@fased/fased 0.1.41 → 0.1.43

package/dist/plugin-sdk/wsl-DcM2PgSS.js

@@ -1,1016 +0,0 @@
-import { dt as resolveTelegramPreviewStreamMode, un as withFileLock$1 } from "./config-CgwTaper.js";
-import { a as resolveOAuthDir, c as expandHomePrefix, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-GdhK5mV_.js";
-import { g as safeParseJson, t as CONFIG_DIR } from "./utils-LGKVujSU.js";
-import { t as createSubsystemLogger } from "./subsystem-BmpnSVOu.js";
-import { f as DEFAULT_ACCOUNT_ID, p as normalizeAccountId } from "./session-key-Bp3qq3bm.js";
-import { at as getChannelPlugin, ot as listChannelPlugins } from "./registry-DNkJsNsz.js";
-import { C as normalizeMimeType, v as getFileExtension } from "./media-C7YT4DeU.js";
-import fs, { readFileSync } from "node:fs";
-import crypto from "node:crypto";
-import os from "node:os";
-import path from "node:path";
-import JSON5 from "json5";
-import fs$1 from "node:fs/promises";
-
-//#region src/telegram/targets.ts
-const TELEGRAM_NUMERIC_CHAT_ID_REGEX = /^-?\d+$/;
-const TELEGRAM_USERNAME_REGEX = /^[A-Za-z0-9_]{5,}$/i;
-function stripTelegramInternalPrefixes(to) {
-	let trimmed = to.trim();
-	let strippedTelegramPrefix = false;
-	while (true) {
-		const next = (() => {
-			if (/^(telegram|tg):/i.test(trimmed)) {
-				strippedTelegramPrefix = true;
-				return trimmed.replace(/^(telegram|tg):/i, "").trim();
-			}
-			if (strippedTelegramPrefix && /^group:/i.test(trimmed)) return trimmed.replace(/^group:/i, "").trim();
-			return trimmed;
-		})();
-		if (next === trimmed) return trimmed;
-		trimmed = next;
-	}
-}
-function normalizeTelegramChatId(raw) {
-	const stripped = stripTelegramInternalPrefixes(raw);
-	if (!stripped) return;
-	if (TELEGRAM_NUMERIC_CHAT_ID_REGEX.test(stripped)) return stripped;
-}
-function isNumericTelegramChatId(raw) {
-	return TELEGRAM_NUMERIC_CHAT_ID_REGEX.test(raw.trim());
-}
-function normalizeTelegramLookupTarget(raw) {
-	const stripped = stripTelegramInternalPrefixes(raw);
-	if (!stripped) return;
-	if (isNumericTelegramChatId(stripped)) return stripped;
-	const tmeMatch = /^(?:https?:\/\/)?t\.me\/([A-Za-z0-9_]+)$/i.exec(stripped);
-	if (tmeMatch?.[1]) return `@${tmeMatch[1]}`;
-	if (stripped.startsWith("@")) {
-		const handle = stripped.slice(1);
-		if (!handle || !TELEGRAM_USERNAME_REGEX.test(handle)) return;
-		return `@${handle}`;
-	}
-	if (TELEGRAM_USERNAME_REGEX.test(stripped)) return `@${stripped}`;
-}
-/**
-* Parse a Telegram delivery target into chatId and optional topic/thread ID.
-*
-* Supported formats:
-* - `chatId` (plain chat ID, t.me link, @username, or internal prefixes like `telegram:...`)
-* - `chatId:topicId` (numeric topic/thread ID)
-* - `chatId:topic:topicId` (explicit topic marker; preferred)
-*/
-function resolveTelegramChatType(chatId) {
-	const trimmed = chatId.trim();
-	if (!trimmed) return "unknown";
-	if (isNumericTelegramChatId(trimmed)) return trimmed.startsWith("-") ? "group" : "direct";
-	return "unknown";
-}
-function parseTelegramTarget(to) {
-	const normalized = stripTelegramInternalPrefixes(to);
-	const topicMatch = /^(.+?):topic:(\d+)$/.exec(normalized);
-	if (topicMatch) return {
-		chatId: topicMatch[1],
-		messageThreadId: Number.parseInt(topicMatch[2], 10),
-		chatType: resolveTelegramChatType(topicMatch[1])
-	};
-	const colonMatch = /^(.+):(\d+)$/.exec(normalized);
-	if (colonMatch) return {
-		chatId: colonMatch[1],
-		messageThreadId: Number.parseInt(colonMatch[2], 10),
-		chatType: resolveTelegramChatType(colonMatch[1])
-	};
-	return {
-		chatId: normalized,
-		chatType: resolveTelegramChatType(normalized)
-	};
-}
-function resolveTelegramTargetChatType(target) {
-	return parseTelegramTarget(target).chatType;
-}
-
-//#endregion
-//#region src/media/audio.ts
-const TELEGRAM_VOICE_AUDIO_EXTENSIONS = new Set([
-	".oga",
-	".ogg",
-	".opus",
-	".mp3",
-	".m4a"
-]);
-/**
-* MIME types compatible with voice messages.
-* Telegram sendVoice supports OGG/Opus, MP3, and M4A.
