@justfortytwo/telegram 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Enrico Deleo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,121 @@
+# @justfortytwo/telegram
+
+The **Telegram channel adapter** for [fortytwo](https://github.com/justfortytwo) — a
+standalone, always-on **bridge** that connects a Telegram bot to a headless
+[`claude`](https://docs.claude.com/en/docs/claude-code) turn loop.
+
+It does three jobs:
+
+1. **Turn loop.** Long-poll Telegram, and for each authorized inbound message
+   drive a headless `claude -p --output-format json` turn (resuming the per-chat
+   session), then transport the assistant's reply back.
+2. **Approval UX.** When the safety gate defers an external/irreversible tool
+   call, the turn ends with `stop_reason: tool_deferred`. The bridge surfaces an
+   **inline-keyboard approval card** (Approve / Deny, plus "Allow _N_h" for exact
+   Bash commands). The tap records the decision and resumes the turn so the
+   one-shot allow fires.
+3. **Proactive wakes.** A scheduler invokes `claude -p` at fixed cron-like slots
+   (daily briefing, open-thread sweeps, weekly learn-review).
+
+## Pairing / login binding model
+
+The bot is **locked down**: an unbound sender that does not present a valid
+`/login` gets **no response at all**. Access is earned through a
+channel-agnostic challenge/verify pairing flow:
+
+```
+owner side:    adapter.issueChallenge(owner)  ->  { code, ttl }
+channel side:  /login <code>                  ->  verify(chatId, code) -> binding
+```
+
+- `issueChallenge(owner)` mints a **single-use, short-TTL** code (default 6
+  digits, 5 minutes). The owner relays it out-of-band to the chat they want to
+  bind.
+- `/login <code>` verifies the code and, on success, **persists a binding**
+  `(channelType, channelUserId) -> owner`.
+- `/logout` removes the binding.
+- Every inbound message is authorized against **persisted bindings ∪ the
+  optional `ALLOWED_CHAT_IDS` bootstrap set**. The bootstrap set lets the first
+  owner chat reach the bridge before any binding exists; it is not required once
+  bindings exist.
+
+The contract is intentionally **channel-agnostic** (`ChannelAdapter` in
+`src/adapter.ts`) so a future Slack / email / SMS adapter implements the same
+`issueChallenge` / `verify` shape.
+
+### Binding store
+
+Authorization must work **even when the memory package is absent**, so the
+binding store is **self-owned** and does not assume the `@justfortytwo/memory`
+sqlite db exists:
+
+- `SqliteBindingStore` — default; a tiny `better-sqlite3` table in its own db
+  file (`state/telegram-bindings.db` by default).
+- `MemoryBindingStore` — in-process Map, for tests / ephemeral use.
+- `BindingStore` — the injectable interface. Supply a memory-backed
+  implementation later without touching the login flow.
+
+> Cross-repo reconciliation: if fortytwo standardizes a shared identity
+> table, swap the default store for a memory-backed `BindingStore`. The login
+> flow is unaffected.
+
+## Peer dependencies
+
+This package orchestrates two **peer** packages — they are referenced, not
+bundled:
+
+| Peer | Used for | Contract |
+| --- | --- | --- |
+| `@justfortytwo/memory` | Memory store, jobs, pending-decision records, embeddings | `MEMORY_TOOL_CONTRACT_VERSION` (tools `mcp__fortytwo-memory__*`) |
+| `@justfortytwo/gate` | Bash exact-command allowlist behind "Allow _N_h"; provenance envelopes | `POLICY_SCHEMA_VERSION` |
+
+Install them alongside this package:
+
+```sh
+npm install @justfortytwo/telegram @justfortytwo/memory @justfortytwo/gate
+```
+
+The seams where these peers are wired are marked with `// TODO(wire):` in
+`src/bridge.ts`, `src/attachments.ts`, and `src/adapters-config.ts`. Until they
+are wired, the bridge runs **channel-only** (no memory/jobs) via no-op shims.
+
+## Environment
+
+| Var | Required | Meaning |
+| --- | --- | --- |
+| `TELEGRAM_BOT_TOKEN` | yes | Bot token. The bridge is the **only** long-poller on this bot. |
+| `ALLOWED_CHAT_IDS` | bootstrap | Comma-separated chat IDs allowed before any binding exists. Optional once bindings exist. |
+| `CLAUDE_BIN` | no | Path to the `claude` binary (default `claude`). |
+| `FORD_TURN_TIMEOUT` | no | Hard cap (seconds) on a single turn so a stalled model can't wedge the bridge (default 300). |
+| `TELEGRAM_BINDINGS_DB` | no | Path to the self-owned bindings db (default `state/telegram-bindings.db`). |
+| `ASSISTANT_NAME` / `ASSISTANT_ACTOR` / `OWNER_ACTOR` | no | Display name + journal actor labels. |
+| `FORD_ROOT` | no | Working root for the headless `claude` process + state files. |
+
+> Proxy auth for the headless `claude` session is **not** read here — the
+> `claude` CLI reads `ANTHROPIC_*` from its own config.
+
+## Usage
+
+```sh
+npm run build
+node dist/bridge.js
+```
+
+Run it under a restart loop (tmux/systemd) so it survives transient errors and
+crashes. Example launcher (adapted from the monolith's `wakeup.sh`):
+
+```sh
+set -a; source .env; set +a
+while true; do
+  node node_modules/@justfortytwo/telegram/dist/bridge.js
+  echo "[telegram] bridge exited (rc=$?) — restarting in 3s"; sleep 3
+done
+```
+
+## License
+
+MIT © 2026 Enrico Deleo
+
+---
+
+Created and maintained by [**Enrico Deleo**](https://enricodeleo.com).

