teknium1 2978c23acc fix(gateway): /help and /commands show a gated non-admin only the commands they can run ...

Both catalog handlers called the shared executor without the caller's slash-access
policy, so a non-admin under allow_admin_from saw every admin-only command and then hit
the refusal on each one. The handlers now pass the policy's runnable set (the
/help+/whoami floor plus user_allowed_commands) as `allowed_commands`; gateway_help_lines
filters on it and skill commands are hidden for gated users. Admins and ungated scopes
are unchanged (option absent -> full catalog).

Part of #117217

2026-09-21 01:06:02 -07:00

..

assets

…

builtin_hooks

…

platforms

fix(gateway): human-delay pacing comes from each profile's human_delay config, not process env

2026-09-20 17:01:05 -07:00

relay

fix(relay): echo the routed profile on every outbound frame and follow_up

2026-09-19 02:28:50 -07:00

__init__.py

…

agent_cache_pressure.py

…

AGENTS.md

docs(gateway): identity survives restore, relay, callbacks and thread hops

2026-09-19 02:28:50 -07:00

authz_mixin.py

fix(gateway): a restored lane whose receiving bot is offline delivers nowhere

2026-09-19 02:28:50 -07:00

bot_loop_guard.py

…

browser_control_artifacts.py

…

browser_control_broker.py

…

cgroup_cleanup.py

…

channel_directory.py

fix(send): the 'not configured' error lists the home and sources it consulted

2026-09-18 10:11:14 -07:00

code_skew.py

fix(cron): compare full gateway code identities

2026-09-20 20:13:19 -07:00

config_env.py

…

config_loader.py

…

config.py

fix(discord): accept a pasted channel link at the _resolve_channel chokepoint too

2026-09-20 10:49:49 -07:00

control_socket.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

cwd_placeholder.py

…

dead_targets.py

…

delivery_ledger.py

fix(gateway): share the drift-tolerant start-time comparator across every owner-liveness check

2026-09-20 16:33:19 -07:00

delivery.py

fix(gateway): resolve silence narration filter from config only (#116886)

2026-09-20 17:01:05 -07:00

disk_status.py

…

display_config.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

drain_control.py

…

hooks.py

…

hosted_room_discussion.py

…

hosted_room_driver.py

…

hosted_room_execution_policy.py

…

hosted_room_links.py

…

hosted_room_peer.py

…

hosted_room_policy_checkpoint.py

…

hosted_room_replicas.py

…

hosted_rooms_common.py

…

hosted_rooms_legacy_import.py

…

hosted_rooms.py

…

kanban_watchers_common.py

…

kanban_watchers_dispatcher.py

…

kanban_watchers_notifier.py

fix(kanban): a profile_routes-pinned profile without this platform's adapter delivers via the primary bot

2026-09-20 14:22:58 -07:00

kanban_watchers.py

…

lifecycle_ledger.py

fix(gateway): renew the startup-watchdog lease during the unclean-exit state.db check

2026-09-20 12:18:03 -07:00

media_fetch.py

…

media_policy.py

…

media_repair.py

…

memory_monitor.py

…

memory_status.py

…

message_timestamps.py

…

mirror.py

…

pairing.py

…

platform_registry.py

…

profile_routing.py

fix(gateway): close sender-routing gaps found in review

2026-09-18 22:36:24 -07:00

readiness.py

…

response_filters.py

…

restart_loop_guard.py

…

restart.py

fix(gateway): keep the os.getuid gate the Windows-footgun lint requires

2026-09-20 18:49:23 +05:30

rich_sent_store.py

…

run_adapters.py

fix(gateway): human-delay pacing comes from each profile's human_delay config, not process env

2026-09-20 17:01:05 -07:00

run_agent_cache.py

chore: merge origin/main (resolve website/docs/integrations/providers.md)

2026-09-19 10:47:48 -07:00

run_busy.py

fix(gateway): honor configured slash-command refusal

2026-09-21 01:06:02 -07:00

run_common.py

…

run_config_loaders.py

fix(gateway): human-delay pacing comes from each profile's human_delay config, not process env

2026-09-20 17:01:05 -07:00

run_delivery_queue_watch.py

fix(gateway): drain a restart-safe worker's cron delivery when it is queued, not on the next tick

2026-09-20 15:30:45 -07:00

run_goals.py

refactor(gateway): run_goals resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run_heartbeat_acceptance.py

…

run_heartbeat_restore.py

fix(gateway): routing entries persist the receiving bot; restored lanes deliver through it or fail closed

2026-09-19 02:28:50 -07:00

run_idle_gates.py

…

run_inbound_unauthorized.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

run_inbound.py

fix(gateway): a busy redirect re-anchors the running turn's reply to the redirecting message

2026-09-20 12:48:26 -07:00

run_notifications.py

fix(gateway): suppress the completion send only when the queued lane's send actually landed

2026-09-20 20:14:04 -07:00

run_profile_reconcile.py

fix(gateway): human-delay pacing comes from each profile's human_delay config, not process env

