@diegoaltoworks/chatter 0.57.0 → 0.59.0

package/dist/channels/telegram/index.mjs

@@ -146,6 +146,17 @@ function createTelegramApi(config) {
         message_id: messageId,
         reaction: [{ type: "emoji", emoji }]
       });
+    },
+    async setWebhook(url, options) {
+      await call("setWebhook", {
+        url,
+        // Only what this channel interprets — see the matching comment on getUpdates.
+        allowed_updates: ["message"],
+        ...options?.secretToken ? { secret_token: options.secretToken } : {}
+      });
+    },
+    async deleteWebhook() {
+      await call("deleteWebhook");
     }
   };
 }
@@ -166,56 +177,6 @@ function createConsoleLogger(level = "info") {
   };
 }
 
-// src/channels/gates.ts
-function matches(re, text) {
-  return new RegExp(re.source, re.flags.replace(/[gy]/g, "")).test(text);
-}
-function isBlockedByAllowlist(msg, config) {
-  return !msg.fromBot && msg.text.trim().length > 0 && !msg.isDirectMessage && config.allowedChats.length > 0 && !config.allowedChats.includes(msg.chatId);
-}
-function decideChannelAction(msg, config) {
-  if (msg.fromBot || !msg.text.trim()) return "ignore";
-  if (!msg.isDirectMessage) {
-    if (isBlockedByAllowlist(msg, config)) return "ignore";
-    if (config.muteRegex && matches(config.muteRegex, msg.text)) return "mute";
-    if (config.unmuteRegex && matches(config.unmuteRegex, msg.text)) return "unmute";
-    if (config.mutedChats.has(msg.chatId)) return "ignore";
-    return msg.mentionsBot || msg.isReplyToBot ? "reply" : "ignore";
-  }
-  return "reply";
-}
-function createSlidingWindowRateLimiter(maxPerWindow, windowMs, now = Date.now) {
-  const log = /* @__PURE__ */ new Map();
-  let lastSweep = now();
-  function sweep(current) {
-    if (current - lastSweep < windowMs) return;
-    lastSweep = current;
-    const cutoff = current - windowMs;
-    for (const [key, entries] of log) {
-      if (!entries.some((t) => t > cutoff)) log.delete(key);
-    }
-  }
-  function allow(key) {
-    const current = now();
-    sweep(current);
-    const cutoff = current - windowMs;
-    const entries = (log.get(key) ?? []).filter((t) => t > cutoff);
-    if (entries.length >= maxPerWindow) {
-      if (entries.length > 0) log.set(key, entries);
-      else log.delete(key);
-      return false;
-    }
-    entries.push(current);
-    log.set(key, entries);
-    return true;
-  }
-  allow.size = () => log.size;
-  return allow;
-}
-function underReplyRateLimit(msg, limiters) {
-  return msg.isDirectMessage ? limiters.dm(msg.chatId) : limiters.group(msg.chatId);
-}
-
 // src/core/guardrails.ts
 function detectLeakage(text) {
   const flags = [
@@ -387,6 +348,56 @@ ${ctx.join("\n\n")}`
   return { system, messages, context: ctx };
 }
 
+// src/channels/gates.ts
+function matches(re, text) {
+  return new RegExp(re.source, re.flags.replace(/[gy]/g, "")).test(text);
+}
+function isBlockedByAllowlist(msg, config) {
+  return !msg.fromBot && msg.text.trim().length > 0 && !msg.isDirectMessage && config.allowedChats.length > 0 && !config.allowedChats.includes(msg.chatId);
+}
+function decideChannelAction(msg, config) {
+  if (msg.fromBot || !msg.text.trim()) return "ignore";
+  if (!msg.isDirectMessage) {
+    if (isBlockedByAllowlist(msg, config)) return "ignore";
+    if (config.muteRegex && matches(config.muteRegex, msg.text)) return "mute";
+    if (config.unmuteRegex && matches(config.unmuteRegex, msg.text)) return "unmute";
+    if (config.mutedChats.has(msg.chatId)) return "ignore";
+    return msg.mentionsBot || msg.isReplyToBot ? "reply" : "ignore";
+  }
+  return "reply";
+}
+function createSlidingWindowRateLimiter(maxPerWindow, windowMs, now = Date.now) {
+  const log = /* @__PURE__ */ new Map();
+  let lastSweep = now();
+  function sweep(current) {
+    if (current - lastSweep < windowMs) return;
