cli-jaw 2.17.9 → 2.17.10

package/dist/src/telegram/reactions.js

@@ -0,0 +1,126 @@
+// ─── Telegram Message Reactions (Bot API 7.0+) ───────
+// Telegram does NOT accept arbitrary emoji here. ReactionTypeEmoji has a fixed
+// allowlist, so a settings typo becomes a runtime API error unless it is checked
+// before the call.
+//
+// Two consequences that look like bugs if you do not know them:
+//   1. ✅ and ❌ are NOT on the list. Success/failure have to use 👍/👎, which is
+//      also what hermes-agent settled on — not a stylistic choice.
+//   2. A bot's previous reaction is REPLACED atomically, so there is no remove
+//      step. Clearing first would show an empty state and cost an extra request.
+/** ReactionTypeEmoji's complete allowlist, core.telegram.org/bots/api (2026-08-21). */
+export const TELEGRAM_REACTION_EMOJI = new Set([
+    '\u2764', '\u{1F44D}', '\u{1F44E}', '\u{1F525}', '\u{1F970}', '\u{1F44F}',
+    '\u{1F601}', '\u{1F914}', '\u{1F92F}', '\u{1F631}', '\u{1F92C}', '\u{1F622}',
+    '\u{1F389}', '\u{1F929}', '\u{1F92E}', '\u{1F4A9}', '\u{1F64F}', '\u{1F44C}',
+    '\u{1F54A}', '\u{1F921}', '\u{1F971}', '\u{1F974}', '\u{1F60D}', '\u{1F433}',
+    '\u2764\u200D\u{1F525}', '\u{1F31A}', '\u{1F32D}', '\u{1F4AF}', '\u{1F923}',
+    '\u26A1', '\u{1F34C}', '\u{1F3C6}', '\u{1F494}', '\u{1F928}', '\u{1F610}',
+    '\u{1F353}', '\u{1F37E}', '\u{1F48B}', '\u{1F595}', '\u{1F608}', '\u{1F634}',
+    '\u{1F62D}', '\u{1F913}', '\u{1F47B}', '\u{1F468}\u200D\u{1F4BB}', '\u{1F440}',
+    '\u{1F383}', '\u{1F648}', '\u{1F607}', '\u{1F628}', '\u{1F91D}', '\u270D',
+    '\u{1F917}', '\u{1FAE1}', '\u{1F385}', '\u{1F384}', '\u2603', '\u{1F485}',
+    '\u{1F92A}', '\u{1F5FF}', '\u{1F192}', '\u{1F498}', '\u{1F649}', '\u{1F984}',
+    '\u{1F618}', '\u{1F48A}', '\u{1F64A}', '\u{1F60E}', '\u{1F47E}',
+    '\u{1F937}\u200D\u2642', '\u{1F937}', '\u{1F937}\u200D\u2640', '\u{1F621}',
+]);
+export function isTelegramReactionEmoji(emoji) {
+    return TELEGRAM_REACTION_EMOJI.has(emoji);
+}
+/**
+ * Coerce an emoji into something Telegram will accept, or null to skip.
+ *
+ * Falls back rather than refusing: a bad config value should cost the reaction's
+ * expressiveness, not the acknowledgement itself. Returning null would silently
+ * turn the feature off for that user.
+ */
+export function coerceTelegramReaction(emoji, fallback = '\u{1F440}') {
+    if (isTelegramReactionEmoji(emoji))
+        return emoji;
+    return isTelegramReactionEmoji(fallback) ? fallback : null;
+}
+/** A reaction is decoration on top of the answer; it must never be the reason a
+ *  shutdown hangs. Tight enough that remove+apply stays inside a drain deadline. */
+export const TELEGRAM_REACTION_TIMEOUT_MS = 2500;
+/** Same reasoning for the notice: a stuck cleanup must not hold shutdown open. */
+export const TELEGRAM_NOTICE_TIMEOUT_MS = 5000;
+/**
+ * Set (or clear) this bot's reaction on a message.
+ *
+ * Non-premium bots may set ONE reaction per message, so the array is length 0 or
+ * 1 and never more. An empty array clears. grammY throws on API failure, which is
+ * the reject-on-vendor-failure contract AckTransport requires.
+ */
+export async function setTelegramReaction(api, chatId, messageId, emoji, options = {}) {
+    const timeoutMs = options.timeoutMs ?? TELEGRAM_REACTION_TIMEOUT_MS;
+    // Both bounds matter and they mean different things: the caller's signal is a
+    // lifecycle cancellation (shutdown), the timeout is protection against a
+    // vendor call that simply never answers.
+    const signal = options.signal
+        ? AbortSignal.any([options.signal, AbortSignal.timeout(timeoutMs)])
+        : AbortSignal.timeout(timeoutMs);
+    await api.raw.setMessageReaction({
+        chat_id: chatId,
+        message_id: messageId,
+        reaction: emoji ? [{ type: 'emoji', emoji }] : [],
+    }, signal);
+}
+/**
+ * The ACK transport for a Telegram message.
+ *
+ * Exported so production and tests build the SAME seam. A test that defines its
+ * own adapter proves only its own adapter: it would stay green if the wiring
+ * later picked remove-then-add or dropped the allowlist coercion.
+ *
+ * `replace` is a vendor fact, not a preference — Telegram swaps a bot's reaction
+ * atomically, so clearing first would show an empty state and cost a request.
+ */
+export function createTelegramAckTransport(api, chatId, messageId, options = {}) {
+    return {
+        mode: 'replace',
+        apply: async (emoji) => {
+            await setTelegramReaction(api, chatId, messageId, emoji, options);
+        },
+        remove: async () => {
+            // An empty reaction list is how Telegram clears; there is no
+            // dedicated remove call.
+            await setTelegramReaction(api, chatId, messageId, null, options);
+        },
+        coerce: (emoji) => coerceTelegramReaction(emoji),
+    };
+}
+/**
+ * The queue-notice transport for a posted Telegram message.
+ *
+ * Exported for the same reason as the ACK transport: production and tests must
+ * drive the SAME binding, or a test proves only its own fixture.
+ *
+ * Both calls forward the signal grammY takes positionally. deleteMessage has a
+ * 48-hour limit and needs permission in groups; both failures are harmless here,
+ * since the worst case is the stale notice this whole unit exists to remove.
+ */
+export function createTelegramNoticeTransport(api, chatId, messageId, timeoutMs = TELEGRAM_NOTICE_TIMEOUT_MS) {
+    // A per-call timeout is composed even when the caller supplies nothing.
+    // QueueNotice pins whichever signal the FIRST close receives, and ordinary
+    // delivery and the 5-minute timer both close without one — so relying on the
+    // shutdown drain to supply it would leave the common path on grammY's
+    // 500-second default.
+    //
+    // The duration is a parameter purely so a test can prove the timeout FIRES
+    // without spending five real seconds waiting for it. A wall-clock wait that
+    // long is also what made the assertion flaky on CI, where the runner tore
+    // the event loop down before the timer landed.
+    const bounded = (signal) => {
+        const timeout = AbortSignal.timeout(timeoutMs);
+        return signal ? AbortSignal.any([signal, timeout]) : timeout;
+    };
+    return {
+        delete: async (signal) => {
+            await api.deleteMessage(chatId, messageId, bounded(signal));
+        },
+        edit: async (text, signal) => {
+            await api.editMessageText(chatId, messageId, text, undefined, bounded(signal));
+        },
+    };
+}
+//# sourceMappingURL=reactions.js.map

