@rubytech/create-maxy-code 0.1.582 → 0.1.584

package/payload/platform/plugins/telegram/mcp/dist/lib/business-window-store.js

@@ -0,0 +1,125 @@
+import { join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import { resolveAccountDir } from "./account-write.js";
+import { telegramStoreRoot } from "../../../../../lib/telegram-reach/dist/index.js";
+/** Task 2615 — the read side of Telegram's 24-hour business reply window.
+ *
+ *  `BusinessBotRights.can_reply` grants the right to "send and edit messages in
+ *  the private chats that had incoming messages in the last 24 hours". Outside
+ *  that window Telegram refuses the send, and nothing is emitted when the window
+ *  closes, so a customer simply becomes unanswerable with no event anywhere.
+ *  Deciding before the call is what turns that silence into a refusal the agent
+ *  can act on.
+ *
+ *  The platform writes the conversation (`platform/ui/app/lib/telegram/
+ *  message-store.ts`); this reads it back. The window constant, the row shape and
+ *  the path derivation are duplicated across the boundary on purpose — the plugin
+ *  cannot import from `platform/ui/app`, the same boundary that already
+ *  duplicates the webhook secret path, the card store, the live-location store
+ *  and the business connection — and
+ *  `ui/app/lib/telegram/__tests__/business-window-boundary.test.ts` asserts the
+ *  two derivations agree.
+ *
+ *  TWO ROOTS, and they are not the same one. The connection record sits in the
+ *  ACCOUNT dir, `<installDir>/data/accounts/<accountId>`; the conversation store
+ *  is under the brand CONFIG dir, `~/.<brand>/data/telegram-messages/<accountId>`.
+ *  Task 2644 — they are NOT siblings, which is what this file assumed, and the
+ *  path derivation is no longer duplicated: `telegramStoreRoot` is shared with
+ *  the platform writer. `resolveAccountDir` is still the containment authority:
+ *  its refusal is what stops a traversal in the account id from reaching outside
+ *  the install.
+ */
+/** Telegram's window, in seconds. Restated rather than imported, for the reason
+ *  the header gives; the boundary test is what keeps it equal to the platform's
+ *  `BUSINESS_REPLY_WINDOW_S`. */
+export const BUSINESS_REPLY_WINDOW_S = 86_400;
+/** The business conversation's key. Mirrors `telegramBusinessChannelKey`. */
+export function businessChannelKey(botId, chatId) {
+    return `${botId}:biz:${chatId}`;
+}
+function conversationFile(platformRoot, accountId, channelKey) {
+    // The guard, not the path: a traversal in the account id must read as no
+    // conversation rather than reach outside the install.
+    if (!resolveAccountDir(platformRoot, accountId).ok)
+        return null;
+    // Both halves are Telegram numeric ids around the literal `biz`, so nothing
+    // here can carry a separator. Mirrors `isStorableChannelKey`.
+    if (!/^-?\d+:biz:-?\d+$/.test(channelKey))
+        return null;
+    // Task 2644 — the store root comes from `telegramStoreRoot`, the one
+    // derivation the platform writer also uses. Hand-rolling it here as
+    // `resolve(platformRoot, "..")` named the brand INSTALL dir while the writer
+    // wrote the brand CONFIG dir, so this read found nothing on every install
+    // where the two differ, which is all of them.
+    return join(telegramStoreRoot(platformRoot), accountId, `${channelKey.replaceAll(":", "_")}.jsonl`);
+}
+/** The newest Telegram-clock second among INBOUND rows in one business chat, or
+ *  null when the chat holds none carrying that field.
+ *
+ *  Inbound only: the window runs from what the CUSTOMER last sent, and counting
+ *  an agent reply would extend it on every send so the refusal could never fire.
+ *
+ *  Null rather than 0 for "nothing to measure from". Zero is a real Unix second
+ *  and would read as 1970, refusing every reply in a conversation whose rows
+ *  predate the field. */
+export function newestInboundTelegramDate(platformRoot, accountId, channelKey) {
+    const path = conversationFile(platformRoot, accountId, channelKey);
+    if (path === null || !existsSync(path))
+        return null;
+    let newest = null;
+    try {
+        for (const line of readFileSync(path, "utf-8").split("\n")) {
+            if (!line.trim())
+                continue;
+            let row;
+            try {
+                row = JSON.parse(line);
+            }
+            catch {
+                // A partial write from a crash mid-append is skipped, never fatal.
+                continue;
+            }
+            if (row.kind === "update")
+                continue;
+            if (row.fromMe === true)
+                continue;
+            const d = row.telegramDate;
+            if (typeof d !== "number" || !Number.isFinite(d))
+                continue;
+            if (newest === null || d > newest)
+                newest = d;
+        }
+    }
+    catch {
+        // An unreadable store reads as no inbound, so the tool refuses by name
+        // rather than taking the call down over a file the caller never sees.
+        return null;
+    }
+    return newest;
+}
+export function businessWindowVerdict(input) {
+    if (input.newestInboundDate === null) {
+        return { allowed: false, ageS: null, reason: "no-inbound" };
+    }
+    const ageS = Math.floor(input.nowMs / 1000) - input.newestInboundDate;
+    // Inclusive at the boundary: Telegram's wording is "in the last 24 hours".
+    if (ageS > BUSINESS_REPLY_WINDOW_S)
+        return { allowed: false, ageS, reason: "lapsed" };
+    return { allowed: true, ageS, reason: "ok" };
+}
+/** The refusal the agent reads. It names the WINDOW and the chat, never a
+ *  parameter: there is no argument the caller could add to make this send work,
+ *  which is the shape Task 2611 gave `ask.ts` for a checklist with no
+ *  connection. */
+export function businessWindowRefusal(chatId, ageS) {
+    if (ageS === null) {
+        return (`Cannot send to business chat ${chatId}: no message has ever been received from it. ` +
+            "Telegram allows a business account reply only in a chat that sent an incoming " +
+            "message in the last 24 hours.");
+    }
+    const hours = Math.floor(ageS / 3600);
+    return (`Cannot send to business chat ${chatId}: the last message from it arrived ${hours} hours ago. ` +
+        "Telegram allows a business account reply only within 24 hours of an incoming message, " +
+        "and that window has closed.");
+}
+//# sourceMappingURL=business-window-store.js.map

