@n1creator/openacp-cli 2026.712.10 → 2026.712.11

package/README.md

@@ -227,9 +227,11 @@ not globally intercepted. Credentials live in a separate mode-0600 secret store
 and never appear in route files, agent definitions, status responses, or
 structured OpenACP logs.
 
-Manage routes from any connector with `/proxy`, from the CLI with
-`openacp proxy`, or through `/api/v1/proxy`. Channel changes are tested before
-they are saved. See [Scoped Proxy Routing](docs/gitbook/features/proxy-routing.md).
+In Telegram, open **Settings → Proxy Management** or use `/proxy` directly.
+Both paths render the same connector-neutral proxy home; other adapters can use
+that `/proxy` command model too. CLI and REST automation remain available through
+`openacp proxy` and `/api/v1/proxy`. Channel changes are tested before they are
+saved. See [Scoped Proxy Routing](docs/gitbook/features/proxy-routing.md).
 
 ### Operations
 
@@ -312,7 +314,8 @@ The protected JSON file supports a Quick URL mode: use either separate
 mutually exclusive. A URL must include an explicit port; credentials are parsed
 and stored separately, and the original URL is never persisted or returned.
 
-The connector-neutral `/proxy` interface now provides admin-only add/edit,
+The connector-neutral `/proxy` interface requires `network:proxy:manage` before
+showing status, profiles, routes, diagnostics, or tests. It provides add/edit,
 candidate test-before-save, credential clearing, paginated route controls, and
 atomic delete-with-reassignment. Telegram deletes credential replies before use;
 if that guarantee is unavailable, OpenACP refuses the value and directs the

package/dist/cli.js

@@ -16676,6 +16676,37 @@ var init_resume = __esm({
   }
 });
 
+// src/plugins/telegram/callback-navigation.ts
+function contextualCommandCallback(command2, target) {
+  if (!command2.startsWith("/")) throw new Error("Telegram navigation commands must start with /");
+  const data = target === "settings" ? `${SETTINGS_PREFIX}${command2}` : void 0;
+  return data && Buffer.byteLength(data, "utf8") <= 64 ? data : void 0;
+}
+function settingsCommandCallback(command2) {
+  const data = contextualCommandCallback(command2, "settings");
+  if (!data) throw new Error("Telegram navigation callback exceeds 64 bytes");
+  return data;
+}
+function decodeCommandCallback(data) {
+  if (data.startsWith(SETTINGS_PREFIX)) {
+    return { command: data.slice(SETTINGS_PREFIX.length), returnTarget: "settings" };
+  }
+  return { command: data.slice(2) };
+}
+function returnButton(target) {
+  switch (target) {
+    case "settings":
+      return { text: "\u25C0\uFE0F Back to Settings", callback_data: "s:back:refresh" };
+  }
+}
+var SETTINGS_PREFIX;
+var init_callback_navigation = __esm({
+  "src/plugins/telegram/callback-navigation.ts"() {
+    "use strict";
+    SETTINGS_PREFIX = "c/@settings:";
+  }
+});
+
 // src/plugins/telegram/commands/menu.ts
 var menu_exports = {};
 __export(menu_exports, {
@@ -16788,6 +16819,7 @@ async function buildSettingsKeyboard(core) {
       kb.text(`${label}`, `s:input:${field.path}`).row();
     }
   }
+  kb.text("\u{1F310} Proxy Management", settingsCommandCallback("/proxy")).row();
   kb.text("\u25C0\uFE0F Back to Menu", "s:back");
   return kb;
 }
@@ -16980,6 +17012,7 @@ var init_settings = __esm({
     "use strict";
     init_config_registry();
     init_log();
+    init_callback_navigation();
     log21 = createChildLogger({ module: "telegram-settings" });
   }
 });
@@ -20790,6 +20823,9 @@ function stalePolicyResponse(reopen) {
     options: [{ label: "Refresh", command: reopen }, { label: "Proxy menu", command: "/proxy status" }]
   };
 }
+function proxyCapabilityError() {
+  return { type: "error", message: PROXY_CAPABILITY_ERROR };
+}
 function registerProxyCommand(registry, _core) {
   const core = _core;
   registry.register({
@@ -20821,8 +20857,9 @@ function registerProxyCommand(registry, _core) {
         "wizard-auth",
         "wizard-review"
       ]);
+      if (!await canManageProxy(core, args2)) return proxyCapabilityError();
       if (action && mutations.has(action) && !await canManageProxy(core, args2)) {
-        return { type: "error", message: "This action requires network:proxy:manage capability." };
+        return proxyCapabilityError();
       }
       if (!action || action === "status") {
         return {
@@ -21306,10 +21343,14 @@ Credentials: ${profile.hasCredentials ? "configured" : "none"} \xB7 failClosed:
 async function canManageProxy(core, args2) {
   const identity = core.lifecycleManager?.serviceRegistry?.get("identity");
   if (!identity) return false;
-  const user = await identity.getUserByIdentity(formatIdentityId(args2.channelId, args2.userId));
-  return Boolean(user && hasIdentityCapability(user.role, "network:proxy:manage"));
+  try {
+    const user = await identity.getUserByIdentity(formatIdentityId(args2.channelId, args2.userId));
+    return Boolean(user && hasIdentityCapability(user.role, "network:proxy:manage"));
+  } catch {
+    return false;
+  }
 }
-var DRAFT_TTL_MS, drafts;
+var DRAFT_TTL_MS, drafts, PROXY_CAPABILITY_ERROR;
 var init_proxy3 = __esm({
   "src/core/commands/proxy.ts"() {
     "use strict";
@@ -21319,6 +21360,7 @@ var init_proxy3 = __esm({
     init_proxy_service();
     DRAFT_TTL_MS = 10 * 6e4;
     drafts = /* @__PURE__ */ new Map();
+    PROXY_CAPABILITY_ERROR = "Proxy management requires network:proxy:manage capability.";
   }
 });
 
