- Add missing imports in gateway sessions test (trackConnectChallengeNonce,
GATEWAY_CLIENT_IDS, GATEWAY_CLIENT_MODES)
- Add X-Frame-Options SAMEORIGIN header to control-ui security headers
- Fix Slack mrkdwn escape test to expect correctly escaped special chars
- Fix macOS symlink path comparison in session fork test using fs.realpath
- Fix onboarding helpers migration test to expect preserved `enabled: true`
- Fix model-selection: use normalizeModelRef instead of parseModelRef for
default model key in buildAllowedModelSet (fixes nested-slash model ids)
- Fix model-selection test expectation to use defaultProvider fallback
- Fix acpx events TypeScript errors and delivery-queue type assertions
- Fix broken docs link in gateway secrets
zooqueen
a05fce2d4f