teknium1 105568c155 fix(review): a live cross-home gateway.pid is still unlinked on refusal; the held lock stays ...

Dropping the `expected_home is None` clause from the unscoped cleanup branch of
`get_running_pid` re-opened the #89315 poison-file class: a live pid record whose
`hermes_home` names ANOTHER home sat behind a held lock forever and
`tests/hermes_cli/test_cross_profile_kill_refusal.py` went red (the only red in
the PR's Python tests job).

The two rejections are now distinct. A SAME-home record the cmdline matcher
rejects keeps both files (#125610: a dashboard poll must not unlink a live
gateway's pid/lock). A record whose recorded home CONFLICTS with the process
home unlinks the poisoned gateway.pid, never the held gateway.lock
(`_cleanup_invalid_pid_path(unlink_lock=False)`). Scoped polls keep the #106406
contract: nothing is unlinked while a PID is live.

The #89315 test is unchanged; the new invariant test asserts the split (pid
gone, lock kept) and was red on the PR head.

2026-09-28 05:58:01 -07:00

..

assets

…

builtin_hooks

…

platforms

fix(review): key cwd/override records by the session's own profile home; keep /p/<launch>/ ids stable

2026-09-28 04:34:30 -07:00

relay

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

__init__.py

…

agent_cache_pressure.py

fix: read text files with encoding=utf-8-sig in code merged from main

2026-09-19 01:38:09 -04:00

AGENTS.md

fix(profiles): pin the launch home so a mirrored HERMES_HOME cannot flip routed-profile decisions

2026-09-23 08:09:47 -07:00

authz_mixin.py

fix(security): remove mutable display-name from SimpleX allowlist check

2026-09-27 20:47:41 +05:30

bot_loop_guard.py

…

browser_control_artifacts.py

…

browser_control_broker.py

…

cgroup_cleanup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

channel_directory.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

code_skew.py

fix(cron): compare full gateway code identities

2026-09-20 20:13:19 -07:00

config_env.py

fix(gateway): bridge webhook env settings for config enablement

2026-09-23 06:03:10 -07:00

config_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

control_socket.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

cwd_placeholder.py

…

dead_targets.py

…

delivery_ledger.py

fix(gateway): a crash no longer re-answers every recently active chat

2026-09-23 14:55:08 -07:00

delivery.py

fix(gateway): resolve silence narration filter from config only (#116886)

2026-09-20 17:01:05 -07:00

disk_status.py

…

display_config.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

drain_control.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

hooks.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-12 02:11:24 -04:00

host_attach.py

refactor(gateway): trim the --replace ownership prose and reuse _migrate_command

2026-09-24 13:58:24 +05:30

host_rendezvous.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

host_topology.py

fix(host-topology): a createTime-null record is not a live gateway, and the restart we print must run

2026-09-21 05:06:45 -07:00

hosted_room_discussion.py

fix: share the control-frame opener list and cover [System:/[IMPORTANT:/[PRIOR CONTEXT/[CONTEXT SUMMARY]

2026-09-15 19:04:59 -07:00

hosted_room_driver.py

…

hosted_room_execution_policy.py

fix: RoomLink catalog names the served profile and reads its policy from that profile

2026-09-21 02:08:18 -07:00

hosted_room_links.py

…

hosted_room_peer.py

fix: RoomLink catalog names the served profile and reads its policy from that profile

2026-09-21 02:08:18 -07:00

hosted_room_policy_checkpoint.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_room_replicas.py

…

hosted_rooms_common.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_rooms_legacy_import.py

fix(gateway): pre-isolation room import copies per room, reads pre-actor layouts, warns once

2026-09-17 00:15:35 -07:00

hosted_rooms.py

fix(gateway): pre-isolation room import copies per room, reads pre-actor layouts, warns once

2026-09-17 00:15:35 -07:00

kanban_watchers_common.py

…

kanban_watchers_dispatcher.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

kanban_watchers_notifier.py

fix(kanban): a profile_routes-pinned profile without this platform's adapter delivers via the primary bot