-* https://core.telegram.org/bots/api#sendvoice
-*/
-const TELEGRAM_VOICE_MIME_TYPES = new Set([
-	"audio/ogg",
-	"audio/opus",
-	"audio/mpeg",
-	"audio/mp3",
-	"audio/mp4",
-	"audio/x-m4a",
-	"audio/m4a"
-]);
-function isTelegramVoiceCompatibleAudio(opts) {
-	const mime = normalizeMimeType(opts.contentType);
-	if (mime && TELEGRAM_VOICE_MIME_TYPES.has(mime)) return true;
-	const fileName = opts.fileName?.trim();
-	if (!fileName) return false;
-	const ext = getFileExtension(fileName);
-	if (!ext) return false;
-	return TELEGRAM_VOICE_AUDIO_EXTENSIONS.has(ext);
-}
-/**
-* Backward-compatible alias used across plugin/runtime call sites.
-* Keeps existing behavior while making Telegram-specific policy explicit.
-*/
-function isVoiceCompatibleAudio(opts) {
-	return isTelegramVoiceCompatibleAudio(opts);
-}
-
-//#endregion
-//#region src/channels/location.ts
-function resolveLocation(location) {
-	const source = location.source ?? (location.isLive ? "live" : location.name || location.address ? "place" : "pin");
-	const isLive = Boolean(location.isLive ?? source === "live");
-	return {
-		...location,
-		source,
-		isLive
-	};
-}
-function formatAccuracy(accuracy) {
-	if (!Number.isFinite(accuracy)) return "";
-	return ` ±${Math.round(accuracy ?? 0)}m`;
-}
-function formatCoords(latitude, longitude) {
-	return `${latitude.toFixed(6)}, ${longitude.toFixed(6)}`;
-}
-function formatLocationText(location) {
-	const resolved = resolveLocation(location);
-	const coords = formatCoords(resolved.latitude, resolved.longitude);
-	const accuracy = formatAccuracy(resolved.accuracy);
-	const caption = resolved.caption?.trim();
-	let header = "";
-	if (resolved.source === "live" || resolved.isLive) header = `🛰 Live location: ${coords}${accuracy}`;
-	else if (resolved.name || resolved.address) header = `📍 ${[resolved.name, resolved.address].filter(Boolean).join(" — ")} (${coords}${accuracy})`;
-	else header = `📍 ${coords}${accuracy}`;
-	return caption ? `${header}\n${caption}` : header;
-}
-function toLocationContext(location) {
-	const resolved = resolveLocation(location);
-	return {
-		LocationLat: resolved.latitude,
-		LocationLon: resolved.longitude,
-		LocationAccuracy: resolved.accuracy,
-		LocationName: resolved.name,
-		LocationAddress: resolved.address,
-		LocationSource: resolved.source,
-		LocationIsLive: resolved.isLive
-	};
-}
-
-//#endregion
-//#region src/channels/plugins/pairing.ts
-function listPairingChannels() {
-	return listChannelPlugins().filter((plugin) => plugin.pairing).map((plugin) => plugin.id);
-}
-function getPairingAdapter(channelId) {
-	return getChannelPlugin(channelId)?.pairing ?? null;
-}
-
-//#endregion
-//#region src/plugin-sdk/json-store.ts
-async function readJsonFileWithFallback(filePath, fallback) {
-	try {
-		const parsed = safeParseJson(await fs.promises.readFile(filePath, "utf-8"));
-		if (parsed == null) return {
-			value: fallback,
-			exists: true
-		};
-		return {
-			value: parsed,
-			exists: true
-		};
-	} catch (err) {
-		if (err.code === "ENOENT") return {
-			value: fallback,
-			exists: false
-		};
-		return {
-			value: fallback,
-			exists: false
-		};
-	}
-}
-async function writeJsonFileAtomically(filePath, value) {
-	const dir = path.dirname(filePath);
-	await fs.promises.mkdir(dir, {
-		recursive: true,
-		mode: 448
-	});
-	const tmp = path.join(dir, `${path.basename(filePath)}.${crypto.randomUUID()}.tmp`);
-	await fs.promises.writeFile(tmp, `${JSON.stringify(value, null, 2)}\n`, { encoding: "utf-8" });
-	await fs.promises.chmod(tmp, 384);
-	await fs.promises.rename(tmp, filePath);
-}
-
-//#endregion
-//#region src/pairing/pairing-store.ts
-const PAIRING_CODE_LENGTH = 8;
-const PAIRING_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
-const PAIRING_PENDING_TTL_MS = 3600 * 1e3;
-const PAIRING_PENDING_MAX = 3;
-const PAIRING_STORE_LOCK_OPTIONS = {
-	retries: {
-		retries: 10,
-		factor: 2,
-		minTimeout: 100,
-		maxTimeout: 1e4,
-		randomize: true
-	},
-	stale: 3e4
-};
-function resolveCredentialsDir(env = process.env) {
-	return resolveOAuthDir(env, resolveStateDir(env, () => resolveRequiredHomeDir(env, os.homedir)));
-}
-/** Sanitize channel ID for use in filenames (prevent path traversal). */
-function safeChannelKey(channel) {
-	const raw = String(channel).trim().toLowerCase();
-	if (!raw) throw new Error("invalid pairing channel");
-	const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
-	if (!safe || safe === "_") throw new Error("invalid pairing channel");
-	return safe;
-}
-function resolvePairingPath(channel, env = process.env) {
-	return path.join(resolveCredentialsDir(env), `${safeChannelKey(channel)}-pairing.json`);
-}
