@bytesbrains/pi-telegram-bridge 1.2.0 → 1.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytesbrains/pi-telegram-bridge",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "Telegram bot bridge for pi agents — send messages, ask questions, and listen for human replies via Telegram.",
   "keywords": [
     "pi-package",

package/src/__tests__/index.test.ts

@@ -577,4 +577,86 @@ describe("session lifecycle", () => {
 		await new Promise((r) => setTimeout(r, 100));
 		expect(mockPollUpdates).toHaveBeenCalledTimes(1);
 	});
+
+	it("does not crash when TELEGRAM_BOT_TOKEN is not set (graceful degradation)", async () => {
+		vi.stubEnv("TELEGRAM_BOT_TOKEN", "");
+		vi.stubEnv("TELEGRAM_CHAT_ID", "");
+		const consoleWarn = vi
+			.spyOn(console, "warn")
+			.mockImplementation(() => {});
+
+		const pi = createMockPI();
+		telegramBridge(pi as any);
+
+		const ctx = {
+			sessionManager: { getEntries: () => [] },
+		};
+
+		// Should NOT throw
+		await expect(
+			pi._listeners["session_start"][0]({}, ctx),
+		).resolves.toBeUndefined();
+
+		// Should have warned about missing config
+		expect(consoleWarn).toHaveBeenCalledWith(
+			expect.stringContaining("TELEGRAM_BOT_TOKEN"),
+		);
+
+		// Listener should NOT have been started
+		expect(mockPollUpdates).not.toHaveBeenCalled();
+
+		consoleWarn.mockRestore();
+	});
+
+	it("does not crash when only TELEGRAM_BOT_TOKEN is missing", async () => {
+		vi.stubEnv("TELEGRAM_BOT_TOKEN", "");
+		// CHAT_ID is set
+		const consoleWarn = vi
+			.spyOn(console, "warn")
+			.mockImplementation(() => {});
+
+		const pi = createMockPI();
+		telegramBridge(pi as any);
+
+		const ctx = {
+			sessionManager: { getEntries: () => [] },
+		};
+
+		await expect(
+			pi._listeners["session_start"][0]({}, ctx),
+		).resolves.toBeUndefined();
+
+		expect(consoleWarn).toHaveBeenCalledWith(
+			expect.stringContaining("TELEGRAM_BOT_TOKEN"),
+		);
+		expect(mockPollUpdates).not.toHaveBeenCalled();
+
+		consoleWarn.mockRestore();
+	});
+
+	it("does not crash when only TELEGRAM_CHAT_ID is missing", async () => {
+		vi.stubEnv("TELEGRAM_CHAT_ID", "");
+		// BOT_TOKEN is set
+		const consoleWarn = vi
+			.spyOn(console, "warn")
+			.mockImplementation(() => {});
+
+		const pi = createMockPI();
+		telegramBridge(pi as any);
+
+		const ctx = {
+			sessionManager: { getEntries: () => [] },
+		};
+
+		await expect(
+			pi._listeners["session_start"][0]({}, ctx),
+		).resolves.toBeUndefined();
+
+		expect(consoleWarn).toHaveBeenCalledWith(
+			expect.stringContaining("TELEGRAM_BOT_TOKEN"),
+		);
+		expect(mockPollUpdates).not.toHaveBeenCalled();
+
+		consoleWarn.mockRestore();
+	});
 });

package/src/helpers.ts

@@ -151,7 +151,7 @@ export async function sendPhoto(
 	const token = getToken();
 	const formData = new FormData();
 	formData.set("chat_id", getChatId());
-	const blob = new Blob([fileData] as any);
+	const blob = new Blob([fileData]);
 	formData.set("photo", blob, filename);
 	if (caption) {
 		formData.set("caption", caption);

package/src/index.ts

@@ -189,9 +189,23 @@ export default function telegramBridge(pi: ExtensionAPI) {
 				lastUpdateId = (entry.data as { update_id: number }).update_id;
 			}
 		}
+		// Skip listener if Telegram is not configured
+		if (!process.env.TELEGRAM_BOT_TOKEN || !process.env.TELEGRAM_CHAT_ID) {
+			console.warn(
+				"pi-telegram-bridge: TELEGRAM_BOT_TOKEN or TELEGRAM_CHAT_ID not set. Listener disabled.",
+			);
+			return;
+		}
 		// Start background listener
-		mentionTrigger = await resolveMentionTrigger();
-		startListener();
+		try {
+			mentionTrigger = await resolveMentionTrigger();
+			startListener();
+		} catch (e: unknown) {
+			console.warn(
+				"pi-telegram-bridge: Failed to start listener:",
+				e instanceof Error ? e.message : e,
+			);
+		}
 	});
 
 	pi.on("session_shutdown", () => {

package/src/templates.ts

@@ -12,10 +12,7 @@ const BAR = "━".repeat(20);
 
 /** Escape user text for safe embedding inside HTML tags. */
 function escapeHtml(s: string): string {
-	return s
-		.replace(/&/g, "&")
-		.replace(/</g, "&lt;")
-		.replace(/>/g, "&gt;");
+	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
 function bold(s: string) {
@@ -31,7 +28,7 @@ function strike(s: string) {
 	return `<s>${escapeHtml(s)}</s>`;
 }
 function labelValue(label: string, value: string) {
-	return `${bold(label + ":")} ${escapeHtml(value)}`;
+	return `${bold(label + ":")} ${value}`;
 }
 function link(url: string, text: string) {
 	return `<a href="${url}">${escapeHtml(text)}</a>`;
@@ -257,7 +254,7 @@ export function ciPipeline(p: CIPipeline): string {
 	msg += `${BAR}\n`;
 	msg += labelValue("Run", `#${p.runNumber}`) + "\n";
 	msg += labelValue("Branch", code(p.branch)) + "\n";
-	msg += labelValue("Trigger", p.event) + "\n";
+	msg += labelValue("Trigger", escapeHtml(p.event)) + "\n";
 	if (p.triggeredBy) msg += labelValue("By", code(p.triggeredBy)) + "\n";
 	msg += `${BAR}\n`;