David Metcalfe 91dcca9a9b fix(desktop): scope keychain reset to the legacy ad-hoc fallback only ...

The previous commit deleted the 'Hermes Safe Storage' keychain item after
every successful re-sign, including the stable certificate-anchored
identity path. On that path the designated requirement is stable across
rebuilds, so after the first launch under the new identity the keychain
ACL already matches; deleting the item on every update permanently
orphaned gateway-token and native-OAuth credentials that were working
fine (both are safeStorage-backed: electron/main.ts connection config
and native-oauth-tokens.json).

Addresses review feedback on #90961:
- Rename _desktop_macos_update_keychain_acl -> _desktop_macos_reset_keychain_safe_storage (it deletes, it does not update an ACL).
- Only invoke it on the legacy ad-hoc fallback path, where every rebuild
  produces a new cdhash so the ACL can never match and the alternative
  is a recurring prompt. The trade-off (re-enter credentials once per
  update) is documented; the durable fix is a stable signing identity.
- Add regression tests: stable path must NOT reset, ad-hoc fallback MUST.

2026-08-25 23:23:11 -07:00

..

dashboard_auth

fix(auth): thread use_https into the native password-login PKCE clear

2026-08-24 16:58:51 +10:00

data

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

observability

feat(nix): home-manager module, shared with the NixOS module

2026-08-18 20:42:06 -04:00

proxy

…

subcommands

feat(desktop): add --setup-tcc-identity to keep macOS TCC grants across rebuilds

2026-08-25 16:24:19 -07:00

web_routers

feat(terminal): pluggable terminal environment backends via plugin registry

2026-08-24 20:10:44 -07:00

__init__.py

chore: release v0.20.5 (2026.8.19)

2026-08-21 05:16:27 -07:00

_early_recovery.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_install_repair.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_parser.py

refactor(cli): add static fallback to parser-derived value-flag helper

2026-08-24 03:20:37 -07:00

_scan_venv_blockers.py

fix(desktop): close safe preview blockers before update

2026-08-16 02:03:22 -07:00

_startup_fast.py

feat: consolidate 'hermes version' into 'hermes --version', remove the subcommand

2026-08-20 03:05:46 -07:00

_subprocess_compat.py

refactor(deadline): consolidate site-local tree-kills onto agent.deadline.kill_process_tree (#85125 4d)

2026-08-25 01:34:56 +05:30

active_sessions.py

fix(sessions): release active-session leases against their acquisition registry

2026-08-15 00:33:01 -07:00

agent_import.py

…

agent_plugins.py

feat(plugins): map portable Agent Plugins streamable-http entries into the native MCP runtime

2026-08-08 23:56:46 -07:00

approval_mode.py

…

approval_transport.py

fix(plugins): harden approval transport boundaries

2026-08-12 16:26:55 -07:00

approvals_suggest.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

approvals_test.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

auth_commands.py

fix(auth): canonicalize configured provider display names

2026-08-23 20:00:53 -07:00

auth.py

docs: update secure_parent_dir docstring and caller comments for the install-tree exclusion

2026-08-25 10:55:53 +10:00

azure_detect.py

…

backup.py

fix(backup): don't hang forever on locked SQLite sources

2026-08-21 14:39:02 -07:00

bang_shell.py

…

banner.py

feat(termux): support apt-managed Hermes installs

2026-08-17 15:47:17 -07:00

blueprint_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

browser_connect.py

…

build_info.py

fix(update): resolve code identity by reading .git directly — no subprocess

2026-08-20 21:54:25 -07:00

bundles.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

callbacks.py

…

checkpoints.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

claw.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

cli_agent_setup_mixin.py

fix(cli): guard empty message text in _display_resumed_history

2026-08-22 03:59:28 +05:30

cli_billing_mixin.py

…

cli_commands_mixin.py

feat: /review command — independent reviewer subagent on every surface

2026-08-23 17:38:38 -07:00

cli_output.py

fix(cli): widen prompt_toolkit fallback to catch any runtime failure

2026-08-24 15:42:58 +05:30

clipboard.py

…

codex_models.py

feat(model): Codex GPT slugs default back to 272K; explicit -900k picker variants opt into the verified large window

