What problem does it solve? Building Telegram bots in 2026 requires navigating four major Bot API releases, a mandatory shift to Telegram Stars for digital goods, dual initData validation paths, and framework churn (Telegraf abandoned, grammY still v1). This Skill encodes the current, research-backed playbook so you don't ship outdated patterns or insecure Mini App authentication. ## Core Features & Use Cases - Framework Selection: Decision tree for grammY v1.x (TypeScript) vs aiogram 3.x (Python), with verified version facts and migration guidance away from abandoned Telegraf. - Webhook & Deployment Setup: HTTPS requirements, allowed ports, secret_token validation, the 409 Conflict polling/webhook mutual exclusion fix, and quantitative webhook-vs-polling thresholds. - Mini Apps Security: Complete HMAC-SHA256 and Ed25519 initData validation algorithms with auth_date expiry checks, plus WebApp JS SDK coverage (MainButton, haptics, CloudStorage). - Telegram Stars Payments: Mandatory XTR flow for digital goods, sendInvoice parameters, the 10-second pre_checkout_query window, and successful_payment fulfillment handlers. - Use Case: You need to launch a paid Telegram Mini App. The Skill walks you through grammY scaffolding, webhook deployment behind nginx, server-side initData validation, and a Stars checkout flow with a pre-launch checklist. ## Quick Start Use the telegram-bot-stinger skill to scaffold a production grammY bot with webhook deployment, validated Mini App initData, and a Stars payment flow.