package/dist/src/telegram/reactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactions.js","sourceRoot":"","sources":["../../../src/telegram/reactions.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,+EAA+E;AAC/E,iFAAiF;AACjF,mBAAmB;AACnB,EAAE;AACF,gEAAgE;AAChE,gFAAgF;AAChF,mEAAmE;AACnE,+EAA+E;AAC/E,iFAAiF;AAEjF,uFAAuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAChE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IACzE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC5E,uBAAuB,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC3E,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IACzE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,0BAA0B,EAAE,WAAW;IAC9E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ;IACzE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW;IACzE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC5E,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAC/D,uBAAuB,EAAE,WAAW,EAAE,uBAAuB,EAAE,WAAW;CAC7E,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACjD,OAAO,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,QAAQ,GAAG,WAAW;IACxE,IAAI,uBAAuB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAmBD;oFACoF;AACpF,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,kFAAkF;AAClF,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAO/C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,GAAwB,EACxB,MAAuB,EACvB,SAAiB,EACjB,KAAoB,EACpB,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACpE,8EAA8E;IAC9E,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC7B,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KACpD,EAAE,MAAe,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACtC,GAAwB,EACxB,MAAuB,EACvB,SAAiB,EACjB,UAAmC,EAAE;IAErC,OAAO;QACH,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACf,6DAA6D;YAC7D,yBAAyB;YACzB,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC;KACnD,CAAC;AACN,CAAC;AAeD;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CACzC,GAAsB,EACtB,MAAuB,EACvB,SAAiB,EACjB,YAAoB,0BAA0B;IAE9C,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,sBAAsB;IACtB,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAoB,EAAe,EAAE;QAClD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,CAAC,CAAC;IACF,OAAO;QACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAU,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACzB,MAAM,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAU,CAAC,CAAC;QAC5F,CAAC;KACJ,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli-jaw",
-  "version": "2.17.9",
+  "version": "2.17.10",
   "description": "Personal AI assistant powered by Pi, Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills",
   "type": "module",
   "keywords": [

