openclaw-telegram-manager 1.0.0

package/dist/lib/include-generator.d.ts

@@ -0,0 +1,35 @@
+import type { Registry } from './types.js';
+/**
+ * Build the per-topic systemPrompt using absolute paths resolved at generation time.
+ */
+export declare function getSystemPromptTemplate(slug: string, absoluteWorkspacePath: string): string;
+/**
+ * Compute a SHA256 hash of the registry topics for drift detection.
+ */
+export declare function computeRegistryHash(topics: Registry['topics']): string;
+/**
+ * Build the JavaScript object for the generated include file.
+ * Groups topics by groupId, with each topic's config under its threadId.
+ */
+export declare function buildIncludeObject(registry: Registry, workspaceDir: string): Record<string, unknown>;
+/**
+ * Generate the JSON5 include file from the registry.
+ *
+ * Steps:
+ * 1. Build JS object from registry entries
+ * 2. Serialize via JSON5.stringify (never string interpolation)
+ * 3. Parse back to verify round-trip integrity
+ * 4. Atomic write with .bak
+ * 5. Prepend registry-hash comment
+ */
+export declare function generateInclude(workspaceDir: string, registry: Registry, configDir: string): void;
+/**
+ * Extract the registry-hash from an existing include file's content.
+ * Returns the hash string or null if not found.
+ */
+export declare function extractRegistryHash(includeContent: string): string | null;
+/**
+ * Get the path to the generated include file.
+ */
+export declare function includePath(configDir: string): string;
+//# sourceMappingURL=include-generator.d.ts.map

package/dist/lib/include-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"include-generator.d.ts","sourceRoot":"","sources":["../../src/lib/include-generator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAyB,MAAM,YAAY,CAAC;AASlE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAqB3F;AAID;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,CAGtE;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAoBD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,MAAM,GAChB,IAAI,CAwCN;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGzE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/lib/include-generator.js

