@poncho-ai/messaging 0.2.8 → 0.3.0

package/src/adapters/telegram/verify.ts

@@ -0,0 +1,18 @@
+import { timingSafeEqual } from "node:crypto";
+
+/**
+ * Verify the Telegram webhook secret token.
+ *
+ * When registering the webhook via `setWebhook`, a `secret_token` can be
+ * provided. Telegram then sends it in the `X-Telegram-Bot-Api-Secret-Token`
+ * header on every update. This function compares the expected and received
+ * values using timing-safe equality.
+ */
+export const verifyTelegramSecret = (
+  expected: string,
+  received: string | undefined,
+): boolean => {
+  if (!received) return false;
+  if (expected.length !== received.length) return false;
+  return timingSafeEqual(Buffer.from(expected), Buffer.from(received));
+};

package/src/bridge.ts

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import type {
   AgentBridgeOptions,
   IncomingMessage,
@@ -7,13 +8,24 @@ import type {
 } from "./types.js";
 
 /**
- * Derive a stable conversation ID from a platform thread reference.
- * Format: `<platform>:<channelId>:<threadId>`
+ * Derive a deterministic UUID from a platform thread reference.
+ * SHA-256 hashes the composite key and formats 16 bytes as a UUID v4-shaped
+ * string, ensuring a valid UUID that's stable across requests for the same thread.
  */
 const conversationIdFromThread = (
   platform: string,
   ref: ThreadRef,
-): string => `${platform}:${ref.channelId}:${ref.platformThreadId}`;
+): string => {
+  const key = `${platform}:${ref.channelId}:${ref.platformThreadId}`;
+  const hex = createHash("sha256").update(key).digest("hex").slice(0, 32);
+  return [
+    hex.slice(0, 8),
+    hex.slice(8, 12),
+    `4${hex.slice(13, 16)}`,
+    ((parseInt(hex.slice(16, 18), 16) & 0x3f) | 0x80).toString(16).padStart(2, "0") + hex.slice(18, 20),
+    hex.slice(20, 32),
+  ].join("-");
+};
 
 export class AgentBridge {
   private readonly adapter: MessagingAdapter;
@@ -53,9 +65,11 @@ export class AgentBridge {
         message.threadRef,
       );
 
-      const titleParts = [message.sender.id];
+      const platformTag = `[${message.platform.charAt(0).toUpperCase()}${message.platform.slice(1)}]`;
+      const senderLabel = message.sender.name || message.sender.id;
+      const titleParts = [platformTag, senderLabel];
       if (message.subject) titleParts.push(message.subject);
-      const title = titleParts.join(" — ") || `${message.platform} thread`;
+      const title = titleParts.join(" ") || `${message.platform} thread`;
 
       const conversation = await this.runner.getOrCreateConversation(
         conversationId,

package/src/index.ts

@@ -15,6 +15,8 @@ export { SlackAdapter } from "./adapters/slack/index.js";
 export type { SlackAdapterOptions } from "./adapters/slack/index.js";
 export { ResendAdapter } from "./adapters/resend/index.js";
 export type { ResendAdapterOptions } from "./adapters/resend/index.js";
+export { TelegramAdapter } from "./adapters/telegram/index.js";
+export type { TelegramAdapterOptions } from "./adapters/telegram/index.js";
 
 export {
   buildReplyHeaders,