("Usage: agentkit channels setup <name> [--apply]");
+    }
+
+    const channel = await resolveCloudChannelByName(first, args.flags.api);
+    printChannelStatus(channel);
+    if (channel.type === "telegram") {
+      if (args.flags.apply) {
+        const setup = await applyTelegramWebhook(channel, args.flags.api);
+        console.log("Telegram webhook confirmed.");
+        printChannelStatus(setup.channel ?? channel);
+        printTelegramHumanNextStep(channel.name, setup.setup?.bot_username);
+      } else {
+        console.log(`Setup: call Telegram setWebhook with ${channel.webhook_url}`);
+        console.log("Use --apply to mutate Telegram webhook settings.");
+      }
+    } else if (channel.type === "whatsapp") {
+      console.log(`Next step: paste this URL into ${channel.provider}'s webhook settings.`);
+    } else if (channel.type === "discord") {
+      printDiscordHumanNextStep(channel);
+    } else if (channel.type === "slack") {
+      printSlackHumanNextStep(channel);
+    } else {
+      console.log(`Website endpoint: ${channel.webhook_url}`);
+      console.log("Use this endpoint from the AgentKit website client or a signed server-to-server test.");
+    }
+    return;
+  }
+
+  if (subcommand === "status") {
+    if (!first) {
+      throw new Error("Usage: agentkit channels status <name>");
+    }
+
+    const channel = await resolveCloudChannelByName(first, args.flags.api);
+    printChannelStatus(channel);
+    await printChannelDeliverySummary(channel, args.flags.api);
+    return;
+  }
+
+  if (subcommand === "doctor") {
+    if (!first) {
+      throw new Error("Usage: agentkit channels doctor <name>");
+    }
+
+    const channel = await resolveCloudChannelByName(first, args.flags.api);
+    const report = await cloudGet<{ doctor: ChannelDoctorReport }>(
+      parseCloudApiUrl(args.flags.api),
+      `/v1/channels/${encodeURIComponent(channel.id)}/doctor`,
+    );
+    printChannelDoctor(report.doctor);
+
+    if (report.doctor.checks.some((check) => check.status === "fail")) {
+      process.exitCode = 1;
+    }
+    return;
+  }
+
+  if (subcommand === "test") {
+    if (!first) {
+      throw new Error('Usage: agentkit channels test <name> [--message "hello"] [--fixture <path>]');
+    }
+
+    const channel = await resolveCloudChannelByName(first, args.flags.api);
+    const apiUrl = parseCloudApiUrl(args.flags.api);
+    const body = await channelTestBody(channel, args.flags.message, args.flags.fixture);
+    const signed = await runServerSignedChannelTest(channel, apiUrl, body);
+    const response = signed.response;
+    const payload = signed.payload;
+
+    console.log(JSON.stringify(payload, null, 2));
+    if (!response.ok) {
+      process.exitCode = 1;
+    }
+    return;
+  }
+
+  if (subcommand === "test-audio") {
+    if (!first) {
+      throw new Error("Usage: agentkit channels test-audio <name> [--fixture voice-note|audio-file|<path>]");
+    }
+
+    const channel = await resolveCloudChannelByName(first, args.flags.api);
+    const apiUrl = parseCloudApiUrl(args.flags.api);
+    const body = await channelAudioTestBody(channel, args.flags.fixture);
+    const signed = await runServerSignedChannelTest(channel, apiUrl, body);
+    const response = signed.response;
+    const payload = signed.payload;
+
+    console.log(JSON.stringify(payload, null, 2));
+    if (!response.ok) {
+      process.exitCode = 1;
+    }
+    return;
+  }
+
+  if (subcommand === "deliveries") {
+    if (first === "list") {
+      if (!second) {
+        throw new Error("Usage: agentkit channels deliveries list <name>");
+      }
+
+      const channel = await resolveCloudChannelByName(second, args.flags.api);
+      const response = await cloudGet<{ deliveries: CloudDelivery[] }>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/channels/${encodeURIComponent(channel.id)}/deliveries`,
+      );
+
+      if (response.deliveries.length === 0) {
+        console.log("No channel deliveries found.");
+        return;
+      }
+
+      console.log("ID\tCHANNEL\tDIRECTION\tSTATUS\tPROVIDER_EVENT\tRECEIVED");
+      for (const delivery of response.deliveries) {
+        console.log(
+          [
+            delivery.id,
+            delivery.channel_id,
+            delivery.direction,
+            delivery.status,
+            delivery.provider.event_id ?? "",
+            delivery.received_at,
+          ].join("\t"),
