Erosika 5bf69e963c fix(gateway): loop guard judges the final authz verdict and reads config.yaml ...

#91483 added the guard inside the ALLOW_BOTS block. on today's authz layout
an admitted bot returns from an earlier rule before that block runs, so the
guard never tripped (its own ping-pong test passes turn 21 on this tree).

_is_user_authorized now computes the allowlist verdict first and runs every
admitted bot-authored message through the guard, so bots admitted by a chat
allowlist, allow-all, pairing or delegation are metered too. the budget stays
per conversation. settings move from HERMES_BOT_LOOP_* environment variables
to config.yaml gateway.bot_loop_guard (defaults added to config_defaults),
re-read on every call. an unauthorized bot dm no longer gets a pairing code,
so a cooldown produces no outbound traffic. tests rebuilt against real
SessionSource objects.

2026-09-10 10:27:07 -07:00

..

dashboard_auth

fix(dashboard-auth): offer every configured provider in native sign-in (#107018)

2026-09-09 21:35:08 -04:00

local_runtime

fix(local-runtime): find nvidia-smi in WSL driver path

2026-09-06 23:34:20 +05:30

observability

fix(observability): attribute ACP and batch execution surfaces

2026-09-09 11:27:36 +10:00

proxy

…

subcommands

feat(api): accept a turn author on session chat and runs; peer dm forwards it

2026-09-10 10:27:07 -07:00

web_routers

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

__init__.py

chore: release v0.21.1 (2026.9.7)

2026-09-07 15:16:44 -07:00

_early_recovery.py

…

_install_repair.py

…

_parser.py

feat: refresh one pooled OAuth grant from the CLI

2026-09-07 08:06:48 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cli): preserve explicit dashboard update checks

2026-09-07 06:13:16 -07:00

_subprocess_compat.py

test: verify SSH update checks with real PTY authentication controls

2026-09-07 08:21:24 -07:00

active_sessions.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

agent_import.py

…

agent_plugins.py

…

AGENTS.md

refactor: share CLI goal commands across interactive surfaces

2026-09-07 00:51:41 -07:00

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex.py

fix(cli): detect ssl.SSLError by type in the Codex login hint; trim tests; add the openssl.cnf snippet to docs

2026-09-09 10:14:58 -07:00

auth_commands.py

fix: reject independent Nous account refresh without clearing cooldown

2026-09-07 08:06:48 -07:00

auth_constants.py

…

auth_device_flow.py

…

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

…

auth_oauth_grants.py

refactor(auth): one stat per store file in the heal fingerprint

2026-09-09 21:17:35 +05:30

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

fix(auth): honor Desktop-saved model.key_env for registry providers

2026-09-09 12:33:15 -07:00

azure_detect.py

…

backup.py

fix(backup): prune old hermes-backup-*.zip after each run, keep last 3

2026-09-09 03:33:14 -07:00

bang_shell.py

…

banner.py

fix(cli): hide the console window for banner/update git probes

2026-09-07 08:23:08 -07:00

blueprint_cmd.py

…

browser_connect.py

fix(browser): bound auth backups without replacing live SQLite files

2026-09-08 05:10:57 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

…

claw.py

…

cli_agent_setup_mixin.py

fix(cli): hold agent status lines until the streamed response box closes

2026-09-09 15:20:13 -07:00

cli_billing_mixin.py

…

cli_chat_turn_mixin.py

fix: show task-first subagent completion notices in CLI and TUI

2026-09-07 01:23:34 -07:00

cli_commands_mixin.py

fix(cron): make failed runs diagnosable without verbose delivery errors

2026-09-07 08:18:56 -07:00

cli_info_mixin.py

fix(display): distinguish estimated context from provider usage

2026-09-07 08:13:01 -07:00

cli_loops_mixin.py

fix(goal): the judge can WAIT on delegated subagents (4 of 5 nudges in one run re-poked an agent that was waiting on workers)

