elanous 0.2.0 → 0.2.4

package/src/browser-pane/mount.ts

@@ -1,9 +1,4 @@
-import { dirname } from 'path';
-
 import type { DisplayCoordinator } from '../display/coordinator.js';
-import { PaneContent, type PaneBroadcast, type PaneUnsubscribe } from '../virtual-windows/pane-content.js';
-import { mintPaneId } from '../virtual-windows/addressing.js';
-import type { Action, DisplayMouseEvent, KeyEvent } from '../display/types.js';
 import {
   showLivePaneMultiModal,
   showPaneMultiModal,
@@ -20,32 +15,13 @@ import {
 import type { ThemeTokens } from '../theme/tokens.js';
 import type { WidgetHost } from '../widgets/host.js';
 import type { BrowserPaneRegistry } from './registry.js';
-import {
-  focusedBrowserEntry,
-  refreshBrowserPane,
-  toggleBrowserSelection,
-  type FsEntry,
-  type BrowserPaneModel,
-} from './model.js';
-import { C, pad, truncate, visibleWidth } from '../tui.js';
-import { dirColor, fileColor, fileIcon, sizeStr } from '../panes/file-icons.js';
+import type { FsEntry } from './model.js';
 import {
   navigateBrowserPreviewModalDirectory,
   projectBrowserPreviewModalBrowserState,
   syncBrowserPreviewModalCursorFromWidgetState,
 } from '../dashboard/modals/browser-preview-modal-seams.js';
 
-export interface BrowserPaneContentSpec {
-  kind: 'vw-browser';
-  browserId: string;
-  title?: string;
-}
-
-export interface BrowserPaneMountDeps {
-  browserPaneRegistry: BrowserPaneRegistry;
-  refreshRemoteBrowserPane?: (state: BrowserPaneModel) => Promise<void>;
-}
-
 export interface OpenBrowserPaneModalDeps {
   browserWidgetInstanceId: string;
   liveMode: boolean;
@@ -63,110 +39,6 @@ export interface OpenBrowserPaneModalDeps {
   onCancel?(): void;
 }
 
