@xmanrui/dsh-im 0.1.0

package/src/channels/shared/token-bot-controller.mjs

@@ -0,0 +1,298 @@
+function cleanString(value) {
+  return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+
+function safeError(code, message) {
+  return Object.freeze({ code, message });
+}
+
+export class TokenBotController {
+  #descriptor;
+  #credentials;
+  #configStore;
+  #inspectToken;
+  #deriveIdentity;
+  #maskPlatformId;
+  #createRuntime;
+  #deleteState;
+  #logger;
+  #runtimes = new Map();
+  #errors = new Map();
+  #transitions = new Map();
+  #revision = 0;
+  #closed = false;
+
+  constructor({
+    descriptor,
+    credentials,
+    configStore,
+    inspectToken,
+    deriveIdentity,
+    maskPlatformId,
+    createRuntime,
+    deleteState = async () => {},
+    logger = console,
+  }) {
+    if (!descriptor?.key || !descriptor?.label || !descriptor?.connectionLabel) {
+      throw new TypeError('TokenBotController requires a channel descriptor');
+    }
+    if (!credentials || typeof credentials.resolve !== 'function'
+      || typeof credentials.set !== 'function' || typeof credentials.unset !== 'function') {
+      throw new TypeError(`${descriptor.label} requires the DSH credential provider`);
+    }
+    if (!configStore || typeof configStore.list !== 'function'
+      || typeof configStore.save !== 'function' || typeof configStore.remove !== 'function') {
+      throw new TypeError(`${descriptor.label} requires a config store`);
+    }
+    if (typeof inspectToken !== 'function' || typeof deriveIdentity !== 'function'
+      || typeof maskPlatformId !== 'function' || typeof createRuntime !== 'function') {
+      throw new TypeError(`${descriptor.label} controller dependencies are incomplete`);
+    }
+    this.#descriptor = descriptor;
+    this.#credentials = credentials;
+    this.#configStore = configStore;
+    this.#inspectToken = inspectToken;
+    this.#deriveIdentity = deriveIdentity;
+    this.#maskPlatformId = maskPlatformId;
+    this.#createRuntime = createRuntime;
+    this.#deleteState = deleteState;
+    this.#logger = logger;
+  }
+
+  async initialize() {
+    if (this.#closed) return this.status();
+    for (const config of this.#configStore.list()) {
+      await this.#withBotTransition(config.botId, async () => {
+        if (this.#closed || this.#runtimes.get(config.botId)?.status?.ready) return;
+        const token = await this.#resolveToken(config.tokenRef);
+        if (!token) {
+          this.#errors.set(config.botId, safeError(
+            'missing-token',
+            `${this.#descriptor.label}机器人凭据缺失，请移除后重新接入。`,
+          ));
+          return;
+        }
+        try {
+          await this.#startRuntime(config, token);
+          this.#errors.delete(config.botId);
+        } catch (error) {
+          this.#errors.set(config.botId, safeError(
+            'connection-failed',
+            `${this.#descriptor.label}连接未就绪，插件会自动重试。`,
+          ));
+          this.#logger.warn?.(
+            `[dsh-im:${this.#descriptor.key}] bot ${config.botId} failed to initialize:`,
+            error,
+          );
+        } finally {
+          this.#touch();
+        }
+      });
+    }
+    return this.status();
+  }
+
+  async bindCredentials({ token } = {}) {
+    if (this.#closed) throw new Error(`${this.#descriptor.label} controller is closed`);
+    const normalizedToken = cleanString(token);
+    if (!normalizedToken) throw new TypeError(`${this.#descriptor.label} Bot Token is required`);
+    const inspected = await this.#inspectToken(normalizedToken);
+    const platformId = cleanString(inspected?.platformId);
+    const name = cleanString(inspected?.name);
+    if (!platformId || !name) throw new Error(`${this.#descriptor.label} returned an invalid bot identity`);
