NousResearch/hermes-agent

TUI gateway /review profile secret scoping bug

Cluster 117544 · gateway. Data as of

1 open item. Fix merged in #117550 on 24 Sep 2026. Check it covers your case.

The short answer

0open issues
1open PR
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #117550. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #117550. That is separate from the fix event.
Still open
0 issues and 1 PR.

These items concern a bug where the /review endpoint fails with a secret scoping error on multiplexed Desktop gateway setups, and fixes to resolve the reviewer's provider from the correct session profile scope. All three members address the same narrow issue.

Open issues0

No open issues.

Open PRs1

  • PR#117549fix(tui-gateway): live /review resolves the reviewer's provider from the session's profile on a multiplexed gateway (#117544)

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #117550 fix(tui-gateway): bind profile secret scope around Desktop /review

    merged to main

    files: tests/tui_gateway/test_multi_profile_hosting_fail_closed.py, tui_gateway/methods_slash.py

Closed issues · 1
  • Closed#117544[Bug]: /review fails UnscopedSecretError on HERMES_CODEX_BASE_URL when auxiliary.review.provider is openai-codex (multiplexed Desktop serve)
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
gateway
Merged PRs
#117550
Closed issues
1
Attempts
0 PRs closed without merging
Fix link checked
24 Sep 2026

For your agent

The same facts, typed.