sync: 154 file da Baida98/AI@fad752ee (2026-08-15 11:09 UTC) [deploy-all]

api/telegram_webhook.py

@@ -61,19 +61,25 @@ async def _tg_reply(chat_id: str | int, text: str, token: str | None = None,
     try:
         import httpx
         timeout = httpx.Timeout(connect=5.0, read=15.0, write=10.0, pool=5.0)
-        # Il backend non richiede proxy HTTP per raggiungere l'API Telegram.
-        # Ignorare proxy d'ambiente evita ReadTimeout silenziosi in hosting gestiti.
+        gateway_url = os.getenv("TELEGRAM_REPLY_PROXY_URL", "").strip()
+        gateway_secret = os.getenv("TELEGRAM_REPLY_PROXY_SECRET", "").strip()
+        if gateway_url and gateway_secret:
+            request_url = gateway_url
+            request_headers = {"Authorization": f"Bearer {gateway_secret}"}
+        else:
+            # Compatibilità per ambienti che non hanno ancora il gateway Pages.
+            request_url = f"https://api.telegram.org/bot{bot_token}/sendMessage"
+            request_headers = {}
+        # Il gateway isola l'egress Telegram dal runtime HF, dove la connessione
+        # diretta può scadere. trust_env evita proxy ambiente non necessari.
         async with httpx.AsyncClient(timeout=timeout, trust_env=False) as c:
-            response = await c.post(
-                f"https://api.telegram.org/bot{bot_token}/sendMessage",
-                json=payload,
-            )
+            response = await c.post(request_url, headers=request_headers, json=payload)
         try:
             data = response.json()
         except ValueError:
             data = {}
         if response.status_code >= 400 or not data.get("ok", False):
-            detail = str(data.get("description") or response.text[:160] or "unknown")
+            detail = str(data.get("description") or data.get("error") or response.text[:160] or "unknown")
             _logger.warning("tg_reply rejected: status=%s detail=%s", response.status_code, detail)
     except Exception as exc:
         detail = str(exc) or repr(exc)

tests/test_telegram_reply_transport.py

@@ -1,3 +1,4 @@
+import os
 import unittest
 from unittest.mock import patch
 
@@ -20,6 +21,7 @@ class _Client:
     instances = []
     response = _Response()
     exception = None
+    last_post = None
 
     def __init__(self, **kwargs):
         self.kwargs = kwargs
@@ -31,7 +33,8 @@ class _Client:
     async def __aexit__(self, *_args):
         return False
 
-    async def post(self, *_args, **_kwargs):
+    async def post(self, *args, **kwargs):
+        type(self).last_post = (args, kwargs)
         if type(self).exception is not None:
             raise type(self).exception
         return type(self).response
@@ -42,6 +45,7 @@ class TelegramReplyTransportTests(unittest.IsolatedAsyncioTestCase):
         _Client.instances = []
         _Client.response = _Response()
         _Client.exception = None
+        _Client.last_post = None
 
     async def test_reply_bypasses_environment_proxy_and_accepts_success(self):
         with patch("httpx.AsyncClient", _Client):
@@ -51,6 +55,21 @@ class TelegramReplyTransportTests(unittest.IsolatedAsyncioTestCase):
         self.assertFalse(_Client.instances[0].kwargs["trust_env"])
         self.assertIsInstance(_Client.instances[0].kwargs["timeout"], httpx.Timeout)
 
+    async def test_reply_uses_authenticated_pages_gateway_when_configured(self):
+        with patch.dict(
+            os.environ,
+            {
+                "TELEGRAM_REPLY_PROXY_URL": "https://tma-agente.pages.dev/api/telegram/send",
+                "TELEGRAM_REPLY_PROXY_SECRET": "gateway-secret",
+            },
+            clear=False,
+        ), patch("httpx.AsyncClient", _Client):
+            await _tg_reply(123, "hello", token="test-token")
+
+        args, kwargs = _Client.last_post
+        self.assertEqual(args[0], "https://tma-agente.pages.dev/api/telegram/send")
+        self.assertEqual(kwargs["headers"], {"Authorization": "Bearer gateway-secret"})
+
     async def test_reply_logs_rejected_telegram_response(self):
         _Client.response = _Response(
             status_code=429,