kshitijk4poor 525dd12da7 fix: fail closed when no safe export destination exists; polish salvage edges ...

- _profile_export_directory(): when the managed store, the home-sibling
  store, AND the temp dir all resolve inside Git checkouts, raise a clear
  ValueError instead of warning and proceeding — a stderr warning would not
  stop a scripted export from staging a secret-bearing archive in a source
  tree, which is the exact #92457 incident class. All three callers already
  surface ValueError cleanly (CLI/TUI print Error: + exit, API returns 400).
- .dockerignore: drop the /default.tar.gz line made redundant by the global
  *.tar.gz pattern this PR adds.
- hermes profile export -o help text: stop advertising the old
  <name>.tar.gz cwd default.
- Tests: cwd-in-unrelated-checkout topology (the second production shape
  from the blocking review) and the fail-closed path. Mutation-checked:
  both fail on the pre-fix helper.

2026-09-01 01:00:23 -07:00

..

dashboard_auth

refactor(dashboard-auth): replace PKCE cookie payload with base64url(JSON) codec (#99210)

2026-09-01 11:47:38 +10:00

data

…

observability

feat(nix): home-manager module, shared with the NixOS module

2026-08-18 20:42:06 -04:00

proxy

…

subcommands

fix: fail closed when no safe export destination exists; polish salvage edges

2026-09-01 01:00:23 -07:00

web_routers

fix(security): keep profile exports out of source and image contexts

2026-09-01 01:00:23 -07:00

__init__.py

chore: release v0.21.0 (2026.8.31)

2026-08-31 12:29:27 -07:00

_early_recovery.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_install_repair.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_parser.py

feat(cli/tui): -q now seeds a live interactive session; prompts submit literally

2026-08-28 05:15:06 -07:00

_scan_venv_blockers.py

fix(update): defer ledger-verified serve/dashboard holders to the updater instead of dead-ending the Desktop hand-off

2026-08-31 13:11:54 -07:00

_startup_fast.py

feat: consolidate 'hermes version' into 'hermes --version', remove the subcommand

2026-08-20 03:05:46 -07:00

_subprocess_compat.py

fix(windows): compose the taskkill identity guards into one fail-closed class fix

2026-08-31 10:41:54 -07:00

active_sessions.py

fix(sessions): fail closed on ownership uncertainty and fence every turn source

2026-08-31 12:36:33 -07:00

agent_import.py

…

agent_plugins.py

…

approval_mode.py

fix(hermes_cli): surface fail-closed config write refusals cleanly

2026-08-27 13:27:24 +05:30

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

fix(profiles): make_targz writes to a temp file and renames, not the destination directly

2026-08-31 11:19:05 -07:00

auth_commands.py

fix(auth): canonicalize configured provider display names

2026-08-23 20:00:53 -07:00

auth.py

fix(auth): close Anthropic OAuth CSRF gap, cross-process refresh race, and API-key shadowing

2026-08-29 18:34:35 -07:00

azure_detect.py

…

backup.py

fix(state): reject special files in zeroed probe; real schema-bytes decode fixture

2026-08-31 09:56:43 -07:00

bang_shell.py

…

banner.py

fix(update): sweep aborted-fetch tmp_pack debris before it corrupts the pack directory (#93732)

2026-08-26 16:45:22 -07:00

blueprint_cmd.py

…

browser_connect.py

fix(browser): real-profile snapshot auth files are owner-only (#96729)

2026-08-29 20:07:53 -07:00

build_info.py

fix(update): resolve code identity by reading .git directly — no subprocess

2026-08-20 21:54:25 -07:00

bundles.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

callbacks.py

…

checkpoints.py

…

claw.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

cli_agent_setup_mixin.py

fix(cli): answer clarify headless in single-query turns

2026-08-31 10:09:42 -07:00

cli_billing_mixin.py

…

cli_commands_mixin.py

fix: anchor checkout detection to the export path, not cwd

2026-09-01 01:00:23 -07:00

cli_output.py

fix(cli): widen prompt_toolkit fallback to catch any runtime failure

2026-08-24 15:42:58 +05:30

clipboard.py

…

codex_models.py

feat(model): Codex GPT slugs default back to 272K; explicit -900k picker variants opt into the verified large window