+    lastSweep = current;
+    const cutoff = current - windowMs;
+    for (const [key, entries] of log) {
+      if (!entries.some((t) => t > cutoff)) log.delete(key);
+    }
+  }
+  function allow(key) {
+    const current = now();
+    sweep(current);
+    const cutoff = current - windowMs;
+    const entries = (log.get(key) ?? []).filter((t) => t > cutoff);
+    if (entries.length >= maxPerWindow) {
+      if (entries.length > 0) log.set(key, entries);
+      else log.delete(key);
+      return false;
+    }
+    entries.push(current);
+    log.set(key, entries);
+    return true;
+  }
+  allow.size = () => log.size;
+  return allow;
+}
+function underReplyRateLimit(msg, limiters) {
+  return msg.isDirectMessage ? limiters.dm(msg.chatId) : limiters.group(msg.chatId);
+}
+
 // src/channels/pipeline.ts
 var DEFAULT_HISTORY_LIMIT = 20;
 var DEFAULT_GROUP_RATE_LIMIT = { max: 30, windowMs: 60 * 60 * 1e3 };
@@ -399,6 +410,16 @@ async function resolvePersonaLayer(config, ctx) {
     return void 0;
   }
 }
+async function isHistoryEnabled(config, sender) {
+  const predicate = config.history?.historyEnabledFor;
+  if (!predicate) return true;
+  try {
+    return await predicate(sender);
+  } catch (error) {
+    config.logger?.error("historyEnabledFor threw; disabling history for this turn", error);
+    return false;
+  }
+}
 function createInboundPipeline(deps, config) {
   const mutedChats = /* @__PURE__ */ new Set();
   const now = config.now ?? Date.now;
@@ -438,12 +459,15 @@ function createInboundPipeline(deps, config) {
     }
     const personaLayer = await resolvePersonaLayer(config, { sender, text: msg.text });
     const buckets = await resolveBuckets({ mode, sender, bucketsFor: config.bucketsFor });
-    const priorTurns = config.history ? await config.history.store.load(
+    const historyEnabled = config.history ? await isHistoryEnabled(config, sender) : false;
+    const priorTurns = config.history && historyEnabled ? await config.history.store.load(
       conversationId,
       config.history.limit ?? DEFAULT_HISTORY_LIMIT
     ) : [];
     const messages = [...priorTurns, { role: "user", content: msg.text }];
-    await config.history?.store.append(conversationId, { role: "user", content: msg.text });
+    if (historyEnabled) {
+      await config.history?.store.append(conversationId, { role: "user", content: msg.text });
+    }
     const { system } = await prepareChat({
       store: deps.store,
       prompts: deps.prompts,
@@ -475,7 +499,9 @@ function createInboundPipeline(deps, config) {
     if (!content) {
       return { action: "ignore" };
     }
-    await config.history?.store.append(conversationId, { role: "assistant", content });
+    if (historyEnabled) {
+      await config.history?.store.append(conversationId, { role: "assistant", content });
+    }
     await turn.reply.sendAnswer(msg.chatId, content);
     return { action: "reply", content };
   };
@@ -524,6 +550,41 @@ function telegramSenderKey(senderId) {
   return `tg:${senderId}`;
 }
 
+// src/channels/telegram/handler.ts
+function createTelegramUpdateHandler(deps) {
+  const { api, me, pipeline, allowedChats, logger, label } = deps;
+  const loggedUnallowedChats = /* @__PURE__ */ new Set();
+  return async function handleUpdate(update) {
+    const message = update.message;
+    const msg = toChannelMessage(update, me);
+    if (!msg || !message) return;
+    if (isBlockedByAllowlist(msg, { allowedChats })) {
+      if (!loggedUnallowedChats.has(msg.chatId)) {
+        loggedUnallowedChats.add(msg.chatId);
+        logger.warn(`${label}: skipped chat ${msg.chatId} - not in allowedChats`);
+      }
+    }
+    const reply = {
+      // Threaded onto the incoming message: in a busy group an untethered
+      // answer reads as a non-sequitur.
