agent-bober 0.17.1 → 0.19.0

package/dist/telegram/bot.js

@@ -0,0 +1,323 @@
+/**
+ * bot.ts — grammY adapter + getUpdates long-poll loop.
+ * Telegram SDK: grammy (https://grammy.dev) — TypeScript-native, ESM-compatible,
+ * no separate @types package required. This is the ONLY file that imports grammy.
+ */
+import { Buffer } from "node:buffer";
+import { writeFile } from "node:fs/promises";
+import { Bot, InlineKeyboard } from "grammy";
+import { sendSafe, sendSafeKeyboard } from "./outbound.js";
+import { isAllowed, parseAllowedUsers, denialReply } from "./whitelist.js";
+import { classify } from "./router.js";
+import { handleCapture, defaultCapture } from "./handlers/capture.js";
+import { handlePrioritize, defaultPrioritize } from "./handlers/prioritize.js";
+import { handleApprovalCallback, handleApprovalFollowup, createPendingState } from "./handlers/approvals.js";
+import { registerUpload, handleUploadCallback, defaultMedicalIngest, createPendingUploadState, } from "./handlers/upload.js";
+import { buildApprovalKeyboard, buildUploadKeyboard, decodeCallback } from "./keyboard.js";
+import { listPending } from "../state/approval-state.js";
+import { findProjectRoot } from "../utils/fs.js";
+import { handleFleet, defaultSynthesisReader } from "./fleet-view.js";
+// ── GrammyTransport ───────────────────────────────────────────────────
+/**
+ * Convert a provider-neutral InlineKeyboardSpec to a grammy InlineKeyboard.
+ * This function is the only place grammy's InlineKeyboard is constructed;
+ * keyboard.ts and approvals.ts never import grammy (principles.md:28,41).
+ */
+function toGrammyKeyboard(spec) {
+    const kb = new InlineKeyboard();
+    spec.forEach((row, i) => {
+        if (i > 0)
+            kb.row();
+        for (const b of row)
+            kb.text(b.text, b.data);
+    });
+    return kb;
+}
+/**
+ * Concrete BotTransport backed by grammy's Bot.api.
+ * This class is the sole SDK consumer — the loop, outbound funnel, and CLI
+ * handler all depend on BotTransport / TelegramTransport, not on grammy directly.
+ */
+export class GrammyTransport {
+    bot;
+    constructor(token) {
+        // grammy Bot constructor is lazy — no network calls until api methods are invoked.
+        this.bot = new Bot(token);
+    }
+    /**
+     * Send a plain-text message. Maps the provider-neutral `silent` option to
+     * grammy's `disable_notification` so callers (via sendSafe) stay SDK-agnostic.
+     */
+    async sendMessage(chatId, text, opts) {
+        await this.bot.api.sendMessage(chatId, text, opts?.silent ? { disable_notification: true } : undefined);
+    }
+    /**
+     * Send a message and return its Telegram message_id.
+     * Used exclusively by the streaming funnel (sendSafeForEdit) to capture the id
+     * of the initial status message for subsequent in-place edits.
+     * grammy's sendMessage returns Message.TextMessage which carries message_id (api.d.ts:156).
+     */
+    async sendReturningId(chatId, text, opts) {
+        const msg = await this.bot.api.sendMessage(chatId, text, opts?.silent ? { disable_notification: true } : undefined);
+        return msg.message_id;
+    }
+    /**
+     * Edit an existing message in place. Used exclusively by the streaming funnel
+     * (sendSafeEdit) — never posts a new message, only updates the one sent by sendReturningId.
+     * grammy's editMessageText signature: editMessageText(chat_id, message_id, text, other?, signal?).
+     */
+    async editMessage(chatId, messageId, text) {
+        await this.bot.api.editMessageText(chatId, messageId, text);
+    }
+    /**
+     * Send a message with an inline keyboard. Converts the provider-neutral
+     * InlineKeyboardSpec to a grammy InlineKeyboard inside this class only.
