@moxxy/plugin-telegram 0.27.0

package/dist/format.js

@@ -0,0 +1,237 @@
+/**
+ * Convert the model's Markdown output into Telegram-flavoured HTML so
+ * the bot renders **bold**, `code`, ```code blocks```, [links](…),
+ * lists, and headings instead of dumping raw `**` and `#` characters
+ * into the chat.
+ *
+ * Why HTML and not MarkdownV2: MarkdownV2 requires escaping
+ * `_ * [ ] ( ) ~ \` > # + - = | { } . !` literally everywhere they
+ * AREN'T part of formatting — one stray `.` in a sentence breaks the
+ * whole message. HTML only needs three escapes (`< > &`) in text
+ * segments, and Telegram's HTML mode supports every tag we need
+ * (`<b>`, `<i>`, `<s>`, `<tg-spoiler>`, `<code>`, `<pre>`, `<a>`,
+ * `<blockquote>` / `<blockquote expandable>`).
+ *
+ * Telegram has no native headings or list elements, so:
+ *   - `#`, `##`, `###` headings → bold text on their own line.
+ *   - `- item` / `* item` bullets → `• item` (bullet glyph).
+ *   - `1. item` numbered → kept as-is (the digit is fine).
+ *
+ * Beyond CommonMark we also map a few extensions so the model can lean
+ * on Telegram's richer surface without learning a new syntax:
+ *   - `~~strike~~`           → `<s>` strikethrough.
+ *   - `||spoiler||`          → `<tg-spoiler>` (tap-to-reveal hidden text).
+ *   - `> [!note] Heading`    → a titled, emoji-tagged callout blockquote.
+ *   - `> [!details]- Title`  → a COLLAPSED (expandable) callout — the
+ *                              load-bearing "hide the details" box. The
+ *                              trailing `-` forces collapsed, `+` forces
+ *                              open; some types (details/example/faq)
+ *                              collapse by default.
+ *   - a plain `>` quote that runs long auto-collapses into an
+ *     `<blockquote expandable>` so a wall of quoted text stays tidy.
+ *
+ * Code blocks are emitted as `<pre><code class="language-xxx">…</code></pre>`,
+ * inline code as `<code>…</code>`. Everything inside code is escaped
+ * but no formatting markers run.
+ */
+export function markdownToTelegramHtml(md) {
+    // Pull fenced code blocks out FIRST so their contents skip inline
+    // markdown processing. Replace each with a placeholder, render the
+    // rest, then splice them back.
+    const fences = [];
+    let working = md.replace(/```([a-zA-Z0-9_+-]*)\n?([\s\S]*?)```/g, (_, lang, body) => {
+        const html = `<pre><code${lang ? ` class="language-${escapeHtml(String(lang))}"` : ''}>` +
+            escapeHtml(String(body)).replace(/\n+$/, '') +
+            '</code></pre>';
+        fences.push(html);
+        return ` FENCE${fences.length - 1} `;
+    });
+    // Pull inline code spans out next, same reason.
+    const inlines = [];
+    working = working.replace(/`([^`\n]+)`/g, (_, body) => {
+        inlines.push(`<code>${escapeHtml(String(body))}</code>`);
+        return ` INLINE${inlines.length - 1} `;
+    });
+    // Now safe to escape HTML special chars in everything else.
+    working = escapeHtml(working);
+    // Headings → bold. Telegram has no heading element; bold + line
+    // break is the conventional substitution.
+    working = working.replace(/^(#{1,6})\s+(.*)$/gm, (_, _hashes, text) => `<b>${String(text)}</b>`);
+    // Block quotes (>) — Telegram supports <blockquote> and, since Bot API
+    // 7.0, <blockquote expandable> (a collapsible "show more" box). Wrap
+    // consecutive quote lines into one block and let `renderBlockquote`
+    // decide collapsed-vs-open from an optional `[!callout]` marker or the
+    // quote's length.
+    working = working.replace(/((?:^&gt;[^\n]*\n?)+)/gm, (m) => {
+        const stripped = m
+            .replace(/&gt; ?/g, '')
+            .replace(/\n$/, '');
+        return `${renderBlockquote(stripped)}\n`;
+    });
+    // Bullet list items → bullet glyph. Match leading whitespace +
+    // -/*/+ + space. Don't touch indented sub-bullets' indent.
+    working = working.replace(/^(\s*)([-*+])\s+/gm, (_m, indent) => `${indent}• `);
+    // Bold **text** — process before italic so `**text**` doesn't get
+    // captured by the single-asterisk italic rule first.