-function createObserver(): {
-  emit: () => void;
-  on: (event: 'update' | 'output' | 'exit', cb: () => void) => PaneUnsubscribe;
-} {
-  const subs = new Map<'update' | 'output' | 'exit', Set<() => void>>();
-  return {
-    emit() {
-      for (const cb of subs.get('update') ?? []) {
-        try { cb(); } catch { /* ignore */ }
-      }
-    },
-    on(event, cb) {
-      const set = subs.get(event) ?? new Set<() => void>();
-      set.add(cb);
-      subs.set(event, set);
-      return () => { set.delete(cb); };
-    },
-  };
-}
-
-function clampBrowserOffset(state: BrowserPaneModel, rows: number): void {
-  const bodyRows = Math.max(1, rows);
-  if (state.cursor < state.offset) {
-    state.offset = state.cursor;
-    return;
-  }
-  if (state.cursor >= state.offset + bodyRows) {
-    state.offset = Math.max(0, state.cursor - bodyRows + 1);
-  }
-}
-
-function formatBrowserLine(
-  state: BrowserPaneModel,
-  entry: BrowserPaneModel['entries'][number],
-  focused: boolean,
-  width: number,
-): string {
-  const cursor = focused ? C.bold('›') : ' ';
-  const selected = !entry.isDir && state.selected.has(entry.absPath) ? C.success('●') : ' ';
-  if (entry.name === '..') {
-    const raw = `${cursor} ${selected} ${C.muted('↩')} ${C.muted('..')}`;
-    return visibleWidth(raw) > width ? truncate(raw, width) : pad(raw, width);
-  }
-  if (entry.isDir) {
-    const raw = `${cursor} ${selected} ${C.accent('')} ${dirColor(entry.name)}`;
-    return visibleWidth(raw) > width ? truncate(raw, width) : pad(raw, width);
-  }
-  const icon = fileColor(entry.name)(fileIcon(entry.name));
-  const name = fileColor(entry.name)(entry.name);
-  const size = C.muted(sizeStr(entry.size));
-  const raw = `${cursor} ${selected} ${icon} ${name} ${size}`;
-  return visibleWidth(raw) > width ? truncate(raw, width) : pad(raw, width);
-}
-
-async function refreshBrowserContentState(
-  state: BrowserPaneModel,
-  deps: BrowserPaneMountDeps,
-): Promise<void> {
-  if (!state.remote) {
-    refreshBrowserPane(state);
-    return;
-  }
-  await deps.refreshRemoteBrowserPane?.(state);
-}
-
-async function navigateBrowserContent(
-  state: BrowserPaneModel,
-  deps: BrowserPaneMountDeps,
-  direction: 'parent' | 'into',
-): Promise<boolean> {
-  if (!state.remote) {
-    if (direction === 'parent') {
-      const parent = dirname(state.cwd);
-      if (parent === state.cwd) return false;
-      state.cwd = parent;
-    } else {
-      const entry = focusedBrowserEntry(state);
-      if (!entry || !entry.isDir || entry.name === '..') return false;
-      state.cwd = entry.absPath;
-    }
-    state.cursor = 0;
-    state.offset = 0;
-    state.selected.clear();
-    refreshBrowserPane(state);
-    return true;
-  }
-
-  const nextCwd = direction === 'parent'
-    ? dirname(state.remote.cwd)
-    : (() => {
-        const entry = focusedBrowserEntry(state);
-        if (!entry || !entry.isDir || entry.name === '..') return null;
-        return entry.absPath;
-      })();
-  if (!nextCwd || nextCwd === state.remote.cwd) return false;
-  state.remote = { host: state.remote.host, cwd: nextCwd };
-  state.cwd = nextCwd;
-  state.cursor = 0;
-  state.offset = 0;
-  state.selected.clear();
-  await refreshBrowserContentState(state, deps);
-  return true;
-}
-
 export function createBrowserPaneModalChrome(
   theme: ThemeTokens,
   liveMode: boolean,
@@ -368,120 +240,3 @@ export function openBrowserPaneModal(
   handle = showPaneMultiModal(params);
   return handle;
 }
-
-export function createBrowserPaneContent(
-  spec: BrowserPaneContentSpec,
-  deps: BrowserPaneMountDeps,
-): PaneContent {
-  const state = deps.browserPaneRegistry.get(spec.browserId);
-  if (!state) {
-    throw new Error(`createBrowserPaneContent: unknown browser id "${spec.browserId}"`);
-  }
-  const obs = createObserver();
-  let lastRows = 12;
-
-  return {
-    id: mintPaneId(),
-    kind: spec.kind,
-    title: spec.title ?? 'browser',
-    focusPolicy: 'interactive',
-    start() {},
-    stop() {},
-    render(ctx) {
-      lastRows = Math.max(1, ctx.rows);
-      clampBrowserOffset(state, ctx.rows);
-      const bodyRows = Math.max(1, ctx.rows);
-      const lines: string[] = [];
-      for (let i = 0; i < bodyRows; i++) {
-        const entry = state.entries[state.offset + i];
-        if (!entry) {
-          lines.push(' '.repeat(Math.max(0, ctx.cols)));
-          continue;
-        }
-        lines.push(formatBrowserLine(state, entry, state.offset + i === state.cursor, ctx.cols));
-      }
-      return lines.join('\n');
-    },
-    onKey(ev) {
-      const rows = lastRows;
-      if (ev.name === 'up' || ev.name === 'k') {
-        state.cursor = Math.max(0, state.cursor - 1);
-        clampBrowserOffset(state, rows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'down' || ev.name === 'j') {
-        state.cursor = Math.min(Math.max(0, state.entries.length - 1), state.cursor + 1);
-        clampBrowserOffset(state, rows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'pageup') {
-        state.cursor = Math.max(0, state.cursor - rows);
-        clampBrowserOffset(state, rows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'pagedown') {
-        state.cursor = Math.min(Math.max(0, state.entries.length - 1), state.cursor + rows);
-        clampBrowserOffset(state, rows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'home' || ev.name === 'g') {
-        state.cursor = 0;
-        state.offset = 0;
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'end' || (ev.name === 'G' && ev.shift)) {
-        state.cursor = Math.max(0, state.entries.length - 1);
-        clampBrowserOffset(state, rows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === ' ') {
-        toggleBrowserSelection(state);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'left' || ev.name === 'h') {
-        void navigateBrowserContent(state, deps, 'parent').then(() => obs.emit());
-        return { type: 'refresh' };
-      }
-      if (ev.name === 'right' || ev.name === 'l' || ev.name === 'enter') {
-        const entry = focusedBrowserEntry(state);
-        if (!entry?.isDir) return { type: 'none' };
-        void navigateBrowserContent(state, deps, 'into').then(() => obs.emit());
-        return { type: 'refresh' };
-      }
-      return { type: 'none' };
-    },
-    onMouse(ev: DisplayMouseEvent): Action {
-      const delta = Math.max(1, Math.floor(lastRows / 3));
-      if (ev.type === 'scroll-up') {
-        state.cursor = Math.max(0, state.cursor - delta);
-        clampBrowserOffset(state, lastRows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      if (ev.type === 'scroll-down') {
-        state.cursor = Math.min(Math.max(0, state.entries.length - 1), state.cursor + delta);
-        clampBrowserOffset(state, lastRows);
-        obs.emit();
-        return { type: 'refresh' };
-      }
-      return { type: 'none' };
-    },
-    write(_bytes: string) {},
-    acceptBroadcast(_input: PaneBroadcast) {},
-    capture() {
-      return state.entries.map((entry, index) =>
-        formatBrowserLine(state, entry, index === state.cursor, 120),
-      ).join('\n');
-    },
-    get isAlive() { return true; },
-    on: obs.on,
-    dispose() {},
-  };
-}