+    const identity = this.#deriveIdentity(platformId);
+    await this.#withBotTransition(identity.botId, async () => {
+      if (this.#closed) throw new Error(`${this.#descriptor.label} controller is closed`);
+      const previousConfig = this.#configStore.getByPlatformId(platformId);
+      const previousToken = await this.#credentials.resolve(identity.tokenRef).catch(() => undefined);
+      const config = {
+        botId: identity.botId,
+        platformId,
+        tokenRef: identity.tokenRef,
+        name,
+        username: cleanString(inspected.username),
+        createdAt: previousConfig?.createdAt ?? new Date().toISOString(),
+        connectedAt: new Date().toISOString(),
+      };
+      await this.#credentials.set(identity.tokenRef, normalizedToken);
+      try {
+        await this.#configStore.save(config);
+      } catch (error) {
+        await this.#restoreCredential(identity.tokenRef, previousToken);
+        throw error;
+      }
+      try {
+        await this.#startRuntime(config, normalizedToken);
+        this.#errors.delete(identity.botId);
+      } catch (error) {
+        this.#errors.set(identity.botId, safeError(
+          'connection-failed',
+          `${this.#descriptor.label}机器人已接入，消息连接暂未就绪。`,
+        ));
+        this.#logger.warn?.(
+          `[dsh-im:${this.#descriptor.key}] bot ${identity.botId} credential connection failed:`,
+          error,
+        );
+      }
+      this.#touch();
+    });
+    return this.status();
+  }
+
+  async reconnectBot(botId) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error(`Unknown ${this.#descriptor.label} bot`);
+    await this.#withBotTransition(botId, async () => {
+      const token = await this.#resolveToken(config.tokenRef);
+      if (!token) throw new Error(`${this.#descriptor.label} bot token is missing`);
+      try {
+        await this.#startRuntime(config, token);
+        this.#errors.delete(botId);
+      } catch (error) {
+        this.#errors.set(botId, safeError(
+          'connection-failed',
+          `${this.#descriptor.label}连接仍未就绪，请稍后重试。`,
+        ));
+        throw error;
+      } finally {
+        this.#touch();
+      }
+    });
+    return this.status();
+  }
+
+  async deleteBot(botId) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error(`Unknown ${this.#descriptor.label} bot`);
+    await this.#withBotTransition(botId, async () => {
+      const previous = await this.#credentials.resolve(config.tokenRef).catch(() => undefined);
+      await this.#stopRuntime(botId);
+      try {
+        await this.#credentials.unset(config.tokenRef);
+        await this.#configStore.remove(botId);
+      } catch (error) {
+        if (previous?.value) {
+          await this.#credentials.set(config.tokenRef, previous.value).catch(() => undefined);
+          await this.#startRuntime(config, previous.value).catch(() => undefined);
+        }
+        throw new Error(`Unable to remove the ${this.#descriptor.label} bot safely.`, { cause: error });
+      }
+      await this.#deleteState({ botId, config }).catch((error) => {
+        this.#logger.warn?.(
+          `[dsh-im:${this.#descriptor.key}] bot ${botId} state cleanup failed:`,
+          error,
+        );
+      });
+      this.#errors.delete(botId);
+      this.#touch();
+    });
+    return this.status();
+  }
+
+  status() {
+    const bots = this.#configStore.list().map((config) => {
+      const runtimeStatus = this.#runtimes.get(config.botId)?.status ?? null;
+      const connected = runtimeStatus?.ready === true
+        && runtimeStatus.connectionState === 'connected'
+        && runtimeStatus.harnessReachable === true;
+      const state = connected ? 'connected'
