NousResearch/hermes-agent

Gateway admission of upstream-authorized A2A native messages

Cluster 139199. Data as of 2026-10-27 11:58 UTC

Nothing open on GitHub. Fix merged in #139471 on 16 Oct 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #139471. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #139471. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #139471, then check it covers your case.

Read #139471 Pick up a Lab task

The members center on an A2A inbound issue in v0.22.x where fresh native messages are reportedly rejected by a principal allowlist even when authorization_is_upstream=True, plus two gateway fix PRs addressing admission of such inputs. One PR also bundles related Discord role re-auth, refused Bot receipts, and headless peer Bot Chat changes, which go beyond the core A2A admission theme.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#139471 fix(gateway): Discord role re-auth, A2A admission, refused Bot receipts and headless peer Bot Chat

merged to main

files: apps/desktop/src/plugins/hermes-bots/relay.test.ts, apps/desktop/src/plugins/hermes-bots/relay.ts, apps/shared/src/gateway-contract.generated.ts, apps/shared/src/gateway-contract.openrpc.json, contributors/emails/[email protected], gateway/platforms/api_server.py, gateway/platforms/api_server_bot_chat.py, gateway/session_bot.py, gateway/session_bot_mailbox.py, gateway/session_envelope.py, plugins/platforms/discord/adapter.py, plugins/platforms/discord/adapter_authorization.py, tests/gateway/test_bot_receipt_refusal.py, tests/gateway/test_peer_dm_bot_chat_headless.py, tests/gateway/test_upstream_native_admission.py, tests/plugins/platforms/test_discord_reauthorize_allowed_roles.py, tui_gateway/contracts/canonical_projections.py

1 PR closed without merging

From the close comments: merged via another change 1

#139221 fix(gateway): admit an upstream-authorized adapter's fresh native inputs · merged via another change → #139471, #139199, #134889

Closed issues · 1

Closed#139199A2A inbound regression (v0.22.x): fresh native messages reject via principal allowlist despite authorization_is_upstream=True

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs: #139471
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 16 Oct 2026

For your agent

The same facts, typed.

cluster/139199.json
cluster/139199.md