@mastra/telegram 0.1.3 → 0.2.0-alpha.0

package/dist/index.cjs

@@ -19375,7 +19375,7 @@ function isUint8Array(value) {
 	return Boolean(value && typeof value === "object" && "byteLength" in value && "byteOffset" in value);
 }
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/bf8128214e5ca45222a909d8e82dc4a6bbc779eb9b510d06add2841f98f9c957/node_modules/chat/dist/chunk-VB76CUI4.js
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/812501c7a15f847e73b05ce99c81d2d9c3310ee4f208ad61509a2d1b4aae4089/node_modules/chat/dist/chunk-VB76CUI4.js
 function isListNode(node) {
 	return node.type === "list";
 }
@@ -20276,7 +20276,7 @@ var vn = (n, r) => {
 };
 var $e = vn;
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/bf8128214e5ca45222a909d8e82dc4a6bbc779eb9b510d06add2841f98f9c957/node_modules/chat/dist/chunk-BKACWYIW.js
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/812501c7a15f847e73b05ce99c81d2d9c3310ee4f208ad61509a2d1b4aae4089/node_modules/chat/dist/chunk-BKACWYIW.js
 var adapterMap = /* @__PURE__ */ new WeakMap();
 var Message = class _Message {
 	/** Unique message ID */
@@ -20687,7 +20687,7 @@ function wrapTablesForAppend(text2, closeFences = false) {
 new AbortController().signal;
 new async_hooks.AsyncLocalStorage();
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/bf8128214e5ca45222a909d8e82dc4a6bbc779eb9b510d06add2841f98f9c957/node_modules/chat/dist/index.js
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/chat/4.40.0/812501c7a15f847e73b05ce99c81d2d9c3310ee4f208ad61509a2d1b4aae4089/node_modules/chat/dist/index.js
 var emojiRegistry = /* @__PURE__ */ new Map();
 function getEmoji(name) {
 	let emojiValue = emojiRegistry.get(name);
@@ -21353,7 +21353,7 @@ createEmoji();
 var cardChildToFallbackText2 = cardChildToFallbackText;
 var isCardElement2 = isCardElement;
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@chat-adapter/shared/4.40.0/b8d1ffb3606d5fbc146955d209d67d901e1ac7e62c614258eabf21f6794389e3/node_modules/@chat-adapter/shared/dist/index.js
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@chat-adapter/shared/4.40.0/fce4918c61c1df207adfd85bd40413a154f91b156c76778268cca9eac6100664/node_modules/@chat-adapter/shared/dist/index.js
 function extractCard(message) {
 	if (isCardElement2(message)) return message;
 	if (typeof message === "object" && message !== null && "card" in message) return message.card;
@@ -21493,7 +21493,7 @@ function blocklist(ranges, family) {
 blocklist(IPV4, "ipv4");
 blocklist(IPV6, "ipv6");
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@chat-adapter/telegram/4.40.0/117ee55721c79f2050c97f5568d59cc1a8a9476541dcbc8fcd32561f0bae25c7/node_modules/@chat-adapter/telegram/dist/index.js
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@chat-adapter/telegram/4.40.0/2ef492177ff8ab13f86cb97c925417d9e41f7412cd1657efee41ac94fe25b285/node_modules/@chat-adapter/telegram/dist/index.js
 var CALLBACK_DATA_PREFIX = "chat:";
 var TELEGRAM_CALLBACK_DATA_LIMIT_BYTES = 64;
 function convertLabel(label) {
@@ -24340,6 +24340,7 @@ var TelegramInstallStore = class {
 	#toRecord(install) {
 		const data = {
 			botToken: this.#enc(install.botToken),
+			botUserId: install.botUserId,
 			secretToken: this.#enc(install.secretToken),
 			username: install.username,
 			webhookUrl: install.webhookUrl,
@@ -24364,6 +24365,7 @@ var TelegramInstallStore = class {
 			webhookId: record.webhookId ?? "",
 			status: record.status === "active" ? "active" : "pending",
 			botToken: this.#dec(data.botToken),
+			botUserId: data.botUserId,
 			secretToken: this.#dec(data.secretToken),
 			username: data.username,
 			webhookUrl: data.webhookUrl,
@@ -24434,6 +24436,7 @@ var TelegramProvider = class {
 	#initPromise = null;
 	#connectingBotTokens = /* @__PURE__ */ new Set();
 	constructor(config = {}) {
+		if ("tokenResolver" in config && config.tokenResolver && "botToken" in config && config.botToken) throw new Error("TelegramProvider cannot be constructed with both `botToken` and `tokenResolver` — pick one credential mode (self-managed or delegated).");
 		this.#config = config;
 	}
 	/**
@@ -24508,15 +24511,73 @@ var TelegramProvider = class {
 		}
 	}
 	async #doInitialize() {
-		const active = (await (await this.#getStore()).list()).filter((i) => i.status === "active");
+		const store = await this.#getStore();
+		const active = (await store.list()).filter((i) => i.status === "active");
 		this.#configured = active.length > 0;
 		for (const installation of active) try {
-			await this.#activateInstallation(installation);
+			const prepared = await this.#migrateInstallation(installation, store);
+			if (!prepared) continue;
+			await this.#activateInstallation(prepared);
 		} catch (err) {
 			console.error(`[Telegram] Failed to restore installation "${installation.id}":`, err);
 		}
 	}
 	/**
+	* Bring a stored installation up to the provider's current credential mode.
