@rubytech/create-maxy-code 0.1.581 → 0.1.583

package/payload/platform/plugins/telegram/mcp/dist/lib/business-window-store.js

@@ -0,0 +1,116 @@
+import { join, resolve } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import { resolveAccountDir } from "./account-write.js";
+/** Task 2615 — the read side of Telegram's 24-hour business reply window.
+ *
+ *  `BusinessBotRights.can_reply` grants the right to "send and edit messages in
+ *  the private chats that had incoming messages in the last 24 hours". Outside
+ *  that window Telegram refuses the send, and nothing is emitted when the window
+ *  closes, so a customer simply becomes unanswerable with no event anywhere.
+ *  Deciding before the call is what turns that silence into a refusal the agent
+ *  can act on.
+ *
+ *  The platform writes the conversation (`platform/ui/app/lib/telegram/
+ *  message-store.ts`); this reads it back. The window constant, the row shape and
+ *  the path derivation are duplicated across the boundary on purpose — the plugin
+ *  cannot import from `platform/ui/app`, the same boundary that already
+ *  duplicates the webhook secret path, the card store, the live-location store
+ *  and the business connection — and
+ *  `ui/app/lib/telegram/__tests__/business-window-boundary.test.ts` asserts the
+ *  two derivations agree.
+ *
+ *  TWO ROOTS, and they are not the same one. The connection record sits in the
+ *  ACCOUNT dir (`data/accounts/<accountId>`); the conversation store is its
+ *  SIBLING, `data/telegram-messages/<accountId>`. `resolveAccountDir` is still
+ *  the containment authority: its refusal is what stops a traversal in the
+ *  account id from reaching outside the install.
+ */
+/** Telegram's window, in seconds. Restated rather than imported, for the reason
+ *  the header gives; the boundary test is what keeps it equal to the platform's
+ *  `BUSINESS_REPLY_WINDOW_S`. */
+export const BUSINESS_REPLY_WINDOW_S = 86_400;
+/** The business conversation's key. Mirrors `telegramBusinessChannelKey`. */
+export function businessChannelKey(botId, chatId) {
+    return `${botId}:biz:${chatId}`;
+}
+function conversationFile(platformRoot, accountId, channelKey) {
+    // The guard, not the path: a traversal in the account id must read as no
+    // conversation rather than reach outside the install.
+    if (!resolveAccountDir(platformRoot, accountId).ok)
+        return null;
+    // Both halves are Telegram numeric ids around the literal `biz`, so nothing
+    // here can carry a separator. Mirrors `isStorableChannelKey`.
+    if (!/^-?\d+:biz:-?\d+$/.test(channelKey))
+        return null;
+    return join(resolve(platformRoot, "..", "data", "telegram-messages", accountId), `${channelKey.replaceAll(":", "_")}.jsonl`);
+}
+/** The newest Telegram-clock second among INBOUND rows in one business chat, or
+ *  null when the chat holds none carrying that field.
+ *
+ *  Inbound only: the window runs from what the CUSTOMER last sent, and counting
+ *  an agent reply would extend it on every send so the refusal could never fire.
+ *
+ *  Null rather than 0 for "nothing to measure from". Zero is a real Unix second
+ *  and would read as 1970, refusing every reply in a conversation whose rows
+ *  predate the field. */
+export function newestInboundTelegramDate(platformRoot, accountId, channelKey) {
+    const path = conversationFile(platformRoot, accountId, channelKey);
+    if (path === null || !existsSync(path))
+        return null;
+    let newest = null;
+    try {
+        for (const line of readFileSync(path, "utf-8").split("\n")) {
+            if (!line.trim())
+                continue;
+            let row;
+            try {
+                row = JSON.parse(line);
+            }
+            catch {
+                // A partial write from a crash mid-append is skipped, never fatal.
+                continue;
+            }
+            if (row.kind === "update")
+                continue;
+            if (row.fromMe === true)
+                continue;
+            const d = row.telegramDate;
+            if (typeof d !== "number" || !Number.isFinite(d))
+                continue;
+            if (newest === null || d > newest)
+                newest = d;
+        }
+    }
+    catch {
+        // An unreadable store reads as no inbound, so the tool refuses by name
+        // rather than taking the call down over a file the caller never sees.
+        return null;
+    }
+    return newest;
+}
+export function businessWindowVerdict(input) {
+    if (input.newestInboundDate === null) {
+        return { allowed: false, ageS: null, reason: "no-inbound" };
+    }
+    const ageS = Math.floor(input.nowMs / 1000) - input.newestInboundDate;
+    // Inclusive at the boundary: Telegram's wording is "in the last 24 hours".
+    if (ageS > BUSINESS_REPLY_WINDOW_S)
+        return { allowed: false, ageS, reason: "lapsed" };
+    return { allowed: true, ageS, reason: "ok" };
+}
+/** The refusal the agent reads. It names the WINDOW and the chat, never a
+ *  parameter: there is no argument the caller could add to make this send work,
+ *  which is the shape Task 2611 gave `ask.ts` for a checklist with no
+ *  connection. */
+export function businessWindowRefusal(chatId, ageS) {
+    if (ageS === null) {
+        return (`Cannot send to business chat ${chatId}: no message has ever been received from it. ` +
+            "Telegram allows a business account reply only in a chat that sent an incoming " +
+            "message in the last 24 hours.");
+    }
+    const hours = Math.floor(ageS / 3600);
+    return (`Cannot send to business chat ${chatId}: the last message from it arrived ${hours} hours ago. ` +
+        "Telegram allows a business account reply only within 24 hours of an incoming message, " +
+        "and that window has closed.");
+}
+//# sourceMappingURL=business-window-store.js.map

