0xbyt4 f6736ced81 fix(security): sanitize env and redact output in quick commands + remove write-only _pending_messages ... 1. Quick command exec ran in the gateway process's full environment without env sanitization or output redaction. A quick command like "env" or "printenv" would leak all API keys, OAuth tokens, and bot credentials to the messaging user. Fix: apply _sanitize_subprocess_env() before exec and redact_sensitive_text() on output before returning. 2. GatewayRunner._pending_messages was written on every interrupt (lines 1331-1334) but never read or consumed anywhere. The actual interrupt delivery uses adapter._pending_messages (a separate dict). Removed the write-only accumulation to prevent unbounded growth.		2026-05-10 22:12:23 -07:00
..
assets	fix: improve telegram topic mode setup	2026-05-04 12:07:17 -07:00
builtin_hooks	remove: BOOT.md built-in hook (#17093)	2026-04-28 09:50:27 -07:00
platforms	fix(telegram): split-and-deliver oversized edits instead of silent truncation	2026-05-10 22:02:56 -07:00
__init__.py	Enhance CLI with multi-platform messaging integration and configuration management	2026-02-02 19:01:51 -08:00
channel_directory.py	feat: complete plugin platform parity — all 12 integration points	2026-04-29 21:56:51 -07:00
config.py	feat(telegram): native draft streaming via sendMessageDraft (Bot API 9.5+)	2026-05-10 20:02:50 -07:00
delivery.py	fix(gateway): preserve case-sensitive chat IDs in DeliveryTarget.parse	2026-05-01 14:01:26 -07:00
display_config.py	feat(gateway): opt-in cleanup of temporary progress bubbles (#21186)	2026-05-07 05:04:37 -07:00
hooks.py	fix(plugins): register dynamically-loaded modules in sys.modules before exec	2026-04-29 23:34:35 -07:00
mirror.py	fix(gateway): avoid cross-user mirror writes in per-user group sessions	2026-04-26 18:31:24 -07:00
pairing.py	fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)	2026-05-07 07:18:21 -07:00
platform_registry.py	feat(plugins): add standalone_sender_fn for out-of-process cron delivery	2026-05-09 02:56:29 -07:00
restart.py	fix(gateway): address restart review feedback	2026-04-10 21:18:34 -07:00
run.py	fix(security): sanitize env and redact output in quick commands + remove write-only _pending_messages	2026-05-10 22:12:23 -07:00
runtime_footer.py	feat(gateway): opt-in runtime-metadata footer on final replies (#17026)	2026-04-28 06:50:04 -07:00
session.py	refactor(gateway): simplify auto-resume + extend to crash recovery	2026-05-07 05:05:34 -07:00
session_context.py	fix(cron): run due jobs in parallel to prevent serial tick starvation (#13021)	2026-04-20 11:53:07 -07:00
shutdown_forensics.py	feat(gateway): shutdown forensics — non-blocking diag, per-phase timing, stale-unit warning (#23285)	2026-05-10 09:01:51 -07:00
slash_access.py	feat(gateway): per-platform admin/user split for slash commands (salvage of #4443) (#23373)	2026-05-10 12:33:54 -07:00
status.py	fix(gateway): refresh runtime argv metadata	2026-05-09 11:08:23 -07:00
sticker_cache.py	chore: remove ~100 unused imports across 55 files (#3016)	2026-03-25 15:02:03 -07:00
stream_consumer.py	fix(telegram): split-and-deliver oversized edits instead of silent truncation	2026-05-10 22:02:56 -07:00
whatsapp_identity.py	fix(whatsapp_identity): pin identifier regex to ASCII, clarify it's defense-in-depth	2026-04-26 20:48:31 -07:00