@xbibzlibrary/telebibz 3.1.2 → 3.1.4

package/lib/telebibz.js

@@ -1,4 +1,4 @@
-// lib/telebibz.js — kelas utama: 100% kode sendiri, 0 dependency.
+// lib/telebibz.js — lifecycle bot, komposisi middleware, polling, dan webhook.
 'use strict';
 
 const { makeApi } = require('./api');
@@ -13,10 +13,14 @@ const log = require('./logger');
 const { humanize } = require('./errors');
 const { broadcast } = require('./broadcast');
 
+// Semua tipe Update di Bot API 10.3 (2026-08-24), termasuk tipe baru.
 const DEFAULT_UPDATES = [
-  'message', 'edited_message', 'callback_query', 'inline_query',
-  'my_chat_member', 'chat_member', 'message_reaction',
-  'business_connection', 'business_message', 'edited_business_message',
+  'message', 'edited_message', 'channel_post', 'edited_channel_post',
+  'business_connection', 'business_message', 'edited_business_message', 'deleted_business_messages',
+  'guest_message', 'message_reaction', 'message_reaction_count', 'inline_query',
+  'chosen_inline_result', 'callback_query', 'shipping_query', 'pre_checkout_query',
+  'purchased_paid_media', 'poll', 'poll_answer', 'my_chat_member', 'chat_member',
+  'chat_join_request', 'chat_boost', 'removed_chat_boost', 'stopped_message_generation',
 ];
 
 class TeleBibz {
@@ -33,7 +37,7 @@ class TeleBibz {
     }
     this.opts = opts;
     this.token = token;
-    this.api = makeApi(token, opts.transport);
+    this.api = makeApi(token, opts.transport, opts);
     this.botInfo = undefined;
 
     this._handlers = new Composer();        // composer publik (use/on/cmd/dll)
@@ -44,11 +48,11 @@ class TeleBibz {
       this.printError(err, ctx);
     };
 
-    // Pohon eksekusi: session → wizard → user handlers (dilindungi boundary)
+    // Pohon eksekusi: session → wizard → user handlers di dalam error boundary.
     this._root = new Composer()
       .use(session(opts.session || {}))
       .use(wizard.middleware());
-    this._safe = this._root.errorBoundary(this._report);
+    this._safe = this._root.errorBoundary(this._report, this._handlers.middleware());
   }
 
   /* ---------- shortcut publik ---------- */
@@ -104,18 +108,11 @@ class TeleBibz {
 
   /** Tangani SATU update mentah (webhook/serverless/test). */
   async handleUpdate(update) {
-    if (this._wired !== true) this._wire();
     const ctx = new Context(update, this.api, this.botInfo);
     try { await this._root.run(ctx); }
     catch (err) { await this._report({ error: err, ctx }); }
   }
 
-  _wire() {
-    this._wired = true;
-    // Pasang handler publik SETELAH boundary agar semuanya terlindungi
-    this._root.use(this._handlers.middleware());
-  }
-
   /** Nyalakan long polling (dengan retry 409 & backoff jaringan). */
   async launch(launchOpts = {}) {
     await this.init();
@@ -124,8 +121,7 @@ class TeleBibz {
       log.banner('🤖 TeleBibz ON', [
         `bot      : @${me.username} (id ${me.id})`,
         'mode     : long-polling',
-        `library  : telebibz ${require('../package.json').version} (0 dependency)`,
-        'brand    : //—Xbibz Official—//',
+        `library  : telebibz ${require('../package.json').version} (Node.js)`,
       ]);
       log.ok('menunggu update… (Ctrl+C untuk berhenti)');
     }
@@ -134,9 +130,9 @@ class TeleBibz {
       api: this.api,
       handleUpdate: (u) => this.handleUpdate(u),
       allowedUpdates: this.opts.allowedUpdates || DEFAULT_UPDATES,
-      dropPending: this.opts.dropPending || launchOpts.dropPending || false,
+      dropPending: launchOpts.dropPending ?? this.opts.dropPending ?? false,
       shouldStop: () => this._stopping,
-      conflictDelay: launchOpts.conflictDelay || 5000,
+      conflictDelay: launchOpts.conflictDelay ?? 5000,
       onConflict: () => { if (!this.opts.silent) log.warn('bot lain masih polling (409) — coba lagi 5 detik…'); },
       onFatal: (err) => this._report({ error: err }),
     });
@@ -154,17 +150,37 @@ class TeleBibz {
   get runPromise() { return this._runPromise; }
 