package/payload/platform/plugins/telegram/mcp/dist/lib/business-window-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-window-store.js","sourceRoot":"","sources":["../../src/lib/business-window-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;iCAEiC;AACjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAuB;IACvE,OAAO,GAAG,KAAK,QAAQ,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,gBAAgB,CACvB,YAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,yEAAyE;IACzE,sDAAsD;IACtD,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAChE,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,IAAI,CACT,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC,EACnE,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;yBAQyB;AACzB,MAAM,UAAU,yBAAyB,CACvC,YAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,GAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC3D,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACtE,2EAA2E;IAC3E,IAAI,IAAI,GAAG,uBAAuB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;;kBAGkB;AAClB,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAE,IAAmB;IAChF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,CACL,gCAAgC,MAAM,+CAA+C;YACrF,gFAAgF;YAChF,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACtC,OAAO,CACL,gCAAgC,MAAM,sCAAsC,KAAK,cAAc;QAC/F,wFAAwF;QACxF,6BAA6B,CAC9B,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Task 2617 — may this bot send to this chat id?
+ *
+ * THE TWIN of platform/ui/app/lib/telegram/chat-send-policy.ts. The plugin cannot
+ * import from platform/ui/app, so the rule lives twice; the two are held in step
+ * by one shared table of cases asserted in both test files. A divergence means the
+ * agent's tools and the platform's scheduled send disagree about what may be
+ * posted to, which is the failure that table exists to catch.
+ *
+ * THE PROBLEM. A Telegram chat id cannot tell a channel from a supergroup: both
+ * are `-100`-prefixed, and no local check separates them. So the gate is keyed on
+ * the prefix and closed by BOTH allowlists — a `-100` id the operator named in
+ * `allowChannels` (Task 2617) or in `allowGroups` (Task 2616) is a broadcast
+ * surface somebody sanctioned; one in neither is a broadcast surface nobody did.
+ *
+ * WHY BEFORE THE NETWORK CALL. A channel post reaches every subscriber and cannot
+ * be unsent. A gate that fired on Telegram's verdict would be a record of damage
+ * rather than a refusal, so `checkTelegramChatSend` is pure and every caller
+ * applies it before building a request.
+ */
+export type ChatSendVerdict = {
+    allowed: true;
+    reason: "not-broadcast" | "allowlist-match";
+} | {
+    allowed: false;
+    reason: "not-in-allowChannels";
+};
+export declare function checkTelegramChatSend(params: {
+    chatId: number;
+    allowChannels: readonly number[];
+    allowGroups: readonly number[];
+}): ChatSendVerdict;
+/**
+ * The gate as each tool applies it: read the allowlists, decide, print the line,
+ * and hand back the refusal text when refused.
+ *
+ * One home, because six tools applying one rule six ways is the drift this task
+ * exists to prevent. The line is printed on BOTH outcomes so an allowed send and a
+ * refused one are the same grep, and `messageId=none` is always present because a
+ * field that appears only on some outcomes cannot be aggregated on.
+ */
+export declare function gateChatSend(input: {
+    platformRoot: string;
+    accountId: string;
+    botId: string;
+    chatId: string | number;
+    log: (line: string) => void;
+}): {
+    allowed: true;
+} | {
+    allowed: false;
+    text: string;
+};
+//# sourceMappingURL=chat-send-policy.d.ts.map

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-send-policy.d.ts","sourceRoot":"","sources":["../../src/lib/chat-send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAAA;CAAE,GAC9D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAEvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,GAAG,eAAe,CAQlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiDvD"}

