feat: add Telegram integration with forum topic support and creator tracking

Adds full Telegram ZIP ingestion pipeline: TDLib worker service scans source
channels for archive files, deduplicates by content hash, extracts metadata,
uploads to archive channel, and indexes in Postgres. Forum supergroups are
scanned per-topic with topic names used as creator. Filename-based creator
extraction (e.g. "Mammoth Factory - 2026-01.zip") serves as fallback.

Includes admin UI for managing accounts/channels, simplified account setup
(API credentials via env vars), auth code/password submission dialog,
package browser with creator column, and live ingestion activity tracking.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/app/api/zips/[id]/files/route.ts

@@ -0,0 +1,32 @@
+import { NextResponse } from "next/server";
+import { authenticateApiRequest } from "@/lib/telegram/api-auth";
+import { listPackageFiles } from "@/lib/telegram/queries";
+import { listFilesSchema } from "@/schemas/telegram";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const authResult = await authenticateApiRequest(request);
+  if ("error" in authResult) return authResult.error;
+
+  const { id } = await params;
+  const { searchParams } = new URL(request.url);
+  const parsed = listFilesSchema.safeParse(Object.fromEntries(searchParams));
+
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Invalid parameters", details: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+
+  const result = await listPackageFiles({
+    packageId: id,
+    ...parsed.data,
+  });
+
+  return NextResponse.json(result);
+}

src/app/api/zips/[id]/preview/route.ts

@@ -0,0 +1,42 @@
+import { NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { authenticateApiRequest } from "@/lib/telegram/api-auth";
+
+/**
+ * GET /api/zips/:id/preview
+ * Returns the preview thumbnail image as JPEG binary.
+ * Cached for 1 hour (immutable once set).
+ */
+export async function GET(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const authResult = await authenticateApiRequest(request);
+  if ("error" in authResult) return authResult.error;
+
+  const { id } = await params;
+
+  const pkg = await prisma.package.findUnique({
+    where: { id },
+    select: { previewData: true },
+  });
+
+  if (!pkg || !pkg.previewData) {
+    return new NextResponse(null, { status: 404 });
+  }
+
+  // previewData is stored as Bytes (Buffer) from Prisma
+  const buffer =
+    pkg.previewData instanceof Buffer
+      ? pkg.previewData
+      : Buffer.from(pkg.previewData);
+
+  return new NextResponse(buffer, {
+    status: 200,
+    headers: {
+      "Content-Type": "image/jpeg",
+      "Content-Length": String(buffer.length),
+      "Cache-Control": "public, max-age=3600, immutable",
+    },
+  });
+}

src/app/api/zips/[id]/route.ts

@@ -0,0 +1,22 @@
+import { NextResponse } from "next/server";
+import { authenticateApiRequest } from "@/lib/telegram/api-auth";
+import { getPackageById } from "@/lib/telegram/queries";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const authResult = await authenticateApiRequest(request);
+  if ("error" in authResult) return authResult.error;
+
+  const { id } = await params;
+  const pkg = await getPackageById(id);
+
+  if (!pkg) {
+    return NextResponse.json({ error: "Package not found" }, { status: 404 });
+  }
+
+  return NextResponse.json(pkg);
+}

src/app/api/zips/route.ts

@@ -0,0 +1,24 @@
+import { NextResponse } from "next/server";
+import { authenticateApiRequest } from "@/lib/telegram/api-auth";
+import { listPackages } from "@/lib/telegram/queries";
+import { listPackagesSchema } from "@/schemas/telegram";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(request: Request) {
+  const authResult = await authenticateApiRequest(request);
+  if ("error" in authResult) return authResult.error;
+
+  const { searchParams } = new URL(request.url);
+  const parsed = listPackagesSchema.safeParse(Object.fromEntries(searchParams));
+
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Invalid parameters", details: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+
+  const result = await listPackages(parsed.data);
+  return NextResponse.json(result);
+}

src/app/api/zips/search/route.ts

@@ -0,0 +1,25 @@
+import { NextResponse } from "next/server";
+import { authenticateApiRequest } from "@/lib/telegram/api-auth";
+import { searchPackages } from "@/lib/telegram/queries";
+import { searchSchema } from "@/schemas/telegram";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(request: Request) {
+  const authResult = await authenticateApiRequest(request);
+  if ("error" in authResult) return authResult.error;
+
+  const { searchParams } = new URL(request.url);
+  const parsed = searchSchema.safeParse(Object.fromEntries(searchParams));
+
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Invalid parameters", details: parsed.error.flatten() },
+      { status: 400 }
+    );
+  }
+
+  const { q, ...rest } = parsed.data;
+  const result = await searchPackages({ query: q, ...rest });
+  return NextResponse.json(result);
+}