Teknium 7a54ab22e6 fix(gateway): control-socket hardening from #92447 post-merge review ...

- bind under umask 0o177 so the socket is never world-connectable, even
  pre-chmod (review pt 3)
- verb handlers run in an executor: state-file reads stay off the
  adapter event loop (pt 2)
- inventory dedupes one multiplex gateway answering identify for several
  homes — one runtime record per pid, with regression test (pt 1)
- v1 wire contract (one request per connection) documented in the module
  docstring (pt 5); /tmp-unwritable skip in the short-home test

Live-verified: perms 600 at bind, identify 4.3ms via executor path, 20
rapid queries healthy.

2026-08-22 18:05:26 -07:00

..

assets

chore: limit generic status phrases to long-running notifications

2026-07-05 06:29:26 -07:00

builtin_hooks

…

platforms

perf(api): classify compaction rows once per message in run.completed transcript

2026-08-21 22:54:13 +05:30

relay

fix(relay): prompt-lifecycle acks are fire-and-forget — awaiting them ON the read loop self-deadlocked the transport

2026-08-20 19:56:01 -07:00

__init__.py

…

agent_cache_pressure.py

fix: follow-ups for salvaged PR #80795

2026-08-07 21:02:33 +05:30

authz_mixin.py

fix(plugins): isolate ownership by profile

2026-08-12 19:13:32 -07:00

browser_control_artifacts.py

fix(browser): sweep orphan artifact files at store construction

2026-08-21 22:54:04 +05:30

browser_control_broker.py

fix(browser): honor live Developer Mode for privileged capability selection

2026-08-21 22:54:04 +05:30

cgroup_cleanup.py

fix: satisfy ruff encoding + windows-footgun lints for cgroup reaper

2026-06-28 02:05:50 -07:00

channel_directory.py

fix(gateway): run channel-directory write off the event loop

2026-08-11 20:37:06 +05:30

code_skew.py

fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError

2026-06-24 04:16:54 +05:30

config.py

fix(gateway): finite-bounded watchdog knob validation + wire keys through load_gateway_config

2026-08-22 20:40:23 +05:30

control_socket.py

fix(gateway): control-socket hardening from #92447 post-merge review

2026-08-22 18:05:26 -07:00

cwd_placeholder.py

fix(gateway): resolve terminal.cwd placeholders per backend and mount mode

2026-07-04 13:28:47 -07:00

dead_targets.py

fix(gateway): add utf-8 encoding to dead target registry

2026-07-24 15:47:12 -07:00

delivery_ledger.py

fix(gateway): route delivery-ledger owner-liveness probe through _pid_exists (#41662)

2026-08-14 21:25:30 -07:00

delivery.py

fix(gateway): pass encoding="utf-8" to read_text/write_text in update path (#37423)

2026-07-24 15:47:12 -07:00

disk_status.py

feat(gateway): disk-usage telemetry + dashboard disk-pressure banner (NS-656)

2026-08-13 20:30:12 -07:00

display_config.py

fix(slack): quiet Slack display defaults — no heartbeat/busy-ack breadcrumbs in channels

2026-07-23 11:34:11 -07:00

drain_control.py

fix(gateway): expire orphaned drain markers past a max-age so a leaked marker can't wedge the gateway (#85433)

2026-08-13 23:23:48 +05:30

hooks.py

fix: handle replacement transforms after CLI streaming

2026-08-08 14:06:30 +05:30

kanban_watchers.py

refactor(gateway): route kanban notifier writer offloads through _to_thread_process_service

2026-08-22 16:26:51 +05:30

lifecycle_ledger.py

feat(status): surface memory pressure and suspected-OOM restarts to users (NS-656)

2026-08-13 20:30:12 -07:00

media_policy.py

fix(cron): manual runs no longer silently drop media attachments

2026-08-17 17:19:50 -07:00

memory_monitor.py

Port from cline/cline#10343: periodic gateway memory logging (#27102)

2026-05-16 12:55:23 -07:00

memory_status.py

fix(memory-status): review follow-ups — incident-keyed dismissal, honest copy, single mobile offset (NS-656)