+        : runtimeStatus?.connectionState === 'connecting' ? 'connecting'
+          : this.#errors.has(config.botId) || runtimeStatus?.connectionState === 'failed'
+            ? 'error' : 'offline';
+      return {
+        botId: config.botId,
+        state,
+        connected,
+        configured: true,
+        bot: {
+          name: config.name,
+          username: config.username,
+          idMasked: this.#maskPlatformId(config.platformId),
+        },
+        health: {
+          status: connected ? 'healthy' : state === 'error' ? 'error' : 'offline',
+          summary: connected ? `${this.#descriptor.label}${this.#descriptor.connectionLabel}运行正常`
+            : state === 'error' ? `${this.#descriptor.label}连接未就绪，插件会自动重试`
+              : `${this.#descriptor.label}连接当前离线`,
+          lastCheckedAt: runtimeStatus?.lastCheckedAt ?? null,
+          lastConnectedAt: runtimeStatus?.lastConnectedAt ?? null,
+        },
+        stats: {
+          messagesReceived: runtimeStatus?.messagesReceived ?? 0,
+          messagesReplied: runtimeStatus?.messagesReplied ?? 0,
+        },
+        error: structuredClone(this.#errors.get(config.botId) ?? null),
+      };
+    });
+    const connectedCount = bots.filter((bot) => bot.connected).length;
+    return {
+      schemaVersion: 1,
+      revision: this.#revision,
+      state: bots.length === 0 ? 'disconnected'
+        : connectedCount === bots.length ? 'connected'
+          : connectedCount > 0 ? 'degraded' : 'offline',
+      bots,
+      totals: { configured: bots.length, connected: connectedCount },
+    };
+  }
+
+  async close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    await Promise.allSettled([...this.#transitions.values()]);
+    await Promise.allSettled([...this.#runtimes.keys()].map((botId) => this.#stopRuntime(botId)));
+  }
+
+  async #startRuntime(config, token) {
+    if (this.#closed) throw new Error(`${this.#descriptor.label} controller is closed`);
+    await this.#stopRuntime(config.botId);
+    if (this.#closed) throw new Error(`${this.#descriptor.label} controller is closed`);
+    const runtime = await this.#createRuntime({ botId: config.botId, config, token });
+    if (!runtime || typeof runtime.start !== 'function' || typeof runtime.stop !== 'function') {
+      throw new TypeError(`createRuntime returned an invalid ${this.#descriptor.label} runtime`);
+    }
+    this.#runtimes.set(config.botId, runtime);
+    try {
+      await runtime.start();
+    } catch (error) {
+      await runtime.stop().catch(() => undefined);
+      this.#runtimes.delete(config.botId);
+      throw error;
+    }
+  }
+
+  async #stopRuntime(botId) {
+    const runtime = this.#runtimes.get(botId);
+    this.#runtimes.delete(botId);
+    await runtime?.stop().catch((error) => {
+      this.#logger.warn?.(
+        `[dsh-im:${this.#descriptor.key}] bot ${botId} failed to stop cleanly:`,
+        error,
+      );
+    });
+  }
+
+  async #resolveToken(ref) {
+    const result = await this.#credentials.resolve(ref).catch(() => undefined);
+    return cleanString(result?.value);
+  }
+
+  async #restoreCredential(ref, previous) {
+    if (previous?.value) await this.#credentials.set(ref, previous.value).catch(() => undefined);
+    else await this.#credentials.unset(ref).catch(() => undefined);
+  }
+
+  #withBotTransition(botId, operation) {
+    const previous = this.#transitions.get(botId) ?? Promise.resolve();
+    const current = previous.catch(() => undefined).then(operation);
+    const settled = current.finally(() => {
+      if (this.#transitions.get(botId) === settled) this.#transitions.delete(botId);
+    });
+    this.#transitions.set(botId, settled);
+    return settled;
+  }
+
+  #touch() {
+    this.#revision += 1;
+  }
+}

