@songsid/agend 0.0.1

package/dist/channel/access-manager.d.ts

@@ -0,0 +1,18 @@
+import type { AccessConfig } from "../types.js";
+export declare class AccessManager {
+    private config;
+    private statePath;
+    private state;
+    private failedAttempts;
+    constructor(config: AccessConfig, statePath: string);
+    private persist;
+    private pruneExpired;
+    isAllowed(userId: number | string): boolean;
+    hasPairingQuota(userId: number | string): boolean;
+    generateCode(userId: number | string): string;
+    confirmCode(code: string, callerUserId?: string): boolean;
+    setMode(mode: "pairing" | "locked"): void;
+    getMode(): "pairing" | "locked";
+    getAllowedUsers(): (number | string)[];
+    removeUser(userId: number | string): boolean;
+}

package/dist/channel/access-manager.js

@@ -0,0 +1,153 @@
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+export class AccessManager {
+    config;
+    statePath;
+    state;
+    failedAttempts = new Map();
+    constructor(config, statePath) {
+        this.config = config;
+        this.statePath = statePath;
+        // Load persisted state or start fresh
+        if (existsSync(statePath)) {
+            try {
+                const raw = readFileSync(statePath, "utf8");
+                const saved = JSON.parse(raw);
+                this.state = {
+                    mode: saved.mode,
+                    allowed_users: saved.allowed_users ?? [],
+                    pending_codes: saved.pending_codes ?? [],
+                };
+            }
+            catch {
+                this.state = { allowed_users: [], pending_codes: [] };
+            }
+        }
+        else {
+            this.state = { allowed_users: [], pending_codes: [] };
+        }
+        // Merge config's allowed_users with saved ones (deduplicated, normalized to string)
+        const merged = new Set([...this.state.allowed_users, ...config.allowed_users].map(String));
+        this.state.allowed_users = Array.from(merged);
+        // If saved state has no mode, use config mode
+        if (this.state.mode === undefined) {
+            this.state.mode = config.mode;
+        }
+        // Prune expired codes on load
+        this.pruneExpired();
+    }
+    persist() {
+        writeFileSync(this.statePath, JSON.stringify(this.state, null, 2), "utf8");
+    }
+    pruneExpired() {
+        const now = Date.now();
+        const expiryMs = this.config.code_expiry_minutes * 60 * 1000;
+        const before = this.state.pending_codes.length;
+        this.state.pending_codes = this.state.pending_codes.filter((p) => now - p.createdAt < expiryMs);
+        if (this.state.pending_codes.length !== before) {
+            this.persist();
+        }
+    }
+    isAllowed(userId) {
+        const key = String(userId);
+        return this.state.allowed_users.some(u => String(u) === key);
+    }
+    hasPairingQuota(userId) {
+        const key = String(userId);
+        const userCodes = this.state.pending_codes.filter((p) => String(p.userId) === key);
+        return userCodes.length < 2;
+    }
+    generateCode(userId) {
+        this.pruneExpired();
+        if (this.state.mode === "locked") {
+            throw new Error("Cannot generate pairing code in locked mode");
+        }
+        if (!this.hasPairingQuota(userId)) {
+            throw new Error(`User ${userId} has reached max pairing code attempts (2)`);
+        }
+        // Count distinct users with pending codes (normalized to string)
+        const usersWithPending = new Set(this.state.pending_codes.map((p) => String(p.userId)));
+        // If this user is new and we're already at max, throw
+        if (!usersWithPending.has(String(userId)) && usersWithPending.size >= this.config.max_pending_codes) {
+            throw new Error(`Max pending codes reached for ${this.config.max_pending_codes} unique users`);
+        }
+        const code = randomBytes(4).toString("hex").toUpperCase();
+        this.state.pending_codes.push({
+            code,
+            userId,
+            createdAt: Date.now(),
+            attempts: 0,
+        });
+        this.persist();
+        return code;
+    }
+    confirmCode(code, callerUserId) {
+        this.pruneExpired();
+        // Rate limit: check per-userId failures (10 failures in 60 seconds)
+        if (callerUserId) {
+            const record = this.failedAttempts.get(callerUserId);
+            if (record) {
+                const elapsed = Date.now() - record.lastAttempt;
+                if (elapsed > 60_000) {
+                    // Reset window
+                    this.failedAttempts.delete(callerUserId);
+                }
+                else if (record.count >= 10) {
+                    return false;
+                }
+            }
+        }
+        const entry = this.state.pending_codes.find((p) => p.code === code);
+        if (!entry) {
+            // Increment attempts on all pending codes that were checked
+            for (const pending of this.state.pending_codes) {
+                pending.attempts++;
+            }
+            // Auto-invalidate codes that have been tried too many times
+            this.state.pending_codes = this.state.pending_codes.filter((p) => p.attempts < 5);
+            // Track per-userId failures
+            if (callerUserId) {
+                const record = this.failedAttempts.get(callerUserId);
+                if (record) {
+                    record.count++;
+                    record.lastAttempt = Date.now();
+                }
+                else {
+                    this.failedAttempts.set(callerUserId, { count: 1, lastAttempt: Date.now() });
+                }
+            }
+            this.persist();
+            return false;
+        }
+        // Add user to allowlist if not already there (normalized to string)
+        const entryKey = String(entry.userId);
+        if (!this.state.allowed_users.some(u => String(u) === entryKey)) {
+            this.state.allowed_users.push(entryKey);
+        }
+        // Remove all pending codes for that user
+        this.state.pending_codes = this.state.pending_codes.filter((p) => String(p.userId) !== entryKey);
+        this.persist();
+        return true;
+    }
+    setMode(mode) {
+        this.state.mode = mode;
+        this.persist();
+    }
+    getMode() {
+        return this.state.mode ?? this.config.mode;
+    }
+    getAllowedUsers() {
+        return [...this.state.allowed_users];
+    }
+    removeUser(userId) {
+        const key = String(userId);
+        const idx = this.state.allowed_users.findIndex(u => String(u) === key);
+        if (idx === -1) {
+            return false;
+        }
+        this.state.allowed_users.splice(idx, 1);
+        this.persist();
+        return true;
+    }
+}
+//# sourceMappingURL=access-manager.js.map