2026-09-05 06:24:06 -07:00

cli_modal_mixin.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

cli_model_switch_mixin.py

fix(cli): keep the no-stored-model early return ahead of the route read

2026-09-09 12:41:07 +05:30

cli_output.py

…

cli_process_notifications.py

fix: coalesce interactive completion backlogs without losing identity

2026-09-07 08:27:07 -07:00

cli_session_mixin.py

…

cli_status_bar_mixin.py

fix(display): distinguish estimated context from provider usage

2026-09-07 08:13:01 -07:00

cli_stream_mixin.py

fix(cli): hold agent status lines until the streamed response box closes

2026-09-09 15:20:13 -07:00

cli_subagent_monitor.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_terminal_mixin.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_tui_mixin.py

fix(cli): open subagent monitor with the TUI Ctrl+T shortcut

2026-09-08 10:37:36 -07:00

cli_voice_mixin.py

…

clipboard.py

…

codex_models.py

refactor(openai): one is_astra_model predicate; gate Astra at the untrusted Codex inputs

2026-09-07 21:43:54 +05:30

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

fix(desktop): reveal complete slash help across the window

2026-09-07 06:10:15 -07:00

commands_platforms.py

…

commands.py

…

completion.py

…

config_backups.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00

config_defaults.py

fix(gateway): loop guard judges the final authz verdict and reads config.yaml

2026-09-10 10:27:07 -07:00

config_home.py

fix(config): diagnose unavailable home links without claiming YAML corruption

2026-09-07 04:46:37 -07:00

config_migrations.py

fix(cron): unpinned jobs run on their creation-snapshot model instead of failing closed

2026-09-09 04:32:13 -07:00

config_providers.py

fix(metadata): GLM context windows from the live catalog; hyphenated slugs, entry-level overrides, aux inherits main pin

2026-09-10 01:08:18 -07:00

config.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

console_engine.py

feat: refresh one pooled OAuth grant from the CLI

2026-09-07 08:06:48 -07:00

container_boot.py

…

context_switch_guard.py

…

copilot_auth.py

…

credential_lifecycle.py

…

cron.py

fix: cron and local DMs reach an open Desktop Bot Chat

2026-09-07 16:48:29 -07:00

curator.py

…

curses_ui.py

…

dashboard_procs.py

…

dashboard_register.py

…

debug.py

fix(cli): stop dpaste.com fallback from leaking debug logs for 7 days

2026-09-09 10:54:34 -07:00

default_soul.py

…

dep_ensure.py

…

desktop_update_verify.py

fix(desktop): verify the Windows update receipt against the checkout, not cwd

2026-09-10 01:25:45 -07:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

…

doctor_connectivity.py

…

doctor_live.py

…

doctor_platform.py

…

doctor_report.py

…

doctor_state.py

fix(state): trim the futile-holder FTS diagnostic to shape and fix the remedy text

2026-09-09 09:19:57 -07:00

doctor_tools.py

fix(doctor): probe the Docker daemon with 'docker version', not 'docker info' (#72927)

2026-09-05 19:01:22 +05:30

doctor.py

…

dump.py

…

env_loader.py

…

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

refactor(cli): one foreign-log walker for the CLI picker and the desktop browser

2026-09-06 09:09:41 -07:00

foreign_sessions.py

refactor(cli): one foreign-log walker for the CLI picker and the desktop browser

2026-09-06 09:09:41 -07:00

gateway_enroll.py

…

gateway_windows.py

…

gateway.py

fix(gateway): hermes gateway restart without a service unit no longer bails on linger

2026-09-10 02:48:21 -07:00

git_credentials.py

fix(plugins): run gh auth token under the noninteractive git env

2026-09-10 01:00:19 -07:00

gitlock.py

…

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(deepseek): deepseek-flash is the canonical Flash id; retired names fold onto it

2026-09-10 02:44:26 -07:00

gui_uninstall.py

…

heartbeat.py

fix(tui): heartbeat ticks share the /loop idle poll and rewind when no turn starts

2026-09-06 07:20:24 -07:00

hooks.py

…

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

refactor(inventory): build the gated-Astra warning tail instead of string-replacing a sentence

