@spinabot/brigade 1.0.2 → 1.2.0

package/dist/agents/channels/telegram/plugin.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Telegram `ChannelPlugin` — the multi-account contract surface.
+ *
+ * Mirrors `whatsapp/plugin.ts`: wraps `createTelegramAdapter()` (the
+ * per-connection implementation) with the lifecycle adapters the
+ * `ChannelPluginManager` consumes, so an operator can run MORE THAN ONE
+ * Telegram bot at once via:
+ *
+ *   channels.telegram = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "main", botToken: "111:AAA" },
+ *       { id: "ops",  botToken: "222:BBB" },
+ *     ],
+ *   }
+ *
+ *   - `config.listAccountIds` / `resolveAccount`  → multi-account discovery
+ *   - `gateway.startAccount` / `stopAccount`      → per-account bot lifecycle
+ *   - `outbound.sendText` / `sendMedia`           → routes by `target.accountId`
+ *   - per-account approval-dispatcher registration → an exec-gate prompt raised
+ *     by a turn on (telegram, ops) replies on (telegram, ops), not the default
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` held in this
+ * closure — one bot per account, partitioned token resolution per
+ * `channels.telegram.accounts[].botToken`. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-account path carries the identical
+ * ACL + debounce + abort + approval-reply + approval-callback surface as the
+ * legacy single-adapter manager.
+ *
+ * The legacy single-account `createTelegramAdapter` (started by the legacy
+ * `startChannels` manager) STEPS ASIDE when >1 account is configured — its
+ * `isConfigured` returns false for the default account in that case (mirrors
+ * WhatsApp), so the two paths never double-start a bot.
+ */
+import type { BrigadeConfig } from "../../../config/types.js";
+import { type ChannelAdapter, type ChannelOutboundTarget, type ChannelPlugin, type StartChannelsArgs } from "../sdk.js";
+import { type ResolvedTelegramAccount } from "./account-config.js";
+import { type TelegramProbeResult } from "./probe.js";
+/** Dependencies the gateway hands the plugin to drive turns + replies. */
+export interface TelegramPluginDeps {
+    /** Boot-time default agent for routing fallbacks. */
+    defaultAgentId: string;
+    /** Active gateway config — re-read fresh per inbound for live policy. */
+    loadConfig: () => BrigadeConfig;
+    /** Run one agent turn (the gateway's serialised turn executor). */
+    runTurn: StartChannelsArgs["runTurn"];
+    /**
+     * Optional adapter factory — tests inject a fake; production uses
+     * `createTelegramAdapter`. Receives the per-account scope + the resolved
+     * command menu + auto-label flag the plugin threads in.
+     */
+    adapterFactory?: (args: {
+        accountId: string;
+        commandMenu: Array<{
+            command: string;
+            description: string;
+        }>;
+        autoLabelTopics: boolean;
+    }) => ChannelAdapter;
+}
+/** Operator-grade view of a per-account bot — exposed via attached helpers. */
+export interface TelegramPluginRuntimeView {
+    /** Currently-running account ids. */
+    startedAccountIds(): string[];
+    /** Look up the per-account adapter (or undefined when the account isn't started). */
+    getAdapter(accountId: string): ChannelAdapter | undefined;
+    /** Run a `getMe` probe for an account (for status / doctor). */
+    probeAccount(accountId: string, cfg: BrigadeConfig): Promise<TelegramProbeResult>;
+}
+/** Plugin handle with the extra per-account introspection surface attached. */
+export type TelegramPluginHandle = ChannelPlugin<ResolvedTelegramAccount> & TelegramPluginRuntimeView;
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export declare function createTelegramPlugin(deps: TelegramPluginDeps): TelegramPluginHandle;
+/** Outbound dispatch helper for callers reaching the plugin directly. */
+export type TelegramOutboundTarget = ChannelOutboundTarget;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/agents/channels/telegram/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAO9D,OAAO,EAON,KAAK,cAAc,EAQnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAKlB,KAAK,iBAAiB,EACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAON,KAAK,uBAAuB,EAC5B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAsBrE,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IAClC,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,MAAM,aAAa,CAAC;IAChC,mEAAmE;IACnE,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACtC;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7D,eAAe,EAAE,OAAO,CAAC;KACzB,KAAK,cAAc,CAAC;CACrB;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACzC,qCAAqC;IACrC,iBAAiB,IAAI,MAAM,EAAE,CAAC;IAC9B,qFAAqF;IACrF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,gEAAgE;IAChE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClF;AAED,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC,uBAAuB,CAAC,GAAG,yBAAyB,CAAC;AAqBtG,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,oBAAoB,CAmOnF;AAeD,yEAAyE;AACzE,MAAM,MAAM,sBAAsB,GAAG,qBAAqB,CAAC"}

package/dist/agents/channels/telegram/plugin.js

@@ -0,0 +1,314 @@
+/**
+ * Telegram `ChannelPlugin` — the multi-account contract surface.
