@mulmobridge/telegram 0.1.2 → 1.0.0

package/README.md

@@ -32,6 +32,24 @@ yarn telegram
 | `MULMOCLAUDE_AUTH_TOKEN` | No | Bearer token override | reads from file |
 | `TELEGRAM_POLL_TIMEOUT_SEC` | No | Long-poll timeout | `25` |
 
+### Auth token persistence across server restarts
+
+The MulmoClaude server regenerates a fresh bearer token on every startup and writes it to `~/mulmoclaude/.session-token`. The bridge reads that file once at launch and keeps the token in memory — so if the server restarts while the bridge is running, the bridge keeps using the **old** token and every API call returns **401**, silently.
+
+**Fix**: set `MULMOCLAUDE_AUTH_TOKEN` to the same long random value on **both** the server and the bridge. The server uses it verbatim instead of regenerating, so the token survives restarts and the bridge stays authenticated.
+
+```bash
+# Server (one-time setup — same value across restarts)
+MULMOCLAUDE_AUTH_TOKEN=long-random-string yarn dev
+
+# Bridge (separate process / machine — same value)
+MULMOCLAUDE_AUTH_TOKEN=long-random-string \
+  <bridge-specific-envs> \
+  npx <this-package>@latest
+```
+
+Recommended: at least 32 characters of random data (the server logs a warning at startup for shorter values).
+
 ## Security
 
 The bridge enforces a **chat-ID allowlist**. Only messages from listed chat IDs are forwarded to MulmoClaude. All other messages receive a one-time "Access denied" reply.
@@ -46,13 +64,43 @@ The bridge enforces a **chat-ID allowlist**. Only messages from listed chat IDs
 
 ## Ecosystem
 
-Part of the `@mulmobridge/*` package family:
-
-- **@mulmobridge/protocol** — shared types and constants
-- **@mulmobridge/client** — socket.io client library
-- **@mulmobridge/cli** — interactive terminal bridge
-- **@mulmobridge/telegram** — this package
-- **@mulmobridge/chat-service** — server-side chat service
+Part of the [`@mulmobridge/*`](https://www.npmjs.com/~mulmobridge) package family.
+
+**Shared libraries:**
+
+- [`@mulmobridge/client`](https://www.npmjs.com/package/@mulmobridge/client) — socket.io client library used by every bridge below
+- [`@mulmobridge/protocol`](https://www.npmjs.com/package/@mulmobridge/protocol) — wire types and constants
+- [`@mulmobridge/chat-service`](https://www.npmjs.com/package/@mulmobridge/chat-service) — server-side relay + session store
+- [`@mulmobridge/relay`](https://www.npmjs.com/package/@mulmobridge/relay) — Cloudflare Workers webhook proxy
+- [`@mulmobridge/mock-server`](https://www.npmjs.com/package/@mulmobridge/mock-server) — mock server for local bridge development
+
+**Bridges** (one npm package per platform):
+
+- [`@mulmobridge/bluesky`](https://www.npmjs.com/package/@mulmobridge/bluesky) — Bluesky DMs over atproto
+- [`@mulmobridge/chatwork`](https://www.npmjs.com/package/@mulmobridge/chatwork) — Chatwork (Japanese business chat)
+- [`@mulmobridge/cli`](https://www.npmjs.com/package/@mulmobridge/cli) — interactive terminal bridge
+- [`@mulmobridge/discord`](https://www.npmjs.com/package/@mulmobridge/discord) — Discord bot via Gateway
+- [`@mulmobridge/email`](https://www.npmjs.com/package/@mulmobridge/email) — IMAP poll + SMTP reply, threading preserved
+- [`@mulmobridge/google-chat`](https://www.npmjs.com/package/@mulmobridge/google-chat) — Google Chat via MulmoBridge relay
+- [`@mulmobridge/irc`](https://www.npmjs.com/package/@mulmobridge/irc) — IRC (Libera, Freenode, custom)
+- [`@mulmobridge/line`](https://www.npmjs.com/package/@mulmobridge/line) — LINE Messaging API via MulmoBridge relay
+- [`@mulmobridge/line-works`](https://www.npmjs.com/package/@mulmobridge/line-works) — LINE Works (enterprise LINE)
+- [`@mulmobridge/mastodon`](https://www.npmjs.com/package/@mulmobridge/mastodon) — Mastodon DMs + mentions
+- [`@mulmobridge/matrix`](https://www.npmjs.com/package/@mulmobridge/matrix) — Matrix / Element
+- [`@mulmobridge/mattermost`](https://www.npmjs.com/package/@mulmobridge/mattermost) — Mattermost
+- [`@mulmobridge/messenger`](https://www.npmjs.com/package/@mulmobridge/messenger) — Facebook Messenger via MulmoBridge relay
+- [`@mulmobridge/nostr`](https://www.npmjs.com/package/@mulmobridge/nostr) — Nostr NIP-04 encrypted DMs
+- [`@mulmobridge/rocketchat`](https://www.npmjs.com/package/@mulmobridge/rocketchat) — Rocket.Chat
+- [`@mulmobridge/signal`](https://www.npmjs.com/package/@mulmobridge/signal) — Signal via signal-cli-rest-api
+- [`@mulmobridge/slack`](https://www.npmjs.com/package/@mulmobridge/slack) — Slack Socket Mode
+- [`@mulmobridge/teams`](https://www.npmjs.com/package/@mulmobridge/teams) — Microsoft Teams via Bot Framework
+- [`@mulmobridge/telegram`](https://www.npmjs.com/package/@mulmobridge/telegram) — Telegram bot  ← **this package**
+- [`@mulmobridge/twilio-sms`](https://www.npmjs.com/package/@mulmobridge/twilio-sms) — SMS via Twilio Programmable Messaging
+- [`@mulmobridge/viber`](https://www.npmjs.com/package/@mulmobridge/viber) — Viber Public Account bots
+- [`@mulmobridge/webhook`](https://www.npmjs.com/package/@mulmobridge/webhook) — generic HTTP webhook bridge
+- [`@mulmobridge/whatsapp`](https://www.npmjs.com/package/@mulmobridge/whatsapp) — WhatsApp Cloud API via MulmoBridge relay
+- [`@mulmobridge/xmpp`](https://www.npmjs.com/package/@mulmobridge/xmpp) — XMPP / Jabber
+- [`@mulmobridge/zulip`](https://www.npmjs.com/package/@mulmobridge/zulip) — Zulip
 
