teknium1 c19dd99597 fix: a user plugin cannot mark a core platform trusted_inbound ...

PluginContext.register_platform is last-writer-wins, so a user plugin could re-register 'telegram'
with trusted_inbound=True and every sender would skip the allowlist and pairing. The flag is now
refused for a platform core ships (a static Platform member or a bundled plugins/platforms/ plugin)
unless the registering plugin is bundled. Home Assistant is no longer either, so its catalog plugin
keeps it. `hermes plugins validate` prints a line for every trusted_inbound platform (and fails one
naming a core platform).

Also: the MCP collision test docstring no longer refers to the toolset it used to collide with.

2026-10-04 00:08:20 -07:00

..

assets

…

builtin_hooks

…

platforms

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

relay

fix(relay): chunk long cron output through the relay connector instead of truncating it

2026-10-01 12:27:27 -07:00

__init__.py

…

agent_cache_pressure.py

…

AGENTS.md

fix(whatsapp): adopt only the recorded bridge's own port; one port resolution for launch and send

2026-10-03 21:57:13 -04:00

authz_mixin.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

bot_loop_guard.py

…

browser_control_artifacts.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_control_broker.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

cgroup_cleanup.py

fix(gateway): reap cgroup PIDs from a fresh read taken after the live-gateway guard

2026-10-02 00:46:21 +05:30

channel_directory.py

…

code_skew.py

…

config_env.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

config_loader.py

fix(gateway): pass restored managed pins through plugin inputs

2026-09-30 20:10:03 -04:00

config.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

control_socket.py

fix(gateway): bound the Windows control-pipe query at its own timeout

2026-10-04 11:57:03 +05:30

cwd_placeholder.py

…

dead_targets.py

…

delivery_ledger.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delivery.py

fix(cron): a partly delivered split send is not re-sent by the standalone fallback

2026-10-01 17:18:56 -07:00

disk_status.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

display_config.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

drain_control.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

hooks.py

…

host_attach.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

host_rendezvous.py

fix(gateway): stabilize host rendezvous process identity

2026-10-02 01:17:03 +05:30

host_topology.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

hosted_room_discussion.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_driver.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_execution_policy.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_links.py

…

hosted_room_peer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_room_policy_checkpoint.py

…

hosted_room_replicas.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

hosted_rooms_common.py

…

hosted_rooms_legacy_import.py

…

hosted_rooms.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_watchers_common.py

…

kanban_watchers_dispatcher.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

kanban_watchers_notifier.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

kanban_watchers.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

lifecycle_ledger.py

…

media_fetch.py

…

media_policy.py

fix(cron): a routed profile's cron delivery no longer rewrites the launch profile's media policy

2026-10-01 22:59:37 +05:30

media_repair.py

…

memory_monitor.py

…

memory_status.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

message_timestamps.py

fix(gateway): handle early local timestamp strings on Windows

2026-10-02 19:22:09 -04:00

mirror.py

…

pairing.py

fix(pairing): purge revoked users from live allowlist sets in place

2026-10-02 02:59:59 +05:30

platform_registry.py

fix: a user plugin cannot mark a core platform trusted_inbound

2026-10-04 00:08:20 -07:00

profile_routing.py

…

readiness.py

perf(gateway): parse readiness and bundled-manifest YAML with the C loader

2026-09-23 21:26:49 +05:30

response_filters.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

restart_loop_guard.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

restart.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

rich_sent_store.py

…

run_adapters.py

fix(whatsapp): serve a paired WhatsApp session on every profile under the host multiplexer

