maint: final follow-up cherry-pick #9812 (#9907)

* fix(deps): bump transitive deps for 6 Dependabot + remaining audit vulns on main Same overrides as #9464 (ip-address, hono, fast-uri, socket.io-parser, undici) applied directly to main. Also covers brace-expansion (scoped), js-yaml v4 copies, and mermaid. npm audit: 6→0 vulnerabilities. Closes Dependabot #161-#166. * fix(deps): bump nanoid, dompurify for 2 new Dependabot alerts (#189, #190) Bumps: nanoid ^3.3.17 (was transitive, now overridden), dompurify ^3.4.13 (with monaco-editor scoped override). Closes Dependabot #189, #190. Remaining #182-#188 (js-yaml + mermaid) already closed by #9651 merge — awaiting Dependabot re-scan. npm audit → 0 vulnerabilities. * fix(repo): harden .gitignore to also ignore a _tasks symlink (/_tasks) _tasks is a SEPARATE nested git repo (gitignored). The pattern _tasks/ (trailing slash) ignores only a directory, not a SYMLINK named _tasks. A self-referential _tasks symlink can slip in via git add -A and, once pulled, checkout materializes it over the real _tasks repo (destroying plans/specs/hands-off). Anchored /_tasks ignores the symlink too, preventing re-capture. * feat(telegram): Mini App chat bridge — initData auth, update webhook, chat proxy Implements the Phase-1 slice of the Telegram Mini App integration (docs/proposals/TELEGRAM-MINIAPP.md): - src/lib/telegram/initData.ts — dependency-free WebApp initData HMAC-SHA256 verification (Telegram Bot API spec), with auth_date freshness check. - src/lib/telegram/config.ts — TELEGRAM_BOT_TOKEN / model / API base / timeout env config; token format validation; enabled gate. - src/lib/telegram/botApi.ts — minimal fetch-based Bot API client (sendMessage, editMessageText, setWebhook) + update shape helpers. - src/lib/telegram/chatProxy.ts — maps a Telegram user to a per-user OmniRoute API key (createApiKey, name telegram:<userId>) and proxies prompts through the existing handleChat pipeline. - src/app/api/telegram/update/route.ts — inbound endpoint serving both the Bot API update webhook (/start + chat replies) and the Mini App direct path (initData HMAC verified → 401 on mismatch). Public route prefix; own auth only. - src/app/miniapp/page.tsx — Telegram WebApp SDK chat UI. - Tests: telegram-init-data (7), telegram-botapi (5) — 12/12 pass. - Env docs: TELEGRAM_* vars in .env.example + ENVIRONMENT.md (sync ✓). - Route-validation check: PASS (body validated via Zod). --------- Co-authored-by: diegosouzapw <diegosouzapw@users.noreply.github.com> Co-authored-by: benzntech <bensonkbmca@gmail.com>
2026-08-12 02:02:13 +03:00 · 2026-08-09 09:50:58 -03:00
parent 3d590c310b
commit 0bb17b91c6
14 changed files with 973 additions and 600 deletions
--- a/.env.example
+++ b/.env.example
@@ -67,14 +67,6 @@ DISABLE_SQLITE_AUTO_BACKUP=false
 # Used by: src/shared/utils/rateLimiter.ts
 # Example: redis://localhost:6379 (or redis://redis:6379 in Docker)
 # REDIS_URL=redis://localhost:6379
-# Host interface docker-compose publishes the Redis sidecar on.
-# Default: 127.0.0.1 (loopback only). The compose Redis runs WITHOUT
-# `requirepass`, and app containers reach it over the compose network
-# (redis:6379) — the published port is only for host-side tooling. Setting this
-# to 0.0.0.0 exposes an unauthenticated Redis to your whole LAN.
-# REDIS_BIND_HOST=127.0.0.1
-# Host port for the compose Redis sidecar. Default: 6379.
-# REDIS_PORT=6379

