bazilion 0.12.2 → 0.14.0

package/dist/web/server/assets/{telegram-CBF8SJzB.js → telegram-Dj4Wwhd6.js}

@@ -1,6 +1,7 @@
-import { t as Route } from "./telegram-XwyKSEtj.js";
+import { t as Route } from "./telegram-DbOFpTFm.js";
 import { t as Button } from "./Button-Dsnw22OF.js";
-import { t as ConfigPage } from "./ConfigPage-BKlh5vOU.js";
+import { t as ConfirmDialog } from "./ConfirmDialog-C-MPYYSU.js";
+import { t as ConfigPage } from "./ConfigPage-CiQ-gxmJ.js";
 import { useEffect, useState } from "react";
 import { useRouter } from "@tanstack/react-router";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -13,10 +14,16 @@ function TelegramIntegrationPage() {
 	const [saving, setSaving] = useState(false);
 	const [saveError, setSaveError] = useState(null);
 	const [saveOk, setSaveOk] = useState(false);
+	const [confirmDisconnect, setConfirmDisconnect] = useState(false);
 	const [health, setHealth] = useState(null);
 	const [checking, setChecking] = useState(false);
 	async function save(e) {
 		e.preventDefault();
+		if (initial.configured && token.trim().length === 0) {
+			setSaveOk(false);
+			setSaveError(chatId.trim() === initial.chatId ? "Nothing changed. Paste a replacement token to update credentials." : "Paste the bot token again when changing the supergroup, so the existing secret is never cleared or reused silently.");
+			return;
+		}
 		setSaving(true);
 		setSaveError(null);
 		setSaveOk(false);
@@ -43,18 +50,17 @@ function TelegramIntegrationPage() {
 		}
 	}
 	async function disconnect() {
-		if (!confirm("Clear the saved Telegram credentials?")) return;
-		try {
-			await fetch("/api/config/telegram", { method: "DELETE" });
-			setToken("");
-			setChatId("");
-			setHealth(null);
-			setSaveOk(false);
-			setSaveError(null);
-			await router.invalidate();
-		} catch (e) {
-			setSaveError(e.message);
+		const response = await fetch("/api/config/telegram", { method: "DELETE" });
+		if (!response.ok && response.status !== 204) {
+			const body = await response.json().catch(() => null);
+			throw new Error(body?.error ?? `Could not clear Telegram credentials (${response.status})`);
 		}
+		setToken("");
+		setChatId("");
+		setHealth(null);
+		setSaveOk(false);
+		setSaveError(null);
+		await router.invalidate();
 	}
 	async function runHealth() {
 		setChecking(true);
@@ -119,7 +125,10 @@ function TelegramIntegrationPage() {
 										type: "password",
 										autoComplete: "off",
 										value: token,
-										onChange: (e) => setToken(e.target.value),
+										onChange: (e) => {
+											setToken(e.target.value);
+											setSaveError(null);
+										},
 										placeholder: initial.configured ? "(leave blank to keep stored value)" : "1234567890:ABC...",
 										className: "w-full rounded-md border bg-background px-2 py-1.5 font-mono text-sm outline-none focus:ring-2 focus:ring-ring/30",
 										required: !initial.configured
@@ -131,6 +140,10 @@ function TelegramIntegrationPage() {
 											/* @__PURE__ */ jsx("em", { children: "Bot Settings → Team Privacy → Turn off" }),
 											"."
 										]
+									}),
+									initial.configured && /* @__PURE__ */ jsx("p", {
+										className: "mt-1 text-xs text-muted-foreground",
+										children: "Blank preserves the stored token. To remove it, use clear credentials and confirm the integration shutdown."
