easy-ping 0.6.1 → 0.7.0

package/README.md

@@ -3,7 +3,7 @@
 # easy-ping
 
 **Own your notifications.**
-In-app inbox, transactional email and web push — running inside your app, stored in your
+In-app inbox, transactional email, web push and Telegram — running inside your app, stored in your
 database, with no per-notification bill.
 
 [![npm](https://img.shields.io/npm/v/easy-ping?color=%23e0362a&label=npm)](https://www.npmjs.com/package/easy-ping)
@@ -47,7 +47,7 @@ hand-rolling it badly.
 | **Cost per notification** | none | none, you pay for servers | metered per send |
 | **License** | MIT, all of it | MIT core, commercial modules | proprietary |
 | **Visual workflow editor** | **no**, a notification is code | yes | yes |
-| **Channels out of the box** | **in-app, email, web push** | dozens | dozens |
+| **Channels out of the box** | **in-app, email, web push, Telegram** | dozens | dozens |
 
 The last two rows are the trade. If you need a workflow editor a non-developer can edit, use one
 of the others — they are good tools solving a bigger problem.
@@ -56,7 +56,7 @@ of the others — they are good tools solving a bigger problem.
 Every "no queue required" decision below follows from that.
 
 > **Status: published, pre-1.0.** The core pipeline, all three adapters, the React client and the
-> preferences, digests and push plugins are covered by tests against real databases. Web push is
+> preferences, digests, push and telegram plugins are covered by tests against real databases. Web push is
 > verified end to end against Mozilla's production push service and cross-checked against
 > `http_ece`. The bell updates over a server-sent event stream with polling as the fallback;
 > batching is not built, and the Resend provider has only been exercised against a stub. Minor
@@ -379,10 +379,25 @@ single replica.
 | `inApp` | ✅ built in, on by default, needs no provider |
 | `email` | ✅ Resend provider; the interface is open for others |
 | `push` | ✅ push plugin + `webPush()` — VAPID and aes128gcm on Web Crypto, so it runs on edge too |
+| `telegram` | ✅ telegram plugin + `telegramBot()` — one-tap linking through the bot, webhook or long-poll |
 | `sms` | ⬜ not implemented |
 | `slack` | ⬜ not implemented |
 
-A channel is usable when core carries it (`inApp`, `email`) or a plugin declares it and can `deliver` it. That is how push works, and how sms and slack will.
+A channel is usable when core carries it (`inApp`, `email`) or a plugin declares it and can `deliver` it. That is how push and telegram work, and how sms and slack will.
+
+```ts
+import { telegram } from "easy-ping/plugins/telegram";
+import { telegramBot } from "easy-ping/providers/telegram";
+
+telegram({
+  provider: telegramBot({ token: process.env.TELEGRAM_BOT_TOKEN! }),
+  botUsername: "your_bot",
+  webhookSecret: process.env.TELEGRAM_WEBHOOK_SECRET,   // or plugin.poll() in development
+  render: ({ payload }) => ({ text: `<b>${escapeHtml(payload.authorName)}</b> replied` }),
+});
+```
+
+`POST /telegram/link` returns a `t.me/<bot>?start=<code>` link; the user taps it, the bot stores the chat, and every `send()` with `telegram` in its channels reaches it. Blocked chats prune themselves.
 
 Declaring a channel nothing can carry **warns at startup** and reports `skipped: "channel-unavailable"` — deliberately distinct from `"no-channels"`, so a missing provider never looks like a user opt-out.
 
@@ -475,6 +490,7 @@ Defaults to the last 24 hours, capped at 1000 rows. Wire it to an admin page or
 | ✅ digests plugin, timezone-aware | |
 | ✅ push plugin + web-push provider | VAPID + RFC 8291, no node:crypto |
 | ✅ push verified against a live push service | Mozilla autopush, plus a cross-check against `http_ece` |
+| ✅ telegram plugin + bot provider | one-tap linking, webhook or long-poll, blocked chats pruned |
 | ✅ scoped plugin storage, so plugins own their tables | |
 | ✅ additive schema migrations for the raw-SQL path | `planPostgresMigration()`; MySQL and SQLite are bootstrap-only for now |
 | ✅ failed deliveries reachable from the instance | `notify.getFailedDeliveries()` |

