beardthelion 3e2d5b66bb fix(gateway): allowlist no longer admits any user_id sharing a '@' localpart ...

_principal_matches_allowlist added user_id.split("@")[0] to the match set
for every platform. The split was written for WhatsApp JIDs, which are now
covered by the scoped alias expansion; on platforms whose user_id is an
email or iMessage handle (google_chat, bluebubbles, email) a bare allowlist
entry "alice" admitted alice@<any domain>. Only fully qualified ids match
outside the platform-scoped aliases.

(cherry picked from commit c583c59a55d04bdf327d85ca63d020276be5fbc5)

2026-09-23 16:20:19 +05:30

..

acp_adapter

…

agent

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

ci

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

computer_use

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

conformance

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

cron

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

dashboard

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

docker

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

e2e

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

evals

test: purge low-value tests, lane py05 (339 removed)

2026-09-23 03:15:26 -07:00

fixtures

…

gateway

fix(gateway): allowlist no longer admits any user_id sharing a '@' localpart

2026-09-23 16:20:19 +05:30

hermes_cli

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

hermes_platform

test: purge low-value tests, lane py14 (360 removed)

2026-09-23 03:15:26 -07:00

hermes_state

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

honcho_plugin

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

install

…

manual

…

monitoring

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

openviking_plugin

test: purge low-value tests, lane py15 (375 removed)

2026-09-23 03:15:26 -07:00

plugins

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

providers

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

scripts

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

secret_sources

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

security

…

skills

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

tools

test: purge low-value tests, lane py19 (370 removed)

2026-09-23 03:15:26 -07:00

tui_gateway

test: purge low-value tests, lane py20 (206 removed)

2026-09-23 03:15:26 -07:00

verify

test: purge low-value tests, lane py20 (206 removed)

2026-09-23 03:15:26 -07:00

website

test: purge low-value tests, lane py20 (206 removed)

2026-09-23 03:15:26 -07:00

__init__.py

…

conftest.py

…

install_ps1_fake_uv.py

…

run_interrupt_test.py

…

test_atomic_json_writers_unified.py

…

test_atomic_replace_symlinks.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_atomic_write_fsync_dir_target.py

…

test_atomic_write_text_metadata.py

…

test_base_url_hostname.py

…

test_basetemp_isolation.py

…

test_batch_runner_checkpoint.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_batch_runner_discard_resume.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_batch_runner_durability.py

…

test_credential_file_permissions.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_dispatch_session_id.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_display_hermes_home.py

…

test_engines_satisfiable.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_fast_safe_load.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_get_tool_definitions_cache_isolation.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_hermes_bootstrap.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_hermes_constants.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_hermes_home_key_cache.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_hermes_home_profile_warning.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_hermes_logging.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_ipv4_preference.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_live_system_guard_self_test.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_live_system_guard.py

…

test_load_yaml_file_readonly.py

…

test_log_isolation.py

…

test_managed_runtime_resolution.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_mcp_serve.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_mini_swe_runner.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_model_forces_max_completion_tokens.py

…

test_model_tools_async_bridge.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_no_shadowed_test_definitions.py

…

test_node_bootstrap_bash.py

…

test_os_marker_gating.py

…

test_packaging_build_guard.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_packaging_metadata.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_packaging_py_modules.py

…

test_project_metadata.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_sanitize_tool_error.py

…

test_scratch_dir.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_scratch_scan_failures.py

…

test_tests_tree_layout.py

…

test_trajectory_compressor_async.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_trajectory_compressor.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00

test_utils_atomic_roundtrip_yaml_save.py

…

test_utils_atomic_writers_deleted_profile.py

…

test_utils_rmtree_readonly.py

…

test_utils_truthy_values.py

…

test_windows_subprocess_no_window_flags.py

…

test_yaml_indent_consistency.py

test: purge low-value tests, lane py16 (624 removed)

2026-09-23 03:15:26 -07:00