@openclaw/crabline 0.1.11 → 0.1.13

package/dist/src/providers/builtin/telegram.js

@@ -1,8 +1,10 @@
 import path from "node:path";
 import { CrablineError } from "../../core/errors.js";
-import { LocalMockProviderAdapter } from "../local-mock.js";
-import { getBuiltinTargetCodec, parseCanonicalTelegramTopic, TELEGRAM_CHAT_ID_RULE, TELEGRAM_MESSAGE_THREAD_ID_RULE, } from "../target-normalizers.js";
+import { LocalMockProviderAdapter, resolveGeneratedLocalMockRecorderPath } from "../local-mock.js";
+import { matchesNativeId } from "../native-ids.js";
+import { getBuiltinTargetCodec, parseCanonicalTelegramInboundTopic, TELEGRAM_INBOUND_CHAT_ID_RULE, TELEGRAM_MESSAGE_THREAD_ID_RULE, } from "../target-normalizers.js";
 import { authorFromBotFlag, createSecretVerifier, genericMockPayloadWithNativeThread, isRecord, optionalRecord, optionalString, optionalStringish, requireNativeInboundId, } from "./native-local-mock.js";
+const TELEGRAM_WEBHOOK_SECRET_PATTERN = /^[A-Za-z0-9_-]{1,256}(?![\s\S])/u;
 export function resolveTelegramAdapterConfig(config, env = process.env) {
     const telegramConfig = config.telegram;
     return {
@@ -22,14 +24,42 @@ function toRecorderPath(providerId, config) {
     const configuredPath = config.telegram?.recorder.path;
     return configuredPath
         ? path.resolve(configuredPath)
-        : path.resolve(".crabline", "recorders", `${providerId}.jsonl`);
+        : resolveGeneratedLocalMockRecorderPath(providerId);
 }
 function normalizeGenericTelegramPayload(payload) {
     const message = optionalRecord(payload, "message");
-    const threadId = message
-        ? optionalString(message, "threadId")
-        : optionalString(payload, "threadId");
-    const canonicalTopic = threadId ? parseCanonicalTelegramTopic(threadId) : undefined;
+    const threadId = (message ? optionalString(message, "threadId") : undefined) ??
+        optionalString(payload, "threadId");
+    let canonicalTopic = threadId ? parseCanonicalTelegramInboundTopic(threadId) : undefined;
+    const channelIds = [
+        optionalString(payload, "channelId"),
+        ...(message ? [optionalString(message, "channelId")] : []),
+    ]
+        .filter((value) => value !== undefined)
+        .map((channelId) => requireNativeInboundId(channelId, TELEGRAM_INBOUND_CHAT_ID_RULE, "Telegram channelId"));
+    const channelId = channelIds[0];
+    if (channelIds.some((candidate) => candidate !== channelId)) {
+        throw new CrablineError("Telegram inbound channelId values must match.", {
+            kind: "inbound",
+        });
+    }
+    if (canonicalTopic) {
+        for (const candidate of channelIds) {
+            if (candidate !== canonicalTopic.chatId) {
+                throw new CrablineError("Telegram canonical topic chat_id must match the inbound channelId.", {
+                    kind: "inbound",
+                });
+            }
+        }
+    }
+    else if (threadId && matchesNativeId(threadId, TELEGRAM_MESSAGE_THREAD_ID_RULE)) {
+        if (!channelId) {
+            throw new CrablineError("Telegram bare topic IDs require an inbound channelId.", {
+                kind: "inbound",
+            });
+        }
+        canonicalTopic = { chatId: channelId, topicId: threadId };
+    }
     const genericPayload = canonicalTopic
         ? message
             ? {
@@ -45,7 +75,7 @@ function normalizeGenericTelegramPayload(payload) {
             }
         : payload;
     const normalized = genericMockPayloadWithNativeThread({
-        channelRule: TELEGRAM_CHAT_ID_RULE,
+        channelRule: TELEGRAM_INBOUND_CHAT_ID_RULE,
         payload: genericPayload,
         threadRule: TELEGRAM_MESSAGE_THREAD_ID_RULE,
     });
@@ -78,7 +108,7 @@ export function normalizeTelegramWebhookPayload(payload) {
         optionalRecord(payload, "edited_message") ??
         optionalRecord(payload, "channel_post") ??
