Close ban guest bypass and quarantine echo poisoning

Refuse gemini-only media early, cache build version

Fix review findings on limits and stats

Fix stats activity clock and expand diagnostics

Add per-user daily limits with Gemini fallback

Size caps: 20MB Telegram downloads, album semaphore and total, slideshow post budget, honest too-big reply (D1: A6-1, A4-04, A7-1, A6-2, A6-3)

Test quality: assert TikTok error shown, behavioral SSE/trim tests, explicit no-raise (A9-1, A9-2, A9-6)

Single-source limit scalars; generation-checked chat lock acquisition (A5-8, A5-10)

Media lows: safe mime suffix, exact game forms, ext map, WAV check, album skip log, mg cap (A6-5..A6-11, A1-5)

Message pipeline lows: captioned album main, passive files, reply history, off-loop read, trigger helper, cancel cleanup, empty retry, split throttle, edit-death fallback (A4-06..A4-13, A4-16)

Lock guest path; share route deadline with transcription; trim history with summary; mark blind media fallback (A4-02, A4-03, A4-05, A4-15)

Re-check injection filter after voice transcript; widen identity-leak and normalize prefilter (A3-1, A3-2, A3-3)

Guard state flush on failed startup load; keep failed shutdown writes queued (A5-2, A5-1)

Comment cleanup: short Russian why-comments, no AI boilerplate

Subagent re-review: fix confirmed misses, harden thin tests

Independent re-review: fix missed regressions and close gaps

Fix regressions found by adversarial review: routing, rendering, rate limits

Quality wave 5: summarizing history trim in streaming, LaTeX parity between render paths, rate limit before state/album downloads, parity tests

Medium wave 4: validated env numbers, Upstash backend and shutdown flush tests, deno check/lint in CI, reproducible pip step, docs for missing variables

Reliability wave 3: router skips quota-exhausted models, prune never drops a chat holding the lock

Fix chat-lock hangs: TTS async with timeout, stream handshake capped, route attempts bounded by remaining budget, one shared chat-lock limit

Continue feature: resume interrupted stream answers on bare continue request

Reliability: cap malformed-call retry by route deadline, service quota separation, album buffer cleanup

Luna audit round 2: review fixes (regex bounds, mixed albums, redaction guards)

Luna audit fixes: album lock, multilingual routing, streaming budget, quota and persistence hardening

Fix sticker test lang expectation

Media drops are honest: fetchable attachment failure replies error, entry log for media

Review fixes: real audio suffix, no RU marker, transcript cap

Ideal routing: voice transcribed into scenario routing, OR qwen newcomer in light chain

Qwen audit fixes: aio Gemini client, snapshot-before-thread state flush, drop dead Fish check, utcnow fix

Perf: download album extras in parallel, keep message order

History summarization: compress overflow into summary instead of silent cut

Re-audit fixes: typing-indicator regression test, Deno proxy tests in CI

Comment polish: Russian pro-style comments, keep dated evidence short (+426/-2765). Fix: bot.send_chat_action -> bot.bot.send_chat_action (was AttributeError, typing indicator never showed)

Fix lang reset on restart: keep lang in restored chat state

Fix prod outage: single bot module namespace + skip fil locale in setMyCommands

Move tests to tests/ and proxy to proxy/, update CI and docs paths