fix: harden session ID sanitization and improve test coverage#1202

Closed

jyaunches wants to merge 14 commits intoNVIDIA:mainfrom

jyaunches:fix/telegram-bridge-injection-v2

Commits on Mar 31, 2026

docs: add spec for telegram bridge command injection fix
jyaunches
committed
docs: add test specification and validation plan for telegram-bridge-command-injection-fix
jyaunches
committed
docs: update validation plan to use existing e2e-brev telegram-injection tests
jyaunches
committed
docs: update spec to address PR #1092 feedback - E2E tests must exercise real runAgentInSandbox()
jyaunches
committed
fix: command injection in telegram bridge via stdin-based message passing
jyaunches
committed
test: add unit tests and update E2E to exercise real runAgentInSandbox()
jyaunches
committed
docs: mark all spec phases as completed
jyaunches
committed
fix: enable e2e-brev workflow on fork and fix TypeScript errors
jyaunches
committed
fix(e2e): use brev search cpu | brev create for CPU instances
jyaunches
committed
test: temporarily disable repo check for fork testing
jyaunches
committed
refactor(e2e): remove launchable startup script, use bare brev create + brev-setup.sh
jyaunches
committed
fix: harden session ID sanitization and improve test coverage
jyaunches
committed
fix(e2e): use temp file for secrets instead of stdin piping
jyaunches
committed
refactor(e2e): simplify secret passing — just use env vars
jyaunches
committed