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.js

@@ -0,0 +1,90 @@
+/**
+ * Task 2617 — may this bot send to this chat id?
+ *
+ * THE TWIN of platform/ui/app/lib/telegram/chat-send-policy.ts. The plugin cannot
+ * import from platform/ui/app, so the rule lives twice; the two are held in step
+ * by one shared table of cases asserted in both test files. A divergence means the
+ * agent's tools and the platform's scheduled send disagree about what may be
+ * posted to, which is the failure that table exists to catch.
+ *
+ * THE PROBLEM. A Telegram chat id cannot tell a channel from a supergroup: both
+ * are `-100`-prefixed, and no local check separates them. So the gate is keyed on
+ * the prefix and closed by BOTH allowlists — a `-100` id the operator named in
+ * `allowChannels` (Task 2617) or in `allowGroups` (Task 2616) is a broadcast
+ * surface somebody sanctioned; one in neither is a broadcast surface nobody did.
+ *
+ * WHY BEFORE THE NETWORK CALL. A channel post reaches every subscriber and cannot
+ * be unsent. A gate that fired on Telegram's verdict would be a record of damage
+ * rather than a refusal, so `checkTelegramChatSend` is pure and every caller
+ * applies it before building a request.
+ */
+import { readBotChatAllowlists } from "./account-token.js";
+const TAG = "[telegram-outbound]";
+/** Telegram's own prefix for a supergroup or a channel. A private chat id is
+ *  positive and a basic group id is negative without it, so this is the exact set
+ *  of ids that COULD be a channel. Compared as digits rather than by magnitude:
+ *  the question is what Telegram's id scheme says, not how large the number is. */
+const BROADCAST_PREFIX = "-100";
+export function checkTelegramChatSend(params) {
+    if (!String(params.chatId).startsWith(BROADCAST_PREFIX)) {
+        return { allowed: true, reason: "not-broadcast" };
+    }
+    if (params.allowChannels.includes(params.chatId) || params.allowGroups.includes(params.chatId)) {
+        return { allowed: true, reason: "allowlist-match" };
+    }
+    return { allowed: false, reason: "not-in-allowChannels" };
+}
+/**
+ * The gate as each tool applies it: read the allowlists, decide, print the line,
+ * and hand back the refusal text when refused.
+ *
+ * One home, because six tools applying one rule six ways is the drift this task
+ * exists to prevent. The line is printed on BOTH outcomes so an allowed send and a
+ * refused one are the same grep, and `messageId=none` is always present because a
+ * field that appears only on some outcomes cannot be aggregated on.
+ */
+export function gateChatSend(input) {
+    // An @username addresses a CHANNEL or a supergroup and nothing else — Telegram
+    // documents `chat_id` as "the target chat or username of the target channel (in
+    // the format @channelusername)", and the tool schema offers both forms to the
+    // model. It cannot be resolved to a numeric id without asking Telegram, and the
+    // allowlists hold numeric ids, so there is nothing local to check it against.
+    //
+    // Refused rather than passed through. Passing it through would leave every
+    // allowlist in this file bypassable by naming the same channel a different way,
+    // which is the whole gate defeated by a string. A private chat cannot be
+    // addressed this way at all, so nothing else is lost.
+    const named = typeof input.chatId === "string" ? input.chatId.trim() : "";
+    if (named.startsWith("@")) {
+        input.log(`${TAG} op=channel-send botId=${input.botId} chatId=${named} ` +
+            `allowed=no reason=username-not-allowlistable messageId=none`);
+        return {
+            allowed: false,
+            text: `Refused: "${named}" names a channel or supergroup by @username, and this bot's ` +
+                `allowlist holds numeric chat ids, so there is nothing to check it against. ` +
+                `Nothing was sent. Use the numeric chat id, and make sure it is in allowChannels ` +
+                `(for a channel) or allowGroups (for a group) on bot ${input.botId}.`,
+        };
+    }
+    const chatId = Number(input.chatId);
+    // A chat id Telegram will reject anyway, and NOT an @username — that is refused
+    // above. Passed through so Telegram's own 400 is the verdict on a malformed id,
+    // rather than this gate inventing a refusal for a question it was not given.
+    if (!Number.isFinite(chatId))
+        return { allowed: true };
+    const lists = readBotChatAllowlists(input.platformRoot, input.accountId, input.botId);
+    const verdict = checkTelegramChatSend({ chatId, ...lists });
+    input.log(`${TAG} op=channel-send botId=${input.botId} chatId=${chatId} ` +
+        `allowed=${verdict.allowed ? "yes" : "no"} reason=${verdict.reason} messageId=none`);
+    if (verdict.allowed)
+        return { allowed: true };
+    return {
+        allowed: false,
+        text: `Refused: ${chatId} is a Telegram channel or supergroup that is not on this bot's ` +
+            `allowlist, so nothing was sent. A channel post reaches every subscriber and cannot ` +
+            `be unsent, which is why this is refused rather than attempted. To allow it, add ` +
+            `${chatId} to allowChannels (if it is a channel) or allowGroups (if it is a group) ` +
+            `on bot ${input.botId}.`,
+    };
+}
+//# sourceMappingURL=chat-send-policy.js.map