package/payload/platform/plugins/telegram/mcp/dist/lib/business-window-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-window-store.js","sourceRoot":"","sources":["../../src/lib/business-window-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;iCAEiC;AACjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAuB;IACvE,OAAO,GAAG,KAAK,QAAQ,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,gBAAgB,CACvB,YAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,yEAAyE;IACzE,sDAAsD;IACtD,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAChE,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,qEAAqE;IACrE,oEAAoE;IACpE,6EAA6E;IAC7E,0EAA0E;IAC1E,8CAA8C;IAC9C,OAAO,IAAI,CACT,iBAAiB,CAAC,YAAY,CAAC,EAC/B,SAAS,EACT,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;yBAQyB;AACzB,MAAM,UAAU,yBAAyB,CACvC,YAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,GAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC3D,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACtE,2EAA2E;IAC3E,IAAI,IAAI,GAAG,uBAAuB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;;kBAGkB;AAClB,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAE,IAAmB;IAChF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,CACL,gCAAgC,MAAM,+CAA+C;YACrF,gFAAgF;YAChF,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACtC,OAAO,CACL,gCAAgC,MAAM,sCAAsC,KAAK,cAAc;QAC/F,wFAAwF;QACxF,6BAA6B,CAC9B,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Task 2617 — may this bot send to this chat id?
+ *
+ * THE TWIN of platform/ui/app/lib/telegram/chat-send-policy.ts. The plugin cannot
+ * import from platform/ui/app, so the rule lives twice; the two are held in step
+ * by one shared table of cases asserted in both test files. A divergence means the
+ * agent's tools and the platform's scheduled send disagree about what may be
+ * posted to, which is the failure that table exists to catch.
+ *
+ * THE PROBLEM. A Telegram chat id cannot tell a channel from a supergroup: both
+ * are `-100`-prefixed, and no local check separates them. So the gate is keyed on
+ * the prefix and closed by BOTH allowlists — a `-100` id the operator named in
+ * `allowChannels` (Task 2617) or in `allowGroups` (Task 2616) is a broadcast
+ * surface somebody sanctioned; one in neither is a broadcast surface nobody did.
+ *
+ * WHY BEFORE THE NETWORK CALL. A channel post reaches every subscriber and cannot
+ * be unsent. A gate that fired on Telegram's verdict would be a record of damage
+ * rather than a refusal, so `checkTelegramChatSend` is pure and every caller
+ * applies it before building a request.
+ */
+export type ChatSendVerdict = {
+    allowed: true;
+    reason: "not-broadcast" | "allowlist-match";
+} | {
+    allowed: false;
+    reason: "not-in-allowChannels";
+};
+export declare function checkTelegramChatSend(params: {
+    chatId: number;
+    allowChannels: readonly number[];
+    allowGroups: readonly number[];
+}): ChatSendVerdict;
+/**
+ * The gate as each tool applies it: read the allowlists, decide, print the line,
+ * and hand back the refusal text when refused.
+ *
+ * One home, because five tools applying one rule five ways is the drift this task
+ * exists to prevent. Task 2617 gated six; Task 2636 deleted the invoice tool, and
+ * its gate went with it. The line is printed on BOTH outcomes so an allowed send and a
+ * refused one are the same grep, and `messageId=none` is always present because a
+ * field that appears only on some outcomes cannot be aggregated on.
+ */
+export declare function gateChatSend(input: {
+    platformRoot: string;
+    accountId: string;
+    botId: string;
+    chatId: string | number;
+    log: (line: string) => void;
+}): {
+    allowed: true;
+} | {
+    allowed: false;
+    text: string;
+};
+//# sourceMappingURL=chat-send-policy.d.ts.map