2026-10-03 21:57:13 -04:00

run_agent_cache.py

chore(memory): remove bundled honcho provider; install from the plugin catalog

2026-10-02 04:39:28 -07:00

run_busy.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_common.py

…

run_config_loaders.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

run_delivery_queue_watch.py

…

run_goals.py

fix(gateway): hold /loop wakeups while hermes is paused

2026-10-02 01:13:21 +05:30

run_heartbeat_acceptance.py

…

run_heartbeat_restore.py

…

run_idle_gates.py

…

run_inbound_unauthorized.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_inbound.py

refactor(gateway): clarify why the estop gate drops stray heartbeat turns

2026-10-02 01:13:21 +05:30

run_notifications.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

run_plugin_rewire.py

…

run_profile_reconcile.py

fix(gateway): warn once per stalled own-gateway probe, not every cycle

2026-10-04 11:57:03 +05:30

run_shutdown.py

fix(gateway): count restart-wait cron exclusions per profile-scoped run

2026-10-01 22:25:21 -04:00

run_startup.py

fix(gateway): share the adapter-heal predicate between startup and the reconnect watcher

2026-10-03 16:32:35 +05:30

run_topics.py

test(gateway): prove the unreadable-row negative actually reads the row

2026-10-01 18:07:32 +05:30

run_turn_followup_ack.py

…

run_turn_runner_approval_settle.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_turn_runner_clarify_delivery.py

fix(gateway): push the clarify text fallback on Telegram

2026-10-04 11:58:00 +05:30

run_turn_runner.py

fix(gateway): keep approval prompts interim instead of tagging them notify

2026-10-04 11:58:00 +05:30

run_turn.py

docs(gateway): say rotation persists the child, not always rewrites it

2026-10-03 18:22:19 +05:30

run_voice.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

run_watchers.py

…

run.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

runtime_footer.py

…

scale_to_zero.py

…

session_context.py

…

session_db_recovery.py

fix(gateway): reopen a session DB handle the registry tore down

2026-09-28 04:34:30 -07:00

session_identity.py

…

session_lifecycle.py

fix(gateway): read a routed profile's store in the cached agent's dead-session check

2026-09-28 04:34:30 -07:00

session_persistence.py

fix(gateway): compression-crash recovery keeps the prompt pin

2026-09-28 15:54:07 +05:30

session_prompt_pin.py

refactor(gateway): move the prompt-pin store API into a session sibling

2026-09-28 15:54:07 +05:30

session_recovery.py

fix(telemetry): user-named providers and models never leave the machine; milestones use the owning profile

2026-09-28 12:43:03 -07:00

session_stall.py

…

session_state.py

fix(gateway): durable prompt pins never outlive their privacy policy

2026-09-28 15:54:07 +05:30

session_transcript.py

refactor(gateway): one persist_rotated_compression_child for both rotation sites

2026-10-03 18:22:19 +05:30

session.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

shutdown_flush.py

…

shutdown_forensics.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

shutdown_watchdog.py

feat(metrics): hermes.process.exit from per-process markers and turn watchdogs

2026-09-28 12:43:03 -07:00

slash_access.py

fix(gateway): resolve slash gating from the bot-owning profile in slash_access (#121705, salvage #121722)

2026-09-28 12:23:25 -07:00

slash_commands_branch_thread.py

…

slash_commands_goals.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

slash_commands_login.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

slash_commands_model.py

fix(codex): Ultra stays codex's harness mode on the app-server

2026-10-03 16:29:34 +05:30

slash_commands_session.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

slash_commands_status.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

slash_commands.py

refactor(debug): drop the dead header set and the support-scrub aliases

2026-10-03 21:15:17 +05:30

status_phrases.py

…

status.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

sticker_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_consumer_fallback.py

fix: streamed reply no longer repeats a word when edits fall back to a new message

2026-09-26 11:24:50 -07:00

stream_consumer_fences.py

…

stream_consumer_think.py

…

stream_consumer_transport.py

feat(telemetry): gateway platform health, delivery, first-reply latency and cron run metrics

2026-09-28 12:43:03 -07:00

stream_consumer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_dispatch.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

stream_events.py

…

streaming_tts_consumer.py

…

systemd_notify.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

systemd_stop_mark.py

…

turn_context.py

fix: use original gateway text for automatic session titles

2026-09-29 15:57:52 -05:00

turn_executor.py

refactor(gateway): pass a pool factory instead of overloading None

2026-09-27 01:05:06 +05:30

turn_lease.py

…

wake.py

…

warning_notifications.py

…

whatsapp_identity.py

…