@rubytech/create-maxy-code 0.1.417 → 0.1.423

package/payload/platform/services/telegram-channel/dist/notification.d.ts

@@ -0,0 +1,93 @@
+import { type TelegramChannelRole } from './instructions.js';
+export interface InboundPayload {
+    /** The telegram conversation key this payload is for. */
+    key: string;
+    /** The operator's typed message, verbatim — multi-line content is preserved. */
+    text: string;
+    /** Per-message id, for dedup/observability. */
+    messageId: string;
+    /** Task 1378 — the inbound's origin: 'user' (a real telegram message) or
+     *  'schedule' (a synthetic inbound injected by the scheduler). Carried only
+     *  into the turn's structured log line. Absent on legacy frames = 'user'. */
+    source?: 'user' | 'schedule';
+    /** Task 1486 — the account's active standing-rules block (already formatted as
+     *  `## Standing rules`), fetched and attached by the gateway. Prepended above
+     *  `## Context` for ADMIN turns only; a public visitor never receives it.
+     *  Absent/blank when the account has no active rules. */
+    standingRules?: string;
+}
+/** The composed content the agent receives, plus the inner payload's byte
+ *  length for the observability line. */
+export interface ComposedInbound {
+    content: string;
+    payloadBytes: number;
+}
+/** Frame an ADMIN inbound as `## Context` (the typed message) then
+ *  `## Instruction` (the routing + capability-denial directive), so the
+ *  directive rides every turn. PUBLIC stays plain: the public reader echoes the
+ *  visitor's own inbound back to them, so wrapping it would leak the internal
+ *  directive to the visitor. `payloadBytes` is the inner message length,
+ *  excluding any wrapper — matching the WhatsApp `[reframe]` semantics. */
+export declare function composeContent(p: InboundPayload, role: TelegramChannelRole): ComposedInbound;
+/** Defence in depth: this server serves exactly one key. Even though the
+ *  gateway only streams that key's messages, refuse anything else before it
+ *  reaches the session. */
+export declare function acceptsKey(myKey: string, p: {
+    key: string;
+}): boolean;
+/** Build the body for POST /tg-channel/reply. The reply tool exposes only
+ *  `text` to the model; the key is the server's fixed key (from spawn env),
+ *  never trusted from the model, so a compromised turn cannot redirect a reply
+ *  to a different conversation. */
+export declare function buildReplyPostBody(myKey: string, text: string): {
+    key: string;
+    text: string;
+};
+/** Build the body for POST /tg-channel/received — the receipt ack the channel
+ *  server sends after it has emitted a drained inbound to the agent, so the
+ *  gateway marks it delivered instead of sweeping it as drain-undelivered. The
+ *  key is the server's fixed key, never model-supplied. */
+export declare function buildReceivedPostBody(myKey: string, messageId: string): {
+    key: string;
+    messageId: string;
+};
+/**
+ * Build the body for POST /tg-channel/turn-end — the turn-end decision the
+ * channel server posts once per turn. `key` + `sessionId` are the server's fixed
+ * values (spawn env), never model-supplied. `replied` is whether a telegram
+ * reply tool_use occurred in the turn. Delivery is reply-tool-only (Task 1464):
+ * no `finalText` travels, so a turn that ended without a reply-tool call delivers
+ * nothing — mirroring the WhatsApp twin, the gateway only stamps the lifeline
+ * (delivered=reply | delivered=none). */
+export declare function buildTurnEndPostBody(myKey: string, sessionId: string, replied: boolean): {
+    key: string;
+    sessionId: string;
+    replied: boolean;
+};
+/** Retry an idempotent POST until it is accepted or the attempt cap is
+ *  reached. `attempt` returns whether the POST was accepted; the helper
+ *  returns on the first acceptance, otherwise sleeps `delayMs` and retries,
+ *  up to `attempts` total. `sleep` is injected so tests run without real
+ *  timers. */
+export declare function postWithRetry(attempt: () => Promise<boolean>, opts: {
+    attempts: number;
+    delayMs: number;
+    sleep: (ms: number) => Promise<void>;
+}): Promise<boolean>;
+/** Map a non-OK /tg-channel/reply response into an actionable MCP error string.