+ *
+ * Mirrors `whatsapp/plugin.ts`: wraps `createTelegramAdapter()` (the
+ * per-connection implementation) with the lifecycle adapters the
+ * `ChannelPluginManager` consumes, so an operator can run MORE THAN ONE
+ * Telegram bot at once via:
+ *
+ *   channels.telegram = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "main", botToken: "111:AAA" },
+ *       { id: "ops",  botToken: "222:BBB" },
+ *     ],
+ *   }
+ *
+ *   - `config.listAccountIds` / `resolveAccount`  → multi-account discovery
+ *   - `gateway.startAccount` / `stopAccount`      → per-account bot lifecycle
+ *   - `outbound.sendText` / `sendMedia`           → routes by `target.accountId`
+ *   - per-account approval-dispatcher registration → an exec-gate prompt raised
+ *     by a turn on (telegram, ops) replies on (telegram, ops), not the default
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` held in this
+ * closure — one bot per account, partitioned token resolution per
+ * `channels.telegram.accounts[].botToken`. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-account path carries the identical
+ * ACL + debounce + abort + approval-reply + approval-callback surface as the
+ * legacy single-adapter manager.
+ *
+ * The legacy single-account `createTelegramAdapter` (started by the legacy
+ * `startChannels` manager) STEPS ASIDE when >1 account is configured — its
+ * `isConfigured` returns false for the default account in that case (mirrors
+ * WhatsApp), so the two paths never double-start a bot.
+ */
+// Channel SDK barrel — the SINGLE import surface for the multi-account
+// `ChannelPlugin` contract + every sub-adapter type + the shared inbound
+// pipeline + the approval router + the gateway boot args. A multi-account
+// channel authors entirely from here; nothing reaches past `../sdk.js` into
+// `../types.*`, `../inbound-pipeline`, `../approval-router`, `../manager`, or
+// `../../extensions/`.
+import { buildBundledCommands, createInboundPipelineContext, createSubsystemLogger, registerChannelApprovalDispatcher, removeChannelApprovalDispatcher, runChannelInboundPipeline, } from "../sdk.js";
+import { listTelegramAccountIds, resolveTelegramAccount, resolveTelegramBotToken, telegramAutoLabelTopics, TELEGRAM_CHANNEL_ID, TELEGRAM_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+import { createTelegramAdapter, TELEGRAM_CAPABILITIES } from "./adapter.js";
+import { buildTelegramCommandMenu } from "./command-menu.js";
+import { probeTelegram } from "./probe.js";
+const log = createSubsystemLogger("channels/telegram/plugin");
+const TELEGRAM_META = {
+    id: TELEGRAM_CHANNEL_ID,
+    label: "Telegram",
+    selectionLabel: "Telegram",
+    docsPath: "channels/telegram",
+    blurb: "Paste a @BotFather token, DM/group chat over a Telegram bot.",
+    order: 20,
+    exposure: "public",
+    markdownCapable: true,
+};
+/** Build the per-account approval capability — the native button prompt + approver gate. */
+function buildApprovalCapability(adapter, accountId) {
+    return {
+        async sendApprovalPrompt(params) {
+            // Delegate to the adapter's own native prompt (inline buttons). The
+            // adapter throws when the approval id can't fit the button budget, so
+            // the router falls back to its text prompt — mirror that here.