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-send-policy.d.ts","sourceRoot":"","sources":["../../src/lib/chat-send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAAA;CAAE,GAC9D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAEvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,GAAG,eAAe,CAQlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiDvD"}

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.js

@@ -0,0 +1,91 @@
+/**
+ * Task 2617 — may this bot send to this chat id?
+ *
+ * THE TWIN of platform/ui/app/lib/telegram/chat-send-policy.ts. The plugin cannot
+ * import from platform/ui/app, so the rule lives twice; the two are held in step
+ * by one shared table of cases asserted in both test files. A divergence means the
+ * agent's tools and the platform's scheduled send disagree about what may be
+ * posted to, which is the failure that table exists to catch.
+ *
+ * THE PROBLEM. A Telegram chat id cannot tell a channel from a supergroup: both
+ * are `-100`-prefixed, and no local check separates them. So the gate is keyed on
+ * the prefix and closed by BOTH allowlists — a `-100` id the operator named in
+ * `allowChannels` (Task 2617) or in `allowGroups` (Task 2616) is a broadcast
+ * surface somebody sanctioned; one in neither is a broadcast surface nobody did.
+ *
+ * WHY BEFORE THE NETWORK CALL. A channel post reaches every subscriber and cannot
+ * be unsent. A gate that fired on Telegram's verdict would be a record of damage
+ * rather than a refusal, so `checkTelegramChatSend` is pure and every caller
+ * applies it before building a request.
+ */
+import { readBotChatAllowlists } from "./account-token.js";
+const TAG = "[telegram-outbound]";
+/** Telegram's own prefix for a supergroup or a channel. A private chat id is
+ *  positive and a basic group id is negative without it, so this is the exact set
+ *  of ids that COULD be a channel. Compared as digits rather than by magnitude:
+ *  the question is what Telegram's id scheme says, not how large the number is. */
+const BROADCAST_PREFIX = "-100";
+export function checkTelegramChatSend(params) {
+    if (!String(params.chatId).startsWith(BROADCAST_PREFIX)) {
+        return { allowed: true, reason: "not-broadcast" };
+    }
+    if (params.allowChannels.includes(params.chatId) || params.allowGroups.includes(params.chatId)) {
+        return { allowed: true, reason: "allowlist-match" };
+    }
+    return { allowed: false, reason: "not-in-allowChannels" };
+}
+/**
+ * The gate as each tool applies it: read the allowlists, decide, print the line,
+ * and hand back the refusal text when refused.
+ *
+ * One home, because five tools applying one rule five ways is the drift this task
+ * exists to prevent. Task 2617 gated six; Task 2636 deleted the invoice tool, and
+ * its gate went with it. The line is printed on BOTH outcomes so an allowed send and a
+ * refused one are the same grep, and `messageId=none` is always present because a
+ * field that appears only on some outcomes cannot be aggregated on.
+ */
+export function gateChatSend(input) {
+    // An @username addresses a CHANNEL or a supergroup and nothing else — Telegram
+    // documents `chat_id` as "the target chat or username of the target channel (in
+    // the format @channelusername)", and the tool schema offers both forms to the
+    // model. It cannot be resolved to a numeric id without asking Telegram, and the
+    // allowlists hold numeric ids, so there is nothing local to check it against.
+    //
+    // Refused rather than passed through. Passing it through would leave every
+    // allowlist in this file bypassable by naming the same channel a different way,
+    // which is the whole gate defeated by a string. A private chat cannot be
+    // addressed this way at all, so nothing else is lost.
+    const named = typeof input.chatId === "string" ? input.chatId.trim() : "";
+    if (named.startsWith("@")) {
+        input.log(`${TAG} op=channel-send botId=${input.botId} chatId=${named} ` +
+            `allowed=no reason=username-not-allowlistable messageId=none`);
+        return {
+            allowed: false,
+            text: `Refused: "${named}" names a channel or supergroup by @username, and this bot's ` +
+                `allowlist holds numeric chat ids, so there is nothing to check it against. ` +
+                `Nothing was sent. Use the numeric chat id, and make sure it is in allowChannels ` +
+                `(for a channel) or allowGroups (for a group) on bot ${input.botId}.`,
+        };
+    }
+    const chatId = Number(input.chatId);
+    // A chat id Telegram will reject anyway, and NOT an @username — that is refused
+    // above. Passed through so Telegram's own 400 is the verdict on a malformed id,
+    // rather than this gate inventing a refusal for a question it was not given.
+    if (!Number.isFinite(chatId))
+        return { allowed: true };
+    const lists = readBotChatAllowlists(input.platformRoot, input.accountId, input.botId);
+    const verdict = checkTelegramChatSend({ chatId, ...lists });
+    input.log(`${TAG} op=channel-send botId=${input.botId} chatId=${chatId} ` +
+        `allowed=${verdict.allowed ? "yes" : "no"} reason=${verdict.reason} messageId=none`);
+    if (verdict.allowed)
+        return { allowed: true };
+    return {
+        allowed: false,
+        text: `Refused: ${chatId} is a Telegram channel or supergroup that is not on this bot's ` +
+            `allowlist, so nothing was sent. A channel post reaches every subscriber and cannot ` +
+            `be unsent, which is why this is refused rather than attempted. To allow it, add ` +
+            `${chatId} to allowChannels (if it is a channel) or allowGroups (if it is a group) ` +
+            `on bot ${input.botId}.`,
+    };
+}
+//# sourceMappingURL=chat-send-policy.js.map