@@ -0,0 +1,140 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import JSON5 from 'json5';
+// ── Constants ──────────────────────────────────────────────────────────
+const INCLUDE_FILENAME = 'telegram-manager.generated.groups.json5';
+const FILE_MODE = 0o600;
+// ── System prompt template ─────────────────────────────────────────────
+/**
+ * Build the per-topic systemPrompt using absolute paths resolved at generation time.
+ */
+export function getSystemPromptTemplate(slug, absoluteWorkspacePath) {
+    return `You are the assistant for the Telegram topic: ${slug}.
+
+Determinism rules:
+- Source of truth is the project capsule at: ${absoluteWorkspacePath}/projects/${slug}/
+- After /reset, /new, or context compaction: ALWAYS re-read STATUS.md,
+  then TODO.md, then COMMANDS.md before continuing work. Do not rely on
+  summarized memory for paths, commands, or task state.
+- Before context compaction or when the conversation is long: proactively
+  flush current progress to STATUS.md (update "Last done (UTC)" and
+  "Next 3 actions") so compaction cannot erase critical state.
+  Use the standard file write tool directly — do not route through /topic.
+- Keep STATUS.md accurate: always maintain "Last done (UTC)" and "Next 3 actions".
+- When new commands appear, add them to COMMANDS.md (don't leave them only in chat).
+- When new links/paths/services appear, add them to LINKS.md.
+- If automation/cron is involved, record job IDs + schedules in CRON.md.
+- Task IDs (e.g., [T-1]) must stay consistent between STATUS.md and TODO.md.
+
+Separation:
+- Do not mix in other topics' work unless explicitly requested.
+- Ask one clarifying question if the next action is ambiguous.`;
+}
+// ── Registry hash ──────────────────────────────────────────────────────
+/**
+ * Compute a SHA256 hash of the registry topics for drift detection.
+ */
+export function computeRegistryHash(topics) {
+    const content = JSON.stringify(topics);
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+// ── Build include object ───────────────────────────────────────────────
+/**
+ * Build the JavaScript object for the generated include file.
+ * Groups topics by groupId, with each topic's config under its threadId.
+ */
+export function buildIncludeObject(registry, workspaceDir) {
+    const absoluteWorkspacePath = path.resolve(workspaceDir);
+    const groups = {};
+    for (const entry of Object.values(registry.topics)) {
+        const { groupId, threadId, slug, type, status } = entry;
+        if (!groups[groupId]) {
+            groups[groupId] = { topics: {} };
+        }
+        const isEnabled = status !== 'archived';
+        const skills = getSkillsForType(type);
+        const systemPrompt = getSystemPromptTemplate(slug, absoluteWorkspacePath);
+        groups[groupId].topics[threadId] = {
+            enabled: isEnabled,
+            skills,
+            systemPrompt,
+        };
+    }
+    return groups;
+}
+/**
+ * Get the default skills list for a topic type.
+ */
+function getSkillsForType(type) {
+    switch (type) {
+        case 'coding':
+            return ['coding-agent'];
+        case 'research':
+            return ['research-agent'];
+        case 'marketing':
+            return ['marketing-agent'];
+        default:
+            return [];
+    }
+}
+// ── Generate include file ──────────────────────────────────────────────
+/**
+ * Generate the JSON5 include file from the registry.
+ *
+ * Steps:
+ * 1. Build JS object from registry entries
+ * 2. Serialize via JSON5.stringify (never string interpolation)
+ * 3. Parse back to verify round-trip integrity
+ * 4. Atomic write with .bak
+ * 5. Prepend registry-hash comment
+ */
+export function generateInclude(workspaceDir, registry, configDir) {
+    const includeObj = buildIncludeObject(registry, workspaceDir);
+    const hash = computeRegistryHash(registry.topics);
+    // Serialize via JSON5.stringify
+    const json5Content = JSON5.stringify(includeObj, null, 2);
+    // Round-trip validation: parse back to verify integrity
+    try {
+        JSON5.parse(json5Content);
+    }
+    catch (err) {
+        throw new Error(`Include generation failed: round-trip validation error. ${err instanceof Error ? err.message : String(err)}`);
+    }
+    // Build final content with header comment
+    const header = [
+        '// This file is generated by telegram-manager. Do not hand-edit.',
+        `// Rebuild from: ${path.resolve(workspaceDir)}/projects/topics.json`,
+        `// registry-hash: sha256:${hash}`,
+    ].join('\n');
+    const finalContent = header + '\n' + json5Content + '\n';
+    // Atomic write
+    const includePath = path.join(configDir, INCLUDE_FILENAME);
+    const tmpPath = includePath + '.tmp';
+    const bakPath = includePath + '.bak';
+    // Backup existing file if it exists
+    if (fs.existsSync(includePath)) {
+        fs.copyFileSync(includePath, bakPath);
+        fs.chmodSync(bakPath, FILE_MODE);
+    }
+    // Write to tmp then rename (atomic on POSIX)
+    fs.writeFileSync(tmpPath, finalContent, { mode: FILE_MODE });
+    fs.renameSync(tmpPath, includePath);
+    fs.chmodSync(includePath, FILE_MODE);
+}
+// ── Extract registry hash from include file ────────────────────────────
+/**
+ * Extract the registry-hash from an existing include file's content.
+ * Returns the hash string or null if not found.
+ */
+export function extractRegistryHash(includeContent) {
+    const match = includeContent.match(/^\/\/ registry-hash: sha256:([a-f0-9]+)$/m);
+    return match?.[1] ?? null;
+}
+/**
+ * Get the path to the generated include file.
+ */
+export function includePath(configDir) {
+    return path.join(configDir, INCLUDE_FILENAME);
+}
+//# sourceMappingURL=include-generator.js.map