+    working = working.replace(/\*\*([^*\n]+)\*\*/g, (_, body) => `<b>${String(body)}</b>`);
+    // Bold __text__
+    working = working.replace(/__([^_\n]+)__/g, (_, body) => `<b>${String(body)}</b>`);
+    // Strikethrough ~~text~~ → <s>. (GitHub flavour; a single `~` stays
+    // literal so it never eats a stray tilde in prose.)
+    working = working.replace(/~~([^~\n]+)~~/g, (_, body) => `<s>${String(body)}</s>`);
+    // Spoiler ||text|| → <tg-spoiler> (Telegram's tap-to-reveal). Content
+    // can't span a `|` so a single bar / table pipe is left untouched.
+    working = working.replace(/\|\|([^|\n]+)\|\|/g, (_, body) => `<tg-spoiler>${String(body)}</tg-spoiler>`);
+    // Italic *text* and _text_. Use lookarounds to avoid matching
+    // mid-word underscores (`some_var_name`) and stray bullets.
+    working = working.replace(/(^|[\s(,.!?:;])\*([^*\n]+)\*(?=$|[\s),.!?:;])/g, (_m, pre, body) => `${pre}<i>${String(body)}</i>`);
+    working = working.replace(/(^|[\s(,.!?:;])_([^_\n]+)_(?=$|[\s),.!?:;])/g, (_m, pre, body) => `${pre}<i>${String(body)}</i>`);
+    // Links [text](url) — strip url tracking params if needed later;
+    // for now just emit. URLs may contain `&` which is already escaped
+    // to `&amp;` by escapeHtml above; that's valid inside href.
+    working = working.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g, (m, text, url) => {
+        // The url got HTML-escaped earlier; restore enough that the link
+        // actually points where it should. Only `&amp;` → `&` is needed
+        // for the typical case; `<>` shouldn't appear in a URL but unescape
+        // them defensively.
+        const cleanUrl = String(url).replace(/&amp;/g, '&').replace(/&lt;/g, '<').replace(/&gt;/g, '>');
+        // The anchor target comes from arbitrary model output (and, via prompt
+        // injection, untrusted data the model echoes). Don't rely on Telegram's
+        // server-side parser as the sole sanitizer: emit a clickable <a> only for
+        // an explicit allow-list of schemes (and scheme-relative URLs). Anything
+        // else — `javascript:`, `data:`, `file:`, `tg://` deep links — is left as
+        // the original `[text](url)` text (already HTML-escaped upstream) so it
+        // can't navigate the client.
+        if (!isAllowedUrl(cleanUrl))
+            return String(m);
+        return `<a href="${escapeAttr(cleanUrl)}">${String(text)}</a>`;
+    });
+    // Splice fenced + inline code back in.
+    working = working.replace(/ INLINE(\d+) /g, (_, i) => inlines[Number(i)] ?? '');
+    working = working.replace(/ FENCE(\d+) /g, (_, i) => fences[Number(i)] ?? '');
+    return working;
+}
+/**
+ * GitHub / Obsidian-style callout types we recognise as the first line of a
+ * blockquote (`[!note]`, `[!warning]`, …). Each maps to a leading emoji, a
+ * default title, and whether the box collapses by default. `fold: true` types
+ * (details / example / faq) start COLLAPSED — they're meant for "extra info you
+ * can open if you want", which is exactly the detail-hiding the channel is for.
+ */
+const CALLOUTS = {
+    note: { emoji: 'ℹ️', label: 'Note', fold: false },
+    info: { emoji: 'ℹ️', label: 'Info', fold: false },
+    tip: { emoji: '💡', label: 'Tip', fold: false },
+    hint: { emoji: '💡', label: 'Hint', fold: false },
+    important: { emoji: '❗', label: 'Important', fold: false },
+    warning: { emoji: '⚠️', label: 'Warning', fold: false },
+    caution: { emoji: '⚠️', label: 'Caution', fold: false },
+    danger: { emoji: '🚨', label: 'Danger', fold: false },
+    error: { emoji: '🚨', label: 'Error', fold: false },
+    success: { emoji: '✅', label: 'Success', fold: false },
+    done: { emoji: '✅', label: 'Done', fold: false },
+    question: { emoji: '❓', label: 'Question', fold: false },
+    faq: { emoji: '❓', label: 'FAQ', fold: true },
+    quote: { emoji: '💬', label: 'Quote', fold: false },
+    details: { emoji: '📋', label: 'Details', fold: true },
+    example: { emoji: '📋', label: 'Example', fold: true },
+};
+/** A quote this big collapses into an expandable box even without a marker. */
+const LONG_QUOTE_LINES = 4;
+const LONG_QUOTE_CHARS = 280;
+/**
+ * Render the (already HTML-escaped) inner text of a `>` blockquote into a
+ * Telegram `<blockquote>` / `<blockquote expandable>`.