package/payload/platform/plugins/telegram/mcp/dist/lib/chat-send-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-send-policy.js","sourceRoot":"","sources":["../../src/lib/chat-send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAElC;;;mFAGmF;AACnF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAMhC,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,KAM5B;IACC,+EAA+E;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,gFAAgF;IAChF,8EAA8E;IAC9E,EAAE;IACF,2EAA2E;IAC3E,gFAAgF;IAChF,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CACP,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,WAAW,KAAK,GAAG;YAC5D,6DAA6D,CAChE,CAAC;QACF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EACF,aAAa,KAAK,+DAA+D;gBACjF,6EAA6E;gBAC7E,kFAAkF;gBAClF,uDAAuD,KAAK,CAAC,KAAK,GAAG;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,gFAAgF;IAChF,gFAAgF;IAChF,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,GAAG,CACP,GAAG,GAAG,0BAA0B,KAAK,CAAC,KAAK,WAAW,MAAM,GAAG;QAC7D,WAAW,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,OAAO,CAAC,MAAM,iBAAiB,CACtF,CAAC;IACF,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EACF,YAAY,MAAM,iEAAiE;YACnF,qFAAqF;YACrF,kFAAkF;YAClF,GAAG,MAAM,2EAA2E;YACpF,UAAU,KAAK,CAAC,KAAK,GAAG;KAC3B,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.d.ts