package/dist/adapter.d.ts

@@ -0,0 +1,47 @@
+import type { Binding, BindingStore, ChannelType } from './bindings.js';
+export interface Challenge {
+    /** The single-use pairing code the owner relays to the channel. */
+    code: string;
+    /** Seconds until the code expires. */
+    ttl: number;
+}
+export interface ChannelAdapter {
+    /** The channel this adapter binds (e.g. 'telegram'). */
+    readonly channelType: ChannelType;
+    /** Mint a single-use, short-TTL pairing code for `owner`. */
+    issueChallenge(owner: string): Challenge;
+    /**
+     * Verify `proof` (a presented code) for `channelUserId`. On success, persist
+     * and return the Binding; on failure (bad/expired/used code) return null.
+     */
+    verify(channelUserId: string, proof: string): Binding | null;
+}
+export interface ChallengeOptions {
+    /** Code lifetime in seconds. Default 300 (5 min). Short by design. */
+    ttlSeconds?: number;
+    /** Number of digits in the generated code. Default 6. */
+    digits?: number;
+    /** Injectable clock for tests. */
+    now?: () => number;
+}
+/**
+ * Telegram implementation of ChannelAdapter. Codes live in-process (a wedged
+ * bridge restart drops outstanding codes — acceptable for a short-TTL,
+ * owner-initiated flow). Verified bindings persist via the injected BindingStore.
+ */
+export declare class TelegramAdapter implements ChannelAdapter {
+    private readonly store;
+    readonly channelType: ChannelType;
+    private readonly pending;
+    private readonly ttlSeconds;
+    private readonly digits;
+    private readonly now;
+    constructor(store: BindingStore, opts?: ChallengeOptions);
+    issueChallenge(owner: string): Challenge;
+    verify(channelUserId: string, proof: string): Binding | null;
+    /** Look up the persisted binding for a channel id (no proof needed). */
+    bindingFor(channelUserId: string): Binding | null;
+    /** Remove a persisted binding (logout). */
+    unbind(channelUserId: string): void;
+    private sweepExpired;
+}