+            const cap = adapter.approvalCapability?.sendApprovalPrompt;
+            if (!cap)
+                throw new Error("telegram adapter has no approval prompt");
+            await cap({ ...params, accountId });
+        },
+        authorizeApprover(p) {
+            const cap = adapter.approvalCapability?.authorizeApprover;
+            if (!cap)
+                return { authorized: true };
+            return cap(p);
+        },
+    };
+}
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export function createTelegramPlugin(deps) {
+    const accountRuntimes = new Map();
+    const startAccount = async (ctx) => {
+        const accountId = ctx.accountId || TELEGRAM_DEFAULT_ACCOUNT_ID;
+        // Re-entrant start (the plugin-manager's restart loop) — stop the prior
+        // adapter, then build fresh.
+        const existing = accountRuntimes.get(accountId);
+        if (existing) {
+            try {
+                await existing.adapter.stop();
+            }
+            catch {
+                /* best-effort */
+            }
+            try {
+                existing.abort.abort("restart");
+            }
+            catch {
+                /* best-effort */
+            }
+            removeChannelApprovalDispatcher(TELEGRAM_CHANNEL_ID, accountId);
+            accountRuntimes.delete(accountId);
+        }
+        const cfg = deps.loadConfig();
+        const autoLabel = telegramAutoLabelTopics(cfg);
+        // Build the adapter first WITHOUT a command menu, then derive the menu from
+        // its bundled commands and rebuild — the command set depends on the adapter
+        // (its selfId etc.), so we materialise the bundled commands, map them to the
+        // Telegram menu shape, and hand them to the real adapter we start.
+        const factory = deps.adapterFactory ?? defaultTelegramAdapterFactory;
+        const probeAdapter = factory({ accountId, commandMenu: [], autoLabelTopics: autoLabel });
+        const commandMenu = buildTelegramCommandMenu(buildBundledCommands(probeAdapter));
+        const adapter = factory({ accountId, commandMenu, autoLabelTopics: autoLabel });
+        // Per-account abort derived from the gateway's parent abort.
+        const accountAbort = new AbortController();
+        const parent = ctx.signal;
+        if (parent) {
+            if (parent.aborted)
+                accountAbort.abort();
+            else
+                parent.addEventListener("abort", () => accountAbort.abort(), { once: true });
+        }
+        const pipelineRunTurn = (turn) => deps.runTurn(turn);
+        // Bundled channel commands so `/help` etc. work on the multi-account path.
+        const commandMap = new Map();
+        for (const c of buildBundledCommands(adapter)) {
+            commandMap.set(c.name.toLowerCase(), c);
+        }
+        const pipeline = createInboundPipelineContext({
+            adapter,
+            config: cfg,
+            agentId: deps.defaultAgentId,
+            runTurn: pipelineRunTurn,
+            commandMap,
+            parentAbort: accountAbort.signal,
+        });
+        const startCtx = {
+            signal: accountAbort.signal,
+            log: (msg, meta) => log.info(`[${accountId}] ${msg}`, meta),
+            onInbound: async (msg) => {
+                // Re-read the active config per inbound so policy edits land without
+                // restarting the bot. Stamp the accountId so the shared pipeline keys
+                // ACL + approval-route per account.
+                pipeline.config = deps.loadConfig();
+                const stamped = msg.accountId ? msg : { ...msg, accountId };
+                await runChannelInboundPipeline(pipeline, stamped);
+            },
+        };
+        try {
+            await adapter.start(startCtx);
+            accountRuntimes.set(accountId, { adapter, pipeline, abort: accountAbort });
+            // Per-account approval dispatcher — native inline-button prompt + per-
+            // account routing. Without this an exec-gate prompt from a turn on
+            // (telegram, ops) would fall through to the channel default.