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-send-policy.js","sourceRoot":"","sources":["../../src/lib/chat-send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAElC;;;mFAGmF;AACnF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAMhC,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAM5B;IACC,+EAA+E;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,gFAAgF;IAChF,8EAA8E;IAC9E,EAAE;IACF,2EAA2E;IAC3E,gFAAgF;IAChF,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CACP,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,WAAW,KAAK,GAAG;YAC5D,6DAA6D,CAChE,CAAC;QACF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EACF,aAAa,KAAK,+DAA+D;gBACjF,6EAA6E;gBAC7E,kFAAkF;gBAClF,uDAAuD,KAAK,CAAC,KAAK,GAAG;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,gFAAgF;IAChF,gFAAgF;IAChF,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,GAAG,CACP,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,WAAW,MAAM,GAAG;QAC7D,WAAW,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,OAAO,CAAC,MAAM,iBAAiB,CACtF,CAAC;IACF,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EACF,YAAY,MAAM,iEAAiE;YACnF,qFAAqF;YACrF,kFAAkF;YAClF,GAAG,MAAM,2EAA2E;YACpF,UAAU,KAAK,CAAC,KAAK,GAAG;KAC3B,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.d.ts

@@ -1,3 +1,5 @@
+export { TELEGRAM_ALLOWED_UPDATES, setTelegramWebhook as setWebhook, getTelegramWebhookInfo as getWebhookInfo, type WebhookInfo, } from "../../../../../lib/telegram-managed-bot/dist/index.js";
+import type { WebhookInfo } from "../../../../../lib/telegram-managed-bot/dist/index.js";
 export interface TelegramSendOptions {
     chatId: string | number;
     text: string;
@@ -42,34 +44,6 @@ export declare function sendMessage(botToken: string, options: TelegramSendOptio
     messageId?: number;
     error?: string;
 }>;
-/**
- * Register a webhook URL with Telegram and generate a cryptographic secret.
- *
- * The secret is:
- *   1. Generated via crypto.randomBytes (64 hex chars)
- *   2. Passed to the Telegram Bot API as secret_token
- *   3. Written to secretFilePath on disk ONLY after the API confirms success
- *
- * Telegram sends this secret in the X-Telegram-Bot-Api-Secret-Token header
- * on every webhook delivery. The webhook route validates it before processing.
- *
- * If secretFilePath is omitted, no secret is generated (backward compat for tests).
- */
-export declare function setWebhook(botToken: string, webhookUrl: string, secretFilePath?: string, fetchImpl?: typeof fetch): Promise<{
-    ok: boolean;
-    secret?: string;
-    error?: string;
-}>;
-export interface WebhookInfo {
-    url: string;
-    pendingUpdateCount: number;
-    /** Unix seconds of the most recent delivery error Telegram saw, 0 when it
-     *  reports none. Telegram KEEPS this across a re-registration, which is why
-     *  the verdict compares it against the moment we registered. */
-    lastErrorDate: number;
-    lastErrorMessage?: string;
-}
-export declare function getWebhookInfo(botToken: string, fetchImpl?: typeof fetch): Promise<WebhookInfo>;
 export interface WebhookVerdict {
     reachable: boolean;
     /** Telegram's own error text, empty when reachable. */

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,KAAK,CACpB,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb;;mFAE2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,kDAAkD;QAClD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;qFAE6E;QAC7E,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CACH,CAAC;CACH;AAED;;0BAE0B;AAC1B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;oDAKoD;AACpD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,yBAAyB,EAAE,EAAE,GAClC,sBAAsB,CAWxB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,MAAM,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmC3D;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;oEAEgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;6CAc6C;AAC7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,cAAc,CAKzF"}
+{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,wBAAwB,EACxB,kBAAkB,IAAI,UAAU,EAChC,sBAAsB,IAAI,cAAc,EACxC,KAAK,WAAW,GACjB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAIzF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,KAAK,CACpB,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb;;mFAE2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,kDAAkD;QAClD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;qFAE6E;QAC7E,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CACH,CAAC;CACH;AAED;;0BAE0B;AAC1B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;oDAKoD;AACpD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,yBAAyB,EAAE,EAAE,GAClC,sBAAsB,CAWxB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAGD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;6CAc6C;AAC7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,cAAc,CAKzF"}