package/dist/{adapter-D3lTy-4E.d.cts → adapter-BJ8Iejvs.d.cts}

@@ -1,4 +1,4 @@
-type Channel = "inApp" | "email" | "push" | "sms" | "slack";
+type Channel = "inApp" | "email" | "push" | "telegram" | "sms" | "slack";
 type DeliveryStatus = "pending" | "claimed" | "sent" | "failed" | "skipped";
 type DeliveryMode = "inline" | "deferred" | "worker" | "cron";
 type Frequency = "instant" | "daily" | "weekly" | "off";

package/dist/{adapter-D3lTy-4E.d.ts → adapter-BJ8Iejvs.d.ts}

@@ -1,4 +1,4 @@
-type Channel = "inApp" | "email" | "push" | "sms" | "slack";
+type Channel = "inApp" | "email" | "push" | "telegram" | "sms" | "slack";
 type DeliveryStatus = "pending" | "claimed" | "sent" | "failed" | "skipped";
 type DeliveryMode = "inline" | "deferred" | "worker" | "cron";
 type Frequency = "instant" | "daily" | "weekly" | "off";

package/dist/adapters/drizzle.d.cts

@@ -1,4 +1,4 @@
-import { D as DatabaseAdapter, C as Channel, a as DeliveryStatus, F as Frequency } from '../adapter-D3lTy-4E.cjs';
+import { D as DatabaseAdapter, C as Channel, a as DeliveryStatus, F as Frequency } from '../adapter-BJ8Iejvs.cjs';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 
 type DrizzleAdapterOptions = {

package/dist/adapters/drizzle.d.ts

@@ -1,4 +1,4 @@
-import { D as DatabaseAdapter, C as Channel, a as DeliveryStatus, F as Frequency } from '../adapter-D3lTy-4E.js';
+import { D as DatabaseAdapter, C as Channel, a as DeliveryStatus, F as Frequency } from '../adapter-BJ8Iejvs.js';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 
 type DrizzleAdapterOptions = {

package/dist/adapters/mongodb.d.cts

@@ -1,5 +1,5 @@
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.cjs';
-import { S as SchemaDeclaration } from '../plugin-CHd2ZiGC.cjs';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.cjs';
+import { S as SchemaDeclaration } from '../plugin-Wwp1nvo0.cjs';
 import { S as Signals } from '../signals-kPmOlKDX.cjs';
 
 type MongoAdapterOptions = {

package/dist/adapters/mongodb.d.ts

@@ -1,5 +1,5 @@
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.js';
-import { S as SchemaDeclaration } from '../plugin-Cg9usuUi.js';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.js';
+import { S as SchemaDeclaration } from '../plugin-CSLKKgXT.js';
 import { S as Signals } from '../signals-kPmOlKDX.js';
 
 type MongoAdapterOptions = {

package/dist/adapters/mysql.d.cts

@@ -1,7 +1,7 @@
 import { S as SqlAdapterOptions, a as SqlExec } from '../adapter-B7R4rXtJ.cjs';
 export { b as MysqlResult } from '../adapter-B7R4rXtJ.cjs';
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.cjs';
-import { S as SchemaDeclaration } from '../plugin-CHd2ZiGC.cjs';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.cjs';
+import { S as SchemaDeclaration } from '../plugin-Wwp1nvo0.cjs';
 
 type MysqlAdapterOptions = SqlAdapterOptions;
 /**

package/dist/adapters/mysql.d.ts

@@ -1,7 +1,7 @@
 import { S as SqlAdapterOptions, a as SqlExec } from '../adapter-B7R4rXtJ.js';
 export { b as MysqlResult } from '../adapter-B7R4rXtJ.js';
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.js';
-import { S as SchemaDeclaration } from '../plugin-Cg9usuUi.js';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.js';
+import { S as SchemaDeclaration } from '../plugin-CSLKKgXT.js';
 
 type MysqlAdapterOptions = SqlAdapterOptions;
 /**

package/dist/adapters/postgres.d.cts

@@ -1,5 +1,5 @@
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.cjs';
-import { S as SchemaDeclaration } from '../plugin-CHd2ZiGC.cjs';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.cjs';
+import { S as SchemaDeclaration } from '../plugin-Wwp1nvo0.cjs';
 import { S as Signals } from '../signals-kPmOlKDX.cjs';
 
 type Row = Record<string, unknown>;

package/dist/adapters/postgres.d.ts

@@ -1,5 +1,5 @@
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.js';
-import { S as SchemaDeclaration } from '../plugin-Cg9usuUi.js';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.js';
+import { S as SchemaDeclaration } from '../plugin-CSLKKgXT.js';
 import { S as Signals } from '../signals-kPmOlKDX.js';
 