-function safeAccountKey(accountId) {
-	const raw = String(accountId).trim().toLowerCase();
-	if (!raw) throw new Error("invalid pairing account id");
-	const safe = raw.replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
-	if (!safe || safe === "_") throw new Error("invalid pairing account id");
-	return safe;
-}
-function resolveAllowFromPath(channel, env = process.env, accountId) {
-	const base = safeChannelKey(channel);
-	const normalizedAccountId = typeof accountId === "string" ? accountId.trim() : "";
-	if (!normalizedAccountId) return path.join(resolveCredentialsDir(env), `${base}-allowFrom.json`);
-	return path.join(resolveCredentialsDir(env), `${base}-${safeAccountKey(normalizedAccountId)}-allowFrom.json`);
-}
-async function readJsonFile(filePath, fallback) {
-	return await readJsonFileWithFallback(filePath, fallback);
-}
-async function writeJsonFile(filePath, value) {
-	await writeJsonFileAtomically(filePath, value);
-}
-async function readPairingRequests(filePath) {
-	const { value } = await readJsonFile(filePath, {
-		version: 1,
-		requests: []
-	});
-	return Array.isArray(value.requests) ? value.requests : [];
-}
-async function ensureJsonFile(filePath, fallback) {
-	try {
-		await fs.promises.access(filePath);
-	} catch {
-		await writeJsonFile(filePath, fallback);
-	}
-}
-async function withFileLock(filePath, fallback, fn) {
-	await ensureJsonFile(filePath, fallback);
-	return await withFileLock$1(filePath, PAIRING_STORE_LOCK_OPTIONS, async () => {
-		return await fn();
-	});
-}
-function parseTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	if (!Number.isFinite(parsed)) return null;
-	return parsed;
-}
-function isExpired(entry, nowMs) {
-	const createdAt = parseTimestamp(entry.createdAt);
-	if (!createdAt) return true;
-	return nowMs - createdAt > PAIRING_PENDING_TTL_MS;
-}
-function pruneExpiredRequests(reqs, nowMs) {
-	const kept = [];
-	let removed = false;
-	for (const req of reqs) {
-		if (isExpired(req, nowMs)) {
-			removed = true;
-			continue;
-		}
-		kept.push(req);
-	}
-	return {
-		requests: kept,
-		removed
-	};
-}
-function resolveLastSeenAt(entry) {
-	return parseTimestamp(entry.lastSeenAt) ?? parseTimestamp(entry.createdAt) ?? 0;
-}
-function pruneExcessRequests(reqs, maxPending) {
-	if (maxPending <= 0 || reqs.length <= maxPending) return {
-		requests: reqs,
-		removed: false
-	};
-	return {
-		requests: reqs.slice().toSorted((a, b) => resolveLastSeenAt(a) - resolveLastSeenAt(b)).slice(-maxPending),
-		removed: true
-	};
-}
-function randomCode() {
-	let out = "";
-	for (let i = 0; i < PAIRING_CODE_LENGTH; i++) {
-		const idx = crypto.randomInt(0, 32);
-		out += PAIRING_CODE_ALPHABET[idx];
-	}
-	return out;
-}
-function generateUniqueCode(existing) {
-	for (let attempt = 0; attempt < 500; attempt += 1) {
-		const code = randomCode();
-		if (!existing.has(code)) return code;
-	}
-	throw new Error("failed to generate unique pairing code");
-}
-function normalizePairingAccountId(accountId) {
-	return accountId?.trim().toLowerCase() || "";
-}
-function requestMatchesAccountId(entry, normalizedAccountId) {
-	if (!normalizedAccountId) return true;
-	return String(entry.meta?.accountId ?? "").trim().toLowerCase() === normalizedAccountId;
-}
-function shouldIncludeLegacyAllowFromEntries(normalizedAccountId) {
-	return !normalizedAccountId || normalizedAccountId === DEFAULT_ACCOUNT_ID;
-}
-function normalizeId(value) {
-	return String(value).trim();
-}
-function normalizeAllowEntry(channel, entry) {
-	const trimmed = entry.trim();
-	if (!trimmed) return "";
-	if (trimmed === "*") return "";
-	const adapter = getPairingAdapter(channel);
-	const normalized = adapter?.normalizeAllowEntry ? adapter.normalizeAllowEntry(trimmed) : trimmed;
-	return String(normalized).trim();
-}
-function normalizeAllowFromList(channel, store) {
-	return dedupePreserveOrder((Array.isArray(store.allowFrom) ? store.allowFrom : []).map((v) => normalizeAllowEntry(channel, String(v))).filter(Boolean));
-}
-function normalizeAllowFromInput(channel, entry) {
-	return normalizeAllowEntry(channel, normalizeId(entry));
-}
-function dedupePreserveOrder(entries) {
-	const seen = /* @__PURE__ */ new Set();
-	const out = [];
-	for (const entry of entries) {
-		const normalized = String(entry).trim();
-		if (!normalized || seen.has(normalized)) continue;
-		seen.add(normalized);
-		out.push(normalized);
-	}
-	return out;
-}
-async function readAllowFromStateForPath(channel, filePath) {
-	return (await readAllowFromStateForPathWithExists(channel, filePath)).entries;
-}
-async function readAllowFromStateForPathWithExists(channel, filePath) {
-	const { value, exists } = await readJsonFile(filePath, {