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.js

@@ -1,6 +1,11 @@
-import { randomBytes } from "node:crypto";
-import { writeFileSync, mkdirSync } from "node:fs";
-import { dirname } from "node:path";
+// Task 2618 — `TELEGRAM_ALLOWED_UPDATES` and `setWebhook` MOVED to
+// platform/lib/telegram-managed-bot and are re-exported here, so every existing
+// import of this module keeps its path. The move exists because the UI webhook
+// route needs both to register a newly provisioned bot, and UI production code
+// does not import plugin source: the alternative was a second copy of the
+// allowed-updates list, and two lists that must agree is the drift Task 2612
+// spent a task removing.
+export { TELEGRAM_ALLOWED_UPDATES, setTelegramWebhook as setWebhook, getTelegramWebhookInfo as getWebhookInfo, } from "../../../../../lib/telegram-managed-bot/dist/index.js";
 const TELEGRAM_API = "https://api.telegram.org";
 /** Task 2501 — the agent-facing shape mapped to the Bot API's. Extracted from the
  *  telegram-message tool so the mapping is testable without an account
@@ -37,56 +42,6 @@ export async function sendMessage(botToken, options) {
     }
     return { ok: true, messageId: data.result?.message_id };
 }
-/**
- * Register a webhook URL with Telegram and generate a cryptographic secret.
- *
- * The secret is:
- *   1. Generated via crypto.randomBytes (64 hex chars)
- *   2. Passed to the Telegram Bot API as secret_token
- *   3. Written to secretFilePath on disk ONLY after the API confirms success
- *
- * Telegram sends this secret in the X-Telegram-Bot-Api-Secret-Token header
- * on every webhook delivery. The webhook route validates it before processing.
- *
- * If secretFilePath is omitted, no secret is generated (backward compat for tests).
- */
-export async function setWebhook(botToken, webhookUrl, secretFilePath, fetchImpl = fetch) {
-    const secret = secretFilePath ? randomBytes(32).toString("hex") : undefined;
-    const body = { url: webhookUrl };
-    if (secret) {
-        body.secret_token = secret;
-    }
-    const res = await fetchImpl(`${TELEGRAM_API}/bot${botToken}/setWebhook`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-    });
-    const data = (await res.json());
-    if (!data.ok) {
-        return { ok: false, error: data.description ?? "Failed to set webhook" };
-    }
-    // Write secret to disk only after Telegram confirms the webhook registration.
-    // This prevents orphaned secret files when the API call fails, and avoids
-    // overwriting a working secret during a failed re-registration attempt.
-    if (secret && secretFilePath) {
-        mkdirSync(dirname(secretFilePath), { recursive: true });
-        writeFileSync(secretFilePath, secret, { mode: 0o600 });
-        console.error(`[telegram] webhook secret written to ${secretFilePath} (${secret.length} chars)`);
-    }
-    return { ok: true, secret };
-}
-export async function getWebhookInfo(botToken, fetchImpl = fetch) {
-    const res = await fetchImpl(`${TELEGRAM_API}/bot${botToken}/getWebhookInfo`);
-    const data = (await res.json());
-    return {
-        url: data.result.url,
-        pendingUpdateCount: data.result.pending_update_count,
-        lastErrorDate: data.result.last_error_date ?? 0,
-        ...(data.result.last_error_message !== undefined
-            ? { lastErrorMessage: data.result.last_error_message }
-            : {}),
-    };
-}
 /** Task 2560 — a registration is unreachable when Telegram reports a delivery
  *  error it saw AT OR AFTER the moment we registered. An error dated before the
  *  stamp belongs to the previous URL: Telegram keeps `last_error_date` and