+        );
+      }
+      return;
+    }
+
+    if (first === "show") {
+      if (!second) {
+        throw new Error("Usage: agentkit channels deliveries show <delivery-id>");
+      }
+
+      const response = await cloudGet<{ delivery: CloudDelivery }>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/channel-deliveries/${encodeURIComponent(second)}`,
+      );
+      console.log(JSON.stringify(response.delivery, null, 2));
+      return;
+    }
+  }
+
+  if (subcommand === "buffers") {
+    if (first === "list") {
+      if (!second) {
+        throw new Error("Usage: agentkit channels buffers list <name>");
+      }
+
+      const channel = await resolveCloudChannelByName(second, args.flags.api);
+      const response = await cloudGet<{ buffers: CloudChannelBuffer[] }>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/channels/${encodeURIComponent(channel.id)}/buffers`,
+      );
+      printChannelBuffers(response.buffers);
+      return;
+    }
+
+    if (first === "show") {
+      if (!second) {
+        throw new Error("Usage: agentkit channels buffers show [<name>] <conversation-id>");
+      }
+
+      const target = await resolveChannelBufferTarget(second, third, args.flags.api);
+      const response = await cloudGet<{ buffer: CloudChannelBuffer }>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/channels/${encodeURIComponent(target.channel.id)}/buffers/${encodeURIComponent(target.conversationId)}`,
+      );
+      console.log(JSON.stringify(response.buffer, null, 2));
+      return;
+    }
+
+    if (first === "flush" || first === "clear" || first === "retry") {
+      if (!second) {
+        throw new Error(`Usage: agentkit channels buffers ${first} [<name>] <conversation-id>`);
+      }
+
+      const target = await resolveChannelBufferTarget(second, third, args.flags.api);
+      const response = await cloudPost<ChannelBufferActionResponse>(
+        parseCloudApiUrl(args.flags.api),
+        `/v1/channels/${encodeURIComponent(target.channel.id)}/buffers/${encodeURIComponent(target.conversationId)}/${first}`,
+        {},
+      );
+      printChannelBufferAction(first, response);
+      return;
+    }
+  }
+
+  throw new Error(
+    "Usage: agentkit channels list | add | connect | setup | status | doctor | test | test-audio | deliveries list | deliveries show | buffers list | buffers show | buffers flush | buffers clear | buffers retry",
+  );
+}
+
+async function createHostedChannel(
+  type: "website" | "telegram" | "whatsapp" | "discord" | "slack",
+  name: string,
+  providerFlag: string | boolean | undefined,
+  modeFlag: string | boolean | undefined,
+  apiFlag: string | boolean | undefined,
+): Promise<{ channel: CloudChannel }> {
+  const deployState = await readDeployStateRequired(process.cwd());
+  const provider = channelProviderForCli(type, providerFlag);
+  const localChannel = await readLocalChannelConfig(process.cwd(), type, provider, name);
+  const mode = discordModeForCli(type, modeFlag, localChannel);
+  const payload = {
+    name,
+    type,
+    provider,
+    ...(mode ? { mode } : {}),
+    secrets: localChannel?.secrets ?? defaultChannelSecretsForCli(type, provider, mode),
+    ...(localChannel?.limits ? { limits: channelLimitsForApi(localChannel.limits) } : {}),
+    ...(localChannel?.buffer ? { buffer: localChannel.buffer } : {}),
+    ...(localChannel?.audio ? { audio: localChannel.audio } : {}),
+  };
+
+  return cloudPost<{ channel: CloudChannel }>(
+    parseCloudApiUrl(apiFlag),
+    `/v1/deploys/${encodeURIComponent(deployState.deploy_id)}/channels`,
+    payload,
+  );
+}
+
+async function runChannelSmoke(
+  channel: CloudChannel,
+  apiFlag: string | boolean | undefined,
+  messageFlag: string | boolean | undefined,
+): Promise<{ status: string; delivery_id?: string }> {
+  const body = await channelTestBody(channel, messageFlag, undefined);
+  const { response, payload } = await runServerSignedChannelTest(channel, parseCloudApiUrl(apiFlag), body);
+
+  if (!response.ok) {
+    throw new Error(readCloudError(payload, response.status));
+  }
+
+  if (isRecord(payload) && typeof payload.status === "string") {
+    return {
+      status: payload.status,
+      ...(typeof payload.delivery_id === "string" ? { delivery_id: payload.delivery_id } : {}),
+    };
+  }
+
+  return { status: "unknown" };
+}
+
+async function runConnectSmoke(
+  run: () => Promise<{ status: string; delivery_id?: string }>,