 type Row = Record<string, unknown>;

package/dist/adapters/sqlite.d.cts

@@ -1,7 +1,7 @@
 import { S as SqlAdapterOptions, a as SqlExec } from '../adapter-B7R4rXtJ.cjs';
 export { b as SqliteResult } from '../adapter-B7R4rXtJ.cjs';
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.cjs';
-import { S as SchemaDeclaration } from '../plugin-CHd2ZiGC.cjs';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.cjs';
+import { S as SchemaDeclaration } from '../plugin-Wwp1nvo0.cjs';
 
 type SqliteAdapterOptions = SqlAdapterOptions;
 /**

package/dist/adapters/sqlite.d.ts

@@ -1,7 +1,7 @@
 import { S as SqlAdapterOptions, a as SqlExec } from '../adapter-B7R4rXtJ.js';
 export { b as SqliteResult } from '../adapter-B7R4rXtJ.js';
-import { D as DatabaseAdapter } from '../adapter-D3lTy-4E.js';
-import { S as SchemaDeclaration } from '../plugin-Cg9usuUi.js';
+import { D as DatabaseAdapter } from '../adapter-BJ8Iejvs.js';
+import { S as SchemaDeclaration } from '../plugin-CSLKKgXT.js';
 
 type SqliteAdapterOptions = SqlAdapterOptions;
 /**

package/dist/chunk-R3BE67L7.js

@@ -0,0 +1,13 @@
+// src/core/html.ts
+var ESCAPES = {
+  "&": "&",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#39;"
+};
+var escapeHtml = (value) => String(value ?? "").replace(/[&<>"']/g, (char) => ESCAPES[char] ?? char);
+
+export { escapeHtml };
+//# sourceMappingURL=chunk-R3BE67L7.js.map
+//# sourceMappingURL=chunk-R3BE67L7.js.map

package/dist/chunk-R3BE67L7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/html.ts"],"names":[],"mappings":";AAAA,IAAM,OAAA,GAAkC;AAAA,EACtC,GAAA,EAAK,OAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,QAAA;AAAA,EACL,GAAA,EAAK;AACP,CAAA;AAGO,IAAM,UAAA,GAAa,CAAC,KAAA,KACzB,MAAA,CAAO,SAAS,EAAE,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,CAAC,IAAA,KAAS,OAAA,CAAQ,IAAI,KAAK,IAAI","file":"chunk-R3BE67L7.js","sourcesContent":["const ESCAPES: Record<string, string> = {\n  \"&\": \"&amp;\",\n  \"<\": \"&lt;\",\n  \">\": \"&gt;\",\n  '\"': \"&quot;\",\n  \"'\": \"&#39;\",\n};\n\n/** For template literals: anything a user typed goes through this, or their HTML ships from your domain. */\nexport const escapeHtml = (value: unknown): string =>\n  String(value ?? \"\").replace(/[&<>\"']/g, (char) => ESCAPES[char] ?? char);\n"]}