+ *  Falls back to the bare status when the body carries no usable reason. (No
+ *  terminal/logged-out branch — there is no external transport to log out of.) */
+export declare function buildReplyError(status: number, body: unknown): string;
+export declare const INTERNAL_LEAK_PATTERNS: {
+    name: string;
+    re: RegExp;
+}[];
+export interface Redaction {
+    pattern: string;
+    match: string;
+}
+export declare function redactInternalLeaks(text: string): {
+    clean: string;
+    redactions: Redaction[];
+};
+//# sourceMappingURL=notification.d.ts.map

package/payload/platform/services/telegram-channel/dist/notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAcA,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAEvF,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB;;iFAE6E;IAC7E,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B;;;6DAGyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;yCACyC;AACzC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;2EAK2E;AAC3E,wBAAgB,cAAc,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,mBAAmB,GAAG,eAAe,CAgB5F;AAED;;2BAE2B;AAC3B,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAErE;AAED;;;mCAGmC;AACnC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAE7F;AAED;;;2DAG2D;AAC3D,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAEpC;AAED;;;;;;;yCAOyC;AACzC,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAEtD;AAED;;;;cAIc;AACd,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAC/B,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAChF,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAIrE;AAYD,eAAO,MAAM,sBAAsB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAOhE,CAAA;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAU5F"}

package/payload/platform/services/telegram-channel/dist/notification.js

@@ -0,0 +1,119 @@
+// Pure helpers for the telegram channel server. No MCP SDK import here, so these
+// unit-test without the SDK and keep server.ts's transport wiring separable from
+// its message shaping. Mirrors whatsapp-channel/notification.ts with the
+// deliberate divergences below.
+//
+// Every ADMIN inbound is framed with `## Context / ## Instruction`, the same
+// shape the WhatsApp channel uses, so the routing + capability-denial directive
+// rides EVERY turn (the standing UserPromptSubmit directive hook suppresses
+// itself on `<channel source=` turns, so the channel must carry the directive
+// itself). This overrides the plain-delivery decision for the admin role. PUBLIC
+// stays plain — see composeContent. Still no media weaving (the gateway POST
+// carries text only) and no reply-document — the reader renders agent replies
+// from the session JSONL.
+import { ADMIN_REFRAME_INSTRUCTION } from './instructions.js';
+/** Frame an ADMIN inbound as `## Context` (the typed message) then
+ *  `## Instruction` (the routing + capability-denial directive), so the
+ *  directive rides every turn. PUBLIC stays plain: the public reader echoes the
+ *  visitor's own inbound back to them, so wrapping it would leak the internal
+ *  directive to the visitor. `payloadBytes` is the inner message length,
+ *  excluding any wrapper — matching the WhatsApp `[reframe]` semantics. */
+export function composeContent(p, role) {
+    const payload = p.text;
+    const payloadBytes = Buffer.byteLength(payload, 'utf8');
+    if (role !== 'admin') {
+        return { content: payload, payloadBytes };
+    }
+    // Task 1486 — prepend the account's active standing rules above ## Context for
+    // admin turns only (a public visitor must never see operator rules).
+    const rulesPrefix = typeof p.standingRules === 'string' && p.standingRules.trim().length > 0
+        ? `${p.standingRules.trim()}\n\n`
+        : '';
+    return {
+        content: `${rulesPrefix}## Context\n${payload}\n\n## Instruction\n${ADMIN_REFRAME_INSTRUCTION}`,
+        payloadBytes,
+    };
+}
+/** Defence in depth: this server serves exactly one key. Even though the
+ *  gateway only streams that key's messages, refuse anything else before it
+ *  reaches the session. */
+export function acceptsKey(myKey, p) {
+    return p.key === myKey;
+}
+/** Build the body for POST /tg-channel/reply. The reply tool exposes only
+ *  `text` to the model; the key is the server's fixed key (from spawn env),
+ *  never trusted from the model, so a compromised turn cannot redirect a reply
+ *  to a different conversation. */
+export function buildReplyPostBody(myKey, text) {
+    return { key: myKey, text };
+}
+/** Build the body for POST /tg-channel/received — the receipt ack the channel
+ *  server sends after it has emitted a drained inbound to the agent, so the
+ *  gateway marks it delivered instead of sweeping it as drain-undelivered. The
+ *  key is the server's fixed key, never model-supplied. */
+export function buildReceivedPostBody(myKey, messageId) {
+    return { key: myKey, messageId };
+}
+/**
+ * Build the body for POST /tg-channel/turn-end — the turn-end decision the
+ * channel server posts once per turn. `key` + `sessionId` are the server's fixed
+ * values (spawn env), never model-supplied. `replied` is whether a telegram
+ * reply tool_use occurred in the turn. Delivery is reply-tool-only (Task 1464):
+ * no `finalText` travels, so a turn that ended without a reply-tool call delivers
+ * nothing — mirroring the WhatsApp twin, the gateway only stamps the lifeline
+ * (delivered=reply | delivered=none). */
+export function buildTurnEndPostBody(myKey, sessionId, replied) {
+    return { key: myKey, sessionId, replied };
+}
+/** Retry an idempotent POST until it is accepted or the attempt cap is
+ *  reached. `attempt` returns whether the POST was accepted; the helper
+ *  returns on the first acceptance, otherwise sleeps `delayMs` and retries,
+ *  up to `attempts` total. `sleep` is injected so tests run without real
+ *  timers. */
+export async function postWithRetry(attempt, opts) {
+    for (let i = 0; i < opts.attempts; i++) {
+        if (await attempt())
+            return true;
+        if (i < opts.attempts - 1)
+            await opts.sleep(opts.delayMs);
+    }
+    return false;
+}
+/** Map a non-OK /tg-channel/reply response into an actionable MCP error string.
