Adam Durham 0788e759dd fix(state): session recovery must recognize cron_/bg_/room_ ids ...

session recovery's salvage classifier decided "is this cell a session id?"
with SESSION_ID_PATTERN alone (^\d{8}_\d{6}_), which only covers ids minted
by new_session_id. Several first-class surfaces DERIVE an id instead:

  cron/scheduler.py                 f"cron_{job_id}_{now:%Y%m%d_%H%M%S}"
  hermes_cli/cli_commands_mixin.py  f"bg_{now:%H%M%S}_{uuid4().hex[:6]}"   (/bg)
  gateway/.../api_server_room_dispatch.py  f"room_{sha256(seed)[:32]}"

Measured against a copy of a real 3,373-session store: 379 ids (11.2%)
failed the pattern -- 375 cron, 1 bg, plus 3 non-session test artifacts.
job_id is normally uuid4().hex[:12] (cron/jobs.py) but legacy/user ids like
"job-1" are real and still present in live stores, so the cron recognizer
accepts a general job-id token.

Two distinct consequences, both fixed:

1. DROPPED SESSIONS. classify_lost_and_found_row() returned None for those
   rows, so recovery silently discarded every cron/bg/room session. On the
   real store: 2994 of 3373 rows kept before, 3370 after (the 3 still
   dropped are 's'/'session-key'/'pre-compress-key' -- not sessions,
   correctly rejected).

2. POISONED LAYOUT INFERENCE. parent_session_id is a _TEXT_SHAPE_RULES
   column checked with the same predicate. A cron job's CHILD session has an
   ordinary timestamp id, so it classifies fine and becomes layout evidence
   -- while carrying the unrecognised cron id in parent_session_id. Since one
   bad sampled value vetoes a candidate layout, a single such row collapsed
   inference for the whole sessions table, i.e. the positional-guessing path
   #101409's fix exists to prevent. Proven on a synthetic store: 20 clean +
   cron parent + child-of-cron -> EMPTY before, 59/59 columns named and 0
   wrong after.

Fix: hermes_state_ids gains SESSION_ID_RECOGNIZERS + is_known_session_id(),
the recognition side of the minting contract; _is_session_id() consults it.
Each pattern is anchored on exactly what its minting site fixes -- these are
layout sentinels, so a loose pattern would buy recall at the cost of
wrong-column mappings.

Tests: tests/hermes_state/test_session_id_recognition_recovery.py (new, 43
cases) covers recognition, non-dropping, the parent_session_id poisoning
path, and adversarial wrong-layout rejection (rotated layouts still vetoed;
near-miss and arbitrary text still rejected). Mutation-checked: with the
added recognizers removed, 12 of 43 fail -- including the end-to-end
poisoning test.

(cherry picked from commit f82b7182f03e1eee55c832a3f90fffbe580d1f5c)

2026-10-04 12:05:37 +05:30

..

dashboard_auth

refactor(auth): table-drive loopback redirect host canonicalisation

2026-10-02 01:05:58 +05:30

local_runtime

fix(local-runtime): leave a live owner's server to its existing path; keep legacy owner check

2026-10-03 23:06:58 -04:00

observability

fix(telemetry): record auxiliary model calls with their real outcome

2026-10-03 13:38:29 -07:00

proxy

refactor(proxy): derive the bind policy once and pin the refusal status

2026-10-03 16:29:17 +05:30

subcommands

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

web_routers

fix(dashboard): run gateway-liveness probes off the dashboard event loop

2026-10-04 11:57:03 +05:30

__init__.py

fix(cli): keep hermes_cli import off os.environ; run the import-purity test on Windows

2026-09-24 14:47:06 -04:00

_early_recovery.py

fix(marker): zombie-aware stale-marker self-heal parity across all readers

2026-09-29 20:57:17 -05:00

_install_repair.py

…

_launchers.py

fix(cli): read a POSIX launcher's interpreter the way sh does

2026-10-03 22:46:14 -04:00

_old_updater.py

fix(update): mark current updater frames with a sentinel, not missing locals

2026-09-29 16:47:48 +05:30

_parser.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

_subprocess_compat.py

fix(git): keep trailing spaces in the top-level path; refuse relative origins under a caller GIT_DIR