2026-08-23 02:14:35 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands.py

feat: /review command — independent reviewer subagent on every surface

2026-08-23 17:38:38 -07:00

completion.py

…

config_defaults.py

fix(delegation): suppress subagent-owned process notifications in parent chat by default

2026-08-25 21:59:04 -07:00

config_migrations.py

refactor(tools): remove expired BFL FLUX 3 promo core tools (migration v39); FLUX 3 stays via video_gen/FAL for subscribers (#94599)

2026-08-25 02:45:10 -07:00

config.py

feat(docker): support shared container identities

2026-08-25 04:00:27 -07:00

console_engine.py

feat(cron): add explicit one-shot re-arm

2026-08-24 00:34:26 -07:00

container_boot.py

…

context_switch_guard.py

…

copilot_auth.py

fix(desktop): Models/Providers settings no longer hang 20s when gh CLI is signed out

2026-08-19 19:22:48 -07:00

credential_lifecycle.py

…

cron.py

feat(cron): acked failure signatures stop re-pinging — durable incidents + ack CLI (salvage #94692) (#95017)

2026-08-25 14:02:40 -07:00

curator.py

fix(curator): say what pin actually does on an unmanaged skill

2026-08-23 21:12:20 -07:00

curses_ui.py

refactor: collapse context_back/effective_allow_back, fix draw_header docstring

2026-08-24 15:45:52 +05:30

dashboard_procs.py

docs: record why the reap grace window exists in the reaper docstring

2026-08-23 00:52:50 -07:00

dashboard_register.py

…

debug.py

feat(desktop): Send Diagnostics — one-click redacted debug-bundle upload from the error card

2026-08-21 23:01:30 -07:00

default_soul.py

…

dep_ensure.py

fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade

2026-08-13 02:38:28 -07:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_live.py

fix(cli): apply Termux carve-out to doctor --live's npx browser probe

2026-08-13 02:38:28 -07:00

doctor.py

fix(macos): stable TCC anchor for uv-managed python interpreter (#85345)

2026-08-25 22:10:12 -07:00

dump.py

feat: execution-discipline guidance now reaches all tool-capable models (config model.execution_guidance)

2026-08-19 16:16:37 -07:00

env_loader.py

fix(update): avoid cryptography self-lock on Windows

2026-08-15 13:28:14 -07:00

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

gateway_enroll.py

fix(cli): read multiplex topology from the default root in enroll warning

2026-08-21 14:13:28 +10:00

gateway_windows.py

refactor(gateway): share breakaway marker constant

2026-08-16 06:26:12 -07:00

gateway.py

fix(gateway): resolve uninstall lifecycle guard conflict

2026-08-23 18:01:59 -07:00

gitlock.py

fix(update): self-heal stale git locks and stop false 'update available' on shallow clones

2026-08-15 04:33:47 -07:00

goals.py

fix(goals): honor auxiliary.goal_judge.timeout instead of a hardcoded 30s

2026-08-21 02:48:14 +08:00

gui_uninstall.py

…

heartbeat.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

hooks.py

feat(langfuse): widen tracing to errors, sessions, subagents, and MoA fan-out

2026-08-13 23:10:16 +05:30

init_command.py

…

input_sanitize.py

…

inventory.py

fix: accept pool-only Anthropic OAuth entries in the desktop picker filter

2026-08-22 22:00:19 -07:00

journey.py

…

kanban_db.py

fix(kanban): host-level cap accounting, daemon cap resolution, review-lane reservation (OOF-30 review)

2026-08-17 14:16:21 +05:30

kanban_decompose.py

…

kanban_diagnostics.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

kanban_specify.py

…

kanban_swarm.py

fix(kanban): make write_txn nesting explicit opt-in

2026-08-10 12:43:46 -07:00

kanban.py

feat(kanban): memory-aware dispatch guard + memory-derived default concurrency cap (OOF-30)

2026-08-17 14:16:21 +05:30

lifecycle.py

…

linux_desktop_entry.py

fix(cli): Linux hermes.desktop entry launches instead of silently dying on system python (#90292)