+ *  Falls back to the bare status when the body carries no usable reason. (No
+ *  terminal/logged-out branch — there is no external transport to log out of.) */
+export function buildReplyError(status, body) {
+    const b = body;
+    const reason = typeof b?.error === 'string' && b.error.length > 0 ? b.error : null;
+    return reason ? `reply: ${reason}` : `reply: gateway returned ${status}`;
+}
+// Runtime internal-leak guard. The build-time gate check-no-task-id-leaks.mjs
+// scans source strings; it cannot catch a task number, repo path, or log tag the
+// model generates at runtime inside a reply. This is its runtime complement: it
+// redacts those patterns from outbound operator text before the reply leaves the
+// box. Precision — the 2-digit floor on task numbers keeps "Task 3 on your list"
+// and a price "£829" out; the hyphen requirement on bracket tags keeps
+// "[urgent]" out; `.js` is not a source-file match (only `.ts`/`.tsx`), and the
+// built bundle server.js is matched explicitly. repo-path is ordered before
+// source-file so a full path like platform/ui/app/page.tsx redacts as ONE match,
+// not path + filename.
+export const INTERNAL_LEAK_PATTERNS = [
+    { name: 'task-id', re: /\bTasks?[\s-]+\d{2,4}\b/g },
+    { name: 'repo-path', re: /\bplatform\/[A-Za-z0-9_./-]+/g },
+    { name: 'bundle', re: /\bserver\.(?:js|cjs|mjs)\b/g },
+    { name: 'source-file', re: /\b[A-Za-z0-9_-]+\.tsx?\b/g },
+    { name: 'log-tag', re: /\[[a-z]+(?:-[a-z]+)+\]/g },
+    { name: 'op-tag', re: /\bop=[a-z][a-z-]*\b/g },
+];
+export function redactInternalLeaks(text) {
+    const redactions = [];
+    let clean = text;
+    for (const { name, re } of INTERNAL_LEAK_PATTERNS) {
+        clean = clean.replace(re, (m) => {
+            redactions.push({ pattern: name, match: m });
+            return '[redacted]';
+        });
+    }
+    return { clean, redactions };
+}
+//# sourceMappingURL=notification.js.map

package/payload/platform/services/telegram-channel/dist/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,iFAAiF;AACjF,yEAAyE;AACzE,gCAAgC;AAChC,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,0BAA0B;AAE1B,OAAO,EAAE,yBAAyB,EAA4B,MAAM,mBAAmB,CAAA;AA2BvF;;;;;2EAK2E;AAC3E,MAAM,UAAU,cAAc,CAAC,CAAiB,EAAE,IAAyB;IACzE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAA;IACtB,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACvD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IAC3C,CAAC;IACD,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,WAAW,GACf,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM;QACjC,CAAC,CAAC,EAAE,CAAA;IACR,OAAO;QACL,OAAO,EAAE,GAAG,WAAW,eAAe,OAAO,uBAAuB,yBAAyB,EAAE;QAC/F,YAAY;KACb,CAAA;AACH,CAAC;AAED;;2BAE2B;AAC3B,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,CAAkB;IAC1D,OAAO,CAAC,CAAC,GAAG,KAAK,KAAK,CAAA;AACxB,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY;IAC5D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED;;;2DAG2D;AAC3D,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,SAAiB;IAEjB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AAClC,CAAC;AAED;;;;;;;yCAOyC;AACzC,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,SAAiB,EACjB,OAAgB;IAEhB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AAC3C,CAAC;AAED;;;;cAIc;AACd,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA+B,EAC/B,IAAiF;IAEjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,OAAO,EAAE;YAAE,OAAO,IAAI,CAAA;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;kFAEkF;AAClF,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAa;IAC3D,MAAM,CAAC,GAAG,IAAkC,CAAA;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAClF,OAAO,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,2BAA2B,MAAM,EAAE,CAAA;AAC1E,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,iFAAiF;AACjF,uBAAuB;AACvB,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACnD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,+BAA+B,EAAE;IAC1D,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,6BAA6B,EAAE;IACrD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACxD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,yBAAyB,EAAE;IAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,sBAAsB,EAAE;CAC/C,CAAA;AAOD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,IAAI,KAAK,GAAG,IAAI,CAAA;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,sBAAsB,EAAE,CAAC;QAClD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5C,OAAO,YAAY,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC9B,CAAC"}

package/payload/platform/services/telegram-channel/dist/server.d.ts

