Ben Barclay d2c53ff558 feat(relay): WS-only inbound on the gateway adapter (Phase 3) (#48294) ... The connector now delivers inbound (messages + interrupts) over the gateway's OUTBOUND /relay WebSocket, not a signed HTTP POST to an inbound endpoint. The gateway needs no inbound HTTP port — which is what makes hosted gateways (no public IP) able to receive inbound at all. - gateway/relay/adapter.py: connect() wires set_interrupt_inbound_handler( self.on_interrupt) so connector->gateway interrupt_inbound frames bridge into the existing per-session interrupt path (the inbound message handler was already wired). Removed _maybe_start_inbound_receiver() + the _inbound_runner lifecycle — there is no HTTP receiver anymore. - gateway/relay/inbound_receiver.py: deleted (the signed-HTTP InboundDelivery receiver). - gateway/relay/__init__.py: removed relay_inbound_config() (dead with the receiver gone). The delivery key is still set in-process by self-provision for forward-compat but is no longer consumed for inbound. - docs/relay-connector-contract.md: §3 rewritten — inbound is the WS back-channel routed cross-instance via the connector's relay bus; §5 interrupt + §6 auth table updated; the old signed-HTTP-POST + per-tenant-delivery-key-signing path is documented as superseded. gatewayEndpoint noted as passthrough-plane only. Tests: stub_connector grows set_interrupt_inbound_handler + push_interrupt; new test_relay_interrupt case proves connect() wires BOTH inbound handlers and an interrupt_inbound frame over the WS cancels the right session. Removed the HTTP-receiver test; updated the crypto-shedding scan + self-provision delivery-key assertion. 88 relay tests pass. EXPERIMENTAL. Pairs with gateway-gateway (relay bus + WsGatewayDelivery) and the NAS GATEWAY_RELAY_URL stamp. The cross-repo E2E (connector repo) proves the full multi-instance path against this production adapter code.		2026-06-19 09:33:15 +10:00
..
design	docs(profile): update clone-from references	2026-06-13 07:33:58 -07:00
kanban	feat(kanban): gate notifier watcher on dispatch_in_gateway	2026-06-01 20:30:24 -07:00
middleware	fix(middleware): preserve translated downstream failures	2026-06-06 09:26:18 -07:00
observability	feat(observability): observer-grade telemetry hooks + NeMo-Relay plugin	2026-06-03 06:36:46 -07:00
plans	fix(gateway): recover partial Telegram overflow streams	2026-06-10 15:09:35 -07:00
security	docs(security): add network egress isolation guide for Docker deployments (#26385)	2026-05-29 14:09:10 +10:00
hermes-kanban-v1-spec.pdf	feat(kanban): durable multi-profile collaboration board (#17805)	2026-04-30 13:36:47 -07:00
rca-ssl-cacert-post-git-pull.md	fix(ssl): align guard docs and escape hatch	2026-06-13 21:14:32 -07:00
relay-connector-contract.md	feat(relay): WS-only inbound on the gateway adapter (Phase 3) (#48294)	2026-06-19 09:33:15 +10:00