2026-09-20 17:01:05 -07:00

run_shutdown.py

fix(shutdown): track API-server worker lifetime past handler cancellation

2026-09-20 13:20:55 -07:00

run_startup.py

fix(gateway): startup "Agent budget" line reports the enforced max_turns

2026-09-20 17:01:05 -07:00

run_topics.py

refactor(gateway): run_topics resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run_turn_followup_ack.py

…

run_turn_runner_approval_settle.py

…

run_turn_runner_clarify_delivery.py

fix: a clarify card that resolves AMBIGUOUS after the ack window stays armed for the late tap

2026-09-17 09:06:17 -07:00

run_turn_runner.py

fix(gateway): dedupe non-editable interim finals

2026-09-20 18:46:47 -07:00

run_turn.py

fix(gateway): suppress the completion send only when the queued lane's send actually landed

2026-09-20 20:14:04 -07:00

run_voice.py

refactor(gateway): run_voice resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run_watchers.py

refactor(gateway): run_watchers resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run.py

fix(gateway): auto-archive every served profile's store, not just the launch home

2026-09-20 20:13:41 -07:00

runtime_footer.py

feat(gateway): opt-in served_model footer field shows the model that really answered

2026-09-19 10:38:30 -07:00

scale_to_zero.py

…

session_context.py

…

session_db_recovery.py

fix(gateway): persist runtime status off event loop

2026-09-20 18:50:27 +05:30

session_identity.py

fix(gateway): a restored lane whose receiving bot is offline delivers nowhere

2026-09-19 02:28:50 -07:00

session_lifecycle.py

…

session_persistence.py

…

session_recovery.py

fix(gateway): routing entries persist the receiving bot; restored lanes deliver through it or fail closed

2026-09-19 02:28:50 -07:00

session_stall.py

…

session_state.py

fix(gateway): a busy redirect re-anchors the running turn's reply to the redirecting message

2026-09-20 12:48:26 -07:00

session_transcript.py

fix(gateway): stalled-session spool replay probe no longer warns on every append

2026-09-18 10:06:25 -07:00

session.py

fix(gateway): routing entries persist the receiving bot; restored lanes deliver through it or fail closed

2026-09-19 02:28:50 -07:00

shutdown_flush.py

fix(gateway): stalled-session spool replay probe no longer warns on every append

2026-09-18 10:06:25 -07:00

shutdown_forensics.py

fix(gateway): keep the ps column header first in the shutdown diagnostic

2026-09-19 01:31:49 -07:00

shutdown_watchdog.py

refactor(gateway): public kwargs and event-driven flush wait

2026-09-20 18:50:27 +05:30

slash_access.py

fix(gateway): resolve blank chat_type to the gated slash scope

2026-09-19 23:36:24 -07:00

slash_commands_branch_thread.py

feat(gateway): /branch opens a sibling thread by default; --here keeps this chat (#66023)

2026-09-20 13:37:10 -07:00

slash_commands_goals.py

…

slash_commands_login.py

…

slash_commands_model.py

fix(gateway): /model listing also skips the OpenRouter catalog GET and saved-endpoint /models probes

2026-09-20 15:17:14 +05:30

slash_commands_session.py

feat(gateway): /branch opens a sibling thread by default; --here keeps this chat (#66023)

2026-09-20 13:37:10 -07:00

slash_commands_status.py

fix(gateway): /usage falls back to the configured provider when no route is known

2026-09-19 09:40:23 -07:00

slash_commands.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

startup_watchdog.py

…

status_phrases.py

…

status.py

fix(gateway): share the drift-tolerant start-time comparator across every owner-liveness check

2026-09-20 16:33:19 -07:00

sticker_cache.py

…

stream_consumer_fallback.py

fix(streaming): back fallback continuation cut up to last word boundary

2026-09-20 12:17:23 -07:00

stream_consumer_fences.py

…

stream_consumer_think.py

…

stream_consumer_transport.py

fix: slot-busy skipped Telegram edits no longer count as shown text (review follow-up)

2026-09-20 12:17:23 -07:00

stream_consumer.py

fix(streaming): flood-refused edits wait out Telegram's retry_after instead of re-striking inside the penalty

2026-09-20 12:17:23 -07:00

stream_dispatch.py

…

stream_events.py

…

streaming_tts_consumer.py

chore: stack on #115840 to resolve gateway/streaming_tts_consumer.py conflict

2026-09-19 03:35:50 -07:00

systemd_notify.py

…

systemd_stop_mark.py

fix(gateway): mark supervisor-ordered stops as planned so direct systemctl restart exits cleanly

2026-09-20 00:09:14 -07:00

turn_context.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_lease.py

…

wake.py

fix(gateway): wake a served profile's api_server session in-process for background-process completions

2026-09-18 09:46:35 -07:00

warning_notifications.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

whatsapp_identity.py

refactor(send): route WhatsApp mentions through the existing standalone chunker

2026-09-19 00:24:50 +05:30