+            registerChannelApprovalDispatcher(TELEGRAM_CHANNEL_ID, accountId, {
+                sendText: (conversationId, text, opts) => adapter.sendText(conversationId, text, { ...(opts ?? {}), accountId }),
+                prettyName: "Telegram",
+                approvalCapability: buildApprovalCapability(adapter, accountId),
+                getApprovalContext: () => ({ runtime: ctx.runtime, cfg: deps.loadConfig() }),
+            });
+            log.info("telegram account started", { accountId });
+        }
+        catch (err) {
+            log.warn("telegram account failed to start", {
+                accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+            throw err;
+        }
+    };
+    const stopAccount = async (ctx) => {
+        const runtime = accountRuntimes.get(ctx.accountId);
+        if (!runtime)
+            return;
+        accountRuntimes.delete(ctx.accountId);
+        // Drop the per-account dispatcher BEFORE adapter.stop() so a late in-flight
+        // bridge can't ask a torn-down bot to send.
+        removeChannelApprovalDispatcher(TELEGRAM_CHANNEL_ID, ctx.accountId);
+        try {
+            runtime.abort.abort("stop-requested");
+        }
+        catch {
+            /* best-effort */
+        }
+        // Clear pending debounce slots so a flush can't fire after stop.
+        for (const slot of runtime.pipeline.pendingDispatches.values())
+            clearTimeout(slot.timer);
+        runtime.pipeline.pendingDispatches.clear();
+        try {
+            await runtime.adapter.stop();
+        }
+        catch (err) {
+            log.warn("telegram account stop threw", {
+                accountId: ctx.accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    const logoutAccount = async (ctx) => {
+        try {
+            await stopAccount(ctx);
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    };
+    return {
+        id: TELEGRAM_CHANNEL_ID,
+        meta: TELEGRAM_META,
+        capabilities: TELEGRAM_CAPABILITIES,
+        startedAccountIds: () => [...accountRuntimes.keys()],
+        getAdapter: (accountId) => accountRuntimes.get(accountId)?.adapter,
+        probeAccount: async (accountId, cfg) => {
+            const token = resolveTelegramBotToken(cfg, accountId);
+            return probeTelegram({ token });
+        },
+        config: {
+            listAccountIds: (cfg) => listTelegramAccountIds(cfg),
+            resolveAccount: (cfg, accountId) => resolveTelegramAccount(cfg, accountId ?? undefined),
+            defaultAccountId: () => TELEGRAM_DEFAULT_ACCOUNT_ID,
+            isEnabled: (account) => account.enabled,
+        },
+        gateway: {
+            startAccount,
+            stopAccount,
+            logoutAccount,
+        },
+        outbound: {
+            sendText: async (params) => {
+                const accountId = params.target.accountId || TELEGRAM_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime) {
+                    return { ok: false, error: `telegram account "${accountId}" is not running` };
+                }
+                try {
+                    const sent = await runtime.adapter.sendText(params.target.to, params.text, {
+                        accountId,
+                        ...(params.target.threadId !== undefined ? { threadId: params.target.threadId } : {}),
+                    });
+                    return {
+                        ok: true,
+                        ...(sent && typeof sent === "object" && sent.messageId !== undefined
+                            ? { messageId: sent.messageId }
+                            : {}),
+                    };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+            sendMedia: async (params) => {
+                const accountId = params.target.accountId || TELEGRAM_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.sendMedia) {
+                    return { ok: false, error: `telegram account "${accountId}" cannot send media right now` };
+                }
+                try {
+                    await runtime.adapter.sendMedia(params.target.to, {
+                        kind: params.mediaType ?? "document",
+                        path: params.mediaUrl,
+                        ...(params.caption !== undefined ? { caption: params.caption } : {}),
+                    });
+                    return { ok: true };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+            sendReaction: async (params) => {
+                const accountId = params.target.accountId || TELEGRAM_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.react) {
+                    return { ok: false, error: `telegram account "${accountId}" cannot react right now` };
+                }
+                try {