2026-08-23 02:14:35 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands.py

fix(telegram): rank complete menu candidate set

2026-08-29 19:14:36 -07:00

completion.py

…

config_defaults.py

fix(agent): surface silent turn stalls with a bounded turn-liveness watchdog (#95548, #95663)

2026-09-01 03:19:59 +05:30

config_migrations.py

refactor(tools): remove expired BFL FLUX 3 promo core tools (migration v39); FLUX 3 stays via video_gen/FAL for subscribers (#94599)

2026-08-25 02:45:10 -07:00

config.py

fix(config): greedy literal-key matching + loud phantom-sibling refusal for dotted key names

2026-08-31 12:18:47 -07:00

console_engine.py

fix(hermes_cli): surface fail-closed config write refusals cleanly

2026-08-27 13:27:24 +05:30

container_boot.py

…

context_switch_guard.py

…

copilot_auth.py

fix(desktop): Models/Providers settings no longer hang 20s when gh CLI is signed out

2026-08-19 19:22:48 -07:00

credential_lifecycle.py

fix(credentials): scrub the keyed providers schema on rotate/remove

2026-08-31 03:37:43 -07:00

cron.py

feat(cron): doctor flags overdue next_run_at as silent non-firing

2026-08-31 10:00:29 -07:00

curator.py

fix(curator): restore complete skill packages on ledger rollback (#96962)

2026-08-31 10:08:13 -07:00

curses_ui.py

refactor: collapse context_back/effective_allow_back, fix draw_header docstring

2026-08-24 15:45:52 +05:30

dashboard_procs.py

fix(hermes_cli): fail-closed PID-ownership guard before Windows taskkill

2026-08-31 10:41:54 -07:00

dashboard_register.py

…

debug.py

feat(agent): escalate repeated transcript-sanitiser heals with a one-time user notice (#96870)

2026-08-31 13:11:41 -07:00

default_soul.py

fix(install): keep install.ps1 pure ASCII — seed the SOUL text with '--' dashes

2026-08-29 18:10:47 -07:00

dep_ensure.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_live.py

…

doctor.py

fix(browser): lightpanda review follow-ups for #99312

2026-08-31 21:59:11 +05:30

dump.py

feat(agent): escalate repeated transcript-sanitiser heals with a one-time user notice (#96870)

2026-08-31 13:11:41 -07:00

env_loader.py

fix(update): avoid cryptography self-lock on Windows

2026-08-15 13:28:14 -07:00

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

gateway_enroll.py

fix(cli): read multiplex topology from the default root in enroll warning

2026-08-21 14:13:28 +10:00

gateway_windows.py

fix(cli): supervised gateway launches skip the sticky active_profile redirect

2026-08-31 12:05:07 -07:00

gateway.py

fix(gateway): apply startup-watchdog config to the already-armed handle

2026-08-31 14:01:39 -07:00

gitlock.py

fix(update): sweep aborted-fetch tmp_pack debris before it corrupts the pack directory (#93732)

2026-08-26 16:45:22 -07:00

goals.py

fix(goals): honor auxiliary.goal_judge.timeout instead of a hardcoded 30s

2026-08-21 02:48:14 +08:00

gui_uninstall.py

fix(cli): launch-context-independent Linux desktop-entry Exec (salvaged from #94874)