+     */
+    async sendKeyboard(chatId, text, keyboard) {
+        await this.bot.api.sendMessage(chatId, text, {
+            reply_markup: toGrammyKeyboard(keyboard),
+        });
+    }
+    /**
+     * Acknowledge a callback query. Must be called for every tap to dismiss
+     * the loading spinner on the Telegram client, even on denied/ghost taps.
+     */
+    async answerCallback(callbackQueryId, text) {
+        await this.bot.api.answerCallbackQuery(callbackQueryId, text ? { text } : undefined);
+    }
+    /**
+     * Fetches the next batch of updates using getUpdates long-polling (timeout=30s).
+     * offset ensures already-acknowledged updates are not returned again.
+     * callback_query updates are included by default (no allowed_updates filter needed).
+     */
+    async getUpdates(offset) {
+        const updates = await this.bot.api.getUpdates({ offset, timeout: 30 });
+        // Cast: grammy's Update is a superset of TelegramUpdate; subset is all we consume.
+        return updates;
+    }
+    /**
+     * Download a Telegram document to a local path.
+     * Uses getFile (grammy api) to resolve file_path, then fetches from the Telegram
+     * file endpoint and writes bytes via node:fs/promises (no @grammyjs/files plugin needed).
+     * Stays in this class so grammy types never leak outside bot.ts (principles.md:28).
+     */
+    async downloadDocument(fileId, destPath) {
+        const file = await this.bot.api.getFile(fileId);
+        if (!file.file_path) {
+            throw new Error(`Telegram getFile returned no file_path for file_id: ${fileId}`);
+        }
+        const url = `https://api.telegram.org/file/bot${this.bot.token}/${file.file_path}`;
+        const res = await fetch(url);
+        if (!res.ok) {
+            throw new Error(`Telegram file download failed: ${res.status} ${res.statusText}`);
+        }
+        await writeFile(destPath, Buffer.from(await res.arrayBuffer()));
+    }
+}
+// ── Help reply ────────────────────────────────────────────────────────
+/**
+ * Returns the /start help reply sent to whitelisted senders.
+ * Handlers return a content string; the loop passes it through sendSafe.
+ */
+export function helpReply() {
+    return ("Welcome! I am agent-bober's Telegram interface.\n" +
+        "Available commands:\n" +
+        "  /start    — show this help\n" +
+        "  /pending  — list pending approval checkpoints with inline buttons\n" +
+        "  /today    — today's top priorities\n" +
+        "  /priority — ranked findings\n" +
+        "  /decide X vs Y — decision support\n" +
+        "  /fleet    — latest multi-LLM fleet run findings");
+}
+// ── Long-poll loop ────────────────────────────────────────────────────
+/**
+ * Runs a getUpdates long-polling loop until the AbortSignal fires (e.g. SIGINT).
+ * TELEGRAM_ALLOWED_USERS is read from process.env at loop start.
+ *
+ * Invariant: all outbound text goes through sendSafe — the loop never calls
+ * transport.sendMessage directly (nonGoal #5, evaluatorNotes).
+ * Keyboard messages go through transport.sendKeyboard (also on BotTransport,
+ * still not bypassing the transport layer).
+ *
+ * New params are optional/defaulted so existing callers (telegram.ts:50) that
+ * pass only (transport, signal) continue to compile unchanged.
+ *
+ * bober: single-process synchronous poll; extend to concurrent processing or
+ *        grammY's bot.start() if throughput becomes a bottleneck (later sprint).
+ */
+export async function startPollLoop(transport, signal, capture = defaultCapture, prioritize = defaultPrioritize, pending = createPendingState(), uploads = createPendingUploadState(), fleetReader = defaultSynthesisReader) {
+    let offset = 0;
+    const allowed = parseAllowedUsers(process.env);
+    while (!signal.aborted) {
+        let updates;
+        try {
+            updates = await transport.getUpdates(offset);
+        }
+        catch (err) {
+            if (signal.aborted)
+                break;
+            process.stderr.write(`[telegram] getUpdates error: ${err instanceof Error ? err.message : String(err)}\n`);
+            // Back off before retrying after a transient error.