+      sendAnswer: (chatId, text) => api.sendMessage(chatId, text, { replyToMessageId: message.message_id }),
+      sendGateReply: (chatId, text) => api.sendMessage(chatId, text)
+    };
+    await pipeline(msg, {
+      reply,
+      conversationId: msg.chatId,
+      sender: telegramSenderKey(msg.senderId)
+    });
+  };
+}
+function createTelegramSender(api) {
+  return {
+    sendText: (chatId, text) => api.sendMessage(chatId, text),
+    sendMedia: (chatId, payload) => api.sendMedia(chatId, payload),
+    sendReaction: (chatId, messageRef, emoji) => api.setMessageReaction(chatId, Number(messageRef), emoji)
+  };
+}
+
 // src/channels/telegram/poll.ts
 var BASE_DELAY_MS = 1e3;
 var MAX_DELAY_MS = 6e4;
@@ -594,12 +655,7 @@ function createTelegramChannel(config) {
       });
       const me = await api.getMe();
       const label = `Telegram[${me.username ?? me.id}]`;
-      const sender = {
-        sendText: (chatId, text) => api.sendMessage(chatId, text),
-        sendMedia: (chatId, payload) => api.sendMedia(chatId, payload),
-        sendReaction: (chatId, messageRef, emoji) => api.setMessageReaction(chatId, Number(messageRef), emoji)
-      };
-      deps.senders.register(channelName, sender);
+      deps.senders.register(channelName, createTelegramSender(api));
       senders = deps.senders;
       registered = true;
       const pipeline = createInboundPipeline(
@@ -626,29 +682,14 @@ function createTelegramChannel(config) {
           logger: log
         }
       );
-      const loggedUnallowedChats = /* @__PURE__ */ new Set();
-      async function handleUpdate(update) {
-        const message = update.message;
-        const msg = toChannelMessage(update, me);
-        if (!msg || !message) return;
-        if (isBlockedByAllowlist(msg, { allowedChats })) {
-          if (!loggedUnallowedChats.has(msg.chatId)) {
-            loggedUnallowedChats.add(msg.chatId);
-            log.warn(`${label}: skipped chat ${msg.chatId} - not in allowedChats`);
-          }
-        }
-        const reply = {
-          // Threaded onto the incoming message: in a busy group an untethered
-          // answer reads as a non-sequitur.
-          sendAnswer: (chatId, text) => api.sendMessage(chatId, text, { replyToMessageId: message.message_id }),
-          sendGateReply: (chatId, text) => api.sendMessage(chatId, text)
-        };
-        await pipeline(msg, {
-          reply,
-          conversationId: msg.chatId,
-          sender: telegramSenderKey(msg.senderId)
-        });
-      }
+      const handleUpdate = createTelegramUpdateHandler({
+        api,
+        me,
+        pipeline,
+        allowedChats,
+        logger: log,
+        label
+      });
       abort = new AbortController();
       const signal = abort.signal;
       void runLongPoll({
@@ -673,12 +714,205 @@ function createTelegramChannel(config) {
     }
   };
 }
+
+// src/channels/telegram/webhook.ts
+import { timingSafeEqual } from "node:crypto";
+
+// node_modules/hono/dist/http-exception.js
+var HTTPException = class extends Error {
+  res;
+  status;
+  /**
+   * Creates an instance of `HTTPException`.
+   * @param status - HTTP status code for the exception. Defaults to 500.
+   * @param options - Additional options for the exception.
