araharah-executor 4fbbb0b516 feat(03-01): TTL-only KV location-pin layer under the existing privacy gates (GEO-03, PRIV-02) ...

- kv/location-pin.ts mirrors sessions.ts shape: writePin/getPin/clearPin, key loc:<chat_id> (chat-scoped, claim-derived — never user-id scoped across keys)
- PIN_TTL_SECONDS=300; writePin is the only write path, expirationTtl on the same line referencing the named constant
- getPin is a defensive read: parse guard + shape guard + |lat|<=90 / |lon|<=180 range guard (V5 Input Validation) — corrupt records return null
- privacy.test.mjs: storageModules now scans kv/location-pin.ts, so PG1 (same-line TTL) and PG2 (no persistence-shaped exports) apply automatically

2026-10-22 23:25:59 +08:00

..

scripts

fix(02-03): set-webhook auto-appends /telegram/webhook to a pathless URL

2026-10-22 19:56:24 +08:00

src

feat(03-01): TTL-only KV location-pin layer under the existing privacy gates (GEO-03, PRIV-02)

2026-10-22 23:25:59 +08:00

test

feat(03-01): TTL-only KV location-pin layer under the existing privacy gates (GEO-03, PRIV-02)

2026-10-22 23:25:59 +08:00

.dev.vars.example

fix(02-03): set-webhook auto-appends /telegram/webhook to a pathless URL

2026-10-22 19:56:24 +08:00

.gitignore

feat(02-01): bot workspace scaffold with Env contract (D-09/D-10/D-11/D-15)

2026-10-22 11:35:54 +08:00

package.json

feat(02-03): Worker entry — webhook route + /api/session security gate + deploy plumbing (D-11, D-14, D-16, D-17)

2026-10-22 11:49:43 +08:00

tsconfig.json

feat(02-01): bot workspace scaffold with Env contract (D-09/D-10/D-11/D-15)

2026-10-22 11:35:54 +08:00

wrangler.jsonc

fix(02-03): wire chat_sessions KV namespace id (created via wrangler kv namespace create)

2026-10-22 18:45:44 +08:00