+                    await runtime.adapter.react(params.target.to, params.messageId, params.emoji);
+                    return { ok: true };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+        },
+        actions: {
+            handleAction: async (params) => {
+                const accountId = params.accountId || params.target.accountId || TELEGRAM_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.handleAction) {
+                    return { ok: false, error: `telegram account "${accountId}" cannot perform message actions` };
+                }
+                return runtime.adapter.handleAction({
+                    conversationId: params.target.to,
+                    action: params.action,
+                    accountId,
+                    ...(params.signal ? { signal: params.signal } : {}),
+                });
+            },
+        },
+        secrets: {
+            secretTargetRegistryEntries: [
+                { path: "channels.telegram.botToken", description: "Telegram bot token (single-account)" },
+                { path: "channels.telegram.accounts.*.botToken", description: "Telegram bot token (per account)" },
+                { path: "channels.telegram.webhook.secretToken", description: "Telegram webhook secret token" },
+            ],
+        },
+    };
+}
+/** Default adapter factory — threads the per-account command menu + auto-label flag. */
+function defaultTelegramAdapterFactory(args) {
+    return createTelegramAdapter({
+        accountId: args.accountId,
+        ...(args.commandMenu.length > 0 ? { commandMenu: args.commandMenu } : {}),
+        autoLabelTopics: args.autoLabelTopics,
+    });
+}
+//# sourceMappingURL=plugin.js.map

package/dist/agents/channels/telegram/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,uBAAuB;AACvB,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,GAgBzB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAA4B,MAAM,YAAY,CAAC;AAErE,MAAM,GAAG,GAAG,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;AAE9D,MAAM,aAAa,GAAgB;IAClC,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,UAAU;IACjB,cAAc,EAAE,UAAU;IAC1B,QAAQ,EAAE,mBAAmB;IAC7B,KAAK,EAAE,8DAA8D;IACrE,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,QAAQ;IAClB,eAAe,EAAE,IAAI;CACrB,CAAC;AA0CF,4FAA4F;AAC5F,SAAS,uBAAuB,CAAC,OAAuB,EAAE,SAAiB;IAC1E,OAAO;QACN,KAAK,CAAC,kBAAkB,CAAC,MAAmC;YAC3D,oEAAoE;YACpE,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC3D,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACrE,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE1D,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmD,EAAiB,EAAE;QACjG,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,2BAA2B,CAAC;QAC/D,wEAAwE;QACxE,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACJ,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,+BAA+B,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;YAChE,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAE/C,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,mEAAmE;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,6BAA6B,CAAC;QACrE,MAAM,YAAY,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,wBAAwB,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhF,6DAA6D;QAC7D,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,YAAY,CAAC,KAAK,EAAE,CAAC;;gBACpC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,eAAe,GAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC7C,OAAO;YACP,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,OAAO,EAAE,eAAe;YACxB,UAAU;YACV,WAAW,EAAE,YAAY,CAAC,MAAM;SAChC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAwB;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;YAC3D,SAAS,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBACxC,qEAAqE;gBACrE,sEAAsE;gBACtE,oCAAoC;gBACpC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAmB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC;gBAC5E,MAAM,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;SACD,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,uEAAuE;YACvE,mEAAmE;YACnE,6DAA6D;YAC7D,iCAAiC,CAAC,mBAAmB,EAAE,SAAS,EAAE;gBACjE,QAAQ,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;gBACvE,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC;gBAC/D,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAmD,EAAiB,EAAE;QAChG,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,4EAA4E;QAC5E,4CAA4C;QAC5C,+BAA+B,CAAC,mBAAmB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC;YACJ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;QACD,iEAAiE;QACjE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAC1B,GAAkD,EACnB,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,qBAAqB;QACnC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;QACpD,UAAU,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO;QAC1E,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,EAAE;YACP,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC;YACpD,cAAc,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;YACvF,gBAAgB,EAAE,GAAG,EAAE,CAAC,2BAA2B;YACnD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;SACvC;QACD,OAAO,EAAE;YACR,YAAY;YACZ,WAAW;YACX,aAAa;SACb;QACD,QAAQ,EAAE;YACT,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,kBAAkB,EAAE,CAAC;gBAC/E,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;wBAC1E,SAAS;wBACT,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrF,CAAC,CAAC;oBACH,OAAO;wBACN,EAAE,EAAE,IAAI;wBACR,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;4BACnE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;4BAC/B,CAAC,CAAC,EAAE,CAAC;qBACN,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,+BAA+B,EAAE,CAAC;gBAC5F,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;wBACjD,IAAI,EAAG,MAAM,CAAC,SAAmB,IAAI,UAAU;wBAC/C,IAAI,EAAE,MAAM,CAAC,QAAQ;wBACrB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;oBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,0BAA0B,EAAE,CAAC;gBACvF,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;SACD;QACD,OAAO,EAAE;YACR,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;gBAC7F,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,kCAAkC,EAAE,CAAC;gBAC/F,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;oBACnC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;oBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS;oBACT,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnD,CAAC,CAAC;YACJ,CAAC;SACD;QACD,OAAO,EAAE;YACR,2BAA2B,EAAE;gBAC5B,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC1F,EAAE,IAAI,EAAE,uCAAuC,EAAE,WAAW,EAAE,kCAAkC,EAAE;gBAClG,EAAE,IAAI,EAAE,uCAAuC,EAAE,WAAW,EAAE,+BAA+B,EAAE;aAC/F;SACD;KACD,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAS,6BAA6B,CAAC,IAItC;IACA,OAAO,qBAAqB,CAAC;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,eAAe,EAAE,IAAI,CAAC,eAAe;KACrC,CAAC,CAAC;AACJ,CAAC"}

package/dist/agents/channels/telegram/probe.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Telegram status / doctor probe — a lightweight `getMe` reachability check.
+ *
+ * Telegram is token-based and stateless on disk: unlike WhatsApp (which leaves
+ * Baileys creds the status command can stat), there's no local artifact to
+ * inspect, so "is this channel actually working?" can only be answered by
+ * asking Telegram. This probe does the cheapest possible call — a single
+ * `getMe` over plain HTTPS (no grammY, no polling, no runner) — and reports the
+ * bot's identity + group/inline capability flags so `brigade channels status`
+ * and `brigade doctor` can show real Telegram health.
+ *
+ * It deliberately does NOT import grammY: a status check must stay fast +
+ * dependency-light, and `getMe` is a trivial GET. The bot token is never
+ * logged; the URL it's embedded in is built locally and discarded.
+ *
+ * Returns a structured result the caller renders; never throws — a network
+ * failure / invalid token surfaces as `{ ok: false, error }` so the status
+ * command degrades gracefully instead of crashing.
+ */
+/** The bot identity fields surfaced by the probe (from `getMe`). */
+export interface TelegramProbeIdentity {
+    id?: number;
+    username?: string;
+    firstName?: string;
+    canJoinGroups?: boolean;
+    canReadAllGroupMessages?: boolean;
+    supportsInlineQueries?: boolean;
+}
+/** Structured probe result. `ok` true ⇒ token valid + bot reachable. */
+export interface TelegramProbeResult {
+    ok: boolean;
+    /** HTTP status of the `getMe` call, when one came back. */
+    status?: number;
+    /** Operator-facing error line when `ok` is false. */
+    error?: string;
+    /** Round-trip time in ms. */
+    elapsedMs: number;
+    /** Bot identity (populated on success). */
+    bot?: TelegramProbeIdentity;
+}
+export interface TelegramProbeArgs {
+    /** The resolved Bot API token. NEVER logged. */
+    token: string;
+    /** Injectable fetch (defaults to global fetch) — lets tests stub the call. */
+    fetchImpl?: typeof fetch;
+    /** Probe timeout in ms (default 8s). */
+    timeoutMs?: number;
+}
+/**
+ * Run a `getMe` probe. Resolves to a structured result describing whether the
+ * token is valid + the bot is reachable, plus its identity. Never rejects.
+ */
+export declare function probeTelegram(args: TelegramProbeArgs): Promise<TelegramProbeResult>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/agents/channels/telegram/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,oEAAoE;AACpE,MAAM,WAAW,qBAAqB;IACrC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IACjC,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkEzF"}

package/dist/agents/channels/telegram/probe.js

@@ -0,0 +1,95 @@
+/**
+ * Telegram status / doctor probe — a lightweight `getMe` reachability check.