+ *
+ * Three shapes, in order of precedence:
+ *   1. Recognised callout — first line is `[!type]`, optionally `+`/`-` then a
+ *      title. Emits a bold `emoji Title` header line, then the body; collapses
+ *      when the marker is `-` or the type folds by default.
+ *   2. Long plain quote — no marker but ≥4 lines / ≥280 chars → expandable so a
+ *      wall of quoted text doesn't dominate the chat.
+ *   3. Short plain quote — a normal, always-open `<blockquote>`.
+ *
+ * The close tag is always `</blockquote>` (the `expandable` lives only on the
+ * open tag — Telegram rejects it on the close).
+ */
+function renderBlockquote(stripped) {
+    const callout = parseCallout(stripped);
+    let inner;
+    let expandable;
+    if (callout) {
+        inner = callout.body ? `${callout.header}\n${callout.body}` : callout.header;
+        expandable = callout.expandable;
+    }
+    else {
+        inner = stripped;
+        expandable = isLongQuote(stripped);
+    }
+    const open = expandable ? '<blockquote expandable>' : '<blockquote>';
+    return `${open}${inner}</blockquote>`;
+}
+/**
+ * Parse a `[!type]`/`[!type]-`/`[!type]+ Title` first line. Returns null when
+ * the first line isn't a RECOGNISED callout, so an unknown `[!whatever]` is left
+ * as ordinary quote text rather than guessing a rendering for it.
+ */
+function parseCallout(stripped) {
+    const nl = stripped.indexOf('\n');
+    const firstLine = nl === -1 ? stripped : stripped.slice(0, nl);
+    const rest = nl === -1 ? '' : stripped.slice(nl + 1);
+    const m = /^\[!(\w+)\]([+-]?)[ \t]*(.*)$/.exec(firstLine.trim());
+    if (!m)
+        return null;
+    const meta = CALLOUTS[m[1].toLowerCase()];
+    if (!meta)
+        return null;
+    const fold = m[2];
+    const title = m[3].trim() || meta.label;
+    return {
+        header: `<b>${meta.emoji} ${title}</b>`,
+        body: rest,
+        expandable: fold === '-' ? true : fold === '+' ? false : meta.fold,
+    };
+}
+/** True when a plain quote is long enough to be worth collapsing. */
+function isLongQuote(stripped) {
+    if (stripped.length >= LONG_QUOTE_CHARS)
+        return true;
+    let lines = 1;
+    for (let i = 0; i < stripped.length; i++)
+        if (stripped[i] === '\n')
+            lines++;
+    return lines >= LONG_QUOTE_LINES;
+}
+/** Schemes we let through as a clickable `<a href>`. */
+const ALLOWED_URL_SCHEMES = new Set(['http', 'https', 'mailto', 'tel']);
+/**
+ * True when `url` is safe to emit as an anchor target. A URL with an explicit
+ * `scheme:` prefix must use an allow-listed scheme; URLs without a scheme
+ * (relative paths, `#anchors`, `//host`, bare `host.com/...`) carry no
+ * navigation scheme and are allowed. This rejects `javascript:`, `data:`,
+ * `file:`, `tg://`, and any other unexpected scheme.
+ */
+function isAllowedUrl(url) {
+    // Control chars (incl. an embedded NUL/SOH) have no legitimate place in a URL
+    // and are a classic way to slip a dangerous scheme past a naive check — reject
+    // outright rather than try to normalize them away.
+    for (let i = 0; i < url.length; i++) {
+        if (url.charCodeAt(i) <= 0x1f || url.charCodeAt(i) === 0x7f)
+            return false;
+    }
+    // Strip leading whitespace/hyphen an attacker might use to shift the apparent
+    // scheme boundary, then detect the scheme.
+    const trimmed = url.replace(/^[\s-]+/, '');
+    // RFC3986 scheme: ALPHA *( ALPHA / DIGIT / "+" / "-" / "." ) ":".