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+export declare const INSTRUCTIONS: string;
+export declare const mcp: Server<{
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    method: string;
+    params?: {
+        [x: string]: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    _meta?: {
+        [x: string]: unknown;
+        progressToken?: string | number | undefined;
+        "io.modelcontextprotocol/related-task"?: {
+            taskId: string;
+        } | undefined;
+    } | undefined;
+}>;
+export declare function subscribeInbound(): Promise<void>;
+export declare function main(): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/payload/platform/services/telegram-channel/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AAmBA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAsDlE,eAAO,MAAM,YAAY,QAA4B,CAAA;AAErD,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWf,CAAA;AA0ED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAqItD;AAED,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAO1C"}

package/payload/platform/services/telegram-channel/dist/server.js

@@ -0,0 +1,291 @@
+#!/usr/bin/env node
+// Per-conversation telegram channel MCP server. Spawned as a stdio child of one
+// `claude` session (so it dies when that session dies — no bound port, no
+// orphan). It:
+//   - subscribes to the gateway for ITS key's inbound (SSE) and emits each
+//     message as a notifications/claude/channel event;
+//   - exposes a `reply` tool. The tool POSTs the text to the gateway, which
+//     relays it to the telegram chat via the Bot API. Delivery is reply-tool-only
+//     (Task 1464): a turn that ends without a reply-tool call delivers nothing —
+//     the gateway's turn-end handler only stamps the lifeline, it does not send.
+//
+// Transport glue only — message shaping and the post bodies are the
+// unit-tested pure helpers in ./notification. Mirrors webchat-channel/server.ts
+// for the inbound/cold-start path and the WhatsApp twin for the outbound side
+// (reply relay only). One text-only reply tool; telegram document
+// delivery is handled by the gateway's file follower, not a second tool here.
+import { realpathSync, statSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { acceptsKey, composeContent, buildReplyPostBody, buildReceivedPostBody, buildTurnEndPostBody, buildReplyError, redactInternalLeaks, postWithRetry, } from './notification.js';
+import { findJsonlForSessionId, followTurnEnds } from './turn-follow.js';
+import { channelInstructions, replyToolDescription, replyTextDescription, resolveChannelRole } from './instructions.js';
+function requireEnv(name) {
+    const v = process.env[name];
+    if (!v)
+        throw new Error(`telegram-channel: missing required env ${name}`);
+    return v;
+}
+const KEY = requireEnv('TG_CHANNEL_SENDER_ID');
+const GATEWAY_URL = requireEnv('TG_CHANNEL_GATEWAY_URL').replace(/\/$/, '');
+// Turn-undelivered detection. The session id is carried on the spawn env so the
+// channel server can tail this session's JSONL and reconcile, per turn, whether
+// a reply tool was dispatched. Resolved lazily: a brand-new session has no
+// transcript at startup, so the path is re-resolved on the first inbound.
+// SESSION_ID is empty in unit tests (the module imports without the env), so
+// findJsonlForSessionId is never called and the follower never starts.
+const SESSION_ID = process.env.TG_CHANNEL_SESSION_ID ?? '';
+let jsonlPath = SESSION_ID ? findJsonlForSessionId(SESSION_ID) : null;
+// Count inbound this server emitted but whose turn-end the follower has not yet
+// reported, and whether the session-long follower is running. Mirrors the
+// WhatsApp twin: a turn queued mid-turn is covered by the next end_turn the
+// follower reports, and a claude.ai-driven turn (pendingTurns === 0) reports
+// nothing.
+let pendingTurns = 0;
+let followerStarted = false;
+// Receipt-ack retry budget. 5 attempts × 2000ms = up to ~8s of sleeping,
+// comfortably inside the gateway's 30s ack window (ACK_THRESHOLD_MS), so a
+// recovered ack lands before the sweep would emit a false drain-undelivered.
+const RECEIPT_ACK_ATTEMPTS = 5;
+const RECEIPT_ACK_DELAY_MS = 2000;
+// The channel server serves admin (the operator) OR public (an anonymous
+// visitor); the framing differs so a public agent never treats a visitor message
+// as a trusted operator instruction. The role is carried on the spawn env. The
+// reply tool is the delivery path back to the telegram chat (the reader renders
+// the tool call's text), so every turn must end with it.