 # ═══════════════════════════════════════════════════════════════════════════════
 # 3. NETWORK & PORTS
@@ -345,18 +337,14 @@ ALLOW_API_KEY_REVEAL=false
 # OMNIROUTE_CHAT_HEAVY_TOOL_COUNT=64
 # Conservative string-size token estimate that classifies a request as heavyweight. Default 32000.
 # OMNIROUTE_CHAT_HEAVY_ESTIMATED_TOKENS=32000
-# Optional opt-in hard message-count cap; excess receives compact-required 413 before
-# compression can run. Unset/0 (the default) means no history cap: heap growth is bounded
-# by OMNIROUTE_CHAT_MAX_HEAVY_IN_FLIGHT and the heap-pressure shed instead. Set a positive
-# value only on memory-constrained deployments that need a hard ceiling.
-# OMNIROUTE_CHAT_HARD_MAX_MESSAGES=0
+# Hard message-count cap; excess receives compact-required 413. Default 800.
+# OMNIROUTE_CHAT_HARD_MAX_MESSAGES=800

 # Hard cap (bytes) for a non-streaming upstream response buffered fully into memory
 # (#5152). Past this the upstream reader is cancelled and the request fails fast
 # instead of growing an unbounded string until the V8 heap is exhausted.
 # Used by: open-sse/handlers/chatCore/nonStreamingResponseBody.ts
 # Default: 67108864 (64 MB)
-# OMNIROUTE_FORWARDING_HEADER_BUDGET_BYTES=768
 # OMNIROUTE_MAX_NONSTREAMING_RESPONSE_BYTES=67108864

 # CORS configuration — controls which cross-origin browser clients can call the API.
@@ -457,13 +445,6 @@ ALLOW_API_KEY_REVEAL=false
 # Default: false
 # OMNIROUTE_PREFER_CLAUDE_CODE_FOR_UNPREFIXED_CLAUDE_MODELS=false

-# Per-model concurrency cap for round-robin combos (#9100).
-# Used by: open-sse/services/comboConfig.ts — the round-robin combo semaphore
-# was hard-capped at 3 concurrent requests per model with no override, which
-# serialized higher-concurrency traffic behind that cap.
-# Validated to >= 1, clamped to <= 32.  |  Default: 3
-# COMBO_CONCURRENCY_PER_MODEL=3
-
 # ═══════════════════════════════════════════════════════════════════════════════
 # 7. URLS & CLOUD SYNC
 # ═══════════════════════════════════════════════════════════════════════════════
@@ -797,16 +778,6 @@ PROVIDER_LIMITS_SYNC_SPACING_MS=1500
 # Disable the proactive recovery scheduler entirely (default: false).
 # OMNIROUTE_DISABLE_CONNECTION_RECOVERY=false

-# Proactive Claude warmup scheduler (#8848): fires a trivial request to opted-in
-# OAuth connections on a cron schedule (America/Los_Angeles) so accounts do not
-# hit the 5-hour sliding window cold. Off by default — set ENABLED=1 and flip
-# per-connection flags in settings.claudeWarmup.connections to activate.
-# Used by: src/lib/warmupScheduler.ts.
-# OMNIROUTE_WARMUP_ENABLED=false
-# OMNIROUTE_WARMUP_CRON="0 7 * * *"
-# OMNIROUTE_WARMUP_CONCURRENCY=3
-# OMNIROUTE_WARMUP_MODEL=
-
 # Background job interval for budget reset checks (ms).  Default: 600000 (10m).
 # Used by: src/lib/jobs/budgetResetJob.ts.  Floor: 10000.
 #OMNIROUTE_BUDGET_RESET_JOB_INTERVAL_MS=600000
@@ -871,12 +842,6 @@ PROVIDER_LIMITS_SYNC_SPACING_MS=1500
 # (>= 3 retrievals = never compressed). 1 disables the ramp (binary skip at the threshold only).
 # Used by: open-sse/services/compression/engines/ccr/index.ts.  Default: 2.
 #COMPRESSION_CCR_RETRIEVAL_RAMP_FACTOR=2
-# CCR durable block store (#9061). The in-memory store loses blocks to LRU eviction, the TTL, a
-# restart, or a retrieve landing on another instance, while the model is told it can retrieve them
-# verbatim. Set to false to keep blocks in memory only, at the cost of that promise. Blocks over
-# 512KB and cloud runtimes are memory-only regardless.
-# Used by: open-sse/services/compression/engines/ccr/index.ts.  Default: true.
-#COMPRESSION_CCR_DURABLE_STORE=true
 # T08/H5 — usage-observed prefix freeze (OPT-IN, default off). When enabled, a system prompt seen
 # >= THRESHOLD times is treated as a stable cacheable prefix and preserved from compression even
 # for providers the static cache-aware heuristic does not recognize (freeze = preserve, never
@@ -1061,17 +1026,6 @@ GITHUB_OAUTH_CLIENT_ID=Iv1.b507a08c87ecfe98
 # VISION_BRIDGE_BASE_URL=
 # VISION_BRIDGE_API_KEY=