+): Promise<{ status: string; delivery_id?: string } | null> {
+  try {
+    const smoke = await run();
+    console.log(`Synthetic smoke: ${smoke.status}${smoke.delivery_id ? ` (${smoke.delivery_id})` : ""}`);
+    return smoke;
+  } catch (error) {
+    console.log("Synthetic smoke: failed");
+    console.log(`  ${formatCommandError(error)}`);
+    return null;
+  }
+}
+
+async function runServerSignedChannelTest(
+  channel: CloudChannel,
+  apiUrl: string,
+  rawBody: string,
+): Promise<{ response: Response; payload: unknown }> {
+  const response = await cloudFetch(apiUrl, `/v1/channels/${encodeURIComponent(channel.id)}/test`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ raw_body: rawBody }),
+  });
+  const payload = await response.json().catch(() => null);
+
+  if (!response.ok && isUnsupportedChannelTestRoute(payload)) {
+    return runLocallySignedChannelTest(channel, apiUrl, rawBody);
+  }
+
+  return { response, payload };
+}
+
+async function runLocallySignedChannelTest(
+  channel: CloudChannel,
+  apiUrl: string,
+  rawBody: string,
+): Promise<{ response: Response; payload: unknown }> {
+  const webhookUrl = new URL(channel.webhook_url);
+
+  if (channel.required_secrets.some((secret) => secret.name === "ZAPSTER_WEBHOOK_TOKEN")) {
+    webhookUrl.searchParams.set("token", process.env.ZAPSTER_WEBHOOK_TOKEN ?? "");
+  }
+
+  const path = `${webhookUrl.pathname}${webhookUrl.search}`;
+  const headers = channelTestHeaders(channel, rawBody);
+  const response = await cloudFetch(apiUrl, path, {
+    method: "POST",
+    headers,
+    body: rawBody,
+  });
+  const payload = await response.json().catch(() => null);
+
+  return { response, payload };
+}
+
+function isUnsupportedChannelTestRoute(payload: unknown): boolean {
+  return (
+    isRecord(payload) &&
+    isRecord(payload.error) &&
+    (payload.error.code === "not_found" ||
+      payload.error.code === "channel_store_not_configured" ||
+      payload.error.code === "channel_delivery_not_found")
+  );
+}
+
+async function applyTelegramWebhook(
+  channel: CloudChannel,
+  apiFlag: string | boolean | undefined,
+): Promise<ChannelSetupResponse> {
+  try {
+    return await cloudPost<ChannelSetupResponse>(
+      parseCloudApiUrl(apiFlag),
+      `/v1/channels/${encodeURIComponent(channel.id)}/setup`,
+      {},
+    );
+  } catch (error) {
+    if (!shouldFallbackToLocalTelegramSetup(error)) {
+      throw error;
+    }
+  }
+
+  const botToken = process.env.TELEGRAM_BOT_TOKEN;
+  const secretToken = process.env.TELEGRAM_WEBHOOK_SECRET;
+
+  if (!botToken || !secretToken) {
+    throw new Error("TELEGRAM_BOT_TOKEN and TELEGRAM_WEBHOOK_SECRET must be set to apply Telegram setup.");
+  }
+
+  let response: Response;
+  const apiBaseUrl = telegramApiBaseUrlFromEnv();
+
+  try {
+    response = await fetch(new URL(`/bot${botToken}/setWebhook`, apiBaseUrl).href, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        url: channel.webhook_url,
+        secret_token: secretToken,
+        allowed_updates: ["message"],
+      }),
+    });
+  } catch {
+    throw new Error("Telegram setWebhook request failed before Telegram returned a response.");
+  }
+
+  const payload = await response.json().catch(() => ({}));
+
+  if (!response.ok || !isTelegramOk(payload)) {
+    throw new Error(readTelegramSetupError(payload, response.status));
+  }
+
+  const webhookInfo = await fetch(new URL(`/bot${botToken}/getWebhookInfo`, apiBaseUrl).href)
+    .then((telegramResponse) => telegramResponse.json())
+    .catch(() => null);
+  const webhookUrl =
+    webhookInfo &&
+    typeof webhookInfo === "object" &&
+    "result" in webhookInfo &&
+    webhookInfo.result &&
+    typeof webhookInfo.result === "object" &&
+    "url" in webhookInfo.result &&
+    typeof webhookInfo.result.url === "string"
+      ? webhookInfo.result.url
+      : "";
+
+  if (webhookUrl !== channel.webhook_url) {
+    throw new Error(`Telegram getWebhookInfo returned ${webhookUrl || "no webhook URL"} instead of ${channel.webhook_url}.`);
+  }
+
+  return {
+    channel: {
+      ...channel,
+      status: "connected",
+    },
+    setup: {
+      provider: "telegram",
+      webhook_url: channel.webhook_url,
+      status: "configured",
+      get_webhook_info: {
+        url: webhookUrl,
+        pending_update_count: 0,
+      },
+    },
+  };
+}
+