 ## License
 

package/dist/api.js

@@ -74,9 +74,7 @@ export function createTelegramApi(opts) {
             // authoritative). Fall back to extension-based inference only
             // when the caller passed the generic default.
             const ext = getFileBody.result.file_path.split(".").pop() ?? "";
-            const mediaType = fallbackMime !== "application/octet-stream"
-                ? fallbackMime
-                : mimeFromExtension(ext, fallbackMime);
+            const mediaType = fallbackMime !== "application/octet-stream" ? fallbackMime : mimeFromExtension(ext, fallbackMime);
             return buildDataUrl(mediaType, b64);
         },
     };

package/dist/index.js

@@ -71,9 +71,7 @@ function delay(ms) {
 async function main() {
     const { botToken, allowlist, pollTimeoutSec } = readEnv();
     console.log("MulmoClaude Telegram bridge");
-    console.log(`Allowlist: ${allowlist.size() > 0
-        ? allowlist.snapshot().join(", ")
-        : "(empty — all chats will be denied)"}`);
+    console.log(`Allowlist: ${allowlist.size() > 0 ? allowlist.snapshot().join(", ") : "(empty — all chats will be denied)"}`);
     const api = createTelegramApi({ botToken });
     const client = createBridgeClient({ transportId: TRANSPORT_ID });
     const router = createMessageRouter({
@@ -87,9 +85,7 @@ async function main() {
     });
     // Server → Telegram async push (Phase B of #268).
     client.onPush((ev) => {
-        router
-            .handlePush(ev)
-            .catch((err) => console.error(`[telegram] handlePush failed: ${String(err)}`));
+        router.handlePush(ev).catch((err) => console.error(`[telegram] handlePush failed: ${String(err)}`));
     });
     const abortController = new AbortController();
     process.on("SIGINT", () => {

package/dist/router.js

@@ -3,7 +3,7 @@
 // Telegram API, no real MulmoClaude socket, no env reads). The
 // entrypoint in index.ts is then just: read env → wire real deps →
 // drive the polling loop.
-import { parseDataUrl, } from "@mulmobridge/client";
+import { parseDataUrl } from "@mulmobridge/client";
 // Telegram caps a single message at 4096 chars. We split long
 // replies naively; pretty formatting (preserve markdown, break on
 // sentence boundaries) is a follow-up.
@@ -127,8 +127,7 @@ export function createMessageRouter(deps) {
     async function handleAllowed(msg) {
         const chatId = msg.chat.id;
         const text = msg.text ?? msg.caption ?? "";
-        const hasMedia = (Array.isArray(msg.photo) && msg.photo.length > 0) ||
-            msg.document !== undefined;
+        const hasMedia = (Array.isArray(msg.photo) && msg.photo.length > 0) || msg.document !== undefined;
         if (text.trim().length === 0 && !hasMedia)
             return;
         const mediaLabel = buildMediaLabel(msg);
@@ -137,9 +136,7 @@ export function createMessageRouter(deps) {
         // Attachment-only message where download failed: bail out instead
         // of sending a query without the actual file.
         if (failed && text.trim().length === 0) {
-            await api
-                .sendMessage(chatId, "Sorry, I could not download the attachment. Please try again.")
-                .catch(() => { });
+            await api.sendMessage(chatId, "Sorry, I could not download the attachment. Please try again.").catch(() => { });
             return;
         }
         // Surface the attachment failure so the user knows the file was lost.
@@ -156,9 +153,7 @@ export function createMessageRouter(deps) {
         // to catch any trailing chunks. If no streaming happened,
         // send the full reply as a new message.
         if (sentMsgId !== null && ack.ok) {
-            await api
-                .editMessageText(chatId, sentMsgId, ack.reply ?? "")
-                .catch(() => { });
+            await api.editMessageText(chatId, sentMsgId, ack.reply ?? "").catch(() => { });
         }
         else if (sentMsgId === null) {
             await sendReply(chatId, ack);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mulmobridge/telegram",
-  "version": "0.1.2",
+  "version": "1.0.0",
   "description": "Telegram bridge for MulmoBridge — connect a Telegram bot to MulmoClaude",
   "type": "module",
   "main": "./dist/index.js",
@@ -30,12 +30,12 @@
   "license": "MIT",
   "author": "Receptron Team",
   "dependencies": {
-    "@mulmobridge/client": "^0.1.0",
-    "@mulmobridge/protocol": "^0.1.0",
+    "@mulmobridge/client": "^1.0.0",
+    "@mulmobridge/protocol": "^1.0.0",
     "dotenv": "^17.0.0"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^26.1.1",
     "typescript": "^6.0.3"
   }
 }