npm - abs-zalo-bot - Versions diffs - 0.2.0 → 0.3.1 - Mend

abs-zalo-bot 0.2.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/README.md CHANGED Viewed

@@ -1,435 +1,99 @@
-# ABS Zalo Bot
+# ABS Zalo Agent Engine 🚀 (Agent Business System)
-**Install once · run from a dashboard button or one command · agents read the repo and know how to work in it**
+[![npm version](https://img.shields.io/npm/v/abs-zalo-bot.svg?color=blue)](https://www.npmjs.com/package/abs-zalo-bot)
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
+[![Automated Tests](https://img.shields.io/badge/Tests-68%2F68%20Passing-brightgreen.svg)](test/)
+[![AI Agent Ready](https://img.shields.io/badge/AI%20Agent-Hermes%20%7C%20Claude%20Code%20%7C%20Codex-purple.svg)](mcp/)
+[![Model Context Protocol](https://img.shields.io/badge/MCP-Standard%20v1.3.0-blueviolet.svg)](mcp/)
-A local/VPS Zalo bridge for Hermes and coding agents:
+**The Free, Transparent & Autonomous Zalo AI Agent Engine for Developers, Hermes, Claude Code, and Multi-Agent Frameworks.**
-- **Zalo Personal QR**: listens to allowlisted sources, stores data locally, and posts digests to one destination. This is the *unofficial* path — internal/demo use with a dedicated account only.
-- **Zalo OA**: the official adapter, kept separate from Personal QR, and the right choice for a customer-facing bot.
-- **Policy Guard**: fail-closed by default. Nothing is sent until it is configured.
-- **Dashboard**: a non-coder can connect the QR, pick sources, pick a destination, and flip the kill switch.
-- **MCP**: agents can read status, groups, users and corpus, and ask for the destination through a safe contract.
-> Just want it running for the owner? Read the **[Non-coder quickstart](docs/quickstart-non-coder.md)**.
->
-> Handing this repo to Claude Code, Codex, Hermes or any other agent? The agent must read **[AGENTS.md](AGENTS.md)** and the **[Agent handoff](docs/agent-handoff.md)** before running any command.
+Install once · run with 1 command or browser QR · AI Agents connect via Model Context Protocol (MCP) to manage Zalo autonomously, safely, and transparently.
 ---
-## Tóm tắt tiếng Việt
-Repo này là cầu nối Zalo cho agent. Hai đường tách biệt: **Personal QR** (không chính thức, dùng account riêng, chỉ nội bộ/demo) và **Zalo OA** (chính thức, dùng cho khách hàng). Mặc định **fail-closed** — chưa cấu hình thì không gửi gì cả.
-Cài nhanh: `bash setup.sh` rồi `npm start`, mở `http://127.0.0.1:3871`. Bắt đầu ở chế độ `listen_only`, kiểm tra dữ liệu đúng rồi mới mở thêm.
+## 🌟 Why ABS Zalo Agent Engine?
-Ba điều tuyệt đối không làm: không dán secret/OTP/PIN vào chat cho agent, không dùng account Zalo cá nhân chính để automation, không mở port 3871 thẳng ra Internet.
-Tài liệu còn lại viết bằng tiếng Anh để mọi agent đọc được. Câu lệnh và tên biến giữ nguyên, đọc lướt vẫn theo được.
+| Core Advantage | ABS Zalo Agent Engine | Conventional Bots & Scrapers |
+| :--- | :--- | :--- |
+| **Pricing & Freedom** | **100% Free & Open-Source (MIT)** | Paid licenses / Black-box scripts |
+| **Architecture** | **Dual-Adapter: Personal QR + Official OA (Webhook)** | Single unofficial scraping adapter |
+| **Safety & Privacy** | **Fail-Closed PolicyGuard + Secret Redaction** | No guardrails (high ban/checkpoint risk) |
+| **AI Integration** | **Native Model Context Protocol (MCP Stdio Server)** | Raw HTTP webhooks / Manual glue code |
+| **Code Quality** | **68/68 Automated Unit & Integration Tests** | Little to no test coverage |
+| **Multi-Agent Ready** | **Hermes Agent, Claude Code, OpenAI Codex, Cursor** | Single-system or standalone CLI only |
 ---
-## Documentation map
-Start here, in this order:
-| File | What it is |
-|---|---|
-| `README.md` | This file — install, run, and what the project does |
-| `docs/quickstart-non-coder.md` | Fastest path if you do not write code |
-| `AGENTS.md` | Safety boundary every AI agent must follow |
-| `docs/install.md` · `docs/configuration.md` | Setup and environment variables |
-| `docs/personal-qr.md` · `docs/official-oa.md` | The two Zalo adapters |
-| `docs/operations.md` · `docs/troubleshooting.md` | Running it day to day |
-| `SECURITY.md` · `CONTRIBUTING.md` | Reporting issues and sending changes |
-| `docs/internal/` | Design, spec, plan and verification notes kept for maintainers |
-## Works with any AI coding tool
-This repo follows the `AGENTS.md` convention that Codex, Cursor, Zed and other agents already read.
