@sayknow-cli/coding-agent 0.2.7 → 0.3.1

package/dist/types/notifications/rate-limit-pool.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Host-wide shared Telegram rate-limit pool for the threaded session surface.
+ *
+ * Multiple SKC sessions on one host share a single bot token and paired chat.
+ * Telegram enforces per-bot/per-chat limits (~1 message/sec, bursts up to ~20),
+ * so the singleton notifications daemon owns ONE pool that all per-session
+ * threads draw from. The pool provides:
+ *
+ * - a token bucket (burst capacity + steady refill) modelling the chat limit;
+ * - priority lanes (`ask` > `finalized` > `live` > `idle`) so urgent frames
+ *   win scarce tokens;
+ * - per-session round-robin fairness within a lane so one session's live-edit
+ *   stream cannot starve other sessions;
+ * - coalescing of live edits that share a `coalesceKey` (the latest rendered
+ *   text replaces the queued one) so throttled edit storms collapse.
+ *
+ * The core is a pull-based scheduler with an injectable clock so fairness,
+ * starvation, and burst behaviour are deterministically unit-testable without
+ * real time or a live Bot API.
+ */
+/** Delivery lanes in descending priority. */
+export type RateLimitLane = "ask" | "finalized" | "live" | "idle";
+/** Lanes ordered from highest to lowest priority. */
+export declare const LANE_PRIORITY: readonly RateLimitLane[];
+/** A unit of work competing for a send slot. */
+export interface RateLimitItem<T = unknown> {
+    /** Owning session id (used for per-session fairness). */
+    sessionId: string;
+    /** Priority lane. */
+    lane: RateLimitLane;
+    /**
+     * Optional coalesce key. Submitting another item with the same
+     * `(sessionId, lane, coalesceKey)` replaces the queued payload with the
+     * newer one instead of enqueuing a duplicate (used for live edits).
+     */
+    coalesceKey?: string;
+    /** Opaque payload the caller maps to an actual Telegram send. */
+    payload: T;
+}
+/** Options for {@link RateLimitPool}. */
+export interface RateLimitPoolOptions {
+    /** Burst capacity (max tokens). Default 20 (Telegram per-chat burst). */
+    capacity?: number;
+    /** Steady refill rate in tokens per second. Default 1 (~1 msg/sec/chat). */
+    refillPerSec?: number;
+    /** Injectable clock in ms. Default `Date.now`. */
+    now?: () => number;
+}
+/**
+ * A deterministic, pull-based shared rate-limit scheduler.
+ *
+ * Callers {@link submit} work and periodically {@link drain} (e.g. on a timer
+ * or after each submit); `drain` returns the items granted a send slot, in the
+ * order they should be sent.
+ */
+export declare class RateLimitPool<T = unknown> {
+    private readonly capacity;
+    private readonly refillPerSec;
+    private readonly now;
+    /** Per-lane FIFO queues; each lane holds items across sessions. */
+    private readonly lanes;
+    /** Rotating session cursor per lane for round-robin fairness. */
+    private readonly laneCursor;
+    private tokens;
+    private lastRefill;
+    private seqCounter;
+    constructor(options?: RateLimitPoolOptions);
+    /** Number of items currently queued across all lanes. */
+    get pending(): number;
+    /** Current available token count (after refill at `now`). */
+    availableTokens(nowMs?: number): number;
+    /**
+     * Submit an item. If it carries a `coalesceKey` matching a queued item in
+     * the same `(sessionId, lane)`, the queued payload is replaced (latest
+     * wins) and FIFO position is preserved; otherwise it is appended.
+     */
+    submit(item: RateLimitItem<T>): void;
+    /**
+     * Grant as many queued items as tokens allow at `nowMs`. Items are selected
+     * by lane priority, then round-robin across sessions within a lane (so no
+     * single session monopolises a lane), consuming one token each.
