import { resolveTelegramAccount, resolveTelegramMediaRuntimeOptions } from "./accounts.js";

import { withTelegramApiErrorLogging } from "./api-logging.js";

import {

expandTelegramAllowFromWithAccessGroups,

isSenderAllowed,

normalizeDmAllowFromWithStore,

type NormalizedAllowFrom,

chatId: number;

isGroup: boolean;

isForum: boolean;

senderId?: string;

messageThreadId?: number;

groupAllowContext?: TelegramGroupAllowContext;

}): Promise<TelegramEventAuthorizationContext> => {

const groupAllowContext =

params.groupAllowContext ??

(await resolveTelegramGroupAllowFromContext({

cfg,

chatId: params.chatId,

accountId,

senderId: params.senderId,

isGroup: params.isGroup,

isForum: params.isForum,

messageThreadId: params.messageThreadId,

chatId,

isGroup,

isForum,

senderId,

});

const senderAuthorization = authorizeTelegramEventSender({

chatId,

isForum: callbackMessage.chat.is_forum,

getChat,

});

const senderId = callback.from?.id ? String(callback.from.id) : "";

const senderUsername = callback.from?.username ?? "";

const eventAuthContext = await resolveTelegramEventAuthorizationContext({

chatId,

isGroup,

isForum,

senderId,

messageThreadId,

});

const { resolvedThreadId, dmThreadId, storeAllowFrom, groupConfig } = eventAuthContext;

);

return;

}

const senderId = callback.from?.id ? String(callback.from.id) : "";

const senderUsername = callback.from?.username ?? "";

const authorizationMode: TelegramEventAuthorizationMode =

!isGroup || (!execApprovalButtonsEnabled && inlineButtonsScope === "allowlist")

? "callback-allowlist"

chatId: event.chatId,

isGroup: event.isGroup,

isForum: event.isForum,

senderId: event.senderId,

messageThreadId: event.messageThreadId,

});

const {

} = eventAuthContext;

// For DMs, prefer per-DM/topic allowFrom (groupAllowOverride) over account-level allowFrom

const dmAllowFrom = groupAllowOverride ?? allowFrom;

const effectiveDmAllow = normalizeDmAllowFromWithStore({

const expandedDmAllowFrom = await expandTelegramAllowFromWithAccessGroups({

cfg,

allowFrom: dmAllowFrom,

accountId,

senderId: event.senderId,

});

const effectiveDmAllow = normalizeDmAllowFromWithStore({

allowFrom: expandedDmAllowFrom,

storeAllowFrom,

dmPolicy,

});