2026-10-02 02:31:03 +05:30

_update_takeover.py

fix(pm): collect generations after maintenance syncs

2026-09-27 02:55:39 -07:00

active_sessions.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

agent_import_sync.py

…

agent_import.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

agent_plugins.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

AGENTS.md

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

anon_auth.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

auth_commands.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

auth_constants.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

auth_device_flow.py

fix(auth): bound device-poll edge backoff and gate 403 on x-vercel-mitigated

2026-09-24 18:06:48 +05:30

auth_error_copy.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

auth_minimax.py

…

auth_model_picker.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

auth_nous.py

fix(auth): detect the lock holder for real and route permanent lock failures

2026-09-29 18:47:44 -05:00

auth_oauth_grants.py

fix(backup): preserve live OAuth grants on snapshot restore

2026-10-03 16:30:59 +05:30

auth_oauth_pkce_plugin.py

fix(auth): PKCE token errors reuse the canonical grant-dead code set

2026-09-20 18:21:34 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): user provider plugin owns its aliases and display name in the auth registry

2026-09-20 18:29:22 -07:00

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_zai_kimi.py

…

auth.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

azure_detect.py

fix(cli): bound Azure detect response reads

2026-09-19 09:23:22 -07:00

backend_retirement.py

…

backup_restore.py

fix(backup): preserve live OAuth grants on snapshot restore

2026-10-03 16:30:59 +05:30

backup_sqlite.py

…

backup.py

fix(backup): fail closed for skipped snapshot auth restore

2026-10-03 16:30:59 +05:30

bang_shell.py

fix(cli): fail closed without bang shell sanitizer

2026-09-20 18:20:44 -07:00

banner.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

blueprint_cmd.py

…

boot_bootstrap.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

browser_connect.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

browser_runtime.py

fix(bot-desktop): choose PM headed Chromium despite headless override

2026-09-24 01:40:31 -04:00

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

chat_catalog.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

checkpoints.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

claw.py

fix(backup): cap logged zip-backup errors and clarify salvage messages

2026-09-27 18:19:17 +05:30

cli_agent_setup_mixin.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

cli_auto_maintenance.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

cli_billing_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_error_copy.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_turn_mixin.py

fix(voice): honor configured silence_threshold and stop gating streaming TTS on sounddevice

2026-10-02 18:35:45 -05:00

cli_commands_mixin.py

fix(cli): don't report a partially restored snapshot as missing

2026-10-03 16:30:59 +05:30

cli_config_load.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

cli_footer_split.py

fix: keep cli_footer_split importable under the prompt_toolkit test stubs

2026-09-20 13:35:09 -07:00

cli_info_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_init_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_loops_mixin.py

fix(cli): validate every /queue index before int()

2026-10-02 22:47:50 -04:00

cli_modal_mixin.py

Revert "feat(cli): approval and clarify panels wait until answered"

2026-10-01 13:23:12 -07:00

cli_model_switch_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_output.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_dock.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_notifications.py

fix(process): heartbeats wake the agent only on new output, and never as a user bubble

2026-09-26 22:19:53 -05:00

cli_render.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_session_dock.py

feat(cli): live dock shows the standing /goal and queued prompts

2026-09-23 10:05:40 -07:00

cli_session_mixin.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

cli_shutdown.py

fix(cli): shut down the active agent's memory provider before lease release when cli.agent was retired

2026-09-30 14:23:52 -05:00

cli_single_query.py

fix(kanban): retry a failed worker turn in place; carry the recovered response

2026-09-30 22:30:35 -04:00

cli_status_bar_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_stream_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_subagent_monitor.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_input.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_tui_mixin.py

Revert "feat(cli): approval and clarify panels wait until answered"

2026-10-01 13:23:12 -07:00

cli_tui_runtime_mixin.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

cli_unknown_command.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_voice_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

docs(models): get_codex_model_ids documents its fallback return

2026-10-02 13:34:54 +05:30

codex_runtime_plugin_migration.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

…

commands_platforms.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

commands.py

docs(goal): show the -- <text> escape in the /goal args hint

2026-10-03 20:44:07 +05:30

completion.py

…

config_backups.py

…

config_check_diagnostics.py

fix(cli): judge saved selections the way the runtime does in config check

2026-09-29 20:34:45 +05:30

config_defaults.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

config_effective.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

config_env_routing.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

config_home.py

…

config_language.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

config_migrations.py

Merge main into chore/relay-0.9

2026-09-28 13:08:49 -07:00

config_providers.py

fix(config): skip a configured provider URL that urlparse rejects instead of raising