+     */
+    drain(nowMs?: number): RateLimitItem<T>[];
+    private refill;
+    /** Pop the next item by lane priority + per-session round-robin fairness. */
+    private takeNext;
+    /**
+     * Choose the index to serve from a lane queue using round-robin over the
+     * distinct session ids present, starting just after the last-served
+     * session. Falls back to FIFO (index 0) when only one session is queued.
+     */
+    private pickFairIndex;
+}

package/dist/types/notifications/telegram-cli.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env bun
+/**
+ * Reference CLI for the notifications SDK Telegram client.
+ *
+ * Bridges a running SKC session's notification endpoint to a Telegram bot so you
+ * can answer asks / see idle pings from your phone — no RPC mode required. This
+ * is an EXAMPLE/template (the SDK contract is in `docs/notifications-sdk.md`);
+ * Discord/Slack clients are written the same way.
+ *
+ * Usage:
+ *   bun run packages/coding-agent/src/notifications/telegram-cli.ts \
+ *     --bot-token <token> [--chat-id <id>] [--endpoint-file <path> | --session-id <id>] [--repo <dir>]
+ *
+ * Env fallbacks: SKC_TG_BOT_TOKEN, SKC_TG_CHAT_ID.
+ * If --chat-id is omitted it is auto-resolved from getUpdates (message the bot once).
+ * If neither --endpoint-file nor --session-id is given, the newest endpoint file
+ * under <repo>/.skc/state/notifications/ is used.
+ */
+export {};

package/dist/types/notifications/telegram-daemon-cli.d.ts

@@ -0,0 +1,11 @@
+import { Settings } from "../config/settings";
+import { TelegramNotificationDaemon } from "./telegram-daemon";
+export interface RunDaemonInternalDeps {
+    SettingsImpl?: Pick<typeof Settings, "init">;
+    DaemonImpl?: typeof TelegramNotificationDaemon;
+    processPid?: number;
+}
+export declare function runDaemonSmoke(opts?: {
+    agentDir?: string;
+}): Promise<void>;
+export declare function runDaemonInternal(argv: string[], deps?: RunDaemonInternalDeps): Promise<void>;

package/dist/types/notifications/telegram-daemon-control.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Telegram daemon controller + owner-scoped control-request helpers.
+ *
+ * Reload is a hybrid: an owner-scoped control-request file records auditable
+ * intent, SIGTERM is the wakeup that aborts the in-flight long poll, and a
+ * fresh daemon is spawned only after the old pid is dead / has exited. This
+ * keeps the single-poller invariant (no Telegram getUpdates 409 overlap) and
+ * never steals a still-live owner.
+ */
+import type { Settings } from "../config/settings";
+import type { BuiltInDaemonController, DaemonOperationOptions, DaemonOperationResult, DaemonStatus } from "../daemon/control-types";
+import { type TelegramDaemonDeps, type TelegramDaemonFs } from "./telegram-daemon";
+export interface TelegramDaemonControlRequest {
+    version: 1;
+    requestId: string;
+    action: "reload" | "stop";
+    ownerId: string;
+    pid: number;
+    createdAt: number;
+}
+export declare function telegramControlRequestPath(agentDir: string): string;
+export declare function readTelegramControlRequest(settings: Settings, fsImpl?: TelegramDaemonFs): Promise<TelegramDaemonControlRequest | undefined>;
+export declare function writeTelegramControlRequest(settings: Settings, request: TelegramDaemonControlRequest, fsImpl?: TelegramDaemonFs): Promise<void>;
+export declare function clearTelegramControlRequest(settings: Settings, requestId?: string, fsImpl?: TelegramDaemonFs): Promise<void>;
+export interface TelegramDaemonControlDeps {
+    fs?: TelegramDaemonFs;
+    now?: () => number;
+    pidAlive?: (pid: number) => boolean;
+    sendSignal?: (pid: number, signal: NodeJS.Signals) => void;
+    spawn?: TelegramDaemonDeps["spawn"];
