4 Commits

Include renames

Author	SHA1	Message	Date
Claude	ea87397801	refactor: remove upload and web-api routes, migrate to new controller structure ... - Deleted `upload.ts` and `web-api.ts` routes, consolidating logic into dedicated controllers. - Updated import paths in tests to reflect new controller structure. - Refactored Telegram API utilities to utilize a bot pool for improved bot management and error handling. - Enhanced environment variable tests to ensure additional bot tokens are correctly populated. - Adjusted S3 bucket configuration tests to align with new controller imports. - Updated Telegram queue implementation to reflect new infrastructure organization.	2026-07-29 07:28:30 +07:00
Claude	667921b100	chore: fix lint errors — duplicate import, unused imports, formatting ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 20:09:42 +07:00
Claude	002492626b	fix: secure SigV4, temp leaks, OOM risk, duplicate migration, and cache issues ... Security fixes: - SigV4 signature comparison now uses crypto.timingSafeEqual (timing attack fix) - AccessKey, region, and HMAC signature all timing-safe - Presigned URL expiry capped at 7 days (AWS spec compliance) - Removed duplicate migration import (dead code) Memory & leak fixes: - Temp file leak in createZip(): cleanup temp file on error in both utils/ and shared/utils/ - OOM risk in web-api/v1 upload: stream File to temp instead of arrayBuffer() - Removed duplicate migration import at startup Performance fixes: - Removed file.arrayBuffer() -> Bun.write() pattern in web-api-controller (stream + hash) Test improvements: - All fixes verified: 74/75 tests pass (1 pre-existing env config test) - S3 auth tests: 7/7 pass after timing-safe fix	2026-07-28 19:33:05 +07:00
Claude	4568644922	fix: correct import paths and add missing protocol files for DDD structure ... Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-07-28 18:19:45 +07:00