Satoshi Qazi Muhammed ad2237bd7e telegram-bot: keep message bodies out of the log, load the keyring alone ...

Every Telegram call logged its full request body and the echoed reply. Those
bodies hold what users write, the assistant's answers and, from the KRD bot's
create-wallet button, the generated seed phrase, so the seed reached the
container log in clear. Calls now log the method and chat id, replies only
whether they failed and why, and incoming updates only their id and kind.

The bot imported @pezkuwi/api to build a Keyring. That package brings in every
type definition and rxjs; each worker spent ~40 s and ~300 MB loading it, and a
worker that expired and was replaced kept adding to the container's memory
until the 1 GB limit killed it after about eight hours. @pezkuwi/keyring is the
same Keyring without the API.

2026-10-22 23:37:49 +04:00

..

index.ts

telegram-bot: keep message bodies out of the log, load the keyring alone

2026-10-22 23:37:49 +04:00