+    execPath?: string;
+    randomId?: () => string;
+    sleep?: (ms: number) => Promise<void>;
+    waitStepMs?: number;
+}
+export declare class TelegramDaemonController implements BuiltInDaemonController {
+    private readonly settings;
+    private readonly deps;
+    readonly kind: "telegram";
+    private readonly fsImpl;
+    private readonly now;
+    private readonly pidAlive;
+    private readonly sendSignal;
+    private readonly waitStepMs;
+    constructor(settings: Settings, deps?: TelegramDaemonControlDeps);
+    private runtimeInfo;
+    status(): Promise<DaemonStatus>;
+    private spawnDeps;
+    private sleep;
+    private waitForPidDeath;
+    private result;
+    reload(opts?: DaemonOperationOptions): Promise<DaemonOperationResult>;
+    stop(opts?: DaemonOperationOptions): Promise<DaemonOperationResult>;
+    private stopOrReload;
+    private clearOwnRequest;
+}

package/dist/types/notifications/telegram-daemon.d.ts

@@ -0,0 +1,295 @@
+import * as fs from "node:fs";
+import type { Settings } from "../config/settings";
+import type { DaemonRuntimeInfo } from "../daemon/control-types";
+import { type AliasTable, type CallbackRoute, type PendingAsk } from "./telegram-reference";
+export type EnsureDaemonResult = "owner_spawned" | "attached" | "disabled";
+export interface DaemonState {
+    pid: number;
+    ownerId: string;
+    tokenFingerprint: string;
+    chatId: string;
+    startedAt: number;
+    heartbeatAt: number;
+    roots: string[];
+    version: 1;
+    stoppedAt?: number;
+}
+export interface DaemonPaths {
+    dir: string;
+    lock: string;
+    state: string;
+    roots: string;
+    steal: string;
+    aliases: string;
+}
+export interface TelegramDaemonFs {
+    mkdir(path: string, opts?: fs.MakeDirectoryOptions): Promise<void>;
+    readFile(path: string, encoding: BufferEncoding): Promise<string>;
+    writeFile(path: string, data: string, opts?: fs.WriteFileOptions): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    unlink(path: string): Promise<void>;
+    open(path: string, flags: string, mode?: number): Promise<{
+        close(): Promise<void>;
+    }>;
+    readdir(path: string): Promise<string[]>;
+    chmod(path: string, mode: number): Promise<void>;
+}
+export interface SpawnResult {
+    unref?: () => void;
+}
+export interface TelegramDaemonDeps {
+    fs?: TelegramDaemonFs;
+    now?: () => number;
+    pid?: number;
+    pidAlive?: (pid: number) => boolean;
+    spawn?: (command: string, args: string[], opts: {
+        detached: boolean;
+        stdio: "ignore";
+        logPath?: string;
+    }) => SpawnResult;
+    execPath?: string;
+    randomId?: () => string;
+}
+export declare const HEARTBEAT_INTERVAL_MS = 5000;
+export declare const HEARTBEAT_TTL_MS = 20000;
+export declare const DAEMON_VERSION = 1;
+/** Capability token advertised when the server supports app-level ping/pong. */
+export declare const CLIENT_PING_PONG_CAPABILITY = "client_ping_pong";
+/** Protocol version the daemon advertises in its ClientHello. */
+export declare const NOTIFICATION_PROTOCOL_VERSION = 2;
+export declare function daemonPaths(agentDir: string): DaemonPaths;
+export declare function registerNotificationRoot(input: {
+    settings: Settings;
+    cwd: string;
+    sessionId: string;
+    fs?: TelegramDaemonFs;
+}): Promise<string>;
+export declare function isFreshLiveOwner(input: {
+    state: DaemonState | undefined;
+    now: number;
+    tokenFingerprint: string;
+    chatId: string;
+    pidAlive: (pid: number) => boolean;
+}): boolean;
+export declare function acquireDaemonOwnership(input: {
+    settings: Settings;
+    roots?: string[];
+    tokenFingerprint: string;
+    chatId: string;
+    fs?: TelegramDaemonFs;