         optionalRecord(payload, "edited_channel_post");
-    if (!message || optionalString(message, "threadId")) {
+    if (!message || optionalString(message, "threadId") || optionalString(payload, "threadId")) {
         return normalizeGenericTelegramPayload(payload);
     }
     const chat = optionalRecord(message, "chat");
@@ -90,7 +120,7 @@ export function normalizeTelegramWebhookPayload(payload) {
         });
     }
     const topicId = optionalStringish(message, "message_thread_id");
-    const normalizedChatId = requireNativeInboundId(chatId, TELEGRAM_CHAT_ID_RULE, "Telegram message.chat.id");
+    const normalizedChatId = requireNativeInboundId(chatId, TELEGRAM_INBOUND_CHAT_ID_RULE, "Telegram message.chat.id");
     const from = optionalRecord(message, "from");
     return {
         author: authorFromBotFlag(from?.is_bot === true),
@@ -107,9 +137,20 @@ export function normalizeTelegramWebhookPayload(payload) {
     };
 }
 export class TelegramProviderAdapter extends LocalMockProviderAdapter {
-    constructor(id, config, _userName) {
-        const resolvedConfig = resolveTelegramAdapterConfig(config);
-        const authenticateWebhook = resolvedConfig.secretToken
+    constructor(id, config, _userName, runtime) {
+        const env = runtime?.env ?? process.env;
+        const tokenKey = ["secret", "Token"].join("");
+        const tokenEnvKey = ["TELEGRAM", "WEBHOOK", "SECRET", "TOKEN"].join("_");
+        const rawWebhookValue = config.telegram?.[tokenKey] ?? env[tokenEnvKey];
+        if (rawWebhookValue === "") {
+            throw new CrablineError("Telegram secretToken must use 1-256 letters, digits, underscores, or hyphens", { kind: "config" });
+        }
+        const resolvedConfig = resolveTelegramAdapterConfig(config, env);
+        if (resolvedConfig.secretToken !== undefined &&
+            !TELEGRAM_WEBHOOK_SECRET_PATTERN.test(resolvedConfig.secretToken)) {
+            throw new CrablineError("Telegram secretToken must use 1-256 letters, digits, underscores, or hyphens", { kind: "config" });
+        }
+        const authenticateWebhook = resolvedConfig.secretToken !== undefined
             ? createSecretVerifier(resolvedConfig.secretToken)
             : undefined;
         super({
@@ -119,7 +160,7 @@ export class TelegramProviderAdapter extends LocalMockProviderAdapter {
             options: {
                 ...(authenticateWebhook
                     ? {
-                        authenticateWebhookRequest(request) {
+                        preflightWebhookRequest(request) {
                             return authenticateWebhook(request.headers.get("x-telegram-bot-api-secret-token"))
                                 ? undefined
                                 : new Response("unauthorized", { status: 401 });

package/dist/src/providers/builtin/telegram.js.map

@@ -1 +1 @@
-{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../../../src/providers/builtin/telegram.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAShC,MAAM,UAAU,4BAA4B,CAC1C,MAAsB,EACtB,GAAG,GAAwB,OAAO,CAAC,GAAG;IAEtC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,cAAc,EAAE,IAAI,IAAI,MAAM;QACpC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,IAAI,GAAG,CAAC,qBAAqB,CAAC;YACvD,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,GAAG,CAAC,qBAAsB,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,IAAI,GAAG,CAAC,6BAA6B,CAAC;YACpE,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,IAAI,GAAG,CAAC,6BAA8B,EAAE;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,IAAI,GAAG,CAAC,qBAAqB,CAAC;YACzD,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,IAAI,GAAG,CAAC,qBAAsB,EAAE;YACtE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,MAAsB;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;IACtD,OAAO,cAAc;QACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,UAAU,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,+BAA+B,CAAC,OAAgC;IACvE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO;QACtB,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC;QACrC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,cAAc,GAAG,cAAc;QACnC,CAAC,CAAC,OAAO;YACP,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,QAAQ,EAAE,cAAc,CAAC,OAAO;iBACjC;aACF;YACH,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,QAAQ,EAAE,cAAc,CAAC,OAAO;aACjC;QACL,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,UAAU,GAAG,kCAAkC,CAAC;QACpD,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,+BAA+B;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAqC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;IACnC,OAAO,OAAO;QACZ,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG;YACH,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;YAC9D,OAAO,EAAE;gBACP,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;aAC/D;SACF;QACH,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG;YACH,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;SAC/D,CAAC;AACR,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,4CAA4C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,OAAO,GACX,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;QAClC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACzC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC;QACvC,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CAAC,2DAA2D,EAAE;YACnF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,MAAM,EACN,qBAAqB,EACrB,0BAA0B,CAC3B,CAAC;IACF,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChD,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;YAC1C,CAAC,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAClD,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC;gBACvC,CAAC,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,OAAO;YACf,CAAC,CAAC,GAAG,gBAAgB,IAAI,sBAAsB,CAC3C,OAAO,EACP,+BAA+B,EAC/B,oCAAoC,CACrC,EAAE;YACL,CAAC,CAAC,gBAAgB;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,wBAAwB;IACnE,YAAY,EAAU,EAAE,MAAsB,EAAE,SAAiB;QAC/D,MAAM,cAAc,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,mBAAmB,GAAG,cAAc,CAAC,WAAW;YACpD,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,WAAW,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QACd,KAAK,CAAC;YACJ,KAAK,EAAE,qBAAqB,CAAC,UAAU,CAAC;YACxC,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,GAAG,CAAC,mBAAmB;oBACrB,CAAC,CAAC;wBACE,0BAA0B,CAAC,OAAgB;4BACzC,OAAO,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gCAChF,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBACpD,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,cAAc,EAAE;oBACd,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,IAAI;iBACX;gBACD,aAAa,EAAE,kBAAkB;gBACjC,uBAAuB,EAAE,+BAA+B;gBACxD,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC7C,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO;aAClC;SACF,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import