   /**
-   * Handler webhook gaya Node/Express:
-   *   const server = bot.webhook();
-   *   http.createServer((req,res) => req.url==='/tg' ? server(req,res) : ...)
-   *   — framework mana pun: (req, res) pasangan Request/Response Node.
+   * Handler webhook gaya Node/Express. Secret token (disarankan Telegram) opsional:
+   *   const handler = bot.webhook({ secretToken: process.env.TG_WEBHOOK_SECRET });
+   * Terima (req, res) Node murni; body dibatasi agar endpoint tidak menerima payload tak terbatas.
    */
-  webhook() {
+  webhook(webhookOpts = {}) {
+    const secretToken = webhookOpts.secretToken;
+    const maxBodyBytes = webhookOpts.maxBodyBytes ?? 1024 * 1024;
+    if (!Number.isSafeInteger(maxBodyBytes) || maxBodyBytes <= 0) throw new RangeError('webhook: maxBodyBytes harus > 0');
+    if (secretToken !== undefined && (typeof secretToken !== 'string' || !/^[A-Za-z0-9_-]{1,256}$/.test(secretToken))) {
+      throw new TypeError('webhook: secretToken harus 1–256 karakter A-Z, a-z, 0-9, _ atau -');
+    }
     return async (req, res) => {
+      if (req.method && req.method !== 'POST') { res.statusCode = 405; res.end('method not allowed'); return; }
+      if (secretToken !== undefined) {
+        const received = req.headers && req.headers['x-telegram-bot-api-secret-token'];
+        const expectedBuf = Buffer.from(String(secretToken));
+        const receivedBuf = Buffer.from(typeof received === 'string' ? received : '');
+        const valid = expectedBuf.length === receivedBuf.length && require('crypto').timingSafeEqual(expectedBuf, receivedBuf);
+        if (!valid) { res.statusCode = 401; res.end('unauthorized'); return; }
+      }
       try {
         const chunks = [];
-        for await (const c of req) chunks.push(Buffer.from(c));
+        let size = 0;
+        for await (const c of req) {
+          const chunk = Buffer.from(c);
+          size += chunk.length;
+          if (size > maxBodyBytes) { res.statusCode = 413; res.end('payload too large'); return; }
+          chunks.push(chunk);
+        }
         const update = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        if (!update || typeof update !== 'object' || Array.isArray(update)) throw new Error('invalid update');
         await this.handleUpdate(update);
         res.statusCode = 200; res.setHeader('Content-Type', 'application/json'); res.end('{}');
       } catch (e) { res.statusCode = 400; res.end('bad request'); }

