{"repo":"NousResearch/hermes-agent","public_id":"120639","display_label":"Secondary bot callback auth scope fix in multiplex","summary":"A bug where inline/button callback authorization for secondary-profile bots was evaluated outside their own profile secret scope, causing allowlisted users to be incorrectly refused. The cluster covers the bug report and related fix attempts targeting this scoping issue.","subsystem":null,"counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":122550,"merged_at":"2026-09-26T01:11:35+00:00"},"resolution":{"state":"resolved","by":"pr-122550"},"freshness":{"state":"verified","last_verified_at":"2026-09-26T01:11:35+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":120639,"pr_number":122550,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-26T01:11:35+00:00"}],"members":[{"kind":"issue","number":120639,"title":"[Bug]: Telegram inline callbacks refuse allowlisted user when a secondary profile owns its own bot under multiplex (callback auth runs outside profile secret scope)","url":null,"state":"closed"},{"kind":"pr","number":120642,"title":"fix(gateway): authorize a secondary bot's callbacks under its own profile scope","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#122550","number":122550}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":120650,"title":"fix(gateway): authorize a secondary bot's inline callbacks in its own profile scope","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"e13b5e71ef","number":0},{"kind":"pr","value":"#122550","number":122550}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":122550,"title":"fix(gateway): secondary-profile bots authorize button taps against their own allowlist (#120639, salvage #120642)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["gateway/run_adapters.py","tests/gateway/test_multiplex_interactive_auth.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}