-		version: 1,
-		allowFrom: []
-	});
-	return {
-		entries: normalizeAllowFromList(channel, value),
-		exists
-	};
-}
-async function readAllowFromState(params) {
-	const { value } = await readJsonFile(params.filePath, {
-		version: 1,
-		allowFrom: []
-	});
-	return {
-		current: normalizeAllowFromList(params.channel, value),
-		normalized: normalizeAllowFromInput(params.channel, params.entry) || null
-	};
-}
-async function writeAllowFromState(filePath, allowFrom) {
-	await writeJsonFile(filePath, {
-		version: 1,
-		allowFrom
-	});
-}
-async function readNonDefaultAccountAllowFrom(params) {
-	const scopedPath = resolveAllowFromPath(params.channel, params.env, params.accountId);
-	return await readAllowFromStateForPath(params.channel, scopedPath);
-}
-async function updateAllowFromStoreEntry(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolveAllowFromPath(params.channel, env, params.accountId);
-	return await withFileLock(filePath, {
-		version: 1,
-		allowFrom: []
-	}, async () => {
-		const { current, normalized } = await readAllowFromState({
-			channel: params.channel,
-			entry: params.entry,
-			filePath
-		});
-		if (!normalized) return {
-			changed: false,
-			allowFrom: current
-		};
-		const next = params.apply(current, normalized);
-		if (!next) return {
-			changed: false,
-			allowFrom: current
-		};
-		await writeAllowFromState(filePath, next);
-		return {
-			changed: true,
-			allowFrom: next
-		};
-	});
-}
-async function readChannelAllowFromStore(channel, env = process.env, accountId) {
-	const resolvedAccountId = accountId.trim().toLowerCase() || DEFAULT_ACCOUNT_ID;
-	if (!shouldIncludeLegacyAllowFromEntries(resolvedAccountId)) return await readNonDefaultAccountAllowFrom({
-		channel,
-		env,
-		accountId: resolvedAccountId
-	});
-	const scopedEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env, resolvedAccountId));
-	const legacyEntries = await readAllowFromStateForPath(channel, resolveAllowFromPath(channel, env));
-	return dedupePreserveOrder([...scopedEntries, ...legacyEntries]);
-}
-async function updateChannelAllowFromStore(params) {
-	return await updateAllowFromStoreEntry({
-		channel: params.channel,
-		entry: params.entry,
-		accountId: params.accountId,
-		env: params.env,
-		apply: params.apply
-	});
-}
-async function mutateChannelAllowFromStoreEntry(params, apply) {
-	return await updateChannelAllowFromStore({
-		...params,
-		apply
-	});
-}
-async function addChannelAllowFromStoreEntry(params) {
-	return await mutateChannelAllowFromStoreEntry(params, (current, normalized) => {
-		if (current.includes(normalized)) return null;
-		return [...current, normalized];
-	});
-}
-async function removeChannelAllowFromStoreEntry(params) {
-	return await mutateChannelAllowFromStoreEntry(params, (current, normalized) => {
-		const next = current.filter((entry) => entry !== normalized);
-		if (next.length === current.length) return null;
-		return next;
-	});
-}
-async function upsertChannelPairingRequest(params) {
-	const env = params.env ?? process.env;
-	const filePath = resolvePairingPath(params.channel, env);
-	return await withFileLock(filePath, {
-		version: 1,
-		requests: []
-	}, async () => {
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const nowMs = Date.now();
-		const id = normalizeId(params.id);
-		const normalizedAccountId = normalizePairingAccountId(params.accountId) || DEFAULT_ACCOUNT_ID;
-		const meta = {
-			...params.meta && typeof params.meta === "object" ? Object.fromEntries(Object.entries(params.meta).map(([k, v]) => [k, String(v ?? "").trim()]).filter(([_, v]) => Boolean(v))) : void 0,
-			accountId: normalizedAccountId
-		};
-		let reqs = await readPairingRequests(filePath);
-		const { requests: prunedExpired, removed: expiredRemoved } = pruneExpiredRequests(reqs, nowMs);
-		reqs = prunedExpired;
-		const normalizedMatchingAccountId = normalizedAccountId;
-		const existingIdx = reqs.findIndex((r) => {
-			if (r.id !== id) return false;
-			return requestMatchesAccountId(r, normalizedMatchingAccountId);
-		});
-		const existingCodes = new Set(reqs.map((req) => String(req.code ?? "").trim().toUpperCase()));
-		if (existingIdx >= 0) {
-			const existing = reqs[existingIdx];
-			const code = (existing && typeof existing.code === "string" ? existing.code.trim() : "") || generateUniqueCode(existingCodes);
-			const next = {
-				id,
-				code,
-				createdAt: existing?.createdAt ?? now,
-				lastSeenAt: now,
-				meta: meta ?? existing?.meta
-			};
-			reqs[existingIdx] = next;
-			const { requests: capped } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-			await writeJsonFile(filePath, {
-				version: 1,
-				requests: capped