+            await new Promise((resolve) => setTimeout(resolve, 5000));
+            continue;
+        }
+        for (const update of updates) {
+            offset = update.update_id + 1;
+            // ── Callback-query branch (inline keyboard button taps) ───────────
+            // Must run BEFORE the message branch — callback_query and message are
+            // mutually exclusive in a single update, but the branch order matters
+            // for clarity and future extension.
+            // Decode-first routing: confirm/cancel → upload handler; a/j/r → approval handler.
+            const cb = update.callback_query;
+            if (cb) {
+                const cbChatId = cb.message?.chat.id;
+                if (cbChatId !== undefined) {
+                    const cbData = cb.data ?? "";
+                    const cbDecoded = decodeCallback(cbData);
+                    if (cbDecoded &&
+                        (cbDecoded.action === "confirm" || cbDecoded.action === "cancel")) {
+                        // Upload opt-in tap: route to the upload callback handler
+                        const { reply, answer } = await handleUploadCallback({
+                            senderId: cb.from.id,
+                            allowed,
+                            data: cbData,
+                            pending: uploads,
+                            download: (fileId, dest) => transport.downloadDocument(fileId, dest),
+                            ingest: defaultMedicalIngest,
+                        });
+                        await transport.answerCallback(cb.id, answer);
+                        if (reply !== null) {
+                            await sendSafe(transport, cbChatId, reply);
+                        }
+                    }
+                    else {
+                        // Approval tap (approve/adjust/reject) — existing path unchanged
+                        const projectRoot = (await findProjectRoot()) ?? process.cwd();
+                        const { reply, answer } = await handleApprovalCallback({
+                            projectRoot,
+                            senderId: cb.from.id,
+                            allowed,
+                            chatId: cbChatId,
+                            data: cbData,
+                            pending,
+                        });
+                        // Always ack to dismiss the spinner — even on denied/ghost taps
+                        await transport.answerCallback(cb.id, answer);
+                        if (reply !== null) {
+                            await sendSafe(transport, cbChatId, reply);
+                        }
+                    }
+                }
+                else {
+                    // Inline-mode tap (no message context) — ack only, no reply possible
+                    await transport.answerCallback(cb.id, "Error");
+                }
+                continue;
+            }
+            // ── Message branch ────────────────────────────────────────────────
+            const msg = update.message;
+            if (!msg)
+                continue;
+            const senderId = msg.from?.id;
+            const chatId = msg.chat.id;
+            if (senderId === undefined)
+                continue;
+            if (!isAllowed(senderId, allowed)) {
+                // Non-whitelisted sender: reply with denial echoing their id, then ignore.
+                await sendSafe(transport, chatId, denialReply(senderId));
+                continue;
+            }
+            // ── Document upload branch ────────────────────────────────────────
+            // Must run BEFORE the text branch — a document message has no text field,
+            // so without this branch it would fall through to the helpReply() fallback.
+            // The upload is NOT downloaded here; registerUpload only stashes + sends the
+            // per-upload opt-in keyboard. Download + ingest happen only on explicit Yes.
+            const doc = msg.document;
+            if (doc) {
+                const uploadId = String(msg.message_id);
+                const { reply } = registerUpload({
+                    uploadId,
+                    chatId,
+                    fileId: doc.file_id,
+                    fileName: doc.file_name ?? "upload.bin",
+                    pending: uploads,
+                });
+                await sendSafeKeyboard(transport, chatId, reply, buildUploadKeyboard(uploadId));
+                continue;
+            }
+            // Whitelisted sender: route via classify → capture or command dispatch.
+            const text = msg.text;
+            if (text === undefined || text.trim() === "") {
+                // No text content (sticker, photo, etc.) — fall back to help stub.
+                await sendSafe(transport, chatId, helpReply());
+                continue;
+            }
+            // ── Adjust/Reject follow-up interception ─────────────────────────
+            // Check BEFORE classify so multi-turn Adjust/Reject text is not captured
+            // as a new task. Returns null when no stash exists → fall through.