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.js.map

@@ -1 +1 @@
-{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAqChD;;;;;oDAKoD;AACpD,MAAM,UAAU,mBAAmB,CACjC,IAAmC;IAEnC,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,OAAO,QAAQ,cAAc,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACvC,YAAY,EAAE,OAAO,CAAC,WAAW;gBAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,wBAAwB,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,UAAkB,EAClB,cAAuB,EACvB,YAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5E,MAAM,IAAI,GAA2B,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IACzD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,YAAY,OAAO,QAAQ,aAAa,EAAE;QACvE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,uBAAuB,EAAE,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CACX,wCAAwC,cAAc,KAAK,MAAM,CAAC,MAAM,SAAS,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,YAA0B,KAAK;IAE/B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAO7B,CAAC;IACF,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;QACpB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;QACpD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;;;;6CAc6C;AAC7C,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,eAAuB;IACvE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,aAAa,IAAI,eAAe,EAAE,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC"}
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,yBAAyB;AACzB,OAAO,EACL,wBAAwB,EACxB,kBAAkB,IAAI,UAAU,EAChC,sBAAsB,IAAI,cAAc,GAEzC,MAAM,uDAAuD,CAAC;AAG/D,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAqChD;;;;;oDAKoD;AACpD,MAAM,UAAU,mBAAmB,CACjC,IAAmC;IAEnC,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,OAAO,QAAQ,cAAc,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACvC,YAAY,EAAE,OAAO,CAAC,WAAW;gBAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,wBAAwB,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AASD;;;;;;;;;;;;;;6CAc6C;AAC7C,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,eAAuB;IACvE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,aAAa,IAAI,eAAe,EAAE,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/tools/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;sBAGsB;AACtB,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA0EjF"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;sBAGsB;AACtB,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA4FjF"}

package/payload/platform/plugins/telegram/mcp/dist/tools/api.js

@@ -1,6 +1,7 @@
 import { checkMethod } from "../lib/api-guard.js";
 import { callBotApi } from "../lib/bot-api.js";
 import { listRegisteredBots, resolveBotToken } from "../lib/account-token.js";
+import { gateChatSend } from "../lib/chat-send-policy.js";
 const TAG = "[telegram-api]";
 /** One tool for all 185 Bot API methods. Resolution order is: no account, then
  *  the refusal list, then the bot's token, then the call itself. Each stop
@@ -41,6 +42,24 @@ export async function telegramApi(p, deps) {
                 : "No Telegram bot is registered on this account. Run the telegram:configure skill first.",
         };
     }
+    // Task 2617 — keyed on the PRESENCE of `chat_id`, never on the method name. A
+    // method allowlist would need extending every time Telegram adds a send-shaped
+    // method, and the gap between an unlisted method and a real send is exactly the
+    // hole this gate exists to close. A `chat_id` that is neither string nor number
+    // is passed through: Telegram's own 400 is the right verdict on a malformed id,
+    // and inventing a refusal for it would decide a question this task was not given.
+    const rawChatId = p.params?.chat_id;
+    if (typeof rawChatId === "string" || typeof rawChatId === "number") {
+        const gate = gateChatSend({
+            platformRoot: deps.platformRoot,
+            accountId: deps.accountId,
+            botId: p.botId,
+            chatId: rawChatId,
+            log,
+        });
+        if (!gate.allowed)
+            return { ok: false, isError: true, text: gate.text };
+    }
     const fileCount = p.files ? Object.keys(p.files).length : 0;
     log(`${TAG} op=call callId=${callId} method=${p.method} listed=${verdict.listed} files=${fileCount}`);
     let envelope;