-			});
-			return {
-				code,
-				created: false
-			};
-		}
-		const { requests: capped, removed: cappedRemoved } = pruneExcessRequests(reqs, PAIRING_PENDING_MAX);
-		reqs = capped;
-		if (PAIRING_PENDING_MAX > 0 && reqs.length >= PAIRING_PENDING_MAX) {
-			if (expiredRemoved || cappedRemoved) await writeJsonFile(filePath, {
-				version: 1,
-				requests: reqs
-			});
-			return {
-				code: "",
-				created: false
-			};
-		}
-		const code = generateUniqueCode(existingCodes);
-		const next = {
-			id,
-			code,
-			createdAt: now,
-			lastSeenAt: now,
-			...meta ? { meta } : {}
-		};
-		await writeJsonFile(filePath, {
-			version: 1,
-			requests: [...reqs, next]
-		});
-		return {
-			code,
-			created: true
-		};
-	});
-}
-
-//#endregion
-//#region src/channels/allow-from.ts
-function mergeDmAllowFromSources(params) {
-	const storeEntries = params.dmPolicy === "allowlist" ? [] : params.storeAllowFrom ?? [];
-	return [...params.allowFrom ?? [], ...storeEntries].map((value) => String(value).trim()).filter(Boolean);
-}
-function resolveGroupAllowFromSources(params) {
-	const explicitGroupAllowFrom = Array.isArray(params.groupAllowFrom) && params.groupAllowFrom.length > 0 ? params.groupAllowFrom : void 0;
-	return (explicitGroupAllowFrom ? explicitGroupAllowFrom : params.fallbackToAllowFrom === false ? [] : params.allowFrom ?? []).map((value) => String(value).trim()).filter(Boolean);
-}
-function firstDefined(...values) {
-	for (const value of values) if (typeof value !== "undefined") return value;
-}
-function isSenderIdAllowed(allow, senderId, allowWhenEmpty) {
-	if (!allow.hasEntries) return allowWhenEmpty;
-	if (allow.hasWildcard) return true;
-	if (!senderId) return false;
-	return allow.entries.includes(senderId);
-}
-
-//#endregion
-//#region src/telegram/bot-access.ts
-const warnedInvalidEntries = /* @__PURE__ */ new Set();
-const log = createSubsystemLogger("telegram/bot-access");
-function warnInvalidAllowFromEntries(entries) {
-	if (process.env.VITEST || false) return;
-	for (const entry of entries) {
-		if (warnedInvalidEntries.has(entry)) continue;
-		warnedInvalidEntries.add(entry);
-		log.warn([
-			"Invalid allowFrom entry:",
-			JSON.stringify(entry),
-			"- allowFrom/groupAllowFrom authorization requires numeric Telegram sender IDs only.",
-			"If you had \"@username\" entries, re-run onboarding (it resolves @username to IDs) or replace them manually."
-		].join(" "));
-	}
-}
-const normalizeAllowFrom = (list) => {
-	const entries = (list ?? []).map((value) => String(value).trim()).filter(Boolean);
-	const hasWildcard = entries.includes("*");
-	const normalized = entries.filter((value) => value !== "*").map((value) => value.replace(/^(telegram|tg):/i, ""));
-	const invalidEntries = normalized.filter((value) => !/^\d+$/.test(value));
-	if (invalidEntries.length > 0) warnInvalidAllowFromEntries([...new Set(invalidEntries)]);
-	return {
-		entries: normalized.filter((value) => /^\d+$/.test(value)),
-		hasWildcard,
-		hasEntries: entries.length > 0,
-		invalidEntries
-	};
-};
-const normalizeDmAllowFromWithStore = (params) => normalizeAllowFrom(mergeDmAllowFromSources(params));
-const isSenderAllowed = (params) => {
-	const { allow, senderId } = params;
-	return isSenderIdAllowed(allow, senderId, true);
-};
-const resolveSenderAllowMatch = (params) => {
-	const { allow, senderId } = params;
-	if (allow.hasWildcard) return {
-		allowed: true,
-		matchKey: "*",
-		matchSource: "wildcard"
-	};
-	if (!allow.hasEntries) return { allowed: false };
-	if (senderId && allow.entries.includes(senderId)) return {
-		allowed: true,
-		matchKey: senderId,
-		matchSource: "id"
-	};
-	return { allowed: false };
-};
-
-//#endregion
-//#region src/telegram/bot/helpers.ts
-const TELEGRAM_GENERAL_TOPIC_ID = 1;
-async function resolveTelegramGroupAllowFromContext(params) {
-	const accountId = normalizeAccountId(params.accountId);
-	const resolvedThreadId = resolveTelegramForumThreadId({
-		isForum: params.isForum,
-		messageThreadId: params.messageThreadId
-	});
-	const storeAllowFrom = await readChannelAllowFromStore("telegram", process.env, accountId).catch(() => []);
-	const { groupConfig, topicConfig } = params.resolveTelegramGroupConfig(params.chatId, resolvedThreadId);
-	const groupAllowOverride = firstDefined(topicConfig?.allowFrom, groupConfig?.allowFrom);
-	return {
-		resolvedThreadId,
-		storeAllowFrom,
-		groupConfig,
-		topicConfig,
-		groupAllowOverride,
-		effectiveGroupAllow: normalizeAllowFrom(groupAllowOverride ?? params.groupAllowFrom),
-		hasGroupAllowOverride: typeof groupAllowOverride !== "undefined"
-	};
-}
-/**
-* Resolve the thread ID for Telegram forum topics.