2026-09-07 21:43:54 +05:30

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix: retry Kanban wakes until adapter admission

2026-09-07 14:16:57 -07:00

kanban_db_dispatch.py

refactor(gateway): wait on the target user's bus socket, not the generic control-socket predicate

2026-09-08 22:35:39 +05:30

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix: retry Kanban wakes until adapter admission

2026-09-07 14:16:57 -07:00

kanban_db_workspace.py

…

kanban_db.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_decompose.py

fix: retain Kanban decomposition identity and inherit parent tenants

2026-09-07 07:09:59 -07:00

kanban_diagnostics.py

…

kanban_ops.py

fix(kanban): clarify that watch names its initial board

2026-09-07 06:04:06 -07:00

kanban_output.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_parser.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

…

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

…

kanban.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(desktop): preserve custom Linux launcher entries when opted out

2026-09-07 04:55:17 -07:00

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

…

main_dashboard.py

fix(update): retain the detached updater log mirror

2026-09-07 05:56:50 -07:00

main_desktop.py

refactor(desktop): gate the WSLg D3D12 selection inside the helper and test the real launch env

2026-09-09 10:28:52 -07:00

main_install_repair.py

docs(update): scope the stderr-merge comments to legacy hand-offs

2026-09-05 15:02:53 +02:00

main_platform_setup.py

…

main_provider_setup.py

fix: keep command-auth model discovery lazy across config and setup

2026-09-07 21:22:49 -07:00

main_tui_launch.py

fix(cli): inline the $HERMES_HOME/npmrc lookup, trim tests to two, document it

2026-09-09 10:26:06 -07:00

main_web_build.py

…

main.py

fix(cli): refresh TERMINAL_CWD when --in re-homes the session

2026-09-09 09:20:12 -07:00

managed_scope.py

…

managed_uv.py

docs(update): scope the stderr-merge comments to legacy hand-offs

2026-09-05 15:02:53 +02:00

mcp_catalog.py

feat(plugins): install plugins from private git repos using the user's stored credentials

2026-09-10 01:00:19 -07:00

mcp_config.py

feat: authorize MCP servers with device codes from the CLI

2026-09-07 08:22:35 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_setup.py

…

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix(deepseek): pass custom model ids through instead of rewriting them

2026-09-10 04:22:38 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

fix: keep command-auth model discovery lazy across config and setup

2026-09-07 21:22:49 -07:00

model_setup_flows.py

…

model_switch_providers.py

perf(picker): read Nous pricing cache-only when building the picker row

2026-09-09 21:12:22 +05:30

model_switch.py

fix(cli): same-provider /model on a session-only custom endpoint stays on it (#74143)

2026-09-10 03:58:37 -07:00

models_catalog_static.py

feat(models): DeepSeek V4.1 Flash on the Nous Portal and OpenRouter pickers

2026-09-10 09:22:31 -07:00

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

models_pricing.py

…

models_reasoning_caps.py

…

models_validate.py

…

models.py

fix(models): a vendor's own id on its first-party provider never re-routes

2026-09-10 09:11:00 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

refactor(cli): one stored_session_route for interactive and one-shot resume

2026-09-09 12:41:07 +05:30

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugin_compat.py

…

plugin_dev.py

…

plugin_packs.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugin_validate.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugins_cmd_catalog.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugins_cmd.py

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

plugins_discovery.py

…

plugins_dispatch.py

refactor(plugins): share the hook-token release between runner and start-failure paths

2026-09-07 13:11:36 +05:30

plugins_ledger.py

refactor(plugins): own dual-kind hook fallback in the ledger mixin

2026-09-06 13:36:12 -07:00

plugins_loader.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_manifest.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_state.py

…

plugins.py

fix(plugins): give dual-kind memory hooks a single owner

2026-09-06 13:36:12 -07:00

portal_cli.py

…

process_identity.py

…

profile_cmd.py

fix(profiles): --clone-all no longer copies cron jobs into the new profile

2026-09-09 04:27:24 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

feat(plugins): install plugins from private git repos using the user's stored credentials