@@ -21519,6 +21561,7 @@ var init_adapter2 = __esm({
     init_command_sync();
     init_command_ownership_store();
     init_instance_context();
+    init_callback_navigation();
     log29 = createChildLogger({ module: "telegram" });
     HISTORICAL_OPENACP_COMMAND_NAMES = /* @__PURE__ */ new Set([
       ...STATIC_COMMANDS.map((command2) => command2.command),
@@ -21847,7 +21890,13 @@ var init_adapter2 = __esm({
               }
             });
             if (response.type !== "silent" && response.type !== "delegated") {
-              await this.renderCommandResponse(response, ctx.chat.id, topicIdForInput, String(ctx.from?.id));
+              await this.renderCommandResponse(
+                response,
+                ctx.chat.id,
+                topicIdForInput,
+                String(ctx.from?.id),
+                pending.returnTarget
+              );
             }
             return;
           }
@@ -21930,7 +21979,8 @@ var init_adapter2 = __esm({
             return;
           }
           const data = ctx.callbackQuery.data;
-          const command2 = this.fromCallbackData(data);
+          const callback = this.fromCallbackData(data);
+          const command2 = callback.command;
           const registry = this.core.lifecycleManager?.serviceRegistry?.get(
             "command-registry"
           );
@@ -21959,16 +22009,23 @@ var init_adapter2 = __esm({
             await ctx.answerCallbackQuery();
             if (response.type !== "silent" && response.type !== "delegated") {
               if (response.type === "input") {
-                await this.renderCommandResponse(response, chatId, topicId, String(ctx.from?.id));
+                await this.renderCommandResponse(
+                  response,
+                  chatId,
+                  topicId,
+                  String(ctx.from?.id),
+                  callback.returnTarget
+                );
                 return;
               }
               if (response.type === "menu") {
                 const keyboard = response.options.map((opt) => [
                   {
                     text: `${opt.label}${opt.hint ? ` \u2014 ${opt.hint}` : ""}`,
-                    callback_data: this.toCallbackData(opt.command)
+                    callback_data: this.toCallbackData(opt.command, callback.returnTarget)
                   }
                 ]);
+                this.appendReturnButton(keyboard, callback.returnTarget);
                 try {
                   await ctx.editMessageText(response.title, {
                     reply_markup: { inline_keyboard: keyboard }
@@ -21987,7 +22044,11 @@ var init_adapter2 = __esm({
                   parseMode = "Markdown";
                 }
                 try {
-                  await ctx.editMessageText(text5, { ...parseMode && { parse_mode: parseMode } });
+                  const returnMarkup = this.returnMarkup(callback.returnTarget);
+                  await ctx.editMessageText(text5, {
+                    ...parseMode && { parse_mode: parseMode },
+                    ...returnMarkup && { reply_markup: returnMarkup }
+                  });
                 } catch {
                 }
               }
@@ -22588,11 +22649,13 @@ System topics have been created. Tap${assistantTopicLink} to get started.`,
         log29.info("Telegram bot stopped");
       }
       // --- CommandRegistry response rendering ---
-      async renderCommandResponse(response, chatId, topicId, userId) {
+      async renderCommandResponse(response, chatId, topicId, userId, returnTarget) {
+        const returnMarkup = this.returnMarkup(returnTarget);
         switch (response.type) {
           case "text":
             await this.bot.api.sendMessage(chatId, response.text, {
-              message_thread_id: topicId
+              message_thread_id: topicId,
+              ...returnMarkup && { reply_markup: returnMarkup }
             });
             break;
           case "adaptive": {
@@ -22600,7 +22663,8 @@ System topics have been created. Tap${assistantTopicLink} to get started.`,
             const text5 = variant?.text ?? response.fallback;
             await this.bot.api.sendMessage(chatId, text5, {
               message_thread_id: topicId,
-              ...variant?.parse_mode && { parse_mode: variant.parse_mode }
+              ...variant?.parse_mode && { parse_mode: variant.parse_mode },
+              ...returnMarkup && { reply_markup: returnMarkup }
             });
             break;
           }
@@ -22608,16 +22672,17 @@ System topics have been created. Tap${assistantTopicLink} to get started.`,
             await this.bot.api.sendMessage(
               chatId,
               `\u26A0\uFE0F ${response.message}`,
-              { message_thread_id: topicId }
+              { message_thread_id: topicId, ...returnMarkup && { reply_markup: returnMarkup } }
