liuhao1024 3e8fe26a2e fix(gateway): enter the secondary profile scope per callback, not from a configure-time snapshot ...

Review feedback (#120650): the prebuilt secret scope froze the profile's
`.env` at configure time, so an operator's runtime TELEGRAM_ALLOWED_USERS
edit reached the next text message (per-message scope re-read) but not the
next button tap, and it skipped hydrate_profile_secret_sources. Enter the
owning profile's runtime scope per call via _scope_or_null — the exact
pattern every sibling secondary handler already uses — so taps and messages
share one freshness and hydration story, and an unresolvable profile home
still binds nothing (fail-closed).

2026-09-26 06:41:34 +05:30

..

assets

…

builtin_hooks

…

platforms

fix(gateway): publish API server heartbeat and metrics after bind

2026-09-25 17:53:43 -05:00

relay

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

__init__.py

fix(pm): preserve runtime and user state across failure paths

2026-09-09 15:17:08 -04:00

agent_cache_pressure.py

fix: read text files with encoding=utf-8-sig in code merged from main

2026-09-19 01:38:09 -04:00

AGENTS.md

fix(profiles): pin the launch home so a mirrored HERMES_HOME cannot flip routed-profile decisions

2026-09-23 08:09:47 -07:00

authz_mixin.py

fix(gateway): allowlist no longer admits any user_id sharing a '@' localpart

2026-09-23 16:20:19 +05:30

bot_loop_guard.py

fix(gateway): count each bot message once in the loop guard and consume the author variable

2026-09-10 10:27:07 -07:00

browser_control_artifacts.py

…

browser_control_broker.py

…

cgroup_cleanup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

channel_directory.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

code_skew.py

fix(cron): compare full gateway code identities

2026-09-20 20:13:19 -07:00

config_env.py

fix(gateway): bridge webhook env settings for config enablement

2026-09-23 06:03:10 -07:00

config_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

control_socket.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

cwd_placeholder.py

…

dead_targets.py

…

delivery_ledger.py

fix(gateway): a crash no longer re-answers every recently active chat

2026-09-23 14:55:08 -07:00

delivery.py

fix(gateway): resolve silence narration filter from config only (#116886)

2026-09-20 17:01:05 -07:00

disk_status.py

…

display_config.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

drain_control.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

hooks.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-12 02:11:24 -04:00

host_attach.py

refactor(gateway): trim the --replace ownership prose and reuse _migrate_command

2026-09-24 13:58:24 +05:30

host_rendezvous.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

host_topology.py

fix(host-topology): a createTime-null record is not a live gateway, and the restart we print must run

2026-09-21 05:06:45 -07:00

hosted_room_discussion.py

fix: share the control-frame opener list and cover [System:/[IMPORTANT:/[PRIOR CONTEXT/[CONTEXT SUMMARY]

2026-09-15 19:04:59 -07:00

hosted_room_driver.py

…

hosted_room_execution_policy.py

fix: RoomLink catalog names the served profile and reads its policy from that profile

2026-09-21 02:08:18 -07:00

hosted_room_links.py

…

hosted_room_peer.py

fix: RoomLink catalog names the served profile and reads its policy from that profile

2026-09-21 02:08:18 -07:00

hosted_room_policy_checkpoint.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_room_replicas.py

…

hosted_rooms_common.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_rooms_legacy_import.py

fix(gateway): pre-isolation room import copies per room, reads pre-actor layouts, warns once

2026-09-17 00:15:35 -07:00

hosted_rooms.py

fix(gateway): pre-isolation room import copies per room, reads pre-actor layouts, warns once

2026-09-17 00:15:35 -07:00

kanban_watchers_common.py

…

kanban_watchers_dispatcher.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

kanban_watchers_notifier.py

fix(kanban): a profile_routes-pinned profile without this platform's adapter delivers via the primary bot

2026-09-20 14:22:58 -07:00

kanban_watchers.py

fix(kanban): text dispatch output and both "dispatcher stuck" warnings name the hold reason

2026-09-15 18:34:11 -07:00

lifecycle_ledger.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

media_fetch.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_policy.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_repair.py

…

memory_monitor.py

…

memory_status.py

…

message_timestamps.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

mirror.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

pairing.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

platform_registry.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

profile_routing.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 01:43:50 -04:00

readiness.py

perf(gateway): parse readiness and bundled-manifest YAML with the C loader

2026-09-23 21:26:49 +05:30

response_filters.py

fix(gateway): scheduled heartbeats end silently, emit no progress and quote no stale message

2026-09-16 17:23:01 -07:00

restart_loop_guard.py

…

restart.py

fix(gateway): every launchd-identity reader accepts the wrapper-forwarded label

2026-09-23 07:48:32 -07:00

rich_sent_store.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

run_adapters.py

fix(gateway): enter the secondary profile scope per callback, not from a configure-time snapshot

2026-09-26 06:41:34 +05:30

run_agent_cache.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

run_busy.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:13:26 -04:00

run_common.py

…

run_config_loaders.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

run_delivery_queue_watch.py

fix(gateway): drain a restart-safe worker's cron delivery when it is queued, not on the next tick

2026-09-20 15:30:45 -07:00

run_goals.py

fix(multiplex): close the profile-scope holes the scope machinery misses

2026-09-21 02:58:40 -07:00

run_heartbeat_acceptance.py

fix: keep admitted heartbeats in their owning conversation

2026-09-07 14:16:57 -07:00

run_heartbeat_restore.py

refactor(gateway): share the profile-scope key between scope entry and heartbeat restore