package/dist/lib/include-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"include-generator.js","sourceRoot":"","sources":["../../src/lib/include-generator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,0EAA0E;AAE1E,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,0EAA0E;AAE1E;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,qBAA6B;IACjF,OAAO,iDAAiD,IAAI;;;+CAGf,qBAAqB,aAAa,IAAI;;;;;;;;;;;;;;;;+DAgBtB,CAAC;AAChE,CAAC;AAED,0EAA0E;AAE1E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,0EAA0E;AAE1E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAkB,EAClB,YAAoB;IAEpB,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,MAAM,GAAwD,EAAE,CAAC;IAEvE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,UAAU,CAAC;QACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjC,OAAO,EAAE,SAAS;YAClB,MAAM;YACN,YAAY;SACb,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAe;IACvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1B,KAAK,UAAU;YACb,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC5B,KAAK,WAAW;YACd,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7B;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,QAAkB,EAClB,SAAiB;IAEjB,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE1D,wDAAwD;IACxD,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,2DAA2D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9G,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,MAAM,GAAG;QACb,kEAAkE;QAClE,oBAAoB,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,uBAAuB;QACrE,4BAA4B,IAAI,EAAE;KACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,YAAY,GAAG,MAAM,GAAG,IAAI,GAAG,YAAY,GAAG,IAAI,CAAC;IAEzD,eAAe;IACf,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,WAAW,GAAG,MAAM,CAAC;IACrC,MAAM,OAAO,GAAG,WAAW,GAAG,MAAM,CAAC;IAErC,oCAAoC;IACpC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,6CAA6C;IAC7C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,0EAA0E;AAE1E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,cAAsB;IACxD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAChF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAChD,CAAC"}

package/dist/lib/registry.d.ts

@@ -0,0 +1,27 @@
+import type { Registry } from './types.js';
+export declare function registryPath(workspaceDir: string): string;
+/**
+ * Read and validate the registry from disk.
+ * - Migrates if version is behind current
+ * - Rejects if version is ahead of current
+ * - Quarantines invalid topic entries (logs + excludes)
+ */
+export declare function readRegistry(workspaceDir: string): Registry;
+/**
+ * Atomically write registry data to disk.
+ * Writes to a .tmp file then renames (atomic on POSIX).
+ */
+export declare function writeRegistryAtomic(filePath: string, data: Registry): void;
+/**
+ * Lock the registry, read it, apply a mutation function, and write it back.
+ * The lock prevents concurrent writes from corrupting the registry.
+ *
+ * The mutation function receives the registry data and can modify it.
+ * Return value of the mutation function is passed through as the return value.
+ */
+export declare function withRegistry<T>(workspaceDir: string, fn: (data: Registry) => T | Promise<T>): Promise<T>;
+/**
+ * Create a new empty registry with default values.
+ */
+export declare function createEmptyRegistry(callbackSecret: string): Registry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/lib/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/lib/registry.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAWvD,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD;AAoCD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,CAoD3D;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAO1E;AAID;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,YAAY,EAAE,MAAM,EACpB,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACrC,OAAO,CAAC,CAAC,CAAC,CAkCZ;AAID;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,CASpE"}