package/src/channels/shared/token-config-store.mjs

@@ -0,0 +1,180 @@
+import { createHash } from 'node:crypto';
+import { mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+
+const EMPTY_DOCUMENT = Object.freeze({ version: 1, bots: Object.freeze([]) });
+
+function cleanString(value) {
+  return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+
+function escapePattern(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+export function deriveTokenBotIdentity(platformId, { botPrefix, tokenRefPrefix }) {
+  const raw = cleanString(platformId);
+  if (!raw) throw new TypeError('platformId is required');
+  const digest = createHash('sha256').update(raw).digest('hex').slice(0, 24);
+  return {
+    botId: `${botPrefix}_${digest}`,
+    tokenRef: `${tokenRefPrefix}_${digest.toUpperCase()}`,
+  };
+}
+
+export function maskPlatformId(platformId, fallback) {
+  const value = cleanString(platformId) ?? '';
+  if (value.length <= 10) return value ? `${value.slice(0, 3)}•••` : fallback;
+  return `${value.slice(0, 6)}••••${value.slice(-4)}`;
+}
+
+export class TokenBotConfigStore {
+  #path;
+  #channel;
+  #botPrefix;
+  #tokenRefPrefix;
+  #botIdPattern;
+  #tokenRefPattern;
+  #value = EMPTY_DOCUMENT;
+  #writeQueue = Promise.resolve();
+
+  constructor(path, { channel, botPrefix, tokenRefPrefix }) {
+    this.#path = path;
+    this.#channel = channel;
+    this.#botPrefix = botPrefix;
+    this.#tokenRefPrefix = tokenRefPrefix;
+    this.#botIdPattern = new RegExp(`^${escapePattern(botPrefix)}_[a-f0-9]{24}$`);
+    this.#tokenRefPattern = new RegExp(`^${escapePattern(tokenRefPrefix)}_[A-F0-9]{24}$`);
+  }
+
+  async load() {
+    try {
+      const normalized = this.#normalizeDocument(JSON.parse(await readFile(this.#path, 'utf8')));
+      if (!normalized) throw new Error(`dsh-im ${this.#channel} config contains invalid bot data`);
+      this.#value = normalized;
+    } catch (error) {
+      if (error?.code !== 'ENOENT') throw error;
+      this.#value = EMPTY_DOCUMENT;
+    }
+    return this;
+  }
+
+  list() {
+    return structuredClone(this.#value.bots);
+  }
+
+  get(botId) {
+    const bot = this.#value.bots.find((candidate) => candidate.botId === botId);
+    return bot ? structuredClone(bot) : null;
+  }
+
+  getByPlatformId(platformId) {
+    const bot = this.#value.bots.find((candidate) => candidate.platformId === platformId);
+    return bot ? structuredClone(bot) : null;
+  }
+
+  async save(value) {
+    const normalized = this.#normalizeBot(value);
+    if (!normalized) throw new Error(`Refusing to persist incomplete ${this.#channel} bot data`);
+    return this.#mutate((bots) => {
+      const identityCollision = bots.find(
+        (bot) => bot.platformId === normalized.platformId && bot.botId !== normalized.botId,
+      );
+      const refCollision = bots.find(
+        (bot) => bot.tokenRef === normalized.tokenRef && bot.botId !== normalized.botId,
+      );
+      if (identityCollision || refCollision) throw new Error(`Duplicate ${this.#channel} bot identity`);
+      const index = bots.findIndex((bot) => bot.botId === normalized.botId);
+      if (index === -1) bots.push(normalized);
+      else bots[index] = normalized;
+      return structuredClone(normalized);
+    });
+  }
+
+  async remove(botId) {
+    if (!this.#botIdPattern.test(botId)) throw new TypeError(`Invalid ${this.#channel} bot id`);
+    return this.#mutate((bots) => {
+      const index = bots.findIndex((bot) => bot.botId === botId);
+      if (index === -1) return null;
+      const [removed] = bots.splice(index, 1);
+      return structuredClone(removed);
+    });
+  }
+
+  async clear() {
+    const operation = this.#writeQueue.then(async () => {
+      try {
+        await unlink(this.#path);
+      } catch (error) {
+        if (error?.code !== 'ENOENT') throw error;
+      }
+      this.#value = EMPTY_DOCUMENT;
+    });
+    this.#writeQueue = operation.then(() => undefined, () => undefined);
+    await operation;
+  }
+
+  #normalizeBot(value) {
+    if (!value || typeof value !== 'object') return null;
+    const platformId = cleanString(value.platformId);
+    const botId = cleanString(value.botId);
+    const tokenRef = cleanString(value.tokenRef);
+    const name = cleanString(value.name);
+    if (!platformId || !botId || !tokenRef || !name
+      || !this.#botIdPattern.test(botId) || !this.#tokenRefPattern.test(tokenRef)) return null;
+    const derived = deriveTokenBotIdentity(platformId, {
+      botPrefix: this.#botPrefix,
+      tokenRefPrefix: this.#tokenRefPrefix,
+    });
+    if (derived.botId !== botId || derived.tokenRef !== tokenRef) return null;
+    return Object.freeze({
+      botId,
+      platformId,
+      tokenRef,
+      name,
+      username: cleanString(value.username),
+      createdAt: cleanString(value.createdAt) ?? new Date().toISOString(),
+      connectedAt: cleanString(value.connectedAt),
+    });
+  }
+
+  #normalizeDocument(value) {
+    if (!value || value.version !== 1 || !Array.isArray(value.bots)) return null;
+    const bots = value.bots.map((bot) => this.#normalizeBot(bot));
+    if (bots.some((bot) => bot === null)) return null;
+    const ids = new Set();
+    const platformIds = new Set();
+    const refs = new Set();
+    for (const bot of bots) {
+      if (ids.has(bot.botId) || platformIds.has(bot.platformId) || refs.has(bot.tokenRef)) return null;
+      ids.add(bot.botId);
+      platformIds.add(bot.platformId);
+      refs.add(bot.tokenRef);
+    }
+    return Object.freeze({ version: 1, bots: Object.freeze(bots) });
+  }
+
+  async #mutate(mutator) {
+    let result;
+    const operation = this.#writeQueue.then(async () => {
+      const bots = [...this.#value.bots];
+      result = mutator(bots);
+      const document = Object.freeze({ version: 1, bots: Object.freeze(bots) });
+      await this.#write(document);
+      this.#value = document;
+    });
+    this.#writeQueue = operation.then(() => undefined, () => undefined);
+    await operation;
+    return result;
+  }
+
+  async #write(document) {
+    await mkdir(dirname(this.#path), { recursive: true, mode: 0o700 });
+    const temporary = `${this.#path}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(document, null, 2)}\n`, {
+      encoding: 'utf8',
+      mode: 0o600,
+    });
+    await rename(temporary, this.#path);
+  }
+}