@@ -1,3 +1,5 @@
+export { TELEGRAM_ALLOWED_UPDATES, setTelegramWebhook as setWebhook, getTelegramWebhookInfo as getWebhookInfo, type WebhookInfo, } from "../../../../../lib/telegram-managed-bot/dist/index.js";
+import type { WebhookInfo } from "../../../../../lib/telegram-managed-bot/dist/index.js";
 export interface TelegramSendOptions {
     chatId: string | number;
     text: string;
@@ -42,59 +44,6 @@ export declare function sendMessage(botToken: string, options: TelegramSendOptio
     messageId?: number;
     error?: string;
 }>;
-/**
- * Register a webhook URL with Telegram and generate a cryptographic secret.
- *
- * The secret is:
- *   1. Generated via crypto.randomBytes (64 hex chars)
- *   2. Passed to the Telegram Bot API as secret_token
- *   3. Written to secretFilePath on disk ONLY after the API confirms success
- *
- * Telegram sends this secret in the X-Telegram-Bot-Api-Secret-Token header
- * on every webhook delivery. The webhook route validates it before processing.
- *
- * If secretFilePath is omitted, no secret is generated (backward compat for tests).
- */
-/**
- * Task 2612 — the update classes this install asks Telegram for.
- *
- * The trap this constant exists to hold: naming ANY class replaces Telegram's
- * default set, so a class that works today and is missing from this list stops
- * arriving with no error anywhere. Telegram's default is every class except
- * `chat_member`, `message_reaction` and `message_reaction_count`, so thirteen of
- * these fourteen were already arriving and only `message_reaction` is a
- * registration gap; the other thirteen are named so that making the list
- * explicit is not itself a regression.
- *
- * The last three are registered although nothing consumes them yet: they are in
- * Telegram's default set, and Task 2615 is what will read them. Task 2616 adds
- * the group and channel classes.
- *
- * The order is the one Task 2612 states, and the registration test asserts the
- * whole array rather than membership — the failure guarded against is a name
- * silently dropped, which a membership check cannot see.
- */
-export declare const TELEGRAM_ALLOWED_UPDATES: readonly string[];
-export declare function setWebhook(botToken: string, webhookUrl: string, secretFilePath?: string, fetchImpl?: typeof fetch): Promise<{
-    ok: boolean;
-    secret?: string;
-    error?: string;
-}>;
-export interface WebhookInfo {
-    url: string;
-    pendingUpdateCount: number;
-    /** Unix seconds of the most recent delivery error Telegram saw, 0 when it
-     *  reports none. Telegram KEEPS this across a re-registration, which is why
-     *  the verdict compares it against the moment we registered. */
-    lastErrorDate: number;
-    lastErrorMessage?: string;
-    /** Task 2612 — the classes Telegram says it will deliver. Telegram omits the
-     *  field entirely when the registration uses its default set, which reads here
-     *  as `[]` — and `[]` is exactly the pre-2612 state, so an empty list against a
-     *  non-empty request is a real mismatch and not a missing field. */
-    allowedUpdates: string[];
-}
-export declare function getWebhookInfo(botToken: string, fetchImpl?: typeof fetch): Promise<WebhookInfo>;
 export interface WebhookVerdict {
     reachable: boolean;
     /** Telegram's own error text, empty when reachable. */

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,KAAK,CACpB,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb;;mFAE2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,kDAAkD;QAClD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;qFAE6E;QAC7E,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CACH,CAAC;CACH;AAED;;0BAE0B;AAC1B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;oDAKoD;AACpD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,yBAAyB,EAAE,EAAE,GAClC,sBAAsB,CAWxB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAerD,CAAC;AAEF,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,MAAM,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwC3D;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;oEAEgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;wEAGoE;IACpE,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,WAAW,CAAC,CAoBtB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;6CAc6C;AAC7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,cAAc,CAKzF"}
+{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,wBAAwB,EACxB,kBAAkB,IAAI,UAAU,EAChC,sBAAsB,IAAI,cAAc,EACxC,KAAK,WAAW,GACjB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAIzF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,KAAK,CACpB,KAAK,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC;QACb;;mFAE2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,kDAAkD;QAClD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;qFAE6E;QAC7E,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC,CACH,CAAC;CACH;AAED;;0BAE0B;AAC1B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;oDAKoD;AACpD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,yBAAyB,EAAE,EAAE,GAClC,sBAAsB,CAWxB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB9D;AAGD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;6CAc6C;AAC7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,GAAG,cAAc,CAKzF"}