package/payload/platform/plugins/telegram/mcp/dist/tools/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAyB7B;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAY,EAAE,IAAa;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,GAAG,yBAAyB,MAAM,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,iFAAiF;gBACjF,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,GAAG,sBAAsB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,8BAA8B,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC1E,8BAA8B,OAAO,CAAC,KAAK,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,YAAY,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,KAAK,eAAe,KAAK,CAAC,MAAM,EAAE,CAC1G,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,MAAM;gBAChB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,gDAAgD,KAAK;qBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,CAAC,CAAC,wFAAwF;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,GAAG,CACD,GAAG,GAAG,mBAAmB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,UAAU,SAAS,EAAE,CACjG,CAAC;IAEF,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE;YAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,GAAG,oBAAoB,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,uBAAuB,QAAQ,CAAC,UAAU,IAAI,GAAG,iBAAiB,QAAQ,CAAC,WAAW,IAAI,EAAE,GAAG,CACpJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,oBAAoB,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,MAAM,QAAQ,CAAC,WAAW,IAAI,gBAAgB,EAAE;SACxH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,2BAA2B;YAC9B,OAAO,kKAAkK,CAAC;QAC5K,KAAK,iCAAiC;YACpC,OAAO,uIAAuI,CAAC;QACjJ;YACE,OAAO,gDAAgD,CAAC;IAC5D,CAAC;AACH,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAyB7B;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAY,EAAE,IAAa;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,GAAG,yBAAyB,MAAM,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,iFAAiF;gBACjF,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,GAAG,sBAAsB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,8BAA8B,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC1E,8BAA8B,OAAO,CAAC,KAAK,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,YAAY,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,KAAK,eAAe,KAAK,CAAC,MAAM,EAAE,CAC1G,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,MAAM;gBAChB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,gDAAgD,KAAK;qBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,CAAC,CAAC,wFAAwF;SAC7F,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,MAAM,SAAS,GAAI,CAAC,CAAC,MAA4C,EAAE,OAAO,CAAC;IAC3E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,SAAS;YACjB,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,GAAG,CACD,GAAG,GAAG,mBAAmB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,UAAU,SAAS,EAAE,CACjG,CAAC;IAEF,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE;YAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,GAAG,oBAAoB,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,uBAAuB,QAAQ,CAAC,UAAU,IAAI,GAAG,iBAAiB,QAAQ,CAAC,WAAW,IAAI,EAAE,GAAG,CACpJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,oBAAoB,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,MAAM,QAAQ,CAAC,WAAW,IAAI,gBAAgB,EAAE;SACxH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,2BAA2B;YAC9B,OAAO,kKAAkK,CAAC;QAC5K,KAAK,iCAAiC;YACpC,OAAO,uIAAuI,CAAC;QACjJ;YACE,OAAO,gDAAgD,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/tools/ask.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/tools/ask.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAKzF,MAAM,MAAM,OAAO,GACf,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,SAAS,GACT,MAAM,GACN,UAAU,GACV,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;kDAEkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAWvD,CAAC;AAEH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAwLD;;;;;;;;;+EAS+E;AAC/E,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAiEjF"}
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/tools/ask.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAMzF,MAAM,MAAM,OAAO,GACf,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,SAAS,GACT,MAAM,GACN,UAAU,GACV,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;kDAEkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAWvD,CAAC;AAEH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAoOD;;;;;;;;;+EAS+E;AAC/E,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAqGjF"}