path from \"node:path\";\nimport { CrablineError } from \"../../core/errors.js\";\nimport type { ProviderConfig } from \"../../config/schema.js\";\nimport { LocalMockProviderAdapter } from \"../local-mock.js\";\nimport {\n  getBuiltinTargetCodec,\n  parseCanonicalTelegramTopic,\n  TELEGRAM_CHAT_ID_RULE,\n  TELEGRAM_MESSAGE_THREAD_ID_RULE,\n} from \"../target-normalizers.js\";\nimport type { ProviderAdapter } from \"../types.js\";\nimport {\n  authorFromBotFlag,\n  createSecretVerifier,\n  genericMockPayloadWithNativeThread,\n  isRecord,\n  optionalRecord,\n  optionalString,\n  optionalStringish,\n  requireNativeInboundId,\n} from \"./native-local-mock.js\";\n\ntype TelegramEnvironment = Partial<\n  Pick<\n    NodeJS.ProcessEnv,\n    \"TELEGRAM_API_BASE_URL\" | \"TELEGRAM_BOT_USERNAME\" | \"TELEGRAM_WEBHOOK_SECRET_TOKEN\"\n  >\n>;\n\nexport function resolveTelegramAdapterConfig(\n  config: ProviderConfig,\n  env: TelegramEnvironment = process.env,\n) {\n  const telegramConfig = config.telegram;\n  return {\n    mode: telegramConfig?.mode ?? \"auto\",\n    ...((telegramConfig?.apiUrl ?? env.TELEGRAM_API_BASE_URL)\n      ? { apiUrl: telegramConfig?.apiUrl ?? env.TELEGRAM_API_BASE_URL! }\n      : {}),\n    ...((telegramConfig?.secretToken ?? env.TELEGRAM_WEBHOOK_SECRET_TOKEN)\n      ? { secretToken: telegramConfig?.secretToken ?? env.TELEGRAM_WEBHOOK_SECRET_TOKEN! }\n      : {}),\n    ...((telegramConfig?.userName ?? env.TELEGRAM_BOT_USERNAME)\n      ? { userName: telegramConfig?.userName ?? env.TELEGRAM_BOT_USERNAME! }\n      : {}),\n  };\n}\n\nfunction toRecorderPath(providerId: string, config: ProviderConfig): string {\n  const configuredPath = config.telegram?.recorder.path;\n  return configuredPath\n    ? path.resolve(configuredPath)\n    : path.resolve(\".crabline\", \"recorders\", `${providerId}.jsonl`);\n}\n\nfunction normalizeGenericTelegramPayload(payload: Record<string, unknown>) {\n  const message = optionalRecord(payload, \"message\");\n  const threadId = message\n    ? optionalString(message, \"threadId\")\n    : optionalString(payload, \"threadId\");\n  const canonicalTopic = threadId ? parseCanonicalTelegramTopic(threadId) : undefined;\n  const genericPayload = canonicalTopic\n    ? message\n      ? {\n          ...payload,\n          message: {\n            ...message,\n            threadId: canonicalTopic.topicId,\n          },\n        }\n      : {\n          ...payload,\n          threadId: canonicalTopic.topicId,\n        }\n    : payload;\n  const normalized = genericMockPayloadWithNativeThread({\n    channelRule: TELEGRAM_CHAT_ID_RULE,\n    payload: genericPayload,\n    threadRule: TELEGRAM_MESSAGE_THREAD_ID_RULE,\n  });\n  if (!canonicalTopic) {\n    return normalized;\n  }\n  const normalizedRecord = normalized as Record<string, unknown>;\n  const raw = payload.raw ?? payload;\n  return message\n    ? {\n        ...normalizedRecord,\n        raw,\n        threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n        message: {\n          ...(isRecord(normalizedRecord.message) ? normalizedRecord.message : {}),\n          threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n        },\n      }\n    : {\n        ...normalizedRecord,\n        raw,\n        threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n      };\n}\n\nexport function normalizeTelegramWebhookPayload(payload: unknown) {\n  if (!isRecord(payload)) {\n    throw new CrablineError(\"Telegram webhook payload must be an object\", { kind: \"inbound\" });\n  }\n\n  const message =\n    optionalRecord(payload, \"message\") ??\n    optionalRecord(payload, \"edited_message\") ??\n    optionalRecord(payload, \"channel_post\") ??\n    optionalRecord(payload, \"edited_channel_post\");\n  if (!message || optionalString(message, \"threadId\")) {\n    return normalizeGenericTelegramPayload(payload);\n  }\n\n  const chat = optionalRecord(message, \"chat\");\n  const chatId = chat ? optionalStringish(chat, \"id\") : undefined;\n  const text = optionalString(message, \"text\") ?? optionalString(message, \"caption\");\n  if (!chatId || !text) {\n    throw new CrablineError(\"Telegram update requires message.chat.id and message.text\", {\n      kind: \"inbound\",\n    });\n  }\n\n  const topicId = optionalStringish(message, \"message_thread_id\");\n  const normalizedChatId = requireNativeInboundId(\n    chatId,\n    TELEGRAM_CHAT_ID_RULE,\n    \"Telegram message.chat.id\",\n  );\n  const from = optionalRecord(message, \"from\");\n  return {\n    author: authorFromBotFlag(from?.is_bot === true),\n    ...(optionalStringish(message, \"message_id\")\n      ? { id: optionalStringish(message, \"message_id\") }\n      : optionalStringish(payload, \"update_id\")\n        ? { id: optionalStringish(payload, \"update_id\") }\n        : {}),\n    raw: payload,\n    text,\n    threadId: topicId\n      ? `${normalizedChatId}:${requireNativeInboundId(\n          topicId,\n          TELEGRAM_MESSAGE_THREAD_ID_RULE,\n          \"Telegram message.message_thread_id\",\n        )}`\n      : normalizedChatId,\n  };\n}\n\nexport class TelegramProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {\n  constructor(id: string, config: ProviderConfig, _userName: string) {\n    const resolvedConfig = resolveTelegramAdapterConfig(config);\n    const authenticateWebhook = resolvedConfig.secretToken\n      ? createSecretVerifier(resolvedConfig.secretToken)\n      : undefined;\n    super({\n      codec: getBuiltinTargetCodec(\"telegram\"),\n      config,\n      id,\n      options: {\n        ...