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.js

@@ -1,6 +1,11 @@
-import { randomBytes } from "node:crypto";
-import { writeFileSync, mkdirSync } from "node:fs";
-import { dirname } from "node:path";
+// Task 2618 — `TELEGRAM_ALLOWED_UPDATES` and `setWebhook` MOVED to
+// platform/lib/telegram-managed-bot and are re-exported here, so every existing
+// import of this module keeps its path. The move exists because the UI webhook
+// route needs both to register a newly provisioned bot, and UI production code
+// does not import plugin source: the alternative was a second copy of the
+// allowed-updates list, and two lists that must agree is the drift Task 2612
+// spent a task removing.
+export { TELEGRAM_ALLOWED_UPDATES, setTelegramWebhook as setWebhook, getTelegramWebhookInfo as getWebhookInfo, } from "../../../../../lib/telegram-managed-bot/dist/index.js";
 const TELEGRAM_API = "https://api.telegram.org";
 /** Task 2501 — the agent-facing shape mapped to the Bot API's. Extracted from the
  *  telegram-message tool so the mapping is testable without an account
@@ -37,97 +42,6 @@ export async function sendMessage(botToken, options) {
     }
     return { ok: true, messageId: data.result?.message_id };
 }
-/**
- * Register a webhook URL with Telegram and generate a cryptographic secret.
- *
- * The secret is:
- *   1. Generated via crypto.randomBytes (64 hex chars)
- *   2. Passed to the Telegram Bot API as secret_token
- *   3. Written to secretFilePath on disk ONLY after the API confirms success
- *
- * Telegram sends this secret in the X-Telegram-Bot-Api-Secret-Token header
- * on every webhook delivery. The webhook route validates it before processing.
- *
- * If secretFilePath is omitted, no secret is generated (backward compat for tests).
- */
-/**
- * Task 2612 — the update classes this install asks Telegram for.
- *
- * The trap this constant exists to hold: naming ANY class replaces Telegram's
- * default set, so a class that works today and is missing from this list stops
- * arriving with no error anywhere. Telegram's default is every class except
- * `chat_member`, `message_reaction` and `message_reaction_count`, so thirteen of
- * these fourteen were already arriving and only `message_reaction` is a
- * registration gap; the other thirteen are named so that making the list
- * explicit is not itself a regression.
- *
- * The last three are registered although nothing consumes them yet: they are in
- * Telegram's default set, and Task 2615 is what will read them. Task 2616 adds
- * the group and channel classes.
- *
- * The order is the one Task 2612 states, and the registration test asserts the
- * whole array rather than membership — the failure guarded against is a name
- * silently dropped, which a membership check cannot see.
- */
-export const TELEGRAM_ALLOWED_UPDATES = [
-    "message",
-    "edited_message",
-    "callback_query",
-    "poll_answer",
-    "poll",
-    "message_reaction",
-    "pre_checkout_query",
-    "shipping_query",
-    "subscription",
-    "my_chat_member",
-    "business_connection",
-    "business_message",
-    "edited_business_message",
-    "deleted_business_messages",
-];
-export async function setWebhook(botToken, webhookUrl, secretFilePath, fetchImpl = fetch) {
-    const secret = secretFilePath ? randomBytes(32).toString("hex") : undefined;
-    // Task 2612 — `allowed_updates` travels on every registration. Widened from
-    // Record<string,string> because the value is an array, not a string.
-    const body = {
-        url: webhookUrl,
-        allowed_updates: [...TELEGRAM_ALLOWED_UPDATES],
-    };
-    if (secret) {
-        body.secret_token = secret;
-    }
-    const res = await fetchImpl(`${TELEGRAM_API}/bot${botToken}/setWebhook`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-    });
-    const data = (await res.json());
-    if (!data.ok) {
-        return { ok: false, error: data.description ?? "Failed to set webhook" };
-    }
-    // Write secret to disk only after Telegram confirms the webhook registration.
-    // This prevents orphaned secret files when the API call fails, and avoids
-    // overwriting a working secret during a failed re-registration attempt.
-    if (secret && secretFilePath) {
-        mkdirSync(dirname(secretFilePath), { recursive: true });
-        writeFileSync(secretFilePath, secret, { mode: 0o600 });
-        console.error(`[telegram] webhook secret written to ${secretFilePath} (${secret.length} chars)`);
-    }
-    return { ok: true, secret };
-}
-export async function getWebhookInfo(botToken, fetchImpl = fetch) {
-    const res = await fetchImpl(`${TELEGRAM_API}/bot${botToken}/getWebhookInfo`);
-    const data = (await res.json());
-    return {
-        url: data.result.url,
-        pendingUpdateCount: data.result.pending_update_count,
-        lastErrorDate: data.result.last_error_date ?? 0,
-        allowedUpdates: data.result.allowed_updates ?? [],
-        ...(data.result.last_error_message !== undefined
-            ? { lastErrorMessage: data.result.last_error_message }
-            : {}),
-    };
-}
 /** Task 2560 — a registration is unreachable when Telegram reports a delivery
  *  error it saw AT OR AFTER the moment we registered. An error dated before the
  *  stamp belongs to the previous URL: Telegram keeps `last_error_date` and