2026-10-03 16:31:09 +05:30

config_read_errors.py

fix(config): a save refused over bad YAML says to fix the file, not "try again"

2026-09-23 15:05:44 -07:00

config.py

refactor(utils): stage every atomic writer's temp through one mkstemp_beside helper

2026-10-02 01:02:00 +05:30

console_engine.py

refactor(console): sessions export uses the shared export_projection()

2026-10-03 19:21:54 +05:30

container_boot.py

fix(docker): boot a gateway.standalone profile's own s6 slot at container start (#120524, salvage #120525)

2026-09-28 04:04:23 -07:00

context_switch_guard.py

fix(cli): model-switch warning quotes the capped compression trigger

2026-09-19 16:28:57 +05:30

copilot_auth.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

credential_lifecycle.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

cron.py

fix(cron): keep a sticky last_failure stamp so a healed run stays visible

2026-10-02 20:29:53 -05:00

curator.py

feat(skills): external mounts get an 'external' provenance tier (#108032)

2026-09-30 23:10:24 -05:00

curses_ui.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

dashboard_procs.py

refactor(serve): name the Desktop backend lock file once

2026-10-03 19:51:54 +05:30

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug_redaction.py

fix(debug): stop encoded URL param keys at encoded separators

2026-10-03 21:15:17 +05:30

debug.py

refactor(debug): simplify the truncated flag and hoist the share_nous import

2026-10-03 21:15:17 +05:30

default_soul.py

…

desktop_build_lock.py

fix(desktop): serialize the mutable build preflight behind a cross-process lock

2026-09-29 19:49:52 -05:00

desktop_console.py

…

desktop_update_verify.py

fix(desktop): stop a stale hand-off root failing a healthy update

2026-09-26 21:43:07 -05:00

diagnostics_upload.py

fix(debug): keep share_to_nous exception types

2026-10-03 21:15:17 +05:30

dingtalk_auth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_config.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

doctor_connectivity.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

doctor_live.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_platform.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

doctor_report.py

…

doctor_state.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

doctor_tools.py

chore(memory): remove bundled honcho provider; install from the plugin catalog

2026-10-02 04:39:28 -07:00

doctor.py

feat(relay): name the Relay plugin files in doctor and the startup log

2026-09-29 12:16:43 -04:00

dump.py

fix(debug): redact support egress before truncation

2026-10-03 21:15:17 +05:30

env_loader.py

refactor(utils): stage every atomic writer's temp through one mkstemp_beside helper

2026-10-02 01:02:00 +05:30

fallback_cmd.py

…

fallback_config.py

fix(cron): a pinned job never falls back to the global fallback chain (#120312)

2026-09-23 10:42:18 -04:00

focus_view.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

foreign_sessions_browser.py

…

foreign_sessions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

free_tier_bootstrap.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

fs_utils.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

fix(gateway): name the display-wake stall in the launchd wrapper docstring; gate the macOS wrapper test with the platforms marker

2026-09-27 01:04:39 +05:30

gateway_migrate_guards.py

fix(migrate): auto-fold a unit-less default when every secondary shares one manager

2026-09-21 10:11:19 -07:00

gateway_migrate.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

gateway_multiplex_mode.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

gateway_multiplex_s6.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

gateway_multiplex_served.py

fix(whatsapp): serve a paired WhatsApp session on every profile under the host multiplexer

2026-10-03 21:57:13 -04:00

gateway_profile_lifecycle.py

fix(gateway): explain why parked restart unparks and status reads runtime first (#124553, salvage #124669)

2026-09-28 13:30:57 -07:00

gateway_setup_wizard.py

fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer

2026-09-23 07:48:32 -07:00

gateway_supervised_restart.py

…

gateway_windows_legacy.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

gateway_windows.py

fix(update): scope Windows gateway lifecycle to current install

2026-09-27 02:57:28 -07:00

gateway.py

fix(launchers): fall back to the runtime store only when the tree has none

2026-10-03 21:44:47 -04:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

github_api.py

fix(update-check): authenticate api.github.com calls and name the branch-tip failure