2026-09-10 01:00:19 -07:00

profiles.py

fix(profiles): --clone-all no longer copies cron jobs into the new profile

2026-09-09 04:27:24 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

feat(nous): anthropic_wire=auto decides a session's wire from its first response

2026-09-06 09:11:04 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

fix(cli): keypad Alt+Enter inserts a newline instead of escape text

2026-09-07 02:09:34 -07:00

pty_bridge.py

…

pty_session.py

fix(cli): concurrent PTY reaps skip already-popped keys

2026-09-09 11:31:10 -07:00

relaunch.py

…

relay_plugin_cutover.py

…

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

…

runtime_provider_custom.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

runtime_provider.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

…

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

refactor(recovery): stream the salvaged population; table the shape rules

2026-09-09 18:28:57 +05:30

session_recap.py

…

session_recovery.py

refactor(recovery): stream the salvaged population; table the shape rules

2026-09-09 18:28:57 +05:30

session_schema_history.py

fix(state): record display_identity/display_order in the messages schema history

2026-09-09 13:30:28 -07:00

sessions_cmd_browse.py

…

sessions_cmd.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

fix(gateway): stop time-triggered conversation rotation

2026-09-07 06:10:54 -07:00

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

fix(cli): back up config.yaml before --reset overwrites it

2026-09-09 03:32:58 -07:00

shared_session_attach.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skin_cmd.py

…

skin_engine.py

fix: keep classic subagent dock compact and skin-colored

2026-09-08 03:06:30 -07:00

slack_cli.py

…

slash_exec.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

status_auth.py

…

status.py

…

stderr_timestamp.py

…

stdio.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

fix: correct two stale comments/docs strings left out of the docs batch

2026-09-08 19:52:26 +05:30

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

…

tools_config_providers.py

…

tools_config.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

fix(gateway): refuse to uninstall a systemd unit pinned to another HERMES_HOME

2026-09-09 09:19:36 -07:00

update_abort_recovery.py

…

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_deps.py

…

update_cmd_fleet.py

fix(update): settle stale receipt warnings from matching live gateways

2026-09-07 08:20:46 -07:00

update_cmd_git.py

…

update_cmd_maint.py

…

update_cmd_stash.py

…

update_cmd_windows.py

…

update_cmd_zip.py

…

update_cmd.py

fix(update): stream build progress without concealing silent stalls

2026-09-07 05:56:50 -07:00

update_contract.py

…

update_inventory.py

fix(update): credit launchd ai.hermes.gateway in fleet reconciliation (#103679)

2026-09-06 20:47:52 +05:30

update_lock.py

…

update_receipt.py

refactor(update): share command-boundary receipt reason

2026-09-06 14:53:33 +05:30

update_restart_recovery.py

…

urllib_security.py

…

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

…

web_server_config.py

fix(models): never auto-switch to a provider the user has no credentials for

2026-09-10 03:58:37 -07:00

web_server_cron.py

fix(cron): the dashboard "Trigger" run-now no longer stamps the next occurrence either

2026-09-09 12:17:13 +05:30

web_server_dashboard.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

…

web_server_idle_exit.py

fix(serve): Desktop-over-SSH isolated backends retire themselves when no client is connected (#101626)

2026-09-05 20:44:51 +05:30

web_server_lifecycle.py

fix(state): coordinate SessionDB teardown with active writers

2026-09-06 22:56:51 +05:30

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

…

web_server_profiles.py

fix(messaging): keep profile status truthful without credential inheritance

2026-09-07 05:56:33 -07:00

web_server_sessions.py

fix: retain profile idle activity after session removal

2026-09-07 04:56:38 -07:00

web_server.py

fix(serve): Desktop-over-SSH isolated backends retire themselves when no client is connected (#101626)

2026-09-05 20:44:51 +05:30

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

…

write_approval_commands.py

…

xai_retirement.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00