-# ── Raycast Pro (local auto-import) ──
-# Raycast Pro AI is a reverse-engineered, unofficial API — local/personal use
-# only (no OAuth client_id/secret; token is captured via macOS Auto-Import
-# from the Keychain + local Raycast SQLite DB, or pasted manually). These
-# vars are optional manual overrides used by open-sse/services/raycast.ts
-# and the direct-probe benchmark script scripts/raycast/usage-benchmark.mjs.
-# RAYCAST_BEARER_TOKEN=
-# RAYCAST_DEVICE_ID=
-# RAYCAST_AID=
-# RAYCAST_SIG_SECRET=
-
 # ─────────────────────────────────────────────────────────────────────────────
 # ⚠️  GOOGLE OAUTH (Antigravity) & OTHER PROVIDERS — REMOTE SERVERS
 # ─────────────────────────────────────────────────────────────────────────────
@@ -1212,17 +1166,6 @@ CURSOR_USER_AGENT="Cursor/3.4"
 # fallback when FETCH_TIMEOUT_MS is unset. Default: 120000 (2 min).
 # OMNIROUTE_DEFAULT_FETCH_TIMEOUT_MS=120000

-# ── Proxy/relay fetch (connection pooling, #9158) ──
-# Used by: open-sse/utils/proxyFetch.ts.
-# A hung relay must fail BEFORE the client/agent timeout (typically 30s) so the
-# caller sees a relay-specific failure instead of a generic upstream timeout.
-# Capped at 29000ms so this timeout always fires first. Default: 25000 (25s).
-# OMNIROUTE_RELAY_FETCH_TIMEOUT_MS=25000
-
-# Shared retry backoff (ms) for the direct/relay/proxy retry-once paths.
-# 0 = retry immediately. Default: 10.
-# OMNIROUTE_RETRY_BACKOFF_MS=10
-
 # ── Firecrawl web-fetch executor ──
 # Point at a self-hosted Firecrawl instance (defaults to the public cloud API).
 # When set to a non-cloud base URL, the API key becomes optional.
@@ -1284,14 +1227,6 @@ CURSOR_USER_AGENT="Cursor/3.4"
 # OMNIROUTE_BROWSER_POOL=on
 # WEB_COOKIE_USE_BROWSER=0

-# ── Adobe Firefly browser sign-in (system Chrome/Edge CDP) ──
-# Used by: open-sse/services/adobeFireflyBrowserLogin.ts. The Firefly login
-# flow drives a real, system-installed Chrome or Microsoft Edge via CDP so the
-# user can sign in interactively; the executable is auto-detected from common
-# install paths per OS. Set this to override that detection (e.g. a portable
-# install or a non-standard path) when auto-detection fails.
-# OMNIROUTE_LOGIN_BROWSER_PATH=
-
 # ── Circuit breaker thresholds and reset windows ──
 # Used by: open-sse/config/constants.ts → src/lib/resilience/settings.ts.
 # Defaults match historical PROVIDER_PROFILES values (post-scaling for
@@ -1403,10 +1338,6 @@ APP_LOG_TO_FILE=true
 # Default: 100000
 # CALL_LOGS_TABLE_MAX_ROWS=100000

-# Force detailed request logging on or off, overriding the dashboard setting.
-# Values: true | false  |  Default: unset (follow dashboard setting)
-# ENABLE_REQUEST_LOGS=false
-
 # Maximum age for orphaned active request log entries before the in-memory
 # pending-request reaper removes them. Accepts milliseconds.
 # Default: 3600000 (1 hour)
@@ -1483,6 +1414,10 @@ APP_LOG_TO_FILE=true
 # Default: ~/.omniroute/plugins/  Override in dev/CI to point at a local plugin tree.
 # OMNIROUTE_PLUGIN_PATH=