-* For non-forum groups, returns undefined even if messageThreadId is present
-* (reply threads in regular groups should not create separate sessions).
-* For forum groups, returns the topic ID (or General topic ID=1 if unspecified).
-*/
-function resolveTelegramForumThreadId(params) {
-	if (!params.isForum) return;
-	if (params.messageThreadId == null) return TELEGRAM_GENERAL_TOPIC_ID;
-	return params.messageThreadId;
-}
-function resolveTelegramThreadSpec(params) {
-	if (params.isGroup) return {
-		id: resolveTelegramForumThreadId({
-			isForum: params.isForum,
-			messageThreadId: params.messageThreadId
-		}),
-		scope: params.isForum ? "forum" : "none"
-	};
-	if (params.messageThreadId == null) return { scope: "dm" };
-	return {
-		id: params.messageThreadId,
-		scope: "dm"
-	};
-}
-/**
-* Build thread params for Telegram API calls (messages, media).
-*
-* IMPORTANT: Thread IDs behave differently based on chat type:
-* - DMs (private chats): Include message_thread_id when present (DM topics)
-* - Forum topics: Skip thread_id=1 (General topic), include others
-* - Regular groups: Thread IDs are ignored by Telegram
-*
-* General forum topic (id=1) must be treated like a regular supergroup send:
-* Telegram rejects sendMessage/sendMedia with message_thread_id=1 ("thread not found").
-*
-* @param thread - Thread specification with ID and scope
-* @returns API params object or undefined if thread_id should be omitted
-*/
-function buildTelegramThreadParams(thread) {
-	if (thread?.id == null) return;
-	const normalized = Math.trunc(thread.id);
-	if (thread.scope === "dm") return normalized > 0 ? { message_thread_id: normalized } : void 0;
-	if (normalized === TELEGRAM_GENERAL_TOPIC_ID) return;
-	return { message_thread_id: normalized };
-}
-/**
-* Build thread params for typing indicators (sendChatAction).
-* Empirically, General topic (id=1) needs message_thread_id for typing to appear.
-*/
-function buildTypingThreadParams(messageThreadId) {
-	if (messageThreadId == null) return;
-	return { message_thread_id: Math.trunc(messageThreadId) };
-}
-function resolveTelegramStreamMode(telegramCfg) {
-	return resolveTelegramPreviewStreamMode(telegramCfg);
-}
-function buildTelegramGroupPeerId(chatId, messageThreadId) {
-	return messageThreadId != null ? `${chatId}:topic:${messageThreadId}` : String(chatId);
-}
-function buildTelegramGroupFrom(chatId, messageThreadId) {
-	return `telegram:group:${buildTelegramGroupPeerId(chatId, messageThreadId)}`;
-}
-/**
-* Build parentPeer for forum topic binding inheritance.
-* When a message comes from a forum topic, the peer ID includes the topic suffix
-* (e.g., `-1001234567890:topic:99`). To allow bindings configured for the base
-* group ID to match, we provide the parent group as `parentPeer` so the routing
-* layer can fall back to it when the exact peer doesn't match.
-*/
-function buildTelegramParentPeer(params) {
-	if (!params.isGroup || params.resolvedThreadId == null) return;
-	return {
-		kind: "group",
-		id: String(params.chatId)
-	};
-}
-function buildSenderName(msg) {
-	return [msg.from?.first_name, msg.from?.last_name].filter(Boolean).join(" ").trim() || msg.from?.username || void 0;
-}
-function resolveTelegramMediaPlaceholder(msg) {
-	if (!msg) return;
-	if (msg.photo) return "<media:image>";
-	if (msg.video || msg.video_note) return "<media:video>";
-	if (msg.audio || msg.voice) return "<media:audio>";
-	if (msg.document) return "<media:document>";
-	if (msg.sticker) return "<media:sticker>";
-}
-function buildSenderLabel(msg, senderId) {
-	const name = buildSenderName(msg);
-	const username = msg.from?.username ? `@${msg.from.username}` : void 0;
-	let label = name;
-	if (name && username) label = `${name} (${username})`;
-	else if (!name && username) label = username;
-	const fallbackId = (senderId != null && `${senderId}`.trim() ? `${senderId}`.trim() : void 0) ?? (msg.from?.id != null ? String(msg.from.id) : void 0);
-	const idPart = fallbackId ? `id:${fallbackId}` : void 0;
-	if (label && idPart) return `${label} ${idPart}`;
-	if (label) return label;
-	return idPart ?? "id:unknown";
-}
-function buildGroupLabel(msg, chatId, messageThreadId) {
-	const title = msg.chat?.title;
-	const topicSuffix = messageThreadId != null ? ` topic:${messageThreadId}` : "";
-	if (title) return `${title} id:${chatId}${topicSuffix}`;
-	return `group:${chatId}${topicSuffix}`;
-}
-function hasBotMention(msg, botUsername) {
-	if ((msg.text ?? msg.caption ?? "").toLowerCase().includes(`@${botUsername}`)) return true;
-	const entities = msg.entities ?? msg.caption_entities ?? [];
-	for (const ent of entities) {
-		if (ent.type !== "mention") continue;