2026-09-21 18:56:56 -04:00

gitlock.py

fix(update): migrate the first cut's gc.auto=0 too, by both cuts' fingerprint

2026-10-02 14:17:41 -07:00

goal_command.py

refactor(goal): one control first-word set for is_goal_control

2026-10-03 20:44:07 +05:30

goals.py

fix(goals): pause when the session workspace is missing

2026-09-29 18:09:20 -05:00

gui_uninstall.py

fix(gui): detect leftover desktop install records

2026-10-02 20:51:34 +00:00

heartbeat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

home_data_layout.py

…

hooks.py

feat(telemetry): per-model tool-call quality, friction and context-peak counters

2026-09-28 12:43:03 -07:00

image_provenance.py

…

init_command.py

fix(init): target the session's active directory, not the process cwd

2026-10-01 04:50:26 -05:00

input_sanitize.py

…

install_identity.py

…

inventory.py

perf(inventory): resolve fast capability once per model

2026-10-04 02:12:57 +05:30

journey.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

refactor(kanban): answer linked-worktree checks with one rev-parse

2026-10-03 16:31:23 +05:30

kanban_db.py

fix(kanban): fence the explicit-board override to unfenced callers

2026-10-02 22:21:27 -05:00

kanban_decompose.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_diagnostics.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_ops.py

refactor(kanban): fold the worktree sharing guard into one helper

2026-10-03 16:31:23 +05:30

kanban_output.py

fix(kanban): expose task runtime limit in JSON

2026-09-20 18:43:59 -07:00

kanban_parser.py

refactor(kanban): narrow _nonnegative_int except to ValueError

2026-09-22 13:41:11 +05:30

kanban_pr_acceptance_store.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_pr_acceptance.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_specify.py

fix(kanban): board identity follows the bound profile override, not the launch env

2026-09-23 08:09:47 -07:00

kanban_swarm.py

…

kanban_transfer.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

kanban.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

lifecycle.py

fix(gateway): await async pre_gateway_dispatch callbacks on the event loop

2026-09-21 23:47:51 -07:00

linux_desktop_entry.py

fix(desktop): Linux launcher targets a CLI that can serve the app and skips the rebuild (#126650)

2026-09-28 12:24:52 -05:00

logs.py

fix(logs): parse the update/handoff logs' ISO-8601 stamps; cover them in the LOG_FILES stamp contract

2026-09-29 21:48:25 -05:00

loops.py

…

macos_signing.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

macos_tcc_anchor.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

main_agent_cmds.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

main_dashboard.py

fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)

2026-09-28 04:44:29 -07:00

main_dep_hints.py

fix(cli): name Windows Smart App Control when it blocks the dashboard runtime

2026-09-25 16:28:14 -05:00

main_desktop.py

refactor(desktop): one resolver for the packaged app's resources dir

2026-10-02 23:30:18 +05:30

main_install_repair.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

main_platform_setup.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

main_profile_recovery.py

docs(profiles): say the interactive uninstall menu still offers a full wipe

2026-09-29 15:45:52 +05:30

main_provider_setup.py

feat(cli): local models in hermes model

2026-10-03 22:32:13 -04:00

main_tui_launch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

managed_scope.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

managed_uv.py

fix(install): reinstall a managed uv that no longer runs

2026-09-19 02:44:02 -07:00

mcp_app_detection.py

…

mcp_catalog.py

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

mcp_config.py

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

mcp_picker.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_security.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_startup.py

fix(mcp): connect servers added to config on the next agent build

2026-09-26 17:04:25 -05:00

mem_trim.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

memory_oauth.py

fix(memory): resolve OAuth flow in requested profile scope

2026-09-23 07:49:35 -07:00

memory_provider_migration.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

memory_setup.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

middleware.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

model_catalog.py

fix(models): catalog SWR refresh writes the requesting profile's cache (#103778, salvage #103779)

2026-09-28 05:37:55 -07:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

model_setup_flows_bedrock.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_common.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows_local.py

feat(cli): local models in hermes model

2026-10-03 22:32:13 -04:00

model_setup_flows.py

fix(models): merge StepFun Step Plan live list with curated catalog on the picker path

2026-10-02 21:43:17 -05:00

model_switch_providers.py

fix(model-picker): stop the 50-model cap cutting the Nous and OpenRouter free tier