package/dist/adapter.js

@@ -0,0 +1,79 @@
+// Channel-agnostic binding contract.
+//
+// A ChannelAdapter knows how to pair a channel identity (e.g. a Telegram chat
+// id) with a logical `owner`. Pairing is a two-step challenge/verify:
+//
+//   1. issueChallenge(owner) -> { code, ttl }
+//      Owner-side: mint a single-use, short-TTL code. The owner relays this code
+//      out-of-band to the channel they want to bind (e.g. "DM the bot
+//      `/login 482913`").
+//   2. verify(channelUserId, proof) -> binding | null
+//      Channel-side: when an inbound message presents the code, confirm it is
+//      valid + unexpired + unused, then mint and persist a Binding.
+//
+// This keeps authorization independent of any single channel: a future Slack /
+// email / SMS adapter implements the same contract.
+import { randomInt } from 'node:crypto';
+/**
+ * Telegram implementation of ChannelAdapter. Codes live in-process (a wedged
+ * bridge restart drops outstanding codes — acceptable for a short-TTL,
+ * owner-initiated flow). Verified bindings persist via the injected BindingStore.
+ */
+export class TelegramAdapter {
+    store;
+    channelType = 'telegram';
+    pending = new Map(); // code -> challenge
+    ttlSeconds;
+    digits;
+    now;
+    constructor(store, opts = {}) {
+        this.store = store;
+        this.ttlSeconds = opts.ttlSeconds ?? 300;
+        this.digits = opts.digits ?? 6;
+        this.now = opts.now ?? (() => Date.now());
+    }
+    issueChallenge(owner) {
+        this.sweepExpired();
+        const max = 10 ** this.digits;
+        const code = String(randomInt(0, max)).padStart(this.digits, '0');
+        this.pending.set(code, { code, owner, expiresAt: this.now() + this.ttlSeconds * 1000 });
+        return { code, ttl: this.ttlSeconds };
+    }
+    verify(channelUserId, proof) {
+        this.sweepExpired();
+        const code = proof.trim();
+        const challenge = this.pending.get(code);
+        if (!challenge)
+            return null;
+        if (challenge.expiresAt <= this.now()) {
+            this.pending.delete(code);
+            return null;
+        }
+        // Single-use: consume the code regardless of downstream outcome.
+        this.pending.delete(code);
+        const binding = {
+            channelType: this.channelType,
+            channelUserId,
+            owner: challenge.owner,
+            boundAt: new Date(this.now()).toISOString(),
+        };
+        this.store.put(binding);
+        return binding;
+    }
+    /** Look up the persisted binding for a channel id (no proof needed). */
+    bindingFor(channelUserId) {
+        return this.store.get(this.channelType, channelUserId);
+    }
+    /** Remove a persisted binding (logout). */
+    unbind(channelUserId) {
+        this.store.remove(this.channelType, channelUserId);
+    }
+    sweepExpired() {
+        const t = this.now();
+        for (const [code, c] of this.pending) {
+            if (c.expiresAt <= t)
+                this.pending.delete(code);
+        }
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,8CAA8C;AAC9C,iFAAiF;AACjF,sEAAsE;AACtE,0BAA0B;AAC1B,sDAAsD;AACtD,8EAA8E;AAC9E,oEAAoE;AACpE,EAAE;AACF,+EAA+E;AAC/E,oDAAoD;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAqCxC;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAOG;IANpB,WAAW,GAAgB,UAAU,CAAC;IAC9B,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC,CAAC,oBAAoB;IACnE,UAAU,CAAS;IACnB,MAAM,CAAS;IACf,GAAG,CAAe;IAEnC,YAA6B,KAAmB,EAAE,OAAyB,EAAE;QAAhD,UAAK,GAAL,KAAK,CAAc;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,aAAqB,EAAE,KAAa;QACzC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAElF,iEAAiE;QACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1B,MAAM,OAAO,GAAY;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa;YACb,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC5C,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wEAAwE;IACxE,UAAU,CAAC,aAAqB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,2CAA2C;IAC3C,MAAM,CAAC,aAAqB;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAEO,YAAY;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/adapters-config.d.ts

@@ -0,0 +1,11 @@
+export interface AdaptersConfig {
+    channelTelegramEnabled: boolean;
+    attachments: {
+        maxBytes: number;
+        storeDir: string;
+    };
+}
+/** Type of the gate's `parseToml`: every scalar comes back as a string. */
+export type TomlParser = (text: string) => Record<string, unknown>;
+/** Load the drop-in adapter manifest. Secrets stay in env; this is selection + non-secret settings only. */
+export declare function loadAdaptersConfig(path: string, parseToml?: TomlParser): AdaptersConfig;