+function shouldFallbackToLocalTelegramSetup(error: unknown): boolean {
+  if (!(error instanceof Error)) {
+    return false;
+  }
+
+  return /Unknown AgentKit Cloud route|does not support channel delivery records yet|does not support channel resources yet/.test(
+    error.message,
+  );
+}
+
+function isTelegramOk(payload: unknown): payload is { ok: true } {
+  return Boolean(payload && typeof payload === "object" && "ok" in payload && payload.ok === true);
+}
+
+function readTelegramSetupError(payload: unknown, status: number): string {
+  if (payload && typeof payload === "object" && "description" in payload && typeof payload.description === "string") {
+    return `Telegram setWebhook failed: ${payload.description}`;
+  }
+
+  return `Telegram setWebhook failed with HTTP ${status}.`;
+}
+
+function telegramApiBaseUrlFromEnv(): string {
+  return process.env.AGENTKIT_TELEGRAM_API_BASE_URL ?? "https://api.telegram.org";
+}
+
+async function loadLocalEnvIntoProcess(cwd: string): Promise<void> {
+  const env = await loadCapsuleEnv(cwd, process.env);
+
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== undefined && process.env[key] === undefined) {
+      process.env[key] = value;
+    }
+  }
+}
+
+function printTelegramHumanNextStep(channelName: string, botUsername: string | undefined): void {
+  console.log("");
+  console.log("Next human step:");
+  console.log(`  Open ${botUsername ? `@${botUsername}` : "your Telegram bot"} in Telegram`);
+  console.log("  Send /start");
+  console.log('  Send "hello"');
+  console.log(`  Then run: npm run agentkit -- channels deliveries list ${channelName}`);
+}
+
+function printDiscordHumanNextStep(channel: CloudChannel): void {
+  console.log("");
+  console.log("Next human step:");
+
+  if (channel.mode === "bot") {
+    console.log("  Open the Discord Developer Portal for your application");
+    console.log("  Bot page: enable Message Content Intent");
+    console.log("  Installation page: install the app into your server with bot permissions");
+    console.log("  Grant the bot View Channel, Read Message History, and Send Messages in the channels it should answer");
+    console.log('  Send "hello" in an allowed server channel');
+    console.log(`  Then run: npm run agentkit -- channels deliveries list ${channel.name}`);
+    return;
+  }
+
+  console.log("  Open the Discord Developer Portal for your application");
+  console.log(`  Paste ${channel.webhook_url} into Interactions Endpoint URL`);
+  console.log("  Register a slash command with a string option named message, text, prompt, question, query, or input");
+  console.log(`  Then run: npm run agentkit -- channels deliveries list ${channel.name}`);
+}
+
+function printSlackHumanNextStep(channel: CloudChannel): void {
+  console.log("");
+  console.log("Next human step:");
+  console.log("  Open the Slack app configuration");
+  console.log("  Event Subscriptions: enable events");
+  console.log(`  Request URL: paste ${channel.webhook_url}`);
+  console.log("  Subscribe to bot events: app_mention and message.im");
+  console.log("  OAuth scopes: app_mentions:read, im:history, chat:write");
+  console.log("  Install or reinstall the app to the workspace");
+  console.log('  Mention the app with "hello" or send it a direct message');
+  console.log(`  Then run: npm run agentkit -- channels deliveries list ${channel.name}`);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+
+function formatCommandError(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+async function readDeployStateIfExists(cwd: string): Promise<DeployState | null> {
+  return readLocalDeployStateIfExists(cwd);
+}
+
+function isCliChannelType(value: string): value is "website" | "telegram" | "whatsapp" | "discord" | "slack" {
+  return value === "website" || value === "telegram" || value === "whatsapp" || value === "discord" || value === "slack";
+}
+
+async function readDeployStateRequired(cwd: string): Promise<DeployState> {
+  const state = await readDeployStateIfExists(cwd);
+
+  if (!state?.deploy_id) {
+    throw new Error("No .agentkit/deploy.json found. Run agentkit deploy before creating hosted channels.");
+  }
+
+  return state;
+}
+
+function printChannelsTable(channels: CloudChannel[]): void {
+  if (channels.length === 0) {
+    console.log("No channels found.");
+    return;
+  }
+
+  console.log("NAME\tTYPE\tPROVIDER\tSTATUS\tLAST_EVENT");
+  for (const channel of channels) {