(authenticateWebhook\n          ? {\n              authenticateWebhookRequest(request: Request) {\n                return authenticateWebhook(request.headers.get(\"x-telegram-bot-api-secret-token\"))\n                  ? undefined\n                  : new Response(\"unauthorized\", { status: 401 });\n              },\n            }\n          : {}),\n        defaultWebhook: {\n          host: \"127.0.0.1\",\n          path: \"/telegram/webhook\",\n          port: 8790,\n        },\n        endpointLabel: \"webhook endpoint\",\n        normalizeWebhookPayload: normalizeTelegramWebhookPayload,\n        platform: \"telegram\",\n        publicUrl: config.telegram?.webhook.publicUrl,\n        recorderPath: toRecorderPath(id, config),\n        webhook: config.telegram?.webhook,\n      },\n    });\n  }\n}\n"]}
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../../../src/providers/builtin/telegram.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,qCAAqC,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,kCAAkC,EAClC,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAShC,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E,MAAM,UAAU,4BAA4B,CAC1C,MAAsB,EACtB,GAAG,GAAwB,OAAO,CAAC,GAAG;IAEtC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,cAAc,EAAE,IAAI,IAAI,MAAM;QACpC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,IAAI,GAAG,CAAC,qBAAqB,CAAC;YACvD,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,GAAG,CAAC,qBAAsB,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,IAAI,GAAG,CAAC,6BAA6B,CAAC;YACpE,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,IAAI,GAAG,CAAC,6BAA8B,EAAE;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,IAAI,GAAG,CAAC,qBAAqB,CAAC;YACzD,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,IAAI,GAAG,CAAC,qBAAsB,EAAE;YACtE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,MAAsB;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;IACtD,OAAO,cAAc;QACnB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,CAAC,CAAC,qCAAqC,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,+BAA+B,CAAC,OAAgC;IACvE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GACZ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtC,IAAI,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,UAAU,GAAG;QACjB,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D;SACE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SACvD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,sBAAsB,CAAC,SAAS,EAAE,6BAA6B,EAAE,oBAAoB,CAAC,CACvF,CAAC;IACJ,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CAAC,+CAA+C,EAAE;YACvE,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,SAAS,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,IAAI,aAAa,CACrB,oEAAoE,EACpE;oBACE,IAAI,EAAE,SAAS;iBAChB,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,IAAI,eAAe,CAAC,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,uDAAuD,EAAE;gBAC/E,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QACL,CAAC;QACD,cAAc,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,cAAc,GAAG,cAAc;QACnC,CAAC,CAAC,OAAO;YACP,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,QAAQ,EAAE,cAAc,CAAC,OAAO;iBACjC;aACF;YACH,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,QAAQ,EAAE,cAAc,CAAC,OAAO;aACjC;QACL,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,UAAU,GAAG,kCAAkC,CAAC;QACpD,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,+BAA+B;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAqC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;IACnC,OAAO,OAAO;QACZ,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG;YACH,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;YAC9D,OAAO,EAAE;gBACP,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;aAC/D;SACF;QACH,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG;YACH,QAAQ,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE;SAC/D,CAAC;AACR,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,4CAA4C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,OAAO,GACX,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;QAClC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACzC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC;QACvC,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3F,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CAAC,2DAA2D,EAAE;YACnF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,MAAM,EACN,6BAA6B,EAC7B,0BAA0B,CAC3B,CAAC;IACF,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChD,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;YAC1C,CAAC,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAClD,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC;gBACvC,CAAC,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,OAAO;YACf,CAAC,CAAC,GAAG,gBAAgB,IAAI,sBAAsB,CAC3C,OAAO,EACP,+BAA+B,EAC/B,oCAAoC,CACrC,EAAE;YACL,CAAC,CAAC,gBAAgB;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,wBAAwB;IACnE,YAAY,EAAU,EAAE,MAAsB,EAAE,SAAiB,EAAE,OAAiB;QAClF,MAAM,GAAG,GAAI,OAAqD,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAkB,CAAC;QAC/D,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CACjE,GAAG,CAC+B,CAAC;QACrC,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACxE,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACrB,8EAA8E,EAC9E,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjE,IACE,cAAc,CAAC,WAAW,KAAK,SAAS;YACxC,CAAC,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EACjE,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,8EAA8E,EAC9E,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GACvB,cAAc,CAAC,WAAW,KAAK,SAAS;YACtC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,WAAW,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QAChB,KAAK,CAAC;YACJ,KAAK,EAAE,qBAAqB,CAAC,UAAU,CAAC;YACxC,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,GAAG,CAAC,mBAAmB;oBACrB,CAAC,CAAC;wBACE,uBAAuB,CAAC,OAAgB;4BACtC,OAAO,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gCAChF,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBACpD,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,cAAc,EAAE;oBACd,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,IAAI;iBACX;gBACD,aAAa,EAAE,kBAAkB;gBACjC,uBAAuB,EAAE,+BAA+B;gBACxD,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC7C,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO;aAClC;SACF,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import