package/dist/adapters-config.js

@@ -0,0 +1,63 @@
+import { existsSync, readFileSync } from 'node:fs';
+const DEFAULTS = {
+    channelTelegramEnabled: true,
+    attachments: { maxBytes: 26214400, storeDir: 'inbox' }, // 25 MiB
+};
+function asRecord(v) {
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+}
+/**
+ * Minimal flat-table TOML reader (fallback only). Understands `[section]`
+ * headers and `key = value` pairs, emitting dotted keys ("section.key") with
+ * string values — matching the surface the original `parseToml` exposed for
+ * adapters.toml. Not a general TOML implementation; replace with the gate parser.
+ */
+function fallbackParseToml(text) {
+    const out = {};
+    let section = '';
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.replace(/#.*$/, '').trim();
+        if (!line)
+            continue;
+        const header = line.match(/^\[(.+)\]$/);
+        if (header) {
+            section = header[1].trim();
+            continue;
+        }
+        const kv = line.match(/^([^=]+)=(.*)$/);
+        if (!kv)
+            continue;
+        const key = kv[1].trim();
+        let value = kv[2].trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        const table = (out[section] ??= {});
+        table[key] = value;
+    }
+    return out;
+}
+/** Load the drop-in adapter manifest. Secrets stay in env; this is selection + non-secret settings only. */
+export function loadAdaptersConfig(path, parseToml = fallbackParseToml) {
+    if (!existsSync(path))
+        return DEFAULTS;
+    let o;
+    try {
+        o = parseToml(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return DEFAULTS;
+    }
+    // parseToml returns every scalar as a string — coerce here.
+    const channel = asRecord(o['channel.telegram'] ?? asRecord(o['channel'])['telegram']);
+    const att = asRecord(o['attachments']);
+    const maxBytes = Number(att['max_bytes']);
+    return {
+        channelTelegramEnabled: channel['enabled'] === undefined ? true : channel['enabled'] === 'true',
+        attachments: {
+            maxBytes: Number.isFinite(maxBytes) && maxBytes > 0 ? maxBytes : DEFAULTS.attachments.maxBytes,
+            storeDir: typeof att['store_dir'] === 'string' && att['store_dir'] ? att['store_dir'] : DEFAULTS.attachments.storeDir,
+        },
+    };
+}
+//# sourceMappingURL=adapters-config.js.map

package/dist/adapters-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters-config.js","sourceRoot":"","sources":["../src/adapters-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAenD,MAAM,QAAQ,GAAmB;IAC/B,sBAAsB,EAAE,IAAI;IAC5B,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,SAAS;CAClE,CAAC;AAKF,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAA4B,CAAC;QAC/D,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,YAAwB,iBAAiB;IACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,IAAI,CAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAE7E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1C,OAAO;QACL,sBAAsB,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,MAAM;QAC/F,WAAW,EAAE;YACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ;YAC9F,QAAQ,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ;SAChI;KACF,CAAC;AACJ,CAAC"}

package/dist/attachments.d.ts

@@ -0,0 +1,26 @@
+import { type SourceEnvelope, type SourceKind } from '@justfortytwo/gate';
+export type AttachmentKind = 'image' | 'document' | 'audio' | 'other';
+export interface Attachment {
+    attachment_id: string;
+    kind: AttachmentKind;
+    mime: string;
+    storage_ref: string;
+    byte_size: number;
+    content_hash: string;
+    caption?: string;
+    source_envelope: SourceEnvelope;
+}
+export declare function kindFromMime(mime: string): AttachmentKind;
+export declare function extensionFor(mime: string, fileName?: string): string;
+export declare function inboxRelPath(storeDir: string, chatId: number, messageId: number, index: number, ext: string): string;
+export declare function withinSizeLimit(byteSize: number, maxBytes: number): boolean;
+export declare function buildAttachment(args: {
+    bytes: Uint8Array;
+    mime: string;
+    sourceKind: SourceKind | string;
+    storageRef: string;
+    channel: string;
+    actor?: string;
+    caption?: string;
+    fileName?: string;
+}): Attachment;