 									})
 								]
 							}),
@@ -144,7 +157,10 @@ function TelegramIntegrationPage() {
 									/* @__PURE__ */ jsx("input", {
 										type: "text",
 										value: chatId,
-										onChange: (e) => setChatId(e.target.value),
+										onChange: (e) => {
+											setChatId(e.target.value);
+											setSaveError(null);
+										},
 										placeholder: "-1001234567890",
 										className: "w-full rounded-md border bg-background px-2 py-1.5 font-mono text-sm outline-none focus:ring-2 focus:ring-ring/30",
 										required: true
@@ -174,7 +190,7 @@ function TelegramIntegrationPage() {
 									}),
 									initial.configured && /* @__PURE__ */ jsx(Button, {
 										variant: "danger",
-										onClick: disconnect,
+										onClick: () => setConfirmDisconnect(true),
 										children: "clear credentials"
 									}),
 									saveOk && /* @__PURE__ */ jsx("span", {
@@ -182,6 +198,7 @@ function TelegramIntegrationPage() {
 										children: "saved ✓"
 									}),
 									saveError && /* @__PURE__ */ jsxs("span", {
+										role: "alert",
 										className: "text-xs text-danger",
 										children: ["error: ", saveError]
 									})
@@ -222,7 +239,150 @@ function TelegramIntegrationPage() {
 					health?.polling && /* @__PURE__ */ jsx(PollingState, { polling: health.polling })
 				]
 			}),
-			initial.configured && /* @__PURE__ */ jsx(AccessControlCard, {})
+			initial.configured && /* @__PURE__ */ jsx(OwnerPairingCard, {}),
+			initial.configured && /* @__PURE__ */ jsx(AccessControlCard, {}),
+			/* @__PURE__ */ jsx(ConfirmDialog, {
+				open: confirmDisconnect,
+				title: "Disconnect Telegram?",
+				description: /* @__PURE__ */ jsx("p", { children: "This permanently removes the saved bot token and supergroup ID. Telegram polling, ingress, and outbound delivery stop until new credentials are saved and pairing is completed again." }),
+				confirmLabel: "clear credentials and disconnect",
+				onConfirm: async () => {
+					try {
+						await disconnect();
+					} catch (error) {
+						setSaveError(error instanceof Error ? error.message : String(error));
+						throw error;
+					}
+				},
+				onOpenChange: setConfirmDisconnect
+			})
+		]
+	});
+}
+function OwnerPairingCard() {
+	const [status, setStatus] = useState(null);
+	const [code, setCode] = useState(null);
+	const [err, setErr] = useState(null);
+	const [confirmReset, setConfirmReset] = useState(false);
+	const load = async () => {
+		const res = await fetch("/api/config/telegram/pairing");
+		if (!res.ok) throw new Error(res.statusText);
+		setStatus(await res.json());
+	};
+	useEffect(() => {
+		load().catch((e) => setErr(e.message));
+	}, []);
+	async function createChallenge() {
+		setErr(null);
+		const res = await fetch("/api/config/telegram/pairing/challenge", { method: "POST" });
+		const body = await res.json().catch(() => ({}));
+		if (!res.ok || !body.code) return setErr(body.error ?? res.statusText);
+		setCode(body.code);
+		setStatus(body);
+	}
+	async function cancelChallenge() {
+		const res = await fetch("/api/config/telegram/pairing/challenge", { method: "DELETE" });
+		if (!res.ok && res.status !== 204) {
+			const body = await res.json().catch(() => null);
+			throw new Error(body?.error ?? "Could not cancel the pairing code");
+		}
+		setCode(null);
+		await load();
+	}
+	async function resetOwner() {
+		const res = await fetch("/api/config/telegram/pairing/reset", {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({ confirm: true })
+		});
+		if (!res.ok) {
+			const body = await res.json().catch(() => null);
+			throw new Error(body?.error ?? "Could not reset Telegram owner");
+		}
+		setCode(null);
+		await load();
+	}
+	return /* @__PURE__ */ jsxs("section", {
+		className: "rounded-lg border bg-card p-5",
+		children: [
+			/* @__PURE__ */ jsx("h3", {
+				className: "text-sm font-semibold uppercase tracking-wide text-muted-foreground mb-1",
+				children: "Owner pairing"
+			}),
+			/* @__PURE__ */ jsxs("p", {
+				className: "text-xs text-muted-foreground mb-3",
+				children: [
+					"Telegram stays closed until one owner consumes a short-lived code in the configured",
+					" ",
+					/* @__PURE__ */ jsx("code", {
+						className: "font-mono",
+						children: "⚙ bazilion"
+					}),
+					" service topic."
