From e95e522d4dea014c46326d353d9eaaf538d48a79 Mon Sep 17 00:00:00 2001
From: Nexus Agent <agent@local>
Date: Sat, 13 Jun 2026 02:05:27 +0800
Subject: [PATCH] docs(audit): gate checklist for Telegram group chat ID
 detection

---
 ...026-06-13-telegram-chat-id-group-detect.md | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 docs/audit/2026-06-13-telegram-chat-id-group-detect.md

diff --git a/docs/audit/2026-06-13-telegram-chat-id-group-detect.md b/docs/audit/2026-06-13-telegram-chat-id-group-detect.md
new file mode 100644
index 00000000..4dac7854
--- /dev/null
+++ b/docs/audit/2026-06-13-telegram-chat-id-group-detect.md
@@ -0,0 +1,33 @@
+# 审计 — Telegram 群聊 Chat ID 检测
+
+**Changelog**: `docs/changelog/2026-06-13-telegram-chat-id-group-detect.md`
+
+## 审计范围
+
+| 文件 | 变更 | 状态 |
+|------|------|------|
+| `server/api/settings.py` | `_extract_chats_from_telegram_updates`、群聊更新类型 | ☑ |
+| `frontend/src/pages/SettingsPage.vue` | 群聊检测说明与类型标签 | ☑ |
+| `tests/test_settings_telegram.py` | my_chat_member / callback 单测 | ☑ |
+
+## Step 3 规则扫描
+
+| H | 规则 | 结论 |
+|---|------|------|
+| H1 | Token 仍经既有 settings 鉴权 | SAFE — 未改 auth |
+| H2 | getUpdates 仍先清 webhook | SAFE — `_telegram_clear_webhook_if_set` |
+| H3 | 不泄露其他用户 chat | SAFE — 仅返回去重 chat 元数据 |
+| H4 | 群聊隐私模式说明 | SAFE — UI 提示 `/start@Bot` |
+
+## Closure
+
+| H | 判定 | 依据 |
+|---|------|------|
+| H1–H4 | SAFE | `pytest tests/test_settings_telegram.py` 8/8 |
+
+## DoD
+
+- [x] `pytest tests/test_settings_telegram.py` passed
+- [x] changelog / audit
+- [x] 无密钥类 settings 变更
+- [x] 前端 build 由部署脚本执行