teknium1 22716fab2a fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery ...

`scan_directory` (the PluginManager sweep every CLI/gateway/Desktop backend
runs at startup) and `plugins_cmd._scan_level` (`hermes plugins list`, the
dashboard plugins hub, the TUI plugin picker) probed `plugin.yaml` with
`Path.exists()` outside any error handling. `stat()` raises instead of
returning False when the plugin directory itself is unsearchable — Windows
ACLs (WinError 5, the #111804 report) or a POSIX mode-000 folder — so a
single bad plugin folder took every other plugin down with it and the
Desktop backend exited before announcing its port.

Both scans now warn and skip that one directory, matching the dashboard
manifest scan fixed in the preceding (salvaged) commit.

Part of #111804

2026-09-15 18:48:59 -07:00

..

dashboard_auth

…

local_runtime

test(local-runtime): trim idle-probe salvage to two invariants

2026-09-15 05:32:58 -07:00

observability

…

proxy

…

subcommands

fix(config): refuse an unknown path under a known section before writing

2026-09-15 18:28:49 -07:00

web_routers

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

__init__.py

…

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

…

_parser.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

…

_subprocess_compat.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

active_sessions.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

…

AGENTS.md

fix(config): route every registered env setting through .env from config set/get/unset

2026-09-15 18:28:49 -07:00

anon_auth.py

fix(free-tier): classify_mint_exception keeps an uncoded AuthError's wait hint

2026-09-15 20:44:42 +05:30

anon_sign_in_cli.py

…

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex.py

fix: refresh the credential that 401'd on the Codex /usage retry

2026-09-15 04:53:38 -07:00

auth_commands.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_constants.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_oauth_grants.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

auth_openrouter.py

…

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

azure_detect.py

…

backup.py

fix(profiles): share the runtime-tree trio with backup via hermes_constants

2026-09-15 18:26:38 -07:00

bang_shell.py

…

banner.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

fix(checkpoints): clear-legacy trims to two real-path tests, aligns failure line with the log

2026-09-15 18:24:22 -07:00

claw.py

…

cli_agent_setup_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_chat_turn_mixin.py

fix(cli): preserve image attachments when re-queueing interrupt messages

2026-09-15 06:36:55 -07:00

cli_commands_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_info_mixin.py

fix: widen the remaining config.yaml stat caches to file_signature

2026-09-15 06:29:50 -07:00

cli_loops_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_modal_mixin.py

…

cli_model_switch_mixin.py

…

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_notifications.py

…

cli_session_mixin.py

…

cli_status_bar_mixin.py

…

cli_stream_mixin.py

…

cli_subagent_monitor.py

…

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

fix(cli): import file_signature in TUI run-state init

2026-09-15 20:47:06 +05:30

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

…

clipboard.py

…

codex_models.py

…

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

…

commands.py

…

completion.py

…

config_backups.py

…

config_defaults.py

fix: checkpoint store gc never runs inside a tool call or gateway startup

2026-09-15 10:57:16 -07:00

config_effective.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

config_env_routing.py

fix(config): route every registered env setting through .env from config set/get/unset

2026-09-15 18:28:49 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

…

config_providers.py

…

config.py

fix(config): treat empty-dict DEFAULT_CONFIG sections as open containers in the typo gate

2026-09-15 18:28:49 -07:00

console_engine.py

…

container_boot.py

…

context_switch_guard.py

…

copilot_auth.py

…

credential_lifecycle.py

…

cron.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

curator.py

test(journey): one end-to-end invariant for foreground-created skills; docs + list-unmanaged label

2026-09-15 05:38:31 -07:00

curses_ui.py

…

dashboard_procs.py

fix(cli): name the dashboard kill grace and pin it against the lifespan teardown

2026-09-15 18:29:16 -07:00

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor_connectivity.py

…

doctor_live.py

…

doctor_platform.py

fix(doctor): warn when database.journal_mode=delete never applied to a WAL database

2026-09-15 18:28:26 -07:00

doctor_report.py

…

doctor_state.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

doctor_tools.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

dump.py

…

env_loader.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

fix(free-tier): setup.ready carries the failure block flat, the shape setup.status already spreads

2026-09-15 20:44:42 +05:30

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

…

gateway_migrate_guards.py

…

gateway_migrate.py

…

gateway_multiplex_served.py

…

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(update-windows): per-profile cold-start probes its own home and runs after the active spawn

2026-09-15 04:13:44 -07:00

gateway.py

refactor(gateway): move the on-demand s6 slot helper into service_manager, trim tests

2026-09-15 18:30:05 -07:00

git_credentials.py

…

gitlock.py

…

goal_command.py

…

goals.py

…

gui_uninstall.py

…

heartbeat.py

…

hooks.py

…

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

…

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_db_dispatch.py

fix(kanban): give a finished worker a grace window before the terminal reaper signals it