package/dist/chunk-SSHVZHSJ.js

@@ -0,0 +1,100 @@
+// src/providers/telegram/index.ts
+var telegramStartLink = (botUsername, code) => `https://t.me/${botUsername.replace(/^@/, "")}?start=${encodeURIComponent(code)}`;
+function telegramBot(options) {
+  const doFetch = options.fetch ?? globalThis.fetch;
+  const base = `${(options.apiBase ?? "https://api.telegram.org").replace(/\/$/, "")}/bot${options.token}`;
+  const timeoutMs = options.timeoutMs ?? 1e4;
+  const redact = (text) => text.split(options.token).join("<token>");
+  async function call(method, body, signal, budgetMs = timeoutMs) {
+    const timeout = AbortSignal.timeout(budgetMs);
+    const merged = signal ? AbortSignal.any([signal, timeout]) : timeout;
+    const response = await doFetch(`${base}/${method}`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: merged
+    });
+    const data = await response.json().catch(() => ({ ok: false }));
+    return { status: response.status, data };
+  }
+  async function must(method, body) {
+    const { data } = await call(method, body);
+    if (!data.ok)
+      throw new Error(redact(`telegram ${method} failed: ${data.description ?? "unknown"}`));
+    return data.result;
+  }
+  return {
+    name: "telegram",
+    async send(message) {
+      const body = {
+        chat_id: message.chatId,
+        text: message.text,
+        parse_mode: "HTML",
+        link_preview_options: { is_disabled: true }
+      };
+      if (message.buttons?.length) {
+        body.reply_markup = {
+          inline_keyboard: [
+            message.buttons.map((button) => ({ text: button.text, url: button.url }))
+          ]
+        };
+      }
+      let status;
+      let data;
+      try {
+        ({ status, data } = await call(
+          "sendMessage",
+          body,
+          message.signal
+        ));
+      } catch (error) {
+        const text = error instanceof Error ? error.message : String(error);
+        return { ok: false, error: redact(text), retryable: true, gone: false };
+      }
+      if (data.ok) return { ok: true, messageId: data.result.message_id };
+      const description = redact(data.description ?? `HTTP ${status}`);
+      const code = data.error_code ?? status;
+      if (code === 429) {
+        return {
+          ok: false,
+          error: description,
+          retryable: true,
+          gone: false,
+          retryAfterSeconds: data.parameters?.retry_after
+        };
+      }
+      const gone = code === 403 || code === 400 && /chat not found|user is deactivated|bot was kicked/i.test(description);
+      return { ok: false, error: description, retryable: code >= 500, gone };
+    },
+    async getUpdates({ offset, timeoutSeconds = 25, signal }) {
+      const { data } = await call(
+        "getUpdates",
+        {
+          ...offset === void 0 ? {} : { offset },
+          timeout: timeoutSeconds,
+          allowed_updates: ["message", "my_chat_member"]
+        },
+        signal,
+        (timeoutSeconds + 10) * 1e3
+      );
+      if (!data.ok)
+        throw new Error(redact(`telegram getUpdates failed: ${data.description ?? "unknown"}`));
+      return data.result;
+    },
+    setWebhook: async (url, secretToken) => {
+      await must("setWebhook", {
+        url,
+        secret_token: secretToken,
+        allowed_updates: ["message", "my_chat_member"]
+      });
+    },
+    deleteWebhook: async () => {
+      await must("deleteWebhook", {});
+    },
+    getMe: () => must("getMe", {})
+  };
+}
+
+export { telegramBot, telegramStartLink };
+//# sourceMappingURL=chunk-SSHVZHSJ.js.map
+//# sourceMappingURL=chunk-SSHVZHSJ.js.map

