Vincent Koc 563a125c66 fix(gateway): stop shared-main chat.send from inheriting stale external routes (#38418) ...

* fix(gateway): prevent webchat messages from cross-routing to external channels

chat.send always originates from the webchat/control-UI surface.  Previously,
channel-scoped session keys (e.g. agent:main:slack:direct:U…) caused
OriginatingChannel to inherit the session's stored external route, so the
reply dispatcher would route responses to Slack/Telegram instead of back to
the gateway connection.  Remove the route-inheritance logic from chat.send and
always set OriginatingChannel to INTERNAL_MESSAGE_CHANNEL ("webchat").

Closes #34647

Made-with: Cursor

* Gateway: preserve configured-main connect gating

* Gateway: cover connect-without-client routing

* Gateway: add chat.send session key length limit

* Gateway: cap chat.send session key schema

* Gateway: bound chat.send session key parsing

* Gateway: cover oversized chat.send session keys

* Update CHANGELOG.md

---------

Co-authored-by: SidQin-cyber <sidqin0410@gmail.com>

2026-03-06 21:59:08 -05:00

..

agent-job.ts

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

agent-timestamp.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-wait-dedupe.test.ts

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

agent-wait-dedupe.ts

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

agent.test.ts

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

agent.ts

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

agents-mutate.test.ts

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

AGENTS.md

Gateway: fix post-compaction amnesia for injected messages (#12283)

2026-02-08 23:07:31 -06:00

agents.ts

fix(ci): tighten type signatures in gateway params validation

2026-03-03 03:04:13 +00:00

attachment-normalize.ts

refactor(gateway): share rpc attachment normalization

2026-02-15 13:30:42 +00:00

base-hash.ts

refactor(gateway): reuse shared validators + baseHash

2026-02-16 01:19:01 +00:00

browser.profile-from-body.test.ts

fix: test browser.request profile body fallback (#28852) (thanks @Sid-Qin)

2026-03-02 06:26:35 +00:00

browser.ts

fix(gateway): honor browser profile from request body for node proxy calls

2026-03-02 06:26:35 +00:00

channels.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

chat-transcript-inject.ts

refactor: extract gateway transcript append helper

2026-02-22 14:44:19 +00:00

chat.abort-persistence.test.ts

test(gateway): dedupe update and chat abort persistence fixtures

2026-02-18 12:43:54 +00:00

chat.directive-tags.test.ts

fix(gateway): stop shared-main chat.send from inheriting stale external routes (#38418)

2026-03-06 21:59:08 -05:00

chat.inject.parentid.test.ts

refactor: extract gateway transcript append helper

2026-02-22 14:44:19 +00:00

chat.test-helpers.ts

fix: stabilize flaky tests and sanitize directive-only chat tags

2026-02-22 12:19:33 +01:00

chat.ts

fix(gateway): stop shared-main chat.send from inheriting stale external routes (#38418)

2026-03-06 21:59:08 -05:00

CLAUDE.md

fix: remove trailing newline from CLAUDE.md symlink target (#21160)

2026-02-22 12:40:06 -05:00

config.ts

Gateway: add path-scoped config schema lookup (#37266)

2026-03-06 02:50:48 -05:00

connect.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

cron.ts

fix(cron): add audit logging for job create/update/remove (openclaw#25090) thanks @MoerAI

2026-03-01 06:55:48 -06:00

devices.ts

fix: Device Token Scope Escalation via Rotate Endpoint (#20703)

2026-02-20 17:38:58 +00:00

doctor.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

doctor.ts

fix(doctor): use gateway health status for memory search key check (#22327)

2026-02-23 14:07:16 -05:00

exec-approval.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

exec-approvals.ts

refactor(gateway): dedupe exec approvals node validation

2026-02-18 23:09:09 +00:00

health.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

models.ts

TUI: filter model picker to allowlisted models

2026-02-21 19:03:15 -08:00

nodes.canvas-capability-refresh.test.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

nodes.handlers.invoke-result.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

nodes.helpers.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

nodes.invoke-wake.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

nodes.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

push.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

push.ts

Gateway: add APNs push test pipeline (#20307)

2026-02-18 19:32:42 +00:00

restart-request.ts

refactor(gateway): share restart request parsing

2026-02-16 01:21:54 +00:00

secrets.test.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

secrets.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

send.test.ts

refactor: dedupe channel and gateway surfaces

2026-03-02 19:57:33 +00:00

send.ts

refactor: unify outbound session context wiring

2026-02-26 21:03:28 +01:00

server-methods.test.ts

fix: kill stuck ACP child processes on startup and harden sessions in discord threads (#33699)

2026-03-04 10:52:28 +01:00

sessions.ts

feature(context): extend plugin system to support custom context management (#22201)

2026-03-06 05:31:59 -08:00

skills.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

skills.update.normalizes-api-key.test.ts

chore: Fix types in tests 38/N.

2026-02-17 15:50:07 +09:00

system.ts

refactor: centralize presence routing and version precedence coverage (#19609)

2026-02-18 00:02:51 -05:00

talk.ts

feat(talk): add provider-agnostic config with legacy compatibility

2026-02-24 15:02:52 +00:00

tools-catalog.test.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

tools-catalog.ts

Gateway: suppress tools.catalog plugin conflict diagnostics

2026-02-23 00:05:57 -06:00

tts.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

types.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

update.test.ts

test(core): use lightweight clears in update, child adapter, and copilot token setup

2026-02-22 08:01:16 +00:00

update.ts

style: format gateway server methods

2026-02-19 13:32:58 +00:00

usage.sessions-usage.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

usage.test.ts

Issue 17774 - Usage - Local - Show data from midnight to midnight of selected dates for browser time zone (AI assisted) (openclaw#19357) thanks @huntharo

2026-02-20 20:09:03 -06:00

usage.ts

refactor(core): extract shared usage, auth, and display helpers

2026-03-02 08:54:20 +00:00

validation.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

voicewake.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

web.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

wizard.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00