-Each tool has its own entrypoint file; they all point at the same rule set:
-| Tool | Entrypoint | How to start |
-|---|---|---|
-| Claude Code (Sonnet/Opus) | `CLAUDE.md` | open repo, run `claude` |
-| Codex CLI (GPT) | `CODEX.md` + `AGENTS.md` | open repo, run `codex` |
-| Antigravity / Gemini CLI | `GEMINI.md` | open repo, run the agent |
-| Hermes Agent | `HERMES.md` + `SKILL.md` | `cp -r . ~/.hermes/skills/abs-zalo-bot` or attach via MCP |
-| Cursor | `.cursorrules` | auto-loaded on open |
-| GitHub Copilot | `.github/copilot-instructions.md` | auto-loaded in VS Code |
-| Any other agent | `AGENTS.md` | drop the file into chat |
-Same bootstrap for every tool:
-```bash
-node --version   # requires >= 22.5
-npm ci
-npm run doctor
-npm test
-```
-## 1. Pick the right path before installing
-| What you need | Pick | Notes |
-|---|---|---|
-| Listen to internal groups and digest them into one ops group | Personal QR | Unofficial. Use a dedicated account. No spam, no broadcast |
-| Talk to customers: FAQ, leads, booking, official notices | Zalo OA | The official path. Needs OA credentials and an HTTPS webhook |
-| Not sure yet | Start with Personal QR in `listen_only` | No automatic sending. Inspect the data first |
-**Do not use your main personal Zalo account for automation.** Never auto-enter OTP/PIN, never bypass login, never broadcast.
----
-## 2. Quick install — no coding required
-### Requirements
-- A Linux or macOS machine.
-- Node.js **22.5 or newer**.
-- A dedicated Zalo account if you use Personal QR.
-- No API key is needed to run Personal QR in local listen/digest mode.
-### Are a VPS, a model, and Telegram required?
-- **VPS:** not required to try it or run locally. Only needed for 24/7 operation. For an MVP, start around 1 vCPU / 1 GB RAM / 10 GB disk, and put HTTPS plus auth in front of it if it is reachable from outside. That is a starting point for operations, not a load guarantee.
-- **Model/API key:** not required for `listen_only` or the local fallback. You only need a Hermes API compatible with OpenAI's `/v1/chat/completions` if you want an LLM to analyse or rewrite digests. This repo does not install a model and does not issue keys.
-- **Telegram:** not required for the core bridge. The QR is shown in the dashboard on the local machine or VPS; this version does not forward the QR image over Telegram.
-- **Live QR:** there are real routes — `POST /api/accounts/:id/connect`, the `QRCodeGenerated` callback, `GET /api/accounts/:id/qr` — and the dashboard renders it. Scanning and confirming on the phone stays a manual action by the account owner.
-If you do not know whether Node.js is installed, hand the agent exactly this:
-> "Check whether this machine has Node.js 22.5+. If not, walk me through installing it. Do not enter any secret, OTP or PIN on my behalf."
-### One install command
-From the repo directory:
-```bash
-bash setup.sh
-```
-Setup will:
-1. check Node.js;
-2. create a local `.env` if missing;
-3. create `config/bots.json` from the example if missing;
-4. create the data directory with local-only permissions;
-5. run `npm ci`;
-6. run tests, config validation, secret scan, syntax check and self-check;
-7. print the next step.
-Setup does **not** log into Zalo, scan a QR, send messages, enter OTP/PIN, or touch real credentials.
-For agents or CI that must run unattended:
-```bash
-bash setup.sh --non-interactive
-```
-To set up and immediately run in the foreground:
-```bash
-bash setup.sh --start
-```
-### Run the dashboard
+## 🇻🇳 Tóm tắt tiếng Việt
-If you did not use `--start`:
+`abs-zalo-bot` là hạ tầng **Zalo AI Agent** mã nguồn mở miễn phí, an toàn và minh bạch nhất cho các nhà phát triển và doanh nghiệp:
-```bash
-npm start
-```
-Then open:
-```text
-http://127.0.0.1:3871
-```
-The dashboard binds to localhost by default. On a remote machine or VPS, **do not expose the port directly to the Internet** — use an HTTPS reverse proxy with its own token/auth.
+1. **Zalo Cá nhân (Personal Engine)**: Quản trị nhóm chuyên sâu (Kick thành viên, chuyển nhượng Trưởng nhóm, bổ nhiệm Phó nhóm), tạo & khoá bình chọn (Polls), thả reaction emoji, thu hồi tin nhắn (Recall/Undo), và tự động ghi nhận ngữ cảnh (Corpus Listener).
+2. **Zalo Official Account (OA Doanh nghiệp)**: Webhook 2 chiều chuẩn bảo mật HMAC, tự động tiếp nhận khách hàng, hỗ trợ phân loại Lead Generation & CSKH 24/7.
+3. **Bảo mật & Minh bạch (Fail-Closed Policy Guard)**: Tự động che giấu OTP/thông tin nhạy cảm, chống spam, bảo vệ an toàn tài khoản Zalo.
+4. **Chuẩn Quốc Tế MCP (Model Context Protocol)**: Kết nối trực tiếp và cấp quyền cho AI Agents (Hermes, Claude Code, Codex, Cursor...) làm việc tự chủ mà không cần viết thêm API wrapper.
 ---
-## 3. First Personal QR connection
-1. Run `npm start`.
-2. Open the dashboard.
-3. Click **Connect QR** — the dashboard calls the live route and renders the QR image.
-4. Scan it from your phone using a **dedicated account**.
-5. Wait for status `connected`.
-6. Click **Scan group IDs** if the group list needs refreshing.
-7. Pick one group as the **destination group**.