2026-09-29 12:55:46 -07:00

model_switch.py

fix(cli): let persist_switch_by_default cover provider-scoped model picks

2026-10-02 22:40:31 -05:00

models_catalog_static.py

fix(cli): add step-3.7-flash to StepFun picker by merging live and static catalogs

2026-10-02 20:24:37 -05:00

models_detect.py

…

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

fix(pricing): verify custom upstream identity

2026-10-02 22:58:26 -05:00

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(model): validate Nebius relay models against base URL

2026-09-24 09:40:41 -04:00

models.py

fix(models): keep Daybreak and gpt-5.6-cyber on the Priority speed tier

2026-10-04 02:12:57 +05:30

nous_account.py

refactor(web): drop the gate's leftovers and keep the tier rules tested

2026-10-04 00:10:54 +05:30

nous_auth_keepalive.py

fix(auth): scope Nous keepalive on multiplexed gateways

2026-09-23 06:46:02 -07:00

nous_billing.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

nous_subscription.py

refactor(image_gen): managed_route() owns stored-value normalisation; unreadable Krea refs return an error

2026-10-01 16:22:28 +05:30

npm_engine.py

…

old_updater_deps.py

…

old_updater_main.py

…

onepassword_secrets_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

oneshot.py

fix(cli): finalize one-shot Relay sessions (#79471)

2026-10-03 19:01:42 -07:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

feat(plugins): requires.gpu gates a plugin server on the host's GPU vendor

2026-10-03 10:26:12 -07:00

plugin_catalog.py

refactor: keep subdir/sha shape rules at the admission gate only

2026-10-01 10:46:45 -07:00

plugin_compat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugin_dev.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugin_events.py

fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop

2026-09-24 02:03:03 -07:00

plugin_host_child.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_host_profiles.py

fix(plugins): model-provider plugins load under plugins.isolation: host on Windows

2026-10-03 10:15:11 -07:00

plugin_host_wire.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_host.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_isolation_audit.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugin_isolation.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugin_packs.py

feat(telemetry): record plugin installs as extension-install events

2026-09-28 12:43:03 -07:00

plugin_validate_core_override.py

fix(plugins): no core override check catches patch helpers that are methods

2026-10-03 13:34:08 -07:00

plugin_validate_desktop.py

feat(plugin-catalog): refuse plugins that override Hermes core or Desktop at runtime

2026-10-01 12:41:57 -07:00

plugin_validate_locales.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugin_validate.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugins_activation_live.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_activation.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_admission.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_cadence.py

…

plugins_cmd_capabilities.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_catalog.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugins_cmd_git.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_install.py

fix(plugins): a forced reinstall of the same source keeps the user's files

2026-10-03 21:40:42 -04:00

plugins_cmd_listing.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugins_cmd_remove.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_toggle.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_update.py

fix(plugins): carry user files across staged updates

2026-09-27 01:42:52 +05:30

plugins_cmd.py

fix(plugins): let --yes-deps answer the consent gate for headless installs

2026-10-02 03:40:17 -07:00

plugins_discovery.py

Merge origin/main into chore/relay-0.9

2026-09-28 09:22:11 -07:00

plugins_dispatch.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

plugins_ledger.py

feat(desktop): the Connectors page replaces the MCP tab (#119074)

2026-09-22 17:16:00 +05:30

plugins_loader.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugins_manifest.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_provenance.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins_settings.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_state.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_transaction.py

fix(memory): warn every profile whose memory provider is unavailable; say "Install declined" for a first install

2026-10-02 04:09:57 -07:00

plugins_updates.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins.py

fix(cron): routed fires are multiplexed at the worker handoff; managed keys keep policy precedence

2026-09-29 22:57:48 -04:00

portal_cli.py

fix(portal): show FAL for an unset image pick with a Portal model id

2026-10-01 16:22:28 +05:30

post_update.py

fix(update): an adoption stamp never discharges an owed completion tail

2026-10-01 22:35:29 -07:00

process_identity.py

fix(update): a stopped-but-unreaped dashboard is no longer a pre-update survivor

2026-09-27 21:29:39 -07:00

profile_channels.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

profile_cmd.py

fix(profiles): carry install records and skip install staging when cloning plugins

