kshitijk4poor e8b53518ea fix(webhook): an all-NUL whsec_ key fails closed like the empty key ...

HMAC zero-pads its key, so a whsec_ secret that decodes to NUL bytes
(whsec_AA==) signs exactly like the empty key b"" the previous fold
refuses; the whitespace-only guard let it through. Strip NULs with the
ASCII whitespace before the emptiness check. (Lead fold, 2c lens Low.)

2026-10-07 13:19:35 +05:30

..

assets

…

builtin_hooks

…

platforms

fix(webhook): an all-NUL whsec_ key fails closed like the empty key

2026-10-07 13:19:35 +05:30

relay

refactor(webhook): keep the secret classifier private to the webhook adapter

2026-10-07 13:19:35 +05:30

__init__.py

…

agent_cache_pressure.py

…

AGENTS.md

docs: hermes_cli, gateway and desktop AGENTS.md keep rules, long form moves to docs

2026-10-04 23:05:42 -07:00

authz_mixin.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

bot_loop_guard.py

…

browser_control_artifacts.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_control_broker.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

cgroup_cleanup.py

fix(gateway): reap cgroup PIDs from a fresh read taken after the live-gateway guard

2026-10-02 00:46:21 +05:30

channel_directory.py

…

code_skew.py

…

config_env.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

config_loader.py

fix: Home Assistant migration reads the platform config the gateway loader merged

2026-10-04 00:08:20 -07:00

config.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

control_socket.py

fix(gateway): bound the Windows control-pipe query at its own timeout

2026-10-04 11:57:03 +05:30

cron_store_notices.py

fix(cron): key store state by resolved path, never swallow a flapped outage notice

2026-10-07 10:20:18 +05:30

cwd_placeholder.py

…

dead_targets.py

…

delivery_ledger.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delivery.py

fix(cron): a partly delivered split send is not re-sent by the standalone fallback

2026-10-01 17:18:56 -07:00

disk_status.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

display_config.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

drain_control.py

…

hooks.py

…

host_attach.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

host_rendezvous.py

fix(gateway): stabilize host rendezvous process identity

2026-10-02 01:17:03 +05:30

host_topology.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

hosted_room_discussion.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_driver.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_execution_policy.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_links.py

…

hosted_room_peer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_policy_checkpoint.py

…

hosted_room_replicas.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_rooms_common.py

…

hosted_rooms_legacy_import.py

…

hosted_rooms.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_watchers_common.py

…

kanban_watchers_dispatcher.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

kanban_watchers_notifier.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

kanban_watchers.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

lifecycle_ledger.py

…

media_fetch.py

…

media_policy.py

fix(cron): a routed profile's cron delivery no longer rewrites the launch profile's media policy

2026-10-01 22:59:37 +05:30

media_repair.py

…

memory_monitor.py

…

memory_status.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

message_timestamps.py

fix(gateway): handle early local timestamp strings on Windows

2026-10-02 19:22:09 -04:00

mirror.py

…

pairing.py

fix(pairing): purge revoked users from live allowlist sets in place

2026-10-02 02:59:59 +05:30

platform_registry.py

fix: a user plugin cannot mark a core platform trusted_inbound

2026-10-04 00:08:20 -07:00

profile_routing.py

…

readiness.py

…

response_filters.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

restart_loop_guard.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

restart.py

docs(gateway): name api_server runs in the drain-budget docstrings

2026-10-05 19:39:09 +05:30

rich_sent_store.py

…

run_adapters.py

fix(gateway): do not hand an installed reconnect adapter's hold queue back to its predecessor

2026-10-06 11:24:04 +05:30

run_agent_cache.py

fix(gateway): measure fallback drift from the session's winning model on its primary route

2026-10-06 11:24:29 -04:00

run_busy.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_common.py

…

run_config_loaders.py

docs(gateway): cron_drain_timeout floor also covers api_server runs

2026-10-05 19:39:09 +05:30

run_delivery_queue_watch.py

…

run_goals.py

fix(gateway): hold /loop wakeups while hermes is paused

2026-10-02 01:13:21 +05:30

run_heartbeat_acceptance.py

…

run_heartbeat_restore.py

…

run_idle_gates.py

…

run_inbound_consumer.py

feat(gateway): reshape post_gateway_admission into a fail-open consume hook

2026-10-05 01:26:23 -07:00

run_inbound_media.py

refactor(gateway): move rehome_inbound_media into run_inbound_media.py

2026-10-05 01:26:23 -07:00

run_inbound_unauthorized.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_inbound.py

refactor(gateway): move plugin message injection into its own runner mixin

2026-10-05 17:11:30 -07:00

run_notifications.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

run_plugin_injection.py

feat(plugins): inject_message(origin=...) starts a gateway session in the plugin's own profile

