Alejandro Gutiérrez a6af0f2154 security(broker): harden telegram bridge for production ...

- Validate JWT signature + expiry in /start (was only decoding, not verifying)
- Constant-time signature comparison in telegram-token.ts (prevent timing attacks)
- Rate limit /tg/token endpoint: 10 requests/hour per IP
- Grammy bot.catch() error handler (prevent unhandled rejections crashing broker)
- Cap WS reconnect attempts at 20 (prevent infinite retry loop)
- Expire stale pendingDMs entries (prevent memory leak)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-09 13:20:59 +01:00

..

broker

security(broker): harden telegram bridge for production

2026-04-09 13:20:59 +01:00

cli

fix(web): correct LinkedIn URL on about page

2026-04-09 13:17:24 +01:00

runner

fix(runner): use python -m for Python MCPs instead of CLI binary

2026-04-08 15:38:31 +01:00

telegram

feat(broker+cli): multi-tenant telegram bridge with 4 entry points

2026-04-09 10:03:11 +01:00

web

fix(web): correct LinkedIn URL on about page

2026-04-09 13:17:24 +01:00