@zhin.js/adapter-telegram 5.0.1 → 5.0.3

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # Changelog
 
+## 5.0.3
+
+### Patch Changes
+
+- cc5c94d: 约定式插件运行时迁移（breaking）：插件与适配器由 `usePlugin()` / `extends Adapter` 迁移为 `definePlugin` / `defineAdapter` + `plugin.ts` + 约定目录（`adapters/`、`commands/`、`components/`、`tools/` 等）。
+
+  - 新增约定式运行时包：`@zhin.js/plugin-runtime`、`@zhin.js/adapter`、`@zhin.js/runtime`、`@zhin.js/host-http`（首版 1.0.0 走 init-publish，不在本 changeset 内 bump）。
+  - 全部 20 个平台适配器改为约定式 `defineAdapter`，旧 `usePlugin` / `extends Adapter` / `segment-mapper` 生产入口已删除；onebot11 反向 WSS、onebot12 webhook/wss、milky sse/webhook/wss、satori webhook、kook webhook、qq webhook/middleware 等 slice 1 推迟的连接模式已补齐。
+  - 游戏 / 工具 / 服务插件同步迁移到约定目录结构。
+  - CLI 增加 plugin-runtime host installer（http/database/outbound/schedule/console 等）。
+
+  后续加固（同批）：
+
+  - CLI：`zhin runtime start --daemon`（pidfile/崩溃拉起/风暴保护），orphan watchdog 防僵尸进程；legacy `zhin dev` / `zhin start` 已移除（含 `zhin restart`），`zhin stop` 兼容新 daemon。
+  - 安全：builtin 工具统一走 `security/policy-facade.ts` 的 `runToolPolicies`（声明式策略表，deny 优先）；审计日志 close flush + 背压队列；`splitCompoundCommand` 引号感知、`extractCommandName` 去引号堵绕过。
+  - 日志：Logger 双堆栈修复、本地时区、`getLogger` 挂树（`setLevel` 递归生效）、第三方库（log4js/discord）桥接、启动人读总结。
+  - 结构：`plugins/games/shared` 迁为 `packages/game-kit`（`@zhin.js/game-kit`）；死目录 `plugins/adapters/common` 删除。
+  - 脚手架：`create-zhin-app` / `zhin new` / scaffold-wizard 生成物改为 Plugin Runtime 形态（minimal-bot 同构，新配置格式）。
+  - Console：endpoint.list 真实名称与 phase、schema:get-all 按 instanceKey 映射、db:\* 接 DatabaseHost。
+
+  注：按仓库发布惯例（见 1bb345dd2），本次 breaking 迁移统一使用 patch，避免 zhin.js 5.0 级联。
+
+- 447f3e2: 迁移缺口修复（legacy 功能对齐）：
+
+  - html 段出站规范化：经 `@zhin.js/html-renderer` 渲染为 image 段（sandbox 豁免、无渲染器时降级文本），修复真实平台 `[object Object]`。
+  - 群聊 @ 触发 AI：适配器入站标注 `metadata.mentioned`（icqq/qq/slack/onebot11/onebot12/napcat/milky/discord/telegram/kook/dingtalk/satori），`matchAiTrigger` 补齐 ignorePrefixes/respondToAt/respondToPrivate/keywords（默认值与 legacy 对齐）。
+  - im_transcripts 全量流水恢复写入（chat_history 工具可用）；群聊旁听上下文回迁。
+  - `ai.trigger.timeout/thinkingMessage/errorTemplate` 生效；masters/trusted 角色解析对齐 legacy。
+  - `Message.sender` 统一为用户 ID（onebot11/12、napcat、milky 原误传显示名）；quote_id 经 metadata 接入 AI 引用上下文。
+
+- Updated dependencies [16ec4e8]
+- Updated dependencies [cc5c94d]
+- Updated dependencies [447f3e2]
+  - @zhin.js/core@1.3.5
+  - @zhin.js/agent@1.0.4
+  - @zhin.js/host-http@1.0.1
+  - zhin.js@4.1.3
+  - @zhin.js/logger@1.0.75
+  - @zhin.js/plugin-runtime@1.0.1
+  - @zhin.js/adapter@1.0.1
+
+## 5.0.2
+
+### Patch Changes
+
+- 872c583: fix: 代码格式优化
+- Updated dependencies [872c583]
+- Updated dependencies [872c583]
+  - @zhin.js/agent@1.0.3
+  - @zhin.js/client@2.0.5
+  - @zhin.js/contract@1.0.3
+  - @zhin.js/host-api@2.0.5
+  - @zhin.js/host-router@2.0.3
+  - @zhin.js/logger@1.0.74
+  - zhin.js@4.1.2
+
 ## 5.0.1
 
