fix: preserve Telegram compatibility and stabilize Office

src/channels/telegram/config-store.mjs

@@ -9,6 +9,58 @@ const IDENTITY_OPTIONS = Object.freeze({
   tokenRefPrefix: 'DSH_TELEGRAM_BOT_TOKEN',
 });
 
+export const TELEGRAM_ACCESS_MODES = Object.freeze({
+  compatible: 'compatible',
+  privateAllowlist: 'private-allowlist',
+});
+
+const TELEGRAM_USER_ID = /^[1-9]\d{0,15}$/;
+
+export function normalizeTelegramAllowedUsers(value) {
+  if (value === undefined) return Object.freeze([]);
+  if (!Array.isArray(value)) {
+    throw new TypeError('allowedUsers must be an array of numeric Telegram User IDs');
+  }
+  const normalized = value.map((entry) => {
+    const userId = typeof entry === 'number' && Number.isSafeInteger(entry)
+      ? String(entry) : typeof entry === 'string' ? entry.trim() : '';
+    if (!TELEGRAM_USER_ID.test(userId)) {
+      throw new TypeError('allowedUsers contains an invalid Telegram User ID');
+    }
+    return userId;
+  });
+  return Object.freeze([...new Set(normalized)]);
+}
+
+export function normalizeTelegramAccessPolicy(value = {}) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    throw new TypeError('Telegram access policy must be an object');
+  }
+  const accessMode = value.accessMode ?? TELEGRAM_ACCESS_MODES.compatible;
+  if (!Object.values(TELEGRAM_ACCESS_MODES).includes(accessMode)) {
+    throw new TypeError('Telegram accessMode must be compatible or private-allowlist');
+  }
+  return Object.freeze({
+    accessMode,
+    allowedUsers: normalizeTelegramAllowedUsers(value.allowedUsers),
+  });
+}
+
+function normalizeTelegramBotExtension(value) {
+  const hasAccessMode = Object.hasOwn(value, 'accessMode');
+  const hasAllowedUsers = Object.hasOwn(value, 'allowedUsers');
+  if (!hasAccessMode && !hasAllowedUsers) return {};
+  try {
+    const policy = normalizeTelegramAccessPolicy(value);
+    return {
+      ...(hasAccessMode ? { accessMode: policy.accessMode } : {}),
+      ...(hasAllowedUsers || hasAccessMode ? { allowedUsers: policy.allowedUsers } : {}),
+    };
+  } catch {
+    return null;
+  }
+}
+
 export function deriveTelegramBotIdentity(platformId) {
   return deriveTokenBotIdentity(platformId, IDENTITY_OPTIONS);
 }
@@ -19,6 +71,15 @@ export function maskTelegramBotId(platformId) {
 
 export class TelegramConfigStore extends TokenBotConfigStore {
   constructor(path) {
-    super(path, { channel: 'Telegram', ...IDENTITY_OPTIONS });
+    super(path, {
+      channel: 'Telegram',
+      ...IDENTITY_OPTIONS,
+      normalizeBotExtension: normalizeTelegramBotExtension,
+    });
+  }
+
+  async save(value) {
+    const previous = value?.platformId ? this.getByPlatformId(String(value.platformId)) : null;
+    return super.save({ ...previous, ...value });
   }
 }