+   */
+  constructor(status = 500, options) {
+    super(options?.message, { cause: options?.cause });
+    this.res = options?.res;
+    this.status = status;
+  }
+  /**
+   * Returns the response object associated with the exception.
+   * If a response object is not provided, a new response is created with the error message and status code.
+   * @returns The response object.
+   */
+  getResponse() {
+    if (this.res) {
+      const newResponse = new Response(this.res.body, {
+        status: this.status,
+        headers: this.res.headers
+      });
+      return newResponse;
+    }
+    return new Response(this.message, {
+      status: this.status
+    });
+  }
+};
+
+// node_modules/hono/dist/middleware/body-limit/index.js
+var ERROR_MESSAGE = "Payload Too Large";
+var bodyLimit = (options) => {
+  const onError = options.onError || (() => {
+    const res = new Response(ERROR_MESSAGE, {
+      status: 413
+    });
+    throw new HTTPException(413, { res });
+  });
+  const maxSize = options.maxSize;
+  return async function bodyLimit2(c, next) {
+    if (!c.req.raw.body) {
+      return next();
+    }
+    const hasTransferEncoding = c.req.raw.headers.has("transfer-encoding");
+    const hasContentLength = c.req.raw.headers.has("content-length");
+    if (hasContentLength && !hasTransferEncoding) {
+      const contentLength = parseInt(c.req.raw.headers.get("content-length") || "0", 10);
+      return contentLength > maxSize ? onError(c) : next();
+    }
+    let size = 0;
+    const chunks = [];
+    const rawReader = c.req.raw.body.getReader();
+    for (; ; ) {
+      const { done, value } = await rawReader.read();
+      if (done) {
+        break;
+      }
+      size += value.length;
+      if (size > maxSize) {
+        return onError(c);
+      }
+      chunks.push(value);
+    }
+    const requestInit = {
+      body: new ReadableStream({
+        start(controller) {
+          for (const chunk of chunks) {
+            controller.enqueue(chunk);
+          }
+          controller.close();
+        }
+      }),
+      duplex: "half"
+    };
+    c.req.raw = new Request(c.req.raw, requestInit);
+    return next();
+  };
+};
+
+// src/middleware/bodyLimit.ts
+var DEFAULT_MAX_REQUEST_BYTES = 262144;
+function chatBodyLimit(maxSize = DEFAULT_MAX_REQUEST_BYTES, toError = (message) => ({ error: message })) {
+  return bodyLimit({
+    maxSize,
+    onError: (c) => c.json(toError("Request body too large"), 413)
+  });
+}
+
+// src/channels/telegram/webhook.ts
+var SECRET_TOKEN_HEADER = "x-telegram-bot-api-secret-token";
+function secureCompare(a, b) {
+  const bufA = Buffer.from(a);
+  const bufB = Buffer.from(b);
+  return bufA.length === bufB.length && timingSafeEqual(bufA, bufB);
+}
+var SECRET_TOKEN_PATTERN = /^[A-Za-z0-9_-]{1,256}$/;
+function createTelegramWebhookRoute(config) {
+  const webhookSecret = config.webhookSecret;
+  if (!webhookSecret?.trim()) {
+    throw new Error("Telegram webhook requires webhookSecret (it fails closed without one)");
+  }
+  if (!SECRET_TOKEN_PATTERN.test(webhookSecret)) {
+    throw new Error(
+      "Telegram webhookSecret must match /^[A-Za-z0-9_-]{1,256}$/ (Telegram's own secret_token charset)"
+    );
+  }
+  const channelName = config.name ?? "telegram";
+  const allowedChats = config.allowedChats ?? [];
+  const path = config.path ?? "/webhooks/telegram";
+  return async (app, deps) => {
+    const log = config.logger ?? deps.logger ?? createConsoleLogger();
+    const api = config.api ?? createTelegramApi({
+      botToken: config.botToken,
+      fetch: config.fetch,
+      baseUrl: config.apiBaseUrl
+    });
+    const me = await api.getMe();
+    const label = `Telegram[${me.username ?? me.id}] (webhook)`;
+    deps.senders.register(channelName, createTelegramSender(api));
+    const pipeline = createInboundPipeline(
+      { client: deps.client, store: deps.store, prompts: deps.prompts },
+      {
+        channel: channelName,
+        answerFn: config.answerFn ?? deps.config.answerFn,