 ### Patch Changes

package/README.md

@@ -1,179 +1,105 @@
 # @zhin.js/adapter-telegram
 
-Telegram adapter for zhin.js framework.
+Zhin.js Telegram Bot API 适配器（Plugin Runtime），默认通过 **长轮询 `getUpdates`** 收发消息（无需 host）。
 
-## Installation
+## 功能
+
+- 长轮询 `getUpdates` 入站（默认；无需公网 IP / host-http）
+- 解析 text / image / video / audio / voice / document / sticker / location / callback_query
+- 支持私聊与群组
+- 出站 `send({ target, payload })` → Bot API（text / media / keyboard）
+- 约定式 `defineAdapter` / `definePlugin`（无需 `usePlugin`）
+- Webhook 模式延期（需 `httpHostToken`）；配置 `polling: false` 会明确报错
+
+## 安装
 
 ```bash
 pnpm add @zhin.js/adapter-telegram
 ```
 
-## Prerequisites
+## Plugin Runtime
 
-| 要求 | 说明 |
-|------|------|
-| **Bot Token** | 通过 [@BotFather](https://t.me/botfather) 创建 Endpoint 并获取 Token |
-| **Polling（默认）** | 本地开发无需公网 IP；`polling: true`（默认） |
-| **Webhook（可选）** | 生产环境：`polling: false` + 公网 **HTTPS** 域名与有效 TLS；Telegraf 在 `webhook.port` 监听 |
-| **host-router** | 不需要；本适配器自行处理 polling / webhook |
+- `@zhin.js/adapter` — 约定式 `adapters/telegram.ts`（`defineAdapter`）
+- `@zhin.js/core` — `messageGatewayToken` 入站/出站
+- `@zhin.js/plugin-runtime` — `plugin.ts`（`definePlugin`）
+- 配置经插件 `schema.json` 落到 `plugins.<instanceKey>`
+- **无需** `@zhin.js/host-http`（polling 路径）
 
-必填字段见 `TelegramEndpointConfig`：`context`、`name`、`token`；`polling` 默认为 `true`。
+入站：`gateway.receive({ adapter, target: chatId, content: text, sender, metadata })`  
+出站：`send({ target, payload })` → Telegram Bot API
 
-## Minimal configuration
+### 平台权限（platform permit）
 
-```yaml
-plugins:
-  - "@zhin.js/adapter-telegram"
+- sender role 已恢复：群消息入站时经 `getChatMember`（60s 缓存）解析，写入 `metadata.senderRole` / `metadata.senderPermissions`。
+- `plugin.ts` 在 generation setup 注册 checker，并在 dispose 注销；Plugin Runtime CapabilityIngress 与 ToolSystem 统一经 Core `canAccessTool()` 消费 `permissions`。
 
-endpoints:
-  - context: telegram
-    name: my-telegram-bot
-    token: "${TELEGRAM_TOKEN}"
-    polling: true
-```
+## 前置条件
 
-## Configuration
+| 要求 | 说明 |
+|------|------|
+| **Bot Token** | 通过 [@BotFather](https://t.me/botfather) 创建并获取 Token |
+| **Polling（默认）** | 本地/生产均可；主动拉取更新，无需公网 HTTPS |
+| **网络** | 出站可访问 `api.telegram.org` |
+| **host-http** | Polling **不需要**；Webhook 延期至下一棒 |
 
