brooklyn! fbff2b8a7a fix(auth): audit API 401s and name stale app-token mint failures ...

A bearer 401 from the dashboard gate was returned to the client but
never written to dashboard-auth.log. Record session_rejected with the
client-facing reason, path, and IP, and never the bearer.

When that rejection is the app's saved bearer, the desktop mint error
says the app token is invalid instead of telling the user to
re-authenticate the server OAuth session.

Fixes #103117

2026-09-24 05:33:01 -05:00

..

dashboard_auth

fix(auth): audit API 401s and name stale app-token mint failures

2026-09-24 05:33:01 -05:00

local_runtime

fix(hardware): use MemAvailable for Linux RAM

2026-09-24 05:29:08 -05:00

observability

fix(relay): shared-metrics task close skips a scope buried under a concurrent turn

2026-09-19 23:42:20 -07:00

proxy

…

subcommands

fix(webhook): make delivery mirroring opt-in and profile-scoped

2026-09-23 17:58:45 -07:00

web_routers

refactor(dashboard): hoist /api/env preview check out of the write thread

2026-09-24 15:21:27 +05:30

__init__.py

chore: release v0.21.5 (2026.9.24)

2026-09-24 03:08:47 -07:00

_early_recovery.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

_install_repair.py

…

_parser.py

…

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

_subprocess_compat.py

fix: startup update check no longer lazy-fetches history in partial clones

2026-09-23 14:55:40 -07:00

active_sessions.py

fix(sessions): skip POSIX zombie probe on Windows; prune registry snapshot after lock release

2026-09-20 13:21:24 -07:00

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

Portable plugins declare the application each MCP server needs; install refuses on an unsupported host (NS-942) (#119049)

2026-09-22 17:54:41 +05:30

AGENTS.md

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

anon_auth.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

refactor(codex): keep the read-only quota guard, drop the preserve_corrupt plumbing

2026-09-22 20:44:30 +05:30

auth_commands.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_constants.py

…

auth_device_flow.py

…

auth_error_copy.py

…

auth_minimax.py

…

auth_model_picker.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

auth_nous.py

refactor(auth): classify a non-dict Nous refresh error body as empty

2026-09-24 15:42:28 +05:30

auth_oauth_grants.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_oauth_pkce_plugin.py

fix(auth): PKCE token errors reuse the canonical grant-dead code set

2026-09-20 18:21:34 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): user provider plugin owns its aliases and display name in the auth registry

2026-09-20 18:29:22 -07:00

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_zai_kimi.py

…

auth.py

refactor(credential_pool): collapse the stale-writer early returns

2026-09-24 15:44:48 +05:30

azure_detect.py

…

backend_retirement.py

…

backup.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

bang_shell.py

fix(cli): fail closed without bang shell sanitizer

2026-09-20 18:20:44 -07:00

banner.py

fix: startup update check no longer lazy-fetches history in partial clones

2026-09-23 14:55:40 -07:00

blueprint_cmd.py

…

browser_connect.py

…

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

…

claw.py

fix: doctor, cron status, claw and gateway status report the real host topology

2026-09-21 05:06:45 -07:00

cli_agent_setup_mixin.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

cli_auto_maintenance.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

…

cli_chat_turn_mixin.py

fix(cli): resize keeps each transcript row once on tmux and never loses rows elsewhere (#95375)

2026-09-24 00:17:13 -07:00

cli_commands_mixin.py

fix(sessions): a /branch child row carries the parent's system prompt (CLI + TUI/Desktop)

2026-09-23 17:06:48 -07:00

cli_config_load.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_footer_split.py

fix: keep cli_footer_split importable under the prompt_toolkit test stubs

2026-09-20 13:35:09 -07:00

cli_info_mixin.py

feat(cli): live dock shows the standing /goal and queued prompts

2026-09-23 10:05:40 -07:00

cli_init_mixin.py

fix(cli): don't flag plugin toolsets as unknown at startup

2026-09-21 23:26:19 -07:00

cli_loops_mixin.py

…

cli_modal_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_model_switch_mixin.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

cli_output.py

…

cli_process_dock.py

feat(process_registry): stamp exited_at and expose it on process.list

2026-09-20 13:55:03 -07:00

cli_process_notifications.py

…

cli_render.py

refactor(cli): move the output-history row helpers out of the cli facade (#95375)