package/dist/lib/registry.js

@@ -0,0 +1,154 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import lockfile from 'proper-lockfile';
+import { Value } from '@sinclair/typebox/value';
+import { RegistrySchema, TopicEntrySchema, CURRENT_REGISTRY_VERSION, MAX_TOPICS_DEFAULT, } from './types.js';
+// ── Constants ──────────────────────────────────────────────────────────
+const REGISTRY_FILENAME = 'topics.json';
+const FILE_MODE = 0o600;
+const LOCK_TIMEOUT = 5000;
+const LOCK_RETRY_INTERVAL = 100;
+// ── Path helpers ───────────────────────────────────────────────────────
+export function registryPath(workspaceDir) {
+    return path.join(workspaceDir, 'projects', REGISTRY_FILENAME);
+}
+const migrations = {
+// Add migrations here as needed:
+// '1_to_2': (data) => { ... return data; },
+};
+function migrateRegistry(data) {
+    const rawVersion = data['version'];
+    if (typeof rawVersion !== 'number') {
+        throw new Error('Registry missing or invalid version field in migration');
+    }
+    let version = rawVersion;
+    while (version < CURRENT_REGISTRY_VERSION) {
+        const key = `${version}_to_${version + 1}`;
+        const fn = migrations[key];
+        if (!fn) {
+            throw new Error(`No migration function found for ${key}. Cannot upgrade registry from v${version}.`);
+        }
+        data = fn(data);
+        version++;
+        data['version'] = version;
+    }
+    return data;
+}
+// ── Read ───────────────────────────────────────────────────────────────
+/**
+ * Read and validate the registry from disk.
+ * - Migrates if version is behind current
+ * - Rejects if version is ahead of current
+ * - Quarantines invalid topic entries (logs + excludes)
+ */
+export function readRegistry(workspaceDir) {
+    const regPath = registryPath(workspaceDir);
+    const raw = fs.readFileSync(regPath, 'utf-8');
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`Failed to parse registry at ${regPath}: invalid JSON`);
+    }
+    // Version check
+    const version = data['version'];
+    if (typeof version !== 'number') {
+        throw new Error('Registry missing version field');
+    }
+    if (version > CURRENT_REGISTRY_VERSION) {
+        throw new Error(`Registry version ${version} is newer than this plugin supports (v${CURRENT_REGISTRY_VERSION}). Please upgrade openclaw-telegram-manager.`);
+    }
+    // Migrate if needed
+    if (version < CURRENT_REGISTRY_VERSION) {
+        data = migrateRegistry(data);
+    }
+    // Quarantine invalid topic entries
+    const topics = data['topics'];
+    if (topics && typeof topics === 'object' && !Array.isArray(topics)) {
+        const validTopics = {};
+        for (const [key, entry] of Object.entries(topics)) {
+            if (Value.Check(TopicEntrySchema, entry)) {
+                validTopics[key] = entry;
+            }
+            else {
+                const errors = [...Value.Errors(TopicEntrySchema, entry)];
+                const errorMsg = errors.map((e) => `${e.path}: ${e.message}`).join('; ');
+                console.error(`[registry] Quarantined invalid entry "${key}": ${errorMsg}`);
+            }
+        }
+        data['topics'] = validTopics;
+    }
+    // Validate the full registry schema
+    if (!Value.Check(RegistrySchema, data)) {
+        const errors = [...Value.Errors(RegistrySchema, data)];
+        const errorMsg = errors.map((e) => `${e.path}: ${e.message}`).join('; ');
+        throw new Error(`Registry validation failed: ${errorMsg}`);
+    }
+    return data;
+}
+// ── Atomic write ───────────────────────────────────────────────────────
+/**
+ * Atomically write registry data to disk.
+ * Writes to a .tmp file then renames (atomic on POSIX).
+ */
+export function writeRegistryAtomic(filePath, data) {
+    const tmpPath = filePath + '.tmp';
+    const content = JSON.stringify(data, null, 2) + '\n';
+    fs.writeFileSync(tmpPath, content, { mode: FILE_MODE });
+    fs.renameSync(tmpPath, filePath);
+    fs.chmodSync(filePath, FILE_MODE);
+}
+// ── withRegistry pattern ───────────────────────────────────────────────
+/**
+ * Lock the registry, read it, apply a mutation function, and write it back.
+ * The lock prevents concurrent writes from corrupting the registry.
