{"repo":"NousResearch/hermes-agent","public_id":"120726","display_label":"Profile secret scoping bugs and fixes in multi-profile serve","summary":"A bug where profile secrets (e.g. API keys) were read from the wrong scope during multi-profile serving caused incorrect describe/tools output. Several fixes address binding secret scope correctly to each profile's context.","subsystem":"gateway","counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":1,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":126160,"merged_at":"2026-09-28T12:24:27+00:00"},"resolution":{"state":"resolved","by":"pr-126160"},"freshness":{"state":"verified","last_verified_at":"2026-09-28T12:24:27+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":117977,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"},{"issue_number":119092,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"},{"issue_number":120726,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"},{"issue_number":122126,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"},{"issue_number":125102,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"},{"issue_number":125985,"pr_number":126160,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T12:24:27+00:00"}],"members":[{"kind":"issue","number":120726,"title":"[Bug]: profiles.describe reports every toolset disabled for unpinned profiles on a multi-profile hermes serve (unscoped XAI_API_KEY read swallowed)","url":null,"state":"closed"},{"kind":"pr","number":120729,"title":"fix(tui): scope profile secrets for describe","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#120734","number":120734}],"category":"partial_fix","implication":"needs_llm"},"merged":false},{"kind":"pr","number":120734,"title":"fix(profiles): describe/configure bind the profile's secret scope, not just its home","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#120729","number":120729}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":126160,"title":"Multiplex secondary profiles keep their A2A gate, Buzz config, plugin injector, MCP headers, describe and tools.list scoped to the served profile (#122126 #125985 #125102 #119092 #120726 #117977)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["contributors/emails/[redacted:email]","contributors/emails/[redacted:email]","gateway/run_inbound.py","hermes_cli/plugins.py","plugins/platforms/a2a/__init__.py","plugins/platforms/a2a/tools.py","plugins/platforms/buzz/adapter.py","tests/gateway/test_buzz_adapter.py","tests/gateway/test_plugin_message_injection.py","tests/hermes_cli/test_plugin_message_injection.py","tests/plugins/test_a2a_plugin.py","tests/tools/test_mcp_connect_secret_scope.py","tests/tui_gateway/test_profiles_describe_secret_scope.py","tests/tui_gateway/test_tools_readback_scope.py","tools/mcp_tool_config.py","tools/mcp_tool_discovery.py","tools/mcp_tool_server_run.py","tui_gateway/methods_profiles.py","tui_gateway/methods_tools.py","website/docs/developer-guide/multiplexing-gateway.md","website/docs/reference/mcp-config-reference.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}