+	*
+	* When {@link TelegramProviderConfig.tokenResolver} is configured but the
+	* record was written under self-managed mode, the record still carries a
+	* `botToken` and may be missing `botUserId`. Left as-is, the adapter would
+	* keep using that stale token (bypassing rotation) and duplicate detection
+	* would fall back to token comparison. Resolve the current token, verify it
+	* points at the same bot, populate `botUserId` if missing, and drop the
+	* persisted token so future rotations flow through the resolver.
+	*
+	* For a legacy record with no `botUserId`, the "same bot" check needs an
+	* expected identity — so we `getMe` the stored `botToken` first and compare
+	* that identity to the resolver's. A stored-token lookup failure leaves the
+	* record untouched (we cannot prove it's still the same bot, and silently
+	* assigning `me.id` would let a repointed resolver retarget the install and
+	* orphan the old bot's webhook).
+	*
+	* A resolver failure — or an identity mismatch — is not fatal here: we log
+	* and leave the record untouched, so the operator can investigate before
+	* connect/disconnect on that installation.
+	*/
+	async #migrateInstallation(installation, store) {
+		if (!this.#config.tokenResolver) return installation;
+		const needsMigration = installation.botToken !== void 0 || installation.botUserId === void 0;
+		const needsIdentityCheck = installation.botUserId !== void 0;
+		if (!needsMigration && !needsIdentityCheck) return installation;
+		try {
+			const resolved = await this.#config.tokenResolver();
+			if (!resolved) return installation;
+			const me = await getMe(resolved, this.#apiBaseUrl());
+			let expectedBotUserId = installation.botUserId;
+			if (expectedBotUserId === void 0 && installation.botToken) try {
+				expectedBotUserId = (await getMe(installation.botToken, this.#apiBaseUrl())).id;
+			} catch (err) {
+				console.warn(`[Telegram] Could not verify stored bot identity for installation "${installation.id}" during delegated-mode migration; leaving the record untouched.`, err);
+				return installation;
+			}
+			if (expectedBotUserId !== void 0 && expectedBotUserId !== me.id) {
+				console.warn(`[Telegram] Delegated credential for installation "${installation.id}" now resolves to bot ${me.id} but was bot ${expectedBotUserId}. Disconnect and reconnect the agent to adopt the new bot.`);
+				return null;
+			}
+			if (!needsMigration) return installation;
+			const { botToken: _dropped, ...rest } = installation;
+			const migrated = {
+				...rest,
+				botUserId: me.id
+			};
+			await store.save(migrated);
+			return migrated;
+		} catch (err) {
+			console.warn(`[Telegram] Delegated-mode migration failed for installation "${installation.id}":`, err);
+			return installation;
+		}
+	}
+	/**
 	* Update runtime provider settings. Pass `botToken` to change the default
 	* bot token new {@link connect} calls fall back to when none is supplied
 	* per-agent (matching {@link SlackProvider.configure}'s rotation pattern);
@@ -24525,6 +24586,7 @@ var TelegramProvider = class {
 	* via {@link connect}/{@link disconnect}.
 	*/
 	async configure(credentials) {
+		if (this.#config.tokenResolver && credentials?.botToken !== void 0) throw new Error("TelegramProvider was constructed with a tokenResolver — bot tokens are managed externally. Remove the tokenResolver to manage credentials manually via configure().");
 		if (credentials === null) {
 			this.#config = {
 				...this.#config,
@@ -24561,7 +24623,13 @@ var TelegramProvider = class {
 		const store = await this.#getStore();
 		const existing = await store.getByAgent(agentId);
 		if (existing?.status === "active") throw new Error(`Agent "${agentId}" is already connected to Telegram. Disconnect first to reconnect.`);
-		const botToken = options.botToken ?? this.#config.botToken;
+		if (this.#config.tokenResolver && options.botToken !== void 0) throw new Error("TelegramProvider was constructed with a tokenResolver — bot tokens are managed externally and cannot be supplied per connect() call.");
+		let botToken;
+		if (this.#config.tokenResolver) {
+			const resolved = await this.#config.tokenResolver();
+			if (!resolved) throw new Error("TelegramProvider tokenResolver returned an empty bot token. Attach a Telegram bot credential upstream before connecting an agent.");
+			botToken = resolved;
+		} else botToken = options.botToken ?? this.#config.botToken;
 		if (!botToken) {
 			const installationId = existing?.id ?? (0, crypto$1.randomUUID)();
 			await store.save({
@@ -24585,11 +24653,11 @@ var TelegramProvider = class {
 			this.#connectingBotTokens.add(botToken);
 		}
 		try {
+			const me = await getMe(botToken, this.#apiBaseUrl());
