teknium1 5c44d5df9c fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257) ...

`run_git_with_credential_fallback` sent exactly one stored credential after an
anonymous refusal: the first one `resolve_git_basic_auth` found, which is
`GITHUB_TOKEN`/`GH_TOKEN` from .env whenever it is set. An expired classic PAT
left there (older setup flows encouraged it) therefore shadowed a working
`gh auth login` for every private plugin/MCP/profile clone, and the failure
read as git's generic "could not read Username ... terminal prompts disabled".

Why: the remote, not the resolution order, knows which credential is live.
The run now walks every credential the user owns for the host (.env token,
`gh auth token`, git credential helper) until one is accepted or the failure
stops being about credentials, logs which source was rejected, and appends an
actionable hint naming the .env token when GitHub refused all of them.
`gh auth token` is asked with GH_TOKEN/GITHUB_TOKEN stripped from its
environment, otherwise it echoes the exported dead token back instead of its
keyring login and the fallback dedupes to nothing.

Test file also gets encoding="utf-8" on its bare read_text/write_text calls
(windows-footgun scanner population for the touched file).

2026-09-20 10:44:52 -07:00

..

dashboard_auth

…

local_runtime

fix: trim llamacpp salvage to invariant tests, drop redundant config load, document fixed-port servers

2026-09-20 10:03:32 -07:00

observability

fix(relay): shared-metrics task close skips a scope buried under a concurrent turn

2026-09-19 23:42:20 -07:00

proxy

…

subcommands

fix(peer): hermes peer dm is a 4th Bot Mode silence delivery door

2026-09-20 10:16:51 -07:00

web_routers

refactor(dashboard): fire the armed discovery off-loop; flat branch; behaviour-shaped test

2026-09-20 18:16:47 +05:30

__init__.py

chore(release): v0.21.3 (v2026.9.14)

2026-09-14 09:02:28 -07:00

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

…

_parser.py

fix(cli): --help lists gateway status and the --profile long form; trim epilogue tests

2026-09-18 09:50:52 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cli): expand HERMES_HOME once at process entry; sweep raw readers

2026-09-18 09:49:46 -07:00

_subprocess_compat.py

fix(tools): bounded probes contain Windows descendants in a Job Object so the Git Bash grandchild dies

2026-09-19 02:36:56 -07:00

active_sessions.py

fix(tui,active_sessions): gate-review follow-ups for the idle bot-delivery throttle

2026-09-20 15:16:35 +05:30

agent_import_sync.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_import.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_plugins.py

…

AGENTS.md

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

anon_auth.py

refactor(nous): one is_anonymous_agent seam for the five identity reads

2026-09-17 12:28:25 +05:30

anon_sign_in_cli.py

…

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_commands.py

feat(auth): OAuth-shaped provider plugins register, log in and refresh through their profile

2026-09-19 20:45:06 -07:00

auth_constants.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

fix(auth): Nous unusable-JWT-without-refresh-token is a terminal pool failure

2026-09-18 10:17:59 -07:00

auth_oauth_grants.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_oauth_pkce_plugin.py

feat: declarative OAuth Authorization-Code+PKCE login for provider plugins

2026-09-19 21:15:16 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): a user provider plugin's endpoint overrides the bundled row too

2026-09-20 10:06:29 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_zai_kimi.py

fix(picker): curated fallback for cold OAuth rows; Z.AI failed-probe negative cache; trim salvage

2026-09-18 11:01:52 -07:00

auth.py

fix(auth): reject the placeholder secrets this repo ships as examples

2026-09-20 10:18:48 -07:00

azure_detect.py

fix(cli): bound Azure detect response reads

2026-09-19 09:23:22 -07:00

backend_retirement.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

backup.py

fix(backup): an incomplete archive never prunes the last complete ones

2026-09-19 03:43:58 +05:30

bang_shell.py

…

banner.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: only call an auth DB backup "locked" when it made no progress

2026-09-16 16:53:40 -07:00

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

fix(checkpoints): clear-legacy trims to two real-path tests, aligns failure line with the log