+        bucketsFor: config.bucketsFor ?? deps.config.bucketsFor,
+        rewriteQuery: config.rewriteQuery ?? deps.config.rewriteQuery,
+        rerankContext: config.rerankContext ?? deps.config.rerankContext,
+        transformReply: config.transformReply ?? deps.config.transformReply,
+        model: config.model,
+        channelHint: config.channelHint ?? "Channel: Telegram.",
+        personaResolver: config.personaResolver,
+        history: config.history,
+        allowedChats,
+        muteRegex: config.muteRegex,
+        unmuteRegex: config.unmuteRegex,
+        muteReply: config.muteReply,
+        unmuteReply: config.unmuteReply,
+        dmRateLimit: config.dmRateLimit,
+        groupRateLimit: config.groupRateLimit,
+        now: config.now,
+        logger: log
+      }
+    );
+    const handleUpdate = createTelegramUpdateHandler({
+      api,
+      me,
+      pipeline,
+      allowedChats,
+      logger: log,
+      label
+    });
+    app.post(
+      path,
+      chatBodyLimit(deps.config.server?.maxRequestBytes),
+      // Reject oversized bodies first
+      async (c) => {
+        const provided = c.req.header(SECRET_TOKEN_HEADER);
+        if (!provided || !secureCompare(provided, webhookSecret)) {
+          log.warn(`${label}: rejected webhook POST - missing or invalid secret token`);
+          return c.text("", 403);
+        }
+        let body;
+        try {
+          body = await c.req.json();
+        } catch {
+          return c.text("", 400);
+        }
+        if (typeof body !== "object" || body === null) {
+          return c.text("", 400);
+        }
+        const update = body;
+        try {
+          await handleUpdate(update);
+        } catch (error) {
+          log.warn(`${label}: update handling failed:`, error);
+        }
+        return c.text("", 200);
+      }
+    );
+    log.info(`${label}: webhook mounted at ${path} as @${me.username ?? me.id}`);
+  };
+}
 export {
   TELEGRAM_API_BASE,
   TELEGRAM_TEXT_LIMIT,
   TelegramApiError,
   createTelegramApi,
   createTelegramChannel,
+  createTelegramSender,
+  createTelegramUpdateHandler,
+  createTelegramWebhookRoute,
   mentionsBot,
   messageEntities,
   messageText,

package/dist/channels/telegram/webhook.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Telegram Bot API transport: a `CustomRoutes` mount that receives updates
+ * over HTTPS instead of long-polling `getUpdates` (see `./channel` for that
+ * transport). Update handling is identical between the two — both build on
+ * `./handler`'s shared `createTelegramUpdateHandler`/`createTelegramSender` —
+ * so choosing one over the other is purely an infrastructure decision: a
+ * webhook needs a publicly reachable HTTPS endpoint and no open connection,
+ * long-polling needs neither but holds one request open at a time. See
+ * docs/telegram.md for the full comparison and `TelegramApi.setWebhook` for
+ * registering the URL with Telegram once this route is mounted.
+ *
+ * ```ts
+ * await createServer({
+ *   ...,
+ *   customRoutes: createTelegramWebhookRoute({
+ *     botToken: process.env.TELEGRAM_BOT_TOKEN as string,
+ *     webhookSecret: process.env.TELEGRAM_WEBHOOK_SECRET as string,
+ *   }),
+ * });
+ * ```
+ */
+import type { AnswerFn, TransformReply } from "../../core/answer";
+import type { BucketsFor } from "../../core/buckets";
+import { type Logger } from "../../core/logger";
+import type { RerankContext, RewriteQuery } from "../../core/pipeline";
+import type { HistoryStore } from "../../history/types";
+import type { CustomRoutes } from "../../types";
+import { type TelegramApi } from "./api";
+export interface TelegramWebhookConfig {
+    /** From @BotFather. A credential — pass it from the environment, never commit it. */
+    botToken: string;
+    /**
+     * Shared secret Telegram is told about via `setWebhook({ secretToken })`
+     * and then echoes back on every POST as `X-Telegram-Bot-Api-Secret-Token`.