+    now?: () => number;
+    pid?: number;
+    pidAlive?: (pid: number) => boolean;
+    randomId?: () => string;
+}): Promise<{
+    acquired: boolean;
+    ownerId?: string;
+    attached?: boolean;
+}>;
+export declare function renewDaemonHeartbeat(input: {
+    settings: Settings;
+    ownerId: string;
+    fs?: TelegramDaemonFs;
+    now?: () => number;
+    pid?: number;
+}): Promise<boolean>;
+export declare function releaseDaemonOwnership(input: {
+    settings: Settings;
+    ownerId: string;
+    fs?: TelegramDaemonFs;
+    now?: () => number;
+}): Promise<void>;
+/** Read the persisted daemon ownership state (or undefined when absent). */
+export declare function readDaemonState(settings: Settings, fs?: TelegramDaemonFs): Promise<DaemonState | undefined>;
+/** Read the persisted notification roots list. */
+export declare function readDaemonRoots(settings: Settings, fs?: TelegramDaemonFs): Promise<string[]>;
+export interface TelegramSpawnOwnerInput {
+    settings: Settings;
+    roots?: string[];
+    tokenFingerprint: string;
+    chatId: string;
+}
+export interface TelegramSpawnOwnerResult {
+    result: EnsureDaemonResult;
+    ownerId?: string;
+    runtime: DaemonRuntimeInfo;
+    warnings: string[];
+}
+/**
+ * Build the detached spawn command/args for the daemon-internal entrypoint.
+ * Source mode prepends the entry script so the respawn loads edited source;
+ * a compiled binary self-spawns its own subcommand directly.
+ */
+export declare function buildTelegramDaemonSpawnArgs(input: {
+    execPath?: string;
+    ownerId: string;
+    agentDir: string;
+}): {
+    command: string;
+    args: string[];
+    runtime: DaemonRuntimeInfo;
+};
+/**
+ * Acquire ownership for the given Telegram identity and, if acquired, spawn a
+ * fresh detached daemon process. Does NOT register notification roots; callers
+ * that own a session (autostart) register roots separately, while reload reuses
+ * already-persisted roots.
+ */
+export declare function spawnTelegramDaemonOwner(input: TelegramSpawnOwnerInput, deps?: TelegramDaemonDeps): Promise<TelegramSpawnOwnerResult>;
+export declare function ensureTelegramDaemonRunning(input: {
+    settings: Settings;
+    cwd: string;
+    sessionId: string;
+}, deps?: TelegramDaemonDeps): Promise<EnsureDaemonResult>;
+export interface BotApi {
+    call(method: string, body: unknown, opts?: {
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+}
+/**
+ * Cooperative control seam for the daemon run loop. Implemented by the
+ * daemon-internal CLI / controller against the owner-scoped control-request
+ * file so the daemon does not import the control module directly.
+ */
+export interface DaemonControlHooks {
+    /** Returns true when a stop/reload has been requested for this owner. */
+    shouldStop(ownerId: string): Promise<boolean>;
+    /** Clear a consumed control request (best-effort). */
+    clear?(ownerId: string): Promise<void>;
+}
+export interface TelegramDaemonOptions {
+    settings: Settings;
+    ownerId: string;
+    botToken: string;
+    chatId: string;
+    apiBase?: string;
+    fetchImpl?: typeof fetch;
+    fs?: TelegramDaemonFs;
+    WebSocketImpl?: typeof WebSocket;
+    now?: () => number;
+    setTimeoutImpl?: typeof setTimeout;
+    clearTimeoutImpl?: typeof clearTimeout;
+    setIntervalImpl?: typeof setInterval;
+    clearIntervalImpl?: typeof clearInterval;
+    idleTimeoutMs?: number;
+    scanIntervalMs?: number;
+    pid?: number;
+    botApi?: BotApi;
+    control?: DaemonControlHooks;
+}
+interface SessionSocket {
+    sessionId: string;
+    token: string;
+    ws: WebSocket;
+    pending: Map<string, {
+        sessionId: string;
+        actionId: string;
+    }>;