package/dist/chunk-SSHVZHSJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers/telegram/index.ts"],"names":[],"mappings":";AAiEO,IAAM,iBAAA,GAAoB,CAAC,WAAA,EAAqB,IAAA,KACrD,CAAA,aAAA,EAAgB,WAAA,CAAY,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,OAAA,EAAU,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAG1E,SAAS,YAAY,OAAA,EAA+C;AACzE,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,CAAA,EAAA,CAAI,OAAA,CAAQ,OAAA,IAAW,0BAAA,EAA4B,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,IAAA,EAAO,OAAA,CAAQ,KAAK,CAAA,CAAA;AACtG,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,GAAA;AACvC,EAAA,MAAM,MAAA,GAAS,CAAC,IAAA,KAAiB,IAAA,CAAK,MAAM,OAAA,CAAQ,KAAK,CAAA,CAAE,IAAA,CAAK,SAAS,CAAA;AAEzE,EAAA,eAAe,IAAA,CACb,MAAA,EACA,IAAA,EACA,MAAA,EACA,WAAW,SAAA,EACwC;AACnD,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAA,CAAQ,QAAQ,CAAA;AAC5C,IAAA,MAAM,MAAA,GAAS,SAAS,WAAA,CAAY,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA,GAAI,OAAA;AAC7D,IAAA,MAAM,WAAW,MAAM,OAAA,CAAQ,GAAG,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI;AAAA,MAClD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO,EAAE,EAAA,EAAI,KAAA,EAAM,CAAE,CAAA;AAC/D,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,IAAA,EAAK;AAAA,EACzC;AAEA,EAAA,eAAe,IAAA,CAAQ,QAAgB,IAAA,EAA2C;AAChF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAQ,QAAQ,IAAI,CAAA;AAC3C,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA;AACR,MAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,CAAA,SAAA,EAAY,MAAM,YAAY,IAAA,CAAK,WAAA,IAAe,SAAS,CAAA,CAAE,CAAC,CAAA;AACvF,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IAEN,MAAM,KAAK,OAAA,EAAS;AAClB,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,SAAS,OAAA,CAAQ,MAAA;AAAA,QACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,UAAA,EAAY,MAAA;AAAA,QACZ,oBAAA,EAAsB,EAAE,WAAA,EAAa,IAAA;AAAK,OAC5C;AACA,MAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,EAAQ;AAC3B,QAAA,IAAA,CAAK,YAAA,GAAe;AAAA,UAClB,eAAA,EAAiB;AAAA,YACf,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,GAAA,EAAK,MAAA,CAAO,GAAA,EAAI,CAAE;AAAA;AAC1E,SACF;AAAA,MACF;AAEA,MAAA,IAAI,MAAA;AACJ,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,CAAC,EAAE,MAAA,EAAQ,IAAA,EAAK,GAAI,MAAM,IAAA;AAAA,UACxB,aAAA;AAAA,UACA,IAAA;AAAA,UACA,OAAA,CAAQ;AAAA,SACV;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAClE,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,IAAI,CAAA,EAAG,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAA,EAAM;AAAA,MACxE;AAEA,MAAA,IAAI,IAAA,CAAK,IAAI,OAAO,EAAE,IAAI,IAAA,EAAM,SAAA,EAAW,IAAA,CAAK,MAAA,CAAO,UAAA,EAAW;AAElE,MAAA,MAAM,cAAc,MAAA,CAAO,IAAA,CAAK,WAAA,IAAe,CAAA,KAAA,EAAQ,MAAM,CAAA,CAAE,CAAA;AAC/D,MAAA,MAAM,IAAA,GAAO,KAAK,UAAA,IAAc,MAAA;AAChC,MAAA,IAAI,SAAS,GAAA,EAAK;AAChB,QAAA,OAAO;AAAA,UACL,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,WAAA;AAAA,UACP,SAAA,EAAW,IAAA;AAAA,UACX,IAAA,EAAM,KAAA;AAAA,UACN,iBAAA,EAAmB,KAAK,UAAA,EAAY;AAAA,SACtC;AAAA,MACF;AAEA,MAAA,MAAM,OACJ,IAAA,KAAS,GAAA,IACR,SAAS,GAAA,IAAO,oDAAA,CAAqD,KAAK,WAAW,CAAA;AACxF,MAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,aAAa,SAAA,EAAW,IAAA,IAAQ,KAAK,IAAA,EAAK;AAAA,IACvE,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,EAAE,QAAQ,cAAA,GAAiB,EAAA,EAAI,QAAO,EAAG;AAExD,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA;AAAA,QACrB,YAAA;AAAA,QACA;AAAA,UACE,GAAI,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAO;AAAA,UACzC,OAAA,EAAS,cAAA;AAAA,UACT,eAAA,EAAiB,CAAC,SAAA,EAAW,gBAAgB;AAAA,SAC/C;AAAA,QACA,MAAA;AAAA,QAAA,CACC,iBAAiB,EAAA,IAAM;AAAA,OAC1B;AACA,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA;AACR,QAAA,MAAM,IAAI,MAAM,MAAA,CAAO,CAAA,4BAAA,EAA+B,KAAK,WAAA,IAAe,SAAS,EAAE,CAAC,CAAA;AACxF,MAAA,OAAO,IAAA,CAAK,MAAA;AAAA,IACd,CAAA;AAAA,IAEA,UAAA,EAAY,OAAO,GAAA,EAAK,WAAA,KAAgB;AACtC,MAAA,MAAM,KAAK,YAAA,EAAc;AAAA,QACvB,GAAA;AAAA,QACA,YAAA,EAAc,WAAA;AAAA,QACd,eAAA,EAAiB,CAAC,SAAA,EAAW,gBAAgB;AAAA,OAC9C,CAAA;AAAA,IACH,CAAA;AAAA,IACA,eAAe,YAAY;AACzB,MAAA,MAAM,IAAA,CAAK,eAAA,EAAiB,EAAE,CAAA;AAAA,IAChC,CAAA;AAAA,IACA,KAAA,EAAO,MAAM,IAAA,CAAK,OAAA,EAAS,EAAE;AAAA,GAC/B;AACF","file":"chunk-SSHVZHSJ.js","sourcesContent":["export type TelegramButton = { text: string; url: string };\n\nexport type TelegramMessage = {\n  chatId: string;\n  /** Telegram HTML: <b>, <i>, <a href>, <code>, <pre>. Escape user text with escapeHtml(). */\n  text: string;\n  buttons?: readonly TelegramButton[] | undefined;\n  signal?: AbortSignal | undefined;\n};\n\nexport type TelegramSendResult =\n  | { ok: true; messageId: number }\n  | {\n      ok: false;\n      error: string;\n      /** Worth another attempt: rate limit, 5xx, network. */\n      retryable: boolean;\n      /** The chat can never receive again (user blocked the bot, chat deleted). Prune it. */\n      gone: boolean;\n      retryAfterSeconds?: number | undefined;\n    };\n\n/** The slice of a Bot API update the plugin reads. Everything else passes through untouched. */\nexport type TelegramUpdate = {\n  update_id: number;\n  message?: {\n    text?: string;\n    chat: { id: number | string; type: string; username?: string; title?: string };\n    from?: { id: number; username?: string; first_name?: string };\n  };\n  my_chat_member?: {\n    chat: { id: number | string; type: string; username?: string; title?: string };\n    new_chat_member: { status: string };\n  };\n};\n\nexport type TelegramProvider = {\n  name: string;\n  