+ *
+ * Telegram is token-based and stateless on disk: unlike WhatsApp (which leaves
+ * Baileys creds the status command can stat), there's no local artifact to
+ * inspect, so "is this channel actually working?" can only be answered by
+ * asking Telegram. This probe does the cheapest possible call — a single
+ * `getMe` over plain HTTPS (no grammY, no polling, no runner) — and reports the
+ * bot's identity + group/inline capability flags so `brigade channels status`
+ * and `brigade doctor` can show real Telegram health.
+ *
+ * It deliberately does NOT import grammY: a status check must stay fast +
+ * dependency-light, and `getMe` is a trivial GET. The bot token is never
+ * logged; the URL it's embedded in is built locally and discarded.
+ *
+ * Returns a structured result the caller renders; never throws — a network
+ * failure / invalid token surfaces as `{ ok: false, error }` so the status
+ * command degrades gracefully instead of crashing.
+ */
+const TELEGRAM_API_BASE = "https://api.telegram.org";
+const DEFAULT_PROBE_TIMEOUT_MS = 8_000;
+/**
+ * Run a `getMe` probe. Resolves to a structured result describing whether the
+ * token is valid + the bot is reachable, plus its identity. Never rejects.
+ */
+export async function probeTelegram(args) {
+    const started = Date.now();
+    const token = (args.token ?? "").trim();
+    if (!token) {
+        return { ok: false, error: "no Telegram bot token configured", elapsedMs: 0 };
+    }
+    const doFetch = args.fetchImpl ?? fetch;
+    const timeoutMs = args.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    if (typeof timer.unref === "function")
+        timer.unref();
+    try {
+        const res = await doFetch(`${TELEGRAM_API_BASE}/bot${token}/getMe`, { signal: controller.signal });
+        const elapsedMs = Date.now() - started;
+        let body = null;
+        try {
+            body = (await res.json());
+        }
+        catch {
+            body = null;
+        }
+        if (!res.ok || !body?.ok || !body.result) {
+            return {
+                ok: false,
+                status: res.status,
+                error: body?.description ??
+                    (res.status === 401
+                        ? "Telegram rejected the bot token (401) — paste a fresh @BotFather token."
+                        : `Telegram getMe failed (HTTP ${res.status}).`),
+                elapsedMs,
+            };
+        }
+        const r = body.result;
+        return {
+            ok: true,
+            status: res.status,
+            elapsedMs,
+            bot: {
+                ...(typeof r.id === "number" ? { id: r.id } : {}),
+                ...(typeof r.username === "string" ? { username: r.username } : {}),
+                ...(typeof r.first_name === "string" ? { firstName: r.first_name } : {}),
+                ...(typeof r.can_join_groups === "boolean" ? { canJoinGroups: r.can_join_groups } : {}),
+                ...(typeof r.can_read_all_group_messages === "boolean"
+                    ? { canReadAllGroupMessages: r.can_read_all_group_messages }
+                    : {}),
+                ...(typeof r.supports_inline_queries === "boolean"
+                    ? { supportsInlineQueries: r.supports_inline_queries }
+                    : {}),
+            },
+        };
+    }
+    catch (err) {
+        const elapsedMs = Date.now() - started;
+        const aborted = controller.signal.aborted;
+        return {
+            ok: false,
+            error: aborted
+                ? `Telegram getMe timed out after ${timeoutMs}ms`
+                : err instanceof Error
+                    ? err.message
+                    : String(err),
+            elapsedMs,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=probe.js.map

package/dist/agents/channels/telegram/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAkCvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAQ,KAAgC,CAAC,KAAK,KAAK,UAAU;QAAG,KAA+B,CAAC,KAAK,EAAE,CAAC;IAC5G,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,iBAAiB,OAAO,KAAK,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAEvC,IAAI,IAAI,GAAqB,IAAI,CAAC;QAClC,IAAI,CAAC;YACJ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EACJ,IAAI,EAAE,WAAW;oBACjB,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;wBAClB,CAAC,CAAC,yEAAyE;wBAC3E,CAAC,CAAC,+BAA+B,GAAG,CAAC,MAAM,IAAI,CAAC;gBAClD,SAAS;aACT,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,OAAO;YACN,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,GAAG,EAAE;gBACJ,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,OAAO,CAAC,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,OAAO,CAAC,CAAC,2BAA2B,KAAK,SAAS;oBACrD,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,2BAA2B,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,CAAC,uBAAuB,KAAK,SAAS;oBACjD,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,EAAE;oBACtD,CAAC,CAAC,EAAE,CAAC;aACN;SACD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,OAAO;gBACb,CAAC,CAAC,kCAAkC,SAAS,IAAI;gBACjD,CAAC,CAAC,GAAG,YAAY,KAAK;oBACrB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACf,SAAS;SACT,CAAC;IACH,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACF,CAAC"}

package/dist/agents/channels/telegram/webhook.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Telegram webhook gateway route.