2026-09-15 18:24:22 -07:00

claw.py

…

cli_agent_setup_mixin.py

fix(cli): release the old agent's clients before dropping it for a rebuild

2026-09-19 09:43:20 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

fix: WAF 403s stop reading as key rejections; anthropic_messages routes send custom_providers extra_headers

2026-09-19 09:57:21 -07:00

cli_chat_turn_mixin.py

chore: merge origin/main (resolve website/docs/user-guide/features/fallback-providers.md)

2026-09-19 10:47:48 -07:00

cli_commands_mixin.py

fix: effort pickers and /reasoning status say what ultra really sends

2026-09-19 10:20:55 -07:00

cli_info_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_loops_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_modal_mixin.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

cli_model_switch_mixin.py

chore: merge origin/main (resolve website/docs/integrations/providers.md)

2026-09-19 10:47:48 -07:00

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_notifications.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

cli_session_mixin.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

cli_status_bar_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_stream_mixin.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

cli_subagent_monitor.py

…

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

fix(tui): keep unselected list rows on the cursor column; trim tests

2026-09-18 09:55:21 -07:00

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

…

clipboard.py

refactor(cli): gate the macOS file-url read on one clipboard-info listing

2026-09-17 18:36:22 +05:30

codex_models.py

fix(codex): remove dead gpt-5.3-codex from curated fallback list

2026-09-19 10:22:33 -07:00

codex_runtime_plugin_migration.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

…

commands.py

fix(desktop): /reasoning hide|show gates Thinking blocks immediately

2026-09-18 20:55:49 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

config_effective.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

config_env_routing.py

fix(config): drop the "Hermes does not read this" note on config set

2026-09-15 21:47:48 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

fix(config): tolerate malformed nested values in config migrations

2026-09-19 23:41:10 -07:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config.py

fix: config get/unset still reach a legacy gateway.platforms-only value (review follow-up)

2026-09-20 10:08:37 -07:00

console_engine.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

container_boot.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

context_switch_guard.py

fix(cli): model-switch warning quotes the capped compression trigger

2026-09-19 16:28:57 +05:30

copilot_auth.py

…

credential_lifecycle.py

…

cron.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

curator.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

curses_ui.py

…

dashboard_procs.py

fix(dashboard): owner home for a pid follows the real profile resolver

2026-09-18 09:38:01 -07:00

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_console.py

fix(desktop): preserve source freshness and console diagnostics

2026-09-16 23:13:20 -04:00

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

feat(doctor): resolve every routed auxiliary.<task> block and report the dead ones

2026-09-19 12:30:32 -07:00

doctor_connectivity.py

fix: hermes doctor probes Azure Foundry Anthropic endpoints like the runtime

2026-09-19 09:29:18 -07:00

doctor_live.py

…

doctor_platform.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_report.py

…

doctor_state.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_tools.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

doctor.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

dump.py

…

env_loader.py

fix(env): a parent-injected dashboard session token survives the .env reload

2026-09-20 10:39:01 -07:00

fallback_cmd.py

…

fallback_config.py

fix: surface the pre-agent provider fallback on the TUI/Desktop gateway and cron too

2026-09-19 01:27:29 -07:00

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

free_tier_bootstrap.py

fix(setup): reconcile_record() only reconciles the launch profile's record

2026-09-18 12:52:36 -07:00

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex resumes from live state, compensates the whole destructive phase, and refuses an unknown default principal

2026-09-16 00:33:03 -07:00

gateway_migrate.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_multiplex_mode.py

gateway status shows why an unset-default gateway stayed standalone

2026-09-16 08:57:18 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(update): classify Windows gateway supervisors by Hermes ownership, not ancestry

2026-09-19 02:02:14 -07:00

gateway.py

fix: HERMES_HOME argv values containing a space still identify their own gateway (review follow-up)

2026-09-20 10:27:31 -07:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

gitlock.py

fix(update): drop the _IS_WINDOWS test flag; prove the read-only sweep on a real Windows host

2026-09-20 10:02:55 -07:00

goal_command.py

…

goals.py

fix(auth): a revoked Codex grant names openai-codex, the failing profile and the raw error

