iTzAYDiN-BOT V8 Commerce — Build Audit
========================================
Base: user-provided iTzAYDiN-BOT V7 ARCHITECT
Version: 8.0.0-commerce

Scope
-----
- Optional multi-site Website Connector
- Signed Website ↔ Bot API
- Commerce product/order/customer ledger
- Product parameters (before/after payment)
- Payment Bridge status sync without exposing gateway credentials
- Telegram admin notifications for website orders/payments/parameters
- Telegram customer notifications when Telegram ID is linked
- Web Commerce Hub
- Telegram Commerce Hub
- Fulfillment queue + PasarGuard reseller automatic fulfillment
- Website PHP integration SDK + signed webhook example
- Minimal installer: no extra website/domain/API fields
- Required @itzaydin support notice for website integration

Security
--------
- Per-site API key stored as SHA-256 hash
- Webhook secret encrypted at rest
- Runtime master key generated in storage/.commerce_master.key
- 5-minute signed timestamp freshness window
- Order idempotency via external_order_id
- Local product price/currency enforced server-side
- No personal owner domain/IP/API key hard-coded
- No Telegram bot token-looking secret detected in non-vendor release files
- Gateway credentials are never exposed through Commerce API

Validation
----------
PHP: 238 files, 0 syntax errors
JavaScript: 43 files, 0 syntax errors
JSON: 6 files, 0 parse errors
install.sh: PASS
Private-domain scan: 0 matches
Telegram-token-like scan: 0 matches
Commerce API structural smoke: PASS
PasarGuard reseller worker structural smoke: PASS
Support notice check: PASS

Diff from supplied V7 (non-vendor)
----------------------------------
Added files: 13 (including this audit)
Changed existing files: 10
Removed existing files: 0

Operational note
----------------
Back up database and config.php before upgrade.
Once storage/.commerce_master.key is generated, keep it in private server backups; connector secrets cannot be decrypted after migration without the same key.