2026-09-22 16:15:34 +05:30

run_idle_gates.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

run_inbound_unauthorized.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

run_inbound.py

fix(gateway): a crash no longer re-answers every recently active chat

2026-09-23 14:55:08 -07:00

run_notifications.py

fix(gateway): stop anchoring synthetic process notifications to the stale trigger message (#123097)

2026-09-25 21:28:55 +00:00

run_plugin_rewire.py

feat(plugins): late-loaded plugins wire their platform handlers live (#87770)

2026-09-22 09:50:22 -07:00

run_profile_reconcile.py

feat(gateway): stop, start and restart one profile under the host multiplexer

2026-09-23 08:25:28 -07:00

run_shutdown.py

fix(processes): persist_on_release keeps background jobs alive across lifecycle kill sweeps (#41225)

2026-09-25 13:49:31 -05:00

run_startup.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

run_topics.py

refactor(gateway): run_topics resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run_turn_followup_ack.py

fix(gateway): fire processing hooks for runner-drained queued follow-ups (#72502, salvage #72503)

2026-09-13 20:52:02 -07:00

run_turn_runner_approval_settle.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

run_turn_runner_clarify_delivery.py

fix: a clarify card that resolves AMBIGUOUS after the ack window stays armed for the late tap

2026-09-17 09:06:17 -07:00

run_turn_runner.py

refactor(gateway): single StreamingConfig.enabled_for gate for both streaming sites (#53697)

2026-09-24 22:31:37 +05:30

run_turn.py

fix(gateway): register the detached hygiene worker with shutdown at submit time

2026-09-25 21:25:57 +05:30

run_voice.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

run_watchers.py

refactor(gateway): run_watchers resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run.py

fix(gateway): do not let a launching profile own the host gateway

2026-09-25 12:01:44 -05:00

runtime_footer.py

feat(gateway): opt-in served_model footer field shows the model that really answered

2026-09-19 10:38:30 -07:00

scale_to_zero.py

…

session_context.py

fix: persist API delegation units once without waking the model

2026-09-09 10:55:32 -07:00

session_db_recovery.py

fix(gateway): persist runtime status off event loop

2026-09-20 18:50:27 +05:30

session_identity.py

fix(gateway): a restored lane whose receiving bot is offline delivers nowhere

2026-09-19 02:28:50 -07:00

session_lifecycle.py

fix(gateway): crash recovery never redelivers a suppressed reply; tz-safe turn marker

2026-09-23 14:55:08 -07:00

session_persistence.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

session_recovery.py

fix(gateway): routing entries persist the receiving bot; restored lanes deliver through it or fail closed

2026-09-19 02:28:50 -07:00

session_stall.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

session_state.py

fix(gateway): a busy redirect re-anchors the running turn's reply to the redirecting message

2026-09-20 12:48:26 -07:00

session_transcript.py

fix(gateway): stalled-session spool replay probe no longer warns on every append

2026-09-18 10:06:25 -07:00

session.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

shutdown_flush.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

shutdown_forensics.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

shutdown_watchdog.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

slash_access.py

fix(gateway): resolve blank chat_type to the gated slash scope

2026-09-19 23:36:24 -07:00

slash_commands_branch_thread.py

feat(gateway): /branch opens a sibling thread by default; --here keeps this chat (#66023)

2026-09-20 13:37:10 -07:00

slash_commands_goals.py

fix(gateway): secondary-profile send_message, notices and /loop wakeups go out via their own bot

2026-09-10 18:17:22 -07:00

slash_commands_login.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

slash_commands_model.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

slash_commands_session.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

slash_commands_status.py

fix(gateway): /usage falls back to the configured provider when no route is known

2026-09-19 09:40:23 -07:00

slash_commands.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

startup_watchdog.py

…

status_phrases.py

fix(pm): isolate bootstrap dependencies and unify YAML on ruamel

2026-09-11 12:23:51 -04:00

status.py

fix(gateway): publish API server heartbeat and metrics after bind

2026-09-25 17:53:43 -05:00

sticker_cache.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

stream_consumer_fallback.py

fix(stream): thread only full fallback resends

2026-09-24 22:28:19 +05:30

stream_consumer_fences.py

…

stream_consumer_think.py

refactor(display): one think-tag list; ACP tool titles derive from agent/display previews

2026-09-13 05:20:26 -07:00

stream_consumer_transport.py

docs(gateway): say the sub-floor segment-break preamble is dropped, not accumulated

2026-09-24 22:27:32 +05:30

stream_consumer.py

refactor(gateway): resolve streaming len budget via guarded _fallback_len_budget

2026-09-24 22:27:32 +05:30

stream_dispatch.py

…

stream_events.py

…

streaming_tts_consumer.py

chore: stack on #115840 to resolve gateway/streaming_tts_consumer.py conflict

2026-09-19 03:35:50 -07:00

systemd_notify.py

…

systemd_stop_mark.py

fix(gateway): mark supervisor-ordered stops as planned so direct systemctl restart exits cleanly

2026-09-20 00:09:14 -07:00

turn_context.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_lease.py

refactor(gateway): drop the write-only one-shot generation stamp; /stop and eviction share _drop_turn_slot

2026-09-12 12:03:39 +05:30

wake.py

fix(gateway): wake a served profile's api_server session in-process for background-process completions

2026-09-18 09:46:35 -07:00

warning_notifications.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

whatsapp_identity.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00