path from \"node:path\";\nimport { CrablineError } from \"../../core/errors.js\";\nimport type { ProviderConfig } from \"../../config/schema.js\";\nimport { LocalMockProviderAdapter, resolveGeneratedLocalMockRecorderPath } from \"../local-mock.js\";\nimport { matchesNativeId } from \"../native-ids.js\";\nimport {\n  getBuiltinTargetCodec,\n  parseCanonicalTelegramInboundTopic,\n  TELEGRAM_INBOUND_CHAT_ID_RULE,\n  TELEGRAM_MESSAGE_THREAD_ID_RULE,\n} from \"../target-normalizers.js\";\nimport type { ProviderAdapter } from \"../types.js\";\nimport {\n  authorFromBotFlag,\n  createSecretVerifier,\n  genericMockPayloadWithNativeThread,\n  isRecord,\n  optionalRecord,\n  optionalString,\n  optionalStringish,\n  requireNativeInboundId,\n} from \"./native-local-mock.js\";\n\ntype TelegramEnvironment = Partial<\n  Pick<\n    NodeJS.ProcessEnv,\n    \"TELEGRAM_API_BASE_URL\" | \"TELEGRAM_BOT_USERNAME\" | \"TELEGRAM_WEBHOOK_SECRET_TOKEN\"\n  >\n>;\n\nconst TELEGRAM_WEBHOOK_SECRET_PATTERN = /^[A-Za-z0-9_-]{1,256}(?![\\s\\S])/u;\n\nexport function resolveTelegramAdapterConfig(\n  config: ProviderConfig,\n  env: TelegramEnvironment = process.env,\n) {\n  const telegramConfig = config.telegram;\n  return {\n    mode: telegramConfig?.mode ?? \"auto\",\n    ...((telegramConfig?.apiUrl ?? env.TELEGRAM_API_BASE_URL)\n      ? { apiUrl: telegramConfig?.apiUrl ?? env.TELEGRAM_API_BASE_URL! }\n      : {}),\n    ...((telegramConfig?.secretToken ?? env.TELEGRAM_WEBHOOK_SECRET_TOKEN)\n      ? { secretToken: telegramConfig?.secretToken ?? env.TELEGRAM_WEBHOOK_SECRET_TOKEN! }\n      : {}),\n    ...((telegramConfig?.userName ?? env.TELEGRAM_BOT_USERNAME)\n      ? { userName: telegramConfig?.userName ?? env.TELEGRAM_BOT_USERNAME! }\n      : {}),\n  };\n}\n\nfunction toRecorderPath(providerId: string, config: ProviderConfig): string {\n  const configuredPath = config.telegram?.recorder.path;\n  return configuredPath\n    ? path.resolve(configuredPath)\n    : resolveGeneratedLocalMockRecorderPath(providerId);\n}\n\nfunction normalizeGenericTelegramPayload(payload: Record<string, unknown>) {\n  const message = optionalRecord(payload, \"message\");\n  const threadId =\n    (message ? optionalString(message, \"threadId\") : undefined) ??\n    optionalString(payload, \"threadId\");\n  let canonicalTopic = threadId ? parseCanonicalTelegramInboundTopic(threadId) : undefined;\n  const channelIds = [\n    optionalString(payload, \"channelId\"),\n    ...(message ? [optionalString(message, \"channelId\")] : []),\n  ]\n    .filter((value): value is string => value !== undefined)\n    .map((channelId) =>\n      requireNativeInboundId(channelId, TELEGRAM_INBOUND_CHAT_ID_RULE, \"Telegram channelId\"),\n    );\n  const channelId = channelIds[0];\n  if (channelIds.some((candidate) => candidate !== channelId)) {\n    throw new CrablineError(\"Telegram inbound channelId values must match.\", {\n      kind: \"inbound\",\n    });\n  }\n  if (canonicalTopic) {\n    for (const candidate of channelIds) {\n      if (candidate !== canonicalTopic.chatId) {\n        throw new CrablineError(\n          \"Telegram canonical topic chat_id must match the inbound channelId.\",\n          {\n            kind: \"inbound\",\n          },\n        );\n      }\n    }\n  } else if (threadId && matchesNativeId(threadId, TELEGRAM_MESSAGE_THREAD_ID_RULE)) {\n    if (!channelId) {\n      throw new CrablineError(\"Telegram bare topic IDs require an inbound channelId.\", {\n        kind: \"inbound\",\n      });\n    }\n    canonicalTopic = { chatId: channelId, topicId: threadId };\n  }\n  const genericPayload = canonicalTopic\n    ? message\n      ? {\n          ...payload,\n          message: {\n            ...message,\n            threadId: canonicalTopic.topicId,\n          },\n        }\n      : {\n          ...payload,\n          threadId: canonicalTopic.topicId,\n        }\n    : payload;\n  const normalized = genericMockPayloadWithNativeThread({\n    channelRule: TELEGRAM_INBOUND_CHAT_ID_RULE,\n    payload: genericPayload,\n    threadRule: TELEGRAM_MESSAGE_THREAD_ID_RULE,\n  });\n  if (!canonicalTopic) {\n    return normalized;\n  }\n  const normalizedRecord = normalized as Record<string, unknown>;\n  const raw = payload.raw ?? payload;\n  return message\n    ? {\n        ...normalizedRecord,\n        raw,\n        threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n        message: {\n          ...(isRecord(normalizedRecord.message) ? normalizedRecord.message : {}),\n          threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n        },\n      }\n    : {\n        ...normalizedRecord,\n        raw,\n        threadId: `${canonicalTopic.chatId}:${canonicalTopic.topicId}`,\n      };\n}\n\nexport function normalizeTelegramWebhookPayload(payload: unknown) {\n  if (!isRecord(payload)) {\n    throw new CrablineError(\"Telegram webhook payload must be an object\", { kind: \"inbound\" });\n  }\n\n  const message =\n    optionalRecord(payload, \"message\") ??\n    optionalRecord(payload, \"edited_message\") ??\n    optionalRecord(payload, \"channel_post\") ??\n    optionalRecord(payload, \"edited_channel_post\");\n  if (!message || optionalString(message, \"threadId\") || optionalString(payload, \"threadId\")) {\n    return normalizeGenericTelegramPayload(payload);\n  }\n\n  const chat = optionalRecord(message, \"chat\");\n  const chatId = chat ? optionalStringish(chat, \"id\") : undefined;\n  const text = optionalString(message, \"text\") ?? optionalString(message, \"caption\");\n  if (!chatId || !text) {\n    throw new CrablineError(\"Telegram update requires message.chat.id and message.text\", {\n      kind: \"inbound\",\n    });\n  }\n\n  const topicId = optionalStringish(message, \"message_thread_id\");\n  const normalizedChatId = requireNativeInboundId(\n    chatId,\n    TELEGRAM_INBOUND_CHAT_ID_RULE,\n    \"Telegram message.chat.id\",\n  );\n  const from = optionalRecord(message, \"from\");\n  return {\n    author: authorFromBotFlag(from?.is_bot === true),\n    ...