OAuth callback: send Telegram confirmation message after Google auth

cdk/cdk.out/AgentClawStack.template.json

@@ -695,6 +695,93 @@
     "aws:cdk:path": "AgentClawStack/WebhookApi/GET--oauth--callback/Resource"
    }
   },
+  "WebhookApiANYworkspaceproxyWorkspaceMcpIntegration7377EE13": {
+   "Type": "AWS::ApiGatewayV2::Integration",
+   "Properties": {
+    "ApiId": {
+     "Ref": "WebhookApi28122C53"
+    },
+    "IntegrationType": "AWS_PROXY",
+    "IntegrationUri": {
+     "Fn::Join": [
+      "",
+      [
+       "arn:",
+       {
+        "Ref": "AWS::Partition"
+       },
+       ":lambda:us-east-1:495395224548:function:agent-claw-workspace-mcp"
+      ]
+     ]
+    },
+    "PayloadFormatVersion": "2.0"
+   },
+   "Metadata": {
+    "aws:cdk:path": "AgentClawStack/WebhookApi/ANY--workspace--{proxy+}/WorkspaceMcpIntegration/Resource"
+   }
+  },
+  "WebhookApiANYworkspaceproxyWorkspaceMcpIntegrationPermission97613ADF": {
+   "Type": "AWS::Lambda::Permission",
+   "Properties": {
+    "Action": "lambda:InvokeFunction",
+    "FunctionName": {
+     "Fn::Join": [
+      "",
+      [
+       "arn:",
+       {
+        "Ref": "AWS::Partition"
+       },
+       ":lambda:us-east-1:495395224548:function:agent-claw-workspace-mcp"
+      ]
+     ]
+    },
+    "Principal": "apigateway.amazonaws.com",
+    "SourceArn": {
+     "Fn::Join": [
+      "",
+      [
+       "arn:",
+       {
+        "Ref": "AWS::Partition"
+       },
+       ":execute-api:us-east-1:495395224548:",
+       {
+        "Ref": "WebhookApi28122C53"
+       },
+       "/*/*/workspace/{proxy+}"
+      ]
+     ]
+    }
+   },
+   "Metadata": {
+    "aws:cdk:path": "AgentClawStack/WebhookApi/ANY--workspace--{proxy+}/WorkspaceMcpIntegration-Permission"
+   }
+  },
+  "WebhookApiANYworkspaceproxy4455BE19": {
+   "Type": "AWS::ApiGatewayV2::Route",
+   "Properties": {
+    "ApiId": {
+     "Ref": "WebhookApi28122C53"
+    },
+    "AuthorizationType": "NONE",
+    "RouteKey": "ANY /workspace/{proxy+}",
+    "Target": {
+     "Fn::Join": [
+      "",
+      [
+       "integrations/",
+       {
+        "Ref": "WebhookApiANYworkspaceproxyWorkspaceMcpIntegration7377EE13"
+       }
+      ]
+     ]
+    }
+   },
+   "Metadata": {
+    "aws:cdk:path": "AgentClawStack/WebhookApi/ANY--workspace--{proxy+}/Resource"
+   }
+  },
   "Runtime1RoleA7A82078": {
    "Type": "AWS::IAM::Role",
    "Properties": {
@@ -1014,6 +1101,14 @@
         ]
        }
       },
+      {
+       "Action": [
+        "secretsmanager:GetSecretValue",
+        "secretsmanager:DescribeSecret"
+       ],
+       "Effect": "Allow",
+       "Resource": "arn:aws:secretsmanager:us-east-1:495395224548:secret:agent-claw/telegram-bot-token-Oq3in3"
+      },
       {
        "Action": [
         "dynamodb:BatchGetItem",
@@ -1081,7 +1176,7 @@
    "Properties": {
     "Code": {
      "S3Bucket": "cdk-hnb659fds-assets-495395224548-us-east-1",
-     "S3Key": "5be87975e51a6859dfad098b3d998a0bcd09a4f9a437bbf38923338fb559eb9e.zip"
+     "S3Key": "a6d7ca10ce41a486503b8ea9f109a54841bb31af9548c618fdca79ac13b34c6a.zip"
     },
     "Environment": {
      "Variables": {
@@ -1100,6 +1195,7 @@
       "USERS_TABLE_NAME": {
        "Ref": "UsersTable9725E9C8"
       },
+      "TELEGRAM_BOT_TOKEN_SECRET_ARN": "arn:aws:secretsmanager:us-east-1:495395224548:secret:agent-claw/telegram-bot-token-Oq3in3",
       "OAUTH_REDIRECT_URI": {
        "Fn::Join": [
         "",
@@ -1136,7 +1232,7 @@
    ],
    "Metadata": {
     "aws:cdk:path": "AgentClawStack/OAuthHandler/Resource",
-    "aws:asset:path": "asset.5be87975e51a6859dfad098b3d998a0bcd09a4f9a437bbf38923338fb559eb9e",
+    "aws:asset:path": "asset.a6d7ca10ce41a486503b8ea9f109a54841bb31af9548c618fdca79ac13b34c6a",
     "aws:asset:is-bundled": false,
     "aws:asset:property": "Code"
    }