+    console.log([channel.name, channel.type, channel.provider, channel.status, ""].join("\t"));
+  }
+}
+
+function printChannelStatus(channel: CloudChannel): void {
+  console.log(`Channel: ${channel.name}`);
+  if (channel.id) {
+    console.log(`ID: ${channel.id}`);
+  }
+  console.log(`Type: ${channel.type}`);
+  console.log(`Provider: ${channel.provider}`);
+  if (channel.type === "discord") {
+    console.log(`Mode: ${channel.mode ?? "interactions"}`);
+  }
+  console.log(`Status: ${channel.status}`);
+  if (channel.webhook_url) {
+    console.log(`Webhook URL: ${channel.webhook_url}`);
+  }
+  console.log("Required secrets:");
+  if (
+    channel.required_secrets.length === 0 &&
+    defaultChannelSecretsForCli(channel.type, channel.provider, channel.mode).length > 0
+  ) {
+    console.log(
+      `  control-plane channel metadata bug: required_secrets is empty for ${channel.type}/${channel.provider}`,
+    );
+  } else {
+    for (const secret of channel.required_secrets) {
+      console.log(`  ${secret.name}: ${secret.status}`);
+    }
+  }
+  if (channel.buffer) {
+    if (channel.buffer.mode === "off") {
+      console.log("Buffer: off");
+    } else {
+      console.log(
+        `Buffer: debounce quiet=${channel.buffer.quietWindowMs}ms max_wait=${channel.buffer.maxWaitMs}ms max_messages=${channel.buffer.maxMessages} max_chars=${channel.buffer.maxChars}`,
+      );
+    }
+  }
+}
+
+function printSecretRepairHint(channel: CloudChannel): void {
+  if (
+    channel.required_secrets.length > 0 ||
+    defaultChannelSecretsForCli(channel.type, channel.provider, channel.mode).length === 0
+  ) {
+    return;
+  }
+
+  console.log(
+    "Hint: control-plane channel metadata bug. Rerun add/connect against the updated control-plane to repair required_secrets.",
+  );
+}
+
+function hasMissingRequiredSecrets(channel: CloudChannel): boolean {
+  const expected = defaultChannelSecretsForCli(channel.type, channel.provider, channel.mode);
+
+  if (channel.required_secrets.length === 0 && expected.length > 0) {
+    return true;
+  }
+
+  return channel.required_secrets.some((secret) => secret.status !== "set");
+}
+
+async function printChannelDeliverySummary(
+  channel: CloudChannel,
+  apiFlag: string | boolean | undefined,
+): Promise<void> {
+  const response = await cloudGet<{ deliveries: CloudDelivery[] }>(
+    parseCloudApiUrl(apiFlag),
+    `/v1/channels/${encodeURIComponent(channel.id)}/deliveries`,
+  );
+  const inbound = [...response.deliveries].reverse().find((delivery) => delivery.direction === "inbound");
+  const outbound = [...response.deliveries].reverse().find((delivery) => delivery.direction === "outbound");
+
+  console.log("Recent delivery:");
+  console.log(`  Last inbound: ${inbound ? `${inbound.status} ${inbound.received_at}` : "none"}`);
+  console.log(`  Last outbound: ${outbound ? `${outbound.status} ${outbound.received_at}` : "none"}`);
+  console.log("Provider health: not_checked");
+}
+
+function printChannelDoctor(report: ChannelDoctorReport): void {
+  console.log(`Channel doctor: ${report.channel.name}`);
+  console.log("");
+  console.log("Checks:");
+  for (const check of report.checks) {
+    console.log(`  ${formatCheckStatus(check.status)} ${check.name}: ${check.message}`);
+    if (check.fix) {
+      console.log(`    Fix: ${check.fix}`);
+    }
+  }
+
+  console.log("");
+  console.log("Last delivery:");
+  console.log(
+    `  Inbound: ${report.last_delivery.inbound ? `${report.last_delivery.inbound.status} ${report.last_delivery.inbound.updated_at ?? report.last_delivery.inbound.received_at}` : "none"}`,
+  );
+  console.log(
+    `  Outbound: ${report.last_delivery.outbound ? `${report.last_delivery.outbound.status} ${report.last_delivery.outbound.updated_at ?? report.last_delivery.outbound.received_at}` : "none"}`,
+  );
+
+  if (report.buffers.length > 0) {
+    console.log("");
+    console.log("Buffers:");
+    for (const buffer of report.buffers) {
+      console.log(
+        `  ${buffer.conversation_id}: ${buffer.status} messages=${buffer.buffered_message_count} stale=${buffer.stale ? "yes" : "no"}`,
+      );
+    }
+  }
+
+  if (report.probable_error) {
+    console.log("");
+    console.log(`Probable error: ${report.probable_error}`);
+  }
+  if (report.suggested_fix) {
+    console.log(`Suggested fix: ${report.suggested_fix}`);
+  }
+}
+
