@justfortytwo/telegram 0.1.0

package/dist/index.js

@@ -0,0 +1,24 @@
+// @justfortytwo/telegram — public API.
+//
+// The Telegram channel adapter for fortytwo: a long-polling bridge that
+// drives a headless `claude` turn loop per chat, surfaces gate approvals as
+// inline keyboards, and gates inbound access behind a login/pairing binding flow.
+//
+// Peer packages (declared in peerDependencies, NOT bundled):
+//   - @justfortytwo/memory  (MEMORY_TOOL_CONTRACT_VERSION, tools mcp__fortytwo-memory__*)
+//   - @justfortytwo/gate  (POLICY_SCHEMA_VERSION)
+// See src/bridge.ts for the `// TODO(wire):` seams where these are wired.
+// --- Channel transport (owned) ---
+export { Telegram, parseAllowed, approvalKeyboard, messageAttachmentSpecs, largestPhoto, formatTelegramHtml, } from './telegram.js';
+// --- Attachments (owned; depends on @justfortytwo/gate's provenance contract) ---
+export { buildAttachment, kindFromMime, extensionFor, inboxRelPath, withinSizeLimit, } from './attachments.js';
+// --- Adapter config (owned) ---
+export { loadAdaptersConfig, } from './adapters-config.js';
+// --- Binding contract + store (owned) ---
+export { TelegramAdapter, } from './adapter.js';
+export { MemoryBindingStore, SqliteBindingStore, } from './bindings.js';
+// --- Login / authorization flow (owned) ---
+export { handleAuthCommand, isAuthorized, isAuthCommand, } from './login.js';
+// --- Bridge turn-loop primitives (owned; pure decision logic is testable) ---
+export { interpretResult, formatApprovalCard, telegramSourceKind, hasHandleableContent, telegramCommandReply, buildInboundPrompt, ingestMessageAttachments, dueSchedules, SCHEDULES, } from './bridge.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,kFAAkF;AAClF,EAAE;AACF,6DAA6D;AAC7D,0FAA0F;AAC1F,kDAAkD;AAClD,0EAA0E;AAE1E,oCAAoC;AACpC,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,GAOnB,MAAM,eAAe,CAAC;AAEvB,mFAAmF;AACnF,OAAO,EACL,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAE1B,iCAAiC;AACjC,OAAO,EACL,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAE9B,2CAA2C;AAC3C,OAAO,EACL,eAAe,GAIhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAInB,MAAM,eAAe,CAAC;AAEvB,6CAA6C;AAC7C,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,aAAa,GAGd,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,SAAS,GAKV,MAAM,aAAa,CAAC"}

package/dist/login.d.ts

@@ -0,0 +1,40 @@
+import type { TelegramAdapter } from './adapter.js';
+import type { Binding } from './bindings.js';
+export type LoginAction = {
+    kind: 'login_ok';
+    binding: Binding;
+    reply: string;
+} | {
+    kind: 'login_failed';
+    reply: string;
+} | {
+    kind: 'logout';
+    reply: string;
+} | {
+    kind: 'ignore';
+};
+export interface AuthContext {
+    /** Telegram adapter that owns the challenge/verify + binding lookups. */
+    adapter: TelegramAdapter;
+    /** Static bootstrap allowlist (from ALLOWED_CHAT_IDS). May be empty. */
+    bootstrap: Set<number>;
+}
+/**
+ * Is this chat currently authorized to talk to the assistant?
+ * True iff it has a persisted binding OR is in the bootstrap allowlist.
+ */
+export declare function isAuthorized(ctx: AuthContext, chatId: number): boolean;
+/**
+ * Classify an inbound text from a chat and, for `/login` / `/logout`, perform
+ * the binding mutation. Returns the action the bridge should take.
+ *
+ * Lockdown contract:
+ *   - authorized chat: caller proceeds to the normal turn loop (this returns
+ *     `ignore` for non-command text so the bridge handles it itself — callers
+ *     should only consult this for command handling + the unbound gate).
+ *   - unbound chat presenting `/login <code>`: verify + maybe bind.