+            const projectRoot = (await findProjectRoot()) ?? process.cwd();
+            const followupReply = await handleApprovalFollowup({
+                projectRoot,
+                senderId,
+                allowed,
+                chatId,
+                text,
+                pending,
+            });
+            if (followupReply !== null) {
+                await sendSafe(transport, chatId, followupReply);
+                continue;
+            }
+            // ── Normal routing ────────────────────────────────────────────────
+            const routed = classify(text);
+            if (routed.kind === "command") {
+                // Command dispatch: /start → help; hub-priority commands → prioritize handler;
+                // /pending → list pending approvals with inline keyboards;
+                // everything else → Unknown-command stub.
+                // bober: single-level command switch; extend to a command registry map
+                //        if Sprint 5+ adds further commands to this block.
+                if (routed.name === "start") {
+                    await sendSafe(transport, chatId, helpReply());
+                }
+                else if (routed.name === "today" ||
+                    routed.name === "priority" ||
+                    routed.name === "decide") {
+                    const reply = await handlePrioritize(routed.name, routed.args, prioritize);
+                    await sendSafe(transport, chatId, reply);
+                }
+                else if (routed.name === "pending") {
+                    const markers = await listPending(projectRoot);
+                    if (markers.length === 0) {
+                        await sendSafe(transport, chatId, "No pending approvals.");
+                    }
+                    else {
+                        for (const m of markers) {
+                            const kbText = [
+                                `[${m.checkpointId}]`,
+                                m.prompt,
+                                m.artifact.type ? `Artifact: ${m.artifact.type}` : "",
+                            ]
+                                .filter(Boolean)
+                                .join("\n");
+                            // §B: unified keyboard funnel — all keyboard sends go through sendSafeKeyboard
+                            await sendSafeKeyboard(transport, chatId, kbText, buildApprovalKeyboard(m.checkpointId));
+                        }
+                    }
+                }
+                else if (routed.name === "fleet") {
+                    const reply = await handleFleet(senderId, allowed, fleetReader);
+                    await sendSafe(transport, chatId, reply);
+                }
+                else {
+                    await sendSafe(transport, chatId, `Unknown command: /${routed.name}`);
+                }
+            }
+            else {
+                // Plain text → zero-friction capture via the injected inbox sink.
+                const reply = await handleCapture(routed.text, capture);
+                await sendSafe(transport, chatId, reply);
+            }
+        }
+    }
+}
+//# sourceMappingURL=bot.js.map

package/dist/telegram/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../../src/telegram/bot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAG7C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7G,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAqDtE,yEAAyE;AAEzE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAwB;IAChD,MAAM,EAAE,GAAG,IAAI,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACT,GAAG,CAAM;IAE1B,YAAY,KAAa;QACvB,mFAAmF;QACnF,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,IAAkB;QAChE,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1G,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,IAAkB;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CACxC,MAAM,EACN,IAAI,EACJ,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1D,CAAC;QACF,OAAO,GAAG,CAAC,UAAU,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY;QAC/D,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,QAA4B;QAC3E,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE;YAC3C,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,IAAa;QACzD,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,mFAAmF;QACnF,OAAO,OAAsC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,QAAgB;QACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,GAAG,GAAG,oCAAoC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AAED,yEAAyE;AAEzE;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,mDAAmD;QACnD,uBAAuB;QACvB,gCAAgC;QAChC,uEAAuE;QACvE,wCAAwC;QACxC,iCAAiC;QACjC,uCAAuC;QACvC,mDAAmD,CACpD,CAAC;AACJ,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAuB,EACvB,MAAmB,EACnB,UAAwB,cAAc,EACtC,aAA2B,iBAAiB,EAC5C,UAAgC,kBAAkB,EAAE,EACpD,UAA8B,wBAAwB,EAAE,EACxD,cAA+B,sBAAsB;IAErD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE/C,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,OAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACrF,CAAC;YACF,oDAAoD;YACpD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;YAE9B,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