Sora-bluesky 10ee9819f9 fix(checkpoints): do not feed container paths into host checkpoint storage ...

With a container terminal backend (docker, singularity, modal, daytona,
vercel_sandbox, container plugins) file-tool paths keep container semantics,
but the checkpoint hook handed them to the host-side CheckpointManager: a path
that does not exist on the host produced a useless snapshot attempt, one that
happens to exist on the host snapshotted the wrong tree, the destructive
terminal branch did the same with the container cwd, and the post-write ledger
hashed the container path on the host so safe restore could trust unrelated
host content. Every failure was swallowed, so a docker user saw "No checkpoints
found for /home/admin" with nothing behind it.

Classify the task's backend the way the file tools do (_uses_container_paths)
and, for container-backed tasks, take no checkpoint and record no ledger entry;
/rollback prints the reason and refuses diff and restore for that session (a
host checkpoint that predates it belongs to another tree), and the
rollback.restore RPC returns the same reason as a failed restore. The refusal
classifies the session's configured backend directly (in the gateway under the
session's own identity and profile scope, as a turn binds them), so it holds
before the first mutation of the session. Local and ssh backends are untouched. This stops the
false protection; it does not add rollback support for containers (translating
bind mounts is a separate contract).

Tests: eight cases in tests/agent/test_tool_executor_checkpoint_paths.py through
the production classifier (a fake docker environment registered for the task, or
the configured backend): missing host path, colliding host tree (POSIX),
destructive terminal command, post-write ledger on a real host file, /rollback
and rollback.restore refusal in a fresh session, the local session still
restoring, and unchanged local behavior. Five fail on main on Windows, where the
collision case is skipped.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
(cherry picked from commit 97a5709e4980c8f85a5a640e6e5e11fe8f94affa)

2026-09-18 10:38:08 -07:00

..

dashboard_auth

fix(dashboard-auth): one refresh single-flight for the cookie gate and the native route, off the event loop

2026-09-13 09:40:44 -07:00

local_runtime

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

observability

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

proxy

…

subcommands

feat(plugins validate): --install-deps installs the declaration before the capability probe

2026-09-17 11:21:42 -07:00

web_routers

fix(dashboard): map the default root to profile name "default" in _scope_profile_name

2026-09-18 10:32:15 -07:00

__init__.py

chore(release): v0.21.3 (v2026.9.14)

2026-09-14 09:02:28 -07:00

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

…

_parser.py

fix(cli): --help lists gateway status and the --profile long form; trim epilogue tests

2026-09-18 09:50:52 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cli): expand HERMES_HOME once at process entry; sweep raw readers

2026-09-18 09:49:46 -07:00

_subprocess_compat.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

active_sessions.py

fix: guarded lease release and orphan sweep tolerate an unknowable sibling lease

2026-09-18 10:32:48 -07:00

agent_import_sync.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_import.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_plugins.py

…

AGENTS.md

docs(update): describe the post-swap hand-off; add its live A/B harness

2026-09-17 00:02:09 -07:00

anon_auth.py

refactor(nous): one is_anonymous_agent seam for the five identity reads

2026-09-17 12:28:25 +05:30

anon_sign_in_cli.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex.py

fix(auth): Codex credential and relogin copy name the failing profile's own sign-in

2026-09-18 10:00:29 -07:00

auth_commands.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_constants.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

fix(auth): Nous unusable-JWT-without-refresh-token is a terminal pool failure

2026-09-18 10:17:59 -07:00

auth_oauth_grants.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_openrouter.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_xai.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_zai_kimi.py

…

auth.py

fix(auth): Nous "not logged in" refresh failures leave rotation instead of a silent hour-long bench

2026-09-18 10:17:59 -07:00

azure_detect.py

…

backend_retirement.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

backup.py

fix(profiles): share the runtime-tree trio with backup via hermes_constants

2026-09-15 18:26:38 -07:00

bang_shell.py

…

banner.py

fix: drop the dead disabled guard on the lazy MCP banner line

2026-09-15 19:06:54 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: only call an auth DB backup "locked" when it made no progress

2026-09-16 16:53:40 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

fix(checkpoints): clear-legacy trims to two real-path tests, aligns failure line with the log

2026-09-15 18:24:22 -07:00

claw.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_agent_setup_mixin.py

fix(cli): auth.json-only login with a benched credential is explained, not sent to the wizard

