ethernet
beb88a13b1
refactor(update): table-drive the steward refusal rungs
...
The sealed-tree steward ladder in evaluate_update_admission was four
if-rungs that differed only in the install method whose command
remediates the tree. A steward -> method table plus one helper replaces
them; the refusal code, message and command are unchanged for docker,
nix, apt-termux, desktop-app and unknown future stewards.
2026-09-24 14:08:22 -04:00
ethernet
09a49ab37e
update: refuse source checkouts on Termux hosts with the APT hint
...
The admission gate only refused the sealed apt-termux tree; a legacy
git-checkout install on a phone was admitted like any other checkout.
That path ff-merges and then syncs the venv against a lock whose CPython
is the bundled bionic build with no Android wheels, so the update
degrades into on-device sdist builds with no hint that the APT package
exists.
A git checkout under Termux (TERMUX_VERSION or the com.termux PREFIX,
via hermes_constants.is_termux) now refuses at the steward rung with
`pkg install hermes-agent` as the remediation. The same checkout off
Termux stays updatable.
2026-09-21 18:39:03 -04:00
ethernet
e697069431
Disable updates for single-commit desktop builds
...
Use the build stamp to refuse CLI, backend, and desktop updates. Keep release channels fixed for packaged clients and report the client version independently of a remote backend. Check source release channels against their published release identity.
2026-09-11 19:56:08 -04:00
ethernet8023
1d87314a39
feat(termux): steward-keyed service refusal for apt-termux installs
...
Keyed on the sealed_steward stamp, never a platform probe: a Termux
APT package has no systemd/launchd/schtasks lane, so service commands
refuse with the nohup guidance instead of pretending to install. The
'apt' install method (removed with the old Termux support, 7ad9f0c7a5)
returns with it: hermes update refuses and points at
`pkg upgrade hermes-agent`.
2026-09-05 20:00:00 -04:00
ethernet
e8fcb007b9
Merge remote-tracking branch 'upstream/main' into ethie/pm-clean
...
# Conflicts:
# AGENTS.md
# acp_adapter/edit_approval.py
# acp_adapter/server.py
# agent/agent_init.py
# agent/anthropic_adapter.py
# agent/anthropic_credentials.py
# agent/auxiliary_client.py
# agent/azure_identity_adapter.py
# agent/bedrock_adapter.py
# agent/browser_registry.py
# agent/chat_completion_helpers.py
# agent/coding_context.py
# agent/context_references.py
# agent/conversation_loop.py
# agent/copilot_acp_client.py
# agent/credits_tracker.py
# agent/curator.py
# agent/curator_backup.py
# agent/deadline.py
# agent/display.py
# agent/errors.py
# agent/estop.py
# agent/i18n.py
# agent/image_gen_registry.py
# agent/image_routing.py
# agent/learning_graph.py
# agent/learning_mutations.py
# agent/lsp/servers.py
# agent/model_metadata.py
# agent/models_dev.py
# agent/monitoring/gateway_health_export.py
# agent/monitoring/otlp_exporter.py
# agent/pet/store.py
# agent/process_bootstrap.py
# agent/prompt_builder.py
# agent/proxy_sources/iron_proxy.py
# agent/secret_sources/_cache.py
# agent/secret_sources/bitwarden.py
# agent/secret_sources/registry.py
# agent/shell_hooks.py
# agent/skill_bundles.py
# agent/skill_commands.py
# agent/skill_utils.py
# agent/ssl_guard.py
# agent/ssl_verify.py
# agent/system_prompt.py
# agent/terminal_env_registry.py
# agent/trace_upload.py