,oCAAoC;YACpC,mFAAmF;YACnF,MAAM,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC;YACjC,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACzC,IACE,SAAS;wBACT,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,EACjE,CAAC;wBACD,0DAA0D;wBAC1D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC;4BACnD,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;4BACpB,OAAO;4BACP,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE,OAAO;4BAChB,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;4BACpE,MAAM,EAAE,oBAAoB;yBAC7B,CAAC,CAAC;wBACH,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;wBAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BACnB,MAAM,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;wBAC7C,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,iEAAiE;wBACjE,MAAM,WAAW,GAAG,CAAC,MAAM,eAAe,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;wBAC/D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC;4BACrD,WAAW;4BACX,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;4BACpB,OAAO;4BACP,MAAM,EAAE,QAAQ;4BAChB,IAAI,EAAE,MAAM;4BACZ,OAAO;yBACR,CAAC,CAAC;wBACH,gEAAgE;wBAChE,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;wBAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BACnB,MAAM,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;wBAC7C,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,qEAAqE;oBACrE,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YAErC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBAClC,2EAA2E;gBAC3E,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,0EAA0E;YAC1E,4EAA4E;YAC5E,6EAA6E;YAC7E,6EAA6E;YAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;YACzB,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxC,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC;oBAC/B,QAAQ;oBACR,MAAM;oBACN,MAAM,EAAE,GAAG,CAAC,OAAO;oBACnB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,YAAY;oBACvC,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;gBACH,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YAED,wEAAwE;YACxE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC7C,mEAAmE;gBACnE,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,mEAAmE;YACnE,MAAM,WAAW,GAAG,CAAC,MAAM,eAAe,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC;gBACjD,WAAW;gBACX,QAAQ;gBACR,OAAO;gBACP,MAAM;gBACN,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;YACH,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,+EAA+E;gBAC/E,2DAA2D;gBAC3D,0CAA0C;gBAC1C,uEAAuE;gBACvE,2DAA2D;gBAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjD,CAAC;qBAAM,IACL,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,MAAM,CAAC,IAAI,KAAK,UAAU;oBAC1B,MAAM,CAAC,IAAI,KAAK,QAAQ,EACxB,CAAC;oBACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAC3E,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;oBAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACzB,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;oBAC7D,CAAC;yBAAM,CAAC;wBACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;4BACxB,MAAM,MAAM,GAAG;gCACb,IAAI,CAAC,CAAC,YAAY,GAAG;gCACrB,CAAC,CAAC,MAAM;gCACR,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;6BACtD;iCACE,MAAM,CAAC,OAAO,CAAC;iCACf,IAAI,CAAC,IAAI,CAAC,CAAC;4BACd,+EAA+E;4BAC/E,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;wBAC3F,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;oBAChE,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,qBAAqB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,kEAAkE;gBAClE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACxD,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/telegram/digest.d.ts

@@ -0,0 +1,19 @@
+import type { TelegramTransport } from "./outbound.js";
+/**
+ * Send a plain digest summary with notifications silenced.
+ * The payload text is supplied by the scheduler owner — this adapter does NOT
+ * decide content or cadence (nonGoal: "do not implement the scheduler itself").
+ *
+ * Routes through the sendSafe funnel with `{ silent: true }` so GrammyTransport
+ * maps it to Telegram's `disable_notification: true` (sc-6-3).
+ * Never calls transport.sendMessage directly (sc-6-4).
+ *
+ * Example usage (from a scheduled job owner):
+ *   const text = renderDigestMarkdown(digest); // src/research/digest.ts — NOT imported here
+ *   await sendDigest(transport, chatId, text);
+ *
+ * bober: in-process delivery; swap for a queue/worker if the scheduler needs
+ *        retry semantics or cross-process delivery in a follow-up sprint.
+ */
+export declare function sendDigest(transport: TelegramTransport, chatId: number, text: string): Promise<void>;
+//# sourceMappingURL=digest.d.ts.map

package/dist/telegram/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../src/telegram/digest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIvD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,UAAU,CAC9B,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/telegram/digest.js

@@ -0,0 +1,23 @@
+/** digest.ts — Deliver a scheduler-handed digest payload silently (no notification sound). */
+import { sendSafe } from "./outbound.js";
+// ── sendDigest ────────────────────────────────────────────────────────
+/**
+ * Send a plain digest summary with notifications silenced.