package/dist/attachments.js

@@ -0,0 +1,60 @@
+import { createHash } from 'node:crypto';
+// TODO(wire): SourceKind / SourceEnvelope / createSourceEnvelope are the
+// provenance-envelope primitives owned by the safety gate (@justfortytwo/gate),
+// a peer package — NOT this one. gate's SourceKind is a host-agnostic union that
+// allows a channel to map its own kinds in as plain strings, which is how the
+// telegram_* kinds below flow through.
+import { createSourceEnvelope } from '@justfortytwo/gate';
+const EXT_BY_MIME = {
+    'image/jpeg': 'jpg', 'image/png': 'png', 'image/gif': 'gif', 'image/webp': 'webp',
+    'application/pdf': 'pdf', 'text/plain': 'txt',
+};
+export function kindFromMime(mime) {
+    if (mime.startsWith('image/'))
+        return 'image';
+    if (mime.startsWith('audio/'))
+        return 'audio';
+    if (mime === 'application/pdf' || mime.startsWith('text/') || mime.startsWith('application/'))
+        return 'document';
+    return 'other';
+}
+export function extensionFor(mime, fileName) {
+    if (EXT_BY_MIME[mime])
+        return EXT_BY_MIME[mime];
+    const dot = fileName ? fileName.lastIndexOf('.') : -1;
+    if (fileName && dot >= 0 && dot < fileName.length - 1) {
+        return fileName.slice(dot + 1).toLowerCase().replace(/[^a-z0-9]/g, '') || 'bin';
+    }
+    return 'bin';
+}
+export function inboxRelPath(storeDir, chatId, messageId, index, ext) {
+    const suffix = index > 0 ? `-${index}` : '';
+    return `${storeDir}/${chatId}/${messageId}${suffix}.${ext}`;
+}
+export function withinSizeLimit(byteSize, maxBytes) {
+    return byteSize > 0 && byteSize <= maxBytes;
+}
+function sha256Bytes(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+export function buildAttachment(args) {
+    const contentHash = sha256Bytes(args.bytes);
+    const envelope = createSourceEnvelope({
+        source_kind: args.sourceKind,
+        content: contentHash,
+        actor: args.actor,
+        channel: args.channel,
+        metadata: { mime: args.mime, byte_size: args.bytes.length, storage_ref: args.storageRef, file_name: args.fileName },
+    });
+    return {
+        attachment_id: envelope.source_id,
+        kind: kindFromMime(args.mime),
+        mime: args.mime,
+        storage_ref: args.storageRef,
+        byte_size: args.bytes.length,
+        content_hash: contentHash,
+        caption: args.caption,
+        source_envelope: envelope,
+    };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,yEAAyE;AACzE,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,uCAAuC;AACvC,OAAO,EAAE,oBAAoB,EAAwC,MAAM,oBAAoB,CAAC;AAehG,MAAM,WAAW,GAA2B;IAC1C,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM;IACjF,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;CAC9C,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,UAAU,CAAC;IACjH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAiB;IAC1D,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc,EAAE,SAAiB,EAAE,KAAa,EAAE,GAAW;IAC1G,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,OAAO,GAAG,QAAQ,IAAI,MAAM,IAAI,SAAS,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAgB;IAChE,OAAO,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,QAAQ,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAU/B;IACC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;KACpH,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,SAAS;QACjC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QAC5B,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,QAAQ;KAC1B,CAAC;AACJ,CAAC"}

package/dist/bindings.d.ts

@@ -0,0 +1,36 @@
+export type ChannelType = 'telegram' | string;
+export interface Binding {
+    channelType: ChannelType;
+    channelUserId: string;
+    owner: string;
+    boundAt: string;
+}
+/** The seam. Persists channel-id -> owner bindings; everything else injects this. */
+export interface BindingStore {
+    get(channelType: ChannelType, channelUserId: string): Binding | null;
+    put(binding: Binding): void;
+    remove(channelType: ChannelType, channelUserId: string): void;
+    list(channelType?: ChannelType): Binding[];
+}
+/** In-memory store — ideal for tests and ephemeral deployments. */
+export declare class MemoryBindingStore implements BindingStore {
+    private readonly map;
+    private key;
+    get(channelType: ChannelType, channelUserId: string): Binding | null;
+    put(binding: Binding): void;
+    remove(channelType: ChannelType, channelUserId: string): void;
+    list(channelType?: ChannelType): Binding[];
+}
+/**
+ * Self-owned sqlite-backed binding store. Uses its own small db file so it does
+ * NOT depend on the memory package's schema or db existence. Lazily creates the
+ * table on construction.
+ */
+export declare class SqliteBindingStore implements BindingStore {
+    private readonly db;
+    constructor(dbPath?: string);
+    get(channelType: ChannelType, channelUserId: string): Binding | null;
+    put(binding: Binding): void;
+    remove(channelType: ChannelType, channelUserId: string): void;
+    list(channelType?: ChannelType): Binding[];
+}