+ *
+ * In webhook transport mode (`channels.telegram.mode: "webhook"`) Telegram POSTs
+ * each update to a public URL instead of Brigade polling `getUpdates`. This
+ * module builds the Brigade `HttpRoute` that receives those POSTs:
+ *
+ *   1. Verify the `X-Telegram-Bot-Api-Secret-Token` header against the
+ *      configured secret (constant-time compare). A mismatch → 401, BEFORE the
+ *      body is parsed, so a forged update can't reach the agent.
+ *   2. Parse the JSON body as a Telegram `Update`.
+ *   3. Hand it to the started Telegram adapter's `feedWebhookUpdate`, which runs
+ *      it through the SAME normalize + dedupe + dispatch path as polling.
+ *   4. Reply `200 {"ok":true}` so Telegram marks the update delivered.
+ *
+ * The route is registered with `auth: "none"` because Telegram authenticates via
+ * the secret-token header, not Brigade's operator-auth (Telegram can't present
+ * an operator credential). The secret-token check IS the auth.
+ *
+ * Polling mode never registers this route — it's added by the module only when
+ * webhook mode is configured, so the default local-first install exposes no
+ * inbound HTTP surface.
+ */
+import type { HttpRoute } from "../sdk.js";
+/** The header Telegram sends carrying the configured secret token. */
+export declare const TELEGRAM_WEBHOOK_SECRET_HEADER = "x-telegram-bot-api-secret-token";
+/** Constant-time string compare — avoids leaking the secret via timing. */
+export declare function safeEqualSecret(a: string, b: string): boolean;
+/**
+ * Verify the inbound secret-token header. When no secret is configured the check
+ * passes (the operator opted out of header verification) — but configuring a
+ * secret is strongly recommended and the setWebhook call always sends one.
+ */
+export declare function hasValidTelegramWebhookSecret(headerValue: string | undefined, expected: string): boolean;
+/** The minimal adapter surface the webhook route drives. */
+export interface TelegramWebhookSink {
+    /** Feed a parsed Telegram update into the inbound path. */
+    feedWebhookUpdate(update: unknown): void;
+}
+export interface BuildTelegramWebhookRouteArgs {
+    /** The gateway route path (e.g. `/telegram/webhook`). */
+    path: string;
+    /** The configured secret token (`""` → no header check). */
+    secretToken: string;
+    /** Resolve the started adapter to feed updates into (null when not started). */
+    resolveSink: () => TelegramWebhookSink | null;
+    /** Logger (token-redacted upstream). */
+    log?: (msg: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * Build the Brigade `HttpRoute` for the Telegram webhook. Register it via
+ * `b.httpRoute(...)` from the module when webhook mode is active.
+ */
+export declare function buildTelegramWebhookRoute(args: BuildTelegramWebhookRouteArgs): HttpRoute;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/agents/channels/telegram/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,sEAAsE;AACtE,eAAO,MAAM,8BAA8B,oCAAoC,CAAC;AAKhF,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIxG;AA0BD,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IACnC,2DAA2D;IAC3D,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC7C,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,WAAW,EAAE,MAAM,mBAAmB,GAAG,IAAI,CAAC;IAC9C,wCAAwC;IACxC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,6BAA6B,GAAG,SAAS,CA6DxF"}