package/lib/telegram-methods.js

@@ -0,0 +1,192 @@
+// Telegram Bot API method names, synchronized with @grammyjs/types v5.0.0 (Bot API 10.3).
+'use strict';
+
+const TELEGRAM_API_METHODS = Object.freeze([
+  'getUpdates',
+  'setWebhook',
+  'deleteWebhook',
+  'sendMessage',
+  'sendRichMessage',
+  'forwardMessage',
+  'forwardMessages',
+  'copyMessage',
+  'copyMessages',
+  'sendPhoto',
+  'sendLivePhoto',
+  'sendAudio',
+  'sendDocument',
+  'sendVideo',
+  'sendAnimation',
+  'sendVoice',
+  'sendVideoNote',
+  'sendPaidMedia',
+  'sendMediaGroup',
+  'sendLocation',
+  'editMessageLiveLocation',
+  'stopMessageLiveLocation',
+  'sendVenue',
+  'sendContact',
+  'sendPoll',
+  'sendChecklist',
+  'editMessageChecklist',
+  'sendDice',
+  'sendMessageDraft',
+  'sendRichMessageDraft',
+  'sendChatAction',
+  'setMessageReaction',
+  'getUserProfilePhotos',
+  'getUserProfileAudios',
+  'setUserEmojiStatus',
+  'getFile',
+  'banChatMember',
+  'unbanChatMember',
+  'restrictChatMember',
+  'promoteChatMember',
+  'setChatAdministratorCustomTitle',
+  'setChatMemberTag',
+  'banChatSenderChat',
+  'unbanChatSenderChat',
+  'setChatPermissions',
+  'exportChatInviteLink',
+  'createChatInviteLink',
+  'editChatInviteLink',
+  'createChatSubscriptionInviteLink',
+  'editChatSubscriptionInviteLink',
+  'revokeChatInviteLink',
+  'approveChatJoinRequest',
+  'declineChatJoinRequest',
+  'answerChatJoinRequestQuery',
+  'sendChatJoinRequestWebApp',
+  'approveSuggestedPost',
+  'declineSuggestedPost',
+  'setChatPhoto',
+  'deleteChatPhoto',
+  'setChatTitle',
+  'setChatDescription',
+  'pinChatMessage',
+  'unpinChatMessage',
+  'unpinAllChatMessages',
+  'leaveChat',
+  'getChat',
+  'getChatAdministrators',
+  'getChatMemberCount',
+  'getChatMember',
+  'getUserPersonalChatMessages',
+  'setChatStickerSet',
+  'deleteChatStickerSet',
+  'createForumTopic',
+  'editForumTopic',
+  'closeForumTopic',
+  'reopenForumTopic',
+  'deleteForumTopic',
+  'unpinAllForumTopicMessages',
+  'editGeneralForumTopic',
+  'closeGeneralForumTopic',
+  'reopenGeneralForumTopic',
+  'hideGeneralForumTopic',
+  'unhideGeneralForumTopic',
+  'unpinAllGeneralForumTopicMessages',
+  'answerCallbackQuery',
+  'answerGuestQuery',
+  'getUserChatBoosts',
+  'getUserGifts',
+  'getChatGifts',
+  'getBusinessConnection',
+  'getManagedBotToken',
+  'replaceManagedBotToken',
+  'getManagedBotAccessSettings',
+  'setManagedBotAccessSettings',
+  'setMyCommands',
+  'deleteMyCommands',
+  'getMyCommands',
+  'setMyName',
+  'getMyName',
+  'setMyDescription',
+  'getMyDescription',
+  'setMyShortDescription',
+  'getMyShortDescription',
+  'setMyProfilePhoto',
+  'setChatMenuButton',
+  'getChatMenuButton',
+  'setMyDefaultAdministratorRights',
+  'getMyDefaultAdministratorRights',
+  'editMessageText',
+  'editMessageCaption',
+  'editMessageMedia',
+  'editMessageReplyMarkup',
+  'stopPoll',
+  'editEphemeralMessageText',
+  'editEphemeralMessageMedia',
+  'editEphemeralMessageCaption',
+  'editEphemeralMessageReplyMarkup',
+  'deleteMessage',
+  'deleteMessages',
+  'deleteEphemeralMessage',
+  'deleteMessageReaction',
+  'deleteAllMessageReactions',
+  'deleteBusinessMessages',
+  'setBusinessAccountName',
+  'setBusinessAccountUsername',
+  'setBusinessAccountBio',
+  'setBusinessAccountProfilePhoto',
+  'removeBusinessAccountProfilePhoto',
+  'setBusinessAccountGiftSettings',
+  'getBusinessAccountStarBalance',
+  'transferBusinessAccountStars',
+  'getBusinessAccountGifts',
+  'convertGiftToStars',
+  'upgradeGift',
+  'transferGift',
+  'postStory',
+  'repostStory',
+  'editStory',
+  'deleteStory',
+  'sendSticker',
+  'getStickerSet',
+  'getCustomEmojiStickers',
+  'uploadStickerFile',
+  'createNewStickerSet',
+  'addStickerToSet',
+  'setStickerPositionInSet',
+  'deleteStickerFromSet',
+  'replaceStickerInSet',
+  'setStickerEmojiList',
+  'setStickerKeywords',
+  'setStickerMaskPosition',
+  'setStickerSetTitle',
+  'deleteStickerSet',
+  'setStickerSetThumbnail',
+  'setCustomEmojiStickerSetThumbnail',
+  'sendGift',
+  'giftPremiumSubscription',
+  'answerInlineQuery',
+  'answerWebAppQuery',
+  'savePreparedInlineMessage',
+  'savePreparedKeyboardButton',
+  'sendInvoice',
+  'createInvoiceLink',
+  'answerShippingQuery',
+  'answerPreCheckoutQuery',
+  'getStarTransactions',
+  'refundStarPayment',
+  'editUserStarSubscription',
+  'verifyUser',
+  'verifyChat',
+  'removeUserVerification',
+  'removeChatVerification',
+  'readBusinessMessage',
+  'setPassportDataErrors',
+  'sendGame',
+  'setGameScore',
+  'getGameHighScores',
+  'getWebhookInfo',
+  'getMe',
+  'logOut',
+  'close',
+  'getForumTopicIconStickers',
+  'removeMyProfilePhoto',
+  'getMyStarBalance',
+  'getAvailableGifts',
+]);
+
+module.exports = { TELEGRAM_API_METHODS };