-8. Add sources under **Allowlist source**.
-9. Start in `listen_only`.
-10. Only after the stored data looks right, move one source to `digest_only`.
-What the modes mean:
-- `off`: source disabled.
-- `listen_only`: store only. No digest, no send.
-- `digest_only`: included in digests on request or on schedule.
-- `alert_only`: only high-priority candidates are considered for alerts.
-- `mention_only`: still blocked from replying while `READ_ONLY_SOURCE=true`.
-- `reply_enabled`: does not override Policy Guard on its own. Use only with a reviewed policy.
-**Safe defaults:** sources are not replied to, DMs are not replied to, mentions are not replied to, and outbound goes only to the configured destination.
-On a headless VPS, reach the dashboard over an SSH tunnel or an authenticated HTTPS reverse proxy. Do not open port `3871` to the Internet, and never put a QR or session into logs or chat.
+## ⚡ MCP Tool Surface for AI Agents (`abs-zalo-mcp`)
+Attach `npx abs-zalo-bot` or `node mcp/server.js` to your Agent configuration:
+| Category | Tool Name | Description |
+| :--- | :--- | :--- |
+| **Telemetry & Health** | `abs_zalo_status` | Check bridge status, safety flags, and message corpus count |
+| | `abs_zalo_list_groups` | List allowlisted source & destination groups |
+| | `abs_zalo_recent_messages` | Read captured message streams with full metadata |
+| | `abs_zalo_corpus_summary` | Get aggregated inventory of users, groups, and logs |
+| **Group Administration** | `abs_zalo_kick_member` | Remove a member from a group (Admin/Owner required) |
+| | `abs_zalo_transfer_owner` | Transfer group ownership (Owner required) |
+| | `abs_zalo_add_deputy` | Promote a member to Group Deputy / Admin |
+| | `abs_zalo_remove_deputy` | Demote a Group Deputy back to regular member |
+| | `abs_zalo_invite_member` | Invite / add a user into a group |
+| **Interaction & Polls** | `abs_zalo_create_poll` | Create interactive polls with custom options |
+| | `abs_zalo_lock_poll` | Lock / close an active voting poll |
+| | `abs_zalo_react_message` | Send emoji reactions to messages (`/:heart`, `/:like`, etc.) |
+| | `abs_zalo_undo_message` | Recall / undo a previously sent message |
+| **Discovery & Intel** | `abs_zalo_get_user_info` | Fetch public user profile by userId |
+| | `abs_zalo_get_group_info` | Fetch group settings and metadata |
+| | `abs_zalo_find_user` | Lookup user profile by phone number |
+| | `abs_zalo_list_friends` | List all friends of the account |
+| | `abs_zalo_list_all_groups`| Fetch all joined groups from Zalo server |
 ---
-## 4. Verify the install
-None of these send a real message:
+## 🚀 Quickstart
+### 1. Global Installation (via npm)
 ```bash
-npm run doctor
-npm run status
-npm test
-npm run validate-config
-npm run secret-scan
-npm run syntax-check
-npm run self-check
+npm install -g abs-zalo-bot
 ```
-What to look for:
-- `npm test`: everything passes.
-- `npm run doctor`: no public/runtime config errors.
-- `status`: never prints cookies, IMEI, refresh tokens or a raw session.
-- `self-check`: an empty destination/allowlist is a normal fail-closed state.
-Daemon smoke test:
-```bash
-npm run smoke
-```
-`npm run smoke` only checks health, MCP and safety. It **does not send a real message** unless `BATTLE_SEND=true` is set.
----
-## 5. Official OA
-Personal QR and OA are two different paths. Never mix a Personal session with OA OAuth.
-### Local preparation
+### 2. Run with Node / NPM
 ```bash
-cp config/bots.example.json config/bots.json
-```
-Open `config/bots.json`, keep the bot on `draft_first`, and enable it only once valid credentials exist. That file is git-ignored and must not be committed.
-Put credentials in `.env` or a local secret manager — **never in chat, issues, the README, or an agent prompt**. Only the variable names declared under `credential` are used:
-- `ZALO_OA_APP_ID_DEMO_OA`
-- `ZALO_OA_APP_SECRET_DEMO_OA`
-- `ZALO_OA_REFRESH_TOKEN_DEMO_OA`
-- `ZALO_OA_WEBHOOK_SECRET`
+# Clone repository
+git clone https://github.com/teddiesloco/abs-zalo-bot.git
+cd abs-zalo-bot
-Real values never live in the public repo.
-### Webhook
-Adapter route:
-```text
-POST /webhooks/zalo/oa/:bot_id
-```
-The handler validates ingress, normalises text events, and acknowledges quickly. It **does not call an AI and does not send a reply**. Any outbound must go through an external workflow or agent with its own approval and policy.
-Production needs:
-- an HTTPS reverse proxy;
-- a signature check or an authenticated edge;
-- a body size limit;
-- logs limited to redacted event IDs/receipts;
-- `draft_first` before enabling any send path.
-Details: [docs/official-oa.md](docs/official-oa.md).