+    const m = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed);
+    if (!m)
+        return true; // no explicit scheme — relative/anchor/host-only link
+    return ALLOWED_URL_SCHEMES.has(m[1].toLowerCase());
+}
+function escapeHtml(s) {
+    return s.replace(/[&<>]/g, (c) => (c === '&' ? '&amp;' : c === '<' ? '&lt;' : '&gt;'));
+}
+function escapeAttr(s) {
+    return s.replace(/[&<>"]/g, (c) => c === '&' ? '&amp;' : c === '<' ? '&lt;' : c === '>' ? '&gt;' : '&quot;');
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,kEAAkE;IAClE,mEAAmE;IACnE,+BAA+B;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAClF,MAAM,IAAI,GACR,aAAa,IAAI,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;YAC3E,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,eAAe,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,SAAS,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QACpD,OAAO,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAE9B,gEAAgE;IAChE,0CAA0C;IAC1C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjG,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,kBAAkB;IAClB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAS,EAAE,EAAE;QACjE,MAAM,QAAQ,GAAG,CAAC;aACf,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,2DAA2D;IAC3D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAEvF,kEAAkE;IAClE,qDAAqD;IACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,gBAAgB;IAChB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnF,oEAAoE;IACpE,oDAAoD;IACpD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnF,sEAAsE;IACtE,mEAAmE;IACnE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEzG,8DAA8D;IAC9D,4DAA4D;IAC5D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gDAAgD,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/H,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,8CAA8C,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7H,iEAAiE;IACjE,mEAAmE;IACnE,4DAA4D;IAC5D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvE,iEAAiE;QACjE,gEAAgE;QAChE,oEAAoE;QACpE,oBAAoB;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChG,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE9E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,QAAQ,GAAoE;IAChF,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;IACjD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;IACjD,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;IAC/C,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;IACjD,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1D,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;IACvD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;IACvD,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE;IACrD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;IACnD,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;IACtD,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;IAChD,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;IACxD,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;IAC7C,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;IACnD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;IACtD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;CACvD,CAAC;AAEF,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;;;;;;;;;;GAcG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,KAAa,CAAC;IAClB,IAAI,UAAmB,CAAC;IACxB,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7E,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,QAAQ,CAAC;QACjB,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,cAAc,CAAC;IACrE,OAAO,GAAG,IAAI,GAAG,KAAK,eAAe,CAAC;AACxC,CAAC;AAQD;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC;IACzC,OAAO;QACL,MAAM,EAAE,MAAM,IAAI,CAAC,KAAK,IAAI,KAAK,MAAM;QACvC,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,EAAE,CAAC;IAC5E,OAAO,KAAK,IAAI,gBAAgB,CAAC;AACnC,CAAC;AAED,wDAAwD;AACxD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,8EAA8E;IAC9E,+EAA+E;IAC/E,mDAAmD;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3C,kEAAkE;IAClE,MAAM,CAAC,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,sDAAsD;IAC3E,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CACzE,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+import { type Plugin } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+export { TelegramChannel, type TelegramChannelOptions, type TelegramStartOpts, } from './channel.js';
+export { TelegramPermissionResolver, type PendingPermission } from './permission.js';
+export { TelegramApprovalResolver, type PendingApproval } from './approval.js';
+export { createPairingState, beginHostIssuedPairing, handleStart, submitChatCode, isAuthorized, clearPairing, type PairingPhase, type PairingState, type PairingDecision, } from './pairing.js';
+export type { PairingConfirmResult } from './channel.js';
+export { TurnRenderer, splitForTelegram } from './render.js';
+export { markdownToTelegramHtml } from './format.js';
+export interface BuildTelegramPluginOptions {
+    readonly vault: VaultStore;
+}
+export { TELEGRAM_TOKEN_KEY, TELEGRAM_AUTHORIZED_CHAT_KEY, TELEGRAM_TOKEN_RE } from './keys.js';
+export declare function buildTelegramPlugin(opts: BuildTelegramPluginOptions): Plugin;
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + tools read the vault via `getVault()`,
+ * so resolution is deferred to call time — after `onInit` has wired it.
+ */
+export declare const telegramPlugin: Plugin;
+export default telegramPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmE,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAC1G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAStD,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAMhG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,CAG5E;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,MAgBzB,CAAC;AAoRL,eAAe,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,304 @@
+import { defineChannel, defineTool, definePlugin, z } from '@moxxy/sdk';
+import { Api, GrammyError } from 'grammy';
+import { markdownToTelegramHtml } from './format.js';
+import { stripHtml } from './channel/html.js';
+import { TelegramChannel } from './channel.js';
+import { TELEGRAM_AUTHORIZED_CHAT_KEY, TELEGRAM_TOKEN_KEY, parseChatId } from './keys.js';
+import { runTelegramWizard } from './setup-wizard.js';
+import { runPairFlow } from './pair-flow.js';
+export { TelegramChannel, } from './channel.js';
+export { TelegramPermissionResolver } from './permission.js';
+export { TelegramApprovalResolver } from './approval.js';
+export { createPairingState, beginHostIssuedPairing, handleStart, submitChatCode, isAuthorized, clearPairing, } from './pairing.js';
+export { TurnRenderer, splitForTelegram } from './render.js';
+export { markdownToTelegramHtml } from './format.js';
+export { TELEGRAM_TOKEN_KEY, TELEGRAM_AUTHORIZED_CHAT_KEY, TELEGRAM_TOKEN_RE } from './keys.js';
+// Backwards-compat aliases for the existing call sites in this file.