 			if (mode === "webhook") {
-				const duplicate = (await store.list()).find((i) => i.status === "active" && i.botToken === botToken);
+				const duplicate = (await store.list()).find((i) => i.status === "active" && i.agentId !== agentId && (i.botUserId !== void 0 ? i.botUserId === me.id : i.botToken === botToken));
 				if (duplicate) throw new Error(`This Telegram bot is already connected to agent "${duplicate.agentId}". Disconnect it before connecting another agent.`);
 			}
-			const me = await getMe(botToken, this.#apiBaseUrl());
 			const installationId = existing?.id ?? (0, crypto$1.randomUUID)();
 			const webhookId = existing?.webhookId ?? (0, crypto$1.randomUUID)();
 			const webhookUrl = mode === "webhook" ? `${baseUrl}/${PLATFORM}/events/${webhookId}` : void 0;
@@ -24599,15 +24667,16 @@ var TelegramProvider = class {
 				agentId,
 				webhookId,
 				status: "active",
-				botToken,
+				...this.#config.tokenResolver ? {} : { botToken },
+				botUserId: me.id,
 				secretToken: generateSecretToken(),
 				username: options.name ?? me.username ?? me.first_name,
 				webhookUrl,
 				commands: commands.length ? commands : void 0,
 				installedAt: existing?.installedAt ?? /* @__PURE__ */ new Date()
 			};
-			await this.#registerTransport(installation, mode);
-			await this.#registerCommands(installation);
+			await this.#registerTransport(installation, mode, botToken);
+			await this.#registerCommands(installation, botToken);
 			await store.save(installation);
 			await this.#activateInstallation(installation);
 			this.#configured = true;
@@ -24631,8 +24700,18 @@ var TelegramProvider = class {
 		} catch (err) {
 			console.warn(`[Telegram] Failed to stop polling for agent "${agentId}":`, err);
 		}
-		if (existing.botToken) try {
-			await deleteWebhook(existing.botToken, true, this.#apiBaseUrl());
+		try {
+			let botToken;
+			if (existing.botToken) botToken = existing.botToken;
+			else if (this.#config.tokenResolver) {
+				const resolved = await this.#config.tokenResolver();
+				if (resolved && existing.botUserId !== void 0) {
+					const me = await getMe(resolved, this.#apiBaseUrl());
+					if (me.id !== existing.botUserId) console.warn(`[Telegram] Skipping deleteWebhook for agent "${agentId}": resolver now points at bot ${me.id} but this installation was bot ${existing.botUserId}.`);
+					else botToken = resolved;
+				} else if (resolved) botToken = resolved;
+			}
+			if (botToken) await deleteWebhook(botToken, true, this.#apiBaseUrl());
 		} catch (err) {
 			console.warn(`[Telegram] Failed to delete webhook for agent "${agentId}":`, err);
 		}
@@ -24706,22 +24785,25 @@ var TelegramProvider = class {
 		if (mode === "auto") return baseUrl ? "webhook" : "polling";
 		return mode;
 	}
-	/** Register (or clear) the receive transport for a bot, enforcing the exclusion. */
-	async #registerTransport(installation, mode) {
-		if (!installation.botToken) return;
-		if (mode === "webhook" && installation.webhookUrl && installation.secretToken) await setWebhook(installation.botToken, {
+	/**
+	* Register (or clear) the receive transport for a bot, enforcing the
+	* exclusion. The token is passed explicitly — delegated-mode installations
+	* do not persist one.
+	*/
+	async #registerTransport(installation, mode, botToken) {
+		if (mode === "webhook" && installation.webhookUrl && installation.secretToken) await setWebhook(botToken, {
 			url: installation.webhookUrl,
 			secretToken: installation.secretToken,
 			allowedUpdates: this.#config.allowedUpdates ?? [...DEFAULT_ALLOWED_UPDATES],
 			dropPendingUpdates: true
 		}, this.#apiBaseUrl());
-		else await deleteWebhook(installation.botToken, true, this.#apiBaseUrl());
+		else await deleteWebhook(botToken, true, this.#apiBaseUrl());
 	}
 	/** Publish the bot's command list (best-effort — a failure won't block connect). */
-	async #registerCommands(installation) {
-		if (!installation.botToken || !installation.commands?.length) return;
+	async #registerCommands(installation, botToken) {
+		if (!installation.commands?.length) return;
 		try {
-			await setMyCommands(installation.botToken, {
+			await setMyCommands(botToken, {
 				commands: installation.commands,
 				scope: this.#config.commandScope
 			}, this.#apiBaseUrl());
@@ -24733,7 +24815,7 @@ var TelegramProvider = class {
 		const existing = this.#adapters.get(installation.id);
 		if (existing) return existing;
 		const adapter = createTelegramAdapter({
-			botToken: installation.botToken,
+			botToken: installation.botToken ?? this.#config.tokenResolver,
 			secretToken: installation.secretToken,
 			userName: installation.username,
 			apiBaseUrl: this.#apiBaseUrl(),