package/src/budget/codex-reset-credit-state.ts

@@ -124,6 +124,9 @@ interface QuotaSignalState {
   observedAt?: string;
   /** ⭐ 이 관측이 «어느 홈»을 잰 것인가. 파일 이름은 해시라 사람이 못 읽는다. */
   measuredHome?: string;
+  /** 선불 크레딧 잔액·보유(대표 09-28 크레딧 정책 — 한도가 찬 뒤 «어느 계정 크레딧으로» 갈지 고르는 재료). */
+  creditsBalance?: number;
+  hasCredits?: boolean;
 }
 
 /**
@@ -212,6 +215,7 @@ export function writeQuotaSignal(
   usedPercentOrHome?: number | string,
   homePath?: string,
   storage?: QuotaSignalStorageOpts,
+  credits?: { readonly balance?: number; readonly hasCredits?: boolean },
 ): void {
   try {
     const usedPercent = typeof usedPercentOrHome === 'number' && Number.isFinite(usedPercentOrHome)
@@ -225,6 +229,8 @@ export function writeQuotaSignal(
       ...(usedPercent === undefined ? {} : { usedPercent }),
       observedAt: new Date().toISOString(),
       measuredHome: normalizeHome(home?.trim() || process.env.CODEX_HOME?.trim() || join(homedir(), '.codex')),
+      ...(typeof credits?.balance === 'number' && Number.isFinite(credits.balance) ? { creditsBalance: credits.balance } : {}),
+      ...(typeof credits?.hasCredits === 'boolean' ? { hasCredits: credits.hasCredits } : {}),
     };
     writeFileSync(path, `${JSON.stringify(next, null, 2)}\n`, 'utf8');
   } catch { /* fail-soft */ }
@@ -284,6 +290,15 @@ export function readQuotaSignalObservedAt(nowMs: number = Date.now(), homePath?:
   return Number.isFinite(parsed) ? parsed : undefined;
 }
 
+/** 최근의 크레딧 잔액·보유. 옛 파일·낡은 신호·다른 홈은 모두 모른다(빈 객체). */
+export function readQuotaSignalCredits(nowMs: number = Date.now(), homePath?: string, storage?: QuotaSignalStorageOpts): { balance?: number; hasCredits?: boolean } {
+  const s = readFreshQuotaSignal(nowMs, homePath, storage);
+  return {
+    ...(typeof s?.creditsBalance === 'number' && Number.isFinite(s.creditsBalance) ? { balance: s.creditsBalance } : {}),
+    ...(typeof s?.hasCredits === 'boolean' ? { hasCredits: s.hasCredits } : {}),
+  };
+}
+
 /** 최근의 브랜드 총량 사용률. 옛 파일·낡은 신호·다른 홈은 모두 모른다. */
 export function readQuotaSignalUsedPercent(nowMs: number = Date.now(), homePath?: string, storage?: QuotaSignalStorageOpts): number | undefined {
   const usedPercent = readFreshQuotaSignal(nowMs, homePath, storage)?.usedPercent;