2026-09-24 00:17:13 -07:00

cli_session_dock.py

feat(cli): live dock shows the standing /goal and queued prompts

2026-09-23 10:05:40 -07:00

cli_session_mixin.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

cli_shutdown.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

cli_single_query.py

fix(tui-gateway): the hard-exit kill owns every foreground spawn and never blocks

2026-09-23 17:09:54 -07:00

cli_status_bar_mixin.py

…

cli_stream_mixin.py

fix(cli): resize keeps each transcript row once on tmux and never loses rows elsewhere (#95375)

2026-09-24 00:17:13 -07:00

cli_subagent_monitor.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_terminal_input.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_terminal_mixin.py

fix(cli): never aim the resize erase past chrome tmux clipped (#95375)

2026-09-24 00:17:13 -07:00

cli_tui_mixin.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_tui_runtime_mixin.py

fix(cli): a resize mid-stream repaints each transcript line once

2026-09-24 00:17:13 -07:00

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

fix(models): drop gpt-6-terra, a tier OpenAI never published

2026-09-23 00:44:33 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

fix(tts): keep local voices warm for tts.keep_warm_seconds after the last lease drops

2026-09-24 02:39:10 -05:00

config_effective.py

refactor(config): move read-failure reporting into hermes_cli/config_read_errors.py

2026-09-23 15:05:44 -07:00

config_env_routing.py

…

config_home.py

…

config_migrations.py

test(config): tie LEGACY_KEY_STEPS to the migration ladder

2026-09-24 15:34:19 +05:30

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config_read_errors.py

fix(config): a save refused over bad YAML says to fix the file, not "try again"

2026-09-23 15:05:44 -07:00

config.py

refactor(config): read the version stamp once and drop has_version_stamp

2026-09-24 15:34:19 +05:30

console_engine.py

fix(console): accept the --force override the held-store refusal advertises

2026-09-20 20:13:33 -07:00

container_boot.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

context_switch_guard.py

…

copilot_auth.py

hermes_platform.resolver: locate/inspect/probe tiers, AppResolver, gh lookup migrated (NS-921) (#118065)

2026-09-22 17:08:30 +05:30

credential_lifecycle.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

cron.py

gateway: converge on multiplex-only — real migrate, no opt-out, no rollback, host lock refuses

2026-09-21 10:11:19 -07:00

curator.py

…

curses_ui.py

…

dashboard_procs.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_console.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

…

doctor_connectivity.py

fix: doctor validates GitHub tokens against /rate_limit so Actions installation tokens pass (review follow-up)

2026-09-20 12:15:07 -07:00

doctor_live.py

…

doctor_platform.py

fix(host-topology): a createTime-null record is not a live gateway, and the restart we print must run

2026-09-21 05:06:45 -07:00

doctor_report.py

…

doctor_state.py

fix(memory): user-dir memory providers keep Desktop config + OAuth

2026-09-23 01:07:08 -07:00

doctor_tools.py

fix(doctor): stop prescribing audit fixes that updates revert (#116774)

2026-09-20 15:57:25 -07:00

doctor.py

refactor(doctor,gateway): share the migrate preflight's duplicate-credential check with doctor and status

2026-09-21 18:53:36 -07:00

dump.py

…

env_loader.py

fix(profiles): pin the launch home so a mirrored HERMES_HOME cannot flip routed-profile decisions

2026-09-23 08:09:47 -07:00

fallback_cmd.py

…

fallback_config.py

fix(cron): a pinned job never falls back to the global fallback chain (#120312)

2026-09-23 10:42:18 -04:00

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer

2026-09-23 07:48:32 -07:00

gateway_migrate_guards.py

fix(migrate): auto-fold a unit-less default when every secondary shares one manager

2026-09-21 10:11:19 -07:00

gateway_migrate.py

docs: in-container s6 convergence, 'unset means on', and the loud standalone warning; migrate labels an s6 slot as parked, not uninstalled

2026-09-23 10:58:15 -07:00

gateway_multiplex_mode.py

fix(gateway): gateway.multiplex_profiles has one valid value; a retired false is rewritten to true with a one-time boxed notice

2026-09-23 10:58:15 -07:00

gateway_multiplex_s6.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

gateway_multiplex_served.py

…

gateway_profile_lifecycle.py

fix(gateway): parking composes with gateway.standalone and the dashboard Stop/Start twin

2026-09-23 08:25:28 -07:00

gateway_service_unit.py

refactor(gateway): retire the --replace drop-in in one step, two invariant tests

2026-09-23 06:27:24 -07:00

gateway_setup_wizard.py

fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer

2026-09-23 07:48:32 -07:00

gateway_supervised_restart.py

…

gateway_windows_legacy.py

fix: a secondary profile no longer removes the default profile's bare-named gateway launchers (review follow-up)