2026-10-05 17:11:30 -07:00

run_plugin_rewire.py

refactor(gateway): call rearm_failed_platform inline from the reconnect watcher

2026-10-05 20:07:25 +05:30

run_profile_reconcile.py

fix(gateway): warn once per stalled own-gateway probe, not every cycle

2026-10-04 11:57:03 +05:30

run_shutdown.py

fix(gateway): log api_server runs in the drain-floor wait and doc the floor

2026-10-05 19:39:09 +05:30

run_startup.py

feat(gateway): tell home channels once when a cron store goes unwritable and recovers

2026-10-07 10:20:18 +05:30

run_topics.py

test(gateway): prove the unreadable-row negative actually reads the row

2026-10-01 18:07:32 +05:30

run_turn_followup_ack.py

…

run_turn_runner_approval_settle.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_turn_runner_clarify_delivery.py

fix(gateway): push the clarify text fallback on Telegram

2026-10-04 11:58:00 +05:30

run_turn_runner.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

run_turn.py

fix(gateway): measure fallback drift from the session's winning model on its primary route

2026-10-06 11:24:29 -04:00

run_voice.py

fix(discord): a programmatic voice join binds the requested text channel on every path

2026-10-06 00:08:57 -04:00

run_watchers.py

…

run.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

runtime_footer.py

…

scale_to_zero.py

…

session_context.py

…

session_db_recovery.py

fix(gateway): reopen a session DB handle the registry tore down

2026-09-28 04:34:30 -07:00

session_identity.py

…

session_lifecycle.py

fix(gateway): read a routed profile's store in the cached agent's dead-session check

2026-09-28 04:34:30 -07:00

session_persistence.py

fix(gateway): compression-crash recovery keeps the prompt pin

2026-09-28 15:54:07 +05:30

session_prompt_pin.py

refactor(gateway): move the prompt-pin store API into a session sibling

2026-09-28 15:54:07 +05:30

session_recovery.py

fix(telemetry): user-named providers and models never leave the machine; milestones use the owning profile

2026-09-28 12:43:03 -07:00

session_stall.py

…

session_state.py

fix(gateway): durable prompt pins never outlive their privacy policy

2026-09-28 15:54:07 +05:30

session_transcript.py

fix(gateway): quarantine only rows sqlite cannot bind

2026-10-06 16:24:04 -04:00

session.py

fix(discord): the triggering-message note no longer depends on message_id presence

2026-10-05 15:15:44 -04:00

shutdown_flush.py

fix(gateway): never replay a written spool row whose file cannot be deleted

2026-10-06 16:24:04 -04:00

shutdown_forensics.py

…

shutdown_watchdog.py

feat(metrics): hermes.process.exit from per-process markers and turn watchdogs

2026-09-28 12:43:03 -07:00

slash_access.py

fix(gateway): resolve slash gating from the bot-owning profile in slash_access (#121705, salvage #121722)

2026-09-28 12:23:25 -07:00

slash_commands_branch_thread.py

…

slash_commands_goals.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

slash_commands_login.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

slash_commands_model.py

fix(codex): Ultra stays codex's harness mode on the app-server

2026-10-03 16:29:34 +05:30

slash_commands_session.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

slash_commands_status.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

slash_commands.py

refactor(debug): drop the dead header set and the support-scrub aliases

2026-10-03 21:15:17 +05:30

status_inline_source.py

refactor(gateway): move inline-source argv parsing out of gateway/status.py

2026-10-06 06:18:39 -07:00

status_phrases.py

…

status.py

fix: the planned-stop consumer takes the pause lock only for a pause on disk and drops settled receipts

2026-10-06 06:18:39 -07:00

sticker_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_consumer_fallback.py

fix: streamed reply no longer repeats a word when edits fall back to a new message

2026-09-26 11:24:50 -07:00

stream_consumer_fences.py

…

stream_consumer_think.py

…

stream_consumer_transport.py

feat(telemetry): gateway platform health, delivery, first-reply latency and cron run metrics

2026-09-28 12:43:03 -07:00

stream_consumer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_dispatch.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_events.py

…

streaming_tts_consumer.py

…

systemd_notify.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

systemd_stop_mark.py

…

turn_context.py

fix: use original gateway text for automatic session titles

2026-09-29 15:57:52 -05:00

turn_executor.py

refactor(gateway): pass a pool factory instead of overloading None

2026-09-27 01:05:06 +05:30

turn_lease.py

…

wake.py

…

warning_notifications.py

…

whatsapp_identity.py

…