2026-10-02 01:29:41 -07:00

profile_describer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

profile_distribution.py

refactor(profiles): one predicate decides what a distribution never writes

2026-10-03 16:29:29 +05:30

profile_identity.py

…

profile_memory_config.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profiles_service_cleanup.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

profiles.py

refactor(profiles): name the OS credential stores once

2026-10-03 19:02:12 +05:30

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): a timeout-only providers.<name> block no longer shadows the builtin

2026-09-29 20:57:57 -05:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

fix(dashboard): bound the PTY helper grace and await background closes

2026-10-02 14:37:54 +05:30

pty_session.py

fix(dashboard): bound the PTY helper grace and await background closes

2026-10-02 14:37:54 +05:30

quiet_single_query.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

relaunch.py

fix(metrics): startup latency counts once per client launch, never after an in-place exec

2026-09-28 12:43:03 -07:00

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(relay): honor ambient plugin configuration

2026-09-21 14:02:05 -07:00

release_channels.py

fix(update): only an explicit hermes update retries channel reads

2026-09-27 03:41:42 -07:00

resource_limits.py

…

route_identity.py

…

runtime_paths.py

…

runtime_provider_backends.py

fix(runtime_provider): bind an OPENAI_BASE_URL-bound OPENAI_API_KEY to its origin, not its hostname

2026-10-03 16:30:27 +05:30

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

runtime_state.py

fix(pm): close the lease create→flock race on the writer side, no grace window

2026-09-28 04:44:29 -07:00

sandbox_image_switch.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

security_audit_startup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

security_audit.py

…

send_cmd.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

service_manager.py

fix(docker): stop sourcing the relocatable venv's activate from sh

2026-09-24 12:30:00 -04:00

session_export_html.py

…

session_export_md.py

…

session_export.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

session_filters.py

…

session_listing.py

fix(sessions): add sessions.show_subagents to list delegate runs

2026-09-26 20:40:40 -05:00

session_lost_and_found.py

fix(state): session recovery must recognize cron_/bg_/room_ ids

2026-10-04 12:05:37 +05:30

session_recap.py

…

session_recovery.py

fix(recovery): repair out-of-window timestamp cells in the recovered database

2026-09-25 10:46:54 -05:00

session_reset_retirement.py

fix(gateway): warn when config still declares a retired idle/daily session_reset

2026-09-28 15:54:01 +05:30

session_schema_history.py

fix(sessions): un-hide an auto-archived chat when it is resumed or compressed

2026-09-28 21:03:09 -04:00

sessions_cmd_browse.py

fix(sessions): tell the user when a delete is refused for a live turn

2026-09-27 20:49:04 +05:30

sessions_cmd_journal_mode.py

fix(sessions): let set-journal-mode --force waive only a failed holder scan

2026-09-24 18:08:24 +05:30

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(sessions): /save json snapshots keep compaction-archived turns too

2026-10-03 19:21:54 +05:30

sessions_repair_profiles.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

refactor(onboarding): remove the intro cinematic, the guided-onboarding tests, and their comments (#126139)

2026-09-28 08:33:43 +00:00

setup_quick.py

feat(telemetry): record setup completion from the CLI wizard

2026-09-28 12:43:03 -07:00

setup_summary.py

…

setup_terminal.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

setup_tts.py

…

setup_whatsapp_cloud.py

fix(whatsapp): tighten cloud webhook identity binding and its diagnostics

2026-10-02 02:58:18 +05:30

setup.py

feat(telemetry): shared-metrics opt-in offer on every surface

2026-09-30 21:15:08 -07:00

shared_profile_warning.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(skills): list and prompt index advertise only names skill_view loads

2026-10-04 02:54:56 +05:30

skin_cmd.py

…

skin_engine.py

fix(desktop): pass skin customCSS through to desktop theme context

2026-09-25 20:00:57 -05:00

slack_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

slash_exec.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

source_build.py

fix(update): reuse the packaged desktop app when HEAD has not moved

2026-10-02 23:30:18 +05:30

source_check.py

fix(update): keep never-pushed and unmerged branches pinned in source check

2026-09-28 21:02:35 -04:00

source_completion.py

fix(update): serialize source-completion tails on the shared update lock; skip Windows file-manager metadata in freshness hashing (#123376, #122803)