+const ROLE = resolveChannelRole(process.env.TG_CHANNEL_ROLE);
+export const INSTRUCTIONS = channelInstructions(ROLE);
+export const mcp = new Server({ name: 'telegram-channel', version: '0.1.0' }, {
+    capabilities: {
+        experimental: {
+            'claude/channel': {},
+        },
+        tools: {},
+    },
+    instructions: INSTRUCTIONS,
+});
+// Readiness gate. The stdio transport "connecting" only means the pipes exist;
+// the harness can only receive notifications after it completes MCP
+// initialization (client sends notifications/initialized). Gate the /ready POST
+// — and therefore the gateway's cold-start drain and every subsequent emission —
+// on this promise. `op=initialized` is the lifeline anchor: its absence after
+// channel-attached means the harness never became ready.
+let markInitialized;
+const initialized = new Promise((resolve) => {
+    markInitialized = resolve;
+});
+mcp.oninitialized = () => {
+    console.error('[telegram-channel] op=initialized');
+    markInitialized();
+};
+mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: 'reply',
+            description: replyToolDescription(ROLE),
+            inputSchema: {
+                type: 'object',
+                properties: { text: { type: 'string', description: replyTextDescription(ROLE) } },
+                required: ['text'],
+            },
+        },
+    ],
+}));
+// Redact internal-leak patterns from outbound operator text and log each
+// redaction before it leaves the box.
+function guardOutbound(text) {
+    const { clean, redactions } = redactInternalLeaks(text);
+    for (const r of redactions) {
+        console.error(`[channel-guard] op=redact senderId=${KEY} pattern=${r.pattern} bytes=${Buffer.byteLength(r.match, 'utf8')}`);
+    }
+    return clean;
+}
+mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
+    if (req.params.name === 'reply') {
+        const rawText = req.params.arguments?.text;
+        if (typeof rawText !== 'string')
+            throw new Error('reply: text must be a string');
+        const clean = guardOutbound(rawText);
+        const res = await fetch(`${GATEWAY_URL}/tg-channel/reply`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(buildReplyPostBody(KEY, clean)),
+        });
+        if (!res.ok) {
+            const body = await res.json().catch(() => null);
+            throw new Error(buildReplyError(res.status, body));
+        }
+        return { content: [{ type: 'text', text: 'sent' }] };
+    }
+    throw new Error(`unknown tool: ${req.params.name}`);
+});
+// Subscribe to this key's inbound stream and emit each message as an event.
+// Reconnect loop: the channel server must stay alive — and its reply tool
+// available — for the whole claude session. If the SSE link to the gateway
+// drops (gateway restart, idle close, transient blip), reconnect instead of
+// returning. The process still dies with the session because claude SIGTERMs
+// its stdio child.
+async function postReady() {
+    await fetch(`${GATEWAY_URL}/tg-channel/ready`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ key: KEY }),
+    }).catch(() => { });
+}
+export async function subscribeInbound() {
+    const url = `${GATEWAY_URL}/tg-channel/inbound?key=${encodeURIComponent(KEY)}`;
+    for (;;) {
+        try {
+            const res = await fetch(url, { headers: { accept: 'text/event-stream' } });
+            if (!res.ok || !res.body)
+                throw new Error(`subscribe failed: ${res.status}`);
+            // The SSE link is established AND the harness has completed MCP
+            // initialization — only NOW announce readiness, so the gateway drains
+            // the cold-start queue onto a live subscription whose emissions the
+            // harness can actually receive. Frames that arrive while we wait
+            // buffer in the SSE body; the read loop below starts strictly after
+            // this point, so every emission (and its /received ack) is
+            // post-initialization. (SSE-link-up alone raced the harness's
+            // channel-handler registration and lost the first message.)
+            await initialized;
+            await postReady();
+            const reader = res.body.getReader();
+            const decoder = new TextDecoder();
+            let buffer = '';
+            for (;;) {
+                const { value, done } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                const frames = buffer.split('\n\n');
+                buffer = frames.pop() ?? '';
+                for (const frame of frames) {
+                    const dataLine = frame.split('\n').find((l) => l.startsWith('data:'));
+                    if (!dataLine)
+                        continue;
+                    const data = dataLine.slice('data:'.length).trim();
+                    if (!data)
+                        continue; // ping/keepalive
+                    let payload;
+                    try {
+                        payload = JSON.parse(data);
+                    }
+                    catch {
+                        continue;
+                    }
+                    if (!acceptsKey(KEY, payload))
+                        continue;
+                    // composeContent frames an ADMIN inbound with the routing +
+                    // capability-denial directive (`## Context / ## Instruction`) so it
+                    // rides every turn the way the WhatsApp reframe does; PUBLIC stays
+                    // plain (echo-leak).