----
-## 6. Repo layout for agents and CLIs
-```text
-AGENTS.md                    non-negotiable rules for every agent
-CLAUDE.md                    entrypoint for Claude Code
-CODEX.md                     entrypoint/checklist for Codex CLI
-README.md                    home page and quickstart
-CONTRIBUTING.md              contribution rules
-SECURITY.md                  how to report a vulnerability
-docs/internal/00-DESIGN.md   architecture
-docs/internal/01-SPEC.md     I/O contract
-docs/internal/02-PLAN.md     build order
-docs/internal/03-HARNESS.md  offline test harness
-docs/internal/04-VERIFY.md   verification gate
-docs/internal/05-CONTEXT.md  runtime constraints
-setup.sh / install.sh        one-command install
-scripts/setup.js             setup + doctor + dashboard info
-scripts/public-gate.js       validate-config/secret-scan/syntax-check
-src/                       deterministic runtime
-  policy.js                inbound/outbound guard
-  store.js                 local SQLite
-  zalo_runtime.js          personal QR listener
-  bot_registry.js          registry + credential references
-  oa_adapter.js            official OA OAuth/send boundary
-  oa_webhook.js            official OA ingress boundary
-  server.js                dashboard/API/webhook routes
-config/bots.example.json     public example registry
-config/bots.json             local registry, git-ignored
-.env.example                 example environment variables
-.env                         local, git-ignored
-data/                      SQLite/session/QR, git-ignored
-public/                    dashboard static files
-mcp/                       MCP stdio facade
-test/                      offline tests
-```
----
-## 7. Rules for agents, Claude Code and Codex
-Agents work in this order:
-```text
-1. read AGENTS.md
-2. read docs/agent-handoff.md
-3. run npm run doctor
-4. open only the relevant files — do not load the whole repo
-5. make small changes and test immediately
-6. report real evidence: command, exit code, file, test
-```
-An agent must **never**:
-- ask the owner to paste an API key, refresh token, cookie, IMEI, session, OTP or PIN into chat;
-- enter an OTP/PIN or confirm a third-party login on the owner's behalf;
-- enable public send, broadcast, deploy, systemd or credential changes without approval;
-- treat "code written" as "code ran" — every done claim needs runtime evidence;
-- claim a GitHub publish without real auth and a real receipt;
-- use an LLM to decide deterministic gates such as empty, duplicate, quota, policy or signature.
-Full instructions: [docs/agent-handoff.md](docs/agent-handoff.md).
----
-## 8. Quick troubleshooting
-### `Node.js 22.5+ is required`
-Install a current Node.js LTS, open a new terminal, then:
-```bash
-node --version
-bash setup.sh
-```
-### The dashboard will not open
+# Install & Run tests
+npm ci
+npm test
-```bash
-npm run doctor
+# Start the daemon
 npm start
 ```
-If port 3871 is taken, use another one:
-```bash
-PORT=3872 npm start
-```
-Then open `http://127.0.0.1:3872`.
-### The QR does not appear
-- Check that `npm start` is still running.
-- Click **Connect QR** again.
-- Do not give a PIN/OTP to an agent — do it yourself on the phone/app.
-- Use a dedicated account, not your main personal one.
-### `not_connected` on digest/send
-That is the safety block doing its job. Connect the QR, check the destination, then retry. Do not delete the session unless you intend to log in again.
-### `destination_unset`
-Open the dashboard and pick a destination group. Never set a destination from a guessed ID.
-### `npm test` fails
-Do not skip tests. Hand the agent this:
-> "Run npm test, read the first failing test, find the cause in the related file/test, make the smallest fix, and run it again. Do not touch secrets or runtime data."
-### Stop all outbound immediately
-Click **Kill switch ON** in the dashboard, or:
-```bash
-curl -X POST http://127.0.0.1:3871/api/kill-switch \
-  -H 'content-type: application/json' \
-  -d '{"paused":true}'
-```
----
-## 9. Stopping, backups and data
-Stop a foreground run with `Ctrl+C`.
-Local data lives in `data/` and is never committed. The Personal session is stored with restricted permissions. Never hand the database, session or QR to an agent or a third party without redacting it first.
-Before a large config change:
-```bash
-cp .env .env.backup.local
-cp config/bots.json config/bots.backup.local.json
-```
-Those local backups must not be committed either.
+### 3. Open Control Dashboard
+Open `http://127.0.0.1:3871` in your browser to scan QR code, configure group policies, and manage your AI Agent bridge.
 ---
-## 10. Production checklist
-An open dashboard is not production. You need all of:
+## 🔒 Security & Policy Boundaries
-- clear account/OA ownership;
-- a reviewed allowlist and destination;
-- green tests;
-- secrets in a secret manager or env, never in Git;
-- HTTPS + auth on any public endpoint;
-- a kill switch you have actually tested;
-- logs free of PII and credentials;
-- systemd/Docker enabled only after approval;
-- a live smoke test with real evidence;
-- a tested rollback: pause, disconnect, disable bot.
-The systemd file in this repo is a template. It does not enable itself.
+- **Side-effect control**: Every outbound message and administrative action is audited through `PolicyGuard`.
+- **Credential isolation**: Session cookies and tokens are kept in private local storage; never exposed over prompts or logs.
+- **Fail-closed default**: Inbound events are listener-only until explicitly allowlisted.
 ---
-## Next documents
-- [Non-coder quickstart](docs/quickstart-non-coder.md)
-- [Install guide](docs/install.md)
-- [Agent handoff](docs/agent-handoff.md)
-- [Personal QR](docs/personal-qr.md)
-- [Official OA](docs/official-oa.md)
-- [Commands](docs/commands.md)
-- [Configuration](docs/configuration.md)
-- [Operations](docs/operations.md)
-- [Troubleshooting](docs/troubleshooting.md)
-- [Release checklist](docs/release-checklist.md)
-- [MCP notes](MCP.md)
-## License
-MIT. See [LICENSE](LICENSE).