             );
             break;
           case "menu": {
             const keyboard = response.options.map((opt) => [
               {
                 text: `${opt.label}${opt.hint ? ` \u2014 ${opt.hint}` : ""}`,
-                callback_data: this.toCallbackData(opt.command)
+                callback_data: this.toCallbackData(opt.command, returnTarget)
               }
             ]);
+            this.appendReturnButton(keyboard, returnTarget);
             await this.bot.api.sendMessage(chatId, response.title, {
               message_thread_id: topicId,
               reply_markup: { inline_keyboard: keyboard }
@@ -22631,7 +22696,8 @@ System topics have been created. Tap${assistantTopicLink} to get started.`,
             const text5 = `${response.title}
 ${lines.join("\n")}`;
             await this.bot.api.sendMessage(chatId, text5, {
-              message_thread_id: topicId
+              message_thread_id: topicId,
+              ...returnMarkup && { reply_markup: returnMarkup }
             });
             break;
           }
@@ -22640,16 +22706,17 @@ ${lines.join("\n")}`;
               [
                 {
                   text: "\u2705 Yes",
-                  callback_data: this.toCallbackData(response.onYes)
+                  callback_data: this.toCallbackData(response.onYes, returnTarget)
                 }
               ]
             ];
             if (response.onNo) {
               buttons[0].push({
                 text: "\u274C No",
-                callback_data: this.toCallbackData(response.onNo)
+                callback_data: this.toCallbackData(response.onNo, returnTarget)
               });
             }
+            this.appendReturnButton(buttons, returnTarget);
             await this.bot.api.sendMessage(chatId, response.question, {
               message_thread_id: topicId,
               reply_markup: { inline_keyboard: buttons }
@@ -22658,7 +22725,10 @@ ${lines.join("\n")}`;
           }
           case "input": {
             if (!userId) {
-              await this.bot.api.sendMessage(chatId, response.fallback, { message_thread_id: topicId });
+              await this.bot.api.sendMessage(chatId, response.fallback, {
+                message_thread_id: topicId,
+                ...returnMarkup && { reply_markup: returnMarkup }
+              });
               break;
             }
             const key = `${chatId}:${userId}:${topicId ?? 0}`;
@@ -22680,7 +22750,8 @@ ${lines.join("\n")}`;
               sensitive: response.sensitive === true,
               fallback: response.fallback,
               expiresAt: Date.now() + (response.expiresInMs ?? 10 * 6e4),
-              promptMessageId: promptMessage.message_id
+              promptMessageId: promptMessage.message_id,
+              returnTarget
             });
             break;
           }
@@ -22688,11 +22759,15 @@ ${lines.join("\n")}`;
             break;
         }
       }
-      toCallbackData(command2) {
+      toCallbackData(command2, returnTarget) {
         const data = `c/${command2}`;
-        if (data.length <= 64) return data;
+        if (!returnTarget && Buffer.byteLength(data, "utf8") <= 64) return data;
+        if (returnTarget) {
+          const contextual = contextualCommandCallback(command2, returnTarget);
+          if (contextual) return contextual;
+        }
         const id = String(++this.callbackCounter);
-        this.callbackCache.set(id, command2);
+        this.callbackCache.set(id, { command: command2, returnTarget });
         if (this.callbackCache.size > 1e3) {
           const first = this.callbackCache.keys().next().value;
           if (first) this.callbackCache.delete(first);
@@ -22701,9 +22776,15 @@ ${lines.join("\n")}`;
       }
       fromCallbackData(data) {
         if (data.startsWith("c/#")) {
-          return this.callbackCache.get(data.slice(3)) ?? data.slice(2);
+          return this.callbackCache.get(data.slice(3)) ?? { command: data.slice(2) };
         }
-        return data.slice(2);
+        return decodeCommandCallback(data);
+      }
+      returnMarkup(returnTarget) {
+        return returnTarget ? { inline_keyboard: [[returnButton(returnTarget)]] } : void 0;
+      }
+      appendReturnButton(keyboard, returnTarget) {
+        if (returnTarget) keyboard.push([returnButton(returnTarget)]);
       }
       setupRoutes() {
         this.bot.on("message:text", async (ctx) => {
@@ -31405,7 +31486,9 @@ function registerCoreMenuItems(registry) {
     label: "\u{1F310} Proxy Routing",
     priority: 32,
     group: "config",
-    action: { type: "command", command: "/proxy" }
+    action: { type: "command", command: "/proxy" },
+    // Keep already-sent m:core:proxy buttons valid while nesting new entry points under Settings.
+    visible: () => false
   });
   registry.register({
     id: "core:restart",