+                    const composed = composeContent(payload, ROLE);
+                    console.error(`[telegram:inbound] op=delivered key=${KEY.slice(0, 8)} role=${ROLE} source=${payload.source ?? 'user'} payloadBytes=${composed.payloadBytes}`);
+                    // JSONL byte offset at turn start, captured before the emit so the
+                    // follower catches every line this turn produces. Resilient: a
+                    // missing/odd file yields 0 and the follow bails fast.
+                    let turnStartOffset = 0;
+                    if (jsonlPath) {
+                        try {
+                            turnStartOffset = statSync(jsonlPath).size;
+                        }
+                        catch {
+                            turnStartOffset = 0;
+                        }
+                    }
+                    await mcp.notification({
+                        method: 'notifications/claude/channel',
+                        params: { content: composed.content },
+                    });
+                    // Confirm receipt so the gateway marks this message delivered
+                    // instead of timing out as drain-undelivered. Retry within the
+                    // gateway's ack window; log only on final give-up.
+                    const acked = await postWithRetry(async () => {
+                        try {
+                            const r = await fetch(`${GATEWAY_URL}/tg-channel/received`, {
+                                method: 'POST',
+                                headers: { 'content-type': 'application/json' },
+                                body: JSON.stringify(buildReceivedPostBody(KEY, payload.messageId)),
+                            });
+                            return r.ok;
+                        }
+                        catch {
+                            return false;
+                        }
+                    }, {
+                        attempts: RECEIPT_ACK_ATTEMPTS,
+                        delayMs: RECEIPT_ACK_DELAY_MS,
+                        sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+                    });
+                    if (!acked) {
+                        console.error(`[telegram:inbound] op=receipt-ack-failed key=${KEY} messageId=${payload.messageId} attempts=${RECEIPT_ACK_ATTEMPTS}`);
+                    }
+                    // Count this inbound and ensure the session-long follower is running.
+                    // Each end_turn the follower reports posts a turn-end decision (and
+                    // decrements) while an inbound is outstanding. Delivery is reply-tool-
+                    // only (Task 1464): the gateway stamps the lifeline and never sends, so
+                    // only the `replied` decision travels — no answer text leaves this
+                    // server. Re-resolve the path lazily when it was absent at startup
+                    // (brand-new session whose JSONL appears on the first turn). The
+                    // follower is detached so the SSE read loop keeps receiving.
+                    if (!jsonlPath && SESSION_ID)
+                        jsonlPath = findJsonlForSessionId(SESSION_ID);
+                    if (jsonlPath) {
+                        pendingTurns++;
+                        if (!followerStarted) {
+                            followerStarted = true;
+                            const followPath = jsonlPath;
+                            const followStart = turnStartOffset;
+                            void followTurnEnds(followPath, followStart, (outcome) => {
+                                if (pendingTurns <= 0)
+                                    return;
+                                pendingTurns--;
+                                // Task 1464 — delivery is reply-tool-only: the gateway sends
+                                // nothing at turn-end, so only the `replied` decision travels.
+                                // `outcome.finalText` is not shipped (no fallback delivery, no
+                                // outbound guard needed here).
+                                void fetch(`${GATEWAY_URL}/tg-channel/turn-end`, {
+                                    method: 'POST',
+                                    headers: { 'content-type': 'application/json' },
+                                    body: JSON.stringify(buildTurnEndPostBody(KEY, SESSION_ID, outcome.replied)),
+                                }).catch(() => { });
+                            }).finally(() => {
+                                // The follower settles only on a stat failure (file unreadable —
+                                // the session is ending). Clear any outstanding count so a
+                                // replacement follower started by a later inbound begins clean.
+                                pendingTurns = 0;
+                                followerStarted = false;
+                            });
+                        }
+                    }
+                }
+            }
+            console.error('[telegram-channel] inbound stream closed by gateway; reconnecting');
+        }
+        catch (err) {
+            console.error(`[telegram-channel] inbound stream error: ${err instanceof Error ? err.message : String(err)}; reconnecting`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 2000));
+    }
+}
+export async function main() {
+    await mcp.connect(new StdioServerTransport());
+    // Readiness is announced inside subscribeInbound, once the SSE link is up
+    // AND the MCP client has completed initialization — never before, or the
+    // gateway would drain into a stream whose emissions the harness cannot
+    // receive yet.
+    await subscribeInbound();
+}
+// Run only when executed directly (node dist/server.js); importable for tests.
+// realpath the argv side: Node's ESM loader resolves the entry to its real
+// path for import.meta.url, so a symlinked invocation path would otherwise
+// silently skip main().
