@serverkgg/bridge 0.1.5 → 0.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@serverkgg/bridge",
-	"version": "0.1.5",
+	"version": "0.1.6",
 	"description": "Serverk game bridge and driver runtime, wire protocol, manifest schema, and maintainer CLI",
 	"homepage": "https://serverk.gg",
 	"license": "SEE LICENSE IN LICENSE.md",
@@ -39,9 +39,9 @@
 	},
 	"scripts": {
 		"tsc": "tsc",
-		"test": "bun test --parallel"
+		"test": "bun test --parallel=8"
 	},
 	"dependencies": {
-		"zod": "4.6.4"
+		"zod": "4.6.5"
 	}
 }

package/src/bot/botCauses.test.ts

@@ -37,6 +37,14 @@ const CASES: readonly {
 		line: "aiogram.exceptions.TelegramUnauthorizedError: Telegram server says - Unauthorized",
 		cause: BridgeCrashCause.TokenInvalid,
 	},
+	{
+		line: "pyrogram.errors.exceptions.bad_request_400.AccessTokenInvalid: Telegram says: [400 ACCESS_TOKEN_INVALID] - The bot access token is invalid",
+		cause: BridgeCrashCause.TokenInvalid,
+	},
+	{
+		line: "pyrogram.errors.exceptions.bad_request_400.AccessTokenExpired: Telegram says: [400 ACCESS_TOKEN_EXPIRED] - The bot token has expired",
+		cause: BridgeCrashCause.TokenInvalid,
+	},
 	{
 		line: "Error: Used disallowed intents",
 		cause: BridgeCrashCause.IntentsDisallowed,

package/src/bot/botCauses.ts

@@ -4,7 +4,7 @@ import { BridgeEventName } from "../protocol";
 export const BOT_CRASH_EVIDENCE: readonly BridgeEventPattern[] = [
 	{
 		match:
-			/\[TokenInvalid\]|An invalid token was provided|LoginFailure: Improper token|\b401:? Unauthorized\b|\bInvalidToken\b|TelegramUnauthorizedError/,
+			/\[TokenInvalid\]|An invalid token was provided|LoginFailure: Improper token|\b401:? Unauthorized\b|\bInvalidToken\b|TelegramUnauthorizedError|\bACCESS_TOKEN_(?:INVALID|EXPIRED)\b/,
 		emit: BridgeEventName.TokenInvalid,
 	},
 	{

package/src/bot/detect/botFrameworks.ts

@@ -174,6 +174,7 @@ export const BOT_FRAMEWORKS: readonly BotFrameworkSpec[] = [
 		platform: BotPlatform.Telegram,
 		packages: [
 			"pyrogram",
+			"kurigram",
 		],
 		modules: [
 			"pyrogram",

package/src/bot/detect/botInspectWarning.ts

@@ -3,6 +3,7 @@ export enum BotInspectWarning {
 	NodeVersionUnmet = "node-version-unmet",
 	LockfileNotHonoured = "lockfile-not-honoured",
 	NoStart = "no-start",
+	WindowsCommand = "windows-command",
 	NoManifest = "no-manifest",
 	EnvCommitted = "env-committed",
 	NodeModulesCommitted = "node-modules-committed",

package/src/bot/detect/corpus/anasty17-mirror-leech-telegram-bot.json

@@ -35,8 +35,8 @@
 	"expected": {
 		"runtime": "python",
 		"packageManager": "pip",
-		"framework": null,
-		"platform": null,
+		"framework": "pyrogram",
+		"platform": "telegram",
 		"install": "uv pip install -r requirements.txt",
 		"build": null,
 		"start": "python -m bot",

package/src/bot/detect/corpus/anonymousx1025-anonxmusic.json

@@ -32,8 +32,8 @@
 	"expected": {
 		"runtime": "python",
 		"packageManager": "pip",
-		"framework": null,
-		"platform": null,
+		"framework": "pyrogram",
+		"platform": "telegram",
 		"install": "uv pip install -r requirements.txt",
 		"build": null,
 		"start": "bash start",

package/src/bot/detect/corpus/mericcan41-discordjs-v14-template-ts.json

@@ -28,6 +28,8 @@
 		"nodeVersion": null,
 		"pythonVersion": null,
 		"tokenKey": null,
-		"warnings": []
+		"warnings": [
+			"windows-command"
+		]
 	}
 }

package/src/bot/detect/corpus/tgbot-collection-ytdlbot.json

@@ -28,8 +28,8 @@
 	"expected": {
 		"runtime": "python",
 		"packageManager": "pip",
-		"framework": null,
-		"platform": null,
+		"framework": "pyrogram",
+		"platform": "telegram",
 		"install": "uv pip install -r requirements.txt",
 		"build": null,
 		"start": "python src/main.py",

package/src/bot/detect/detect.test.ts

@@ -604,6 +604,24 @@ describe("detect warnings", () => {
 		]);
 	});
 