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@xbibzlibrary/telebibz",
-  "version": "3.1.2",
-  "description": "Library Telegram Indonesia production-grade — set fitur penuh setara grammY: proxy-api segala metode, transformer, menus, inline query, media group, throttler & auto-retry, wizard + tombol + edit/delete, session swappable, webhook, polling tahan-409. //—Xbibz Official—//",
+  "version": "3.1.4",
+  "description": "Telegram Bot API 10.3 framework: all 185 methods with typed payloads, rich messages, live photos, drafts, ephemeral messages, inline queries, sessions, webhooks, menus and wizards. Xbibz Technology ID",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "commonjs",
   "license": "MIT",
-  "author": "Xbibz Official",
+  "author": "Xbibz Technology ID",
   "repository": {
     "type": "git",
-    "url": "https://github.com/XbibzOfficial777/telebibz.git"
+    "url": "git+https://github.com/XbibzOfficial777/telebibz.git"
   },
   "homepage": "https://github.com/XbibzOfficial777/telebibz#readme",
   "keywords": [
@@ -23,30 +23,34 @@
     "broadcast",
     "indonesia",
     "nodejs",
-    "zero-dependency",
-    "tanpa-dependency"
+    "telegram-bot-library"
   ],
   "engines": {
     "node": ">=18"
   },
   "dependencies": {
     "axios": "^1.20.0",
-    "mime-types": "^3.0.2",
+    "debug": "^4.4.3",
     "https-proxy-agent": "^9.1.0",
-    "debug": "^4.4.3"
+    "mime-types": "^3.0.2"
   },
   "scripts": {
-    "test": "node test/all.test.js"
+    "test": "node test/all.test.js && node test/audit.test.js",
+    "typecheck": "tsc --project tsconfig.types.json"
   },
   "files": [
     "index.js",
     "index.d.ts",
     "lib/",
+    "types/telegram-bot-api/",
     "examples/",
     "test/",
     "README.md",
     "LICENSE",
     "NOTICE.md",
     "CHANGELOG.md"
-  ]
+  ],
+  "devDependencies": {
+    "typescript": "^7.0.2"
+  }
 }