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+    main().catch((err) => {
+        console.error(`[telegram-channel] fatal: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=server.js.map

package/payload/platform/services/telegram-channel/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,gFAAgF;AAChF,0EAA0E;AAC1E,eAAe;AACf,2EAA2E;AAC3E,uDAAuD;AACvD,4EAA4E;AAC5E,kFAAkF;AAClF,iFAAiF;AACjF,iFAAiF;AACjF,EAAE;AACF,oEAAoE;AACpE,gFAAgF;AAChF,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAClG,OAAO,EACL,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,aAAa,GAEd,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEvH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,GAAG,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;AAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAE3E,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAA;AAC1D,IAAI,SAAS,GAAkB,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACpF,gFAAgF;AAChF,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,WAAW;AACX,IAAI,YAAY,GAAG,CAAC,CAAA;AACpB,IAAI,eAAe,GAAG,KAAK,CAAA;AAE3B,yEAAyE;AACzE,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAC9B,MAAM,oBAAoB,GAAG,IAAI,CAAA;AAEjC,yEAAyE;AACzE,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,yDAAyD;AACzD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAC3B,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC9C;IACE,YAAY,EAAE;QACZ,YAAY,EAAE;YACZ,gBAAgB,EAAE,EAAE;SACrB;QACD,KAAK,EAAE,EAAE;KACV;IACD,YAAY,EAAE,YAAY;CAC3B,CACF,CAAA;AAED,+EAA+E;AAC/E,oEAAoE;AACpE,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,yDAAyD;AACzD,IAAI,eAA4B,CAAA;AAChC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAChD,eAAe,GAAG,OAAO,CAAA;AAC3B,CAAC,CAAC,CAAA;AACF,GAAG,CAAC,aAAa,GAAG,GAAG,EAAE;IACvB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAClD,eAAe,EAAE,CAAA;AACnB,CAAC,CAAA;AAED,GAAG,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACzD,KAAK,EAAE;QACL;YACE,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC;YACvC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE;gBACjF,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;KACF;CACF,CAAC,CAAC,CAAA;AAEH,yEAAyE;AACzE,sCAAsC;AACtC,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACvD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,YAAY,CAAC,CAAC,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IAC7H,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,GAAG,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IACzD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAI,GAAG,CAAC,MAAM,CAAC,SAAgC,EAAE,IAAI,CAAA;QAClE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAChF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;SACrD,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC/C,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;IACtD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;AACrD,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,mBAAmB;AACnB,KAAK,UAAU,SAAS;IACtB,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACnC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,GAAG,GAAG,GAAG,WAAW,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAA;IAC9E,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,gEAAgE;YAChE,sEAAsE;YACtE,oEAAoE;YACpE,iEAAiE;YACjE,oEAAoE;YACpE,2DAA2D;YAC3D,8DAA8D;YAC9D,4DAA4D;YAC5D,MAAM,WAAW,CAAA;YACjB,MAAM,SAAS,EAAE,CAAA;YACjB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;YACjC,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,SAAS,CAAC;gBACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACnC,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;gBAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;oBACrE,IAAI,CAAC,QAAQ;wBAAE,SAAQ;oBACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;oBAClD,IAAI,CAAC,IAAI;wBAAE,SAAQ,CAAC,iBAAiB;oBACrC,IAAI,OAAuB,CAAA;oBAC3B,IAAI,CAAC;wBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;oBAC5B,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAQ;oBACV,CAAC;oBACD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;wBAAE,SAAQ;oBACvC,4DAA4D;oBAC5D,oEAAoE;oBACpE,mEAAmE;oBACnE,qBAAqB;oBACrB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;oBAC9C,OAAO,CAAC,KAAK,CACX,uCAAuC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,WAAW,OAAO,CAAC,MAAM,IAAI,MAAM,iBAAiB,QAAQ,CAAC,YAAY,EAAE,CAC/I,CAAA;oBACD,mEAAmE;oBACnE,+DAA+D;oBAC/D,uDAAuD;oBACvD,IAAI,eAAe,GAAG,CAAC,CAAA;oBACvB,IAAI,SAAS,EAAE,CAAC;wBACd,IAAI,CAAC;4BACH,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAA;wBAC5C,CAAC;wBAAC,MAAM,CAAC;4BACP,eAAe,