-### 长轮询 Polling（默认，本地开发）
+必填字段：`token`。
 
-无需公网 IP 或 HTTPS，Bot 主动向 Telegram 拉取更新：
+## 最小配置
 
 ```yaml
+# zhin.config.yml（Plugin Runtime）
 plugins:
-  - "@zhin.js/adapter-telegram"
-
-endpoints:
-  - context: telegram
+  telegram:
     name: my-telegram-bot
-    token: "${TELEGRAM_TOKEN}"
-    polling: true
+    token: ${TELEGRAM_TOKEN}
+    # polling: true   # 默认
 ```
 
-### Webhook（生产环境）
-
-设置 `polling: false` 并配置 `webhook` 对象；Telegraf 在 `webhook.port` 上启动 HTTPS 服务：
-
-```yaml
-endpoints:
-  - context: telegram
-    name: my-telegram-bot
-    token: "${TELEGRAM_TOKEN}"
-    polling: false
-    webhook:
-      domain: https://bot.example.com
-      path: /telegram-webhook
-      port: 8443
-```
+根插件 `zhin.plugins`（或项目图）需引用 `@zhin.js/adapter-telegram`（`instanceKey: telegram`）。
 
-#### Webhook 前置条件
+## 环境变量
 
-| 要求 | 说明 |
+| 变量 | 说明 |
 |------|------|
-| **HTTPS 公网域名** | `webhook.domain` 须为 Telegram 可访问的 `https://` 地址（有效 TLS 证书） |
-| **端口可达** | `webhook.port`（如 8443）须从公网可连，或通过反向代理转发 |
-| **Bot Token** | 通过 [@BotFather](https://t.me/botfather) 获取 |
-| **无需 host-router** | 本适配器由 Telegraf 自行监听 webhook，不依赖 `@zhin.js/host-router` |
-
-> 本地开发建议先用 **polling**；上线后再切 webhook 并在 BotFather 或 launch 时注册 webhook URL。
-
-TypeScript 等价配置：
-
-```typescript
-import { defineConfig } from 'zhin.js'
-
-export default defineConfig({
-  endpoints: [
-    {
-      name: 'my-telegram-bot',
-      context: 'telegram',
-      token: 'YOUR_BOT_TOKEN',
-      polling: true,
-      // polling: false,
-      // webhook: { domain: 'https://yourdomain.com', path: '/telegram-webhook', port: 8443 },
-    }
-  ]
-})
-```
-
-## Features
-
-- ✅ Send and receive text messages
-- ✅ Support for rich media (images, videos, audio, documents)
-- ✅ Message formatting (bold, italic, code, links)
-- ✅ Reply to messages
-- ✅ Mentions (@username)
-- ✅ Stickers and locations
-- ✅ Callback queries (inline buttons)
-- ✅ Long polling and webhook modes
-- ✅ Private and group chats
+| `TELEGRAM_TOKEN` / `TELEGRAM_BOT_TOKEN` | Bot Token |
+| `TELEGRAM_BOT_NAME` | 可选，默认 endpoint 名 |
 
-## Getting Your Endpoint Token
+## Webhook（延期）
 
-1. Talk to [@BotFather](https://t.me/botfather) on Telegram
-2. Send `/newbot` and follow the instructions
-3. Copy the bot token provided
-4. Add the token to your configuration
+`polling: false` + `webhook` 目前会抛出明确错误：
 
-## Usage Examples
+> Telegram webhook mode is deferred until httpHostToken wiring; use polling: true (default) for now
 
-### Basic Message Handling
+下一棒将用 `httpHostToken` 注册 POST 路由，不再使用 Telegraf 自建监听或 legacy host-router。
 