+    /** True once the server advertised the `client_ping_pong` capability. */
+    capable: boolean;
+    /** Timestamp (via opts.now) of the last received pong; seeds the TTL window. */
+    lastPongAt: number;
+    /** Nonce of the most recent in-flight ping, if any. */
+    awaitingNonce: string | undefined;
+    /** Per-session liveness interval handle (only set for capable sessions). */
+    pingTimer: ReturnType<typeof setInterval> | undefined;
+}
+export declare class TelegramNotificationDaemon {
+    private readonly opts;
+    readonly aliasTable: AliasTable;
+    readonly messageRoutes: Map<string | number, CallbackRoute | Omit<CallbackRoute, "answer">>;
+    readonly sessions: Map<string, SessionSocket>;
+    private running;
+    private offset;
+    private readonly fsImpl;
+    private readonly botApi;
+    private readonly topics;
+    private readonly pool;
+    private readonly seenUpdateIds;
+    /** True once the daemon has nudged the user to enable Threaded Mode. */
+    private threadedFallbackNoticeSent;
+    /** Sessions whose identity header was already sent flat (Threaded Mode off). */
+    private readonly flatIdentitySent;
+    /** Cached result of whether the paired chat is a private chat (flat-fallback gate). */
+    private pairedChatPrivate;
+    private flushTimer;
+    private scanTimer;
+    private scanning;
+    private typingTimer;
+    /** Sessions whose agent loop is currently busy (drives the typing indicator). */
+    private readonly busy;
+    /** Inbound update id → originating Telegram message, for delivery reactions. */
+    private readonly inboundReactions;
+    /** AbortController for the in-flight long poll; aborted by requestStop() to wake the loop. */
+    private activePoll;
+    /** Set when a cooperative stop has been requested (signal or control request). */
+    private stopRequested;
+    /** Current bounded backoff after a Telegram getUpdates 409 conflict (0 when healthy). */
+    private pollConflictBackoffMs;
+    /**
+     * Cooperatively stop the daemon: set the stop flag and abort the in-flight
+     * long poll so the run loop wakes immediately instead of waiting out the
+     * ~25s getUpdates timeout. Safe to call from a signal handler.
+     */
+    requestStop(_reason?: "reload" | "stop" | "signal"): void;
+    constructor(opts: TelegramDaemonOptions);
+    loadAliases(): Promise<void>;
+    persistAliases(): Promise<void>;
+    scanRoots(): Promise<void>;
+    connectSession(sessionId: string, url: string, token: string): void;
+    /**
+     * Start ack-based liveness for a session whose server advertised the
+     * `client_ping_pong` capability. Each interval drops the session when no pong
+     * has arrived within the TTL (the half-open case the socket never signals via
+     * `close`), otherwise sends a fresh application-level ping. The timer is bound
+     * to this exact session object.
+     */
+    private startLiveness;
+    /**
+     * Idempotent, identity-guarded session teardown. Clears the liveness timer,
+     * removes the map entry only when it still points at this exact session object
+     * (so a delayed old close cannot delete a replacement), and best-effort closes
+     * the socket. `scanRoots()` then reconnects the session.
+     */
+    private dropSession;
+    private static readonly THREADED_FRAMES;
+    private topicNameFor;
+    private ensureTopic;
+    private persistTopics;
+    loadTopics(): Promise<void>;
+    private downloadTelegramFile;
+    /**
+     * Per-session private temp directories (mode 0700) holding inbound non-image
+     * attachments. Keyed by session id and reused across transient reconnects;
+     * removed when the daemon stops (see {@link cleanupAllAttachmentDirs}).