package/dist/bindings.js

@@ -0,0 +1,87 @@
+// Binding store: persists (channelType, channelUserId) -> owner.
+//
+// DESIGN DECISION (cross-repo reconciliation point): the telegram adapter must
+// NOT assume the @justfortytwo/memory sqlite db exists. Authorization is the
+// channel's own concern and must work even when memory is absent. So this file
+// defines:
+//   1. `BindingStore` — an injectable interface (the seam). Anyone can supply a
+//      memory-backed implementation later without changing the login flow.
+//   2. `SqliteBindingStore` — a small SELF-OWNED better-sqlite3 store (its own
+//      tiny db file, default ./telegram-bindings.db) used by default.
+//   3. `MemoryBindingStore` — an in-process Map store for tests / ephemeral use.
+//
+// If/when fortytwo standardizes a shared identity table, swap the default
+// for a memory-backed BindingStore — the login flow is unaffected.
+import { createRequire } from 'node:module';
+/** In-memory store — ideal for tests and ephemeral deployments. */
+export class MemoryBindingStore {
+    map = new Map();
+    key(t, u) { return `${t} ${u}`; }
+    get(channelType, channelUserId) {
+        return this.map.get(this.key(channelType, channelUserId)) ?? null;
+    }
+    put(binding) {
+        this.map.set(this.key(binding.channelType, binding.channelUserId), binding);
+    }
+    remove(channelType, channelUserId) {
+        this.map.delete(this.key(channelType, channelUserId));
+    }
+    list(channelType) {
+        const all = [...this.map.values()];
+        return channelType ? all.filter((b) => b.channelType === channelType) : all;
+    }
+}
+// Load the native sqlite driver via createRequire so this ESM module can pull a
+// CommonJS addon without a top-level static import (which would force the native
+// dependency on type-only consumers).
+const nodeRequire = createRequire(import.meta.url);
+/**
+ * Self-owned sqlite-backed binding store. Uses its own small db file so it does
+ * NOT depend on the memory package's schema or db existence. Lazily creates the
+ * table on construction.
+ */
+export class SqliteBindingStore {
+    db;
+    constructor(dbPath = 'telegram-bindings.db') {
+        const Database = nodeRequire('better-sqlite3');
+        this.db = new Database(dbPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS channel_bindings (
+        channel_type    TEXT NOT NULL,
+        channel_user_id TEXT NOT NULL,
+        owner           TEXT NOT NULL,
+        bound_at        TEXT NOT NULL,
+        PRIMARY KEY (channel_type, channel_user_id)
+      );
+    `);
+    }
+    get(channelType, channelUserId) {
+        const row = this.db
+            .prepare('SELECT channel_type, channel_user_id, owner, bound_at FROM channel_bindings WHERE channel_type = ? AND channel_user_id = ?')
+            .get(channelType, channelUserId);
+        return row ? { channelType: row.channel_type, channelUserId: row.channel_user_id, owner: row.owner, boundAt: row.bound_at } : null;
+    }
+    put(binding) {
+        this.db
+            .prepare(`
+        INSERT INTO channel_bindings (channel_type, channel_user_id, owner, bound_at)
+        VALUES (@channelType, @channelUserId, @owner, @boundAt)
+        ON CONFLICT(channel_type, channel_user_id)
+        DO UPDATE SET owner = excluded.owner, bound_at = excluded.bound_at
+      `)
+            .run(binding);
+    }
+    remove(channelType, channelUserId) {
+        this.db
+            .prepare('DELETE FROM channel_bindings WHERE channel_type = ? AND channel_user_id = ?')
+            .run(channelType, channelUserId);
+    }
+    list(channelType) {
+        const rows = (channelType
+            ? this.db.prepare('SELECT channel_type, channel_user_id, owner, bound_at FROM channel_bindings WHERE channel_type = ?').all(channelType)
+            : this.db.prepare('SELECT channel_type, channel_user_id, owner, bound_at FROM channel_bindings').all());
+        return rows.map((r) => ({ channelType: r.channel_type, channelUserId: r.channel_user_id, owner: r.owner, boundAt: r.bound_at }));
+    }
+}
+//# sourceMappingURL=bindings.js.map

package/dist/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,WAAW;AACX,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,sEAAsE;AACtE,iFAAiF;AACjF,EAAE;AACF,0EAA0E;AAC1E,mEAAmE;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAoB5C,mEAAmE;AACnE,MAAM,OAAO,kBAAkB;IACZ,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,GAAG,CAAC,CAAc,EAAE,CAAS,IAAY,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtE,GAAG,CAAC,WAAwB,EAAE,aAAqB;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,OAAgB;QAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,CAAC,WAAwB,EAAE,aAAqB;QACpD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,WAAyB;QAC5B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnC,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9E,CAAC;CACF;AAED,gFAAgF;AAChF,iFAAiF;AACjF,sCAAsC;AACtC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACZ,EAAE,CAAqB;IAExC,YAAY,MAAM,GAAG,sBAAsB;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAqB,CAAC;QACnE,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQZ,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,WAAwB,EAAE,aAAqB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,4HAA4H,CAAC;aACrI,GAAG,CAAC,WAAW,EAAE,aAAa,CAElB,CAAC;QAChB,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrI,CAAC;IAED,GAAG,CAAC,OAAgB;QAClB,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC;;;;;OAKR,CAAC;aACD,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,WAAwB,EAAE,aAAqB;QACpD,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,WAAyB;QAC5B,MAAM,IAAI,GAAG,CAAC,WAAW;YACvB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YACxI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,EAAE,CAEpG,CAAC;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnI,CAAC;CACF"}

package/dist/bridge.d.ts

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import { type TgMessage, type AttachmentSpec } from './telegram.js';
+import { type Attachment } from './attachments.js';
+import type { SourceKind } from '@justfortytwo/gate';
+import type { MemoryInput } from '@justfortytwo/memory';
+interface ChannelEvent {
+    channel: string;
+    direction: string;
+    actor: string;
+    kind: string;
+    content: string;
+    meta?: Record<string, unknown>;
+    thread_id?: string | null;
+    approval_status?: string | null;
+}
+/** Map a channel event onto memory's generic MemoryInput (content + provenance). */
+export declare function mapChannelEventToMemoryInput(entry: ChannelEvent): MemoryInput;
+export interface DeferredTool {
+    id: string;
+    name: string;
+    input: Record<string, unknown>;
+}
+export interface Interpreted {
+    reply?: string;
+    deferred?: DeferredTool;
+    sessionId?: string;
+}
+/** Read a `claude -p --output-format json` result into a reply OR a deferred tool. */
+export declare function interpretResult(r: any): Interpreted;
+export declare function formatApprovalCard(d: DeferredTool, bashTtlHours?: number): string;
+export interface Schedule {
+    name: string;
+    minute: number;
+    hour: number;
+    dow?: number;
+    trigger: string;
+}
+export declare function telegramSourceKind(message: TgMessage): SourceKind;
+export declare function hasHandleableContent(message: TgMessage): boolean;
+export declare function telegramCommandReply(text: string): string | undefined;
+export declare function buildInboundPrompt(caption: string, attachments: Attachment[]): string;
+export interface AttachmentIo {
+    download(fileId: string): Promise<Buffer>;
+    write(relPath: string, bytes: Buffer): void;
+}
+/**
+ * Download + store each attachment in a message, returning provenance-tagged
+ * Attachments. Pure given an injected io (no network/fs in tests). Two-stage
+ * size check: declared file_size for early reject, actual length for hard enforcement.
+ */
+export declare function ingestMessageAttachments(io: AttachmentIo, message: TgMessage, opts: {
+    maxBytes: number;
+    storeDir: string;
+    channel: string;
+    actor?: string;
+}): Promise<{
+    attachments: Attachment[];
+    skipped: AttachmentSpec[];
+}>;
+export declare const SCHEDULES: Schedule[];
+/** Schedules whose cron slot matches `now` and haven't fired in this slot yet. */
+export declare function dueSchedules(now: Date, fired: Record<string, string>): Schedule[];
+export {};