dguiducci
da8a835d70
Granting was a checklist of every user on each plugin's page, so "what may
this person use?" meant opening every plugin in turn — and the answer lived
on N pages while the connector half of it already lived on one. Both grant
sections now sit together on #users/{id}: same row list, same disabled chip,
same replace-the-whole-set save. The plugin's own page keeps a read-only
roster of who holds it, linking back to each person.
- db: plugin_access::set_for_user, the per-user twin of set_for_user on
mcp_catalog_access; set_access stays as the inverse read model
- PluginManager: list_grants_for_user / set_grants_for_user, which omit and
reject manages_own_access plugins (a box that controls nothing is worse
than no box)
- GET/PUT /api/users/{id}/plugins, mounted next to /users/{id}/connectors;
PUT /api/plugins/{id}/access is gone, GET remains as the roster
No push after the write, unlike a connector grant: that one gates a runtime
snapshotted at login, while a plugin grant is re-read from plugin_access on
every request that depends on it (sidebar pages, /plugins/mine, and each
inbound channel message), so a revoke lands with no bus event.
Docs updated with where access is granted, and why mobile-connector is
absent from that list.
2.1 KiB
Telegram Bot
- Plugin id:
telegram - Category: Messaging channel
- Runs: connects out to the Telegram Bot API — needs internet access
What it does
Connects a private Telegram bot to this instance, so a user can chat with their assistant directly from Telegram — same assistant, same memory, same tools as the web app. Pending approvals (e.g. "can I run this command?") are shown as Telegram messages with inline buttons the user can tap to approve or deny, right from their phone.
One bot serves everyone on the instance; each person pairs their own Telegram chat to their own account — nobody sees anyone else's conversation.
Requirements
- A Telegram bot token. Get one by messaging @BotFather on Telegram, sending
/newbot, and following the prompts — it replies with a token that looks like123456789:AAF....
Enabling & configuring (admin)
- Plugins page → Telegram Bot → enable, then Configure.
- Field:
token(required) — the bot token from BotFather. Stored as a secret field, not shown again after saving.
Per-user pairing (self-service)
Once the bot is enabled and a user has been granted access to the plugin (admin: Users → that person → Plugins → tick Telegram):
- The user opens Telegram, finds the bot (by the username chosen in BotFather), and sends it any message.
- The bot replies with a short pairing code.
- The user opens the Telegram page in the web app's sidebar and pastes the code into the pairing code field.
That's the whole flow — no admin involvement needed for a normal pairing. (An admin can alternatively bind a chat to a user directly using the telegram_pairing tool from the assistant, e.g. if a user can't access the web app.)
Notes
- Output sent to Telegram is automatically constrained to Telegram-safe HTML formatting (bold, italic, code blocks, links, quotes) — no Markdown, no tables. This is handled automatically; nothing to configure.
- Revoking a user's plugin access immediately stops that person's Telegram chat from working, without needing them to re-pair if access is restored later.