-**There is no "100% safe".** Official OA is the path to prefer for customers; Personal QR is unofficial, carries platform risk, and belongs only inside a boundary you have reviewed.
+*Built with ❤️ by ABS (Agent Business System) for the Global & Vietnamese AI Agent Community.*

package/mcp/server.js CHANGED Viewed

@@ -1,14 +1,13 @@
 #!/usr/bin/env node
 /**
- * Zalo Personal MCP — thin MCP facade over hermes-zalo-personal-bridge.
+ * ABS Zalo MCP Server — Enterprise & Autonomous MCP facade over ABS Zalo Engine.
  *
- * Design learned from minhkhoa0502/zalo-personal-mcp:
- * - Own the MCP layer (tool surface + policy)
- * - Reuse zca-js only inside the long-lived bridge/daemon
- * - History via daemon capture, not REST getGroupChatHistory (often 404)
- * - Never log to stdout (MCP stdio protocol)
- *
- * Our difference: Policy Guard + READ_ONLY_SOURCE + destination-only send.
+ * Branding: ABS Bot (Agent Business System)
+ * Capabilities:
+ * - Read/Corpus & Health checks (abs_zalo_status, abs_zalo_list_groups, abs_zalo_recent_messages, etc.)
+ * - Group Administration (abs_zalo_kick_member, abs_zalo_transfer_owner, abs_zalo_add_deputy, abs_zalo_remove_deputy, abs_zalo_invite_member)
+ * - Group Interaction & Polls (abs_zalo_create_poll, abs_zalo_lock_poll, abs_zalo_react_message, abs_zalo_undo_message)
+ * - Discovery & Info (abs_zalo_get_user_info, abs_zalo_get_group_info, abs_zalo_find_user, abs_zalo_list_friends, abs_zalo_list_all_groups)
  */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -18,7 +17,7 @@ const BRIDGE_URL = (process.env.ZALO_BRIDGE_URL || "http://127.0.0.1:3871").repl
 const TOKEN = process.env.DASHBOARD_TOKEN || process.env.ZALO_BRIDGE_TOKEN || "";
 function log(...args) {
-  console.error("[zalo-personal-mcp]", ...args);
+  console.error("[abs-zalo-mcp]", ...args);
 }
 async function bridge(path, { method = "GET", body = null } = {}) {
@@ -57,13 +56,14 @@ function fail(err) {
 }
 const server = new McpServer({
-  name: "zalo-personal-mcp",
-  version: "0.1.0",
+  name: "abs-zalo-mcp",
+  version: "0.3.0",
 });
-// --- read tools ---
+// ── Read & Telemetry Tools ──
 server.tool(
-  "zalo_status",
+  "abs_zalo_status",
   "Bridge/account safety status: connected?, READ_ONLY_SOURCE, destination, corpus counts.",
   {},
   async () => {
@@ -87,8 +87,8 @@ server.tool(
 );
 server.tool(
-  "zalo_list_groups",
-  "List known groups (source_id + name + mode). From bridge catalog / discovery.",
+  "abs_zalo_list_groups",
+  "List known groups (source_id + name + mode). From ABS bridge catalog / discovery.",
   {
     account_id: z.string().optional().describe("Account id, default bridge default"),
   },
@@ -113,7 +113,7 @@ server.tool(
 );
 server.tool(
-  "zalo_list_users",
+  "abs_zalo_list_users",
   "List known user ids / display names from corpus (members + senders).",
   {
     limit: z.number().int().min(1).max(1000).optional(),
@@ -133,7 +133,7 @@ server.tool(
 );
 server.tool(
-  "zalo_group_members",
+  "abs_zalo_group_members",
   "List members of a group source_id (user_id, role, display_name).",
   {
     source_id: z.string().describe("Zalo group id"),
@@ -154,7 +154,7 @@ server.tool(
 );
 server.tool(
-  "zalo_recent_messages",
+  "abs_zalo_recent_messages",
   "Read recently captured/stored messages from the bridge corpus (daemon/listener). Prefer this over history API.",
   {
     limit: z.number().int().min(1).max(200).optional(),
@@ -167,7 +167,6 @@ server.tool(
       if (account_id) qs.set("account_id", account_id);
       if (source_id) qs.set("source_id", source_id);
       qs.set("limit", String(limit));
-      // bridge /api/events currently supports account_id+limit; filter client-side if source_id
       const data = await bridge(`/api/events?${qs}`);
       let events = data.events || [];
       if (source_id) events = events.filter((e) => String(e.source_id) === String(source_id));
@@ -179,7 +178,7 @@ server.tool(
 );
 server.tool(
-  "zalo_corpus_summary",
+  "abs_zalo_corpus_summary",
   "Corpus inventory: groups, users, member links, messages, last backfill.",
   {
     account_id: z.string().optional(),
@@ -195,8 +194,8 @@ server.tool(
 );
 server.tool(
-  "zalo_backfill",
-  "READ_ONLY backfill: groups/users/members + best-effort old messages. May take minutes. Does not send messages.",
+  "abs_zalo_backfill",
+  "READ_ONLY backfill: groups/users/members + best-effort old messages. Does not send messages.",
   {
     history_count: z.number().int().min(1).max(200).optional(),
     max_groups: z.number().int().min(1).max(500).optional(),
@@ -216,7 +215,7 @@ server.tool(
 );
 server.tool(
-  "zalo_refresh_discovery",
+  "abs_zalo_refresh_discovery",
   "Re-scan groups after connect: resolve the configured destination + account owner.",
   {
     account_id: z.string().optional(),
@@ -235,7 +234,308 @@ server.tool(
   },
 );
-// Explicitly NOT exposing: free-form send to arbitrary threads, friend mutations, group admin.