+     * Required: without one there is no way to tell a genuine Telegram POST
+     * from a forged one, so this fails closed by construction — a missing or
+     * blank value throws rather than falling back to accepting every request.
+     */
+    webhookSecret: string;
+    /** Where the route is mounted. @default "/webhooks/telegram" */
+    path?: string;
+    /** Channel and sender-registry name. Override to run more than one bot in one process. @default "telegram" */
+    name?: string;
+    /** Group chats eligible for a reply. Empty (default) = every group. Has no effect on DMs, which always reply. */
+    allowedChats?: string[];
+    answerFn?: AnswerFn;
+    bucketsFor?: BucketsFor;
+    rewriteQuery?: RewriteQuery;
+    rerankContext?: RerankContext;
+    transformReply?: TransformReply;
+    model?: string;
+    /** Extra system-prompt section describing the delivery channel; passed through to `prepareChat`. @default "Channel: Telegram." */
+    channelHint?: string;
+    /** A throw/rejection is treated as "no persona" for that turn. `sender` is the namespaced `tg:<id>` key. */
+    personaResolver?: (ctx: {
+        sender: string;
+        text: string;
+    }) => string | undefined | Promise<string | undefined>;
+    /** Off by default — the channel stays single-turn until a store is configured. */
+    history?: {
+        store: HistoryStore;
+        /** Most recent turns to load per reply. @default 20 */
+        limit?: number;
+        historyEnabledFor?: (sender: string) => boolean | Promise<boolean>;
+    };
+    muteRegex?: RegExp;
+    unmuteRegex?: RegExp;
+    muteReply?: string;
+    unmuteReply?: string;
+    dmRateLimit?: {
+        max: number;
+        windowMs: number;
+    };
+    groupRateLimit?: {
+        max: number;
+        windowMs: number;
+    };
+    now?: () => number;
+    /** Overridable for tests and for hosts routing through a proxy; defaults to `globalThis.fetch`. */
+    fetch?: typeof fetch;
+    /** Self-hosted Bot API server origin. */
+    apiBaseUrl?: string;
+    /** Overridable for tests, which fake the Bot API instead of calling it; defaults to a `fetch` client over {@link TelegramWebhookConfig.botToken}. */
+    api?: TelegramApi;
+    logger?: Logger;
+}
+/**
+ * Builds a `CustomRoutes` mount that receives Telegram updates over HTTPS.
+ * Throws synchronously if `webhookSecret` is missing, blank, or outside the
+ * charset Telegram accepts for it — before the route ever exists, rather
+ * than mounting an endpoint that would silently accept everything or reject
+ * every request.
+ */
+export declare function createTelegramWebhookRoute(config: TelegramWebhookConfig): CustomRoutes;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/channels/telegram/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/channels/telegram/webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAqB,KAAK,WAAW,EAAuB,MAAM,OAAO,CAAC;AAMjF,MAAM,WAAW,qBAAqB;IACpC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8GAA8G;IAC9G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iHAAiH;IACjH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kIAAkI;IAClI,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4GAA4G;IAC5G,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD,kFAAkF;IAClF,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,YAAY,CAAC;QACpB,uDAAuD;QACvD,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,cAAc,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mGAAmG;IACnG,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qJAAqJ;IACrJ,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAeD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,qBAAqB,GAAG,YAAY,CAkHtF"}

package/dist/channels/whatsapp/inbound.d.ts

@@ -193,6 +193,12 @@ export interface WhatsAppInboundConfig {
         store: HistoryStore;
         /** Most recent turns to load per reply. @default 20 */
         limit?: number;
+        /**
+         * Excludes a sender from history entirely — see
+         * `InboundPipelineConfig.history.historyEnabledFor` in `./channels`.