+function formatCheckStatus(status: ChannelDoctorReport["checks"][number]["status"]): string {
+  if (status === "ok") {
+    return "OK";
+  }
+
+  if (status === "warn") {
+    return "WARN";
+  }
+
+  if (status === "fail") {
+    return "FAIL";
+  }
+
+  return "UNKNOWN";
+}
+
+function printChannelBuffers(buffers: CloudChannelBuffer[]): void {
+  if (buffers.length === 0) {
+    console.log("No channel buffers found.");
+    return;
+  }
+
+  console.log("CONVERSATION\tSTATUS\tMESSAGES\tCHARS\tSTALE\tAVAILABLE_AT\tJOB");
+  for (const buffer of buffers) {
+    console.log(
+      [
+        buffer.conversation_id,
+        buffer.status,
+        String(buffer.buffered_message_count),
+        String(buffer.buffered_char_count),
+        buffer.stale ? "yes" : "no",
+        buffer.available_at ?? "",
+        buffer.job_id ?? "",
+      ].join("\t"),
+    );
+  }
+}
+
+function printChannelBufferAction(action: string, response: ChannelBufferActionResponse): void {
+  const conversationId = response.buffer?.conversation_id ?? response.job?.conversation_id ?? "unknown";
+
+  if (action === "flush") {
+    console.log(
+      response.job
+        ? `Flushed buffer ${conversationId}; queued job ${response.job.id}.`
+        : `No queued buffer was flushed for ${conversationId}.`,
+    );
+    return;
+  }
+
+  if (action === "clear") {
+    console.log(
+      response.cleared
+        ? `Cleared buffer ${conversationId}.`
+        : `No queued buffer was cleared for ${conversationId}.`,
+    );
+    return;
+  }
+
+  console.log(
+    response.retried && response.job
+      ? `Retried channel job ${response.job.id} for ${conversationId}.`
+      : `No failed or dead-lettered job was retried for ${conversationId}.`,
+  );
+}
+
+async function resolveCloudChannelByName(name: string, apiFlag: string | boolean | undefined): Promise<CloudChannel> {
+  const channels = await listCloudChannelsForCurrentDeploy(apiFlag);
+  const channel = channels.find((candidate) => candidate.name === name);
+
+  if (!channel) {
+    const deployState = await readDeployStateRequired(process.cwd());
+    throw new Error(`Channel "${name}" was not found for deploy ${deployState.deploy_id}.`);
+  }
+
+  return channel;
+}
+
+async function listCloudChannelsForCurrentDeploy(apiFlag: string | boolean | undefined): Promise<CloudChannel[]> {
+  const deployState = await readDeployStateRequired(process.cwd());
+  const response = await cloudGet<{ channels: CloudChannel[] }>(
+    parseCloudApiUrl(apiFlag),
+    `/v1/deploys/${encodeURIComponent(deployState.deploy_id)}/channels`,
+  );
+
+  return response.channels;
+}
+
+async function resolveChannelBufferTarget(
+  first: string,
+  second: string | undefined,
+  apiFlag: string | boolean | undefined,
+): Promise<{ channel: CloudChannel; conversationId: string }> {
+  if (second) {
+    return {
+      channel: await resolveCloudChannelByName(first, apiFlag),
+      conversationId: second,
+    };
+  }
+
+  const conversationId = first;
+  const channels = await listCloudChannelsForCurrentDeploy(apiFlag);
+  const matches: CloudChannel[] = [];
+
+  for (const channel of channels) {
+    const response = await cloudGet<{ buffers: CloudChannelBuffer[] }>(
+      parseCloudApiUrl(apiFlag),
+      `/v1/channels/${encodeURIComponent(channel.id)}/buffers`,
+    );
+
+    if (response.buffers.some((buffer) => buffer.conversation_id === conversationId)) {
+      matches.push(channel);
+    }
+  }
+
+  if (matches.length === 1) {
+    return {
+      channel: matches[0],
+      conversationId,
+    };
+  }
+
+  if (matches.length > 1) {
+    throw new Error(
+      `Conversation ${conversationId} has buffers in multiple channels. Use: agentkit channels buffers show <name> ${conversationId}`,
+    );
+  }
+
+  throw new Error(`No channel buffer found for conversation ${conversationId}.`);
+}
+
+function channelProviderForCli(type: string, providerFlag: string | boolean | undefined): string {
+  if (type === "website") {
+    return "agentkit";
+  }
+
+  if (type === "telegram") {
+    return "telegram";
+  }
+
+  if (type === "discord") {
+    return "discord";
+  }
+
+  if (type === "slack") {
+    if (providerFlag !== undefined) {
+      throw new Error("--provider is not supported for Slack channels.");
+    }
+
+    return "slack";
+  }
+
+  const provider = providerFlag ?? "zapster";
+
+  if (provider !== "zapster" && provider !== "meta") {