2026-10-01 00:15:05 -05:00

source_releases.py

fix(update): follow the main branch when its channel record is unpublished

2026-09-24 14:23:48 -04:00

source_stamp.py

fix(update): an adoption stamp never discharges an owed completion tail

2026-10-01 22:35:29 -07:00

sqlite_runtime.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

sqlite_safe_read.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

sqlite_util.py

…

ssh_workspace_fs.py

fix(desktop): secure SSH workspace browsing

2026-09-29 15:28:19 -05:00

stale_modules.py

…

status_auth.py

feat(cli): make the summary the default hermes status, --full for every section

2026-10-01 22:03:11 -07:00

status_bar_git.py

…

status_report.py

fix(status): render the session profile home

2026-09-27 07:43:23 -05:00

status.py

fix(status): one row per messaging platform, judged by the gateway (#96190)

2026-10-01 22:27:03 -07:00

stderr_timestamp.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

stdio.py

…

steward.py

fix(pm): resolve the install stamp in pm.paths so sealed stages can read it

2026-09-24 11:12:27 -04:00

stream_json.py

…

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

tool_availability_notices.py

…

tools_config_cua.py

fix(updates/win): click-session poll, Intel-Mac installer docs, cua-driver opt-in autostart

2026-09-26 17:09:16 -05:00

tools_config_mcp.py

The last four MCP enabled-flag readers use the shared reader (ACP, hermes tools picker, desktop connector card, health sweep) (#119601)

2026-09-22 22:24:31 +00:00

tools_config_post_setup.py

fix(browser): ship the Browser Use CLI engine in every install, Desktop included

2026-09-27 23:53:40 -07:00

tools_config_providers.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

tools_config.py

fix(tools): correct legacy-alias comment in _get_platform_tools

2026-10-02 21:23:30 -05:00

toolset_scope.py

…

toolset_validation.py

test(config): cover plugin MCP servers' mcp-<server> names; name the canonical form in the docstring

2026-10-03 16:29:54 +05:30

uninstall.py

fix(gui): keep shared workspace node_modules on uninstall --gui

2026-10-02 18:06:40 +00:00

update_abort_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_channel.py

feat(release): derive canaries from stable build identity

2026-09-21 22:02:46 -04:00

update_cmd_check.py

fix(update): give the lazy-fetch pack fold room to finish and say when it runs out

2026-10-02 11:41:19 -07:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): restore cron agent-job prompts degraded during the update window

2026-09-29 20:58:24 -05:00

update_cmd_drain_report.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

update_cmd_fleet_checkout.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

update_cmd_fleet_gatewayless.py

fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)

2026-09-23 18:48:33 -05:00

update_cmd_fleet.py

fix: log missing successor evidence for a planned gateway

2026-09-29 21:50:16 -05:00

update_cmd_git.py

fix(cli,desktop): hide every console-subsystem child spawn on Windows

2026-09-29 18:49:58 -05:00

update_cmd_maint.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

update_cmd_stale_survivors.py

fix(cron): stale-code yield reads as an outage in cron status; hermes update restarts proven-stale gateways

2026-09-21 01:57:31 -07:00

update_cmd_stash.py

fix(update): an autostash the update could not restore ends the update partial, never 'Update complete!'

2026-09-28 05:33:25 -07:00

update_cmd_validation.py

…

update_cmd_windows.py

fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds

2026-09-28 04:44:29 -07:00

update_cmd_zip.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

update_cmd.py

fix(update): give the lazy-fetch pack fold room to finish and say when it runs out

2026-10-02 11:41:19 -07:00

update_completion.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

update_contract.py

refactor(update): table-drive the steward refusal rungs

2026-09-24 14:08:22 -04:00

update_finish.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

update_fleet_scope.py

fix(update): judge Windows gateway ownership by home, warn on unreadable ones

2026-09-27 02:57:28 -07:00

update_handoff.py

fix(update): start the post-swap child in the checkout

2026-09-23 06:51:47 -07:00

update_host_obligation.py

fix(update): trim SHA-less obligation salvage to the checkout fallback (#125952, salvage #125964)

2026-09-28 04:44:29 -07:00

update_inventory.py

fix: only unresolved gateway rows make successor evidence ambiguous

2026-09-29 21:50:16 -05:00

update_lock.py

fix(update): decide ancestry link by link so an unreadable /proc/1 cannot hide the orchestrator