2026-08-31 10:07:51 -07:00

heartbeat.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

hooks.py

…

image_provenance.py

feat(update): bake authoritative image provenance into the Docker image

2026-08-26 11:41:04 -07:00

init_command.py

…

input_sanitize.py

…

install_identity.py

feat(bot-mode): add durable Group Chat authority and replay

2026-08-30 19:46:14 -07:00

inventory.py

fix(model): coerce YAML integer provider names before picker/CRUD

2026-08-27 11:31:21 -05:00

journey.py

fix(cli): keep journey labels readable

2026-08-27 17:45:43 -05:00

kanban_db.py

fix(kanban): close half-open tracked connection when busy_timeout PRAGMA fails

2026-08-27 19:07:15 +05:30

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

feat(kanban): export and import a whole board as a portable archive

2026-08-28 22:38:01 -05:00

kanban.py

feat(kanban): export and import a whole board as a portable archive

2026-08-28 22:38:01 -05:00

lifecycle.py

…

linux_desktop_entry.py

fix(cli): launch-context-independent Linux desktop-entry Exec (salvaged from #94874)

2026-08-31 10:07:51 -07:00

logs.py

…

loops.py

feat(loop): first wakeup fires immediately by default

2026-08-29 17:43:38 -07:00

macos_tcc_anchor.py

refactor(macos): use shared atomic_write_text for the anchor marker

2026-08-28 09:05:19 +05:30

main.py

fix: anchor checkout detection to the export path, not cwd

2026-09-01 01:00:23 -07:00

managed_scope.py

…

managed_uv.py

fix(update): defer Windows runtime repair when the updater holds the venv

2026-08-31 12:50:29 -07:00

mcp_catalog.py

fix(mcp-catalog): failed probe keeps the prior tool filter instead of wiping it

2026-08-25 04:21:37 -07:00

mcp_config.py

fix(mcp): tool-selection UIs stay in exclude mode instead of freezing include lists

2026-08-25 04:21:37 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_setup.py

fix(memory-setup): route .env writer through save_env_value's validation gate

2026-08-26 15:48:39 -07:00

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

feat(providers): add Nebius Token Factory provider

2026-08-29 20:39:44 +05:30

model_search.py

feat(models): 'ox alpha' now finds x-preview-f-free in every model picker

2026-08-21 14:38:19 -07:00

model_selection_guards.py

…

model_setup_flows.py

feat: opencode-free is fully keyless — no env var, no account, anonymous wire

2026-08-21 00:24:32 -07:00

model_switch.py

fix(cli): honour model_aliases api_key, stop cross-provider key leak (#83612)

2026-08-31 10:59:45 -07:00

models.py

refactor(models): hoist preset suffix re-attachment into one helper

2026-08-31 11:19:26 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

refactor: remove the Tavily web backend; keyless ring is exa/parallel/firecrawl/keenable

2026-08-31 00:56:41 -07:00

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(cli): honour model_aliases api_key, stop cross-provider key leak (#83612)

2026-08-31 10:59:45 -07:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_dev.py

fix(plugins): doctor temp home can no longer be stranded by a failed staging copy

2026-08-31 08:41:15 -07:00

plugin_index.py

…

plugin_packs.py

…

plugins_cmd.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

plugins.py

feat(commands): attach desktop slash metadata to the registry

2026-08-27 22:05:40 -05:00

portal_cli.py

…

process_identity.py

fix(mcp): register stdio MCP helper children in the spawn ledger and reap orphans (#61514)

2026-08-26 17:42:58 -07:00

profile_describer.py

…

profile_distribution.py

…

profiles.py

fix: fail closed when no safe export destination exists; polish salvage edges

2026-09-01 01:00:23 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

fix: honor JSON-array string forms for skills.disabled and agent.disabled_toolsets

2026-08-16 06:24:56 -07:00

prompt_stash.py

…

provider_catalog.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

providers.py

feat:add hy4-preview model and tokenplan provider

2026-08-29 20:51:17 +05:30

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

fix(cli): stop raw CSI bytes from Shift+Space leaking into buffer (#88071)

2026-08-31 10:08:48 -07:00

pty_bridge.py

…

pty_session.py

…

relaunch.py

…

relay_plugin_cutover.py

fix(relay): complete native plugin cutover

2026-08-19 08:52:03 -07:00

resource_limits.py

…

route_identity.py

…

runtime_provider.py

fix(cli): honour model_aliases api_key, stop cross-provider key leak (#83612)