+# Allow plugins to request the 'exec' permission (spawn child processes from the
+# plugin worker sandbox). Disabled by default; set to 1 to enable (local operator only).
+# OMNIROUTE_PLUGINS_ALLOW_EXEC=0
+
 # ── Prompt cache (system prompt deduplication) ──
 # Used by: open-sse/services — caches identical system prompts across requests.
 # PROMPT_CACHE_MAX_SIZE=50              # Max cached entries (default: 50)
@@ -1540,15 +1475,6 @@ APP_LOG_TO_FILE=true
 # ═══════════════════════════════════════════════════════════════════════════════
 # 19. MODEL SYNC (Dev)
 # ═══════════════════════════════════════════════════════════════════════════════
-# Enable the models.dev capability sync.  Default: false (opt-in only).
-# Also settable from Dashboard > Settings > AI. This variable wins over that
-# setting whenever it is set to anything non-empty, in either direction, so a
-# deployment can pin the sync on or off without depending on database state
-# surviving a rebuild. Leave it unset to let the dashboard toggle decide.
-# On: 1, true, yes or on (any casing). Any other value is off.
-# Used by: src/lib/modelsDevSync.ts
-# MODELS_DEV_SYNC_ENABLED=false
-
 # Development-time model catalog sync interval in seconds.
 # Used by: src/lib/modelsDevSync.ts
 # Default: 86400 (24 hours)
@@ -1571,14 +1497,6 @@ APP_LOG_TO_FILE=true
 # Default: 86400000 (24 hours)
 # OPENROUTER_CATALOG_TTL_MS=86400000

-# Enrich the dashboard providers list with OpenRouter weekly ranking stats.
-# ON by default; set false to skip the background fetch entirely (#9324).
-# Used by: src/lib/catalog/openrouterProviderStats.ts
-# OPENROUTER_PROVIDER_STATS_ENABLED=true
-# Cache TTL for the OpenRouter provider stats snapshot, in ms.
-# Default: 86400000 (24 hours)
-# OPENROUTER_PROVIDER_STATS_TTL_MS=86400000
-
 # ── Model catalog response shape ──
 # Include display-friendly name fields in /v1/models responses.
 # Disable for clients that expect model IDs only.
@@ -1599,13 +1517,6 @@ APP_LOG_TO_FILE=true
 # DESIGNER_WEB_POLL_TIMEOUT_MS=60000   # Max wait for job completion (default: 60s)
 # DESIGNER_WEB_POLL_INTERVAL_MS=2000   # Poll frequency (default: 2s)

-# ── Adobe Firefly (Image Upscale) ──
-# Base delay (ms) for the submit-retry exponential backoff when Adobe Firefly's
-# upscale job submission is rate-limited. Used by:
-# open-sse/services/adobeFireflyUpscale.ts::submitRetryDelayMs.
-# Default: 8000 (20 under NODE_ENV=test/VITEST/NODE_TEST_CONTEXT).
-# ADOBE_FIREFLY_SUBMIT_BASE_DELAY_MS=8000
-
 # ── AWS Bedrock (Kiro / Audio) ──
 # Region used to construct AWS Bedrock endpoints. Used by:
 # src/lib/providers/validation.ts and open-sse/handlers/audioSpeech.ts.
@@ -1700,26 +1611,6 @@ APP_LOG_TO_FILE=true
 # Used by: src/lib/services/bootstrap.ts, src/app/api/services/mux/_lib.ts
 # MUX_SERVICE_PORT=8322

