feat: implement token-complete telegram connect flow via bot button

frontend/server/api/omni/telegram/business/connect/complete.post.ts

@@ -0,0 +1,81 @@
+import { readBody } from "h3";
+import { prisma } from "../../../../../utils/prisma";
+import { verifyLinkToken } from "../../../../../utils/telegramBusinessConnect";
+
+type CompleteBody = {
+  token?: string;
+};
+
+export default defineEventHandler(async (event) => {
+  const body = await readBody<CompleteBody>(event);
+  const token = String(body?.token ?? "").trim();
+  if (!token) {
+    throw createError({ statusCode: 400, statusMessage: "token is required" });
+  }
+
+  const payload = verifyLinkToken(token);
+  if (!payload) {
+    return { ok: false, status: "invalid_or_expired_token" };
+  }
+
+  const pendingId = `pending:${payload.nonce}`;
+  const pending = await prisma.telegramBusinessConnection.findFirst({
+    where: {
+      teamId: payload.teamId,
+      businessConnectionId: pendingId,
+    },
+  });
+
+  if (!pending) {
+    return { ok: false, status: "session_not_found" };
+  }
+
+  const raw = (pending.rawJson ?? {}) as any;
+  const telegramUserId = raw?.link?.telegramUserId != null ? String(raw.link.telegramUserId).trim() : "";
+  if (!telegramUserId) {
+    return { ok: false, status: "awaiting_telegram_start" };
+  }
+
+  const linkedConnectionId = `link:${telegramUserId}`;
+  await prisma.$transaction([
+    prisma.telegramBusinessConnection.upsert({
+      where: {
+        teamId_businessConnectionId: {
+          teamId: payload.teamId,
+          businessConnectionId: linkedConnectionId,
+        },
+      },
+      create: {
+        teamId: payload.teamId,
+        businessConnectionId: linkedConnectionId,
+        isEnabled: true,
+        canReply: true,
+        rawJson: {
+          state: "connected",
+          mode: "token_link",
+          linkedAt: new Date().toISOString(),
+          telegramUserId,
+          tokenNonce: payload.nonce,
+        },
+      },
+      update: {
+        isEnabled: true,
+        canReply: true,
+        rawJson: {
+          state: "connected",
+          mode: "token_link",
+          linkedAt: new Date().toISOString(),
+          telegramUserId,
+          tokenNonce: payload.nonce,
+        },
+      },
+    }),
+    prisma.telegramBusinessConnection.delete({ where: { id: pending.id } }),
+  ]);
+
+  return {
+    ok: true,
+    status: "connected",
+    businessConnectionId: linkedConnectionId,
+  };
+});

frontend/server/api/omni/telegram/business/webhook.post.ts

@@ -29,13 +29,25 @@ function crmConnectUrl() {
   return String(process.env.CRM_APP_URL || "https://clientsflow.dsrptlab.com").trim();
 }
 
-function crmConnectButton() {
+function crmConnectButton(linkToken?: string) {
+  const base = crmConnectUrl();
+  let target = base;
+  if (linkToken) {
+    try {
+      const u = new URL(base);
+      u.searchParams.set("tg_link_token", linkToken);
+      target = u.toString();
+    } catch {
+      target = `${base}${base.includes("?") ? "&" : "?"}tg_link_token=${encodeURIComponent(linkToken)}`;
+    }
+  }
+
   return {
     inline_keyboard: [
       [
         {
           text: "Открыть CRM и подтвердить",
-          url: crmConnectUrl(),
+          url: target,
         },
       ],
     ],
@@ -105,7 +117,7 @@ export default defineEventHandler(async (event) => {
       void telegramBotApi("sendMessage", {
         chat_id: chatId,
         text: "CRM: связка аккаунта получена. Нажми кнопку ниже и вернись в CRM для подтверждения.",
-        reply_markup: crmConnectButton(),
+        reply_markup: crmConnectButton(linkToken),
       }).catch(() => {});
     }