+const TOKEN_KEY = TELEGRAM_TOKEN_KEY;
+const AUTHORIZED_CHAT_KEY = TELEGRAM_AUTHORIZED_CHAT_KEY;
+export function buildTelegramPlugin(opts) {
+    // Host-injected vault (available immediately).
+    return makeTelegramPlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + tools read the vault via `getVault()`,
+ * so resolution is deferred to call time — after `onInit` has wired it.
+ */
+export const telegramPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-telegram: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeTelegramPlugin(getVault, hooks);
+})();
+function makeTelegramPlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-telegram',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        channels: [
+            defineChannel({
+                name: 'telegram',
+                description: 'Telegram bot channel via grammy. QR deep-link chat pairing.',
+                // Like Slack, run on a dedicated, isolated runner (separate socket +
+                // sticky session) so the bot keeps its own persistent history apart from
+                // the user's desktop/TUI work. Telegram long-polls (no tunnel needed).
+                dedicatedRunner: true,
+                sessionSource: 'telegram',
+                // Self-described config so a control surface (TUI `/channels`, `moxxy
+                // channels start`) can configure + run Telegram without a hardcoded table.
+                config: {
+                    fields: [
+                        {
+                            name: 'token',
+                            label: 'Bot token',
+                            vaultKey: TELEGRAM_TOKEN_KEY,
+                            required: true,
+                            secret: true,
+                            placeholder: '123456:ABC-DEF…',
+                            help: 'Create a bot with @BotFather and paste its token',
+                        },
+                    ],
+                    hasRequestUrl: false,
+                    runHint: 'Scan the QR (or open the link) and tap START in Telegram to pair your chat — no code to type.',
+                    connect: {
+                        kind: 'qr',
+                        title: 'Connect your Telegram',
+                        hint: 'Scan the QR with your phone (or tap Open in Telegram), then press START — your chat pairs automatically.',
+                        openable: true,
+                        openLabel: 'Open in Telegram',
+                    },
+                },
+                create: (deps) => new TelegramChannel({
+                    vault: getVault(),
+                    token: deps.options?.['token'] ?? undefined,
+                    logger: deps.logger,
+                }),
+                isAvailable: async () => {
+                    const envToken = process.env.MOXXY_TELEGRAM_TOKEN;
+                    if (envToken)
+                        return { ok: true };
+                    try {
+                        const stored = await getVault().has(TOKEN_KEY);
+                        if (stored)
+                            return { ok: true };
+                        return {
+                            ok: false,
+                            reason: "No bot token. Set MOXXY_TELEGRAM_TOKEN, or store one in the vault as '" +
+                                TOKEN_KEY +
+                                "' via the `telegram-setup` skill.",
+                        };
+                    }
+                    catch {
+                        return {
+                            ok: false,
+                            reason: 'Set MOXXY_TELEGRAM_TOKEN to skip the vault, or unlock the vault first.',
+                        };
+                    }
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: store a bot token, pair a chat, then start the bot. Shown by default for `moxxy telegram` on a TTY.',
+                        run: async (ctx) => {
+                            // The wizard drives token entry + pairing through clack
+                            // prompts, so it needs an interactive terminal. In a
+                            // headless invocation we just start the bot directly.
+                            if (process.stdin.isTTY !== true) {
+                                return ctx.startChannel();
+                            }
+                            return runTelegramWizard(ctx);
+                        },
+                    },
+                    pair: {
+                        description: 'Open a pairing window and print a QR. Scan it (or open the link) and tap START in Telegram to pair your chat — the same mechanism the desktop uses.',
+                        run: async (ctx) => {
+                            // Pairing renders a QR for the user to scan, so it needs an
+                            // interactive terminal. In a headless invocation we bail with a
+                            // clear message instead of starting a bot nobody can pair. (The
+                            // desktop Channels panel pairs the same way without a TTY — it
+                            // renders the QR in the GUI.)