-# ── Dario embedded service ──
-# Override the host/port the embedded Dario (Claude Code subscription proxy)
-# daemon binds to and is reached at. Always bound to 127.0.0.1 — never
-# configurable to 0.0.0.0. Rarely needed — defaults to 127.0.0.1:3456.
-# Used by: src/lib/services/installers/dario.ts, src/lib/services/bootstrap.ts,
-# src/app/api/services/dario/_lib.ts, src/app/api/services/dario/admin/_lib.ts,
-# open-sse/executors/dario.ts
-# DARIO_HOST=127.0.0.1
-# DARIO_PORT=3456
-
-# ── Dario embedded service ──
-# Override the host/port the embedded Dario (Claude Code subscription proxy)
-# daemon binds to and is reached at. Always bound to 127.0.0.1 — never
-# configurable to 0.0.0.0. Rarely needed — defaults to 127.0.0.1:3456.
-# Used by: src/lib/services/installers/dario.ts, src/lib/services/bootstrap.ts,
-# src/app/api/services/dario/_lib.ts, src/app/api/services/dario/admin/_lib.ts,
-# open-sse/executors/dario.ts
-# DARIO_HOST=127.0.0.1
-# DARIO_PORT=3456
-
 # ── Local hostnames (Docker networking) ──
 # Comma-separated additional hostnames treated as "local" for provider routing.
 # Used by: open-sse/config/providerRegistry.ts — allows Docker service names.
@@ -1952,18 +1843,6 @@ APP_LOG_TO_FILE=true
 # ── Devin CLI binary path ──
 # Used by: open-sse/executors/devin-cli.ts. Default: looked up via PATH.
 # CLI_DEVIN_BIN=devin
-# Agentic bridge-only binary override. The bridge still executes ACP stdio only.
-# CLI_DEVIN_AGENTIC_BIN=devin
-# Required isolated HOME for the agentic Devin child process.
-# DEVIN_AGENTIC_HOME=/home/bridge
-# Bounded ACP turn timeout in milliseconds. Default: 120000.
-# DEVIN_AGENTIC_ACP_TIMEOUT_MS=120000
-# Agentic bridge model aliases. Values must keep the devin-cli-agentic/ prefix.
-# DEVIN_BRIDGE_MODEL=devin-cli-agentic/swe-1-7
-# DEVIN_BRIDGE_SONNET_MODEL=devin-cli-agentic/swe-1-7
-# DEVIN_BRIDGE_OPUS_MODEL=devin-cli-agentic/swe-1-7
-# DEVIN_BRIDGE_HAIKU_MODEL=devin-cli-agentic/swe-1-7
-# DEVIN_BRIDGE_SUBAGENT_MODEL=devin-cli-agentic/swe-1-7

 # ── Command Code (custom CLI) callback ──
 # Local port used for OAuth-style callbacks from the Command Code CLI helper.
@@ -2018,15 +1897,6 @@ APP_LOG_TO_FILE=true
 # CHANGELOG_BASE_REF=origin/release/v0.0.0
 # ALLOW_CHANGELOG_REMOVALS=1

-# ── Remote audio provider nodes ──
-# Used by: src/app/api/v1/_shared/audioProviderNodes.ts — lets the /v1/audio/*
-# routes use an OpenAI-compatible provider node hosted outside localhost.
-# OFF by default: routing audio to a remote host changes egress identity, so it
-# must be an explicit operator decision. Loopback/private nodes (localhost,
-# 127.0.0.1, 172.16-31.x) are always allowed and unaffected by this flag.
-# When enabled, the node authenticates with the API key stored on its connection.
-# AUDIO_REMOTE_PROVIDER_NODES=false
-
 # ── 1Proxy egress pool ──
 # Used by: src/lib/oneproxySync.ts — fetches proxy nodes from the OmniRoute
 # CrofAI 1Proxy service. Disable, override URL, or tune the import quality.
@@ -2234,11 +2104,6 @@ PLAYGROUND_COMPARE_MAX_COLUMNS=4
 # MEMORY_TYPED_DECAY_EPISODIC_DAYS=30           # episodic TTL in days; 0 = episodic immune too
 # MEMORY_TYPED_DECAY_ACCESS_IMMUNITY=3          # access_count >= N → immune; 0 disables access immunity
 # MEMORY_TYPED_DECAY_SWEEP_INTERVAL=0           # periodic sweep interval (seconds); 0 = no periodic sweep
-# ─── Memory Backend Connectors (Generic HTTP) ──────────────────────────────
-# NOTION_API_KEY=
-# NOTION_API_URL=
-# OBSIDIAN_API_KEY=
-# OBSIDIAN_API_URL=
 # AgentBridge + Traffic Inspector (Group A)