+ *
+ * The mutation function receives the registry data and can modify it.
+ * Return value of the mutation function is passed through as the return value.
+ */
+export async function withRegistry(workspaceDir, fn) {
+    const regPath = registryPath(workspaceDir);
+    const lockDir = path.dirname(regPath);
+    // Ensure the registry file exists before locking
+    if (!fs.existsSync(regPath)) {
+        throw new Error(`Registry not found at ${regPath}. Run setup first.`);
+    }
+    let release;
+    try {
+        release = await lockfile.lock(regPath, {
+            stale: LOCK_TIMEOUT * 2,
+            retries: {
+                retries: Math.ceil(LOCK_TIMEOUT / LOCK_RETRY_INTERVAL),
+                minTimeout: LOCK_RETRY_INTERVAL,
+                maxTimeout: LOCK_RETRY_INTERVAL,
+            },
+            lockfilePath: path.join(lockDir, REGISTRY_FILENAME + '.lock'),
+        });
+        const data = readRegistry(workspaceDir);
+        const result = await fn(data);
+        // Write the (potentially mutated) registry back
+        writeRegistryAtomic(regPath, data);
+        return result;
+    }
+    finally {
+        if (release) {
+            await release();
+        }
+    }
+}
+// ── Empty registry factory ─────────────────────────────────────────────
+/**
+ * Create a new empty registry with default values.
+ */
+export function createEmptyRegistry(callbackSecret) {
+    return {
+        version: CURRENT_REGISTRY_VERSION,
+        topicManagerAdmins: [],
+        callbackSecret,
+        lastDoctorAllRunAt: null,
+        maxTopics: MAX_TOPICS_DEFAULT,
+        topics: {},
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/lib/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/lib/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAGpB,0EAA0E;AAE1E,MAAM,iBAAiB,GAAG,aAAa,CAAC;AACxC,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,0EAA0E;AAE1E,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAChE,CAAC;AAMD,MAAM,UAAU,GAAgC;AAC9C,iCAAiC;AACjC,4CAA4C;CAC7C,CAAC;AAEF,SAAS,eAAe,CAAC,IAA6B;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,GAAG,UAAU,CAAC;IAEzB,OAAO,OAAO,GAAG,wBAAwB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,OAAO,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,mCAAmC,OAAO,GAAG,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,EAAE,CAAC;QACV,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAE1E;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,IAA6B,CAAC;IAElC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,gBAAgB,CAAC,CAAC;IAC1E,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,GAAG,wBAAwB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,yCAAyC,wBAAwB,8CAA8C,CAC3I,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,GAAG,wBAAwB,EAAE,CAAC;QACvC,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,WAAW,GAA+B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC;gBACzC,WAAW,CAAC,GAAG,CAAC,GAAG,KAAmB,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,OAAO,CAAC,KAAK,CAAC,yCAAyC,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC;IAC/B,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,IAAgB,CAAC;AAC1B,CAAC;AAED,0EAA0E;AAE1E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAc;IAClE,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAErD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,0EAA0E;AAE1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,EAAsC;IAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtC,iDAAiD;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,OAA0C,CAAC;IAE/C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE;YACrC,KAAK,EAAE,YAAY,GAAG,CAAC;YACvB,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,mBAAmB,CAAC;gBACtD,UAAU,EAAE,mBAAmB;gBAC/B,UAAU,EAAE,mBAAmB;aAChC;YACD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;SAC9D,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAE9B,gDAAgD;QAChD,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEnC,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,cAAsB;IACxD,OAAO;QACL,OAAO,EAAE,wBAAwB;QACjC,kBAAkB,EAAE,EAAE;QACtB,cAAc;QACd,kBAAkB,EAAE,IAAI;QACxB,SAAS,EAAE,kBAAkB;QAC7B,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC"}

