Fix small hardening issues across logging media and errors

Fix docs gaps and drop duplicated lang strings

Align daily quota accounting across draw TTS and 429 paths

Cap Pollinations image reads and tie timeout to draw budget

Block banned users in user commands and lang callback

Merge trigger, pick-request and image-model tests into parametrized cases

Fix selftest cooldown on fresh boot

Exclude dead nex-mini from free route, redact org IDs

Fix review findings on ban bypass, probe parity, eval gap

Add owner ban commands, dependabot PR cap, seed docs

Quarantine models after 3 bad responses until quota day ends

Add owner-only /selftest route-head probe with quota accounting

Refuse gemini-only media early, cache build version

Fix review findings on limits and stats

Fix stats activity clock and expand diagnostics

Disclose group history use in start and README

Media lows: safe mime suffix, exact game forms, ext map, WAV check, album skip log, mg cap (A6-5..A6-11, A1-5)

Route draw/tts via _tg_call; honor RetryAfter, no 4xx retry; scrub error texts (A8-01..A8-05, A8-08)

Fix regressions found by adversarial review: routing, rendering, rate limits

Docs and tests wave 7: routing description matches reality, stronger assertions instead of or-chains, document the deliberate drop_pending_updates tradeoff

Quality wave 5: summarizing history trim in streaming, LaTeX parity between render paths, rate limit before state/album downloads, parity tests

Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN

Security: validate pick before pop (foreign tap no longer burns token), SSRF guard on download hosts

UX batch: start examples, pick reissue on expired tap, TTS multi-part, reset doc fix

Claude-parity fixes: callback filters for pick buttons, inline numbered-list splitter in both render paths, prompt ban on glued lists

Luna audit round 2: review fixes (regex bounds, mixed albums, redaction guards)

Luna audit fixes: album lock, multilingual routing, streaming budget, quota and persistence hardening

stats: active chats counted over trailing 24h, total kept

Style: informal ty in Russian tiktok strings, regression test

stats goes pro: hide idle models, per-provider totals and remaining quota

Fix prod outage: single bot module namespace + skip fil locale in setMyCommands

Move tests to tests/ and proxy to proxy/, update CI and docs paths