Cairn
NousResearch/hermes-agent

Gateway secret scoping and env var regression fixes

Cluster 69379 · agent/secret sources. Data as of

Nothing open on GitHub. Fix merged in #76663 on 2 Aug 2026. Check it covers your case.

The short answer

0open issues
0open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #76663. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #76663. That is separate from the fix event.
Still open
Nothing open on GitHub.

These issues and PRs address bugs in gateway/secret scoping logic where environment variables (especially API_SERVER_* and platform env vars) were incorrectly handled, silently dropped, or not falling through to os.environ. A regression in v2026.7.20 broke Docker multiplex deployments by reloading config in the wrong secret scope.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #76663 fix(secrets): Weixin Slack-pattern scoping, API_SERVER_* global allowlist, xai_http fail-closed (corrects #66073/#68854/#69524; salvages #56982)

    merged to main

    files: agent/secret_scope.py, gateway/platforms/weixin.py, tests/agent/test_secret_scope.py, tests/gateway/test_64674_multiplex_primary_token_scope.py, tests/gateway/test_weixin_secret_scope.py, tests/tools/test_xai_http_credentials.py, tools/xai_http.py

2 PRs closed without merging

From the close comments: done elsewhere 1 · superseded by another PR 1

  • #69524 fix(gateway): make _getenv fall through to os.environ when var not in secret scope (#69379) · superseded by another PR → #76663, #69379
  • #69610 fix(gateway): treat API_SERVER_* as global env, not profile secrets · done elsewhere → #76663, #69379
Closed issues · 1
  • Closed#69379v2026.7.20 regression for Docker multiplex deployments: load_gateway_config_for_runner reloads config in the default profile's secret scope, silently dropping platform env vars set via container environment — api_server no longer starts
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent/secret sources
Merged PRs
#76663
Closed issues
1
Attempts
2 PRs closed without merging
Fix link checked
2 Aug 2026

For your agent

The same facts, typed.

cluster/69379.json
cluster/69379.md