alexyyyander c4dab17ca9 fix(gateway): prevent internal route leakage in chat.send ...

Synthesis of routing fixes from #35321, #34635, and #35356 for internal-client reply safety.

- Require explicit `deliver: true` before inheriting any external delivery route.
- Keep webchat/TUI/UI-origin traffic on internal routing by default.
- Allow configured-main session inheritance only for non-Webchat/UI clients, and honor `session.mainKey`.
- Add regression tests for UI no-inherit, configured-main CLI inherit, and deliver-flag behavior.

Co-authored-by: alexyyyander <alexyyyander@users.noreply.github.com>
Co-authored-by: Octane0411 <88922959+Octane0411@users.noreply.github.com>
Co-authored-by: Linux2010 <35169750+Linux2010@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>

2026-03-04 23:57:35 -06:00

..

acp

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

agents

fix(agents): guard context pruning against malformed thinking blocks (#35146)

2026-03-05 05:52:24 +00:00

auto-reply

style(skills): align formatting cleanup for dedupe changes

2026-03-05 05:11:06 +00:00

browser

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

canvas-host

refactor(tests): dedupe canvas host server setup

2026-03-03 02:53:13 +00:00

channels

Agents: add generic poll-vote action support

2026-03-04 11:36:14 -05:00

cli

Fix gateway restart false timeouts on Debian/systemd (#34874)

2026-03-04 10:52:33 -08:00

commands

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

compat

…

config

feat(slack): add typingReaction config for DM typing indicator fallback (#19816)

2026-03-03 21:07:17 -08:00

cron

cron: unify stale-run recovery and preserve manual-run every anchors (#35363)

2026-03-04 22:12:32 -06:00

daemon

Fix Linux daemon install checks when systemd user bus env is missing (#34884)

2026-03-04 11:54:03 -08:00

discord

style(skills): align formatting cleanup for dedupe changes

2026-03-05 05:11:06 +00:00

docs

…

gateway

fix(gateway): prevent internal route leakage in chat.send

2026-03-04 23:57:35 -06:00

hooks

refactor(hooks): dedupe install parameter wiring

2026-03-03 01:06:00 +00:00

i18n

fix(security): avoid prototype-chain account path checks (#34982)

2026-03-04 17:38:09 -08:00

imessage

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

infra

fix: restore auto-reply system events timeline (#34794) (thanks @anisoptera) (#34794)

2026-03-05 07:56:14 +05:30

line

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

link-understanding

…

logging

build: fix ineffective dynamic imports with lazy boundaries (#33690)

2026-03-03 20:14:41 -05:00

markdown

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

media

security: add X-Content-Type-Options nosniff header to media route (#30356)

2026-03-03 13:35:46 -08:00

media-understanding

build: prevent mixed static/dynamic pi-model-discovery imports

2026-03-03 21:27:14 -05:00

memory

fix(memory): serialize local embedding initialization to avoid duplicate model loads (#15639)

2026-03-04 10:09:03 -05:00

node-host

fix(node-host): sync rawCommand with hardened argv after executable path pinning (#33137)

2026-03-04 11:30:33 -05:00

pairing

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

plugin-sdk

fix(daemon): handle systemctl is-enabled exit 4 (not-found) on Ubuntu (#33634)

2026-03-04 16:13:45 +00:00

plugins

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

process

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

providers

refactor: dedupe agent and browser cli helpers

2026-03-03 00:15:00 +00:00

routing

fix(telegram): address PR review comments

2026-03-04 09:35:53 +05:30

scripts

test(ci): add changed-scope shell-injection regression

2026-03-03 03:34:51 +00:00

secrets

docs: fix secretref marker rendering in credential surface

2026-03-03 15:08:41 -06:00

security

fix(security): avoid prototype-chain account path checks (#34982)

2026-03-04 17:38:09 -08:00

sessions

fix: add runtime.events regression tests (#16044) (thanks @scifantastic)

2026-03-03 01:37:56 +00:00

shared

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

signal

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

slack

fix(slack): route system events to bound agent sessions (#34045)

2026-03-04 08:44:07 -05:00

telegram

refactor(telegram): remove unused webhook callback helper (#27816)

2026-03-05 10:10:09 +05:30

terminal

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

test-helpers

…

test-utils

plugins: avoid peer auto-install dependency bloat (#34017)

2026-03-03 22:00:15 -08:00

tts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

tui

fix(tui): normalize session key to lowercase to match gateway canonicalization (#34013)

2026-03-04 09:53:38 +03:00

types

…

utils

fix(routing): unify session delivery invariants for duplicate suppression (#33786)

2026-03-03 21:40:38 -06:00

web

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

whatsapp

refactor: dedupe channel outbound and monitor tests

2026-03-03 00:15:15 +00:00

wizard

feat(web-search): switch Perplexity to native Search API (#33822)

2026-03-03 22:57:19 -06:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974)

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): correct awk quoting in Docker GPG fingerprint check (#32153)

2026-03-03 02:32:46 +00:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

version.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00