2026-09-15 18:35:32 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

…

kanban_db.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_output.py

…

kanban_parser.py

fix(kanban): claim-less complete no longer closes a live worker's run

2026-09-15 18:34:40 -07:00

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

fix(kanban): headless specify/decompose aux calls carry a relay session key

2026-09-15 18:33:43 -07:00

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

fix(kanban): claim-less complete no longer closes a live worker's run

2026-09-15 18:34:40 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(desktop): an exit without a window reveal no longer writes hermes.desktop

2026-09-15 18:29:37 -07:00

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(update): attribute an earlier --no-open respawn to its launchd job

2026-09-15 18:28:26 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

fix(desktop): app-grid launches write hermes.desktop only after the window is on screen

2026-09-15 18:29:37 -07:00

main_install_repair.py

fix(cli): accept native npm paths under mnt

2026-09-15 18:35:59 -07:00

main_platform_setup.py

…

main_provider_setup.py

…

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

…

main.py

fix(dashboard): --stop exits 0 when a launchd KeepAlive job respawns the backend

2026-09-15 18:28:26 -07:00

managed_scope.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

managed_uv.py

fix(update): one receipt entry per repair outcome; reason no longer printed twice

2026-09-15 18:28:03 -07:00

mcp_catalog.py

…

mcp_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_setup.py

…

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

…

model_setup_flows.py

…

model_switch_providers.py

…

model_switch.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

models_catalog_static.py

fix(catalog): keep the delisted deepseek-v4-flash-free out of the live OpenCode picker too

2026-09-15 18:23:29 -07:00

models_detect.py

…

models_local.py

…

models_pricing.py

…

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

…

models.py

fix(catalog): apply the opencode free exclusion on the live-first keyed Zen/Go picker

2026-09-15 18:23:29 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

…

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

…

plugin_compat.py

perf(plugins): scan each plugin's source for removed imports once per process, not once per profile

2026-09-15 15:11:33 -07:00

plugin_dev.py

…

plugin_packs.py

…

plugin_validate.py

fix(plugins): validate accepts model-provider plugins and mirrors the real PluginContext surface

2026-09-15 18:39:54 -07:00

plugins_cmd_catalog.py

…

plugins_cmd.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_discovery.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_dispatch.py

…

plugins_ledger.py

…

plugins_loader.py

…

plugins_manifest.py

…

plugins_state.py

…

plugins.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

portal_cli.py

…

process_identity.py

…

profile_channels.py

…

profile_cmd.py

docs(distribution): describe per-root merge of skills/ and cron/ on update

2026-09-15 06:22:15 -07:00

profile_describer.py

…

profile_distribution.py

fix: merge shipped skill categories instead of replacing them on update

2026-09-15 06:22:15 -07:00

profiles.py

fix(profiles): share the runtime-tree trio with backup via hermes_constants

2026-09-15 18:26:38 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

…

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

fix(dashboard): skip the stalled-input close when attach detached itself

2026-09-15 06:36:19 -07:00

quiet_single_query.py

…

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

…

runtime_provider_custom.py

…

runtime_provider.py

fix(runtime): keep the bare-custom fail-fast off local aliases

2026-09-15 18:19:50 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

refactor(gateway): move the on-demand s6 slot helper into service_manager, trim tests

2026-09-15 18:30:05 -07:00

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

…

session_schema_history.py

…

sessions_cmd_browse.py

…

sessions_cmd.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

…

stdio.py

…

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

…

tools_config_providers.py

…

tools_config.py

…

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

…

update_abort_recovery.py

fix(update): Desktop-owned serve no longer fails the update or holds fleet_restart_pending

2026-09-15 18:30:32 -07:00

update_cmd_common.py

…

update_cmd_config.py

refactor(update): inline the tests exclusion; fix comments the wider purge made stale

2026-09-15 21:57:59 +05:30

update_cmd_deps.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet.py

fix(update): Desktop-owned serve no longer fails the update or holds fleet_restart_pending

2026-09-15 18:30:32 -07:00

update_cmd_git.py

…

update_cmd_maint.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

update_cmd_stash.py

…

update_cmd_windows.py

fix: count service-supervised gateways as running for per-profile cold-start

2026-09-15 04:13:44 -07:00

update_cmd_zip.py

…

update_cmd.py

refactor(update): inline the tests exclusion; fix comments the wider purge made stale

2026-09-15 21:57:59 +05:30

update_contract.py

…

update_inventory.py

fix(update): Desktop-owned serve no longer fails the update or holds fleet_restart_pending

2026-09-15 18:30:32 -07:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_restart_recovery.py

…

urllib_security.py

…

vault.py

…

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

…

web_server_cron.py

…

web_server_dashboard.py

fix(dashboard): skip unreadable plugin manifests

2026-09-15 18:48:59 -07:00

web_server_files.py

…

web_server_gateway.py

fix: make the allow_all_users env bridge own what it writes and re-derive it on restart

2026-09-15 04:37:41 -07:00

web_server_idle_exit.py

…

web_server_lifecycle.py

…

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

…

web_server_sessions.py

…

web_server.py

…

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

write_approval_commands.py

…

xai_retirement.py

…