+    throw new Error('WhatsApp provider must be "zapster" or "meta".');
+  }
+
+  return provider;
+}
+
+function discordModeForCli(
+  type: string,
+  modeFlag: string | boolean | undefined,
+  localChannel: AgentChannel | null,
+): "interactions" | "bot" | undefined {
+  if (type !== "discord") {
+    if (modeFlag !== undefined) {
+      throw new Error("--mode is only supported for Discord channels.");
+    }
+
+    return undefined;
+  }
+
+  if (modeFlag !== undefined) {
+    if (modeFlag !== "interactions" && modeFlag !== "bot") {
+      throw new Error('Discord mode must be "interactions" or "bot".');
+    }
+
+    return modeFlag;
+  }
+
+  return localChannel?.type === "discord" ? localChannel.mode : "interactions";
+}
+
+function defaultChannelSecretsForCli(type: string, provider: string, mode?: "interactions" | "bot"): string[] {
+  if (type === "website") {
+    return ["AGENTKIT_WEBSITE_CHANNEL_TOKEN"];
+  }
+
+  if (type === "telegram") {
+    return ["TELEGRAM_BOT_TOKEN", "TELEGRAM_WEBHOOK_SECRET"];
+  }
+
+  if (type === "whatsapp" && provider === "zapster") {
+    return ["ZAPSTER_API_KEY", "ZAPSTER_INSTANCE_ID", "ZAPSTER_WEBHOOK_ID"];
+  }
+
+  if (type === "whatsapp" && provider === "meta") {
+    return ["META_WHATSAPP_ACCESS_TOKEN", "META_WHATSAPP_APP_SECRET", "META_WHATSAPP_VERIFY_TOKEN"];
+  }
+
+  if (type === "discord") {
+    return mode === "bot" ? ["DISCORD_BOT_TOKEN"] : ["DISCORD_PUBLIC_KEY"];
+  }
+
+  if (type === "slack") {
+    return ["SLACK_BOT_TOKEN", "SLACK_SIGNING_SECRET"];
+  }
+
+  return [];
+}
+
+async function readLocalChannelConfig(
+  cwd: string,
+  type: string,
+  provider: string,
+  name: string,
+): Promise<AgentChannel | null> {
+  const capsule = await loadAgentCapsule(cwd);
+  return (
+    (capsule.config.channels ?? []).find(
+      (channel) => channel.name === name && channel.type === type && channel.provider === provider,
+    ) ?? null
+  );
+}
+
+function channelLimitsForApi(limits: NonNullable<AgentChannel["limits"]>): {
+  messages_per_day?: number;
+  usd_per_day?: number;
+} {
+  return {
+    ...(limits.messagesPerDay ? { messages_per_day: limits.messagesPerDay } : {}),
+    ...(limits.usdPerDay ? { usd_per_day: limits.usdPerDay } : {}),
+  };
+}
+
+async function channelTestBody(
+  channel: CloudChannel,
+  messageFlag: string | boolean | undefined,
+  fixtureFlag: string | boolean | undefined,
+): Promise<string> {
+  if (typeof fixtureFlag === "string") {
+    return readFile(resolve(process.cwd(), fixtureFlag), "utf8");
+  }
+
+  const message = typeof messageFlag === "string" ? messageFlag : "hello";
+
+  if (channel.type === "telegram") {
+    return JSON.stringify({
+      update_id: Date.now(),
+      message: {
+        message_id: 1,
+        chat: { id: 456, type: "private" },
+        from: { id: 123, first_name: "AgentKit" },
+        text: message,
+      },
+    });
+  }
+
+  if (channel.type === "whatsapp") {
+    return JSON.stringify({
+      event_id: `evt_${Date.now()}`,
+      instance_id: "local",
+      message: {
+        id: `msg_${Date.now()}`,
+        from: "5511999999999",
+        type: "text",
+        text: { body: message },
+      },
+    });
+  }
+
+  if (channel.type === "discord") {
+    if (channel.mode === "bot") {
+      return JSON.stringify({
+        id: `discord_message_${Date.now()}`,
+        guild_id: "agentkit_guild",
+        channel_id: "agentkit_channel",
+        author: {
+          id: "agentkit_user",
+          username: "agentkit",
+        },
+        member: {
+          nick: "AgentKit",
+        },
+        content: message,
+        mentions: [],
+        timestamp: new Date().toISOString(),
+      });
+    }
+
+    return JSON.stringify({
+      id: `discord_interaction_${Date.now()}`,
+      application_id: "agentkit_discord_app",
+      type: 2,
+      data: {
+        id: "agentkit_command",
+        name: "ask",
+        type: 1,
+        options: [
+          {
+            name: "message",
+            type: 3,
+            value: message,
+          },
+        ],
+      },
+      guild_id: "agentkit_guild",
+      channel_id: "agentkit_channel",
+      member: {
+        user: {
+          id: "agentkit_user",
+          username: "agentkit",
+        },
+      },
+      token: `agentkit_interaction_token_${Date.now()}`,
+      version: 1,
+    });
+  }
+
+  if (channel.type === "slack") {
+    const now = Date.now();