2026-09-18 10:00:29 -07:00

gui_uninstall.py

…

heartbeat.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

hooks.py

fix(cli): hooks test prints the decision for failing hooks

2026-09-20 10:19:25 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

inventory.py

test: trim the aggregator-twin tests to two invariants; drop the import guard

2026-09-20 10:06:50 -07:00

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_db_dispatch.py

fix(kanban): decode the guard's comment body once

2026-09-20 10:13:26 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

fix(gateway): close sender-routing gaps found in review

2026-09-18 22:36:24 -07:00

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

fix(kanban): order the board's done column by completion time

2026-09-20 10:18:14 -07:00

kanban_decompose.py

fix(kanban): decomposed cards fall back to the root task's assignee, never the dispatcher's own profile

2026-09-18 09:48:41 -07:00

kanban_diagnostics.py

fix(kanban): dispatcher blocks a card on the first terminal provider error

2026-09-18 20:34:16 -07:00

kanban_ops.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_output.py

…

kanban_parser.py

fix(kanban): add --body-file to create for shell-proof bodies

2026-09-20 10:24:53 -07:00

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

fix(kanban): headless specify/decompose aux calls carry a relay session key

2026-09-15 18:33:43 -07:00

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

fix(kanban): read --body-file as UTF-8 and pin it through the real parser

2026-09-20 10:24:53 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(linux): a PATH hit inside the checkout never persists as desktop entry Exec

2026-09-16 16:56:22 -07:00

logs.py

…

loops.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(cli): skip malformed launchd plists instead of aborting update cleanup (#114142)

2026-09-18 10:10:05 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

fix(desktop): stop a live renderer before the POSIX stage-and-swap rename

2026-09-20 10:05:53 -07:00

main_install_repair.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

main_platform_setup.py

…

main_provider_setup.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

refactor(dashboard): fire the armed discovery off-loop; flat branch; behaviour-shaped test

2026-09-20 18:16:47 +05:30

managed_scope.py

fix(update): heal stale root modules at every fresh import site

2026-09-18 09:38:34 -07:00

managed_uv.py

fix(install): reinstall a managed uv that no longer runs

2026-09-19 02:44:02 -07:00

mcp_app_detection.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_catalog.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

mcp_config.py

fix(mcp): OAuth login keeps discovered server metadata; token errors carry a redacted body excerpt

2026-09-19 23:46:42 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp_startup): take the deferred slot under the lock so two racing first clients fire once

2026-09-20 18:16:47 +05:30

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

fix(memory): migration checks provider presence in the home being migrated

2026-09-18 09:23:13 -07:00

memory_setup.py

fix: hindsight update-time dep resolution survives a BOM in config.json

2026-09-15 03:38:29 -07:00

middleware.py

fix(plugins): execution-chain middleware failures are reported once, not per call

2026-09-17 09:03:29 -07:00

migrate.py

…

moa_cmd.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows.py

fix(setup): profile-owned catalog keeps the curated list when the live fetch fails

2026-09-20 12:17:52 +05:30

model_switch_providers.py

refactor(models): cache-only OpenRouter read parses the disk copy once; test nits

2026-09-20 15:17:14 +05:30

model_switch.py

fix(local): the picker's Local row id and the provider resolver share one definition (#116249)

2026-09-20 10:03:32 -07:00

models_catalog_static.py

fix(models): admit every plugin provider to the picker by slug; catalogs fall back to the profile

2026-09-19 20:54:06 -07:00

models_detect.py

…

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(cli): model-switch validation trusts a profile-owned catalog

2026-09-19 20:56:31 -07:00

models.py

fix(models): filter retired Zen ids on every picker path, not only the live merge

2026-09-20 10:14:01 -07:00

nous_account.py

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(oneshot): consult the fallback chain at provider resolution time

2026-09-19 09:42:18 -07:00

pairing.py

…

partial_compress.py

…

personality.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

refactor(plugins): kill-list annotation takes the pre-resolved list directly; trim to two invariants

2026-09-18 09:43:19 -07:00

plugin_compat.py

fix(plugins): record plugin-compat hit paths in POSIX form on every OS

2026-09-16 17:15:38 -07:00

plugin_dev.py

…

plugin_packs.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugin_python_deps.py

fix: read plugin-home config through the loader; register update export

2026-09-17 00:11:27 -07:00

plugin_validate_desktop.py

fix(plugin-guard): two intake false positives — regex literal <script, allowlist "printenv"