+ *   - unbound chat, anything else: `ignore` (NO response).
+ */
+export declare function handleAuthCommand(ctx: AuthContext, chatId: number, text: string): LoginAction;
+/** Convenience: does this inbound look like an auth command at all? */
+export declare function isAuthCommand(text: string): boolean;

package/dist/login.js

@@ -0,0 +1,88 @@
+// Login / pairing flow + inbound authorization.
+//
+// The lockdown rule (carried over from the monolith, spec §14) is: unbound
+// senders get NO response. The ONLY exception is a sender presenting `/login
+// <code>` — that is how an unknown chat earns a binding. Everything else from an
+// unbound chat is silently dropped.
+//
+// Authorization set = persisted bindings  ∪  optional ALLOWED_CHAT_IDS bootstrap.
+// The bootstrap set lets the very first owner chat reach the bridge before any
+// binding exists (e.g. to issue the first challenge), without leaving the bot
+// open. Once bindings exist, they are the durable source of truth.
+const LOGIN_RE = /^\/login(?:@[A-Za-z0-9_]+)?(?:\s+(\S+))?\s*$/;
+const LOGOUT_RE = /^\/logout(?:@[A-Za-z0-9_]+)?\s*$/;
+/**
+ * Is this chat currently authorized to talk to the assistant?
+ * True iff it has a persisted binding OR is in the bootstrap allowlist.
+ */
+export function isAuthorized(ctx, chatId) {
+    // Groups/channels (negative Telegram chat ids) are NEVER the owner: a group
+    // chat id identifies the ROOM, not the speaker, so authorizing one would let
+    // any member drive the assistant. Only private chats (chatId === the user id)
+    // can be authorized/bound.
+    if (chatId < 0)
+        return false;
+    if (ctx.bootstrap.has(chatId))
+        return true;
+    return ctx.adapter.bindingFor(String(chatId)) !== null;
+}
+/**
+ * Classify an inbound text from a chat and, for `/login` / `/logout`, perform
+ * the binding mutation. Returns the action the bridge should take.
+ *
+ * Lockdown contract:
+ *   - authorized chat: caller proceeds to the normal turn loop (this returns
+ *     `ignore` for non-command text so the bridge handles it itself — callers
+ *     should only consult this for command handling + the unbound gate).
+ *   - unbound chat presenting `/login <code>`: verify + maybe bind.
+ *   - unbound chat, anything else: `ignore` (NO response).
+ */
+export function handleAuthCommand(ctx, chatId, text) {
+    const trimmed = (text ?? '').trim();
+    const chatKey = String(chatId);
+    const authorized = isAuthorized(ctx, chatId);
+    // Groups/channels can never pair or be authorized (see isAuthorized): the chat
+    // id is the room, not a person. Drop silently.
+    if (chatId < 0)
+        return { kind: 'ignore' };
+    const loginMatch = trimmed.match(LOGIN_RE);
+    if (loginMatch) {
+        const code = loginMatch[1];
+        if (!code) {
+            // Only hint at the format if the chat is already authorized; an unbound
+            // chat that fat-fingers `/login` learns nothing about the bot's existence.
+            return authorized
+                ? { kind: 'login_failed', reply: 'Usage: /login <code>' }
+                : { kind: 'ignore' };
+        }
+        // A chat that already holds a binding cannot re-point it with a fresh code:
+        // that would be an owner-reassignment primitive (and would consume a code
+        // minted for a different chat). Require an explicit /logout first.
+        if (ctx.adapter.bindingFor(chatKey)) {
+            return { kind: 'login_failed', reply: 'This chat is already paired. Send /logout first to re-pair.' };
+        }
+        const binding = ctx.adapter.verify(chatKey, code);
+        if (binding) {
+            return { kind: 'login_ok', binding, reply: `Paired. This chat is now bound to "${binding.owner}". Send /logout to unbind.` };
+        }
+        // Bad/expired/used code from an unbound chat: stay dark to avoid an oracle.