-```typescript
-import { usePlugin, MessageCommand } from 'zhin.js'
+## 消息类型映射
 
-const { addCommand } = usePlugin()
-
-addCommand(new MessageCommand('hello')
-  .action(async (message) => {
-    return 'Hello from Telegram!'
-  })
-)
-```
-
-### Send Rich Media
-
-```typescript
-addCommand(new MessageCommand('photo')
-  .action(async (message) => {
-    return [
-      { type: 'image', data: { url: 'https://example.com/photo.jpg' } },
-      { type: 'text', data: { text: 'Check out this photo!' } }
-    ]
-  })
-)
-```
+| Telegram | 入站 content（文本摘要） | 出站 wire |
+|----------|--------------------------|-----------|
+| text | 原文 | sendMessage |
+| photo | `[image]` / caption | sendPhoto（`file_id` / `url`） |
+| video | `[video]` | sendVideo |
+| audio / voice | `[audio]` / `[voice]` | sendAudio / sendVoice |
+| document | `[file: name]` | sendDocument |
+| sticker | `[sticker: …]` | sendSticker |
+| location | `[location: lat,lon]` | sendLocation |
+| callback_query | `[action: data]` | — |
 
-### Reply to Messages
+## AI tools
 
-```typescript
-addCommand(new MessageCommand('quote <text:text>')
-  .action(async (message, result) => {
-    await message.$reply(`You said: ${result.params.text}`, true) // true = quote original message
-  })
-)
-```
-
-## Telegram-Specific Features
-
-### Callback Queries
-
-The adapter automatically handles callback queries (from inline keyboards) as special messages.
-
-### File Handling
-
-You can send files using:
-- `file_id` (from received messages)
-- URL
-- Local file path
+| Kind | Path |
+|------|------|
+| Platform tools (10) | `agent/tools/`（invite / pin / admins / sticker / poll 等） |
+| Skill doc | `agent/skills/telegram.md` |
 
-## Troubleshooting
+## 故障排查
 
 | 现象 | 排查 |
 |------|------|
-| Endpoint 无响应 / 收不到消息 | 确认 Token 正确；进程已启动；私聊 Endpoint 或将其加入群组 |
-| Polling 报错 | 检查网络能否访问 `api.telegram.org`；同一 Token 勿多进程同时 polling |
-| Webhook 不工作 | `webhook.domain` 须为 Telegram 可访问的 `https://`；放行 `webhook.port`；BotFather 或 launch 时注册 URL |
-| 发送失败 | Token  revoked 或 Endpoint 被限制；查看日志中的 Telegraf 错误 |
+| 收不到消息 | Token 是否正确；进程已 `open()`；同一 Token 勿多进程同时 polling |
+| Polling 报错 | 检查能否访问 `api.telegram.org`；查看日志 `op: poll` |
+| Webhook 配置报错 | 当前仅支持 polling；去掉 `polling: false` |
+| 发送失败 | Token 是否被撤销；查看 Bot API 错误描述 |
 
 ## Documentation
 

package/adapters/telegram.ts

@@ -0,0 +1,27 @@
+/**
+ * Convention entry: discover `adapters/telegram.ts` → defineAdapter.
+ */
+import { defineAdapter } from '@zhin.js/adapter';
+import { messageGatewayToken } from '@zhin.js/core/runtime';
+import { httpHostToken } from '@zhin.js/host-http';
+import { TelegramEndpoint } from '../src/endpoint.js';
+import {
+  resolveTelegramConfig,
+  type TelegramAdapterConfig,
+} from '../src/protocol.js';
+
+export { TelegramEndpoint } from '../src/endpoint.js';
+export type { TelegramEndpointOptions, TelegramFetch } from '../src/endpoint.js';
+
+export default defineAdapter<TelegramAdapterConfig>({
+  capabilities: ['inbound', 'outbound'],
+  create(context) {
+    const config = resolveTelegramConfig(context.config);
+    return new TelegramEndpoint({
+      id: context.id,
+      gateway: context.use(messageGatewayToken),
+      config,
+      http: config.mode === 'webhook' ? context.use(httpHostToken) : undefined,
+    });
+  },
+});

