Keep bot credentials out of durable command results, fail bot deletion closed when session revocation fails, reject invalid scam/fake states at every write boundary, and make direct collectible grants a single replayable PostgreSQL aggregate. Also lock admin gift sender/message limits and add regression coverage for rollback, replay, moderation constraints, and credential redaction. |
||
|---|---|---|
| .. | ||
| web | ||
| main.go | ||
| readstore.go | ||
| server.go | ||
| session.go | ||
| session_test.go | ||