araharah-executor af691ae40e fix(02-bot-skeleton-initdata-security): WR-03 honest rotate-on-new invariant + best-effort post-mint reconciliation (fold in IN-01b dead branch, IN-01c Phase-4 notes)

2026-10-22 20:21:11 +08:00

..

bot

feat(02-03): strings module + text-only command surface with Malay aliases (D-01..D-05)

2026-10-22 11:48:50 +08:00

i18n

feat(02-03): strings module + text-only command surface with Malay aliases (D-01..D-05)

2026-10-22 11:48:50 +08:00

kv

fix(02-bot-skeleton-initdata-security): WR-03 honest rotate-on-new invariant + best-effort post-mint reconciliation (fold in IN-01b dead branch, IN-01c Phase-4 notes)

2026-10-22 20:21:11 +08:00

security

feat(02-02): validateInitData — SubtleCrypto HMAC core with rejection classes (D-13, D-14)

2026-10-22 11:41:46 +08:00

config.ts

fix(02-bot-skeleton-initdata-security): WR-02 fail-closed /telegram/webhook — unarmed WEBHOOK_SECRET rejects (constant 500, category-only log) before grammY's accept-everything compare

2026-10-22 20:18:34 +08:00

webhook.ts

fix(02-bot-skeleton-initdata-security): WR-03 honest rotate-on-new invariant + best-effort post-mint reconciliation (fold in IN-01b dead branch, IN-01c Phase-4 notes)

2026-10-22 20:21:11 +08:00