send(message: TelegramMessage): Promise<TelegramSendResult>;\n  /** Long-polls for updates. For development or hosts without a public URL. */\n  getUpdates(options: {\n    offset?: number | undefined;\n    timeoutSeconds?: number | undefined;\n    signal?: AbortSignal | undefined;\n  }): Promise<TelegramUpdate[]>;\n  /** Points Telegram at your webhook route. Run once per deployment URL. */\n  setWebhook(url: string, secretToken: string): Promise<void>;\n  deleteWebhook(): Promise<void>;\n  getMe(): Promise<{ id: number; username: string }>;\n};\n\nexport type TelegramBotOptions = {\n  /** From @BotFather. Never appears in errors or logs. */\n  token: string;\n  fetch?: typeof globalThis.fetch | undefined;\n  /** Default https://api.telegram.org. A local fake for tests. */\n  apiBase?: string | undefined;\n  timeoutMs?: number | undefined;\n};\n\ntype ApiResponse<T> =\n  | { ok: true; result: T }\n  | { ok: false; description?: string; error_code?: number; parameters?: { retry_after?: number } };\n\n/** Deep link that opens the bot with a start parameter. Codes are [A-Za-z0-9_-], at most 64 chars. */\nexport const telegramStartLink = (botUsername: string, code: string) =>\n  `https://t.me/${botUsername.replace(/^@/, \"\")}?start=${encodeURIComponent(code)}`;\n\n/** Bot API over fetch, so it runs on edge runtimes. Failures are classified, never thrown, on send. */\nexport function telegramBot(options: TelegramBotOptions): TelegramProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const base = `${(options.apiBase ?? \"https://api.telegram.org\").replace(/\\/$/, \"\")}/bot${options.token}`;\n  const timeoutMs = options.timeoutMs ?? 10_000;\n  const redact = (text: string) => text.split(options.token).join(\"<token>\");\n\n  async function call<T>(\n    method: string,\n    body: Record<string, unknown>,\n    signal?: AbortSignal,\n    budgetMs = timeoutMs,\n  ): Promise<{ status: number; data: ApiResponse<T> }> {\n    const timeout = AbortSignal.timeout(budgetMs);\n    const merged = signal ? AbortSignal.any([signal, timeout]) : timeout;\n    const response = await doFetch(`${base}/${method}`, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(body),\n      signal: merged,\n    });\n    const data = (await response.json().catch(() => ({ ok: false }))) as ApiResponse<T>;\n    return { status: response.status, data };\n  }\n\n  async function must<T>(method: string, body: Record<string, unknown>): Promise<T> {\n    const { data } = await call<T>(method, body);\n    if (!data.ok)\n      throw new Error(redact(`telegram ${method} failed: ${data.description ?? \"unknown\"}`));\n    return data.result;\n  }\n\n  return {\n    name: \"telegram\",\n\n    async send(message) {\n      const body: Record<string, unknown> = {\n        chat_id: message.chatId,\n        text: message.text,\n        parse_mode: \"HTML\",\n        link_preview_options: { is_disabled: true },\n      };\n      if (message.buttons?.length) {\n        body.reply_markup = {\n          inline_keyboard: [\n            message.buttons.map((button) => ({ text: button.text, url: button.url })),\n          ],\n        };\n      }\n\n      let status: number;\n      let data: ApiResponse<{ message_id: number }>;\n      try {\n        ({ status, data } = await call<{ message_id: number }>(\n          \"sendMessage\",\n          body,\n          message.signal,\n        ));\n      } catch (error) {\n        const text = error instanceof Error ? error.message : String(error);\n        return { ok: false, error: redact(text), retryable: true, gone: false };\n      }\n\n      if (data.ok) return { ok: true, messageId: data.result.message_id };\n\n      const description = redact(data.description ?? `HTTP ${status}`);\n      const code = data.error_code ?? status;\n      if (code === 429) {\n        return {\n          ok: false,\n          error: description,\n          retryable: true,\n          gone: false,\n          retryAfterSeconds: data.parameters?.retry_after,\n        };\n      }\n      // 403: the user blocked the bot or was deactivated. 400 \"chat not found\": deleted or never existed.\n      const gone =\n        code === 403 ||\n        (code === 400 && /chat not found|user is deactivated|bot was kicked/i.test(description));\n      return { ok: false, error: description, retryable: code >= 500, gone };\n    },\n\n    async getUpdates({ offset, timeoutSeconds = 25, signal }) {\n      // Telegram holds the request open for `timeout` seconds; the budget must outlive it.\n      const { data } = await call<TelegramUpdate[]>(\n        \"getUpdates\",\n        {\n          ...(offset === undefined ? {} : { offset }),\n          timeout: timeoutSeconds,\n          allowed_updates: [\"message\", \"my_chat_member\"],\n        },\n        signal,\n        (timeoutSeconds + 10) * 1000,\n      );\n      if (!data.ok)\n        throw new Error(redact(`telegram getUpdates failed: ${data.description ?? \"unknown\"}`));\n      return data.result;\n    },\n\n    setWebhook: async (url, secretToken) => {\n      await must(\"setWebhook\", {\n        url,\n        secret_token: secretToken,\n        allowed_updates: [\"message\", \"my_chat_member\"],\n      });\n    },\n    deleteWebhook: async () => {\n      await must(\"deleteWebhook\", {});\n    },\n    getMe: () => must(\"getMe\", {}),\n  };\n}\n"]}