package/src/channels/telegram/config-store.mjs

@@ -0,0 +1,24 @@
+import {
+  deriveTokenBotIdentity,
+  maskPlatformId,
+  TokenBotConfigStore,
+} from '../shared/token-config-store.mjs';
+
+const IDENTITY_OPTIONS = Object.freeze({
+  botPrefix: 'telegram',
+  tokenRefPrefix: 'DSH_TELEGRAM_BOT_TOKEN',
+});
+
+export function deriveTelegramBotIdentity(platformId) {
+  return deriveTokenBotIdentity(platformId, IDENTITY_OPTIONS);
+}
+
+export function maskTelegramBotId(platformId) {
+  return maskPlatformId(platformId, 'Telegram机器人');
+}
+
+export class TelegramConfigStore extends TokenBotConfigStore {
+  constructor(path) {
+    super(path, { channel: 'Telegram', ...IDENTITY_OPTIONS });
+  }
+}

package/src/channels/telegram/harness-client.mjs

@@ -0,0 +1,3 @@
+import { HarnessClient } from '../weixin/harness-client.mjs';
+
+export class TelegramHarnessClient extends HarnessClient {}

package/src/channels/telegram/state-store.mjs

@@ -0,0 +1,3 @@
+import { ConversationStateStore } from '../shared/conversation-state-store.mjs';
+
+export class TelegramStateStore extends ConversationStateStore {}

