6 Commits

Include renames

Author	SHA1	Message	Date
Claude	1484d5265d	refactor: merge BOT_TOKEN + ADDITIONAL_BOT_TOKENS into single BOT_TOKENS env + speed audit ... BOT_TOKENS env: - Single BOT_TOKENS env var (comma-separated) replaces BOT_TOKEN + ADDITIONAL_BOT_TOKENS - Backward compat: falls back to BOT_TOKEN + ADDITIONAL_BOT_TOKENS if BOT_TOKENS unset - Config exposes botTokens: string[] instead of botToken + additionalBotTokens - Updated env.ts, bot-pool.ts, docker-compose.yml, .env.example, CLAUDE.md, all tests Speed audit (S3 -> Telegram upload flow): - Hoisted 5 dynamic await import('../../../db/index') to top-level static imports in s3-controller.ts (3x) and web-api-controller.ts (2x) -> saves module resolution + async overhead on every upload - Removed stale UPLOAD_CONCURRENCY env from docker-compose.yml (already removed from env.ts in prior refactor) Upload flow is already concurrent: - streamBodyToTemp() uses Bun.file(path).writer() — O(1) memory, safe for multi-GB blobs - utils/chunked-storage.ts reads chunks serially but uploads concurrently with inFlight backpressure at effectiveConcurrency * 2 (= 16 with 8 bots) - bot-pool.ts: per-bot PQueue(concurrency=1), 8 bots = 8 concurrent uploads per file, selectBot() picks least-loaded, 429 detection + inner+outer retry loops - TELEGRAM_API_TIMEOUT_MS=120s — ample for 48MB chunks - Infrastructure chunked-storage.ts (DI-based, dead code) has serial upload trap — noted for future cleanup	2026-07-29 15:03:02 +07:00
Claude	f5d56f52d4	chore: fix lint errors — noBannedTypes, import ordering, formatting ... - Replace unsafe 'Function' type in test with ITelegramService interface - Biome auto-fix formatting and import sorting across 8 files Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-29 07:30:31 +07:00
Claude	ea87397801	refactor: remove upload and web-api routes, migrate to new controller structure ... - Deleted `upload.ts` and `web-api.ts` routes, consolidating logic into dedicated controllers. - Updated import paths in tests to reflect new controller structure. - Refactored Telegram API utilities to utilize a bot pool for improved bot management and error handling. - Enhanced environment variable tests to ensure additional bot tokens are correctly populated. - Adjusted S3 bucket configuration tests to align with new controller imports. - Updated Telegram queue implementation to reflect new infrastructure organization.	2026-07-29 07:28:30 +07:00
Claude	667921b100	chore: fix lint errors — duplicate import, unused imports, formatting ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 20:09:42 +07:00
Claude	002492626b	fix: secure SigV4, temp leaks, OOM risk, duplicate migration, and cache issues ... Security fixes: - SigV4 signature comparison now uses crypto.timingSafeEqual (timing attack fix) - AccessKey, region, and HMAC signature all timing-safe - Presigned URL expiry capped at 7 days (AWS spec compliance) - Removed duplicate migration import (dead code) Memory & leak fixes: - Temp file leak in createZip(): cleanup temp file on error in both utils/ and shared/utils/ - OOM risk in web-api/v1 upload: stream File to temp instead of arrayBuffer() - Removed duplicate migration import at startup Performance fixes: - Removed file.arrayBuffer() -> Bun.write() pattern in web-api-controller (stream + hash) Test improvements: - All fixes verified: 74/75 tests pass (1 pre-existing env config test) - S3 auth tests: 7/7 pass after timing-safe fix	2026-07-28 19:33:05 +07:00
Claude	4568644922	fix: correct import paths and add missing protocol files for DDD structure ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:19:45 +07:00