2026-09-18 10:24:15 -07:00

cli_billing_mixin.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_chat_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_chat_turn_mixin.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

cli_commands_mixin.py

fix(checkpoints): do not feed container paths into host checkpoint storage

2026-09-18 10:38:08 -07:00

cli_info_mixin.py

fix: widen the remaining config.yaml stat caches to file_signature

2026-09-15 06:29:50 -07:00

cli_loops_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_modal_mixin.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

cli_model_switch_mixin.py

fix(local-runtime): resumed llamacpp sessions follow the live managed port on every surface (#114336)

2026-09-17 14:24:53 -04:00

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_notifications.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

cli_session_mixin.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

cli_status_bar_mixin.py

refactor(cli): vim mode is a config key only — drop the /vim slash command

2026-09-12 22:00:02 -07:00

cli_stream_mixin.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

cli_subagent_monitor.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

fix(tui): keep unselected list rows on the cursor column; trim tests

2026-09-18 09:55:21 -07:00

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

…

clipboard.py

refactor(cli): gate the macOS file-url read on one clipboard-info listing

2026-09-17 18:36:22 +05:30

codex_models.py

Port pattern from zed-industries/zed#62729: request ungated Codex model catalog (clean-room)

2026-09-13 20:50:10 -07:00

codex_runtime_plugin_migration.py

refactor(codex): one shared constant for the hermes-tools MCP server name

2026-09-15 19:05:29 -07:00

codex_runtime_switch.py

refactor(codex): one shared constant for the hermes-tools MCP server name

2026-09-15 19:05:29 -07:00

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:25:36 -07:00

commands.py

Inspired by Factory Droid: /queue prompts are now listable, editable, and reorderable before they run

2026-09-13 20:41:41 -07:00

completion.py

…

config_backups.py

fix(config): a fresh process recovers the last good config.yaml instead of running on defaults

2026-09-12 16:17:04 -07:00

config_defaults.py

fix(compression): a timed-out preflight compaction sends a fitting request and prune-commits an over-window one

2026-09-18 10:36:11 -07:00

config_effective.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

config_env_routing.py

fix(config): drop the "Hermes does not read this" note on config set

2026-09-15 21:47:48 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

manage_connections covers local MCP servers; setup_mcp leaves the schema (NS-867, PR1) (#109517)

2026-09-15 00:41:13 +05:30

config_providers.py

fix(config): keep the providers view when custom_providers is malformed

2026-09-18 09:41:02 -07:00

config.py

fix(config): keep <section>.<extra_root> paths out of the wrong-prefix refusal

2026-09-18 10:15:43 -07:00

console_engine.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

container_boot.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

context_switch_guard.py

…

copilot_auth.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

credential_lifecycle.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

cron.py

refactor(cron): R3-S3 remove redundant satellite PID checks

2026-09-18 17:10:12 +02:00

curator.py

test(journey): one end-to-end invariant for foreground-created skills; docs + list-unmanaged label

2026-09-15 05:38:31 -07:00

curses_ui.py

…

dashboard_procs.py

fix(dashboard): owner home for a pid follows the real profile resolver

2026-09-18 09:38:01 -07:00

dashboard_register.py

…

debug.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

default_soul.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

dep_ensure.py

…

desktop_console.py

fix(desktop): preserve source freshness and console diagnostics

2026-09-16 23:13:20 -04:00

desktop_update_verify.py

fix(desktop): verify the Windows update receipt against the checkout, not cwd

2026-09-10 01:25:45 -07:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor_connectivity.py

fix(doctor): detect a dead IPv6 route and name network.force_ipv4

2026-09-18 09:56:28 -07:00

doctor_live.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

doctor_platform.py

fix(doctor): name the processes holding a WAL database that journal_mode=delete never converted

2026-09-16 17:02:34 -07:00

doctor_report.py

…

doctor_state.py

fix(doctor): the stop-first issue line says run, not re-run — it is now also emitted before any --fix

2026-09-16 23:19:45 +05:30

doctor_tools.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

doctor.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

dump.py

…

env_loader.py

fix(env): import dotenv internals lazily so stubbed dotenv modules still import env_loader

2026-09-17 19:00:40 -04:00

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

fix(fallback): named custom providers keep their configured identity after automatic fallback (#98739)

2026-09-13 20:51:06 -07:00

focus_view.py

…

foreign_sessions_browser.py

fix(sessions): honor CLAUDE_CONFIG_DIR and CODEX_HOME in foreign session discovery

2026-09-12 21:39:10 -07:00

foreign_sessions.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

free_tier_bootstrap.py

docs: the first-run guard no longer counts a keyless provider

2026-09-18 15:40:37 +05:30

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex resumes from live state, compensates the whole destructive phase, and refuses an unknown default principal