package/dist/lib/security.d.ts

@@ -0,0 +1,57 @@
+/** Validate a slug against the allowed pattern. */
+export declare function validateSlug(slug: string): boolean;
+/**
+ * Sanitize a title into a valid slug.
+ * Strip non-alphanumeric (except hyphens), strip dots, collapse
+ * consecutive hyphens, trim leading/trailing hyphens, lowercase.
+ */
+export declare function sanitizeSlug(title: string): string;
+/**
+ * Jail check: ensure `userPath` resolves within `base`.
+ * Returns true if safe, false if the path escapes the base.
+ */
+export declare function jailCheck(base: string, userPath: string): boolean;
+/**
+ * Reject symlinks. Returns true if the path is a symlink (should be rejected).
+ * Returns false if not a symlink or path does not exist.
+ */
+export declare function rejectSymlink(filePath: string): boolean;
+/**
+ * Sign a payload with HMAC-SHA256, returning the first 16 hex chars.
+ * Truncated to 8 bytes (16 hex chars) to fit within Telegram's 64-byte
+ * callback_data limit. Online brute-force is infeasible due to Telegram rate limits.
+ */
+export declare function hmacSign(secret: string, payload: string): string;
+/**
+ * Verify an HMAC signature using constant-time comparison.
+ * Returns true if the signature is valid.
+ */
+export declare function hmacVerify(secret: string, payload: string, signature: string): boolean;
+/** Escape HTML special characters for safe Telegram HTML output. */
+export declare function htmlEscape(str: string): string;
+/** Validate a Telegram group ID (may be negative). */
+export declare function validateGroupId(id: string): boolean;
+/** Validate a Telegram thread ID (positive integer). */
+export declare function validateThreadId(id: string): boolean;
+export interface CallbackData {
+    action: string;
+    slug: string;
+    groupId: string;
+    threadId: string;
+}
+/**
+ * Build callback data string with HMAC signature.
+ * Format: tm:<action>:<slug>:<groupId>:<threadId>:<hmac>
+ */
+export declare function buildCallbackData(action: string, slug: string, groupId: string, threadId: string, secret: string): string;
+/**
+ * Parse and verify callback data.
+ * Returns the parsed data or null if verification fails.
+ *
+ * Checks:
+ * 1. Format matches the expected regex
+ * 2. HMAC is valid
+ * 3. groupId and threadId match the context (prevents cross-topic tampering)
+ */
+export declare function parseAndVerifyCallback(data: string, secret: string, contextGroupId: string, contextThreadId: string): CallbackData | null;
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAQA,mDAAmD;AACnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQlD;AAID;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIjE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMvD;AAID;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMhE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAWtF;AAWD,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAOD,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEpD;AAMD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAIR;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,MAAM,GACtB,YAAY,GAAG,IAAI,CAmBrB"}