package/src/budget/fetchers/codex.ts

@@ -124,7 +124,8 @@ export function createCodexFetcher(opts: CodexFetcherOpts = {}): ProviderFetcher
       const usedPercent = snapshot.windows
         .filter((window) => window.model === undefined)
         .reduce<number | undefined>((max, window) => max === undefined || window.used > max ? window.used : max, undefined);
-      writeQuotaSignal(snapshot.rateLimitReached, usedPercent, opts.codexHome, opts.quotaSignalStorage);
+      writeQuotaSignal(snapshot.rateLimitReached, usedPercent, opts.codexHome, opts.quotaSignalStorage,
+        snapshot.credits ? { balance: snapshot.credits.balance, hasCredits: snapshot.credits.hasCredits } : undefined);
       return snapshot;
     },
   };

package/src/budget/run-usage-rollup.ts

@@ -3,6 +3,8 @@ import type { BillingRoute } from './llm-cost.js';
 export interface RunUsageInput {
   runId?: string | null;
   hostId?: string | null;
+  site?: string | null;
+  role?: string | null;
   model?: string | null;
   billingProvider?: string | null;
   billing?: BillingRoute | null;
@@ -16,6 +18,8 @@ export interface RunUsageInput {
 
 export interface RunUsageRow {
   runId: string;
+  role?: string;
+  site?: string;
   model: string;
   billingProvider: string;
   billing: string;
@@ -33,18 +37,21 @@ export interface RunUsageRow {
 }
 
 /** Aggregate llm-usage observations without turning unavailable prices into a known zero. */
-export function rollupRunUsage(rows: readonly RunUsageInput[]): RunUsageRow[] {
+export function rollupRunUsage(...[rows, opts]: [rows: readonly RunUsageInput[], opts?: { by?: 'run' | 'role' }]): RunUsageRow[] {
   const groups = new Map<string, RunUsageRow>();
+  const byRole = opts?.by === 'role';
   for (const data of rows) {
-    const runId = data.runId ?? '(none)';
+    const runId = byRole ? '(all)' : data.runId ?? '(none)';
+    const role = data.role ?? '(none)';
+    const site = data.site ?? '(none)';
     const model = data.model ?? '(none)';
     const billingProvider = data.billingProvider ?? '(none)';
     const billing = data.billing ?? '(none)';
-    const key = JSON.stringify([runId, model, billingProvider, billing]);
+    const key = JSON.stringify(byRole ? [role, site, model, billingProvider, billing] : [runId, model, billingProvider, billing]);
     let row = groups.get(key);
     if (!row) {
       row = {
-        runId, model, billingProvider, billing, hostIds: [], calls: 0,
+        runId, ...(byRole ? { role, site } : {}), model, billingProvider, billing, hostIds: [], calls: 0,
         inputTokens: 0, outputTokens: 0, cacheReadInputTokens: 0,
         cacheCreationInputTokens: 0, reasoningOutputTokens: 0,
         usdKnown: 0, unknownCostCalls: 0, includedCalls: 0, apiEquivalentUsd: 0,

package/src/budget/unified-usage.ts

@@ -16,6 +16,7 @@ import { resolveGrokCredential } from '../grok/credential.js';
 import { getOpenRouterApiKey } from '../config.js';
 import { listCodexAccountsInStore } from '../oauth/codex-account-store.js';
 import { loadTokens } from '../oauth/store.js';
+import { envLiteral } from '../platform/env-literal.js';
 import { describeResetCreditExpiry } from './codex-reset-credit-state.js';
 import { listCodexResetCredits, type CodexResetCreditsResult } from './codex-reset-credits.js';
 import type {
@@ -173,7 +174,7 @@ async function collectResetCreditExpiry(
   warningWindowMs: number | undefined,
   nowMs: number,
 ): Promise<ResetCreditExpiryAxis> {
-  const listed = await listResetCredits(home ? { env: { CODEX_HOME: home } } : {});
+  const listed = await listResetCredits(home ? { env: envLiteral({ CODEX_HOME: home }) } : {});
   if (!listed.ok) return { status: 'unavailable', detail: listed.kind };
   return describeResetCreditExpiry(listed.value.credits, warningWindowMs, nowMs);
 }

package/src/capture/tui-self-report.ts

@@ -97,6 +97,13 @@ export function createTuiFrameObserver(
 export interface TuiControlTargetDeps {
   injectKey?: (key: Key) => boolean;
   splitKeys?: (input: string) => Key[];
+  /** The foreground terminal's real size; `undefined` when it cannot be known (stdout is not a TTY). */
+  dims?: () => { readonly cols: number; readonly rows: number } | undefined;
+}
+
+function stdoutDims(): { cols: number; rows: number } | undefined {
+  const out = process.stdout;
+  return out.isTTY && out.columns > 0 && out.rows > 0 ? { cols: out.columns, rows: out.rows } : undefined;
 }
 