+// ── Specialized Group Management Tools (ABS Exclusive) ──
+server.tool(
+  "abs_zalo_kick_member",
+  "Remove a user/member from a group (Requires Group Admin or Owner rights).",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    user_id: z.string().describe("User ID to kick from group"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, user_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/kick`, {
+        method: "POST",
+        body: { user_id, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_transfer_owner",
+  "Transfer group ownership to another member (Requires Group Owner rights).",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    new_owner_id: z.string().describe("User ID of the new group owner"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, new_owner_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/transfer-owner`, {
+        method: "POST",
+        body: { new_owner_id, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_add_deputy",
+  "Promote a member to Group Deputy / Admin (Requires Group Owner rights).",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    user_id: z.string().describe("User ID to promote as deputy"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, user_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/deputies/add`, {
+        method: "POST",
+        body: { user_id, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_remove_deputy",
+  "Demote a Group Deputy / Admin back to regular member (Requires Group Owner rights).",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    user_id: z.string().describe("User ID to demote from deputy"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, user_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/deputies/remove`, {
+        method: "POST",
+        body: { user_id, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_invite_member",
+  "Invite / add a user into an existing group.",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    user_id: z.string().describe("User ID or phone number to invite"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, user_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/invite`, {
+        method: "POST",
+        body: { user_id, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+// ── Group Interaction & Message Tools ──
+server.tool(
+  "abs_zalo_create_poll",
+  "Create an interactive poll in a Zalo group.",
+  {
+    group_id: z.string().describe("Target Zalo group id"),
+    question: z.string().describe("Poll question text"),
+    options: z.array(z.string()).min(2).describe("List of choices/options"),
+    expired_time: z.number().optional().describe("Expiration timestamp (ms) or 0 for none"),
+    allow_multi: z.boolean().optional().describe("Allow multiple choices"),
+    allow_add: z.boolean().optional().describe("Allow members to add new options"),
+    is_anon: z.boolean().optional().describe("Anonymous voting"),
+    hide_preview: z.boolean().optional().describe("Hide vote count preview"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, question, options, expired_time = 0, allow_multi = false, allow_add = false, is_anon = false, hide_preview = false, account_id }) => {
+    try {
+      const data = await bridge(`/api/groups/${encodeURIComponent(group_id)}/polls`, {
+        method: "POST",
+        body: {
+          question,
+          options,
+          expired_time,
+          allow_multi,
+          allow_add,
+          is_anon,
+          hide_preview,
+          account_id,
+        },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_lock_poll",
+  "Lock / close an active poll in a Zalo group.",
+  {
+    poll_id: z.string().describe("Poll ID to lock"),
+    account_id: z.string().optional(),
+  },
+  async ({ poll_id, account_id }) => {
+    try {
+      const data = await bridge(`/api/polls/${encodeURIComponent(poll_id)}/lock`, {
+        method: "POST",
+        body: { account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_react_message",
+  "Add an emoji reaction to a Zalo message.",
+  {
+    icon: z.string().describe("Reaction icon (e.g. /:heart, /:like, /:haha, /:sad, /:angry)"),
+    dest: z.string().describe("Destination group/user id"),
+    account_id: z.string().optional(),
+  },
+  async ({ icon, dest, account_id }) => {
+    try {
+      const data = await bridge("/api/reactions", {
+        method: "POST",
+        body: { icon, dest, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_undo_message",
+  "Undo / recall a sent message on Zalo.",
+  {
+    dest: z.string().describe("Destination / message context"),
+    thread_id: z.string().describe("Thread / group ID"),
+    thread_type: z.number().optional().default(1).describe("1 for group, 0 for direct"),
+    account_id: z.string().optional(),
+  },
+  async ({ dest, thread_id, thread_type = 1, account_id }) => {
+    try {
+      const data = await bridge("/api/messages/undo", {
+        method: "POST",
+        body: { dest, thread_id, thread_type, account_id },
+      });
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+// ── Discovery & Profile Tools ──
+server.tool(
+  "abs_zalo_get_user_info",
+  "Get detailed public profile information of a Zalo user by userId.",
+  {
+    user_id: z.string().describe("Target Zalo user ID"),
+    account_id: z.string().optional(),
+  },
+  async ({ user_id, account_id }) => {
+    try {
+      const q = account_id ? `?account_id=${encodeURIComponent(account_id)}` : "";
+      const data = await bridge(`/api/user-info/${encodeURIComponent(user_id)}${q}`);
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_get_group_info",
+  "Get detailed metadata and settings of a Zalo group by groupId.",
+  {
+    group_id: z.string().describe("Target Zalo group ID"),
+    account_id: z.string().optional(),
+  },
+  async ({ group_id, account_id }) => {
+    try {