2026-09-19 14:30:36 -07:00

plugin_validate.py

feat(plugin-catalog): refuse desktop plugins that step outside the SDK surface

2026-09-19 03:19:18 -07:00

plugins_cmd_catalog.py

fix(plugins): removed_annotation takes the resolved kill list as a required argument

2026-09-18 09:43:19 -07:00

plugins_cmd.py

fix(update): make intent-to-add entries stashable so hermes update can run

2026-09-19 23:58:35 -07:00

plugins_discovery.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_dispatch.py

fix(plugins): stream observer hooks and event subscribers fail-report once, not per event

2026-09-17 09:03:29 -07:00

plugins_ledger.py

fix(plugins): dedupe middleware failures too, and let unload forget reported hook failures

2026-09-16 17:08:25 -07:00

plugins_loader.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_manifest.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_state.py

…

plugins.py

fix(plugins): an installed directory plugin keeps its identity over a same-name pip entry point

2026-09-17 18:36:20 -07:00

portal_cli.py

…

process_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

profile_channels.py

…

profile_cmd.py

fix(profiles): purge a deleted profile's session/routing identity on delete

2026-09-16 14:21:14 -07:00

profile_credential_audit.py

fix(auth): credential audit reads profile config.yaml through read_user_config_raw

2026-09-16 14:34:59 -07:00

profile_describer.py

…

profile_distribution.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

profile_identity.py

refactor(checkpoints): slim the profile-rename rekey and name it as a checkpoint_manager sibling

2026-09-16 14:34:22 -07:00

profiles.py

fix(profiles): log the tolerated failure when a rename cannot record its previous name

2026-09-20 10:29:54 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

providers.py

fix(providers): restore the trimmed api_mode gates lost in the rebase onto #116853

2026-09-20 10:11:40 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

fix(cli): Super+<printable> under modifyOtherKeys types the character

2026-09-18 09:52:03 -07:00

pty_bridge.py

…

pty_session.py

fix(dashboard): skip the stalled-input close when attach detached itself

2026-09-15 06:36:19 -07:00

quiet_single_query.py

fix(gateway): a peer DM retries a transient turn failure once, like the other two lanes

2026-09-20 10:16:51 -07:00

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

resource_limits.py

…

route_identity.py

fix(config): provider switch via config set drops the previous provider's route (#113719)

2026-09-18 12:49:40 -07:00

runtime_provider_backends.py

chore: merge origin/main (resolve tests/agent/test_output_cap_parsing.py, tests/hermes_cli/test_runtime_provider_resolution.py)

2026-09-19 10:52:01 -07:00

runtime_provider_custom.py

fix(local-models): pass config to resolve_llamacpp_endpoint by keyword

2026-09-20 10:03:32 -07:00

runtime_provider.py

fix(auth): reject the placeholder secrets this repo ships as examples

2026-09-20 10:18:48 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

service_manager.py

fix(service): drop the s6 chmod-after-chown reorder

2026-09-19 01:31:49 -07:00

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

docs(sessions): recency wording matches the freshest-of rule

2026-09-17 21:17:15 +05:30

session_listing.py

…

session_lost_and_found.py

fix: reap the killed sqlite3 .recover children on timeout

2026-09-16 17:02:13 -07:00

session_recap.py

…

session_recovery.py

fix: drop the retired tool high-water key on stale-FTS recovery and session recover

2026-09-18 10:38:41 -07:00

session_schema_history.py

chore(sessions): record the transport_profile column in the schema history

2026-09-19 02:28:50 -07:00

sessions_cmd_browse.py

…

sessions_cmd_repair_profiles.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

sessions_cmd.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

sessions_repair_profiles.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

…

setup_terminal.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

setup_tts.py

fix(setup): xAI TTS wizard checks XAI_API_KEY before OAuth to match runtime

2026-09-18 09:47:06 -07:00

setup_whatsapp_cloud.py

…

setup.py

fix: render dict-form reasoning_effort in the TUI config.get and setup wizard readers

