resolveSessionStoreEntry,

updateSessionStore,

} from "openclaw/plugin-sdk/session-store-runtime";

import { expandTelegramAllowFromWithAccessGroups } from "./access-groups.js";

import { resolveTelegramAccount, resolveTelegramMediaRuntimeOptions } from "./accounts.js";

import { withTelegramApiErrorLogging } from "./api-logging.js";

import {

chatId: number;

isGroup: boolean;

isForum: boolean;

senderId?: string;

messageThreadId?: number;

groupAllowContext?: TelegramGroupAllowContext;

}): Promise<TelegramEventAuthorizationContext> => {

const groupAllowContext =

params.groupAllowContext ??

(await resolveTelegramGroupAllowFromContext({

chatId: params.chatId,

cfg,

accountId,

senderId: params.senderId,

isGroup: params.isGroup,

isForum: params.isForum,

messageThreadId: params.messageThreadId,

return { dmPolicy: effectiveDmPolicy, ...groupAllowContext };

};

const authorizeTelegramEventSender = (params: {

const authorizeTelegramEventSender = async (params: {

chatId: number;

chatTitle?: string;

isGroup: boolean;

senderId: string;

senderUsername: string;

mode: TelegramEventAuthorizationMode;

context: TelegramEventAuthorizationContext;

}): TelegramEventAuthorizationResult => {

}): Promise<TelegramEventAuthorizationResult> => {

const { chatId, chatTitle, isGroup, senderId, senderUsername, mode, context } = params;

const {

dmPolicy,

}

// For DMs, prefer per-DM/topic allowFrom (groupAllowOverride) over account-level allowFrom.

const dmAllowFrom = groupAllowOverride ?? allowFrom;

const effectiveDmAllow = normalizeDmAllowFromWithStore({

const expandedDmAllowFrom = await expandTelegramAllowFromWithAccessGroups({

cfg,

allowFrom: dmAllowFrom,

accountId,

senderId,

});

const effectiveDmAllow = normalizeDmAllowFromWithStore({

allowFrom: expandedDmAllowFrom,

storeAllowFrom,

dmPolicy,

});

chatId,

isGroup,

isForum,

senderId,

});

const senderAuthorization = authorizeTelegramEventSender({

const senderAuthorization = await authorizeTelegramEventSender({

chatId,

chatTitle: reaction.chat.title,

isGroup,

isForum: callbackMessage.chat.is_forum,

getChat,

});

const senderId = callback.from?.id ? String(callback.from.id) : "";

const senderUsername = callback.from?.username ?? "";

const eventAuthContext = await resolveTelegramEventAuthorizationContext({

chatId,

isGroup,

isForum,

senderId,

messageThreadId,

});

const { resolvedThreadId, dmThreadId, storeAllowFrom, groupConfig } = eventAuthContext;

);

return;

}

const senderId = callback.from?.id ? String(callback.from.id) : "";

const senderUsername = callback.from?.username ?? "";

const authorizationMode: TelegramEventAuthorizationMode =

!isGroup || (!execApprovalButtonsEnabled && inlineButtonsScope === "allowlist")

? "callback-allowlist"

: "callback-scope";

const senderAuthorization = authorizeTelegramEventSender({

const senderAuthorization = await authorizeTelegramEventSender({

chatId,

chatTitle: callbackMessage.chat.title,

isGroup,

chatId: event.chatId,

isGroup: event.isGroup,

isForum: event.isForum,

senderId: event.senderId,

messageThreadId: event.messageThreadId,

});

const {

} = eventAuthContext;

// For DMs, prefer per-DM/topic allowFrom (groupAllowOverride) over account-level allowFrom

const dmAllowFrom = groupAllowOverride ?? allowFrom;

const effectiveDmAllow = normalizeDmAllowFromWithStore({

const expandedDmAllowFrom = await expandTelegramAllowFromWithAccessGroups({

cfg,

allowFrom: dmAllowFrom,

accountId,

senderId: event.senderId,

});

const effectiveDmAllow = normalizeDmAllowFromWithStore({

allowFrom: expandedDmAllowFrom,

storeAllowFrom,

dmPolicy,

});