+				]
+			}),
+			status?.paired ? /* @__PURE__ */ jsxs("div", {
+				className: "flex flex-wrap items-center gap-3",
+				children: [/* @__PURE__ */ jsx("span", {
+					className: "text-sm text-success",
+					children: "✓ owner paired"
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "danger",
+					onClick: () => setConfirmReset(true),
+					children: "reset owner"
+				})]
+			}) : /* @__PURE__ */ jsxs("div", {
+				className: "space-y-2",
+				children: [
+					/* @__PURE__ */ jsx("p", {
+						className: "text-sm text-warning",
+						children: "Unpaired — all Telegram ingress is closed."
+					}),
+					code ? /* @__PURE__ */ jsxs("div", {
+						className: "rounded-md border bg-muted/30 p-3 text-sm",
+						children: [
+							"Send ",
+							/* @__PURE__ */ jsxs("code", {
+								className: "font-mono",
+								children: ["/pair ", code]
+							}),
+							" in the service topic. This code is shown once and expires in ten minutes."
+						]
+					}) : null,
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-wrap gap-2",
+						children: [/* @__PURE__ */ jsx(Button, {
+							variant: "primary",
+							onClick: createChallenge,
+							children: "generate pairing code"
+						}), status?.challengeActive && /* @__PURE__ */ jsx(Button, {
+							variant: "ghost",
+							onClick: () => void cancelChallenge().catch((error) => setErr(error instanceof Error ? error.message : String(error))),
+							children: "cancel code"
+						})]
+					})
+				]
+			}),
+			err && /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				className: "mt-2 text-xs text-danger",
+				children: err
+			}),
+			/* @__PURE__ */ jsx(ConfirmDialog, {
+				open: confirmReset,
+				title: "Revoke the paired Telegram owner?",
+				description: /* @__PURE__ */ jsx("p", { children: "This immediately revokes the current owner and closes all Telegram ingress. No one can use the bot until a new one-time pairing code is generated and consumed." }),
+				confirmLabel: "revoke owner and close ingress",
+				onConfirm: async () => {
+					try {
+						await resetOwner();
+					} catch (error) {
+						setErr(error instanceof Error ? error.message : String(error));
+						throw error;
+					}
+				},
+				onOpenChange: setConfirmReset
+			})
 		]
 	});
 }
@@ -232,6 +392,7 @@ function AccessControlCard() {
 	const [label, setLabel] = useState("");
 	const [busy, setBusy] = useState(false);
 	const [err, setErr] = useState(null);
+	const [removeTarget, setRemoveTarget] = useState(null);
 	async function load() {
 		try {
 			const res = await fetch("/api/config/telegram/acl");
@@ -277,16 +438,12 @@ function AccessControlCard() {
 	}
 	async function remove(id) {
 		setErr(null);
-		try {
-			const res = await fetch(`/api/config/telegram/acl/${id}`, { method: "DELETE" });
-			if (!res.ok) {
-				const j = await res.json().catch(() => ({}));
-				throw new Error(j.error ?? res.statusText);
-			}
-			await load();
-		} catch (e) {
-			setErr(e.message);
+		const res = await fetch(`/api/config/telegram/acl/${id}`, { method: "DELETE" });
+		if (!res.ok) {
+			const j = await res.json().catch(() => ({}));
+			throw new Error(j.error ?? res.statusText);
 		}
+		await load();
 	}
 	return /* @__PURE__ */ jsxs("section", {
 		className: "rounded-lg border bg-card p-5",
@@ -298,7 +455,7 @@ function AccessControlCard() {
 			/* @__PURE__ */ jsxs("p", {
 				className: "text-xs text-muted-foreground mb-3",
 				children: [
-					"Allowlisted Telegram users can use the bot (commands + chat). While the list is empty the bot is open and the first person to message it becomes owner. Users find their id via",
+					"Allowlisted Telegram users can use the bot (commands + chat). An empty list is closed; ownership begins only through the one-time pairing flow. Users find their id via",
 					" ",
 					/* @__PURE__ */ jsx("code", {
 						className: "font-mono",
@@ -312,7 +469,7 @@ function AccessControlCard() {
 				children: "loading…"
 			}) : users.length === 0 ? /* @__PURE__ */ jsx("p", {
 				className: "text-xs text-warning mb-3",
-				children: "Open — no allowlist yet. The first user to message the bot claims owner."