GAAG,CAAC,CAAA;wBACrB,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,CAAC,YAAY,CAAC;wBACrB,MAAM,EAAE,8BAAuC;wBAC/C,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;qBACtC,CAAC,CAAA;oBACF,8DAA8D;oBAC9D,+DAA+D;oBAC/D,mDAAmD;oBACnD,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,IAAI,EAAE;wBACT,IAAI,CAAC;4BACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,sBAAsB,EAAE;gCAC1D,MAAM,EAAE,MAAM;gCACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gCAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;6BACpE,CAAC,CAAA;4BACF,OAAO,CAAC,CAAC,EAAE,CAAA;wBACb,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,KAAK,CAAA;wBACd,CAAC;oBACH,CAAC,EACD;wBACE,QAAQ,EAAE,oBAAoB;wBAC9B,OAAO,EAAE,oBAAoB;wBAC7B,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;qBACrD,CACF,CAAA;oBACD,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,OAAO,CAAC,KAAK,CACX,gDAAgD,GAAG,cAAc,OAAO,CAAC,SAAS,aAAa,oBAAoB,EAAE,CACtH,CAAA;oBACH,CAAC;oBACD,sEAAsE;oBACtE,oEAAoE;oBACpE,uEAAuE;oBACvE,wEAAwE;oBACxE,mEAAmE;oBACnE,mEAAmE;oBACnE,iEAAiE;oBACjE,6DAA6D;oBAC7D,IAAI,CAAC,SAAS,IAAI,UAAU;wBAAE,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;oBAC3E,IAAI,SAAS,EAAE,CAAC;wBACd,YAAY,EAAE,CAAA;wBACd,IAAI,CAAC,eAAe,EAAE,CAAC;4BACrB,eAAe,GAAG,IAAI,CAAA;4BACtB,MAAM,UAAU,GAAG,SAAS,CAAA;4BAC5B,MAAM,WAAW,GAAG,eAAe,CAAA;4BACnC,KAAK,cAAc,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;gCACvD,IAAI,YAAY,IAAI,CAAC;oCAAE,OAAM;gCAC7B,YAAY,EAAE,CAAA;gCACd,6DAA6D;gCAC7D,+DAA+D;gCAC/D,+DAA+D;gCAC/D,+BAA+B;gCAC/B,KAAK,KAAK,CAAC,GAAG,WAAW,sBAAsB,EAAE;oCAC/C,MAAM,EAAE,MAAM;oCACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oCAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;iCAC7E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;4BACpB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gCACd,iEAAiE;gCACjE,2DAA2D;gCAC3D,gEAAgE;gCAChE,YAAY,GAAG,CAAC,CAAA;gCAChB,eAAe,GAAG,KAAK,CAAA;4BACzB,CAAC,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAA;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAC7G,CAAA;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAC7C,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,eAAe;IACf,MAAM,gBAAgB,EAAE,CAAA;AAC1B,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,wBAAwB;AACxB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/payload/platform/services/telegram-channel/dist/turn-follow.d.ts

@@ -0,0 +1,28 @@
+export interface TurnOutcome {
+    /** A telegram reply tool_use appeared in the turn. */
+    replied: boolean;
+    /** Text of the end_turn assistant message ('' when none / not yet reached). */
+    finalText: string;
+    /** The turn reached an assistant end_turn. */
+    reachedEndTurn: boolean;
+}
+/** Fold one turn's JSONL line strings into the delivery decision. Pure. */
+export declare function reduceTurnFromLines(lines: string[]): TurnOutcome;
+export type OnTurnEnd = (outcome: TurnOutcome) => void;
+/**
+ * Walk `${CLAUDE_CONFIG_DIR}/projects/<slug>/` for `${sessionId}.jsonl` (live
+ * and archived). Returns the first match or null. Inlined from
+ * whatsapp-channel/jsonl-watch.ts (itself inlined from
+ * claude-session-manager/src/jsonl-path.ts) to avoid a cross-package dep.
+ */
+export declare function findJsonlForSessionId(sessionId: string, env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Tail `jsonlPath` from `startOffset` for the life of the session, invoking
+ * `onTurnEnd` once for every assistant end_turn with that turn's outcome. It
+ * segments the JSONL at each end_turn so a follow-on turn produced from a
+ * mid-turn-queued message is reported too. The process dies with the session,
+ * so there is no per-turn timeout; the promise resolves only when the file
+ * becomes unreadable. Never rejects. (Mirror of the WhatsApp twin.)
+ */
+export declare function followTurnEnds(jsonlPath: string, startOffset: number, onTurnEnd: OnTurnEnd): Promise<void>;
+//# sourceMappingURL=turn-follow.d.ts.map

package/payload/platform/services/telegram-channel/dist/turn-follow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-follow.d.ts","sourceRoot":"","sources":["../src/turn-follow.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAA;IAChB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB,8CAA8C;IAC9C,cAAc,EAAE,OAAO,CAAA;CACxB;AAUD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAoChE;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,CAAA;AAkBtD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAmBf;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAgEf"}