package/payload/platform/plugins/telegram/mcp/dist/tools/ask.js

@@ -1,6 +1,8 @@
 import { callBotApi } from "../lib/bot-api.js";
 import { listRegisteredBots, resolveBotToken } from "../lib/account-token.js";
+import { readBusinessConnection } from "../lib/business-connection-store.js";
 import { buildInlineKeyboard } from "../lib/telegram.js";
+import { gateChatSend } from "../lib/chat-send-policy.js";
 const TAG = "[telegram-tools]";
 const TOOL = "telegram-ask";
 /** Kind to Bot API method. Verified against the live parameter tables on
@@ -35,7 +37,15 @@ function missingField(p) {
         case "checklist":
         case "editChecklist": {
             if (!p.businessConnectionId) {
-                return `${p.kind} needs \`businessConnectionId\`: Telegram sends a checklist only on behalf of a connected business account.`;
+                // Task 2611 — the refusal names the OPERATOR STEP, not the parameter. By
+                // this point the store has already been consulted and had nothing, so
+                // telling the model a parameter is missing would name something it has no
+                // way to obtain: the identifier exists only inside a connection Telegram
+                // announces once, to this bot, when a human makes it.
+                return (`${p.kind} needs a business connection, and none is stored for bot ${p.botId}. ` +
+                    "Telegram sends a checklist only on behalf of a connected business account. " +
+                    "Ask the operator to connect this bot in Telegram under Settings, Business, Chatbots; " +
+                    "the connection is captured automatically the moment it is made.");
             }
             if (!p.checklist)
                 return `${p.kind} needs \`checklist\` (its title and 1-30 tasks).`;
@@ -184,7 +194,9 @@ function bodyFor(p) {
         ? {}
         : {
             // sendChecklist is the one send method with no message_thread_id in its
-            // table, so it is excluded here too.
+            // table. Task 2616 refuses that pair in `telegramAsk` before this builder
+            // runs, so the `kind` test here is unreachable in practice and kept as
+            // the shape guard for any caller that reaches `bodyFor` directly.
             ...(p.messageThreadId !== undefined && p.kind !== "checklist"
                 ? { message_thread_id: p.messageThreadId }
                 : {}),
@@ -203,6 +215,32 @@ function bodyFor(p) {
         ...envelope,
     };
 }
+/** The two checklist kinds, resolved against the stored connection.
+ *
+ *  Task 2611 — `business_connection_id` is required on both and there is no
+ *  variant without it, so before this the tool could only ever refuse: nothing on
+ *  the install could produce an identifier for the model to pass. The platform now
+ *  captures the one Telegram announces, and this spends it.
+ *
+ *  An explicit value WINS. The store holds one connection per bot and a caller who
+ *  names a different one has a reason the store cannot know about; silently
+ *  overriding them would make the parameter a lie. Returns the params unchanged
+ *  for every other kind, so no other call path grows a filesystem read.
+ *
+ *  The line names the SOURCE and never the identifier: it is a capability handle,
+ *  and the platform side truncates it for the same reason. */
+function resolveBusinessConnection(p, platformRoot, accountId, callId, log) {
+    if (p.kind !== "checklist" && p.kind !== "editChecklist")
+        return p;
+    if (p.businessConnectionId)
+        return p;
+    const rec = readBusinessConnection(platformRoot, accountId, p.botId);
+    if (!rec)
+        return p;
+    log(`${TAG} op=business-connection-resolved callId=${callId} tool=${TOOL} ` +
+        `botId=${p.botId} kind=${p.kind} source=store`);
+    return { ...p, businessConnectionId: rec.id };
+}
 /** Polls, checklists, locations, venues, contacts and dice, plus stopping a
  *  poll and editing or stopping a live location.
  *
@@ -224,30 +262,61 @@ export async function telegramAsk(p, deps) {
                 "(plugin-system metadata-only mode).",
         };
     }
-    const missing = missingField(p);
+    // Task 2611 — resolved BEFORE the pre-flight, so the pre-flight decides against
+    // the identifier that will actually be sent and its refusal is never raised
+    // against a connection the install already holds.
+    const params = resolveBusinessConnection(p, deps.platformRoot, deps.accountId, callId, log);
+    const missing = missingField(params);
     if (missing) {
-        log(`${TAG} op=refused callId=${callId} tool=${TOOL} kind=${p.kind} reason=missing-field`);
+        log(`${TAG} op=refused callId=${callId} tool=${TOOL} kind=${params.kind} reason=missing-field`);
         return { ok: false, isError: true, text: missing };
     }
-    const token = resolveBotToken(deps.platformRoot, deps.accountId, p.botId);
+    // Task 2616 — `sendChecklist` is the one send method with no
+    // `message_thread_id` in its table. The envelope builder below excluded the
+    // field for that reason and said nothing, so a checklist addressed to a forum
+    // topic landed in the group's General thread and the call reported success:
+    // the caller was told the checklist went where it asked, and it had not. A
+    // refusal before the network call is the honest answer.
+    if (params.kind === "checklist" && params.messageThreadId !== undefined) {
+        log(`${TAG} op=refused callId=${callId} tool=${TOOL} kind=${params.kind} reason=checklist-no-thread`);
+        return {
+            ok: false,
+            isError: true,
+            text: `sendChecklist has no message_thread_id, so a checklist cannot be sent into a forum topic. ` +
+                `Send it without messageThreadId and it lands in the group's General thread, or use a poll ` +
+                `or a plain message for the topic itself.`,
+        };
+    }
+    const token = resolveBotToken(deps.platformRoot, deps.accountId, params.botId);
     if (!token) {
         const known = listRegisteredBots(deps.platformRoot, deps.accountId);
-        log(`${TAG} op=no-bot callId=${callId} tool=${TOOL} account=${deps.accountId} botId=${p.botId} registered=${known.length}`);
+        log(`${TAG} op=no-bot callId=${callId} tool=${TOOL} account=${deps.accountId} botId=${params.botId} registered=${known.length}`);
         return {
             ok: false,
             isError: true,
             text: known.length
-                ? `No bot "${p.botId}" is registered on this account. Registered: ${known
+                ? `No bot "${params.botId}" is registered on this account. Registered: ${known
                     .map((b) => `${b.id} (${b.role})`)
                     .join(", ")}.`
                 : "No Telegram bot is registered on this account. Run the telegram:configure skill first.",
         };
     }
-    const method = ASK_METHOD[p.kind];
-    log(`${TAG} op=call tool=${TOOL} method=${method} callId=${callId} botId=${p.botId}`);
+    // Task 2617 — before the method is chosen and before any body is built, so a
+    // refused send touches nothing.
+    const gate = gateChatSend({
+        platformRoot: deps.platformRoot,
+        accountId: deps.accountId,
+        botId: params.botId,
+        chatId: params.chatId,
+        log,
+    });
+    if (!gate.allowed)
+        return { ok: false, isError: true, text: gate.text };
+    const method = ASK_METHOD[params.kind];
+    log(`${TAG} op=call tool=${TOOL} method=${method} callId=${callId} botId=${params.botId}`);
     let envelope;
     try {
-        envelope = await callBotApi(token, method, bodyFor(p), {
+        envelope = await callBotApi(token, method, bodyFor(params), {
             ...(deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}),
         });
     }