2026-09-20 14:22:58 -07:00

kanban_watchers.py

fix(kanban): text dispatch output and both "dispatcher stuck" warnings name the hold reason

2026-09-15 18:34:11 -07:00

lifecycle_ledger.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

media_fetch.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_policy.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_repair.py

…

memory_monitor.py

…

memory_status.py

…

message_timestamps.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

mirror.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

pairing.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

platform_registry.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

profile_routing.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 01:43:50 -04:00

readiness.py

perf(gateway): parse readiness and bundled-manifest YAML with the C loader

2026-09-23 21:26:49 +05:30

response_filters.py

fix(gateway): a turn that answers an addressed message keeps the silence fallback

2026-09-26 07:21:49 +05:30

restart_loop_guard.py

…

restart.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

rich_sent_store.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

run_adapters.py

fix(gateway): skip the executor hop for single-profile watcher scope resolves

2026-09-27 18:30:25 +05:30

run_agent_cache.py

refactor(gateway): move the prompt-pin store API into a session sibling

2026-09-28 15:54:07 +05:30

run_busy.py

fix(gateway): steering an addressed message into a running turn keeps the silence fallback

2026-09-26 07:21:49 +05:30

run_common.py

…

run_config_loaders.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

run_delivery_queue_watch.py

fix(gateway): drain a restart-safe worker's cron delivery when it is queued, not on the next tick

2026-09-20 15:30:45 -07:00

run_goals.py

fix(gateway): skip the executor hop for single-profile watcher scope resolves

2026-09-27 18:30:25 +05:30

run_heartbeat_acceptance.py

…

run_heartbeat_restore.py

refactor(gateway): share the profile-scope key between scope entry and heartbeat restore

2026-09-22 16:15:34 +05:30

run_idle_gates.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

run_inbound_unauthorized.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

run_inbound.py

fix(gateway): publish plugin injector across profiles

2026-09-28 05:24:26 -07:00

run_notifications.py

fix(delegation): restore durable completions on first consume, not on import (#123265, salvage #123348, #123298)

2026-09-28 05:37:55 -07:00

run_plugin_rewire.py

feat(plugins): late-loaded plugins wire their platform handlers live (#87770)

2026-09-22 09:50:22 -07:00

run_profile_reconcile.py

feat(gateway): stop, start and restart one profile under the host multiplexer

2026-09-23 08:25:28 -07:00

run_shutdown.py

fix(gateway): stop notice reaches every served profile's home channel via its own bot (#118233, salvage #118408)

2026-09-28 04:34:30 -07:00

run_startup.py

fix(gateway): auto-resume freshness survives a DST change

2026-09-28 18:20:39 +05:30

run_topics.py

refactor(gateway): run_topics resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run_turn_followup_ack.py

fix(gateway): fire processing hooks for runner-drained queued follow-ups (#72502, salvage #72503)

2026-09-13 20:52:02 -07:00

run_turn_runner_approval_settle.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

run_turn_runner_clarify_delivery.py

fix: a clarify card that resolves AMBIGUOUS after the ack window stays armed for the late tap

2026-09-17 09:06:17 -07:00

run_turn_runner.py

fix(gateway): read a routed profile's store in the cached agent's dead-session check

2026-09-28 04:34:30 -07:00

run_turn.py

fix(gateway): rehydrate prompt pins off the event loop

2026-09-28 15:54:07 +05:30

run_voice.py

fix(gateway): do not auto-TTS A2A replies

2026-09-27 06:54:56 -05:00

run_watchers.py

refactor(gateway): run_watchers resolves adapters through the intake/delivery seams

2026-09-19 01:28:23 -07:00

run.py

fix(gateway): reopen a session DB handle the registry tore down

2026-09-28 04:34:30 -07:00

runtime_footer.py

feat(gateway): opt-in served_model footer field shows the model that really answered