package/payload/platform/plugins/telegram/mcp/dist/lib/telegram.js.map

@@ -1 +1 @@
-{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAqChD;;;;;oDAKoD;AACpD,MAAM,UAAU,mBAAmB,CACjC,IAAmC;IAEnC,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,OAAO,QAAQ,cAAc,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACvC,YAAY,EAAE,OAAO,CAAC,WAAW;gBAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,wBAAwB,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,SAAS;IACT,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,MAAM;IACN,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,kBAAkB;IAClB,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,UAAkB,EAClB,cAAuB,EACvB,YAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5E,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,IAAI,GAA4B;QACpC,GAAG,EAAE,UAAU;QACf,eAAe,EAAE,CAAC,GAAG,wBAAwB,CAAC;KAC/C,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,YAAY,OAAO,QAAQ,aAAa,EAAE;QACvE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,uBAAuB,EAAE,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CACX,wCAAwC,cAAc,KAAK,MAAM,CAAC,MAAM,SAAS,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,YAA0B,KAAK;IAE/B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,YAAY,OAAO,QAAQ,iBAAiB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAQ7B,CAAC;IACF,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;QACpB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;QACpD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC;QAC/C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE;QACjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;;;;6CAc6C;AAC7C,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,eAAuB;IACvE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,aAAa,IAAI,eAAe,EAAE,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC"}
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,yBAAyB;AACzB,OAAO,EACL,wBAAwB,EACxB,kBAAkB,IAAI,UAAU,EAChC,sBAAsB,IAAI,cAAc,GAEzC,MAAM,uDAAuD,CAAC;AAG/D,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAqChD;;;;;oDAKoD;AACpD,MAAM,UAAU,mBAAmB,CACjC,IAAmC;IAEnC,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC,CAAC,CACJ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,OAAO,QAAQ,cAAc,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACvC,YAAY,EAAE,OAAO,CAAC,WAAW;gBAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,wBAAwB,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AASD;;;;;;;;;;;;;;6CAc6C;AAC7C,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,eAAuB;IACvE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,aAAa,IAAI,eAAe,EAAE,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/tools/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;sBAGsB;AACtB,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA0EjF"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;sBAGsB;AACtB,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA4FjF"}

package/payload/platform/plugins/telegram/mcp/dist/tools/api.js

@@ -1,6 +1,7 @@
 import { checkMethod } from "../lib/api-guard.js";
 import { callBotApi } from "../lib/bot-api.js";
 import { listRegisteredBots, resolveBotToken } from "../lib/account-token.js";
+import { gateChatSend } from "../lib/chat-send-policy.js";
 const TAG = "[telegram-api]";
 /** One tool for all 185 Bot API methods. Resolution order is: no account, then
  *  the refusal list, then the bot's token, then the call itself. Each stop
@@ -41,6 +42,24 @@ export async function telegramApi(p, deps) {
                 : "No Telegram bot is registered on this account. Run the telegram:configure skill first.",
         };
     }
+    // Task 2617 — keyed on the PRESENCE of `chat_id`, never on the method name. A
+    // method allowlist would need extending every time Telegram adds a send-shaped
+    // method, and the gap between an unlisted method and a real send is exactly the
+    // hole this gate exists to close. A `chat_id` that is neither string nor number
+    // is passed through: Telegram's own 400 is the right verdict on a malformed id,
+    // and inventing a refusal for it would decide a question this task was not given.
+    const rawChatId = p.params?.chat_id;
+    if (typeof rawChatId === "string" || typeof rawChatId === "number") {
+        const gate = gateChatSend({
+            platformRoot: deps.platformRoot,
+            accountId: deps.accountId,
+            botId: p.botId,
+            chatId: rawChatId,
+            log,
+        });
+        if (!gate.allowed)
+            return { ok: false, isError: true, text: gate.text };
+    }
     const fileCount = p.files ? Object.keys(p.files).length : 0;
     log(`${TAG} op=call callId=${callId} method=${p.method} listed=${verdict.listed} files=${fileCount}`);
     let envelope;
@@ -73,6 +92,14 @@ function refusalProse(reason) {
             return "webhook state is registered on the maxy edge-admitted path and stamped with the bot id, so a raw call here would silently repoint or stop every inbound message.";
         case "mutually-exclusive-with-webhook":
             return "getUpdates and webhooks are Telegram's two mutually exclusive ways of receiving updates, and it will not work while a webhook is set.";
+        // Task 2618 added its reason without a branch here, so a token refusal was
+        // explained as moving the bot off the cloud server. Task 2636 adds a second
+        // reason to the same switch, which is where a wrong default stops being an
+        // oddity and becomes the usual answer.
+        case "returns-a-credential":
+            return "its result IS a live bot token, and a relayed tool result would put that token in the transcript; telegram-bot-provision fetches it and returns only the bot id.";
+        case "payments-surface-removed":
+            return "this install takes no payment inside Telegram. There is no invoice, no payment link and no Stars balance: charge outside Telegram and send the payer a link instead.";
         default:
             return "it moves the bot off the cloud Bot API server.";
     }