 export interface TuiControlTarget extends PtyControlTarget {
@@ -108,11 +115,14 @@ export interface TuiControlTarget extends PtyControlTarget {
 export function createTuiControlTarget(surfaceId: string, deps: TuiControlTargetDeps = {}): TuiControlTarget {
   const inject = deps.injectKey ?? injectKey;
   const parse = deps.splitKeys ?? splitKeys;
+  const dims = deps.dims ?? stdoutDims;
   let alive = true;
   let accessMode: PtyAccessMode = 'write';
   let transitionPolicy: PtyTransitionPolicy = 'open';
   return {
     id: surfaceId,
+    get cols() { return dims()?.cols; },
+    get rows() { return dims()?.rows; },
     get accessMode() { return accessMode; },
     set accessMode(mode: PtyAccessMode) { accessMode = mode; },
     get transitionPolicy() { return transitionPolicy; },

package/src/channel-bot-token.ts

@@ -0,0 +1,126 @@
+import { existsSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { debug } from './debug/log.js';
+import { getSecret, setSecretAsync } from './nexus/config/secrets/index.js';
+import { userConfigPath } from './nexus/config/paths.js';
+import { isSecretRef, makeSecretRef, secretIdFromRef } from './nexus/config/types.js';
+import { acquireLockAsync } from './storage/file-lock.js';
+import type { UserConfig } from './user-config.js';
+
+export type ChannelBotPlatform = 'telegram' | 'discord';
+export type ChannelBotTokenSource = 'tokenRef' | 'env' | 'plaintext';
+
+/** The tab reference is read from the same persistent config as the NEXUS switch. */
+export function resolveChannelBotToken(
+  platform: ChannelBotPlatform,
+  cfg: Pick<UserConfig, 'telegram' | 'discord'> & { tabs?: Record<string, { tokenRef?: unknown }> },
+): { token: string; source: ChannelBotTokenSource } | undefined {
+  const ref = cfg.tabs?.[`${platform}:1`]?.tokenRef;
+  if (isSecretRef(ref)) {
+    const id = secretIdFromRef(ref);
+    const token = id ? getSecret(id) : undefined;
+    if (token) return { token, source: 'tokenRef' };
+  }
+  const envName = platform === 'telegram' ? 'ELANOUS_TELEGRAM_BOT_TOKEN' : 'ELANOUS_DISCORD_BOT_TOKEN';
+  const envToken = process.env[envName];
+  if (envToken) return { token: envToken, source: 'env' };
+  const token = cfg[platform]?.botToken;
+  if (token) {
+    debug.log('channel-bot.token', 'plaintext-fallback', { platform });
+    return { token, source: 'plaintext' };
+  }
+  return undefined;
+}
+
+/** Publish the secret before its reference, under the config lock. Other config keys survive unchanged. */
+type ChannelBotTokenWrite = {
+  platform: ChannelBotPlatform; token: string; allowedUsers?: string[];
+};
+
+export function storeChannelBotToken(platform: ChannelBotPlatform, token: string, allowedUsers?: string[]): Promise<void>;
+/** Migration selects candidates and backs up the exact config under the same lock as the write. */
+export function storeChannelBotToken(entries: (cfg: Record<string, unknown>) => ReadonlyArray<ChannelBotTokenWrite>, requireSameSecret: boolean): Promise<void>;
+export async function storeChannelBotToken(
+  platformOrEntries: ChannelBotPlatform | ((cfg: Record<string, unknown>) => ReadonlyArray<ChannelBotTokenWrite>),
+  tokenOrRequireSameSecret: string | boolean,
+  allowedUsers?: string[],
+): Promise<void> {
+  const requireSameSecret = typeof tokenOrRequireSameSecret === 'boolean' ? tokenOrRequireSameSecret : false;
+  const path = userConfigPath();
+  const lock = await acquireLockAsync(`${path}.lock`);
+  try {
+    const cfg = existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) as Record<string, unknown> : {};
+    const entries: ReadonlyArray<ChannelBotTokenWrite> = typeof platformOrEntries === 'string'
+      ? [{ platform: platformOrEntries, token: tokenOrRequireSameSecret as string, allowedUsers }]
