lowsense-dev/astralix-tl
Watch
1
0
Fork
You've already forked astralix-tl
 0
Code Issues Pull requests Projects Releases Wiki Activity
Telegram client library for astralix Userbot
9 commits 1 branch 0 tags 432 KiB
  • Python 97.8%
  • CSS 0.8%
  • HTML 0.8%
  • JavaScript 0.6%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
radiocycle 5caa0cbd00 Document the published PyPI package
2026-09-27 01:54:23 +05:00
.github/workflows Prepare PyPI package and trusted publishing workflow 2026-09-27 01:49:49 +05:00
astralixtl Bound MTProto container parsing and aggregate decompression 2026-09-27 00:48:13 +05:00
telethon_generator Create astralix-tl with retained MIT license and security hardening 2026-09-26 20:08:05 +05:00
tests Bound MTProto container parsing and aggregate decompression 2026-09-27 00:48:13 +05:00
.gitignore Create astralix-tl with retained MIT license and security hardening 2026-09-26 20:08:05 +05:00
hatch_build.py Create astralix-tl with retained MIT license and security hardening 2026-09-26 20:08:05 +05:00
LICENSE.md Update modification copyright to LowSense 2026-09-26 22:11:17 +05:00
NOTICE.md Update modification copyright to LowSense 2026-09-26 22:11:17 +05:00
pyproject.toml Prepare PyPI package and trusted publishing workflow 2026-09-27 01:49:49 +05:00
README.md Document the published PyPI package 2026-09-27 01:54:23 +05:00

README.md

astralix-tl

Telegram MTProto client library for astralix Userbot, based on HerokuTL and Telethon.

Repository: https://git.astralix.cc/lowsense-dev/astralix-tl (public). No project Telegram channels or chats.

Install from PyPI

uv pip install astralix-tl==1.0.0

Install from source

uv venv .venv
uv pip install --python .venv/bin/python .

The distribution is named astralix-tl; Python imports use astralixtl:

from astralixtl import TelegramClient

The build generates Telegram types from the included schemas. Build a wheel with uv build --wheel.

Security changes

This fork bounds packet lengths and gzip output, validates MTProto framing and DH responses with checks active under Python optimization, restricts web downloads to public HTTP(S) endpoints with TLS verification and size/time limits, hardens session-file permissions, and inspects renamed session uploads without optional dependencies.

These changes have regression tests in tests/test_security.py. They are a targeted review, not a guarantee that all vulnerabilities have been found. New DH primes and downloads above the configured limits require review. Live Telegram login has not been tested in this revision.

uv pip install --python .venv/bin/python aiohttp
.venv/bin/python -I -m unittest discover -s tests -v
.venv/bin/python -I -O -m unittest discover -s tests -v

License and origins

MIT; see LICENSE.md. Copyright notices for the upstream code and astralix modifications are retained. See NOTICE.md.