package/payload/platform/plugins/telegram/mcp/dist/tools/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAyB7B;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAY,EAAE,IAAa;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,GAAG,yBAAyB,MAAM,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,iFAAiF;gBACjF,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,GAAG,sBAAsB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,8BAA8B,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC1E,8BAA8B,OAAO,CAAC,KAAK,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,YAAY,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,KAAK,eAAe,KAAK,CAAC,MAAM,EAAE,CAC1G,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,MAAM;gBAChB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,gDAAgD,KAAK;qBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,CAAC,CAAC,wFAAwF;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,GAAG,CACD,GAAG,GAAG,mBAAmB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,UAAU,SAAS,EAAE,CACjG,CAAC;IAEF,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE;YAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,GAAG,oBAAoB,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,uBAAuB,QAAQ,CAAC,UAAU,IAAI,GAAG,iBAAiB,QAAQ,CAAC,WAAW,IAAI,EAAE,GAAG,CACpJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,oBAAoB,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,MAAM,QAAQ,CAAC,WAAW,IAAI,gBAAgB,EAAE;SACxH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,2BAA2B;YAC9B,OAAO,kKAAkK,CAAC;QAC5K,KAAK,iCAAiC;YACpC,OAAO,uIAAuI,CAAC;QACjJ;YACE,OAAO,gDAAgD,CAAC;IAC5D,CAAC;AACH,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/tools/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAyB7B;;;sBAGsB;AACtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAY,EAAE,IAAa;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,GAAG,yBAAyB,MAAM,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,iFAAiF;gBACjF,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,GAAG,sBAAsB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EACF,8BAA8B,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC1E,8BAA8B,OAAO,CAAC,KAAK,GAAG;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,YAAY,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,KAAK,eAAe,KAAK,CAAC,MAAM,EAAE,CAC1G,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,MAAM;gBAChB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,gDAAgD,KAAK;qBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,CAAC,CAAC,wFAAwF;SAC7F,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,MAAM,SAAS,GAAI,CAAC,CAAC,MAA4C,EAAE,OAAO,CAAC;IAC3E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,SAAS;YACjB,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,GAAG,CACD,GAAG,GAAG,mBAAmB,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,UAAU,SAAS,EAAE,CACjG,CAAC;IAEF,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE;YAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,GAAG,oBAAoB,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,MAAM,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CACD,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,uBAAuB,QAAQ,CAAC,UAAU,IAAI,GAAG,iBAAiB,QAAQ,CAAC,WAAW,IAAI,EAAE,GAAG,CACpJ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,oBAAoB,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,MAAM,QAAQ,CAAC,WAAW,IAAI,gBAAgB,EAAE;SACxH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,GAAG,qBAAqB,MAAM,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,2BAA2B;YAC9B,OAAO,kKAAkK,CAAC;QAC5K,KAAK,iCAAiC;YACpC,OAAO,uIAAuI,CAAC;QACjJ,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,uCAAuC;QACvC,KAAK,sBAAsB;YACzB,OAAO,kKAAkK,CAAC;QAC5K,KAAK,0BAA0B;YAC7B,OAAO,sKAAsK,CAAC;QAChL;YACE,OAAO,gDAAgD,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/payload/platform/plugins/telegram/mcp/dist/tools/ask.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/tools/ask.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAKzF,MAAM,MAAM,OAAO,GACf,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,SAAS,GACT,MAAM,GACN,UAAU,GACV,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;kDAEkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAWvD,CAAC;AAEH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAkOD;;;;;;;;;+EAS+E;AAC/E,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAsEjF"}
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/tools/ask.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAMzF,MAAM,MAAM,OAAO,GACf,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,SAAS,GACT,MAAM,GACN,UAAU,GACV,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;kDAEkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAWvD,CAAC;AAEH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,yBAAyB,EAAE,EAAE,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAoOD;;;;;;;;;+EAS+E;AAC/E,wBAAsB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAqGjF"}