+      : platformOrEntries(cfg);
+    if (entries.length === 0) return;
+    if (entries.some(({ platform, allowedUsers }) => platform === 'telegram' && allowedUsers !== undefined
+      && (!Array.isArray(allowedUsers) || !allowedUsers.every(id => typeof id === 'string'
+        && /^\d+$/.test(id) && Number.isSafeInteger(Number(id)) && Number(id) > 0)))) {
+      throw new Error('invalid-allowed-users');
+    }
+    const tabs = cfg.tabs && typeof cfg.tabs === 'object' && !Array.isArray(cfg.tabs)
+      ? cfg.tabs as Record<string, unknown> : {};
+    const updates = entries.map(({ platform, token, allowedUsers }) => {
+      const section = cfg[platform] && typeof cfg[platform] === 'object' && !Array.isArray(cfg[platform])
+        ? cfg[platform] as Record<string, unknown> : {};
+      const tabKey = `${platform}:1`;
+      const tab = tabs[tabKey] && typeof tabs[tabKey] === 'object' && !Array.isArray(tabs[tabKey])
+        ? tabs[tabKey] as Record<string, unknown> : {};
+      // 기존 참조가 «같은 토큰»을 이미 가리키면 그 참조를 재사용한다(#20744 reuse-ref) — 평문만 지운다.
+      // 다른 값을 가리키면 그 비밀은 남(다른 서비스와 공유 가능)이라 덮지 않고 표준 id 로 간다.
+      const refId = isSecretRef(tab.tokenRef) ? secretIdFromRef(tab.tokenRef as string) : null;
+      const id = refId && token && getSecret(refId) === token ? refId : `${platform}_1__tokenRef`;
+      return { platform, token, allowedUsers, section, tabKey, tab, id,
+        existing: token ? getSecret(id) : undefined };
+    });
+    if (requireSameSecret && updates.some(update => update.token && update.existing !== undefined
+      && update.existing !== update.token)) throw new Error('secret conflict');
+    for (const update of updates) {
+      const { platform, token, allowedUsers, section, tabKey, tab, id, existing } = update;
+      if (token) {
+        if (existing !== token) await setSecretAsync(id, token);
+        tab.tokenRef = makeSecretRef(id);
+        tabs[tabKey] = tab;
+        cfg.tabs = tabs;
+      }
+      // 평문은 «새 토큰을 저장할 때»와 «빈 평문»일 때만 지운다 — 허용 사용자만 고치는 저장은 토큰 칸을 안 건드린다.
+      if (token || section.botToken === '') delete section.botToken;
+      if (allowedUsers !== undefined) section.allowedUsers = platform === 'telegram'
+        ? allowedUsers.map(Number) : allowedUsers;
+      cfg[platform] = section;
+    }
+    if (!lock.stillHeld()) throw new Error('config lock lost');
+    const tmp = `${path}.${randomUUID()}.tmp`;
+    try {
+      writeFileSync(tmp, JSON.stringify(cfg, null, 2), { mode: 0o600, flag: 'wx' });
+      renameSync(tmp, path);
+    } finally {
+      if (existsSync(tmp)) unlinkSync(tmp);
+    }
+  } finally {
+    lock.release();
+  }
+}
+
+/** Fetch errors may contain the Telegram token-bearing URL; never propagate them. */
+export async function probeChannelBotToken(
+  platform: ChannelBotPlatform,
+  token: string,
+  fetchImpl: typeof fetch = fetch,
+): Promise<{ ok: boolean; botName?: string }> {
+  try {
+    const response = await fetchImpl(platform === 'telegram'
+      ? `https://api.telegram.org/bot${token}/getMe` : 'https://discord.com/api/v10/users/@me',
+    platform === 'discord' ? { headers: { Authorization: `Bot ${token}` } } : undefined);
+    if (!response.ok) return { ok: false };
+    const body: unknown = await response.json();
+    if (!body || typeof body !== 'object') return { ok: false };
+    const data = body as { ok?: boolean; result?: { username?: unknown }; username?: unknown };
+    const name = platform === 'telegram' ? data.result?.username : data.username;
+    if (platform === 'telegram' && data.ok !== true) return { ok: false };
+    return typeof name === 'string' && name.trim() ? { ok: true, botName: name } : { ok: false };
+  } catch {
+    return { ok: false };
+  }
+}