2026-09-20 12:47:14 -07:00

gateway_windows.py

fix(update): pending fleet restart leaves gateways already on the checkout code alone

2026-09-20 18:52:45 -07:00

gateway.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

gitlock.py

fix(checkpoints): sweep tmp_pack debris stranded by timed-out store gcs

2026-09-20 12:03:06 -07:00

goal_command.py

…

goals.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

gui_uninstall.py

…

heartbeat.py

…

hooks.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

refactor(models): drop the duplicate ollama TTL clamp and per-model kwargs dicts

2026-09-23 21:53:47 +05:30

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

fix(profile-scope): stamp profile_home only for FOREIGN homes; cache the gate-prefix scan

2026-09-23 06:46:02 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

refactor(kanban): share one _retention_seconds helper across both gc sweeps

2026-09-22 13:41:11 +05:30

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

kanban gc: validate retention flags before the workspace sweep

2026-09-22 13:41:11 +05:30

kanban_output.py

fix(kanban): expose task runtime limit in JSON

2026-09-20 18:43:59 -07:00

kanban_parser.py

refactor(kanban): narrow _nonnegative_int except to ValueError

2026-09-22 13:41:11 +05:30

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

fix(kanban): board identity follows the bound profile override, not the launch env

2026-09-23 08:09:47 -07:00

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

fix(kanban): board identity follows the bound profile override, not the launch env

2026-09-23 08:09:47 -07:00

lifecycle.py

fix(gateway): await async pre_gateway_dispatch callbacks on the event loop

2026-09-21 23:47:51 -07:00

linux_desktop_entry.py

…

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

…

main_dashboard.py

fix(dashboard): one desktop-owned-child predicate, exit 78 on host-owner refusal

2026-09-23 07:09:45 -07:00

main_dep_hints.py

…

main_desktop.py

fix(desktop): rebuild a packaged app whose node-pty has no native binary

2026-09-24 03:38:12 -05:00

main_install_repair.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

main_platform_setup.py

…

main_provider_setup.py

…

main_tui_launch.py

fix(windows): route every bare-bash spawn through _find_bash and surface silent interpreter failures

2026-09-20 15:50:26 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix(update): a hermes update killed mid-pull no longer bricks every entry point

2026-09-23 17:42:24 -07:00

managed_scope.py

perf(gateway): parse readiness and bundled-manifest YAML with the C loader

2026-09-23 21:26:49 +05:30

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_config.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp_startup): take the deferred slot under the lock so two racing first clients fire once

2026-09-20 18:16:47 +05:30

mem_trim.py

…

memory_oauth.py

fix(memory): resolve OAuth flow in requested profile scope

2026-09-23 07:49:35 -07:00

memory_provider_migration.py

fix(memory): recover catalog provider once per profile

2026-09-23 07:49:35 -07:00

memory_setup.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

middleware.py

fix(plugins): route execution middleware through lazy discovery (#105827)

2026-09-21 23:47:51 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

…

model_setup_flows.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

model_switch_providers.py

perf(picker): stop blocking the model picker on TTL-expired catalogs

2026-09-23 21:53:47 +05:30

model_switch.py

fix(model): prefer the current provider's alias on implicit switches too

2026-09-23 17:08:21 -07:00

models_catalog_static.py

fix(providers): a provider registered after hermes_cli.models imports still reaches the picker catalog; unbind the terminal scope a test leaked

2026-09-23 19:33:40 -07:00

models_detect.py

…

models_local.py

…

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(models_validate): one profile-catalog helper decides accept/reject before the generic listing

2026-09-20 16:22:25 -07:00

models.py

fix(anthropic): send fast mode only to the Opus models the docs list

2026-09-23 13:40:44 -04:00

nous_account.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

nous_auth_keepalive.py

fix(auth): scope Nous keepalive on multiplexed gateways

2026-09-23 06:46:02 -07:00

nous_billing.py

…

nous_subscription.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

feat: catalog marks onboarding plugins; catalog rows carry the app's presence

2026-09-23 09:26:07 +05:30

plugin_catalog.py

fix: curated catalog fields a published doc does not carry come from the checkout