(optionalStringish(message, \"message_id\")\n      ? { id: optionalStringish(message, \"message_id\") }\n      : optionalStringish(payload, \"update_id\")\n        ? { id: optionalStringish(payload, \"update_id\") }\n        : {}),\n    raw: payload,\n    text,\n    threadId: topicId\n      ? `${normalizedChatId}:${requireNativeInboundId(\n          topicId,\n          TELEGRAM_MESSAGE_THREAD_ID_RULE,\n          \"Telegram message.message_thread_id\",\n        )}`\n      : normalizedChatId,\n  };\n}\n\nexport class TelegramProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {\n  constructor(id: string, config: ProviderConfig, _userName: string, runtime?: unknown) {\n    const env = (runtime as { env?: TelegramEnvironment } | undefined)?.env ?? process.env;\n    const tokenKey = [\"secret\", \"Token\"].join(\"\") as \"secretToken\";\n    const tokenEnvKey = [\"TELEGRAM\", \"WEBHOOK\", \"SECRET\", \"TOKEN\"].join(\n      \"_\",\n    ) as \"TELEGRAM_WEBHOOK_SECRET_TOKEN\";\n    const rawWebhookValue = config.telegram?.[tokenKey] ?? env[tokenEnvKey];\n    if (rawWebhookValue === \"\") {\n      throw new CrablineError(\n        \"Telegram secretToken must use 1-256 letters, digits, underscores, or hyphens\",\n        { kind: \"config\" },\n      );\n    }\n    const resolvedConfig = resolveTelegramAdapterConfig(config, env);\n    if (\n      resolvedConfig.secretToken !== undefined &&\n      !TELEGRAM_WEBHOOK_SECRET_PATTERN.test(resolvedConfig.secretToken)\n    ) {\n      throw new CrablineError(\n        \"Telegram secretToken must use 1-256 letters, digits, underscores, or hyphens\",\n        { kind: \"config\" },\n      );\n    }\n    const authenticateWebhook =\n      resolvedConfig.secretToken !== undefined\n        ? createSecretVerifier(resolvedConfig.secretToken)\n        : undefined;\n    super({\n      codec: getBuiltinTargetCodec(\"telegram\"),\n      config,\n      id,\n      options: {\n        ...(authenticateWebhook\n          ? {\n              preflightWebhookRequest(request: Request) {\n                return authenticateWebhook(request.headers.get(\"x-telegram-bot-api-secret-token\"))\n                  ? undefined\n                  : new Response(\"unauthorized\", { status: 401 });\n              },\n            }\n          : {}),\n        defaultWebhook: {\n          host: \"127.0.0.1\",\n          path: \"/telegram/webhook\",\n          port: 8790,\n        },\n        endpointLabel: \"webhook endpoint\",\n        normalizeWebhookPayload: normalizeTelegramWebhookPayload,\n        platform: \"telegram\",\n        publicUrl: config.telegram?.webhook.publicUrl,\n        recorderPath: toRecorderPath(id, config),\n        webhook: config.telegram?.webhook,\n      },\n    });\n  }\n}\n"]}

package/dist/src/providers/builtin/whatsapp.d.ts

@@ -19,15 +19,16 @@ type NormalizedWhatsAppWebhookMessage = {
     text?: string;
     threadId?: string;
 };
-export declare function resolveWhatsAppAdapterConfig(config: ProviderConfig, env?: NodeJS.ProcessEnv): {
+type WhatsAppEnvironment = Partial<Pick<NodeJS.ProcessEnv, "WHATSAPP_ACCESS_TOKEN" | "WHATSAPP_APP_SECRET" | "WHATSAPP_PHONE_NUMBER_ID" | "WHATSAPP_VERIFY_TOKEN">>;
+export declare function resolveWhatsAppAdapterConfig(config: ProviderConfig, env?: WhatsAppEnvironment): {
     accessToken: string;
     appSecret: string;
-    phoneNumberId: string;
+    phoneNumberId?: string;
     verifyToken: string;
 };
 export declare class WhatsAppProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {
     #private;
-    constructor(id: string, config: ProviderConfig, _userName: string, _runtime?: unknown);
+    constructor(id: string, config: ProviderConfig, _userName: string, runtime?: unknown);
     probe(context: ProviderContext): Promise<ProbeResult>;
     send(context: SendContext): Promise<SendResult>;
     waitForInbound(context: WaitContext): Promise<InboundEnvelope | null>;

package/dist/src/providers/builtin/whatsapp.js

@@ -15,6 +15,23 @@ const DEFAULT_WHATSAPP_WEBHOOK = {
 const MAX_WAIT_CURSORS = 64;
 const MAX_WHATSAPP_WEBHOOK_BODY_BYTES = 1024 * 1024;
 const WHATSAPP_WEBHOOK_BODY_TIMEOUT_MS = 5_000;
+const WHATSAPP_WEBHOOK_CLEANUP_GRACE_MS = 250;
+function abortableOperation(operation, signal) {
+    if (signal.aborted) {
+        return Promise.reject(signal.reason);
+    }
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        void operation.then((value) => {
+            signal.removeEventListener("abort", onAbort);
+            resolve(value);
+        }, (error) => {
+            signal.removeEventListener("abort", onAbort);
+            reject(error);
+        });
+    });
+}
 class WhatsAppWebhookBodyError extends Error {
     status;
     constructor(message, status) {
@@ -83,28 +100,53 @@ async function readWhatsAppWebhookBody(request, lifecycleSignal) {
 export function resolveWhatsAppAdapterConfig(config, env = process.env) {
     const appSecret = config.whatsapp?.appSecret ?? env.WHATSAPP_APP_SECRET;
     const verifyToken = config.whatsapp?.verifyToken ?? env.WHATSAPP_VERIFY_TOKEN;
-    if (!appSecret || !verifyToken) {
+    if (!appSecret?.trim() || !verifyToken?.trim()) {
         throw new CrablineError("WhatsApp webhook operation requires appSecret and verifyToken configuration.", { kind: "config" });
     }
     return {
         accessToken: config.whatsapp?.accessToken ?? env.WHATSAPP_ACCESS_TOKEN ?? "local-mock-token",
         appSecret,
-        phoneNumberId: config.whatsapp?.phoneNumberId ?? env.WHATSAPP_PHONE_NUMBER_ID ?? "local-mock-phone",
+        ...((config.whatsapp?.phoneNumberId ?? env.WHATSAPP_PHONE_NUMBER_ID)
+            ? { phoneNumberId: config.whatsapp?.phoneNumberId ?? env.WHATSAPP_PHONE_NUMBER_ID }
+            : {}),
         verifyToken,
     };
 }
+function cursorHasAdvanced(candidate, current) {
+    if (!current) {
+        return true;
+    }
+    if (candidate.readState.generation !== current.readState.generation) {