package/agent/tools/create_invite.ts

@@ -0,0 +1,20 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { platformPermit } from '../../src/platform-permit.js';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string }>({
+  description: '创建 Telegram 群组邀请链接',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  permissions: [platformPermit('chat_administrator')],
+  async execute({ endpoint_id, chat_id  }: { endpoint_id: string; chat_id: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const link = await endpoint.createInviteLink(Number(chat_id));
+    return { invite_link: link, message: `邀请链接: ${link}` };
+  },
+});

package/agent/tools/list_admins.ts

@@ -0,0 +1,26 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string }>({
+  description: '获取 Telegram 群组管理员列表',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id  }: { endpoint_id: string; chat_id: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const admins = await endpoint.getChatAdmins(Number(chat_id));
+    return {
+      admins: admins.map((a: { user: { id: number; username?: string; first_name?: string }; status: string }) => ({
+        user_id: a.user.id,
+        username: a.user.username,
+        first_name: a.user.first_name,
+        status: a.status,
+      })),
+      count: admins.length,
+    };
+  },
+});

package/agent/tools/member_count.ts

@@ -0,0 +1,18 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string }>({
+  description: '获取 Telegram 群组成员数量',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id  }: { endpoint_id: string; chat_id: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const count = await endpoint.getChatMemberCount(Number(chat_id));
+    return { count, message: `群组共有 ${count} 名成员` };
+  },
+});

package/agent/tools/pin_message.ts

@@ -0,0 +1,21 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { platformPermit } from '../../src/platform-permit.js';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; message_id: string }>({
+  description: '置顶 Telegram 群组消息',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    message_id: z.string().describe('消息 ID'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  permissions: [platformPermit('pin_messages')],
+  async execute({ endpoint_id, chat_id, message_id  }: { endpoint_id: string; chat_id: string; message_id: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const success = await endpoint.pinMessage(Number(chat_id), Number(message_id));
+    return { success, message: success ? '消息已置顶' : '操作失败' };
+  },
+});

package/agent/tools/react.ts

@@ -0,0 +1,20 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; message_id: string; reaction: string }>({
+  description: '对 Telegram 消息添加表情反应',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    message_id: z.string().describe('消息 ID'),
+    reaction: z.string().describe('反应表情（如 👍、❤️、🔥）'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id, message_id, reaction  }: { endpoint_id: string; chat_id: string; message_id: string; reaction: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const success = await endpoint.setMessageReaction(Number(chat_id), Number(message_id), reaction);
+    return { success, message: success ? `已添加反应 ${reaction}` : '操作失败' };
+  },
+});

package/agent/tools/send_poll.ts

@@ -0,0 +1,34 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; question: string; options: string; is_anonymous?: boolean; allows_multiple?: boolean }>({
+  description: '在 Telegram 群组中发起投票',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    question: z.string().describe('投票问题'),
+    options: z.string().describe('选项 JSON 数组，如 ["A","B","C"]'),
+    is_anonymous: z.boolean().optional().describe('是否匿名投票，默认 true'),
+    allows_multiple: z.boolean().optional().describe('是否允许多选，默认 false'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id, question, options, is_anonymous, allows_multiple  }: { endpoint_id: string; chat_id: string; question: string; options: string; is_anonymous?: boolean; allows_multiple?: boolean }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    let optList: string[];
+    try {
+      optList = JSON.parse(options);
+    } catch {
+      return { success: false, message: 'options 格式错误，应为 JSON 数组' };
+    }
+    if (!Array.isArray(optList) || optList.length < 2) {
+      return { success: false, message: '至少需要 2 个选项' };
+    }
+    const result = await endpoint.sendPoll(
+      Number(chat_id), question, optList,
+      is_anonymous ?? true, allows_multiple ?? false,
+    );
+    return { success: true, message_id: result.message_id, message: '投票已发送' };
+  },
+});

package/agent/tools/send_sticker.ts

@@ -0,0 +1,19 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; sticker: string }>({
+  description: '发送 Telegram 贴纸',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    sticker: z.string().describe('贴纸 file_id 或 URL'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id, sticker  }: { endpoint_id: string; chat_id: string; sticker: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const result = await endpoint.sendStickerMessage(Number(chat_id), sticker);
+    return { success: true, message_id: result.message_id, message: '贴纸已发送' };
+  },
+});