 # AgentBridge
@@ -2254,15 +2119,6 @@ INSPECTOR_MAX_BODY_KB=1024
 INSPECTOR_MASK_SECRETS=true
 INSPECTOR_LLM_HOSTS_EXTRA=
 INSPECTOR_INTERNAL_INGEST_TOKEN=
-# Shared secret for identity-preserving internal REST hops (#9260): when an
-# OmniRoute component calls another local OmniRoute route, this token (sent as
-# x-omniroute-internal-service-token) marks the request as internal so the
-# original caller identity is preserved. OPT-IN: unset disables the mechanism.
-# Used by: src/lib/api/internalServiceAuth.ts
-# OMNIROUTE_INTERNAL_SERVICE_TOKEN=
-# File-based variant (secret-file pattern; wins only when the inline var is
-# unset): path to a file whose trimmed content is the token.
-# OMNIROUTE_INTERNAL_SERVICE_TOKEN_FILE=
 # Quota Sharing (Group B — planos 16+22)
 QUOTA_STORE_DRIVER=sqlite              # sqlite | redis
 # QUOTA_STORE_REDIS_URL=               # ex.: redis://localhost:6379 (apenas quando driver=redis)
@@ -2373,11 +2229,6 @@ QUOTA_STORE_DRIVER=sqlite              # sqlite | redis
 # Host port for the 1-click Redis launcher. Default: 6379. Bump if the host
 # already binds 6379. The container's internal port stays 6379.
 # OMNIROUTE_REDIS_HOST_PORT=
-# Host interface the 1-click Redis launcher publishes on. Default: 127.0.0.1
-# (loopback only). The launcher starts Redis WITHOUT a password, so binding
-# 0.0.0.0 hands every host on your LAN an unauthenticated Redis — only widen
-# this if you also set a password on the instance yourself.
-# OMNIROUTE_REDIS_BIND_HOST=
 # Redis image used by the 1-click Redis launcher. Default: redis:7-alpine.
 # Override to redis:8-alpine or a private registry mirror as needed.
 # OMNIROUTE_REDIS_IMAGE=
@@ -2480,37 +2331,20 @@ QUOTA_STORE_DRIVER=sqlite              # sqlite | redis
 # ─────────────────────────────────────────────────────────────────────────────
 # VIBEPROXY_DATA_DIR=

-# ── Internal service auth (management-plane service-to-service calls) ─────────
-# Inline token for internal service authentication; prefer the _FILE variant in
-# containerized deployments so the secret never lands in the environment table.
-# OMNIROUTE_INTERNAL_SERVICE_TOKEN=
-# Path to a file containing the internal service token (overrides the inline var).
-# OMNIROUTE_INTERNAL_SERVICE_TOKEN_FILE=
+# ─────────────────────────────────────────────────────────────────────────────
+# Telegram Mini App (inbound bot webhook + Mini App chat)
+# Used by: src/lib/telegram/*, src/app/api/telegram/update/route.ts
+# ─────────────────────────────────────────────────────────────────────────────
+# Bot token from @BotFather (<numeric_id>:<secret>). Enables the inbound
+# update webhook and doubles as the HMAC secret for Mini App initData
+# verification. When unset, /api/telegram/update returns 503.
+# TELEGRAM_BOT_TOKEN=

-# ═══════════════════════════════════════════════════════════════════════════════
-# 26. RADAR FEED (SELF-HOSTING)
-# ═══════════════════════════════════════════════════════════════════════════════
-# Optional add-on (feature flag RADAR_ENABLED, default off — see feature flag
-# settings, not an env var) that overlays a signed, freshly-curated free-model
-# catalog on top of the release baseline. All four variables below are optional
-# and only needed to point the client at a self-hosted/forked feed or
-# supporter-key flow instead of the default OmniRoute Radar service. Used by:
-# src/lib/radar/sync.ts, src/lib/radar/pinnedKeys.ts, src/lib/radar/links.ts.
+# Model used for Telegram chat replies (default: auto/chat).
+# TELEGRAM_DEFAULT_MODEL=auto/chat

-# Base URL of the Radar feed service. Overrides the built-in default so forks
-# and self-hosters can point at their own signed feed.
-# RADAR_FEED_URL=https://radar.omniroute.online
+# Bot API base URL override (for proxies/self-hosted Bot API servers).
+# TELEGRAM_BOT_API_BASE=https://api.telegram.org

-# Ed25519 public key (base64-DER SPKI or PEM) used to verify the feed
-# signature, replacing the pinned default key. Required when self-hosting a
-# feed signed with a different key pair.
-# RADAR_FEED_PUBKEY=
-
-# URL the dashboard's "I'm a contributor" button opens (GitHub OAuth
-# supporter-key claim flow). No pricing/value lives in this repo — only the
-# link.
-# RADAR_CONTRIBUTOR_CLAIM_URL=https://radar.omniroute.online/auth/github
-
-# URL the dashboard's "Support the project" button opens (payment/plans
-# page). No pricing/value lives in this repo — only the link.
-# RADAR_SUPPORTER_PLANS_URL=https://radar.omniroute.online/planos
+# Timeout (ms) for outbound Bot API calls (sendMessage/setWebhook).
+# TELEGRAM_WEBHOOK_TIMEOUT_MS=60000