teknium1 4ec0adebe8 fix(gateway): denylist config.yaml for media delivery (belt-and-suspenders) ...

Defense-in-depth on top of the EphemeralReply gate: even if a config.yaml
path reaches response text via some other path, it can never be delivered
as a native attachment. Matches existing protection for .env, auth.json,
and credentials/.

Co-authored-by: JezzaHehn <jezzahehn@gmail.com>

2026-05-30 18:58:46 -07:00

..

assets

fix: improve telegram topic mode setup

2026-05-04 12:07:17 -07:00

builtin_hooks

remove: BOOT.md built-in hook (#17093)

2026-04-28 09:50:27 -07:00

platforms

fix(gateway): denylist config.yaml for media delivery (belt-and-suspenders)

2026-05-30 18:58:46 -07:00

__init__.py

docs(gateway): mention Weixin in gateway help and docstrings

2026-05-12 17:08:51 -07:00

channel_directory.py

refactor(ntfy): convert built-in adapter to platform plugin

2026-05-23 16:13:01 -07:00

config.py

fix(gateway): run adapter config hooks for nested-only platform blocks

2026-05-30 05:23:55 -07:00

delivery.py

fix(gateway): drop outbound silence-narration messages pre-send

2026-05-29 19:06:05 -07:00

display_config.py

fix(gateway): keep Telegram heartbeat + interim commentary on; edit heartbeat in place (#33187)

2026-05-27 05:21:53 -07:00

hooks.py

fix(plugins): register dynamically-loaded modules in sys.modules before exec

2026-04-29 23:34:35 -07:00

memory_monitor.py

Port from cline/cline#10343: periodic gateway memory logging (#27102)

2026-05-16 12:55:23 -07:00

mirror.py

refactor(gateway): drop _append_to_jsonl from mirror

2026-05-20 13:00:57 -07:00

pairing.py

fix(gateway): preserve WhatsApp pairing approvals across JID/LID alias flips

2026-05-23 01:46:34 -07:00

platform_registry.py

refactor(plugins): add apply_yaml_config_fn registry hook

2026-05-13 22:20:30 -07:00

restart.py

fix(gateway): address restart review feedback

2026-04-10 21:18:34 -07:00

run.py

fix(gateway): support Windows absolute paths in MEDIA tag regex and extract_local_files (#34632)

2026-05-30 07:38:03 -07:00

runtime_footer.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

session_context.py

fix(cli): synchronize HERMES_SESSION_ID across environment and contextvar during session switches

2026-05-23 17:46:55 -07:00

session.py

fix(gateway): separate observed Telegram group context

2026-05-23 01:33:42 -07:00

shutdown_forensics.py

chore: ruff auto-fixes — collapsible-else-if, if-stmt-min-max, dict.fromkeys (#23926)

2026-05-11 11:03:29 -07:00

slash_access.py

feat(gateway): per-platform admin/user split for slash commands (salvage of #4443) (#23373)

2026-05-10 12:33:54 -07:00

status.py

fix(gateway): only fire planned-stop watcher for self-targeting markers + fix Windows consume (#34749)

2026-05-29 17:36:58 +00:00

sticker_cache.py

fix: guard yaml.safe_load, flock unlock, TOCTOU races, and atomic writes

2026-05-19 00:12:41 -07:00

stream_consumer.py

fix(gateway): unify MEDIA: extraction extension set + close the unknown-ext black hole (#34517) (#34844)

2026-05-29 13:24:01 -07:00

whatsapp_identity.py

fix(whatsapp_identity): pin identifier regex to ASCII, clarify it's defense-in-depth

2026-04-26 20:48:31 -07:00