+        return authorized
+            ? { kind: 'login_failed', reply: 'That code is invalid or expired.' }
+            : { kind: 'ignore' };
+    }
+    if (LOGOUT_RE.test(trimmed)) {
+        if (!authorized)
+            return { kind: 'ignore' };
+        ctx.adapter.unbind(chatKey);
+        return { kind: 'logout', reply: 'Unbound. This chat can no longer reach the assistant until you /login again.' };
+    }
+    // Not an auth command. Authorized chats fall through to the normal turn loop
+    // (the bridge re-derives authorization); unbound chats are dropped (lockdown).
+    return { kind: 'ignore' };
+}
+/** Convenience: does this inbound look like an auth command at all? */
+export function isAuthCommand(text) {
+    const trimmed = (text ?? '').trim();
+    return LOGIN_RE.test(trimmed) || LOGOUT_RE.test(trimmed);
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,iFAAiF;AACjF,oCAAoC;AACpC,EAAE;AACF,kFAAkF;AAClF,+EAA+E;AAC/E,8EAA8E;AAC9E,mEAAmE;AAWnE,MAAM,QAAQ,GAAG,8CAA8C,CAAC;AAChE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AASrD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAgB,EAAE,MAAc;IAC3D,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,2BAA2B;IAC3B,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB,EAAE,MAAc,EAAE,IAAY;IAC9E,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE7C,+EAA+E;IAC/E,+CAA+C;IAC/C,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,wEAAwE;YACxE,2EAA2E;YAC3E,OAAO,UAAU;gBACf,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBACzD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzB,CAAC;QACD,4EAA4E;QAC5E,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC;QACxG,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,OAAO,CAAC,KAAK,4BAA4B,EAAE,CAAC;QAC/H,CAAC;QACD,4EAA4E;QAC5E,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kCAAkC,EAAE;YACrE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,8EAA8E,EAAE,CAAC;IACnH,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/telegram.d.ts

@@ -0,0 +1,95 @@
+export declare function formatTelegramHtml(text: string): string;
+export interface PhotoSize {
+    file_id: string;
+    file_unique_id: string;
+    width: number;
+    height: number;
+    file_size?: number;
+}
+export interface TgDocument {
+    file_id: string;
+    file_name?: string;
+    mime_type?: string;
+    file_size?: number;
+}
+export interface AttachmentSpec {
+    file_id: string;
+    mime: string;
+    file_name?: string;
+    file_size?: number;
+    source_kind: 'telegram_photo' | 'telegram_document';
+}
+export interface TgMessage {
+    message_id: number;
+    chat: {
+        id: number;
+    };
+    from?: {
+        id: number;
+        is_bot: boolean;
+    };
+    text?: string;
+    caption?: string;
+    photo?: PhotoSize[];
+    document?: TgDocument;
+    forward_origin?: unknown;
+    forward_from?: unknown;
+    forward_from_chat?: unknown;
+    reply_to_message?: TgMessage;
+}
+export interface TgUpdate {
+    update_id: number;
+    message?: TgMessage;
+    callback_query?: {
+        id: string;
+        data?: string;
+        from?: {
+            id: number;
+        };
+        message?: {
+            message_id: number;
+            chat: {
+                id: number;
+            };
+        };
+    };
+}
+export declare function largestPhoto(sizes: PhotoSize[]): PhotoSize | undefined;
+export declare function messageAttachmentSpecs(message: TgMessage): AttachmentSpec[];
+export declare class Telegram {
+    private token;
+    private allowedChatIds;
+    constructor(token: string, allowedChatIds: Set<number>);
+    /**
+     * True if the chat is on the static bootstrap allowlist (ALLOWED_CHAT_IDS).
+     *
+     * NOTE (post-extraction): in the monolith this was the sole authorization
+     * check (lockdown). In @justfortytwo/telegram, authorization is owned by the
+     * login/binding flow (see src/login.ts `authorize`). This allowlist is now a
+     * BOOTSTRAP set unioned with persisted bindings, not the only gate. The poller
+     * no longer hard-filters on it; see the bridge poll loop.