package/dist/lib/security.js

@@ -0,0 +1,133 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// ── Slug validation ────────────────────────────────────────────────────
+const SLUG_RE = /^[a-z][a-z0-9-]{0,49}$/;
+/** Validate a slug against the allowed pattern. */
+export function validateSlug(slug) {
+    return SLUG_RE.test(slug);
+}
+/**
+ * Sanitize a title into a valid slug.
+ * Strip non-alphanumeric (except hyphens), strip dots, collapse
+ * consecutive hyphens, trim leading/trailing hyphens, lowercase.
+ */
+export function sanitizeSlug(title) {
+    return title
+        .toLowerCase()
+        .replace(/\./g, '') // strip dots explicitly
+        .replace(/[^a-z0-9-]/g, '-') // non-alphanum to hyphen
+        .replace(/-{2,}/g, '-') // collapse consecutive hyphens
+        .replace(/^-+|-+$/g, '') // trim leading/trailing hyphens
+        .slice(0, 50); // enforce max length
+}
+// ── Path safety ────────────────────────────────────────────────────────
+/**
+ * Jail check: ensure `userPath` resolves within `base`.
+ * Returns true if safe, false if the path escapes the base.
+ */
+export function jailCheck(base, userPath) {
+    const resolved = path.resolve(base, userPath);
+    const normalizedBase = path.resolve(base) + path.sep;
+    return resolved.startsWith(normalizedBase) || resolved === path.resolve(base);
+}
+/**
+ * Reject symlinks. Returns true if the path is a symlink (should be rejected).
+ * Returns false if not a symlink or path does not exist.
+ */
+export function rejectSymlink(filePath) {
+    try {
+        return fs.lstatSync(filePath).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+// ── HMAC signing / verification ────────────────────────────────────────
+/**
+ * Sign a payload with HMAC-SHA256, returning the first 16 hex chars.
+ * Truncated to 8 bytes (16 hex chars) to fit within Telegram's 64-byte
+ * callback_data limit. Online brute-force is infeasible due to Telegram rate limits.
+ */
+export function hmacSign(secret, payload) {
+    return crypto
+        .createHmac('sha256', secret)
+        .update(payload)
+        .digest('hex')
+        .slice(0, 16);
+}
+/**
+ * Verify an HMAC signature using constant-time comparison.
+ * Returns true if the signature is valid.
+ */
+export function hmacVerify(secret, payload, signature) {
+    const expected = hmacSign(secret, payload);
+    if (expected.length !== signature.length)
+        return false;
+    try {
+        return crypto.timingSafeEqual(Buffer.from(expected, 'utf8'), Buffer.from(signature, 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+// ── HTML escaping ──────────────────────────────────────────────────────
+const HTML_ESCAPE_MAP = {
+    '<': '&lt;',
+    '>': '&gt;',
+    '&': '&amp;',
+    '"': '&quot;',
+};
+/** Escape HTML special characters for safe Telegram HTML output. */
+export function htmlEscape(str) {
+    return str.replace(/[<>&"]/g, (ch) => HTML_ESCAPE_MAP[ch] ?? ch);
+}
+// ── ID validation ──────────────────────────────────────────────────────
+const GROUP_ID_RE = /^-?\d+$/;
+const THREAD_ID_RE = /^\d+$/;
+/** Validate a Telegram group ID (may be negative). */
+export function validateGroupId(id) {
+    return GROUP_ID_RE.test(id);
+}
+/** Validate a Telegram thread ID (positive integer). */
+export function validateThreadId(id) {
+    return THREAD_ID_RE.test(id);
+}
+// ── Callback data handling ─────────────────────────────────────────────
+const CALLBACK_RE = /^tm:[a-z0-9]+:[a-z0-9-]+:-?\d+:\d+:[a-f0-9]+$/;
+/**
+ * Build callback data string with HMAC signature.
+ * Format: tm:<action>:<slug>:<groupId>:<threadId>:<hmac>
+ */
+export function buildCallbackData(action, slug, groupId, threadId, secret) {
+    const payload = `tm:${action}:${slug}:${groupId}:${threadId}`;
+    const sig = hmacSign(secret, payload);
+    return `${payload}:${sig}`;
+}
+/**
+ * Parse and verify callback data.
+ * Returns the parsed data or null if verification fails.
+ *
+ * Checks:
+ * 1. Format matches the expected regex
+ * 2. HMAC is valid
+ * 3. groupId and threadId match the context (prevents cross-topic tampering)
+ */
+export function parseAndVerifyCallback(data, secret, contextGroupId, contextThreadId) {
+    if (!CALLBACK_RE.test(data))
+        return null;
+    const parts = data.split(':');
+    // tm : action : slug : groupId : threadId : hmac
+    if (parts.length !== 6)
+        return null;
+    const [, action, slug, groupId, threadId, signature] = parts;
+    // Verify context match (prevent cross-topic tampering)
+    if (groupId !== contextGroupId || threadId !== contextThreadId)
+        return null;
+    // Verify HMAC
+    const payload = `tm:${action}:${slug}:${groupId}:${threadId}`;
+    if (!hmacVerify(secret, payload, signature))
+        return null;
+    return { action, slug, groupId, threadId };
+}
+//# sourceMappingURL=security.js.map

package/dist/lib/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,0EAA0E;AAE1E,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAgB,wBAAwB;SAC1D,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAM,yBAAyB;SAC1D,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAW,+BAA+B;SAChE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAU,gCAAgC;SACjE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAoB,qBAAqB;AAC3D,CAAC;AAED,0EAA0E;AAE1E;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,QAAgB;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IACrD,OAAO,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,OAAe;IACtD,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe,EAAE,SAAiB;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAC/B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E,MAAM,eAAe,GAA2B;IAC9C,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,QAAQ;CACd,CAAC;AAEF,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,0EAA0E;AAE1E,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,sDAAsD;AACtD,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAE1E,MAAM,WAAW,GAAG,+CAA+C,CAAC;AASpE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,IAAY,EACZ,OAAe,EACf,QAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,MAAc,EACd,cAAsB,EACtB,eAAuB;IAEvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,iDAAiD;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,KAEtD,CAAC;IAEF,uDAAuD;IACvD,IAAI,OAAO,KAAK,cAAc,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAE5E,cAAc;IACd,MAAM,OAAO,GAAG,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/dist/lib/telegram.d.ts