2026-09-19 10:38:30 -07:00

scale_to_zero.py

…

session_context.py

…

session_db_recovery.py

fix(gateway): reopen a session DB handle the registry tore down

2026-09-28 04:34:30 -07:00

session_identity.py

fix(gateway): a restored lane whose receiving bot is offline delivers nowhere

2026-09-19 02:28:50 -07:00

session_lifecycle.py

fix(gateway): read a routed profile's store in the cached agent's dead-session check

2026-09-28 04:34:30 -07:00

session_persistence.py

fix(gateway): compression-crash recovery keeps the prompt pin

2026-09-28 15:54:07 +05:30

session_prompt_pin.py

refactor(gateway): move the prompt-pin store API into a session sibling

2026-09-28 15:54:07 +05:30

session_recovery.py

fix(gateway): routing entries persist the receiving bot; restored lanes deliver through it or fail closed

2026-09-19 02:28:50 -07:00

session_stall.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

session_state.py

fix(gateway): durable prompt pins never outlive their privacy policy

2026-09-28 15:54:07 +05:30

session_transcript.py

fix(gateway): stalled-session spool replay probe no longer warns on every append

2026-09-18 10:06:25 -07:00

session.py

refactor(gateway): move the prompt-pin store API into a session sibling

2026-09-28 15:54:07 +05:30

shutdown_flush.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

shutdown_forensics.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

shutdown_watchdog.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

slash_access.py

fix(gateway): resolve blank chat_type to the gated slash scope

2026-09-19 23:36:24 -07:00

slash_commands_branch_thread.py

feat(gateway): /branch opens a sibling thread by default; --here keeps this chat (#66023)

2026-09-20 13:37:10 -07:00

slash_commands_goals.py

…

slash_commands_login.py

…

slash_commands_model.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

slash_commands_session.py

fix(gateway): persist internal prompt pins

2026-09-28 15:54:07 +05:30

slash_commands_status.py

fix(gateway): /usage falls back to the configured provider when no route is known

2026-09-19 09:40:23 -07:00

slash_commands.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

startup_watchdog.py

…

status_phrases.py

…

status.py

fix(review): a live cross-home gateway.pid is still unlinked on refusal; the held lock stays

2026-09-28 05:58:01 -07:00

sticker_cache.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

stream_consumer_fallback.py

fix: streamed reply no longer repeats a word when edits fall back to a new message

2026-09-26 11:24:50 -07:00

stream_consumer_fences.py

…

stream_consumer_think.py

refactor(display): one think-tag list; ACP tool titles derive from agent/display previews

2026-09-13 05:20:26 -07:00

stream_consumer_transport.py

docs(gateway): say the sub-floor segment-break preamble is dropped, not accumulated

2026-09-24 22:27:32 +05:30

stream_consumer.py

refactor(gateway): resolve streaming len budget via guarded _fallback_len_budget

2026-09-24 22:27:32 +05:30

stream_dispatch.py

…

stream_events.py

…

streaming_tts_consumer.py

chore: stack on #115840 to resolve gateway/streaming_tts_consumer.py conflict

2026-09-19 03:35:50 -07:00

systemd_notify.py

…

systemd_stop_mark.py

fix(gateway): mark supervisor-ordered stops as planned so direct systemctl restart exits cleanly

2026-09-20 00:09:14 -07:00

turn_context.py

fix(gateway): a bare silence marker on a turn not addressed to the bot stays silent

2026-09-26 07:21:49 +05:30

turn_executor.py

refactor(gateway): pass a pool factory instead of overloading None

2026-09-27 01:05:06 +05:30

turn_lease.py

refactor(gateway): drop the write-only one-shot generation stamp; /stop and eviction share _drop_turn_slot

2026-09-12 12:03:39 +05:30

wake.py

fix(gateway): wake a served profile's api_server session in-process for background-process completions

2026-09-18 09:46:35 -07:00

warning_notifications.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

whatsapp_identity.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00