2026-09-29 20:58:59 -05:00

update_owning_install.py

chore: read .project-root BOM-tolerantly; drop a trailing blank line

2026-09-28 05:33:25 -07:00

update_receipt.py

fix(update): record Desktop's correlation_id in the update receipt

2026-09-28 21:02:29 -04:00

update_restart_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_serve_obligations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 10:07:50 -04:00

update_serve_resume.py

…

update_stage.py

fix(update_stage): look the shim marker up in the process home, not ~/.hermes

2026-09-21 19:32:37 -04:00

urllib_security.py

fix(urllib): log the default-certificates fallback once, after every bundle failed

2026-09-22 15:55:23 +05:30

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

venv_sync.py

fix(pm): a borrowed HERMES_HOME leaves the source checkout to the root that owns it

2026-10-03 22:46:14 -04:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

voice.py

…

web_deps.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_git.py

fix(worktree): refresh any valid branch name used as a base

2026-09-28 16:23:22 +05:30

web_models.py

fix(desktop): warm local STT on mic-open so cold model load stops timing out transcription (#105955)

2026-09-29 11:40:36 -05:00

web_read_coalescing.py

…

web_server_chat.py

refactor(dashboard): single origin_mismatch return in WS origin guard

2026-10-03 16:54:59 +05:30

web_server_config.py

chore(memory): remove bundled honcho provider; install from the plugin catalog

2026-10-02 04:39:28 -07:00

web_server_cron.py

fix(dashboard): run gateway-liveness probes off the dashboard event loop

2026-10-04 11:57:03 +05:30

web_server_dashboard.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

web_server_files.py

fix(web): resolve Git Bash paths in Windows file APIs

2026-10-03 12:08:23 -04:00

web_server_gateway.py

fix(dashboard): name -p default for unnamed gateway verbs on the default home

2026-09-28 12:18:58 -07:00

web_server_idle_exit.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_idle_proof.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_lifecycle.py

fix(serve): shut down gracefully on parent death instead of os._exit

2026-09-29 19:06:35 -05:00

web_server_mcp.py

fix(profile-scope): bind home and secret tokens inside the try that resets them

2026-09-23 06:46:02 -07:00

web_server_memory.py

fix(plugins): memory provider setup lists the dependencies PM would install

2026-10-01 23:27:08 -07:00

web_server_messaging.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

web_server_oauth.py

fix(dashboard): xAI and MiniMax sign-ins save into the profile they started in, never after a cancel

2026-09-28 12:18:58 -07:00

web_server_owner_exit.py

refactor(serve): one fenced retirement loop for the skew and owner watchdogs

2026-10-03 19:51:54 +05:30

web_server_profiles.py

fix(dashboard): cron delivery targets, blueprints, recommended default, voice config, official skills and debug share answer an unknown ?profile= with 404

2026-09-28 12:18:58 -07:00

web_server_sessions.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

web_server_skew_exit.py

refactor(serve): one fenced retirement loop for the skew and owner watchdogs

2026-10-03 19:51:54 +05:30

web_server.py

fix(process_registry): drop dashboard/serve worker scoping; make the hang test catch the hang

2026-10-03 17:03:54 -04:00

webhook.py

refactor(webhook): drop dead revision snapshot, lock-free reads, CAS owns the disable rule

2026-10-02 02:54:18 +05:30

win_pty_bridge.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

windows_appinstaller_update.py

fix(desktop): run the Windows update checkers from bundled core code

2026-10-02 10:42:07 -04:00

windows_ssh_runtime.py

fix(windows): create protected token descriptors on ARM64

2026-09-21 14:13:07 -04:00

windows_store_update.py

fix(desktop): run the Windows update checkers from bundled core code

2026-10-02 10:42:07 -04:00

worktree_cmd.py

…

worktree_gc.py

revert: stale worktree reaping revalidation (#132260)

2026-10-03 22:03:44 +05:30

worktree_ops.py

revert: stale worktree reaping revalidation (#132260)

2026-10-03 22:03:44 +05:30

write_approval_commands.py

refactor(memory): derive a payload's destructive ops in one place

2026-09-24 15:38:22 +05:30

xai_retirement.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00