@@ -0,0 +1,55 @@
+import type { TopicEntry, DoctorCheckResult, InlineKeyboardButton, InlineKeyboardMarkup } from './types.js';
+import type { TopicType } from './types.js';
+export type { InlineKeyboardButton, InlineKeyboardMarkup } from './types.js';
+export interface RateLimitConfig {
+    sameGroupDelayMs: number;
+    crossGroupDelayMs: number;
+}
+export declare const DEFAULT_RATE_LIMIT: RateLimitConfig;
+/**
+ * Build an InlineKeyboardMarkup from rows of buttons.
+ */
+export declare function buildInlineKeyboard(rows: InlineKeyboardButton[][]): InlineKeyboardMarkup;
+/**
+ * Build inline keyboard buttons for a doctor report.
+ */
+export declare function buildDoctorButtons(slug: string, groupId: string, threadId: string, secret: string): InlineKeyboardMarkup;
+/**
+ * Build inline keyboard with a [Confirm] button for slug confirmation (init step 1).
+ */
+export declare function buildInitSlugButtons(slug: string, groupId: string, threadId: string, secret: string): InlineKeyboardMarkup;
+/**
+ * Build inline keyboard with type picker buttons for init step 2.
+ */
+export declare function buildInitTypeButtons(slug: string, groupId: string, threadId: string, secret: string): InlineKeyboardMarkup;
+/**
+ * Build HTML Topic Card displayed after init.
+ */
+export declare function buildTopicCard(slug: string, type: TopicType, capsuleVersion: number): string;
+/**
+ * Build HTML doctor report with severity icons.
+ */
+export declare function buildDoctorReport(slug: string, results: DoctorCheckResult[]): string;
+/**
+ * Build HTML help card with command reference.
+ */
+export declare function buildHelpCard(): string;
+/**
+ * Build compact topic list message in HTML.
+ * Groups by status: active first, snoozed, then archived.
+ */
+export declare function buildListMessage(topics: TopicEntry[]): string;
+/**
+ * Helper that wraps a post function with rate limiting delays.
+ * Returns a function that posts messages respecting Telegram rate limits.
+ *
+ * The postFn should handle the actual Telegram API call.
+ * If postFn throws with a 429 status, the helper respects retry_after.
+ */
+export declare function createRateLimitedPoster(postFn: (groupId: string, threadId: string, text: string, keyboard?: InlineKeyboardMarkup) => Promise<void>, config?: RateLimitConfig): (groupId: string, threadId: string, text: string, keyboard?: InlineKeyboardMarkup) => Promise<void>;
+/**
+ * Truncate a message to fit within Telegram's limit.
+ * Appends a truncation indicator if the message was cut.
+ */
+export declare function truncateMessage(msg: string, limit?: number): string;
+//# sourceMappingURL=telegram.d.ts.map

package/dist/lib/telegram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../src/lib/telegram.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAO5C,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAI7E,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,kBAAkB,EAAE,eAGhC,CAAC;AAIF;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,EAAE,EAAE,GAAG,oBAAoB,CAExF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,oBAAoB,CAatB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,oBAAoB,CAKtB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,oBAAoB,CAYtB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAiB5F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAoBpF;AAeD;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAiBtC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAkC7D;AAkBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,EAC3G,MAAM,GAAE,eAAoC,GAC3C,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CA8BrG;AAyBD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,GAAE,MAA2B,GAAG,MAAM,CAUvF"}