+ * The payload text is supplied by the scheduler owner — this adapter does NOT
+ * decide content or cadence (nonGoal: "do not implement the scheduler itself").
+ *
+ * Routes through the sendSafe funnel with `{ silent: true }` so GrammyTransport
+ * maps it to Telegram's `disable_notification: true` (sc-6-3).
+ * Never calls transport.sendMessage directly (sc-6-4).
+ *
+ * Example usage (from a scheduled job owner):
+ *   const text = renderDigestMarkdown(digest); // src/research/digest.ts — NOT imported here
+ *   await sendDigest(transport, chatId, text);
+ *
+ * bober: in-process delivery; swap for a queue/worker if the scheduler needs
+ *        retry semantics or cross-process delivery in a follow-up sprint.
+ */
+export async function sendDigest(transport, chatId, text) {
+    await sendSafe(transport, chatId, text, { silent: true });
+}
+//# sourceMappingURL=digest.js.map

package/dist/telegram/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/telegram/digest.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,yEAAyE;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAA4B,EAC5B,MAAc,EACd,IAAY;IAEZ,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/dist/telegram/fleet-view.d.ts

@@ -0,0 +1,38 @@
+import type { AllowedUsers } from "./whitelist.js";
+import type { SynthesisBundle } from "../fleet/synthesis.js";
+/** Returns the parsed bundle, or null when absent/unparseable. Tests inject a fake. */
+export type SynthesisReader = () => Promise<SynthesisBundle | null>;
+/**
+ * Production reader: reads <projectRoot>/.bober/fleet-synthesis.json
+ * via node:fs/promises and JSON.parse. Returns null on ENOENT or parse failure
+ * (e.g. non-blackboard run — the file is absent by design in that case).
+ *
+ * bober: single-process JSON read; swap for a streaming parser if
+ *        fleet-synthesis.json ever exceeds a few MB in practice.
+ */
+export declare function defaultSynthesisReader(): Promise<SynthesisBundle | null>;
+/**
+ * Group bundle.findings by FactRecord.subject and emit one section per agent.
+ * Returns string[]: index 0 is the header (shows bundle.rounds), subsequent
+ * elements are agent sections (label + one-line summary + round + confidence + count).
+ *
+ * PURE: no IO, no throw, deterministic output from the same input.
+ *
+ * CRITICAL: FactRecord has NO round field (round is lost at publish() in
+ * shared-blackboard.ts). The per-section round AND the header round both
+ * come from bundle.rounds (the run-level count). Do NOT reference finding.round.
+ */
+export declare function renderFleetView(bundle: SynthesisBundle): string[];
+/**
+ * /fleet command handler.
+ *
+ * Sequence:
+ *   1. Gate FIRST — non-whitelisted senders get denialReply; reader is never called (sc-7-6).
+ *   2. Read bundle via injected reader (default: disk via defaultSynthesisReader).
+ *   3. Absent or empty findings → return a friendly "no recent fleet run" message.
+ *   4. Non-empty bundle → return renderFleetView sections joined into one reply string.
+ *
+ * Returns a plain string for the caller to pass through sendSafe — no transport access here.
+ */
+export declare function handleFleet(senderId: number, allowed: AllowedUsers, reader?: SynthesisReader): Promise<string>;
+//# sourceMappingURL=fleet-view.d.ts.map

package/dist/telegram/fleet-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-view.d.ts","sourceRoot":"","sources":["../../src/telegram/fleet-view.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAqB7D,uFAAuF;AACvF,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AAIpE;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAU9E;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CA+BjE;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,YAAY,EACrB,MAAM,GAAE,eAAwC,GAC/C,OAAO,CAAC,MAAM,CAAC,CAajB"}

package/dist/telegram/fleet-view.js

@@ -0,0 +1,98 @@
+/** fleet-view.ts — Read-only secretary view of the most recent fleet run. */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { findProjectRoot } from "../utils/fs.js";
+import { isAllowed, denialReply } from "./whitelist.js";
+// ── Constants ─────────────────────────────────────────────────────────
+/** Maximum characters shown on the one-line summary before truncation. */
+const MAX_LINE_LENGTH = 120;
+// ── Truncation helper ─────────────────────────────────────────────────
+/**
+ * Collapse a multi-line value to its first line and cap at MAX_LINE_LENGTH.
