aaronagent 27ddd8fd80 fix(gateway): sanitize agent error messages, validate webhook gh args ...

Two of the three fixes from PR #6660 (the cli.py reopen_session change is
moot — that raw _conn.execute reopen block no longer exists on main).

- gateway/run.py: stop sending raw type(e).__name__ and str(e)[:300] to
  end users on chat platforms. Exception text from LLM providers can leak
  API URLs, file paths, and partial credentials. Return a generic message;
  keep curated status hints for known HTTP codes; full detail stays in logs.
- gateway/platforms/webhook.py: validate pr_number (positive int) and repo
  (owner/name regex) before passing to the 'gh pr comment' subprocess.
  Payload-controlled values could otherwise inject gh flags (--help, a
  different --repo). List-form subprocess means this is arg injection, not
  shell injection, but validation is still correct.

Co-authored-by: aaronagent <1115117931@qq.com>

2026-06-28 18:53:26 -07:00

..

assets

fix: improve telegram topic mode setup

2026-05-04 12:07:17 -07:00

builtin_hooks

remove: BOOT.md built-in hook (#17093)

2026-04-28 09:50:27 -07:00

platforms

fix(gateway): sanitize agent error messages, validate webhook gh args

2026-06-28 18:53:26 -07:00

relay

feat(relay): multi-platform-per-agent — list identity, provision-loop, N-hello, per-frame egress (Phase 1.5) (#52830)

2026-06-26 17:32:46 +10:00

__init__.py

docs(gateway): mention Weixin in gateway help and docstrings

2026-05-12 17:08:51 -07:00

authz_mixin.py

fix(telegram): apply bot auth policy to Telegram sources

2026-06-28 00:57:03 -07:00

cgroup_cleanup.py

fix: satisfy ruff encoding + windows-footgun lints for cgroup reaper

2026-06-28 02:05:50 -07:00

channel_directory.py

docs(sessions): clarify sessions.json is the gateway routing index, not the session list (#51726)

2026-06-23 23:56:36 -07:00

code_skew.py

fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError

2026-06-24 04:16:54 +05:30

config.py

fix(gateway): make bg-process reset TTL configurable + surface session-scoped processes

2026-06-27 20:45:43 -07:00

delivery.py

fix(delivery): drop env-var knob, flag all chunking adapters

2026-06-22 05:41:22 -07:00

display_config.py

feat(discord): render reasoning as -# subtext via display.reasoning_style (#51168)

2026-06-23 10:44:02 -07:00

drain_control.py

fix(gateway): stamp drain marker with instantiation epoch so a durable-volume restart clears it (NS-570)

2026-06-26 18:59:41 +05:30

hooks.py

feat(hooks): expose thread_id and chat_type in agent:start/end context (#41672)

2026-06-07 19:16:36 -07:00

kanban_watchers.py

fix(kanban): honor kanban.auto_decompose toggle live, without a gateway restart (#50358)

2026-06-21 12:43:44 -07:00

memory_monitor.py

Port from cline/cline#10343: periodic gateway memory logging (#27102)

2026-05-16 12:55:23 -07:00

message_timestamps.py

feat(gateway): inject stable human-readable message timestamps

2026-06-16 15:49:59 -07:00

mirror.py

fix(cron): mirror continuable cron as a labelled user turn (alternation-safe)

2026-06-24 20:27:05 -07:00

pairing.py

fix(gateway): preserve WhatsApp pairing approvals across JID/LID alias flips

2026-05-23 01:46:34 -07:00

platform_registry.py

perf(startup): lazy-load gateway platform adapters (#54448)

2026-06-28 15:11:59 -07:00

response_filters.py

fix(gateway): suppress exact silence tokens without mutating history

2026-06-14 03:25:08 -07:00

restart.py

fix(gateway): exit 78 (EX_CONFIG) on fatal startup errors, s6 finish script stops restart loop

2026-06-24 16:34:51 +10:00

rich_sent_store.py

fix(telegram): resolve replies to rich (sendRichMessage) messages

2026-06-16 13:04:20 -07:00

run.py

fix(gateway): sanitize agent error messages, validate webhook gh args

2026-06-28 18:53:26 -07:00

runtime_footer.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

scale_to_zero.py

feat(gateway): scale-to-zero idle detection + dormant-quiesce (Phase 0)

2026-06-24 18:47:18 -07:00

session_context.py

fix(api-server): stop silently promising async delivery on stateless HTTP path (#50319)

2026-06-21 12:15:14 -07:00

session.py

fix(gateway): preserve sessions across restarts (#54442)

2026-06-28 15:10:39 -07:00

shutdown_forensics.py

chore: ruff auto-fixes — collapsible-else-if, if-stmt-min-max, dict.fromkeys (#23926)

2026-05-11 11:03:29 -07:00

slash_access.py

feat(gateway): per-platform admin/user split for slash commands (salvage of #4443) (#23373)

2026-05-10 12:33:54 -07:00

slash_commands.py

fix(gateway): clear stale base_url on model switches

2026-06-27 21:23:25 -07:00

status.py

fix(windows): cover remaining console-flash spawn legs (#54417)

2026-06-28 13:49:08 -07:00

sticker_cache.py

fix: guard yaml.safe_load, flock unlock, TOCTOU races, and atomic writes

2026-05-19 00:12:41 -07:00

stream_consumer.py

fix(gateway): respect adapter decline of fresh-final to prevent double delivery

2026-06-21 13:55:50 -07:00

stream_dispatch.py

feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)

2026-06-02 00:33:50 -07:00

stream_events.py

feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)

2026-06-02 00:33:50 -07:00

whatsapp_identity.py

fix(whatsapp): resolve LID aliases on modern platforms/ session layout

2026-06-28 02:05:26 -07:00