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.cjs';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.cjs';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BJ8Iejvs.cjs';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BJ8Iejvs.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CHd2ZiGC.cjs';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CHd2ZiGC.cjs';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-Wwp1nvo0.cjs';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-Wwp1nvo0.cjs';
 import { E as EmailProvider } from './provider-CA45WVqt.cjs';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.cjs';
 import { S as Signals } from './signals-kPmOlKDX.cjs';

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.js';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.js';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BJ8Iejvs.js';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BJ8Iejvs.js';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-Cg9usuUi.js';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-Cg9usuUi.js';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CSLKKgXT.js';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CSLKKgXT.js';
 import { E as EmailProvider } from './provider-CA45WVqt.js';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.js';
 import { S as Signals } from './signals-kPmOlKDX.js';

package/dist/index.js

@@ -1,5 +1,6 @@
 import { createRunner } from './chunk-JKTMUMQK.js';
 export { createRunner, redactErrorMessage } from './chunk-JKTMUMQK.js';
+export { escapeHtml } from './chunk-R3BE67L7.js';
 export { defineClientPlugin, definePlugin } from './chunk-E4IZ2CQC.js';
 import { createHandler, createScopedSigner } from './chunk-JOVIZXO6.js';
 export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, expiresIn, readJsonBody, signToken, verifyToken } from './chunk-JOVIZXO6.js';
@@ -18,16 +19,6 @@ function defineNotification(definition) {
   return definition;
 }
 
-// src/core/html.ts
-var ESCAPES = {
-  "&": "&",
-  "<": "&lt;",
-  ">": "&gt;",
-  '"': "&quot;",
-  "'": "&#39;"
-};
-var escapeHtml = (value) => String(value ?? "").replace(/[&<>"']/g, (char) => ESCAPES[char] ?? char);
-
 // src/core/rate-limit.ts
 var clientAddress = (request) => {
   const headers = request.headers;
@@ -535,6 +526,6 @@ function easyPing(config) {
   };
 }
 
-export { INBOX_VERSION_HEADER, MIN_SECRET_LENGTH, createRateLimiter, defineNotification, easyPing, escapeHtml };
+export { INBOX_VERSION_HEADER, MIN_SECRET_LENGTH, createRateLimiter, defineNotification, easyPing };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map