+                            if (process.stdin.isTTY !== true) {
+                                process.stderr.write('Pairing needs a TTY to show the QR. Run `moxxy channels telegram pair` on a workstation, or pair from the desktop Channels panel.\n');
+                                return 1;
+                            }
+                            return runPairFlow(ctx);
+                        },
+                    },
+                    unpair: {
+                        description: 'Forget the currently authorized Telegram chat.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removed = await vault.delete(AUTHORIZED_CHAT_KEY);
+                            process.stdout.write(removed ? 'unpaired\n' : 'no pairing was active\n');
+                            return 0;
+                        },
+                    },
+                    status: {
+                        description: 'Report whether a Telegram token + an authorized chat are configured.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const hasToken = await vault.has(TOKEN_KEY);
+                            const authorized = await vault.get(AUTHORIZED_CHAT_KEY);
+                            process.stdout.write(JSON.stringify({
+                                tokenConfigured: hasToken,
+                                authorizedChatId: parseChatId(authorized),
+                            }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+        tools: [
+            defineTool({
+                name: 'telegram_set_token',
+                description: 'Store a Telegram bot token (from @BotFather) in the vault under telegram_bot_token. Validates the token shape but does not test connectivity.',
+                inputSchema: z.object({
+                    token: z.string().regex(/^\d+:[A-Za-z0-9_-]{20,}$/, 'token must look like 1234567890:ABC...'),
+                }),
+                permission: { action: 'prompt' },
+                // Vault writes land in ~/.moxxy/vault.json (key material in
+                // ~/.moxxy/vault.key) — hence the vault.* glob.
+                isolation: {
+                    capabilities: {
+                        fs: { read: ['~/.moxxy/vault.*'], write: ['~/.moxxy/vault.*'] },
+                        net: { mode: 'none' },
+                        timeMs: 10_000,
+                    },
+                },
+                handler: async ({ token }) => {
+                    await getVault().set(TOKEN_KEY, token, ['telegram']);
+                    return `stored Telegram token (${token.split(':')[0]}:…) in vault`;
+                },
+            }),
+            defineTool({
+                name: 'telegram_status',
+                description: 'Report whether a Telegram token + an authorized chat are configured.',
+                inputSchema: z.object({}),
+                isolation: {
+                    capabilities: {
+                        fs: { read: ['~/.moxxy/vault.*'] },
+                        net: { mode: 'none' },
+                        timeMs: 10_000,
+                    },
+                },
+                handler: async () => {
+                    const hasToken = await getVault().has(TOKEN_KEY);
+                    const authorized = await getVault().get(AUTHORIZED_CHAT_KEY);
+                    return {
+                        tokenConfigured: hasToken,
+                        authorizedChatId: parseChatId(authorized),
+                    };
+                },
+            }),
+            defineTool({
+                name: 'telegram_send_message',
+                description: 'Push a one-off message to the currently authorized Telegram chat. Use this from a ' +
+                    'scheduled prompt to deliver results without an interactive channel running. By ' +
+                    'default the text is rendered with the same rich Markdown→Telegram formatting as ' +
+                    'interactive replies (bold, code, `> [!type]` callouts, `||spoilers||`, etc.); pass ' +
+                    'an explicit `parseMode` to send the raw text under that parse mode instead. Requires ' +
+                    'a stored bot token + a paired chat (run `moxxy channels telegram pair` once).',
+                inputSchema: z.object({
+                    text: z.string().min(1).max(4096),
+                    /** Optional override; defaults to the vault-paired chat id. */
+                    chatId: z.number().int().optional(),
+                    /**
+                     * Force a specific Telegram parse mode and send `text` verbatim under
+                     * it. Omit to get the default Markdown→HTML rendering (recommended).
+                     */
+                    parseMode: z.enum(['MarkdownV2', 'Markdown', 'HTML']).optional(),
+                }),
+                permission: { action: 'prompt' },
+                isolation: {
+                    capabilities: {
+                        fs: { read: ['~/.moxxy/vault.*'] },
+                        net: { mode: 'allowlist', hosts: ['api.telegram.org'] },
+                        env: ['MOXXY_TELEGRAM_TOKEN'],
+                        timeMs: 60_000,
+                    },
+                },
+                handler: async ({ text, chatId, parseMode }) => {
+                    const token = process.env.MOXXY_TELEGRAM_TOKEN ?? (await getVault().get(TOKEN_KEY));
+                    if (!token) {
+                        throw new Error('no Telegram bot token configured (set MOXXY_TELEGRAM_TOKEN or run `moxxy init` to store one)');
+                    }
+                    const targetChat = chatId ?? parseChatId(await getVault().get(AUTHORIZED_CHAT_KEY));
+                    if (!targetChat) {
+                        throw new Error('no authorized chat — run `moxxy channels telegram pair` first or pass `chatId` explicitly');
+                    }
+                    // Use grammy's lightweight `Api` client directly rather than a full
+                    // `Bot` (which builds a polling-capable instance + lazily resolves
+                    // bot info). This is a one-off send — no long-polling — so the Bot
+                    // wrapper was pure overhead per invocation.
+                    const api = new Api(token);
+                    if (parseMode) {
+                        // Explicit mode → caller owns the markup; send text verbatim.