+     */
+    allowed(chatId: number): boolean;
+    /** Long-poll for updates. Pass offset = lastUpdateId + 1 to acknowledge. */
+    getUpdates(offset: number, timeoutSec?: number): Promise<TgUpdate[]>;
+    sendMessage(chatId: number, text: string, replyMarkup?: Record<string, unknown>): Promise<{
+        message_id: number;
+    }>;
+    editMessageText(chatId: number, messageId: number, text: string): Promise<void>;
+    react(chatId: number, messageId: number, emoji: string): Promise<void>;
+    /** Native "Bot is typing…" chat action (shows ~5s in the header; refresh to keep alive). */
+    sendChatAction(chatId: number, action?: string): Promise<void>;
+    /** Answer a callback_query (button tap) — stops the button's loading spinner. */
+    answerCallbackQuery(callbackQueryId: string, text?: string): Promise<void>;
+    /** Resolve a file_id to a downloadable file_path (Bot API getFile). */
+    getFilePath(fileId: string): Promise<string>;
+    /** Download raw file bytes from the Telegram file API. */
+    downloadFile(filePath: string): Promise<Buffer>;
+}
+export interface ApprovalKeyboardOptions {
+    bashTtlHours?: number;
+}
+/** Inline approval keyboard, keyed by tool_use_id. Bash gets a TTL allowlist option. */
+export declare function approvalKeyboard(toolUseId: string, opts?: ApprovalKeyboardOptions): Record<string, unknown>;
+/** Parse "12345, -100999" → Set<number>. */
+export declare function parseAllowed(raw: string | undefined): Set<number>;

package/dist/telegram.js

@@ -0,0 +1,152 @@
+// Minimal Telegram Bot API client (long-poll + send) for the bridge. No SDK —
+// just fetch against https://api.telegram.org/bot<token>/. The bridge is the
+// ONLY long-poller; nothing else may call getUpdates on this bot.
+const API = (token) => `https://api.telegram.org/bot${token}`;
+async function tg(token, method, body) {
+    const res = await fetch(`${API(token)}/${method}`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(body),
+    });
+    const json = await res.json();
+    if (!json.ok)
+        throw new Error(`telegram ${method} failed: ${json.description ?? res.status}`);
+    return json.result;
+}
+function escapeHtml(text) {
+    return text
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+function formatInlineMarkdown(text) {
+    return escapeHtml(text)
+        .replace(/`([^`\n]+)`/g, '<code>$1</code>')
+        .replace(/\*\*([^*\n]+)\*\*/g, '<b>$1</b>')
+        .replace(/__([^_\n]+)__/g, '<b>$1</b>');
+}
+function formatMarkdownBlock(text) {
+    return text.split(/\r?\n/).map((line) => {
+        const heading = line.match(/^#{1,6}\s+(.+)$/);
+        if (heading)
+            return `<b>${formatInlineMarkdown(heading[1])}</b>`;
+        const bullet = line.match(/^(\s*)[-*]\s+(.+)$/);
+        if (bullet)
+            return `${bullet[1]}• ${formatInlineMarkdown(bullet[2])}`;
+        return formatInlineMarkdown(line);
+    }).join('\n');
+}
+export function formatTelegramHtml(text) {
+    return text.split('```').map((part, index) => {
+        if (index % 2 === 0)
+            return formatMarkdownBlock(part);
+        return `<pre>${escapeHtml(part.replace(/^\s*\w+\n/, '').trim())}</pre>`;
+    }).join('');
+}
+export function largestPhoto(sizes) {
+    const score = (p) => p.file_size ?? p.width * p.height;
+    return sizes.reduce((best, s) => (!best || score(s) > score(best) ? s : best), undefined);
+}
+export function messageAttachmentSpecs(message) {
+    const specs = [];
+    if (message.photo && message.photo.length) {
+        const p = largestPhoto(message.photo);
+        if (p)
+            specs.push({ file_id: p.file_id, mime: 'image/jpeg', file_size: p.file_size, source_kind: 'telegram_photo' });
+    }
+    if (message.document) {
+        specs.push({
+            file_id: message.document.file_id,
+            mime: message.document.mime_type ?? 'application/octet-stream',
+            file_name: message.document.file_name,
+            file_size: message.document.file_size,
+            source_kind: 'telegram_document',
+        });
+    }
+    return specs;
+}
+export class Telegram {
+    token;
+    allowedChatIds;
+    constructor(token, allowedChatIds) {
+        this.token = token;
+        this.allowedChatIds = allowedChatIds;
+    }
+    /**
+     * True if the chat is on the static bootstrap allowlist (ALLOWED_CHAT_IDS).