2026-09-16 00:33:03 -07:00

gateway_migrate.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_multiplex_mode.py

gateway status shows why an unset-default gateway stayed standalone

2026-09-16 08:57:18 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(gateway): sweep a stale Startup-folder staging file on uninstall and re-install

2026-09-18 09:57:38 -07:00

gateway.py

fix(gateway): name the launchctl step once in the supervised-job notice

2026-09-18 10:24:59 -07:00

git_credentials.py

fix(plugins): drop inherited askpass from the anonymous git attempt so a 401 is classifiable

2026-09-18 10:01:01 -07:00

gitlock.py

fix: hermes -w repack no longer stampedes a shared clone

2026-09-16 16:43:08 -07:00

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(auth): a revoked Codex grant names openai-codex, the failing profile and the raw error

2026-09-18 10:00:29 -07:00

gui_uninstall.py

…

heartbeat.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

hooks.py

…

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

inventory.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_db_dispatch.py

fix(kanban): host spawn refusals stop charging cards; oneshot-unit dispatch scope-wraps workers

2026-09-18 10:21:42 -07:00

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_db_workspace.py

fix(kanban): remove worktree when the process cwd is already gone

2026-09-16 16:51:45 -07:00

kanban_db.py

fix(kanban): preserve shared attachment blobs

2026-09-18 10:34:31 -07:00

kanban_decompose.py

fix(kanban): decomposed cards fall back to the root task's assignee, never the dispatcher's own profile

2026-09-18 09:48:41 -07:00

kanban_diagnostics.py

fix(kanban): dependency-gate refusals name their cause on every surface

2026-09-18 09:29:44 -07:00

kanban_ops.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_output.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_parser.py

fix(kanban): claim-less complete no longer closes a live worker's run

2026-09-15 18:34:40 -07:00

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

fix(kanban): headless specify/decompose aux calls carry a relay session key

2026-09-15 18:33:43 -07:00

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

…

kanban.py

fix(kanban): keep diagnostics --json a list; allowlist rides as a trailing home-scope row

2026-09-18 09:50:19 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(linux): a PATH hit inside the checkout never persists as desktop entry Exec

2026-09-16 16:56:22 -07:00

logs.py

…

loops.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(cli): skip malformed launchd plists instead of aborting update cleanup (#114142)

2026-09-18 10:10:05 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

fix: desktop promotion rides out a transient Windows file lock on release/win-unpacked

2026-09-17 09:19:19 -07:00

main_install_repair.py

fix(cli): accept native npm paths under mnt

2026-09-15 18:35:59 -07:00

main_platform_setup.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

main_provider_setup.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

perf(desktop): reduce Windows startup I/O and blocking checks

2026-09-16 16:18:17 -05:00

main.py

fix(mcp): hermes mcp test exits non-zero on connection failure and unknown server

2026-09-18 10:11:46 -07:00

managed_scope.py

fix(update): heal stale root modules at every fresh import site

2026-09-18 09:38:34 -07:00

managed_uv.py

fix(update): let the Windows repoint run; refuse a minor-line jump

2026-09-17 08:44:33 -07:00

mcp_app_detection.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_catalog.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

mcp_config.py

fix(mcp): hermes mcp test exits non-zero on connection failure and unknown server

2026-09-18 10:11:46 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp): report lazily registered servers as lazy, not configured or failed

2026-09-15 19:06:54 -07:00

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

fix(memory): migration checks provider presence in the home being migrated

2026-09-18 09:23:13 -07:00

memory_setup.py

fix: hindsight update-time dep resolution survives a BOM in config.json

2026-09-15 03:38:29 -07:00

middleware.py

fix(plugins): execution-chain middleware failures are reported once, not per call

2026-09-17 09:03:29 -07:00

migrate.py

…

moa_cmd.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix(deepseek): pass custom model ids through instead of rewriting them

2026-09-10 04:22:38 -07:00

model_search.py

…

model_selection_guards.py

test: trim the context-cache guard tests to invariants; docs: name the surfaces that actually confirm

2026-09-13 20:54:50 -07:00

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix(model_switch): clear key_env only when the route changes; drop it on custom activation

2026-09-15 03:39:45 -07:00

model_setup_flows.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

model_switch_providers.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

model_switch.py

fix(model): only a local alias hands its URL to the pre-alias resolution

2026-09-18 10:20:32 -07:00

models_catalog_static.py

docs: correct the free-tier narrative the removal left behind

2026-09-18 15:40:37 +05:30

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

models_pricing.py

…

models_profile_cache.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_reasoning_caps.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_validate.py

fix(gateway): /status resolves the switched-to model's context window; validator names the missing slug

