Files
hermes-agent/hermes_cli
teknium1 ed69aa9e6e refactor(doctor,gateway): share the migrate preflight's duplicate-credential check with doctor and status
Under multiplex-only the duplicated platform token is exactly what the migration
preflight refuses to fold on, so doctor and `gateway status` reuse that check
(`gateway_migrate.duplicate_credential_findings`) instead of a second scanner
in profile_channels. All three surfaces print one shared line naming the
profiles, the env key NAME (TELEGRAM_BOT_TOKEN, never a value or fingerprint),
why one token can serve only one gateway, and the remedy (own token / remove the
key from the non-owner / profile_routes) ending in `hermes gateway migrate
--multiplex`. Doctor folds the finding into its existing Profiles section.

Tests trimmed to two invariants: identical wording across doctor, status and
the preflight with the secret absent from output; distinct tokens and a shared
non-singleton key (model API key) produce no finding.
2026-09-21 18:53:36 -07:00
..
…
…
…
…
…
…
2026-09-21 13:28:28 -07:00
…
…
…
…
…