+				children: "Closed — no paired owner or allowlisted members."
 			}) : /* @__PURE__ */ jsx("ul", {
 				className: "mb-3 space-y-1 text-sm",
 				children: users.map((u) => /* @__PURE__ */ jsxs("li", {
@@ -330,10 +487,10 @@ function AccessControlCard() {
 								u.role
 							]
 						}),
-						u.role !== "owner" && /* @__PURE__ */ jsx("button", {
-							type: "button",
-							onClick: () => void remove(u.userId),
-							className: "ghost-btn text-xs text-rose-baziu",
+						u.role !== "owner" && /* @__PURE__ */ jsx(Button, {
+							variant: "danger",
+							className: "text-xs",
+							onClick: () => setRemoveTarget(u),
 							children: "remove"
 						})
 					]
@@ -341,19 +498,33 @@ function AccessControlCard() {
 			}),
 			/* @__PURE__ */ jsxs("form", {
 				onSubmit: add,
-				className: "flex flex-col gap-2 sm:flex-row sm:flex-wrap sm:items-center",
+				className: "flex flex-col gap-2 sm:flex-row sm:flex-wrap sm:items-end",
 				children: [
-					/* @__PURE__ */ jsx("input", {
-						value: userId,
-						onChange: (e) => setUserId(e.target.value),
-						placeholder: "user id",
-						className: "w-full rounded-md border bg-background px-2 py-1 font-mono text-sm sm:w-28"
+					/* @__PURE__ */ jsxs("label", {
+						className: "m-0 flex flex-col gap-1 text-xs font-medium text-foreground",
+						children: ["Telegram user ID", /* @__PURE__ */ jsx("input", {
+							value: userId,
+							onChange: (e) => setUserId(e.target.value),
+							placeholder: "123456789",
+							inputMode: "numeric",
+							className: "w-full rounded-md border bg-background px-2 py-1 font-mono text-sm sm:w-32"
+						})]
 					}),
-					/* @__PURE__ */ jsx("input", {
-						value: label,
-						onChange: (e) => setLabel(e.target.value),
-						placeholder: "label (optional)",
-						className: "w-full rounded-md border bg-background px-2 py-1 text-sm sm:w-40"
+					/* @__PURE__ */ jsxs("label", {
+						className: "m-0 flex flex-col gap-1 text-xs font-medium text-foreground",
+						children: [
+							"Label ",
+							/* @__PURE__ */ jsx("span", {
+								className: "font-normal text-muted-foreground",
+								children: "(optional)"
+							}),
+							/* @__PURE__ */ jsx("input", {
+								value: label,
+								onChange: (e) => setLabel(e.target.value),
+								placeholder: "e.g. Pat",
+								className: "w-full rounded-md border bg-background px-2 py-1 text-sm sm:w-40"
+							})
+						]
 					}),
 					/* @__PURE__ */ jsx(Button, {
 						variant: "ghost",
@@ -362,10 +533,36 @@ function AccessControlCard() {
 						children: "add"
 					}),
 					err && /* @__PURE__ */ jsx("span", {
+						role: "alert",
 						className: "text-xs text-danger",
 						children: err
 					})
 				]
+			}),
+			/* @__PURE__ */ jsx(ConfirmDialog, {
+				open: removeTarget !== null,
+				title: `Remove ${removeTarget?.label ?? removeTarget?.username ?? removeTarget?.userId ?? ""}?`,
+				description: /* @__PURE__ */ jsxs("p", { children: [
+					"Telegram user ",
+					/* @__PURE__ */ jsx("code", {
+						className: "font-mono",
+						children: removeTarget?.userId
+					}),
+					" immediately loses command and chat access. Their Telegram account is not changed, and they can be allowlisted again later."
