forked from c-fu/arah2
araharah-executor
df3b7d65c1
- src/webhook.ts: routes exactly /telegram/webhook (grammY cloudflare-mod adapter, constant-time secret-token auth against env.WEBHOOK_SECRET) and POST /api/session (validateInitData → 401 category-only rejections → mintSession one-time token; single mint path, no extra branch — T-02-01/02/06) - D-14: the only log statement is '[initdata] rejected: <category>' — no payload, ids, or timestamps - scripts/set-webhook.mjs: setWebhook with secret_token + allowed_updates [message], secrets read from gitignored .dev.vars, token never echoed - bot deploy script chains wrangler deploy + set-webhook; wrangler.jsonc gains workers_dev (webhook URL target); KV id stays placeholder for the deploy checkpoint - verified: 27/27 tests, typecheck clean, wrangler deploy --dry-run exit 0
22 lines
515 B
JSON
22 lines
515 B
JSON
{
|
|
"name": "@araharah/bot",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"test": "node test/runner.mjs",
|
|
"typecheck": "tsc --noEmit",
|
|
"dev": "wrangler dev",
|
|
"deploy": "wrangler deploy && node scripts/set-webhook.mjs",
|
|
"commands": "node scripts/register-commands.mjs"
|
|
},
|
|
"dependencies": {
|
|
"grammy": "^1.46.0"
|
|
},
|
|
"devDependencies": {
|
|
"wrangler": "^4.151.3",
|
|
"typescript": "^5.9.3",
|
|
"@cloudflare/workers-types": "^5.20261022.1",
|
|
"@types/node": "^26.6.5"
|
|
}
|
|
}
|