+      const q = account_id ? `?account_id=${encodeURIComponent(account_id)}` : "";
+      const data = await bridge(`/api/group-info/${encodeURIComponent(group_id)}${q}`);
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_find_user",
+  "Find a Zalo user profile by phone number.",
+  {
+    phone: z.string().describe("Phone number with country code, e.g. 84901234567"),
+    account_id: z.string().optional(),
+  },
+  async ({ phone, account_id }) => {
+    try {
+      const qs = new URLSearchParams({ phone });
+      if (account_id) qs.set("account_id", account_id);
+      const data = await bridge(`/api/find-user?${qs}`);
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_list_friends",
+  "List all friends of the current Zalo account.",
+  {
+    account_id: z.string().optional(),
+  },
+  async ({ account_id }) => {
+    try {
+      const q = account_id ? `?account_id=${encodeURIComponent(account_id)}` : "";
+      const data = await bridge(`/api/friends${q}`);
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+server.tool(
+  "abs_zalo_list_all_groups",
+  "Fetch all active groups joined by the account from Zalo server.",
+  {
+    account_id: z.string().optional(),
+  },
+  async ({ account_id }) => {
+    try {
+      const q = account_id ? `?account_id=${encodeURIComponent(account_id)}` : "";
+      const data = await bridge(`/api/groups-all${q}`);
+      return ok(data);
+    } catch (e) {
+      return fail(e);
+    }
+  },
+);
+// Backward-compatibility aliases for older prompts
+server.tool("zalo_status", "Alias for abs_zalo_status", {}, async () => bridge("/api/status").then(ok).catch(fail));
+server.tool("zalo_list_groups", "Alias for abs_zalo_list_groups", { account_id: z.string().optional() }, async ({ account_id }) => bridge(`/api/sources${account_id ? `?account_id=${account_id}` : ""}`).then(ok).catch(fail));
 async function main() {
   const transport = new StdioServerTransport();

package/package.json CHANGED Viewed

@@ -1,21 +1,29 @@
 {
   "name": "abs-zalo-bot",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "type": "module",
-  "description": "Zalo channel adapter for AI agents. Official OA and personal QR kept separate, fail-closed by default.",
+  "description": "ABS Zalo Agent Engine — Free, Transparent & Autonomous Zalo AI Agent Engine for Hermes, Claude Code & Codex. Dual Personal QR + Official OA, Group Administration, Lead Intel, Polls, Reactions & MCP Server.",
   "author": "teddiesloco",
   "license": "MIT",
   "keywords": [
     "zalo",
+    "zalo-agent",
     "zalo-bot",
-    "zca-js",
-    "chatbot",
-    "messaging",
     "ai-agent",
+    "ai-agents",
+    "hermes-agent",
+    "claude-code",
+    "codex",
     "mcp",
+    "model-context-protocol",
+    "zca-js",
+    "chatbot",
+    "lead-generation",
     "vietnam",
     "official-account",
-    "personal-qr"
+    "personal-qr",
+    "autonomous-agent",
+    "open-source"
   ],
   "homepage": "https://github.com/teddiesloco/abs-zalo-bot#readme",
   "repository": {
@@ -37,7 +45,7 @@
     "LICENSE"
   ],
   "bin": {
-    "zalo-personal-mcp": "./mcp/server.js"
+    "zalo-personal-mcp": "mcp/server.js"
   },
   "scripts": {
     "start": "node src/cli.js serve",

package/src/server.js CHANGED Viewed

@@ -554,6 +554,204 @@ export function createApp({
     }
   });
+  // ── Group Ops & Advanced Zalo Endpoints (ABS Specialized Ops) ──
+  app.post("/api/groups/:groupId/kick", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const memberId = req.body?.user_id || req.body?.member_id;
+      if (!memberId) return res.status(400).json({ ok: false, error: "user_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.removeUserFromGroup(req.params.groupId, memberId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/groups/:groupId/transfer-owner", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const newOwnerId = req.body?.new_owner_id || req.body?.user_id;
+      if (!newOwnerId) return res.status(400).json({ ok: false, error: "new_owner_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.changeGroupOwner(req.params.groupId, newOwnerId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/groups/:groupId/deputies/add", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const memberId = req.body?.user_id || req.body?.member_id;
+      if (!memberId) return res.status(400).json({ ok: false, error: "user_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.addGroupDeputy(req.params.groupId, memberId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/groups/:groupId/deputies/remove", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const memberId = req.body?.user_id || req.body?.member_id;
+      if (!memberId) return res.status(400).json({ ok: false, error: "user_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.removeGroupDeputy(req.params.groupId, memberId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/groups/:groupId/invite", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const memberId = req.body?.user_id || req.body?.member_id;
+      if (!memberId) return res.status(400).json({ ok: false, error: "user_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.addUserToGroup(req.params.groupId, memberId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/groups/:groupId/polls", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const { question, options, expired_time, allow_multi, allow_add, is_anon, hide_preview } = req.body || {};
+      if (!question || !Array.isArray(options) || options.length < 2) {
+        return res.status(400).json({ ok: false, error: "question_and_options_required" });
+      }
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.createPoll(req.params.groupId, {
+        question,
+        options,
+        expiredTime: expired_time,
+        allowMultiChoices: allow_multi,
+        allowAddNewOption: allow_add,
+        isAnonymous: is_anon,
+        hideVotePreview: hide_preview,