package/agent/tools/set_description.ts

@@ -0,0 +1,19 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; description: string }>({
+  description: '设置 Telegram 群组描述',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    description: z.string().describe('群描述文字'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  async execute({ endpoint_id, chat_id, description  }: { endpoint_id: string; chat_id: string; description: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const success = await endpoint.setChatDescription(Number(chat_id), description);
+    return { success, message: success ? '群描述已更新' : '操作失败' };
+  },
+});

package/agent/tools/set_permissions.ts

@@ -0,0 +1,33 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { platformPermit } from '../../src/platform-permit.js';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; can_send_messages?: boolean; can_send_photos?: boolean; can_send_videos?: boolean; can_send_polls?: boolean; can_send_other_messages?: boolean; can_add_web_page_previews?: boolean; can_change_info?: boolean; can_invite_users?: boolean; can_pin_messages?: boolean }>({
+  description: '设置 Telegram 群组的默认成员权限',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    can_send_messages: z.boolean().optional().describe('是否可以发消息'),
+    can_send_photos: z.boolean().optional().describe('是否可以发图片'),
+    can_send_videos: z.boolean().optional().describe('是否可以发视频'),
+    can_send_polls: z.boolean().optional().describe('是否可以发投票'),
+    can_send_other_messages: z.boolean().optional().describe('是否可以发贴纸/GIF等'),
+    can_add_web_page_previews: z.boolean().optional().describe('是否可以添加网页预览'),
+    can_change_info: z.boolean().optional().describe('是否可以改群信息'),
+    can_invite_users: z.boolean().optional().describe('是否可以邀请用户'),
+    can_pin_messages: z.boolean().optional().describe('是否可以置顶消息'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  permissions: [platformPermit('manage_chat')],
+  async execute({ endpoint_id, chat_id, ...perms  }: { endpoint_id: string; chat_id: string; can_send_messages?: boolean; can_send_photos?: boolean; can_send_videos?: boolean; can_send_polls?: boolean; can_send_other_messages?: boolean; can_add_web_page_previews?: boolean; can_change_info?: boolean; can_invite_users?: boolean; can_pin_messages?: boolean }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const permissions: Record<string, boolean> = {};
+    for (const [k, v] of Object.entries(perms)) {
+      if (typeof v === 'boolean') permissions[k] = v;
+    }
+    const success = await endpoint.setChatPermissionsAll(Number(chat_id), permissions);
+    return { success, message: success ? '群权限已更新' : '操作失败' };
+  },
+});

package/agent/tools/unpin_message.ts

@@ -0,0 +1,21 @@
+import { defineAgentTool } from '@zhin.js/agent/tools';
+import { z } from 'zod';
+import { platformPermit } from '../../src/platform-permit.js';
+import { getTelegramAgentDeps } from '../../src/telegram-agent-deps.js';
+
+export default defineAgentTool<{ endpoint_id: string; chat_id: string; message_id?: string }>({
+  description: '取消置顶 Telegram 群组消息',
+  inputSchema: z.object({
+    endpoint_id: z.string().describe('Endpoint 名称'),
+    chat_id: z.string().describe('聊天 ID'),
+    message_id: z.string().optional().describe('消息 ID（可选，不提供则取消所有置顶）'),
+  }),
+  platforms: ['telegram'],
+  tags: ['telegram'],
+  permissions: [platformPermit('pin_messages')],
+  async execute({ endpoint_id, chat_id, message_id  }: { endpoint_id: string; chat_id: string; message_id?: string }) {
+    const endpoint = getTelegramAgentDeps().getEndpoint(endpoint_id);
+    const success = await endpoint.unpinMessage(Number(chat_id), message_id ? Number(message_id) : undefined);
+    return { success, message: success ? '已取消置顶' : '操作失败' };
+  },
+});