# agent/transcription_registry.py
# agent/tts_registry.py
# agent/verify/environment.py
# agent/vertex_adapter.py
# agent/video_gen_registry.py
# agent/web_search_registry.py
# cli.py
# cron/jobs.py
# cron/scheduler.py
# gateway/agent_cache_pressure.py
# gateway/cgroup_cleanup.py
# gateway/channel_directory.py
# gateway/config.py
# gateway/control_socket.py
# gateway/dead_targets.py
# gateway/drain_control.py
# gateway/hooks.py
# gateway/kanban_watchers.py
# gateway/lifecycle_ledger.py
# gateway/mirror.py
# gateway/pairing.py
# gateway/platform_registry.py
# gateway/platforms/helpers.py
# gateway/platforms/weixin.py
# gateway/readiness.py
# gateway/restart_loop_guard.py
# gateway/rich_sent_store.py
# gateway/run.py
# gateway/session.py
# gateway/shutdown_flush.py
# gateway/shutdown_forensics.py
# gateway/slash_commands.py
# gateway/status.py
# gateway/sticker_cache.py
# gateway/whatsapp_identity.py
# hermes_bootstrap.py
# hermes_cli/_early_recovery.py
# hermes_cli/_install_repair.py
# hermes_cli/_startup_fast.py
# hermes_cli/_subprocess_compat.py
# hermes_cli/agent_plugins.py
# hermes_cli/auth.py
# hermes_cli/backup.py
# hermes_cli/banner.py
# hermes_cli/browser_connect.py
# hermes_cli/build_info.py
# hermes_cli/cli_agent_setup_mixin.py
# hermes_cli/cli_commands_mixin.py
# hermes_cli/codex_models.py
# hermes_cli/config.py
# hermes_cli/config_defaults.py
# hermes_cli/config_migrations.py
# hermes_cli/container_boot.py
# hermes_cli/dashboard_auth/registry.py
# hermes_cli/debug.py
# hermes_cli/dep_ensure.py
# hermes_cli/doctor.py
# hermes_cli/doctor_live.py
# hermes_cli/dump.py
# hermes_cli/env_loader.py
# hermes_cli/foreign_sessions.py
# hermes_cli/gateway.py
# hermes_cli/gateway_windows.py
# hermes_cli/gui_uninstall.py
# hermes_cli/image_provenance.py
# hermes_cli/install_identity.py
# hermes_cli/kanban.py
# hermes_cli/kanban_db.py
# hermes_cli/linux_desktop_entry.py
# hermes_cli/local_runtime/binaries.py
# hermes_cli/local_runtime/endpoint.py
# hermes_cli/local_runtime/growth.py
# hermes_cli/local_runtime/supervisor.py
# hermes_cli/logs.py
# hermes_cli/macos_tcc_anchor.py
# hermes_cli/main.py
# hermes_cli/memory_setup.py
# hermes_cli/model_catalog.py
# hermes_cli/models.py
# hermes_cli/nous_subscription.py
# hermes_cli/npm_engine.py
# hermes_cli/plugin_index.py
# hermes_cli/plugins.py
# hermes_cli/plugins_cmd.py
# hermes_cli/profile_distribution.py
# hermes_cli/profiles.py
# hermes_cli/prompt_size.py
# hermes_cli/psutil_android.py
# hermes_cli/runtime_repair.py
# hermes_cli/security_advisories.py
# hermes_cli/security_audit.py
# hermes_cli/security_audit_startup.py
# hermes_cli/service_manager.py
# hermes_cli/session_export_md.py
# hermes_cli/setup.py
# hermes_cli/skills_hub.py
# hermes_cli/slack_cli.py
# hermes_cli/status.py
# hermes_cli/subcommands/gateway.py
# hermes_cli/subcommands/uninstall.py
# hermes_cli/tools_config.py
# hermes_cli/uninstall.py
# hermes_cli/update_cmd.py
# hermes_cli/update_contract.py
# hermes_cli/update_inventory.py
# hermes_cli/update_lock.py
# hermes_cli/update_receipt.py
# hermes_cli/urllib_security.py
# hermes_cli/web_routers/local_models.py
# hermes_cli/web_routers/profiles.py
# hermes_cli/web_routers/skills.py
# hermes_cli/web_server.py
# hermes_constants.py
# hermes_state.py
# plugins/disk-cleanup/__init__.py
# plugins/disk-cleanup/disk_cleanup.py