+
+    return JSON.stringify({
+      token: "deprecated-verification-token",
+      team_id: "T_AGENTKIT",
+      api_app_id: "A_AGENTKIT",
+      type: "event_callback",
+      event_id: `Ev${now}`,
+      event_time: Math.floor(now / 1000),
+      event: {
+        type: "app_mention",
+        user: "UAGENTKITUSER",
+        text: `<@UAGENTKITBOT> ${message}`,
+        ts: `${Math.floor(now / 1000)}.000100`,
+        channel: "C_AGENTKIT",
+        event_ts: `${Math.floor(now / 1000)}.000100`,
+      },
+      authorizations: [],
+      is_ext_shared_channel: false,
+    });
+  }
+
+  return JSON.stringify({
+    event_id: `web_${Date.now()}`,
+    visitor_id: "visitor_test",
+    message: {
+      id: `msg_${Date.now()}`,
+      text: message,
+    },
+  });
+}
+
+async function channelAudioTestBody(
+  channel: CloudChannel,
+  fixtureFlag: string | boolean | undefined,
+): Promise<string> {
+  if (typeof fixtureFlag === "string" && isExplicitFixturePath(fixtureFlag)) {
+    return readFile(resolve(process.cwd(), fixtureFlag), "utf8");
+  }
+
+  const fixture = typeof fixtureFlag === "string" ? fixtureFlag : "voice-note";
+
+  if (channel.type === "telegram") {
+    if (fixture !== "voice-note" && fixture !== "telegram-voice-note" && fixture !== "telegram-audio-message") {
+      throw new Error('Telegram audio smoke supports --fixture voice-note or --fixture telegram-voice-note.');
+    }
+
+    return JSON.stringify({
+      update_id: Date.now(),
+      message: {
+        message_id: 1,
+        date: Math.floor(Date.now() / 1000),
+        chat: { id: 456, type: "private" },
+        from: { id: 123, first_name: "AgentKit" },
+        voice: {
+          file_id: `agentkit_voice_${Date.now()}`,
+          file_unique_id: `agentkit_voice_unique_${Date.now()}`,
+          duration: 12,
+          mime_type: "audio/ogg",
+          file_size: 42,
+        },
+      },
+    });
+  }
+
+  if (channel.type === "whatsapp" && channel.provider === "zapster") {
+    if (fixture !== "voice-note" && fixture !== "audio-file" && fixture !== "zapster-audio" && fixture !== "zapster-audio-message") {
+      throw new Error('Zapster audio smoke supports --fixture voice-note, --fixture audio-file, or --fixture zapster-audio.');
+    }
+
+    return JSON.stringify({
+      event_id: `zap_evt_audio_${Date.now()}`,
+      instance_id: "local",
+      message: {
+        id: `wamid.audio.${Date.now()}`,
+        from: "5511999999999",
+        type: "audio",
+        audio: {
+          id: `media_audio_${Date.now()}`,
+          url: `https://api.zapsterapi.com/media/audio/media_audio_${Date.now()}.ogg`,
+          mime_type: "audio/ogg",
+          duration: 12,
+          file_size: 42,
+          ...(fixture === "voice-note" ? { ptt: "true" } : {}),
+        },
+      },
+    });
+  }
+
+  throw new Error(`Audio smoke is not supported for ${channel.type}/${channel.provider}.`);
+}
+
+function isExplicitFixturePath(value: string): boolean {
+  return value.includes("/") || value.startsWith(".") || value.endsWith(".json");
+}
+
+function channelTestHeaders(channel: CloudChannel, rawBody: string): Headers {
+  const headers = new Headers({ "Content-Type": "application/json" });
+
+  if (channel.type === "website") {
+    const token = process.env.AGENTKIT_WEBSITE_CHANNEL_TOKEN;
+
+    if (token) {
+      headers.set("Authorization", `Bearer ${token}`);
+    }
+  }
+
+  if (channel.type === "telegram") {
+    headers.set("X-Telegram-Bot-Api-Secret-Token", process.env.TELEGRAM_WEBHOOK_SECRET ?? "");
+  }
+
+  if (channel.type === "whatsapp" && channel.provider === "zapster") {
+    headers.set("X-Instance-ID", process.env.ZAPSTER_INSTANCE_ID ?? "");
+    headers.set("X-Webhook-ID", process.env.ZAPSTER_WEBHOOK_ID ?? "");
+    headers.set("X-Message-ID", `cli_msg_${Date.now()}`);
+    headers.set("X-Attempt-Count", "1");
+    headers.set("User-Agent", "Zapsterapi/agentkit-cli");
+  }
+
+  if (channel.type === "slack") {
+    const signingSecret = process.env.SLACK_SIGNING_SECRET;
+
+    if (signingSecret) {
+      const timestamp = String(Math.floor(Date.now() / 1000));
+      const signature = createHmac("sha256", signingSecret)
+        .update(`v0:${timestamp}:${rawBody}`)
+        .digest("hex");
+      headers.set("X-Slack-Request-Timestamp", timestamp);
+      headers.set("X-Slack-Signature", `v0=${signature}`);
+    }
+  }
+
+  return headers;
+}