+     *
+     * NOTE (post-extraction): in the monolith this was the sole authorization
+     * check (lockdown). In @justfortytwo/telegram, authorization is owned by the
+     * login/binding flow (see src/login.ts `authorize`). This allowlist is now a
+     * BOOTSTRAP set unioned with persisted bindings, not the only gate. The poller
+     * no longer hard-filters on it; see the bridge poll loop.
+     */
+    allowed(chatId) {
+        return this.allowedChatIds.has(chatId);
+    }
+    /** Long-poll for updates. Pass offset = lastUpdateId + 1 to acknowledge. */
+    getUpdates(offset, timeoutSec = 30) {
+        return tg(this.token, 'getUpdates', { offset, timeout: timeoutSec, allowed_updates: ['message', 'callback_query'] });
+    }
+    sendMessage(chatId, text, replyMarkup) {
+        const body = { chat_id: chatId, text: formatTelegramHtml(text), parse_mode: 'HTML' };
+        if (replyMarkup)
+            body['reply_markup'] = replyMarkup;
+        return tg(this.token, 'sendMessage', body);
+    }
+    editMessageText(chatId, messageId, text) {
+        return tg(this.token, 'editMessageText', { chat_id: chatId, message_id: messageId, text: formatTelegramHtml(text), parse_mode: 'HTML' }).then(() => undefined);
+    }
+    react(chatId, messageId, emoji) {
+        return tg(this.token, 'setMessageReaction', {
+            chat_id: chatId, message_id: messageId,
+            reaction: [{ type: 'emoji', emoji }],
+        }).then(() => undefined);
+    }
+    /** Native "Bot is typing…" chat action (shows ~5s in the header; refresh to keep alive). */
+    sendChatAction(chatId, action = 'typing') {
+        return tg(this.token, 'sendChatAction', { chat_id: chatId, action }).then(() => undefined);
+    }
+    /** Answer a callback_query (button tap) — stops the button's loading spinner. */
+    answerCallbackQuery(callbackQueryId, text) {
+        const body = { callback_query_id: callbackQueryId };
+        if (text)
+            body['text'] = text;
+        return tg(this.token, 'answerCallbackQuery', body).then(() => undefined);
+    }
+    /** Resolve a file_id to a downloadable file_path (Bot API getFile). */
+    async getFilePath(fileId) {
+        const r = await tg(this.token, 'getFile', { file_id: fileId });
+        if (!r || typeof r.file_path !== 'string')
+            throw new Error('telegram getFile returned no file_path');
+        return r.file_path;
+    }
+    /** Download raw file bytes from the Telegram file API. */
+    async downloadFile(filePath) {
+        const res = await fetch(`https://api.telegram.org/file/bot${this.token}/${filePath}`);
+        if (!res.ok)
+            throw new Error(`telegram file download failed: ${res.status}`);
+        return Buffer.from(await res.arrayBuffer());
+    }
+}
+/** Inline approval keyboard, keyed by tool_use_id. Bash gets a TTL allowlist option. */
+export function approvalKeyboard(toolUseId, opts = {}) {
+    const row = opts.bashTtlHours
+        ? [
+            { text: 'Run once', callback_data: `approve_once:${toolUseId}` },
+            { text: `Allow ${opts.bashTtlHours}h`, callback_data: `approve_ttl:${toolUseId}` },
+            { text: 'Deny', callback_data: `deny:${toolUseId}` },
+        ]
+        : [
+            { text: 'Approve', callback_data: `approve_once:${toolUseId}` },
+            { text: 'Deny', callback_data: `deny:${toolUseId}` },
+        ];
+    return { inline_keyboard: [row] };
+}
+/** Parse "12345, -100999" → Set<number>. */
+export function parseAllowed(raw) {
+    if (!raw)
+        return new Set();
+    return new Set(raw.split(',').map((s) => Number(s.trim())).filter((n) => !Number.isNaN(n)));
+}
+//# sourceMappingURL=telegram.js.map