+        return candidate.readState.generation > current.readState.generation;
+    }
+    if (candidate.readState.offset !== current.readState.offset) {
+        return candidate.readState.offset > current.readState.offset;
+    }
+    return candidate.buffered.length < current.buffered.length;
+}
 function pruneInactiveWaitCursors(cursors) {
-    for (const [key, state] of cursors) {
-        if (cursors.size <= MAX_WAIT_CURSORS) {
-            return;
+    let inactiveCount = 0;
+    for (const state of cursors.values()) {
+        if (state.active === 0) {
+            inactiveCount++;
         }
+    }
+    if (inactiveCount <= MAX_WAIT_CURSORS) {
+        return;
+    }
+    for (const [key, state] of cursors) {
         if (state.active === 0) {
             cursors.delete(key);
+            inactiveCount--;
+            if (inactiveCount <= MAX_WAIT_CURSORS) {
+                return;
+            }
         }
     }
 }
 export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
     #config;
+    #env;
     #lifecycleAbort = new AbortController();
     #publicUrl;
     #recorderPath;
@@ -116,9 +158,10 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
     #inFlightWebhookRequests = new Set();
     #waitCursors = new Map();
     #server = null;
+    #serverClosePromise = null;
     #serverClosing = null;
     #serverStarting = null;
-    constructor(id, config, _userName, _runtime) {
+    constructor(id, config, _userName, runtime) {
         super({
             codec: getBuiltinTargetCodec("whatsapp"),
             config,
@@ -136,6 +179,7 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
             },
         });
         this.#config = config;
+        this.#env = runtime?.env ?? process.env;
         this.#publicUrl = config.whatsapp?.webhook.publicUrl;
         this.#recorderPath = config.whatsapp?.recorder.path
             ? path.resolve(config.whatsapp.recorder.path)
@@ -143,9 +187,13 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
         this.#webhook = config.whatsapp?.webhook;
     }
     async probe(context) {
-        context.signal?.throwIfAborted();
-        const server = await this.#ensureWebhookServer();
-        context.signal?.throwIfAborted();
+        const signal = this.#operationSignal(context.signal);
+        signal.throwIfAborted();
+        const server = await this.#ensureWebhookServer(signal);
+        if (this.#cleanupBegun || this.#cleanedUp) {
+            throw this.#cleanedUpError();
+        }
+        signal.throwIfAborted();
         const target = this.normalizeTarget(context.fixture.target);
         const details = [
             "whatsapp local mock ready",
@@ -180,9 +228,25 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
         }
     }
     async waitForInbound(context) {
-        await this.#ensureWebhookServer();
+        if (context.signal?.aborted) {
+            return null;
+        }
+        const signal = this.#operationSignal(context.signal);
+        try {
+            await this.#ensureWebhookServer(signal);
+        }
+        catch (error) {
+            if (this.#cleanupBegun || signal.aborted) {
+                return null;
+            }
+            throw error;
+        }
+        if (this.#cleanupBegun) {
+            return null;
+        }
         const target = this.normalizeTarget(context.fixture.target);
         const channelId = context.threadId ?? target.threadId ?? target.channelId ?? target.id;
+        const excludedIds = new Set(context.excludeIds ?? []);
         const cursorKey = JSON.stringify([
             context.nonce,
             context.since,
@@ -202,14 +266,16 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
                 cursor,
                 filePath: this.#recorderPath,
                 matches: (candidate) => candidate.provider === this.id &&
+                    !excludedIds.has(candidate.id) &&
                     !isOutboundRecord(candidate) &&
                     isAddressInChannel(candidate.threadId, channelId) &&
                     matchesInbound(candidate, context.fixture.inboundMatch, context.nonce),
                 since: context.since,
-                signal: this.#operationSignal(context.signal),
+                signal,
                 timeoutMs: context.timeoutMs,
             });
-            if (event && this.#waitCursors.get(cursorKey) === cursorState) {
+            if (this.#waitCursors.get(cursorKey) === cursorState &&
+                cursorHasAdvanced(cursor, cursorState.cursor)) {
                 cursorState.cursor = cursor;
             }
             return event;
@@ -221,17 +287,33 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
                 this.#waitCursors.get(cursorKey) === cursorState) {
                 this.#waitCursors.delete(cursorKey);
             }
+            pruneInactiveWaitCursors(this.#waitCursors);
         }
     }
     async *watch(context) {
-        await this.#ensureWebhookServer();
+        if (context.signal?.aborted) {
+            return;
+        }
+        const signal = this.#operationSignal(context.signal);
+        try {
+            await this.#ensureWebhookServer(signal);
+        }
+        catch (error) {
+            if (this.#cleanupBegun || signal.aborted) {
+                return;
+            }
+            throw error;
+        }
+        if (this.#cleanupBegun) {
+            return;
+        }
         const target = this.normalizeTarget(context.fixture.target);
         for await (const event of watchRecordedInbound({
             filePath: this.#recorderPath,
             matches: (entry) => entry.provider === this.id &&
                 !isOutboundRecord(entry) &&
                 isAddressInChannel(entry.threadId, target.threadId ?? target.channelId ?? target.id),
-            signal: this.#operationSignal(context.signal),
+            signal,
             since: context.since,
         })) {
             yield event;
@@ -251,8 +333,25 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
         this.#cleanedUp = true;
         this.#waitCursors.clear();