+                        await api.sendMessage(targetChat, text, { parse_mode: parseMode });
+                    }
+                    else {
+                        // Default → render Markdown to Telegram HTML for the same rich look
+                        // as interactive replies, falling back to plain text if the model's
+                        // text produced an entity Telegram can't parse (rare).
+                        const html = markdownToTelegramHtml(text);
+                        try {
+                            await api.sendMessage(targetChat, html, {
+                                parse_mode: 'HTML',
+                                link_preview_options: { is_disabled: true },
+                            });
+                        }
+                        catch (err) {
+                            if (err instanceof GrammyError && /can't parse entities|Bad Request: can't parse/i.test(err.description ?? '')) {
+                                await api.sendMessage(targetChat, stripHtml(html));
+                            }
+                            else {
+                                throw err;
+                            }
+                        }
+                    }
+                    return { delivered: true, chatId: targetChat, length: text.length };
+                },
+            }),
+            defineTool({
+                name: 'telegram_unpair',
+                description: 'Forget the currently authorized Telegram chat. The next /start will start a fresh pairing.',
+                inputSchema: z.object({}),
+                permission: { action: 'prompt' },
+                isolation: {
+                    capabilities: {
+                        fs: { read: ['~/.moxxy/vault.*'], write: ['~/.moxxy/vault.*'] },
+                        net: { mode: 'none' },
+                        timeMs: 10_000,
+                    },
+                },
+                handler: async () => {
+                    const removed = await getVault().delete(AUTHORIZED_CHAT_KEY);
+                    return removed ? 'unpaired' : 'no pairing was active';
+                },
+            }),
+        ],
+    });
+}
+// Discovery entry: `createPluginLoader` requires a default Plugin export.
+export default telegramPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAoC,MAAM,YAAY,CAAC;AAE1G,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EACL,eAAe,GAGhB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAA0B,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAwB,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,cAAc,EACd,YAAY,EACZ,YAAY,GAIb,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAMrD,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEhG,qEAAqE;AACrE,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEzD,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,+CAA+C;IAC/C,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,CAAC,GAAG,EAAE;IAC1C,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,kBAAkB,CAAC,QAA0B,EAAE,KAAsB;IAC5E,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,6DAA6D;gBAC1E,qEAAqE;gBACrE,yEAAyE;gBACzE,uEAAuE;gBACvE,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,UAAU;gBACzB,sEAAsE;gBACtE,2EAA2E;gBAC3E,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,WAAW;4BAClB,QAAQ,EAAE,kBAAkB;4BAC5B,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,iBAAiB;4BAC9B,IAAI,EAAE,kDAAkD;yBACzD;qBACF;oBACD,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,+FAA+F;oBACjG,OAAO,EAAE;wBACP,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,uBAAuB;wBAC9B,IAAI,EAAE,0GAA0G;wBAChH,QAAQ,EAAE,IAAI;wBACd,SAAS,EAAE,kBAAkB;qBAC9B;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,eAAe,CAAC;oBAClB,KAAK,EAAE,QAAQ,EAAE;oBACjB,KAAK,EAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,SAAS;oBACnE,MAAM,EAAE,IAAI,CAAC,MAAe;iBAC7B,CAAC;gBACJ,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBAClD,IAAI,QAAQ;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBAC/C,IAAI,MAAM;4BAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;wBAChC,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EACJ,wEAAwE;gCACxE,SAAS;gCACT,mCAAmC;yBACtC,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EACJ,wEAAwE;yBAC3E,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,wHAAwH;wBAC1H,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,wDAAwD;4BACxD,qDAAqD;4BACrD,sDAAsD;4BACtD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;wBAChC,CAAC;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,qJAAqJ;wBACvJ,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,4DAA4D;4BAC5D,gEAAgE;4BAChE,gEAAgE;4BAChE,+DAA+D;4BAC/D,8BAA8B;4BAC9B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qIAAqI,CACtI,CAAC;gCACF,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;wBAC1B,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,gDAAgD;wBAC7D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;4BACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;4BACzE,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,sEAAsE;wBACnF,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;4BAC5C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;4BACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;gCACE,eAAe,EAAE,QAAQ;gCACzB,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC;6BAC1C,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;QACD,KAAK,EAAE;YACL,UAAU,CAAC;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EACT,+IAA+I;gBACjJ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,EAAE,wCAAwC,CAAC;iBAC9F,CAAC;gBACF,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,4DAA4D;gBAC5D,gDAAgD;gBAChD,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,EAAE;wBAC/D,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;wBACrB,MAAM,EAAE,MAAM;qBACf;iBACF;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;oBACrD,OAAO,0BAA0B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;gBACrE,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,sEAAsE;gBACnF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE;wBAClC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;wBACrB,MAAM,EAAE,MAAM;qBACf;iBACF;gBACD,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM,UAAU,GAAG,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBAC7D,OAAO;wBACL,eAAe,EAAE,QAAQ;wBACzB,gBAAgB,EAAE,WAAW,CAAC,UAAU,CAAC;qBAC1C,CAAC;gBACJ,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EACT,oFAAoF;oBACpF,iFAAiF;oBACjF,kFAAkF;oBAClF,qFAAqF;oBACrF,uFAAuF;oBACvF,+EAA+E;gBACjF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBACjC,+DAA+D;oBAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBACnC;;;uBAGG;oBACH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;iBACjE,CAAC;gBACF,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE;wBAClC,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,EAAE;wBACvD,GAAG,EAAE,CAAC,sBAAsB,CAAC;wBAC7B,MAAM,EAAE,MAAM;qBACf;iBACF;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpF,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;oBACJ,CAAC;oBACD,MAAM,UAAU,GACd,MAAM,IAAI,WAAW,CAAC,MAAM,QAAQ,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;oBACnE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;oBACJ,CAAC;oBACD,oEAAoE;oBACpE,mEAAmE;oBACnE,mEAAmE;oBACnE,4CAA4C;oBAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC3B,IAAI,SAAS,EAAE,CAAC;wBACd,8DAA8D;wBAC9D,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;oBACrE,CAAC;yBAAM,CAAC;wBACN,oEAAoE;wBACpE,oEAAoE;wBACpE,uDAAuD;wBACvD,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;wBAC1C,IAAI,CAAC;4BACH,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE;gCACtC,UAAU,EAAE,MAAM;gCAClB,oBAAoB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;6BAC5C,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,GAAG,YAAY,WAAW,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;gCAC/G,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;4BACrD,CAAC;iCAAM,CAAC;gCACN,MAAM,GAAG,CAAC;4BACZ,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtE,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,4FAA4F;gBACzG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,kBAAkB,CAAC,EAAE;wBAC/D,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;wBACrB,MAAM,EAAE,MAAM;qBACf;iBACF;gBACD,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBAC7D,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC;gBACxD,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,eAAe,cAAc,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Vault keys + token validation shared by the channel, its subcommands, and the
+ * interactive setup wizard. Kept in their own module so the wizard / pair-flow
+ * helpers can import them without pulling in the plugin's full index.
+ */
+/** Vault key the plugin uses for the Bot API token. */
+export declare const TELEGRAM_TOKEN_KEY = "telegram_bot_token";
+/** Vault key the plugin uses for the paired chat id. */
+export declare const TELEGRAM_AUTHORIZED_CHAT_KEY = "telegram_authorized_chat_id";
+/**
+ * Vault key for the voice-replies preference. Single-paired-chat model, so a
+ * simple present-flag (`'1'` = on, absent = off) keyed like the other telegram
+ * keys, toggled from the paired chat via `/voice`.
+ */
+export declare const TELEGRAM_VOICE_REPLIES_KEY = "telegram_voice_replies";
+/** Regex validating a Telegram bot token (`<digits>:<22+ url-safe>`). */
+export declare const TELEGRAM_TOKEN_RE: RegExp;
+/** The narrow vault slice the voice-replies flag helpers use. */
+interface VoiceFlagVault {
+    get(name: string): Promise<string | null>;
+    set(name: string, value: string): Promise<void>;
+    delete(name: string): Promise<boolean>;
+}
+/** Read the persisted voice-replies preference (`'1'` → on). */
+export declare function loadVoiceReplies(vault: Pick<VoiceFlagVault, 'get'>): Promise<boolean>;
+/** Persist the voice-replies preference: store `'1'` when on, remove it when off. */
+export declare function saveVoiceReplies(vault: Pick<VoiceFlagVault, 'set' | 'delete'>, on: boolean): Promise<void>;
+/**
+ * Parse a stored chat-id (the vault keeps it as a string). Returns `null` for a
+ * missing OR corrupt value rather than letting `Number(x)` yield `NaN` — a
+ * silent NaN serializes to `null` in status output (masking the corruption) and
+ * would otherwise be passed to `api.sendMessage(NaN, …)` as a real target,
+ * producing an opaque Telegram 400 instead of a clear "not paired" signal.
+ */
+export declare function parseChatId(raw: string | null | undefined): number | null;
+export {};
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,wDAAwD;AACxD,eAAO,MAAM,4BAA4B,gCAAgC,CAAC;AAC1E;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,QAA6B,CAAC;AAE5D,iEAAiE;AACjE,UAAU,cAAc;IACtB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxC;AAED,gEAAgE;AAChE,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3F;AAED,qFAAqF;AACrF,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,QAAQ,CAAC,EAC7C,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIzE"}