+     */
+    private readonly attachmentDirs;
+    private ensureAttachmentDir;
+    private cleanupAllAttachmentDirs;
+    private resolveInboundAttachment;
+    private flushPool;
+    private deliverFlatFallback;
+    private pairedChatIsPrivate;
+    private notifyThreadedFallback;
+    private startFlushTimer;
+    private stopFlushTimer;
+    private runScan;
+    private startScanTimer;
+    private stopScanTimer;
+    private sendTyping;
+    private setReaction;
+    private startTypingTimer;
+    private stopTypingTimer;
+    handleSessionMessage(session: SessionSocket, msg: any): Promise<void>;
+    pendingBySession: (sessionId?: string) => PendingAsk[];
+    private sendStaleGuidance;
+    handleTelegramUpdate(update: unknown): Promise<void>;
+    pollOnce(signal?: AbortSignal): Promise<number>;
+    /** Abortable sleep honoring the injected timer; resolves early on abort. */
+    private sleep;
+    /** Sync the bot's Telegram command menu to what the daemon actually handles. */
+    registerBotCommands(): Promise<void>;
+    run(): Promise<void>;
+    private controlStopRequested;
+}
+export {};

package/dist/types/notifications/telegram-reference.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Telegram **reference** client for the notifications SDK.
+ *
+ * This is an example/template, NOT an upstream-owned integration: it implements
+ * the documented WS protocol (see `docs/notifications-sdk.md`) so you can copy it
+ * to build Discord/Slack/etc. clients with zero upstream changes. The Bot API
+ * transport shape is salvaged from the removed `telegram-remote` package.
+ *
+ * Flow: read the endpoint discovery file -> connect to the session WS -> render
+ * `action_needed` to a Telegram chat (inline keyboard for options) -> map button
+ * taps / text replies to `reply` frames -> reflect `action_resolved` /
+ * `reply_rejected`.
+ *
+ * Dependency-free: uses global `fetch` and `WebSocket` (Bun/Node 22+).
+ */
+/** One inline-keyboard button. */
+export interface InlineButton {
+    text: string;
+    callback_data: string;
+}
+/** A rendered Telegram message for an `action_needed`. */
+export interface RenderedMessage {
+    text: string;
+    inline_keyboard?: InlineButton[][];
+}
+/** Encode `actionId` + option `index` into Telegram callback_data (<=64 bytes). */
+export declare function encodeCallbackData(actionId: string, index: number): string;
+/** Decode callback_data produced by {@link encodeCallbackData}. */
+export declare function decodeCallbackData(data: string): {
+    id: string;
+    index: number;
+} | null;
+export interface CallbackRoute {
+    sessionId: string;
+    actionId: string;
+    answer: number | string;
+}
+export interface SerializedAliasTable {
+    version: 1;
+    next: number;
+    routes: Record<string, CallbackRoute>;
+}
+export interface AliasTable {
+    put(route: CallbackRoute): string;
+    get(alias: string): CallbackRoute | undefined;
+    delete(alias: string): boolean;
+    serialize(): SerializedAliasTable;
+    load(json: unknown): void;
+    entries(): Array<[string, CallbackRoute]>;
+}
+/** Create a compact, durable callback alias table. Serialized data contains routing ids only. */
+export declare function createAliasTable(): AliasTable;
+/** Render an `action_needed` payload into a Telegram message. */
+export declare function buildActionMessage(action: {
+    kind: "ask" | "idle";
+    id: string;
+    question?: string;
+    options?: string[];
+    summary?: string;
+}): RenderedMessage;
+/** A protocol `reply` frame the client should send to the server. */
+export interface ReplyFrame {
+    type: "reply";
+    id: string;
+    answer: number | string;
+    token: string;
+}
+/**
+ * Map a Telegram update into a reply frame, given the most recent pending ask id
+ * (for free-text replies). Returns `null` when the update is not actionable.
