docs: sync documentation with current codebase

- Update event formatter count 23 -> 28 (add ping, workflow_job, status, deployment, check_suite)
- Document Telegram support end-to-end (routes, /gh commands, richheader, secrets)
- Fix route schema to use targets array and group fields (owners, emoji)
- Correct KV/D1 storage layout (msg:*, i18n:*, D1 links/send_logs)
- Note GITHUB_APP_ID/GITHUB_PRIVATE_KEY are unused; drop legacy DISCORD_CHANNEL_ID/PORT/CONFIG_PATH
- Remove stale Docker deployment section
- Update color table, branch filter compatibility, admin API endpoints
- AGENTS.md: add Documentation section requiring doc updates after functional changes

docs/guide/introduction.md

@@ -1,27 +1,29 @@
 # Introduction
 
-WebHooker is a GitHub webhook dispatcher built on Cloudflare Workers. It receives GitHub webhook events, applies configurable filters, formats them into rich Discord embeds, and delivers them to Discord channels or threads through the Discord REST API. In-Discord `/gh` interactions arrive via an HTTPS Interactions Endpoint (Ed25519-verified). Routes are managed through a built-in Web UI.
+WebHooker is a GitHub webhook dispatcher built on Cloudflare Workers. It receives GitHub webhook events, applies configurable filters, formats them into rich messages, and delivers them to Discord channels/threads (embeds) and Telegram chats/topics (HTML) via their REST APIs. In-Discord `/gh` interactions arrive via an HTTPS Interactions Endpoint (Ed25519-verified); Telegram `/gh` commands arrive via the Telegram webhook. Routes and groups are managed through a built-in Web UI.
 
 ## Architecture
 
 ```text
 GitHub Webhook → Cloudflare Worker (Hono)
-                 ├── POST /webhook → verify → dedup → filter → format → Discord (REST API)
+                 ├── POST /webhook → verify → dedup → filter → format → Discord (REST) / Telegram (Bot API)
+                 ├── POST /discord/interactions → verify (Ed25519) → handle /gh slash & context commands
+                 ├── POST /telegram/webhook → verify (secret token) → handle /gh commands
                  ├── GET  /auth/github → OAuth flow
+                 ├── GET  /api/richheader → Telegram avatar link-preview card
                  ├── POST /api/* → user actions (Bearer token auth)
-                 ├── /admin → routes & send-log Web UI (admin session)
-                  └── GET  /health → status check
-
-POST /discord/interactions → verify (Ed25519) → handle /gh slash & context commands
+                 ├── /admin → routes, groups & send-log Web UI (admin session)
+                 └── GET  /health → status check
 ```
 
 ### Components
 
-| Component                 | Role                                                                                                                     |
-| ------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
-| **Cloudflare Worker**     | HTTP ingress, signature verification, delivery dedup, event parsing, route matching, REST send                           |
-| **Interactions Endpoint** | Verifies Ed25519 signatures and handles `/gh` interactions (slash commands, context-menu commands, buttons, modals)      |
-| **KV**                    | Token storage (`token:{userId}`), OAuth state (`state:{hex}`), route config (`config:routes`), send logs, delivery dedup |
+| Component                 | Role                                                                                                                                                                                             |
+| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| **Cloudflare Worker**     | HTTP ingress, signature verification, delivery dedup, event parsing, route matching, platform dispatch                                                                                           |
+| **Interactions Endpoint** | Verifies Ed25519 signatures and handles `/gh` interactions (slash commands, context-menu commands, buttons, modals)                                                                              |
+| **KV**                    | Token storage (`token:{userId}`), OAuth state (`state:{hex}`), route config (`config:routes`), group config (`config:groups`), admin sessions, delivery dedup, message-update tracking (`msg:*`) |
+| **D1**                    | Send logs (`send_logs`), Discord↔GitHub links (`discord_links`), Telegram↔GitHub links (`telegram_links`)                                                                                        |
 
 ### Data Flow
 
@@ -29,18 +31,19 @@ POST /discord/interactions → verify (Ed25519) → handle /gh slash & context c
 2. Worker verifies the HMAC-SHA256 signature
 3. Worker deduplicates by `X-GitHub-Delivery` (KV, short TTL) to drop repeat deliveries
 4. Worker parses the event type and payload
-5. Routes are evaluated against filters (event, repo, actor, action, branch, keyword)
-6. Matching routes trigger formatter functions that produce Discord embeds
-7. Each message is sent to its route's target channel/thread via the Discord REST API with rate-limit retry, and the result is recorded in the send log
+5. Routes are evaluated against filters (event, repo, actor, action, branch, keyword) and group owner restrictions
+6. Matching routes trigger formatter functions that produce platform-neutral messages
+7. Each message is sent to its route's target(s) via the Discord or Telegram REST API with rate-limit retry; `workflow_run` progress is edited in place. Every attempt is recorded in the D1 send log
 
 ## Tech Stack
 
 - **Runtime**: Cloudflare Workers
 - **HTTP Framework**: Hono
 - **Discord delivery**: Discord REST API (interactions via an Ed25519-verified HTTPS Interactions Endpoint)
+- **Telegram delivery**: Telegram Bot API (webhook with optional secret-token verification)
 - **Web UI**: Nuxt 3 static SPA served from Worker assets
-- **Storage**: Cloudflare KV
-- **Auth**: Web Crypto API (HMAC-SHA256), jose (JWT), octokit (GitHub API)
+- **Storage**: Cloudflare KV + D1
+- **Auth**: Web Crypto API (HMAC-SHA256, Ed25519), octokit (GitHub API), jose (dependency)
 - **Language**: TypeScript
 
 ## License