# plugins/google_meet/node/registry.py
# plugins/google_meet/node/server.py
# plugins/google_meet/process_manager.py
# plugins/google_meet/realtime/openai_client.py
# plugins/hermes-achievements/dashboard/plugin_api.py
# plugins/memory/hindsight/__init__.py
# plugins/memory/honcho/__init__.py
# plugins/memory/honcho/cli.py
# plugins/memory/honcho/client.py
# plugins/memory/honcho/oauth.py
# plugins/memory/honcho/session.py
# plugins/memory/mem0/__init__.py
# plugins/memory/mem0/_setup.py
# plugins/memory/openviking/__init__.py
# plugins/memory/retaindb/__init__.py
# plugins/memory/supermemory/__init__.py
# plugins/platforms/a2a/protocol.py
# plugins/platforms/dingtalk/adapter.py
# plugins/platforms/discord/adapter.py
# plugins/platforms/feishu/adapter.py
# plugins/platforms/google_chat/adapter.py
# plugins/platforms/matrix/adapter.py
# plugins/platforms/photon/adapter.py
# plugins/platforms/photon/auth.py
# plugins/platforms/photon/cli.py
# plugins/platforms/slack/adapter.py
# plugins/platforms/teams/adapter.py
# plugins/platforms/telegram/adapter.py
# plugins/platforms/wecom/callback_adapter.py
# plugins/platforms/whatsapp/adapter.py
# plugins/teams_pipeline/store.py
# plugins/video_gen/fal/__init__.py
# plugins/web/ddgs/provider.py
# plugins/web/exa/provider.py
# plugins/web/firecrawl/provider.py
# plugins/web/parallel/provider.py
# tests/agent/test_ssl_ca_guard.py
# tests/hermes_cli/test_certifi_repair.py
# tests/hermes_cli/test_cmd_update.py
# tests/hermes_cli/test_cmd_update_apt.py
# tests/hermes_cli/test_dashboard_unified_launch.py
# tests/hermes_cli/test_dep_ensure.py
# tests/hermes_cli/test_doctor.py
# tests/hermes_cli/test_doctor_live.py
# tests/hermes_cli/test_gui_command.py
# tests/hermes_cli/test_kanban_boards.py
# tests/hermes_cli/test_kanban_db.py
# tests/hermes_cli/test_lazy_refresh_venv_repair.py
# tests/hermes_cli/test_memory_setup_provider_arg.py
# tests/hermes_cli/test_nous_subscription.py
# tests/hermes_cli/test_pip_install_detection.py
# tests/hermes_cli/test_profile_export_credentials.py
# tests/hermes_cli/test_psutil_android_extract.py
# tests/hermes_cli/test_status.py
# tests/hermes_cli/test_tui_npm_install.py
# tests/hermes_cli/test_update_fleet_restart_pending.py
# tests/hermes_cli/test_update_head_moved_gate.py
# tests/hermes_cli/test_update_interrupted_recovery.py
# tests/hermes_cli/test_web_server.py
# tests/hermes_cli/test_web_ui_build.py
# tests/test_hermes_logging.py
# tests/test_managed_runtime_resolution.py
# tests/tools/test_browser_chromium_autoinstall.py
# tests/tools/test_browser_chromium_check.py
# tests/tools/test_browser_homebrew_paths.py
# tests/tools/test_browser_lightpanda.py
# tests/tools/test_browser_npx_warmup.py
# tests/tools/test_browser_open_timeout.py
# tests/tools/test_browser_orphan_reaper.py
# tests/tools/test_browser_real_profile.py
# tests/tools/test_browser_suspect_recycle.py
# tests/tools/test_find_shell.py
# tests/tools/test_local_env_blocklist.py
# tests/tools/test_macos_protected_search.py
# tests/tui_gateway/test_compute_host.py
# tools/approval.py
# tools/blueprints.py
# tools/bot_mode_dm.py
# tools/bot_mode_probe.py
# tools/bot_relay.py
# tools/browser_tool.py
# tools/browser_use_cli.py
# tools/checkpoint_manager.py
# tools/code_execution_tool.py
# tools/code_kernel.py
# tools/computer_use/cua_backend.py
# tools/cronjob_tools.py