+         * @default every sender is enabled
+         */
+        historyEnabledFor?: (sender: string) => boolean | Promise<boolean>;
     };
     now?: () => number;
     /** Logger for gate/dispatch diagnostics. Default: a console logger writing to stderr. */

package/dist/channels/whatsapp/inbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/channels/whatsapp/inbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,uBAAuB,EAC7B,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAIrD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAOD,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG/E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAID,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,gBAAgB,CAWnE;AAED,mHAAmH;AACnH,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAWtD;AAeD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAiBvE;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,8FAA8F;IAC9F,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,uBAAuB,GAChC,iBAAiB,CA+CnB;AAID,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,0GAA0G;IAC1G,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iHAAiH;IACjH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,kGAAkG;IAClG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,QAAQ,EAAE,uBAAuB,CAAC;IAClC,4HAA4H;IAC5H,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gHAAgH;IAChH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,cAAc,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,oGAAoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;KACd,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,YAAY,CAAC;QACpB,uDAAuD;QACvD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uTAAuT;AACvT,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,qBAAqB,GAC5B,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAmGhD"}
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/channels/whatsapp/inbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,uBAAuB,EAC7B,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAIrD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAOD,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG/E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAID,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,gBAAgB,CAWnE;AAED,mHAAmH;AACnH,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAWtD;AAeD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAiBvE;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,8FAA8F;IAC9F,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,uBAAuB,GAChC,iBAAiB,CA+CnB;AAID,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,0GAA0G;IAC1G,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iHAAiH;IACjH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,kGAAkG;IAClG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,QAAQ,EAAE,uBAAuB,CAAC;IAClC,4HAA4H;IAC5H,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gHAAgH;IAChH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,cAAc,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,oGAAoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;KACd,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,YAAY,CAAC;QACpB,uDAAuD;QACvD,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uTAAuT;AACvT,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,qBAAqB,GAC5B,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAmGhD"}

package/dist/channels/whatsapp/index.js

@@ -852,6 +852,16 @@ async function resolvePersonaLayer(config, ctx) {
     return void 0;
   }
 }
+async function isHistoryEnabled(config, sender) {
+  const predicate = config.history?.historyEnabledFor;
+  if (!predicate) return true;
+  try {
+    return await predicate(sender);
+  } catch (error) {
+    config.logger?.error("historyEnabledFor threw; disabling history for this turn", error);
+    return false;
+  }
+}
 function createInboundPipeline(deps, config) {
   const mutedChats = /* @__PURE__ */ new Set();
   const now = config.now ?? Date.now;
@@ -891,12 +901,15 @@ function createInboundPipeline(deps, config) {
     }
     const personaLayer = await resolvePersonaLayer(config, { sender, text: msg.text });
     const buckets = await resolveBuckets({ mode, sender, bucketsFor: config.bucketsFor });
-    const priorTurns = config.history ? await config.history.store.load(
+    const historyEnabled = config.history ? await isHistoryEnabled(config, sender) : false;
+    const priorTurns = config.history && historyEnabled ? await config.history.store.load(
       conversationId,
       config.history.limit ?? DEFAULT_HISTORY_LIMIT
     ) : [];
     const messages = [...priorTurns, { role: "user", content: msg.text }];
-    await config.history?.store.append(conversationId, { role: "user", content: msg.text });
+    if (historyEnabled) {
+      await config.history?.store.append(conversationId, { role: "user", content: msg.text });
+    }
     const { system } = await prepareChat({
       store: deps.store,
       prompts: deps.prompts,
@@ -928,7 +941,9 @@ function createInboundPipeline(deps, config) {
     if (!content) {
       return { action: "ignore" };
     }
-    await config.history?.store.append(conversationId, { role: "assistant", content });
+    if (historyEnabled) {
+      await config.history?.store.append(conversationId, { role: "assistant", content });
+    }
     await turn.reply.sendAnswer(msg.chatId, content);
     return { action: "reply", content };
   };