package/src/channels/telegram/telegram-api.mjs

@@ -0,0 +1,120 @@
+const DEFAULT_BASE_URL = 'https://api.telegram.org/';
+
+function cleanString(value) {
+  return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+
+function requestSignal(signal, timeoutMs) {
+  const timeout = AbortSignal.timeout(timeoutMs);
+  return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+
+export function validTelegramToken(value) {
+  return typeof value === 'string' && /^\d{5,20}:[A-Za-z0-9_-]{20,}$/.test(value.trim());
+}
+
+export class TelegramApi {
+  #token;
+  #fetch;
+  #baseUrl;
+
+  constructor({ token, fetchImpl = fetch, baseUrl = DEFAULT_BASE_URL }) {
+    if (!validTelegramToken(token)) throw new TypeError('Telegram Bot Token is invalid');
+    if (typeof fetchImpl !== 'function') throw new TypeError('TelegramApi requires fetch');
+    this.#token = token.trim();
+    this.#fetch = fetchImpl;
+    this.#baseUrl = new URL(baseUrl);
+  }
+
+  async getMe(options = {}) {
+    return this.#call('getMe', {}, options);
+  }
+
+  async getWebhookInfo(options = {}) {
+    return this.#call('getWebhookInfo', {}, options);
+  }
+
+  async getUpdates({ offset, timeout = 25, signal } = {}) {
+    const payload = {
+      timeout,
+      limit: 100,
+      allowed_updates: ['message'],
+      ...(Number.isSafeInteger(offset) ? { offset } : {}),
+    };
+    return this.#call('getUpdates', payload, {
+      signal,
+      timeoutMs: Math.max(10_000, (timeout + 10) * 1_000),
+    });
+  }
+
+  async sendMessage({ chatId, text, replyToMessageId, messageThreadId, signal }) {
+    return this.#call('sendMessage', {
+      chat_id: chatId,
+      text,
+      link_preview_options: { is_disabled: true },
+      ...(replyToMessageId ? {
+        reply_parameters: { message_id: replyToMessageId, allow_sending_without_reply: true },
+      } : {}),
+      ...(messageThreadId ? { message_thread_id: messageThreadId } : {}),
+    }, { signal });
+  }
+
+  async editMessageText({ chatId, messageId, text, signal }) {
+    return this.#call('editMessageText', {
+      chat_id: chatId,
+      message_id: messageId,
+      text,
+      link_preview_options: { is_disabled: true },
+    }, { signal });
+  }
+
+  async sendChatAction({ chatId, messageThreadId, signal }) {
+    return this.#call('sendChatAction', {
+      chat_id: chatId,
+      action: 'typing',
+      ...(messageThreadId ? { message_thread_id: messageThreadId } : {}),
+    }, { signal });
+  }
+
+  async #call(method, payload, { signal, timeoutMs = 15_000 } = {}) {
+    const url = new URL(this.#baseUrl);
+    url.pathname = `${url.pathname.replace(/\/$/, '')}/bot${this.#token}/${method}`;
+    let response;
+    try {
+      response = await this.#fetch(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(payload),
+        signal: requestSignal(signal, timeoutMs),
+        redirect: 'error',
+      });
+    } catch (error) {
+      if (error?.name === 'AbortError' || error?.name === 'TimeoutError') throw error;
+      throw new Error(`Telegram ${method} transport failed`);
+    }
+    let body;
+    try {
+      body = await response.json();
+    } catch {
+      throw new Error(`Telegram ${method} returned invalid JSON`);
+    }
+    if (!response.ok || body?.ok !== true) {
+      const description = cleanString(body?.description);
+      const error = new Error(description ?? `Telegram ${method} failed`);
+      error.code = Number.isInteger(body?.error_code) ? `telegram-${body.error_code}` : 'telegram-api-error';
+      throw error;
+    }
+    return body.result;
+  }
+}
+
+export async function inspectTelegramToken(token, options = {}) {
+  const api = new TelegramApi({ token, ...options });
+  const bot = await api.getMe();
+  if (!bot?.id || bot?.is_bot !== true) throw new Error('Telegram token does not belong to a bot');
+  return {
+    platformId: String(bot.id),
+    name: cleanString([bot.first_name, bot.last_name].filter(Boolean).join(' ')) ?? 'Telegram机器人',
+    username: cleanString(bot.username),
+  };
+}

package/src/channels/telegram/telegram-bridge.mjs

@@ -0,0 +1,15 @@
+import { TextHarnessBridge, createTextBridgeStatus } from '../shared/text-harness-bridge.mjs';
+
+export const TELEGRAM_DESCRIPTOR = Object.freeze({
+  key: 'telegram',
+  label: 'Telegram',
+  connectionLabel: ' Bot API 长轮询',
+});
+
+export class TelegramHarnessBridge extends TextHarnessBridge {
+  constructor(options) {
+    super({ descriptor: TELEGRAM_DESCRIPTOR, ...options });
+  }
+}
+
+export { createTextBridgeStatus as createTelegramBridgeStatus };

package/src/channels/telegram/telegram-controller.mjs

@@ -0,0 +1,16 @@
+import { TokenBotController } from '../shared/token-bot-controller.mjs';
+import { deriveTelegramBotIdentity, maskTelegramBotId } from './config-store.mjs';
+import { inspectTelegramToken } from './telegram-api.mjs';
+import { TELEGRAM_DESCRIPTOR } from './telegram-bridge.mjs';
+
+export class TelegramController extends TokenBotController {
+  constructor(options) {
+    super({
+      ...options,
+      descriptor: TELEGRAM_DESCRIPTOR,
+      inspectToken: options.inspectToken ?? inspectTelegramToken,
+      deriveIdentity: deriveTelegramBotIdentity,
+      maskPlatformId: maskTelegramBotId,
+    });
+  }
+}