2026-08-21 13:41:39 -07:00

logs.py

…

loops.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

macos_tcc_anchor.py

fix(macos): derive interpreter alias names dynamically in the TCC anchor

2026-08-25 22:10:12 -07:00

main.py

fix(desktop): scope keychain reset to the legacy ad-hoc fallback only

2026-08-25 23:23:11 -07:00

managed_scope.py

…

managed_uv.py

test(managed_uv): cover explicit-patch fallback on the next minor line; dedupe retried versions

2026-08-14 22:37:46 -07:00

mcp_catalog.py

fix(mcp-catalog): failed probe keeps the prior tool filter instead of wiping it

2026-08-25 04:21:37 -07:00

mcp_config.py

fix(mcp): tool-selection UIs stay in exclude mode instead of freezing include lists

2026-08-25 04:21:37 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(review): harden portable plugin boundaries

2026-08-07 09:44:21 -07:00

mem_trim.py

…

memory_oauth.py

…

memory_setup.py

fix(cli): align hermes memory status and docs with memory tool gate

2026-08-19 23:15:01 -07:00

middleware.py

…

migrate.py

…

moa_cmd.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

moa_config.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

model_catalog.py

…

model_cost_guard.py

fix(cli): guard expensive startup model overrides

2026-08-14 01:31:31 -07:00

model_data_policy_guard.py

feat(models): warn on data-training tiers at model selection

2026-08-14 01:06:13 -07:00

model_normalize.py

fix(opencode): family-wide provider predicate + reserved tool-name aliases for custom opencode-* providers

2026-08-20 20:21:12 -07:00

model_search.py

feat(models): 'ox alpha' now finds x-preview-f-free in every model picker

2026-08-21 14:38:19 -07:00

model_selection_guards.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

model_setup_flows.py

feat: opencode-free is fully keyless — no env var, no account, anonymous wire

2026-08-21 00:24:32 -07:00

model_switch.py

feat: keyless providers count as authenticated everywhere — opencode-free appears in /model and desktop pickers with zero setup

2026-08-21 04:39:31 -07:00

models.py

fix(models): OpenRouter :nitro/:floor routing variants no longer rejected by /model validation

2026-08-24 13:36:23 -07:00

nous_account.py

fix: show explicit member spend cap message instead of 'no credits'

2026-08-07 19:47:40 +05:30

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

fix(gateway): honor env-configured local backends and persist Tool Gateway declines

2026-08-22 21:36:55 -07:00

npm_engine.py

fix(win): never rewrite the in-use managed Node tree (#80926)

2026-08-14 21:35:30 -07:00

onepassword_secrets_cli.py

…

oneshot.py

fix(cli): one-shot runs linger for notify_on_complete background processes so Bot Mode replies survive parent exit

2026-08-23 03:56:37 -07:00

pairing.py

…

partial_compress.py

…

personality.py

fix(personality): single-owner personality state + one-time reset migration

2026-08-09 10:33:58 -07:00

pets.py

fix(pets): cover the pets CLI (doctor, has-active, /pet toggle) too

2026-08-15 00:32:44 -07:00

platform_actions.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

platforms.py

…

plugin_capabilities.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

plugin_dev.py

feat(plugins): manifest v2 — schema version, api_version, inter-plugin deps, pip-dependency declaration seam, config schema (#64165)

2026-08-12 18:39:22 -07:00

plugin_index.py

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

plugin_packs.py

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

plugins_cmd.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

plugins.py

feat: browser snapshots drop LLM summarization — truncate-and-store like web_extract; auxiliary.web_extract slot removed

2026-08-24 20:11:18 -07:00

portal_cli.py

…

process_identity.py

feat(process): positive process identity — spawn tags, machine spawn ledger, Windows job-object self-attach

2026-08-20 04:47:38 -07:00

profile_describer.py

…

profile_distribution.py

…

profiles.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

projects_cmd.py

…

projects_db.py

fix(projects): dedup project_create by primary_path (#75820)

2026-08-15 00:33:11 -07:00

prompt_size.py

fix: honor JSON-array string forms for skills.disabled and agent.disabled_toolsets

2026-08-16 06:24:56 -07:00

prompt_stash.py

…

provider_catalog.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

providers.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

refactor(cli): fold lock-bit review findings - docstrings, dead tilde forms, _lock_twins idiom