2026-08-31 10:59:45 -07:00

secret_prompt.py

…

secrets_cli.py

fix(secrets_cli): defer bitwarden backend import to first attribute access

2026-08-15 01:55:22 -07:00

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

fix(cli): supervised gateway launches skip the sticky active_profile redirect

2026-08-31 12:05:07 -07:00

session_export_html.py

fix(cli): coalesce None title/model in single-session HTML export

2026-08-15 02:04:49 -07:00

session_export_md.py

…

session_export.py

feat: bare /save shows a usage card instead of exporting

2026-08-15 02:04:49 -07:00

session_filters.py

…

session_listing.py

fix(gateway): announce declined 'all' scope in /sessions and /resume listings

2026-08-31 14:40:09 -07:00

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

…

sessions_cmd.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

setup_hidden_env.py

…

setup_whatsapp_cloud.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

setup.py

refactor: remove the Tavily web backend; keyless ring is exa/parallel/firecrawl/keenable

2026-08-31 00:56:41 -07:00

sizefmt.py

…

skills_config.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

skills_hub.py

feat(skills-hub): impeccable joins the optional-skills catalog, content pulled live from upstream

2026-08-29 19:15:32 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

feat(profiles): rename any agent — the default profile gets a display name (#45624)

2026-08-18 02:27:18 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

status.py

refactor: remove the Tavily web backend; keyless ring is exa/parallel/firecrawl/keenable

2026-08-31 00:56:41 -07:00

stderr_timestamp.py

fix(gateway): put --external-supervisor on launchd gateway argv

2026-08-16 01:54:35 -07:00

stdio.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

feat: per-terminal --continue via terminal breadcrumbs

2026-08-15 18:15:18 -07:00

timefmt.py

…

timeouts.py

…

tips.py

feat: /plan graduates from bundled skill to built-in command on every surface

2026-08-29 19:14:15 -07:00

tools_config.py

fix(config): warn for empty platform toolsets

2026-08-31 10:08:31 -07:00

toolset_scope.py

fix(config): warn for empty platform toolsets

2026-08-31 10:08:31 -07:00

toolset_validation.py

fix(config): warn for empty platform toolsets

2026-08-31 10:08:31 -07:00

uninstall.py

fix(windows): remove the hermes launchers on uninstall

2026-08-22 13:39:04 -04:00

update_cmd.py

fix(update): run pending fleet-restart catchup before the runtime-verification exit gate

2026-08-31 12:58:14 -07:00

update_contract.py

feat(update): image/package-managed installs refuse in-place updates through one shared gate (#91277 Phase 3)

2026-08-26 11:41:04 -07:00

update_inventory.py

fix(update): pause SCM-supervised Windows gateway services before venv mutation

2026-08-26 16:45:31 -07:00

update_lock.py

…

update_receipt.py

fix(update): conservative outcomes + serve-ledger coverage for fresh restart recovery

2026-08-26 16:45:26 -07:00

update_restart_recovery.py

fix(update): conservative outcomes + serve-ledger coverage for fresh restart recovery

2026-08-26 16:45:26 -07:00

urllib_security.py

…

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

fix(desktop): make git worktrees work end-to-end on a remote gateway backend

2026-08-16 20:53:44 -07:00

web_models.py

feat(sessions): one-shot single-match owner backfill for legacy NULL-profile rows (#94724)

2026-08-27 02:17:56 -07:00

web_server.py

fix(dashboard): drop systemd-only advice from the model-picker code-skew 503 (#97046)

2026-08-31 20:43:36 -05:00

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

worktree_gc.py

feat(worktree): pushed open-PR lanes reclaim their disk; cron tick prunes worktrees

2026-08-31 07:27:50 -07:00

write_approval_commands.py

…

xai_retirement.py

…