2026-09-15 18:58:02 -07:00

models.py

refactor(providers): finish the keyless cleanup

2026-09-18 15:40:37 +05:30

nous_account.py

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

nous_auth_keepalive.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

nous_billing.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(cli): hermes -z exits non-zero for partial, failed and interrupted runs even when text was printed

2026-09-16 18:12:34 -07:00

pairing.py

…

partial_compress.py

…

personality.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

refactor(plugins): kill-list annotation takes the pre-resolved list directly; trim to two invariants

2026-09-18 09:43:19 -07:00

plugin_compat.py

fix(plugins): record plugin-compat hit paths in POSIX form on every OS

2026-09-16 17:15:38 -07:00

plugin_dev.py

…

plugin_packs.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugin_python_deps.py

fix: read plugin-home config through the loader; register update export

2026-09-17 00:11:27 -07:00

plugin_validate.py

feat(plugins validate): fail trees with nothing to load; check dependency declarations

2026-09-17 00:11:27 -07:00

plugins_cmd_catalog.py

fix(plugins): removed_annotation takes the resolved kill list as a required argument

2026-09-18 09:43:19 -07:00

plugins_cmd.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

plugins_discovery.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_dispatch.py

fix(plugins): stream observer hooks and event subscribers fail-report once, not per event

2026-09-17 09:03:29 -07:00

plugins_ledger.py

fix(plugins): dedupe middleware failures too, and let unload forget reported hook failures

2026-09-16 17:08:25 -07:00

plugins_loader.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_manifest.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_state.py

…

plugins.py

fix(plugins): an installed directory plugin keeps its identity over a same-name pip entry point

2026-09-17 18:36:20 -07:00

portal_cli.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

process_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

profile_channels.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_cmd.py

fix(profiles): purge a deleted profile's session/routing identity on delete

2026-09-16 14:21:14 -07:00

profile_credential_audit.py

fix(auth): credential audit reads profile config.yaml through read_user_config_raw

2026-09-16 14:34:59 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

profile_identity.py

refactor(checkpoints): slim the profile-rename rekey and name it as a checkpoint_manager sibling

2026-09-16 14:34:22 -07:00

profiles.py

fix(profiles): @profile completion never walks skill trees; drop dead OSError guard; pin router + completion in the walk-free test

2026-09-18 10:18:40 -07:00

projects_cmd.py

…

projects_db.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

providers.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

proxy_cli.py

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

psutil_android.py

refactor(update): psutil Android installer extracts through the shared safe-tar guard

2026-09-13 05:07:11 -07:00

pt_input_extras.py

fix(cli): Super+<printable> under modifyOtherKeys types the character

2026-09-18 09:52:03 -07:00

pty_bridge.py

…

pty_session.py

fix(dashboard): skip the stalled-input close when attach detached itself

2026-09-15 06:36:19 -07:00

quiet_single_query.py

fix(cron): bot-chat delivery cap bounds the bot's turn, not its exit linger

2026-09-18 10:29:13 -07:00

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider_custom.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider.py

fix(cli): auth.json-only login with a benched credential is explained, not sent to the wizard

2026-09-18 10:24:15 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

fix(send): name the default-root gateway and external secret sources in the 'not configured' error

2026-09-18 10:11:14 -07:00

service_manager.py

refactor(gateway): move the on-demand s6 slot helper into service_manager, trim tests

2026-09-15 18:30:05 -07:00

session_export_html.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export_md.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_filters.py

docs(sessions): recency wording matches the freshest-of rule

2026-09-17 21:17:15 +05:30

session_listing.py

…

session_lost_and_found.py

fix: reap the killed sqlite3 .recover children on timeout

2026-09-16 17:02:13 -07:00

session_recap.py

…

session_recovery.py

fix(sessions): salvage a page-1-header-damaged state.db in the lost_and_found lane

2026-09-11 06:37:27 -07:00

session_schema_history.py

fix(state): record display_identity/display_order in the messages schema history

2026-09-09 13:30:28 -07:00

sessions_cmd_browse.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

sessions_cmd.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

refactor(platforms): every plugin setup wizard uses the shared declines_reconfigure gate

2026-09-13 05:32:38 -07:00

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

…

setup_terminal.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

setup_tts.py

fix(setup): xAI TTS wizard checks XAI_API_KEY before OAuth to match runtime

2026-09-18 09:47:06 -07:00

setup_whatsapp_cloud.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

shared_session_attach.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

skin_cmd.py

…

skin_engine.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

slack_cli.py

…

slash_exec.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

stale_modules.py

fix(update): bridge stale utils so pre-handoff upgrades finish restart

2026-09-18 09:38:34 -07:00

status_auth.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

status_bar_git.py

feat(cli): opt-in git_branch status-bar field (⎇ current branch)