+				] }),
+				confirmLabel: "remove Telegram access",
+				onConfirm: async () => {
+					if (!removeTarget) return;
+					try {
+						await remove(removeTarget.userId);
+					} catch (error) {
+						setErr(error instanceof Error ? error.message : String(error));
+						throw error;
+					}
+				},
+				onOpenChange: (open) => {
+					if (!open) setRemoveTarget(null);
+				}
 			})
 		]
 	});
@@ -419,6 +616,7 @@ function MigrationBanner({ toChatId }) {
 				children: busy ? "reconnecting…" : `Reconnect to ${toChatId}`
 			}),
 			err && /* @__PURE__ */ jsx("span", {
+				role: "alert",
 				className: "ml-3 text-xs text-danger",
 				children: err
 			})
@@ -452,6 +650,7 @@ function PollingState({ polling }) {
 				]
 			}),
 			polling.error && /* @__PURE__ */ jsxs("p", {
+				role: "alert",
 				className: "text-danger",
 				children: ["error: ", polling.error]
 			})
@@ -460,6 +659,7 @@ function PollingState({ polling }) {
 }
 function PreflightResult({ health }) {
 	if (health.error) return /* @__PURE__ */ jsxs("div", {
+		role: "alert",
 		className: "rounded-md border border-danger/25 bg-danger/10 px-3 py-2 text-sm",
 		children: [
 			/* @__PURE__ */ jsxs("p", {
@@ -477,11 +677,15 @@ function PreflightResult({ health }) {
 		]
 	});
 	if (!health.preflight) return /* @__PURE__ */ jsx("p", {
+		role: "status",
 		className: "text-xs text-muted-foreground italic",
 		children: "No preflight data."
 	});
 	const p = health.preflight;
 	return /* @__PURE__ */ jsxs("ul", {
+		role: "status",
+		"aria-live": "polite",
+		"aria-atomic": "true",
 		className: "space-y-1.5",
 		children: [
 			/* @__PURE__ */ jsxs(Check, {
@@ -508,6 +712,21 @@ function PreflightResult({ health }) {
 				ok: p.privacyModeOff,
 				label: "Privacy Mode is OFF",
 				children: p.privacyModeOff ? "can_read_all_group_messages: true" : "BotFather → /mybots → select bot → Bot Settings → Team Privacy → Turn off"
+			}),
+			/* @__PURE__ */ jsx(Check, {
+				ok: p.chatIsPrivate,
+				label: "Supergroup is private",
+				children: p.chatIsPrivate ? "no public @username" : "public groups expose topic content to readers"
+			}),
+			/* @__PURE__ */ jsx(Check, {
+				ok: p.memberCount === 2,
+				label: "Expected membership",
+				children: p.memberCount === null ? "member count unavailable — verify one owner plus the bot manually" : `${p.memberCount} members reported; secure posture is one owner plus the bot`
+			}),
+			p.ownerPresent !== null && /* @__PURE__ */ jsx(Check, {
+				ok: p.ownerPresent,
+				label: "Paired owner is present",
+				children: p.ownerPresent ? "owner membership confirmed" : "owner missing — Telegram ingress is degraded"
 			})
 		]
 	});