package/dist/telegram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../src/telegram.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,kEAAkE;AAElE,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,+BAA+B,KAAK,EAAE,CAAC;AAEtE,KAAK,UAAU,EAAE,CAAC,KAAa,EAAE,MAAc,EAAE,IAA6B;IAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyD,CAAC;IACrF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,YAAY,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC;SACpB,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC;SAC1C,OAAO,CAAC,oBAAoB,EAAE,WAAW,CAAC;SAC1C,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAO;YAAE,OAAO,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,QAAQ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC;IAC1E,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAiCD,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,KAAK,CAAC,MAAM,CAAwB,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAkB;IACvD,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,IAAI,0BAA0B;YAC9D,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;YACrC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;YACrC,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,QAAQ;IACC;IAAuB;IAA3C,YAAoB,KAAa,EAAU,cAA2B;QAAlD,UAAK,GAAL,KAAK,CAAQ;QAAU,mBAAc,GAAd,cAAc,CAAa;IAAG,CAAC;IAE1E;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,4EAA4E;IAC5E,UAAU,CAAC,MAAc,EAAE,UAAU,GAAG,EAAE;QACxC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,WAAqC;QAC7E,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC9G,IAAI,WAAW;YAAE,IAAI,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;QACpD,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY;QAC7D,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjK,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,SAAiB,EAAE,KAAa;QACpD,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,EAAE;YAC1C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS;YACtC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACrC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,4FAA4F;IAC5F,cAAc,CAAC,MAAc,EAAE,MAAM,GAAG,QAAQ;QAC9C,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,iFAAiF;IACjF,mBAAmB,CAAC,eAAuB,EAAE,IAAa;QACxD,MAAM,IAAI,GAA4B,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;QAC7E,IAAI,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACrG,OAAO,CAAC,CAAC,SAAS,CAAC;IACrB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oCAAoC,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF;AAMD,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAgC,EAAE;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY;QAC3B,CAAC,CAAC;YACA,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,SAAS,EAAE,EAAE;YAChE,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,YAAY,GAAG,EAAE,aAAa,EAAE,eAAe,SAAS,EAAE,EAAE;YAClF,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,SAAS,EAAE,EAAE;SACrD;QACD,CAAC,CAAC;YACA,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,SAAS,EAAE,EAAE;YAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,SAAS,EAAE,EAAE;SACrD,CAAC;IACJ,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@justfortytwo/telegram",
+  "version": "0.1.0",
+  "description": "Telegram channel adapter for fortytwo: a long-polling bridge that drives a headless `claude` turn loop per chat, surfaces gate approvals as inline keyboards, and gates inbound access behind a login/pairing binding flow.",
+  "license": "MIT",
+  "author": {
+    "name": "Enrico Deleo",
+    "url": "https://enricodeleo.com"
+  },
+  "homepage": "https://forty-two.it",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/justfortytwo/telegram.git"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./bridge": "./dist/bridge.js"
+  },
+  "bin": {
+    "fortytwo-telegram-bridge": "./dist/bridge.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "claude-code",
+    "telegram",
+    "channel-adapter",
+    "bridge",
+    "agent",
+    "bot",
+    "pairing",
+    "login"
+  ],
+  "peerDependencies": {
+    "@justfortytwo/memory": "^0.1.0",
+    "@justfortytwo/gate": "^0.1.0"
+  },
+  "peerDependenciesMeta": {
+    "@justfortytwo/memory": {
+      "optional": true
+    },
+    "@justfortytwo/gate": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "better-sqlite3": "^11.0.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.0",
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.6.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}