[f-trycua]

What changed

• bind multiplexed secondary adapters to the profile that owns their credential
• keep global profile routes scoped to the primary/shared credential
• document and test independent peer bots sharing one Slack channel

Verification

• uv run --frozen --extra dev ruff check gateway/platforms/base.py gateway/run.py tests/gateway/test_profile_resolution.py
• uv run --frozen --extra dev pytest -q tests/gateway/test_profile_resolution.py tests/gateway/test_slack_peer_agent_smoke.py tests/gateway/test_slack.py tests/gateway/test_slack_mention.py tests/gateway/test_slack_channel_session_scope.py -o addopts='' (213 passed)

[github-actions]

૮ >ﻌ< ა ci review

_{ran on 79696bc — fix(gateway): pin secondary credentials to profiles}

⚠️ Warnings

OSV vulnerability scan · View job

5 known vulnerabilities found in pinned dependencies.

• CVE-2026-67213 in package-lock.json
• CVE-2026-67213 in website/package-lock.json
• CVE-2026-70608 in package-lock.json
• CVE-2026-56876 in package-lock.json
• CVE-2026-70606 in package-lock.json

How to fix:

Review the findings in the Security tab. Update the affected dependencies if a patched version is available.

---

debug info

CI timings

CI timings · View report · View job

Wall time 2m59s vs 4m19s (-30.9%). 14 job(s) slower, 8 faster, 3 unchanged.

• Python tests / Run tests slice 6/12: +46.0s
• Python tests / Run tests slice 8/12: +36.0s
• Python tests / Run tests slice 7/12: +21.0s
• Python tests / Run tests slice 12/12: +16.0s
• Python tests / Run tests slice 11/12: +10.0s