package/dist/channel/access-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-manager.js","sourceRoot":"","sources":["../../src/channel/access-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgB1C,MAAM,OAAO,aAAa;IAChB,MAAM,CAAe;IACrB,SAAS,CAAS;IAClB,KAAK,CAAc;IACnB,cAAc,GAAwD,IAAI,GAAG,EAAE,CAAC;IAExF,YAAY,MAAoB,EAAE,SAAiB;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,sCAAsC;QACtC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;gBACtD,IAAI,CAAC,KAAK,GAAG;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;oBACxC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;iBACzC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QACxD,CAAC;QAED,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9C,8CAA8C;QAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,OAAO;QACb,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,QAAQ,CACpC,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,MAAuB;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,eAAe,CAAC,MAAuB;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACnF,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,YAAY,CAAC,MAAuB;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,4CAA4C,CAAC,CAAC;QAC9E,CAAC;QAED,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,sDAAsD;QACtD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACpG,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,MAAM,CAAC,iBAAiB,eAAe,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;YAC5B,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,YAAqB;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,oEAAoE;QACpE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;gBAChD,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;oBACrB,eAAe;oBACf,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC3C,CAAC;qBAAM,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;oBAC9B,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,4DAA4D;YAC5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,CAAC;YACD,4DAA4D;YAC5D,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CACtB,CAAC;YAEF,4BAA4B;YAC5B,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACrD,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QAED,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CACrC,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,IAA0B;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,MAAuB;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACvE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/channel/adapters/telegram.d.ts

@@ -0,0 +1,63 @@
+import { EventEmitter } from "node:events";
+import { Bot } from "grammy";
+import type { ChannelAdapter, ApprovalHandle, SendOpts, SentMessage, PermissionPrompt, Choice, AlertData } from "../types.js";
+import type { AccessManager } from "../access-manager.js";
+export interface TelegramAdapterOptions {
+    id: string;
+    botToken: string;
+    accessManager: AccessManager;
+    inboxDir: string;
+    /** Override Telegram Bot API root URL (for mock server in E2E tests). */
+    apiRoot?: string;
+}
+export declare function validateTelegramApiRoot(apiRoot: string): void;
+export declare class TelegramAdapter extends EventEmitter implements ChannelAdapter {
+    readonly type = "telegram";
+    readonly topology: "topics";
+    readonly id: string;
+    private bot;
+    private accessManager;
+    private inboxDir;
+    private apiRoot;
+    private queue;
+    private cleanupTimer;
+    constructor(opts: TelegramAdapterOptions);
+    private _registerHandlers;
+    private _extractAttachments;
+    /** Returns true if the message is a Telegram service event with no user content. */
+    private _isServiceMessage;
+    private _handlePairCommand;
+    /** Expose bot for fleet manager operations (topic existence checks etc.) */
+    getBot(): Bot;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /** Delete inbox files older than 1 hour */
+    private _pruneInbox;
+    sendText(chatId: string, text: string, opts?: SendOpts): Promise<SentMessage>;
+    sendFile(chatId: string, filePath: string, opts?: SendOpts): Promise<SentMessage>;
+    editMessage(chatId: string, messageId: string, text: string): Promise<void>;
+    react(chatId: string, messageId: string, emoji: string): Promise<void>;
+    sendApproval(prompt: PermissionPrompt, callback: (decision: "approve" | "approve_always" | "deny") => void, signal?: AbortSignal, threadId?: string): Promise<ApprovalHandle>;
+    /** Get the last known chatId (group ID for topic mode) */
+    private lastChatId;
+    getChatId(): string | null;
+    setChatId(chatId: string): void;
+    downloadAttachment(fileId: string): Promise<string>;
+    promptUser(chatId: string, text: string, choices: Choice[], opts?: SendOpts): Promise<string>;
+    notifyAlert(chatId: string, alert: AlertData, opts?: SendOpts): Promise<SentMessage>;
+    createTopic(name: string): Promise<number>;
+    deleteTopic(topicId: number | string): Promise<void>;
+    topicExists(topicId: number): Promise<boolean>;
+    closeForumTopic(threadId: number | string): Promise<void>;
+    reopenForumTopic(threadId: number | string): Promise<void>;
+    editForumTopic(threadId: number | string, opts: {
+        name?: string;
+        iconCustomEmojiId?: string;
+    }): Promise<void>;
+    getTopicIconStickers(): Promise<{
+        customEmojiId: string;
+        emoji: string;
+    }[]>;
+    handlePairing(chatId: string, userId: string): Promise<string>;
+    confirmPairing(code: string, callerUserId?: string): Promise<boolean>;
+}