2026-08-20 12:16:20 +05:30

pty_bridge.py

…

pty_session.py

fix(dashboard): redraw TUI after PTY reattach

2026-08-14 13:51:26 -07:00

relaunch.py

…

relay_plugin_cutover.py

fix(relay): complete native plugin cutover

2026-08-19 08:52:03 -07:00

resource_limits.py

fix(gateway): persist RLIMIT_NOFILE floor into the generated launchd plist

2026-08-10 17:02:56 -07:00

route_identity.py

…

runtime_provider.py

fix(cli): honor target_model when resolving custom providers

2026-08-23 18:25:35 -07:00

secret_prompt.py

…

secrets_cli.py

fix(secrets_cli): defer bitwarden backend import to first attribute access

2026-08-15 01:55:22 -07:00

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

fix(cli): apply BOM-safe .env decoding to hermes send's private loader

2026-08-08 12:32:23 -07:00

service_manager.py

fix(gateway): don't restart supervised services on clean exit

2026-08-14 21:07:21 -07:00

session_export_html.py

fix(cli): coalesce None title/model in single-session HTML export

2026-08-15 02:04:49 -07:00

session_export_md.py

…

session_export.py

feat: bare /save shows a usage card instead of exporting

2026-08-15 02:04:49 -07:00

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

feat(sessions): generic 'hidden' session flag (sidebar-hide, still resumable) (#86797)

2026-08-15 00:31:37 -07:00

session_recap.py

…

session_recovery.py

fix(sessions): recover budget exhaustion + lost_and_found last-resort lane

2026-08-12 19:43:47 -07:00

sessions_cmd.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

setup_hidden_env.py

…

setup_whatsapp_cloud.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

setup.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

sizefmt.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

skills_config.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

skills_hub.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

feat(profiles): rename any agent — the default profile gets a display name (#45624)

2026-08-18 02:27:18 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

status.py

feat(terminal): pluggable terminal environment backends via plugin registry

2026-08-24 20:10:44 -07:00

stderr_timestamp.py

fix(gateway): put --external-supervisor on launchd gateway argv

2026-08-16 01:54:35 -07:00

stdio.py

…

suggestions_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

telegram_managed_bot.py

…

terminal_breadcrumbs.py

feat: per-terminal --continue via terminal breadcrumbs

2026-08-15 18:15:18 -07:00

timefmt.py

…

timeouts.py

…

tips.py

feat(cli): rotating task-oriented composer placeholder (C-09)

2026-08-20 04:08:57 -07:00

tools_config.py

feat(update): unattended-safe cua-driver refresh with fail-fast preflights

2026-08-25 21:59:52 -07:00

toolset_validation.py

…

uninstall.py

fix(windows): remove the hermes launchers on uninstall

2026-08-22 13:39:04 -04:00

update_cmd.py

fix(macos): stable TCC anchor for uv-managed python interpreter (#85345)

2026-08-25 22:10:12 -07:00

update_inventory.py

feat(update): the plan is now the restart worklist — every planned runtime must be accounted for (#91277 Phase 2)

2026-08-23 04:45:29 -07:00

update_lock.py

…

update_receipt.py

fix(update): a gateway killed by the restart phase and never replaced now fails the fleet check (DOWN row)

2026-08-22 23:46:06 -07:00

urllib_security.py

fix(models): trust certifi for credentialed catalogs (E-1002)

2026-08-14 16:43:37 -07:00

vercel_auth.py

…

verify_cmd.py

Integrate verify subsystem with the existing verification stack

2026-08-07 10:11:05 -07:00

voice.py

fix(cli): convert Alt key shortcuts to sequence tuple for prompt_toolkit (#74169)

2026-08-15 01:05:39 -07:00

web_deps.py

…

web_git.py

fix(desktop): make git worktrees work end-to-end on a remote gateway backend

2026-08-16 20:53:44 -07:00

web_models.py

feat(desktop): mark a session as unread/read with a persisted watermark

2026-08-15 01:21:40 -07:00

web_server.py

feat: browser snapshots drop LLM summarization — truncate-and-store like web_extract; auxiliary.web_extract slot removed

2026-08-24 20:11:18 -07:00

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

worktree_gc.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

write_approval_commands.py

…

xai_retirement.py

…