2026-09-23 09:26:07 +05:30

plugin_compat.py

…

plugin_dev.py

fix(plugins): unload the doctor's temp plugin before removing its home

2026-09-22 00:06:29 -07:00

plugin_events.py

fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop

2026-09-24 02:03:03 -07:00

plugin_packs.py

fix(plugin-packs): refuse and strip secret/consent keys at every depth of a config seed

2026-09-22 00:06:29 -07:00

plugin_python_deps.py

fix(plugins): plugin dependencies follow the plugin's own security policy

2026-09-23 10:07:51 -07:00

plugin_validate_desktop.py

fix(plugins): desktop lint masks a new RegExp("<script…") only where it is used as a matcher

2026-09-24 02:03:03 -07:00

plugin_validate.py

fix(plugins): validator accepts the config_schema types the loader and renderer accept

2026-09-23 17:38:13 -07:00

plugins_activation_live.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_activation.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

plugins_cmd_catalog.py

fix: plugins installed a second apart both keep their install record

2026-09-23 11:45:29 +05:30

plugins_cmd.py

fix(plugins): subdirectory installs download only that folder

2026-09-23 21:29:21 -07:00

plugins_discovery.py

fix(plugins): canonical activation keys + remove/toggle bookkeeping across CLI, dashboard and RPC

2026-09-22 00:13:50 -07:00

plugins_dispatch.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

plugins_ledger.py

feat(desktop): the Connectors page replaces the MCP tab (#119074)

2026-09-22 17:16:00 +05:30

plugins_loader.py

feat(plugins): late-loaded plugins wire their platform handlers live (#87770)

2026-09-22 09:50:22 -07:00

plugins_manifest.py

Portable plugin MCP tools keep their names instead of a hash (64-char provider cap) (#119263)

2026-09-22 22:05:28 +05:30

plugins_settings.py

feat(desktop): render plugin-declared settings in the Plugins tab (#46600, #87934)

2026-09-22 01:48:18 -07:00

plugins_state.py

feat(desktop): render plugin-declared settings in the Plugins tab (#46600, #87934)

2026-09-22 01:48:18 -07:00

plugins.py

feat: installed plugins' MCP tools and skills are live in every open chat, no Connect-now (#119644)

2026-09-23 05:11:44 +05:30

portal_cli.py

…

process_identity.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

profile_channels.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

profile_cmd.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profile_describer.py

…

profile_distribution.py

refactor(cron): own the store-import loop in cron/job_definition.py

2026-09-24 15:37:00 +05:30

profile_identity.py

…

profile_memory_config.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profiles.py

fix(profiles): serialize cold skill-count scans

2026-09-23 21:26:49 +05:30

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): restore the trimmed api_mode gates lost in the rebase onto #116853

2026-09-20 10:11:40 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

fix(dashboard): a /chat tab's attach token is per tab, and one token maps to one PTY

2026-09-20 12:51:30 -07:00

quiet_single_query.py

fix(bot-relay): a relayed turn is booked from its turn report at the cap, not killed with its handoff

2026-09-20 11:55:07 -07:00

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

fix(anthropic): keep OAuth rotation on accepted native proxies

2026-09-23 16:27:37 -07:00

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

…

session_export_html.py

…

session_export_md.py

…

session_export.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

fix: key the tools[] pin by code version; never re-add config-excluded tools

2026-09-23 15:43:51 -07:00

session_recap.py

…

session_recovery.py

fix: key the tools[] pin by code version; never re-add config-excluded tools

2026-09-23 15:43:51 -07:00

session_schema_history.py

…

sessions_cmd_browse.py

…

sessions_cmd_journal_mode.py

fix(sessions): make set-journal-mode portable and fail closed where it cannot prove quiescence

2026-09-20 20:13:25 -07:00

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

refactor(sessions): one transcript-format rule and one missing-display-index probe

2026-09-23 22:22:32 +05:30

sessions_repair_profiles.py

fix(sessions): repair-profiles moves a session whose title the target store already holds

2026-09-23 07:01:11 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

Setup profile is minted by the backend and found by role, not by name (#119456)

2026-09-23 01:25:04 +05:30

setup_quick.py

…

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

perf(skills): pool the guarded HTTP client across do_install's resolve + fetch

2026-09-22 15:59:17 +05:30

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

…

status_auth.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

fix(gateway): every launchd-identity reader accepts the wrapper-forwarded label

2026-09-23 07:48:32 -07:00

stdio.py

…

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

tool_availability_notices.py

…

tools_config_cua.py

fix(computer-use): windowless, non-interactive Windows autostart repair

2026-09-20 11:28:15 -07:00

tools_config_mcp.py

The last four MCP enabled-flag readers use the shared reader (ACP, hermes tools picker, desktop connector card, health sweep) (#119601)

