fix: harden session ID sanitization and improve test coverage - #1202

Closed

jyaunches wants to merge 14 commits into

NVIDIA:mainfrom

jyaunches:fix/telegram-bridge-injection-v2

Commits on Mar 31, 2026

docs: add spec for telegram bridge command injection fix
jyaunches
committed
3a9a5c9
docs: add test specification and validation plan for telegram-bridge-command-injection-fix
jyaunches
committed
069053c
docs: update validation plan to use existing e2e-brev telegram-injection tests
jyaunches
committed
20a368c
docs: update spec to address PR #1092 feedback - E2E tests must exercise real runAgentInSandbox()
jyaunches
committed
6fd3e2c
fix: command injection in telegram bridge via stdin-based message passing
jyaunches
committed
d1fe154
test: add unit tests and update E2E to exercise real runAgentInSandbox()
jyaunches
committed
f23a0b9
docs: mark all spec phases as completed
jyaunches
committed
0972931
fix: enable e2e-brev workflow on fork and fix TypeScript errors
jyaunches
committed
fe2ed0e
fix(e2e): use brev search cpu | brev create for CPU instances
jyaunches
committed
795be08
test: temporarily disable repo check for fork testing
jyaunches
committed
0032aa4
refactor(e2e): remove launchable startup script, use bare brev create + brev-setup.sh
jyaunches
committed
39ef55f
fix: harden session ID sanitization and improve test coverage
jyaunches
committed
25a846e
fix(e2e): use temp file for secrets instead of stdin piping
jyaunches
committed
03a7f6e
refactor(e2e): simplify secret passing — just use env vars
jyaunches
committed
418d2d0