2026-08-13 20:30:12 -07:00

message_timestamps.py

feat(gateway): inject stable human-readable message timestamps

2026-06-16 15:49:59 -07:00

mirror.py

chore(gateway): loud mirror diagnostics — name the exact drop reason

2026-08-20 01:40:23 +00:00

pairing.py

fix(secrets): route authz gate and pairing allowlist reads through the profile secret scope

2026-08-02 10:02:33 -07:00

platform_registry.py

fix(gateway): registered_names() honors profile scope like is_registered()

2026-08-14 21:56:33 -07:00

profile_routing.py

feat(gateway): allow selective multiplex profile serving

2026-08-10 22:48:24 -07:00

readiness.py

fix(gateway): close readiness-probe SQLite connection deterministically

2026-07-24 15:55:08 -07:00

response_filters.py

refactor(gateway): promote autonomous silence matcher to shared response_filters helper

2026-07-26 16:55:42 -07:00

restart_loop_guard.py

fix(gateway): make the restart-loop breaker see slow crash cycles (#81642)

2026-08-09 21:40:23 +05:30

restart.py

fix(gateway): give in-flight cron work its own drain floor

2026-08-14 21:47:16 -07:00

rich_sent_store.py

style(profile): frame comments around what the code does

2026-06-30 15:30:06 -07:00

run.py

feat(gateway): gateway-owned control socket — identify/status verbs, fleet consumers prefer it over scans (#92091 step 1)

2026-08-22 16:45:00 -07:00

runtime_footer.py

feat(gateway): add opt-in 'latency' runtime footer field

2026-08-03 17:16:57 +05:30

scale_to_zero.py

chore(gateway): drop the default scale-to-zero idle timeout to 2 minutes

2026-08-21 09:08:02 +10:00

session_context.py

feat(browser): add authenticated control broker

2026-08-21 22:33:45 +05:30

session_stall.py

feat(gateway): session activity watchdog, stall notify, compress timeout (#72424)

2026-08-02 16:16:36 -07:00

session_state.py

fix(gateway): persist hygiene failure cooldown rung

2026-08-16 02:02:06 -07:00

session.py

fix(state): guard gateway FTS rebuild + comment early flag-set

2026-08-22 03:56:13 +05:30

shutdown_flush.py

fix(state): close leaked SessionDB connections on exception paths (#83226)

2026-08-14 21:41:26 -07:00

shutdown_forensics.py

refactor(gateway): promote parse_systemd_duration_to_us to public

2026-08-22 16:26:51 +05:30

shutdown_watchdog.py

fix(gateway): keep loop-watchdog default at 3 strikes; dedupe constants; register knobs in config defaults

2026-08-22 20:40:23 +05:30

slash_access.py

…

slash_commands.py

fix(gateway): run Windows /update as a module, not through the shim

2026-08-19 13:15:02 -05:00

status_phrases.py

chore: limit generic status phrases to long-running notifications

2026-07-05 06:29:26 -07:00

status.py

feat(update): structured update receipts + post-update fleet version verification

2026-08-20 21:54:25 -07:00

sticker_cache.py

fix: guard yaml.safe_load, flock unlock, TOCTOU races, and atomic writes

2026-05-19 00:12:41 -07:00

stream_consumer.py

fix(gateway): scope draft-final finalize skip to fresh persistent sends

2026-08-20 21:58:18 -07:00

stream_dispatch.py

feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)

2026-06-02 00:33:50 -07:00

stream_events.py

feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)

2026-06-02 00:33:50 -07:00

streaming_tts_consumer.py

feat(gateway): streaming TTS adapter contract and consumer (#60671)

2026-07-28 22:31:40 -07:00

systemd_notify.py

fix(gateway): recover Discord websocket and event-loop stalls

2026-07-18 20:01:55 +05:30

turn_context.py

fix(gateway): persist internal synthetic turns typed as internal_notification (#82888)

2026-08-14 01:08:18 -07:00

turn_lease.py

refactor(gateway): drop dead degraded token field; de-churn salvage diff

2026-08-07 18:23:57 +05:30

wake.py

fix(gateway): deliver kanban/delegate wake-ups to api_server sessions

2026-07-23 11:55:17 -07:00

whatsapp_identity.py

fix(whatsapp): resolve LID aliases on modern platforms/ session layout

2026-06-28 02:05:26 -07:00