package/public/locales/en.json

@@ -156,6 +156,7 @@
   "cmd.runtimeSelectionInstanceWide": "The CLI and model are shared by every session on this instance. Change them from the instance web settings.",
   "tg.promptUnsupported": "(Not supported on Telegram)",
   "tg.queued": "Added to queue (#{count})",
+  "tg.queueExpired": "The queued turn timed out",
   "tg.imageCaption": "[📷 Image] {caption}",
   "tg.imageFail": "Image processing failed: {msg}",
   "tg.fileFail": "File processing failed: {msg}",

package/public/locales/ja.json

@@ -154,6 +154,7 @@
   "cmd.runtimeSelectionInstanceWide": "CLI とモデルの選択はこのインスタンスの全セッションで共有されます。インスタンスのウェブ設定から変更してください。",
   "tg.promptUnsupported": "（Telegram では未対応）",
   "tg.queued": "キューに追加しました（#{count}）",
+  "tg.queueExpired": "キューの待機時間が超過しました",
   "tg.imageCaption": "[📷 画像] {caption}",
   "tg.imageFail": "画像処理に失敗しました: {msg}",
   "tg.fileFail": "ファイル処理に失敗しました: {msg}",

package/public/locales/ko.json

@@ -156,6 +156,7 @@
   "cmd.runtimeSelectionInstanceWide": "CLI와 모델 선택은 이 인스턴스의 모든 세션이 함께 씁니다. 인스턴스 웹 설정에서 바꿔주세요.",
   "tg.promptUnsupported": "(Telegram에서 미지원)",
   "tg.queued": "대기열에 추가됨 ({count}번째)",
+  "tg.queueExpired": "대기 시간이 초과되었습니다",
   "tg.imageCaption": "[📷 이미지] {caption}",
   "tg.imageFail": "이미지 처리 실패: {msg}",
   "tg.fileFail": "파일 처리 실패: {msg}",

package/public/locales/zh.json

@@ -154,6 +154,7 @@
   "cmd.runtimeSelectionInstanceWide": "CLI 与模型选择由本实例的所有会话共用。请在实例网页设置中修改。",
   "tg.promptUnsupported": "（Telegram 不支持）",
   "tg.queued": "已加入队列（第 {count} 个）",
+  "tg.queueExpired": "排队等待已超时",
   "tg.imageCaption": "[📷 图片] {caption}",
   "tg.imageFail": "图片处理失败：{msg}",
   "tg.fileFail": "文件处理失败：{msg}",

package/scripts/check-redaction-sinks.mjs

@@ -86,6 +86,11 @@ const ALLOWLIST = [
     { contains: "persist failed:", why: "a Node.js Error.message from fs write, not a credential" },
     { contains: 'await ctx.reply(syncText)', why: 'syncText is masked where it is built' },
     { contains: 'Chat ID: <code>', why: 'a chat id the user just asked for' },
+    // Queue-notice lifecycle (#412). Both carry text this repo built, not text
+    // that passed through a credential-bearing surface.
+    { contains: "t('tg.queued'", why: 'a locale string plus a pending count' },
+    { contains: 'const posted = await msg.reply(', why: 'the queue notice: a locale string plus a pending count' },
+    { contains: 'api.editMessageText(chatId, messageId, text', why: 'text is the notice expiry constant supplied at createQueueNotice' },
 ];
 
 /**