2026-09-12 21:47:53 -07:00

status_report.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

status.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

stderr_timestamp.py

fix(launchd): park EX_CONFIG token conflicts instead of KeepAlive-looping (#112079)

2026-09-16 17:58:25 +00:00

stdio.py

…

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

…

telegram_managed_bot.py

fix(platforms): QR fallback tip names Hermes' own uv when it is not on PATH

2026-09-15 18:55:47 -07:00

terminal_breadcrumbs.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

timeouts.py

…

tips.py

fix: correct two stale comments/docs strings left out of the docs batch

2026-09-08 19:52:26 +05:30

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

…

tools_config_mcp.py

fix(mcp): CLI readers no longer reopen include: [] as "all tools enabled"

2026-09-12 08:34:43 -07:00

tools_config_post_setup.py

…

tools_config_providers.py

fix(tools): one "Nous Subscription" image row instead of two rows that both read active

2026-09-16 16:42:47 -07:00

tools_config.py

fix(tools): one "Nous Subscription" image row instead of two rows that both read active

2026-09-16 16:42:47 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

update_abort_recovery.py

fix(update): keep manual serve restart obligations visible through gateway recovery

2026-09-18 17:09:28 +02:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): finish hermes update in an interpreter born on the pulled code

2026-09-17 00:02:09 -07:00

update_cmd_deps.py

feat(memory): a configured provider that left core is installed from the catalog automatically

2026-09-17 20:35:22 -07:00

update_cmd_drain_report.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_fleet.py

fix(update): P1 verify owned fleet after catch-up restart

2026-09-18 17:09:28 +02:00

update_cmd_git.py

fix(update): one bad workspaces glob no longer aborts the lockfile-churn cleanup

2026-09-16 17:44:36 -07:00

update_cmd_maint.py

fix(config,update): replace an unwritable SOUL.md symlink; say when the pre-update snapshot failed

2026-09-18 10:15:11 -07:00

update_cmd_stash.py

…

update_cmd_windows.py

fix(update): support uv default venv in desktop updates

2026-09-16 17:13:56 -07:00

update_cmd_zip.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

update_cmd.py

fix: call _resolve_pre_update_backup_mode directly in the receipt classifier

2026-09-18 10:15:11 -07:00

update_contract.py

…

update_handoff.py

fix(update): hand-off carries sibling snapshots + Windows pause token on both paths; child pinned to the parent's home

2026-09-17 00:02:09 -07:00

update_inventory.py

fix(update): keep manual serve restart obligations visible through gateway recovery

2026-09-18 17:09:28 +02:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(update): keep manual serve restart obligations visible through gateway recovery

2026-09-18 17:09:28 +02:00

update_restart_recovery.py

…

update_serve_obligations.py

fix(update): keep manual serve restart obligations visible through gateway recovery

2026-09-18 17:09:28 +02:00

urllib_security.py

…

vault.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

feat(desktop): add per-auxiliary reasoning effort control

2026-09-13 19:19:32 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

…

web_server_config.py

fix(web): lock the remaining off-loop config RMWs; keep model probes outside the lock

2026-09-15 03:40:26 -07:00

web_server_cron.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

web_server_dashboard.py

refactor(plugins): kill-list annotation takes the pre-resolved list directly; trim to two invariants

2026-09-18 09:43:19 -07:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

fix: make the allow_all_users env bridge own what it writes and re-derive it on restart

2026-09-15 04:37:41 -07:00

web_server_idle_exit.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

web_server_idle_proof.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

web_server_lifecycle.py

refactor(dashboard): startup reconcile reuses the routers' own-store opener

2026-09-14 08:10:36 -07:00

web_server_mcp.py

fix(mcp): dashboard OAuth failures keep their first cause on every surface

2026-09-18 09:20:07 -07:00

web_server_memory.py

…

web_server_messaging.py

fix(profiles): --clone leaves messaging channels behind; --clone-channels opts in

2026-09-12 18:35:21 -07:00

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

fix(profiles): polled profile lists never walk skill trees; vanished skill dirs no longer abort enumeration

2026-09-18 10:18:40 -07:00

web_server_sessions.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

web_server.py

fix(web): join the state.db eager-reconcile worker at lifespan shutdown

2026-09-16 17:11:08 -07:00

webhook.py

Inspired by ChatGPT Work: event-triggered cron jobs via webhook routes

2026-09-13 21:30:02 -07:00

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

fix: hermes -w repack no longer stampedes a shared clone

2026-09-16 16:43:08 -07:00

write_approval_commands.py

…

xai_retirement.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00