2026-09-22 22:24:31 +00:00

tools_config_post_setup.py

…

tools_config_providers.py

fix(tools): gate the browser picker on an actual backend choice

2026-09-20 20:29:14 +05:30

tools_config.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

toolset_scope.py

…

toolset_validation.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

uninstall.py

…

update_abort_recovery.py

FLEET: one host-scoped update-restart obligation, one restart per host

2026-09-21 07:14:37 -07:00

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_deps.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

update_cmd_drain_report.py

…

update_cmd_fleet_checkout.py

fix(update): checkout_contains reads the build stamp on a no-.git image, so the pending-restart catch-up stops contradicting itself

2026-09-23 17:39:15 -07:00

update_cmd_fleet_gatewayless.py

fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)

2026-09-23 18:48:33 -05:00

update_cmd_fleet.py

fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)

2026-09-23 18:48:33 -05:00

update_cmd_git.py

fix(update): diagnose SSH publickey / host-key fetch failures

2026-09-24 03:49:06 -05:00

update_cmd_maint.py

fix(gateway): gateway.multiplex_profiles has one valid value; a retired false is rewritten to true with a one-time boxed notice

2026-09-23 10:58:15 -07:00

update_cmd_stale_survivors.py

fix(cron): stale-code yield reads as an outage in cron status; hermes update restarts proven-stale gateways

2026-09-21 01:57:31 -07:00

update_cmd_stash.py

fix(update,plugins): address autostash entries by sha / bare index, never stash@{N}

2026-09-22 00:06:29 -07:00

update_cmd_windows.py

feat(gateway): stop, start and restart one profile under the host multiplexer

2026-09-23 08:25:28 -07:00

update_cmd_zip.py

…

update_cmd.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

update_contract.py

…

update_fleet_scope.py

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

update_handoff.py

fix(update): start the post-swap child in the checkout

2026-09-23 06:51:47 -07:00

update_host_obligation.py

fix(update): never disarm the host restart obligation, and never discharge unknown terms

2026-09-21 07:14:37 -07:00

update_inventory.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_lock.py

fix(update): an adopted own-pid claim is refreshed, not kept near expiry

2026-09-23 11:31:37 -07:00

update_receipt.py

fix(update): an in-gateway cron update no longer exits STALE for the gateway it runs inside

2026-09-23 06:51:47 -07:00

update_restart_recovery.py

FLEET: one host-scoped update-restart obligation, one restart per host

2026-09-21 07:14:37 -07:00

update_serve_obligations.py

fix(update): discharge an unreadable-create_time manual-serve row once its pid is provably dead

2026-09-19 23:59:11 -07:00

urllib_security.py

fix(urllib): log the default-certificates fallback once, after every bundle failed

2026-09-22 15:55:23 +05:30

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

web_server_config.py

fix(plugins): per-plugin load deadline so a hung register() no longer hangs startup

2026-09-22 01:11:17 -07:00

web_server_cron.py

feat(gateway): stop, start and restart one profile under the host multiplexer

2026-09-23 08:25:28 -07:00

web_server_dashboard.py

fix(dashboard): bind the launch secret scope for the plugins-hub memory options

2026-09-23 07:49:35 -07:00

web_server_files.py

…

web_server_gateway.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

web_server_mcp.py

fix(profile-scope): bind home and secret tokens inside the try that resets them

2026-09-23 06:46:02 -07:00

web_server_memory.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

web_server_messaging.py

…

web_server_oauth.py

…

web_server_profiles.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

web_server_sessions.py

fix(state): per-profile store housekeeping under one multiplexed process

2026-09-21 02:56:31 -07:00

web_server.py

test(desktop): run the serve loop-factory regression on the Windows lane

2026-09-24 03:56:18 -05:00

webhook.py

fix(webhook): make delivery mirroring opt-in and profile-scoped

2026-09-23 17:58:45 -07:00

win_pty_bridge.py

…

windows_ssh_runtime.py

fix(gateway): a failed host attach never exits 0, and SIGTERM clears the record

2026-09-21 02:51:58 -07:00

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

…

write_approval_commands.py

refactor(memory): derive a payload's destructive ops in one place

2026-09-24 15:38:22 +05:30

xai_retirement.py

fix(config): keep the xai migration emitter on the same no-fold width

2026-09-23 15:05:44 -07:00