+	it("warns when a start or build script runs a Windows-only command", () => {
+		const scripts = (start: string, build: string) => {
+			return project({
+				"package.json": JSON.stringify({
+					scripts: {
+						start,
+						build,
+					},
+				}),
+				"package-lock.json": "{}",
+			}).warnings;
+		};
+
+		expect(scripts("cls && node build/index.js", "cls && node build.js")).toContain(BotInspectWarning.WindowsCommand);
+		expect(scripts("node build/index.js", "CLS&&node build.js")).toContain(BotInspectWarning.WindowsCommand);
+		expect(scripts("node index.js", "tsc")).not.toContain(BotInspectWarning.WindowsCommand);
+	});
+
 	it("flags two runtimes and picks the one whose framework it found", () => {
 		const result = project({
 			...DISCORD_NODE,
@@ -630,6 +648,17 @@ describe("detect warnings", () => {
 		expect(result.warnings).toContain(BotInspectWarning.TwoPlatforms);
 	});
 
+	it("reads kurigram, the Pyrogram fork the corpus bots install, as Pyrogram on Telegram", () => {
+		const result = project({
+			"requirements.txt": "kurigram>=2.2.25\ntgcrypto\n",
+			"bot/__main__.py": "",
+		});
+
+		expect(result.framework).toBe(BotFramework.Pyrogram);
+		expect(result.platform).toBe(BotPlatform.Telegram);
+		expect(result.warnings).not.toContain(BotInspectWarning.TwoPlatforms);
+	});
+
 	it("drops keys the platform owns and warns, but keeps quiet about keys the runtime gives anyway", () => {
 		const result = project({
 			...DISCORD_NODE,

package/src/bot/detect/detect.ts

@@ -53,6 +53,12 @@ const NOT_A_BOT_PACKAGE: ReadonlySet<string> = new Set([
 	"scripts",
 ]);
 
+const WINDOWS_COMMANDS: ReadonlySet<string> = new Set([
+	"cls",
+]);
+
+const COMMAND_SEPARATOR = /&&|\|\||;|\|/;
+
 const MANAGER_FIELD = /^(npm|pnpm|yarn|bun)@(\d+)/;
 
 const ENGINE_MANAGERS: readonly string[] = [
@@ -394,6 +400,18 @@ const frameworksOf = (
 	return declared.length > 0 ? declared : specs.filter((spec) => spec.modules.some((name) => imports.has(name)));
 };
 
+const runsWindowsCommand = (command: string | null) => {
+	if (command === null) {
+		return false;
+	}
+
+	return command.split(COMMAND_SEPARATOR).some((segment) => {
+		const program = segment.trim().split(/\s+/)[0] ?? "";
+
+		return WINDOWS_COMMANDS.has(program.toLowerCase());
+	});
+};
+
 const procfileCommand = (text: string | null): DetectedCommand | null => {
 	if (text === null) {
 		return null;
@@ -1094,6 +1112,18 @@ export const detect = (input: DetectInput): DetectResult => {
 		warnings.add(BotInspectWarning.NoStart);
 	}
 
+	const buildScript = recordOf(packageJson?.scripts)[DETECT_TABLE.node.buildScript];
+
+	const commands = [
+		start?.command ?? null,
+		build?.command ?? null,
+		build?.source === DETECT_TABLE.node.manifest && typeof buildScript === "string" ? buildScript : null,
+	];
+
+	if (commands.some(runsWindowsCommand)) {
+		warnings.add(BotInspectWarning.WindowsCommand);
+	}
+
 	committedWarnings(paths, warnings);
 
 	const env = envCollector(warnings);

package/src/probes/minecraftPing.test.ts

@@ -5,6 +5,7 @@ import { parseStatus, probeMinecraftPing } from "./minecraftPing";
 const HOST = "127.0.0.1";
 
 const CLOSED_PORT = 59_441;
+const CLOSED_HOST = "::1";
 
 const varInt = (value: number) => {
 	const bytes: number[] = [];
@@ -294,7 +295,7 @@ describe("probeMinecraftPing", () => {
 	it("rejects as unreachable when nothing listens on the port", async () => {
 		const error = await probeMinecraftPing(
 			{
-				address: HOST,
+				address: CLOSED_HOST,
 				port: CLOSED_PORT,
 			},
 			2000,

package/src/rcon/rconClient.test.ts

@@ -19,6 +19,7 @@ import { createRconWriter, type RconWriter } from "./rconWriter";
 const HOST = "127.0.0.1";
 
 const CLOSED_PORT = 59_433;
+const CLOSED_HOST = "::1";
 
 const PASSWORD = "kX7-forbidden-in-errors";
 
@@ -1005,7 +1006,7 @@ describe("RconClient failures", () => {
 
 	it("reports a port nothing listens on", async () => {
 		const client = new RconClient({
-			host: HOST,
+			host: CLOSED_HOST,
 			port: CLOSED_PORT,
 			password: PASSWORD,
 			timeoutMs: 1000,
@@ -1475,7 +1476,7 @@ describe("RconClient secrecy", () => {
 		});
 
 		const unreachable = new RconClient({
-			host: HOST,
+			host: CLOSED_HOST,
 			port: CLOSED_PORT,
 			password: PASSWORD,
 			timeoutMs: 500,