m0n3r0 dbf73e90fa fix: fail closed for webhook routes without secrets ...

Reject unsigned webhook requests when a route has no effective HMAC secret, even if the request handler is reached without the normal connect-time validation. Add regression coverage for the direct-handler path.

2026-05-24 04:47:45 -07:00

..

assets

fix: improve telegram topic mode setup

2026-05-04 12:07:17 -07:00

builtin_hooks

remove: BOOT.md built-in hook (#17093)

2026-04-28 09:50:27 -07:00

platforms

fix: fail closed for webhook routes without secrets

2026-05-24 04:47:45 -07:00

__init__.py

docs(gateway): mention Weixin in gateway help and docstrings

2026-05-12 17:08:51 -07:00

channel_directory.py

refactor(ntfy): convert built-in adapter to platform plugin

2026-05-23 16:13:01 -07:00

config.py

Harden msgraph webhook auth requirements (#30169)

2026-05-24 04:25:20 -07:00

delivery.py

fix(gateway): preserve case-sensitive chat IDs in DeliveryTarget.parse

2026-05-01 14:01:26 -07:00

display_config.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

hooks.py

fix(plugins): register dynamically-loaded modules in sys.modules before exec

2026-04-29 23:34:35 -07:00

memory_monitor.py

Port from cline/cline#10343: periodic gateway memory logging (#27102)

2026-05-16 12:55:23 -07:00

mirror.py

refactor(gateway): drop _append_to_jsonl from mirror

2026-05-20 13:00:57 -07:00

pairing.py

fix(gateway): preserve WhatsApp pairing approvals across JID/LID alias flips

2026-05-23 01:46:34 -07:00

platform_registry.py

refactor(plugins): add apply_yaml_config_fn registry hook

2026-05-13 22:20:30 -07:00

restart.py

fix(gateway): address restart review feedback

2026-04-10 21:18:34 -07:00

run.py

fix(gateway): edit streamed message instead of sending duplicate when response_transformed

2026-05-24 04:31:13 -07:00

runtime_footer.py

feat(gateway): opt-in runtime-metadata footer on final replies (#17026)

2026-04-28 06:50:04 -07:00

session_context.py

fix(cli): synchronize HERMES_SESSION_ID across environment and contextvar during session switches

2026-05-23 17:46:55 -07:00

session.py

fix(gateway): separate observed Telegram group context

2026-05-23 01:33:42 -07:00

shutdown_forensics.py

chore: ruff auto-fixes — collapsible-else-if, if-stmt-min-max, dict.fromkeys (#23926)

2026-05-11 11:03:29 -07:00

slash_access.py

feat(gateway): per-platform admin/user split for slash commands (salvage of #4443) (#23373)

2026-05-10 12:33:54 -07:00

status.py

fix: gateway PID detection fails on Windows (two issues)

2026-05-13 23:10:57 -07:00

sticker_cache.py

fix: guard yaml.safe_load, flock unlock, TOCTOU races, and atomic writes

2026-05-19 00:12:41 -07:00

stream_consumer.py

test(gateway): regression for plugin-transformed response after streaming

2026-05-24 04:31:13 -07:00

whatsapp_identity.py

fix(whatsapp_identity): pin identifier regex to ASCII, clarify it's defense-in-depth

2026-04-26 20:48:31 -07:00