+      });
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/polls/:pollId/lock", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.lockPoll(req.params.pollId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/reactions", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const { icon, dest } = req.body || {};
+      if (!icon || !dest) return res.status(400).json({ ok: false, error: "icon_and_dest_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.addReaction(icon, dest);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.post("/api/messages/undo", async (req, res) => {
+    try {
+      const accountId = req.body?.account_id || config.default_account_id;
+      const { dest, thread_id, thread_type } = req.body || {};
+      if (!dest || !thread_id) return res.status(400).json({ ok: false, error: "dest_and_thread_id_required" });
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.undoMessage(dest, thread_id, thread_type || 1);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.get("/api/user-info/:userId", async (req, res) => {
+    try {
+      const accountId = req.query.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.getUserInfo(req.params.userId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.get("/api/group-info/:groupId", async (req, res) => {
+    try {
+      const accountId = req.query.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.getGroupInfo(req.params.groupId);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.get("/api/find-user", async (req, res) => {
+    try {
+      const phone = req.query.phone;
+      if (!phone) return res.status(400).json({ ok: false, error: "phone_required" });
+      const accountId = req.query.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.findUser(phone);
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.get("/api/friends", async (req, res) => {
+    try {
+      const accountId = req.query.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.getAllFriends();
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
+  app.get("/api/groups-all", async (req, res) => {
+    try {
+      const accountId = req.query.account_id || config.default_account_id;
+      const runtime = hub.getRuntime(accountId);
+      if (!runtime.api) return res.status(400).json({ ok: false, error: "not_connected" });
+      const result = await runtime.getAllGroups();
+      res.json({ ok: true, result });
+    } catch (err) {
+      res.status(500).json({ ok: false, error: String(err?.message || err) });
+    }
+  });
   app.get("/api/battle-ready", async (_req, res) => {
     const accountId = config.default_account_id;
     const acc = store.getAccount(accountId);

package/src/zalo_runtime.js CHANGED Viewed

@@ -232,6 +232,90 @@ export class AccountRuntime extends EventEmitter {
     return this.api.sendMessage(String(text), String(targetId), 1);
   }
+  // ── Group Management & Advanced Ops (ABS Specialized Methods) ──
+  async removeUserFromGroup(groupId, memberId) {
+    if (!this.api?.removeUserFromGroup) throw new Error("not_connected");
+    const mIds = Array.isArray(memberId) ? memberId : [memberId];
+    return this.api.removeUserFromGroup(mIds, String(groupId));
+  }
+  async changeGroupOwner(groupId, newOwnerId) {
+    if (!this.api?.changeGroupOwner) throw new Error("not_connected");
+    return this.api.changeGroupOwner(String(newOwnerId), String(groupId));
+  }
+  async addGroupDeputy(groupId, memberId) {
+    if (!this.api?.addGroupDeputy) throw new Error("not_connected");
+    const mIds = Array.isArray(memberId) ? memberId : [memberId];
+    return this.api.addGroupDeputy(mIds, String(groupId));
+  }
+  async removeGroupDeputy(groupId, memberId) {
+    if (!this.api?.removeGroupDeputy) throw new Error("not_connected");
+    const mIds = Array.isArray(memberId) ? memberId : [memberId];
+    return this.api.removeGroupDeputy(mIds, String(groupId));
+  }
+  async addUserToGroup(groupId, memberId) {
+    if (!this.api?.addUserToGroup) throw new Error("not_connected");
+    const mIds = Array.isArray(memberId) ? memberId : [memberId];
+    return this.api.addUserToGroup(mIds, String(groupId));
+  }
+  async createPoll(groupId, { question, options, expiredTime = 0, allowMultiChoices = false, allowAddNewOption = false, isAnonymous = false, hideVotePreview = false }) {
+    if (!this.api?.createPoll) throw new Error("not_connected");
+    return this.api.createPoll({
+      question,
+      options,
+      expiredTime,
+      allowMultiChoices,
+      allowAddNewOption,
+      isAnonymous,
+      hideVotePreview,
+    }, String(groupId));
+  }
+  async lockPoll(pollId) {
+    if (!this.api?.lockPoll) throw new Error("not_connected");
+    return this.api.lockPoll(String(pollId));
+  }
+  async addReaction(icon, dest) {
+    if (!this.api?.addReaction) throw new Error("not_connected");
+    return this.api.addReaction(icon, dest);
+  }
+  async undoMessage(dest, threadId, threadType = 1) {
+    if (!this.api?.undo) throw new Error("not_connected");
+    return this.api.undo(dest, String(threadId), threadType);
+  }
+  async getGroupInfo(groupId) {
+    if (!this.api?.getGroupInfo) throw new Error("not_connected");
+    return this.api.getGroupInfo(String(groupId));
+  }
+  async getUserInfo(userId) {
+    if (!this.api?.getUserInfo) throw new Error("not_connected");
+    return this.api.getUserInfo(String(userId));
+  }
+  async findUser(phoneNumber) {
+    if (!this.api?.findUser) throw new Error("not_connected");
+    return this.api.findUser(String(phoneNumber));
+  }
+  async getAllFriends() {
+    if (!this.api?.getAllFriends) throw new Error("not_connected");
+    return this.api.getAllFriends();
+  }
+  async getAllGroups() {
+    if (!this.api?.getAllGroups) throw new Error("not_connected");
+    return this.api.getAllGroups();
+  }
   async pause() {
     try {
       this.api?.listener?.stop?.();