+ */
+export declare function telegramUpdateToReply(update: unknown, token: string, latestPendingAskId: string | undefined): ReplyFrame | null;
+export type RouteDecision = ({
+    kind: "reply";
+} & CallbackRoute) | {
+    kind: "stale";
+    reason: string;
+} | {
+    kind: "ignore";
+};
+export interface PendingAsk {
+    sessionId: string;
+    actionId: string;
+}
+export interface RouteInboundContext {
+    aliasTable: Pick<AliasTable, "get">;
+    messageRoutes: Map<string | number, CallbackRoute | Omit<CallbackRoute, "answer">>;
+    pendingBySession: (sessionId?: string) => PendingAsk[];
+    pairedChatId: string;
+}
+/** Route a Telegram update to a session/action without I/O. Fail closed under ambiguity. */
+export declare function routeInboundUpdate(update: unknown, ctx: RouteInboundContext): RouteDecision;
+/** Read `{url, token}` from an endpoint discovery file. */
+export declare function readEndpoint(path: string): {
+    url: string;
+    token: string;
+};
+/** Options for {@link runTelegramReferenceClient}. */
+export interface TelegramReferenceOptions {
+    botToken: string;
+    chatId: string;
+    endpointFile: string;
+    apiBase?: string;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Run the reference bridge until the WebSocket closes. Sends `action_needed` to
+ * the chat and forwards taps/text as replies. This is a minimal example loop;
+ * production clients add reconnection, multi-chat routing, and persistence.
+ */
+export declare function runTelegramReferenceClient(opts: TelegramReferenceOptions): Promise<void>;

package/dist/types/notifications/threaded-inbound.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Fail-closed routing for inbound Telegram updates in threaded session mode.
+ *
+ * In the threaded surface, a free-text reply inside a session's forum topic
+ * injects a new user turn into that session (steering it at any time). That is
+ * remote control of the agent, so every inbound path must fail closed:
+ *
+ * - the update must come from the single paired chat id;
+ * - it must carry a `message_thread_id` (topic) that maps to a KNOWN session;
+ * - its `update_id` must not have been seen before (idempotency / replay guard);
+ * - the text must be non-empty.
+ *
+ * Anything ambiguous or unmapped is ignored with a reason rather than guessed.
+ * This module is pure (the dedupe set and topic map are injected) so the
+ * security rules are exhaustively unit-testable without a live Bot API.
+ */
+/** Minimal shape of the inbound Telegram message we route on. */
+export interface InboundUpdate {
+    update_id?: unknown;
+    message?: {
+        message_id?: unknown;
+        text?: unknown;
+        caption?: unknown;
+        photo?: unknown;
+        document?: unknown;
+        video?: unknown;
+        audio?: unknown;
+        voice?: unknown;
+        animation?: unknown;
+        chat?: {
+            id?: unknown;
+        };
+        message_thread_id?: unknown;
+    };
+}
+/** A downloadable media attachment referenced by an inbound message. */
+export interface InboundAttachment {
+    /** Telegram file_id to resolve via getFile. */
+    fileId: string;
+    /** Source media kind; "photo" is always an image. */
+    kind: "photo" | "document" | "video" | "audio" | "voice" | "animation";
+    /** MIME type when Telegram provides one. */
+    mime?: string;
+    /** Original file name when provided. */
+    fileName?: string;
+}
+/** Context for {@link decideThreadedInbound}. All lookups are injected. */
+export interface ThreadedInboundCtx {
+    /** The single paired chat id (string-compared). */
+    pairedChatId: string;
+    /** Resolve a topic/thread id to its owning session id, or undefined. */
+    topicToSession: (threadId: string) => string | undefined;
+    /** Whether this `update_id` has already been processed. */
+    isDuplicate: (updateId: number) => boolean;
+}
+/** Outcome of routing an inbound update. */
+export type ThreadedInboundDecision = {
+    kind: "inject";
+    sessionId: string;
+    text: string;
+    updateId: number;
+    threadId: string;
+    messageId?: number;
+    attachment?: InboundAttachment;
+} | {
+    kind: "duplicate";
+    updateId: number;
+} | {
+    kind: "ignore";
+    reason: string;
+};
+/**
+ * Decide whether an inbound update should inject a user turn. Fail-closed:
+ * returns `ignore` (with a reason) or `duplicate` for anything that is not an
+ * unambiguous, first-seen, paired-chat, known-topic text message.
+ */
+export declare function decideThreadedInbound(update: InboundUpdate, ctx: ThreadedInboundCtx): ThreadedInboundDecision;