+ * Never emits line 2+ or content beyond the cap. Private to this module.
+ */
+function oneLine(value) {
+    const first = value.split("\n")[0];
+    return first.length > MAX_LINE_LENGTH ? first.slice(0, MAX_LINE_LENGTH) + "…" : first;
+}
+// ── defaultSynthesisReader ────────────────────────────────────────────
+/**
+ * Production reader: reads <projectRoot>/.bober/fleet-synthesis.json
+ * via node:fs/promises and JSON.parse. Returns null on ENOENT or parse failure
+ * (e.g. non-blackboard run — the file is absent by design in that case).
+ *
+ * bober: single-process JSON read; swap for a streaming parser if
+ *        fleet-synthesis.json ever exceeds a few MB in practice.
+ */
+export async function defaultSynthesisReader() {
+    const root = (await findProjectRoot()) ?? process.cwd();
+    const path = join(root, ".bober", "fleet-synthesis.json");
+    try {
+        const raw = await readFile(path, "utf-8");
+        return JSON.parse(raw); // shape is the on-disk contract
+    }
+    catch {
+        // ENOENT or JSON.parse failure → graceful empty state (never throw)
+        return null;
+    }
+}
+// ── renderFleetView (PURE) ────────────────────────────────────────────
+/**
+ * Group bundle.findings by FactRecord.subject and emit one section per agent.
+ * Returns string[]: index 0 is the header (shows bundle.rounds), subsequent
+ * elements are agent sections (label + one-line summary + round + confidence + count).
+ *
+ * PURE: no IO, no throw, deterministic output from the same input.
+ *
+ * CRITICAL: FactRecord has NO round field (round is lost at publish() in
+ * shared-blackboard.ts). The per-section round AND the header round both
+ * come from bundle.rounds (the run-level count). Do NOT reference finding.round.
+ */
+export function renderFleetView(bundle) {
+    const { rounds, findings } = bundle;
+    const header = `Fleet Run — Rounds: ${rounds} | Total findings: ${findings.length}`;
+    if (findings.length === 0) {
+        return [header];
+    }
+    // Group findings by subject (per-agent childFolder set by shared-blackboard.ts:publish)
+    const grouped = new Map();
+    for (const f of findings) {
+        const arr = grouped.get(f.subject) ?? [];
+        arr.push(f);
+        grouped.set(f.subject, arr);
+    }
+    const sections = [header];
+    for (const [subject, group] of grouped) {
+        // Latest finding = max tCreated (ISO-8601 strings sort lexicographically)
+        const latest = group.reduce((a, b) => (a.tCreated >= b.tCreated ? a : b));
+        const summary = oneLine(latest.value);
+        const confidence = latest.confidence.toFixed(2);
+        const count = group.length;
+        sections.push(`${subject}\nSummary: ${summary}\nRound: ${rounds} | Confidence: ${confidence} | Findings: ${count}`);
+    }
+    return sections;
+}
+// ── handleFleet ───────────────────────────────────────────────────────
+/**
+ * /fleet command handler.
+ *
+ * Sequence:
+ *   1. Gate FIRST — non-whitelisted senders get denialReply; reader is never called (sc-7-6).
+ *   2. Read bundle via injected reader (default: disk via defaultSynthesisReader).
+ *   3. Absent or empty findings → return a friendly "no recent fleet run" message.
+ *   4. Non-empty bundle → return renderFleetView sections joined into one reply string.
+ *
+ * Returns a plain string for the caller to pass through sendSafe — no transport access here.
+ */
+export async function handleFleet(senderId, allowed, reader = defaultSynthesisReader) {
+    // Gate FIRST: reader must never be called for non-whitelisted senders (sc-7-6).