2026-09-19 09:25:29 -07:00

shared_session_attach.py

fix(cli): name the real state when cooperative attach is unavailable

2026-09-18 10:45:07 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(skills): built-in name collisions show a note in /skills, /help skills and the palette

2026-09-18 12:51:22 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

fix(skills): built-in name collisions show a note in /skills, /help skills and the palette

2026-09-18 12:51:22 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

fix(update): bridge stale utils so pre-handoff upgrades finish restart

2026-09-18 09:38:34 -07:00

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

stderr_timestamp.py

docs(gateway): name the SIGUSR2 consumer in the stderr wrapper's forwarding comment

2026-09-20 15:49:42 +05:30

stdio.py

…

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

fix(platforms): QR fallback tip names Hermes' own uv when it is not on PATH

2026-09-15 18:55:47 -07:00

terminal_breadcrumbs.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

fix(setup): Codex image post-setup names the auth command instead of starting a device login without a terminal

2026-09-19 10:05:26 -07:00

tools_config_providers.py

fix(tools): gate the browser picker on an actual backend choice

2026-09-20 20:29:14 +05:30

tools_config.py

fix(cli): warn once when platform_toolsets.<platform> is not a list

2026-09-19 23:46:08 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

…

update_abort_recovery.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): finish hermes update in an interpreter born on the pulled code

2026-09-17 00:02:09 -07:00

update_cmd_deps.py

fix(update): scrub interpreter-steering env keys from the critical-module import probe (#115032)

2026-09-20 09:52:06 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_git.py

fix(update): one bad workspaces glob no longer aborts the lockfile-churn cleanup

2026-09-16 17:44:36 -07:00

update_cmd_maint.py

fix(config,update): replace an unwritable SOUL.md symlink; say when the pre-update snapshot failed

2026-09-18 10:15:11 -07:00

update_cmd_stash.py

fix(update): record every autostash disposition in the update receipt

2026-09-20 00:13:01 -07:00

update_cmd_windows.py

fix(cli): symmetric Windows resume-failure handling + atexit disarm

2026-09-20 10:40:12 -07:00

update_cmd_zip.py

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

update_cmd.py

fix(cli): symmetric Windows resume-failure handling + atexit disarm

2026-09-20 10:40:12 -07:00

update_contract.py

…

update_handoff.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

update_inventory.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(update): clear fleet restart warning for multiplexers

2026-09-18 12:47:23 -07:00

update_restart_recovery.py

fix(profiles): a child spawned for another profile no longer inherits the spawner's authorization gates

2026-09-18 15:11:47 -07:00

update_serve_obligations.py

fix(update): discharge an unreadable-create_time manual-serve row once its pid is provably dead

2026-09-19 23:59:11 -07:00

urllib_security.py

…

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

fix(desktop): custom endpoints pin an API mode and keep /v1/models alias metadata

2026-09-19 00:17:19 -07:00

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

web_server_cron.py

fix(dashboard): say when the scheduler last ticked on the Cron page

2026-09-18 12:46:54 -07:00

web_server_dashboard.py

fix(dashboard): profile-less chat deep links inherit the launcher's preselected profile

2026-09-18 15:12:27 -07:00

web_server_files.py

…

web_server_gateway.py

fix(profiles): a child spawned for another profile no longer inherits the spawner's authorization gates

2026-09-18 15:11:47 -07:00

web_server_idle_exit.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_idle_proof.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_lifecycle.py

refactor(dashboard): startup reconcile reuses the routers' own-store opener

2026-09-14 08:10:36 -07:00

web_server_mcp.py

fix(mcp): dashboard OAuth failures keep their first cause on every surface

2026-09-18 09:20:07 -07:00

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

fix(desktop): custom endpoints pin an API mode and keep /v1/models alias metadata

2026-09-19 00:17:19 -07:00

web_server_sessions.py

…

web_server.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

webhook.py

Inspired by ChatGPT Work: event-triggered cron jobs via webhook routes

2026-09-13 21:30:02 -07:00

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

fix(lsp): release a worktree's language servers on removal; reap deleted roots

2026-09-19 01:29:03 -07:00

write_approval_commands.py

…

xai_retirement.py

…