630a585178ab2421edb20f609257f6c2d06334ab
Gitea's X-Gitea-Signature header contains raw hex HMAC-SHA256. GitHub's X-Hub-Signature-256 uses the sha256= prefix. verifySignature now normalises both formats to raw hex before timingSafeEqual comparison, so pushes from Gitea trigger deploys.
Description
Timmy Tower World — sovereign AI agent economy
Languages
TypeScript
68.9%
JavaScript
15.5%
Shell
10.6%
HTML
4.5%
CSS
0.4%