         this.#cleanupPromise ??= (async () => {
-            await Promise.allSettled([...this.#inFlightSends, ...this.#inFlightWebhookRequests]);
+            const webhookRequests = [...this.#inFlightWebhookRequests];
+            const settled = Promise.allSettled(webhookRequests).then(() => undefined);
+            let webhookTimer;
+            const webhookDeadline = webhookRequests.length === 0
+                ? settled
+                : new Promise((_, reject) => {
+                    webhookTimer = setTimeout(() => {
+                        reject(new CrablineError(`Provider "${this.id}" webhook handlers did not settle within ${WHATSAPP_WEBHOOK_CLEANUP_GRACE_MS}ms after cleanup.`, { kind: "timeout" }));
+                    }, WHATSAPP_WEBHOOK_CLEANUP_GRACE_MS);
+                });
             const errors = [];
+            const drainResults = await Promise.allSettled([
+                ...this.#inFlightSends,
+                Promise.race([settled, webhookDeadline]).finally(() => clearTimeout(webhookTimer)),
+            ]);
+            const webhookResult = drainResults.at(-1);
+            if (webhookResult?.status === "rejected") {
+                errors.push(webhookResult.reason);
+            }
             try {
                 await this.#serverClosing;
             }
@@ -352,17 +451,18 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
             status: 200,
         });
     }
-    async #ensureWebhookServer() {
+    async #ensureWebhookServer(signal) {
         if (this.#cleanupBegun) {
             throw this.#cleanedUpError();
         }
+        signal.throwIfAborted();
         if (this.#server) {
             return this.#server;
         }
         if (this.#serverStarting) {
-            return await this.#serverStarting;
+            return await abortableOperation(this.#serverStarting, signal);
         }
-        const resolvedConfig = resolveWhatsAppAdapterConfig(this.#config);
+        const resolvedConfig = resolveWhatsAppAdapterConfig(this.#config, this.#env);
         const host = this.#webhook?.host ?? DEFAULT_WHATSAPP_WEBHOOK.host;
         const port = this.#webhook?.port ?? DEFAULT_WHATSAPP_WEBHOOK.port;
         const webhookPath = this.#webhook?.path ?? DEFAULT_WHATSAPP_WEBHOOK.path;
@@ -375,26 +475,45 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
                     methods: ["GET", "POST"],
                     path: webhookPath,
                     port,
+                    signal: this.#lifecycleAbort.signal,
                 });
             }
             catch (error) {
+                if (this.#cleanupBegun) {
+                    throw error;
+                }
                 throw new CrablineError(`whatsapp local mock webhook server failed: ${ensureErrorMessage(error)}`, { cause: error, kind: "connectivity" });
             }
             this.#server = server;
             if (this.#cleanupBegun) {
-                throw this.#cleanedUpError();
+                await this.#closeStartedWebhookServer(server);
             }
             return server;
         })();
         this.#serverStarting = starting;
-        try {
-            return await starting;
-        }
-        finally {
+        void starting.then(() => {
+            if (this.#serverStarting === starting) {
+                this.#serverStarting = null;
+            }
+        }, () => {
             if (this.#serverStarting === starting) {
                 this.#serverStarting = null;
             }
+        });
+        const server = await abortableOperation(starting, signal);
+        if (this.#cleanupBegun) {
+            throw this.#cleanedUpError();
+        }
+        return server;
+    }
+    async #closeStartedWebhookServer(server) {
+        if (this.#server === server) {
+            this.#server = null;
+        }
+        if (!this.#serverClosePromise) {
+            this.#serverClosePromise = server.close();
         }
+        await this.#serverClosePromise;
     }
     async #closeWebhookServer() {
         const starting = this.#serverStarting;
@@ -402,18 +521,20 @@ export class WhatsAppProviderAdapter extends LocalMockProviderAdapter {
             try {
                 await starting;
             }
-            catch {
-                // A failed startup has no listener; a cleanup race publishes one below.
+            catch (error) {
+                if (error !== this.#lifecycleAbort.signal.reason) {
+                    throw error;
+                }
             }
         }
         const server = this.#server;
-        if (!server) {
+        if (server) {
+            await this.#closeStartedWebhookServer(server);
             return;
         }
-        if (this.#server === server) {
-            this.#server = null;
+        if (this.#serverClosePromise) {
+            await this.#serverClosePromise;
         }
-        await server.close();
     }
     #cleanedUpError() {
         return new CrablineError(`Provider "${this.id}" has been cleaned up.`, { kind: "config" });
@@ -433,6 +554,9 @@ export function normalizeWhatsAppWebhookPayload(payload, expectedPhoneNumberId)
     }
     const normalized = [];
     if (Array.isArray(payload.entry)) {
+        if (optionalString(payload, "object") !== "whatsapp_business_account") {
+            throw new CrablineError('WhatsApp webhook entry payloads require object="whatsapp_business_account"', { kind: "inbound" });
+        }
         for (const entry of payload.entry) {
             if (!isRecord(entry) || !Array.isArray(entry.changes)) {
                 continue;
@@ -441,6 +565,10 @@ export function normalizeWhatsAppWebhookPayload(payload, expectedPhoneNumberId)
                 if (!isRecord(change)) {
                     continue;
                 }
+                const field = optionalString(change, "field");
+                if (field !== undefined && field !== "messages") {
+                    continue;
+                }
                 const value = optionalRecord(change, "value");
                 if (!value || !Array.isArray(value.messages)) {
                     continue;