# tools/discord_tool.py
# tools/environments/base.py
# tools/environments/daytona.py
# tools/environments/local.py
# tools/environments/modal.py
# tools/environments/vercel_sandbox.py
# tools/fal_common.py
# tools/file_operations.py
# tools/lazy_deps.py
# tools/mcp_tool.py
# tools/neutts_synth.py
# tools/process_registry.py
# tools/read_extract.py
# tools/registry.py
# tools/skill_ledger.py
# tools/skill_linter.py
# tools/skill_manager_tool.py
# tools/skill_usage.py
# tools/skills_ast_audit.py
# tools/skills_guard.py
# tools/skills_hub.py
# tools/skills_sync.py
# tools/skills_sync_client.py
# tools/skills_tool.py
# tools/terminal_scope.py
# tools/terminal_tool.py
# tools/tirith_security.py
# tools/transcription_tools.py
# tools/tts_tool.py
# tools/vision_tools.py
# tools/voice_mode.py
# tools/wake_word.py
# tools/web_result_cache.py
# tools/website_policy.py
# tools/working_diff.py
# tools/write_approval.py
# tui_gateway/entry.py
# tui_gateway/methods_tools.py
# tui_gateway/server.py
2026-09-04 13:03:39 -04:00
Teknium
f36355859b
refactor(hermes_cli/update): share profile-home + socket-identity probes between receipt and inventory; fold refusal builder; collapse try/except-pass
2026-09-02 21:49:26 -07:00
Teknium
2c7f5d12b5
refactor(hclib): cron/update/install lifecycle — cron status, update_* receipts and recovery, install repair, service manager
2026-09-02 14:45:25 -07:00
ethernet
f9656f111a
refactor: remove Android/Termux support entirely
...
Rip out the Termux/Android install lane: constraints-termux.txt,
psutil_android extraction, termux-browser tests, the apt install-method
lane in install.sh, termux api detection, and the TUI termux layout.
Zero added termux lines; 255 removed. System prompt and skill-utils
termux branches drop with the platform they served.
Rebuilt from ethie/pm (f8236a2d91, 7ad9f0c7a5, 8446c871b6, 82fb8e09d1)
onto the pm-store stack. 11 hot files hand-merged; test_code_execution
restored to branch-final (termux path assertions removed).
2026-08-31 18:00:48 -04:00
Teknium
4860978115
feat(update): image/package-managed installs refuse in-place updates through one shared gate ( #91277 Phase 3)
...
Every surface that can start an in-place mutation — hermes update
(apply), update --check, and the dashboard's update endpoint — now
routes through evaluate_update_admission(): the baked image-provenance
marker first (authoritative; a bind-mounted checkout inside a container
looks like git to the heuristics while the filesystem is an immutable
image), then the pre-existing docker/nix/apt heuristics verbatim.
A refusal prints the real update command for the deployment kind,
records a 'refused' receipt (fleet tooling sees 'not updatable in
place, use <cmd>' instead of a silent non-update), and exits 2 on CLI
surfaces — distinct from exit-1 errors. The dashboard response keeps
the per-kind error codes its UI already keys on. collect_runtime
inventory()'s updatable_in_place also honors the marker, so --plan and
receipts report image-managed truthfully even with a bind-mounted
checkout.
Live E2E (real hermes update subprocesses, real marker file): apply and
--check both refuse exit-2 with docker-pull guidance, receipts land as
refused/image-marker, an in-place corrupted marker still refuses
(fail-closed), removing the marker admits the git checkout.
2026-08-26 11:41:04 -07:00