-		if ((msg.text ?? msg.caption ?? "").slice(ent.offset, ent.offset + ent.length).toLowerCase() === `@${botUsername}`) return true;
-	}
-	return false;
-}
-function expandTextLinks(text, entities) {
-	if (!text || !entities?.length) return text;
-	const textLinks = entities.filter((entity) => entity.type === "text_link" && Boolean(entity.url)).toSorted((a, b) => b.offset - a.offset);
-	if (textLinks.length === 0) return text;
-	let result = text;
-	for (const entity of textLinks) {
-		const markdown = `[${text.slice(entity.offset, entity.offset + entity.length)}](${entity.url})`;
-		result = result.slice(0, entity.offset) + markdown + result.slice(entity.offset + entity.length);
-	}
-	return result;
-}
-function resolveTelegramReplyId(raw) {
-	if (!raw) return;
-	const parsed = Number(raw);
-	if (!Number.isFinite(parsed)) return;
-	return parsed;
-}
-function describeReplyTarget(msg) {
-	const reply = msg.reply_to_message;
-	const externalReply = msg.external_reply;
-	const quoteText = msg.quote?.text ?? externalReply?.quote?.text;
-	let body = "";
-	let kind = "reply";
-	if (typeof quoteText === "string") {
-		body = quoteText.trim();
-		if (body) kind = "quote";
-	}
-	const replyLike = reply ?? externalReply;
-	if (!body && replyLike) {
-		body = (replyLike.text ?? replyLike.caption ?? "").trim();
-		if (!body) {
-			body = resolveTelegramMediaPlaceholder(replyLike) ?? "";
-			if (!body) {
-				const locationData = extractTelegramLocation(replyLike);
-				if (locationData) body = formatLocationText(locationData);
-			}
-		}
-	}
-	if (!body) return null;
-	const senderLabel = (replyLike ? buildSenderName(replyLike) : void 0) ?? "unknown sender";
-	const forwardedFrom = replyLike?.forward_origin ? resolveForwardOrigin(replyLike.forward_origin) ?? void 0 : void 0;
-	return {
-		id: replyLike?.message_id ? String(replyLike.message_id) : void 0,
-		sender: senderLabel,
-		body,
-		kind,
-		forwardedFrom
-	};
-}
-function normalizeForwardedUserLabel(user) {
-	const name = [user.first_name, user.last_name].filter(Boolean).join(" ").trim();
-	const username = user.username?.trim() || void 0;
-	const id = String(user.id);
-	return {
-		display: (name && username ? `${name} (@${username})` : name || (username ? `@${username}` : void 0)) || `user:${id}`,
-		name: name || void 0,
-		username,
-		id
-	};
-}
-function normalizeForwardedChatLabel(chat, fallbackKind) {
-	const title = chat.title?.trim() || void 0;
-	const username = chat.username?.trim() || void 0;
-	const id = String(chat.id);
-	return {
-		display: title || (username ? `@${username}` : void 0) || `${fallbackKind}:${id}`,
-		title,
-		username,
-		id
-	};
-}
-function buildForwardedContextFromUser(params) {
-	const { display, name, username, id } = normalizeForwardedUserLabel(params.user);
-	if (!display) return null;
-	return {
-		from: display,
-		date: params.date,
-		fromType: params.type,
-		fromId: id,
-		fromUsername: username,
-		fromTitle: name
-	};
-}
-function buildForwardedContextFromHiddenName(params) {
-	const trimmed = params.name?.trim();
-	if (!trimmed) return null;
-	return {
-		from: trimmed,
-		date: params.date,
-		fromType: params.type,
-		fromTitle: trimmed
-	};
-}
-function buildForwardedContextFromChat(params) {
-	const fallbackKind = params.type === "channel" ? "channel" : "chat";
-	const { display, title, username, id } = normalizeForwardedChatLabel(params.chat, fallbackKind);
-	if (!display) return null;
-	const signature = params.signature?.trim() || void 0;
-	const from = signature ? `${display} (${signature})` : display;
-	const chatType = params.chat.type?.trim() || void 0;
-	return {
-		from,
-		date: params.date,
-		fromType: params.type,
-		fromId: id,
-		fromUsername: username,
-		fromTitle: title,
-		fromSignature: signature,
-		fromChatType: chatType,
-		fromMessageId: params.messageId
-	};
-}
-function resolveForwardOrigin(origin) {
-	switch (origin.type) {
-		case "user": return buildForwardedContextFromUser({
-			user: origin.sender_user,
-			date: origin.date,
-			type: "user"
-		});
-		case "hidden_user": return buildForwardedContextFromHiddenName({
-			name: origin.sender_user_name,
-			date: origin.date,
-			type: "hidden_user"
-		});
-		case "chat": return buildForwardedContextFromChat({
-			chat: origin.sender_chat,
-			date: origin.date,
-			type: "chat",
-			signature: origin.author_signature
-		});
-		case "channel": return buildForwardedContextFromChat({
-			chat: origin.chat,
-			date: origin.date,
-			type: "channel",
-			signature: origin.author_signature,
-			messageId: origin.message_id
-		});
-		default: return null;
-	}
-}
-/** Extract forwarded message origin info from Telegram message. */
-function normalizeForwardedContext(msg) {