+    if (!isAllowed(senderId, allowed)) {
+        return denialReply(senderId);
+    }
+    const bundle = await reader();
+    if (bundle === null || bundle.findings.length === 0) {
+        return "No recent fleet run. Run a fleet command with --blackboard to see per-agent findings here.";
+    }
+    return renderFleetView(bundle).join("\n\n");
+}
+//# sourceMappingURL=fleet-view.js.map

package/dist/telegram/fleet-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-view.js","sourceRoot":"","sources":["../../src/telegram/fleet-view.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKxD,yEAAyE;AAEzE,0EAA0E;AAC1E,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,yEAAyE;AAEzE;;;GAGG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACxF,CAAC;AAOD,yEAAyE;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC,CAAC,gCAAgC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,uBAAuB,MAAM,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC;IAEpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,wFAAwF;IACxF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAa,CAAC,MAAM,CAAC,CAAC;IAEpC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACvC,0EAA0E;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAE3B,QAAQ,CAAC,IAAI,CACX,GAAG,OAAO,cAAc,OAAO,YAAY,MAAM,kBAAkB,UAAU,gBAAgB,KAAK,EAAE,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAAqB,EACrB,SAA0B,sBAAsB;IAEhD,gFAAgF;IAChF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;IAE9B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,4FAA4F,CAAC;IACtG,CAAC;IAED,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC"}

package/dist/telegram/handlers/approvals.d.ts

@@ -0,0 +1,61 @@
+import type { AllowedUsers } from "../whitelist.js";
+/**
+ * Map<chatId, {action, checkpointId}> — Adjust/Reject await a follow-up text.
+ * In-memory only; cleared on bot restart. No disk persistence.
+ * bober: single-process map; extend to a shared Redis key-value store if the bot
+ *        runs across multiple processes (low-probability at current scale).
+ */
+export type PendingCallbackState = Map<number, {
+    action: "adjust" | "reject";
+    checkpointId: string;
+}>;
+export declare function createPendingState(): PendingCallbackState;
+/**
+ * Handle a button tap from an inline-keyboard approval message.
+ *
+ * Returns:
+ *   reply  — text to send back via sendSafe (null = nothing to send)
+ *   answer — text for answerCallbackQuery (always present to dismiss the spinner)
+ *
+ * Guard chain (mirrors approve.ts:44):
+ *   1. Whitelist re-check on the CALLBACK sender id (sc-4-5).
+ *   2. pendingExists guard — write NOTHING if no .pending.json (sc-4-4).
+ *   3. Approve  → saveApproved {approvedAt, approverId}; editDelta key ABSENT.
+ *   4. Adjust   → stash in pending map; return prompt for replacement text.
+ *   5. Reject   → stash in pending map; return prompt for feedback text.
+ */
+export declare function handleApprovalCallback(args: {
+    projectRoot: string;
+    senderId: number;
+    allowed: AllowedUsers;
+    chatId: number;
+    data: string;
+    pending: PendingCallbackState;
+    now?: () => string;
+}): Promise<{
+    reply: string | null;
+    answer: string;
+}>;
+/**
+ * Check whether the incoming plain-text message is a follow-up to a stashed
+ * Adjust or Reject tap. If so, resolves it and returns a reply string.
+ * Returns null when there is no stash for this chat — the caller falls through
+ * to normal text routing (capture / command dispatch).
+ *
+ * Key invariants:
+ *   - Adjust follow-up writes ApprovedMarker with editDelta = text.
+ *   - Reject follow-up writes RejectedMarker with rejecterId (NOT rejectorId).
+ *   - Both call deletePending after a successful write.
+ *   - Non-whitelisted sender: belt-and-suspenders return null without deleting stash
+ *     (the outer loop already blocks non-whitelisted messages).
+ */
+export declare function handleApprovalFollowup(args: {
+    projectRoot: string;
+    senderId: number;
+    allowed: AllowedUsers;
+    chatId: number;
+    text: string;
+    pending: PendingCallbackState;
+    now?: () => string;
+}): Promise<string | null>;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/telegram/handlers/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../../src/telegram/handlers/approvals.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAYpD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtG,wBAAgB,kBAAkB,IAAI,oBAAoB,CAEzD;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAgDpD;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmCzB"}