-	if (!msg.forward_origin) return null;
-	return resolveForwardOrigin(msg.forward_origin);
-}
-function extractTelegramLocation(msg) {
-	const { venue, location } = msg;
-	if (venue) return {
-		latitude: venue.location.latitude,
-		longitude: venue.location.longitude,
-		accuracy: venue.location.horizontal_accuracy,
-		name: venue.title,
-		address: venue.address,
-		source: "place",
-		isLive: false
-	};
-	if (location) {
-		const isLive = typeof location.live_period === "number" && location.live_period > 0;
-		return {
-			latitude: location.latitude,
-			longitude: location.longitude,
-			accuracy: location.horizontal_accuracy,
-			source: isLive ? "live" : "pin",
-			isLive
-		};
-	}
-	return null;
-}
-
-//#endregion
-//#region src/cron/store.ts
-const DEFAULT_CRON_DIR = path.join(CONFIG_DIR, "cron");
-const DEFAULT_CRON_STORE_PATH = path.join(DEFAULT_CRON_DIR, "jobs.json");
-function resolveCronStorePath(storePath) {
-	if (storePath?.trim()) {
-		const raw = storePath.trim();
-		if (raw.startsWith("~")) return path.resolve(expandHomePrefix(raw));
-		return path.resolve(raw);
-	}
-	return DEFAULT_CRON_STORE_PATH;
-}
-async function loadCronStore(storePath) {
-	try {
-		const raw = await fs.promises.readFile(storePath, "utf-8");
-		let parsed;
-		try {
-			parsed = JSON5.parse(raw);
-		} catch (err) {
-			throw new Error(`Failed to parse cron store at ${storePath}: ${String(err)}`, { cause: err });
-		}
-		const parsedRecord = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
-		const jobs = Array.isArray(parsedRecord.jobs) ? parsedRecord.jobs : [];
-		const trustedSources = Array.isArray(parsedRecord.trustedSources) ? parsedRecord.trustedSources.filter(Boolean) : [];
-		return {
-			version: 1,
-			jobs: jobs.filter(Boolean),
-			...trustedSources.length > 0 ? { trustedSources } : {}
-		};
-	} catch (err) {
-		if (err?.code === "ENOENT") return {
-			version: 1,
-			jobs: []
-		};
-		throw err;
-	}
-}
-async function saveCronStore(storePath, store) {
-	await fs.promises.mkdir(path.dirname(storePath), { recursive: true });
-	const { randomBytes } = await import("node:crypto");
-	const tmp = `${storePath}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
-	const json = JSON.stringify(store, null, 2);
-	await fs.promises.writeFile(tmp, json, "utf-8");
-	await fs.promises.rename(tmp, storePath);
-	try {
-		await fs.promises.copyFile(storePath, `${storePath}.bak`);
-	} catch {}
-}
-
-//#endregion
-//#region src/infra/wsl.ts
-function isWSLEnv() {
-	if (process.env.WSL_INTEROP || process.env.WSL_DISTRO_NAME || process.env.WSLENV) return true;
-	return false;
-}
-/**
-* Synchronously check if running in WSL.
-* Checks env vars first, then /proc/version.
-*/
-function isWSLSync() {
-	if (process.platform !== "linux") return false;
-	if (isWSLEnv()) return true;
-	try {
-		const release = readFileSync("/proc/version", "utf8").toLowerCase();
-		return release.includes("microsoft") || release.includes("wsl");
-	} catch {
-		return false;
-	}
-}
-/**
-* Synchronously check if running in WSL2.
-*/
-function isWSL2Sync() {
-	if (!isWSLSync()) return false;
-	try {
-		const version = readFileSync("/proc/version", "utf8").toLowerCase();
-		return version.includes("wsl2") || version.includes("microsoft-standard");
-	} catch {
-		return false;
-	}
-}
-
-//#endregion
-export { mergeDmAllowFromSources as A, formatLocationText as B, resolveTelegramThreadSpec as C, resolveSenderAllowMatch as D, normalizeDmAllowFromWithStore as E, upsertChannelPairingRequest as F, normalizeTelegramLookupTarget as G, isTelegramVoiceCompatibleAudio as H, readJsonFileWithFallback as I, parseTelegramTarget as K, writeJsonFileAtomically as L, addChannelAllowFromStoreEntry as M, readChannelAllowFromStore as N, firstDefined as O, removeChannelAllowFromStoreEntry as P, getPairingAdapter as R, resolveTelegramStreamMode as S, normalizeAllowFrom as T, isVoiceCompatibleAudio as U, toLocationContext as V, normalizeTelegramChatId as W, normalizeForwardedContext as _, buildGroupLabel as a, resolveTelegramMediaPlaceholder as b, buildTelegramGroupFrom as c, buildTelegramThreadParams as d, buildTypingThreadParams as f, hasBotMention as g, extractTelegramLocation as h, saveCronStore as i, resolveGroupAllowFromSources as j, isSenderIdAllowed as k, buildTelegramGroupPeerId as l, expandTextLinks as m, loadCronStore as n, buildSenderLabel as o, describeReplyTarget as p, resolveTelegramTargetChatType as q, resolveCronStorePath as r, buildSenderName as s, isWSL2Sync as t, buildTelegramParentPeer as u, resolveTelegramForumThreadId as v, isSenderAllowed as w, resolveTelegramReplyId as x, resolveTelegramGroupAllowFromContext as y, listPairingChannels as z };