webtecnica f4ac4aa6b8 fix: Make MoA strictly opt-in in model pickers (#63353) ...

Add _raw_config_has_enabled_moa_preset() guard to _moa_provider_row()
so the virtual MoA provider row only appears in model pickers when the
user's raw config.yaml explicitly enables at least one MoA preset.

The synthesized 'default' preset from normalize_moa_config({}) (which
every user gets via DEFAULT_CONFIG defaults) must not be treated as a
user choice — a user selecting 'openai-codex:gpt-5.6-sol' should never
see a transient switch to provider=moa.

The guard already existed in _filter_explicit_provider_rows() but was
missing from _moa_provider_row(), which is the entry point for the
non-explicit picker paths (TUI full picker, dashboard picker, etc.).

Adjust three tests that iterated CANONICAL_PROVIDERS (which includes
'moa') or used count-based assertions that assumed MoA was always
present.

2026-09-28 10:56:47 -05:00

..

dashboard_auth

…

local_runtime

fix(local-runtime): size launch windows beside other programs' GPU memory

2026-09-27 22:41:39 -04:00

observability

…

proxy

…

subcommands

feat(cron): allow Python scripts to use an external interpreter

2026-09-28 02:32:05 +05:30

web_routers

fix(analytics): daily buckets use local days, matching /insights

2026-09-28 19:08:27 +05:30

__init__.py

…

_early_recovery.py

fix(pm): report unwritable install state once

2026-09-28 06:42:00 -07:00

_install_repair.py

…

_launchers.py

…

_old_updater.py

…

_parser.py

…

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

…

_subprocess_compat.py

fix(gateway): keep the update restart watcher stdlib-only so it survives the bare store Python

2026-09-27 03:37:09 -07:00

_update_takeover.py

fix(pm): collect generations after maintenance syncs

2026-09-27 02:55:39 -07:00

active_sessions.py

…

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

…

AGENTS.md

…

anon_auth.py

…

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

auth_commands.py

…

auth_constants.py

…

auth_device_flow.py

…

auth_error_copy.py

…

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

…

auth_oauth_grants.py

fix(auth): read flat refresh_token for forkable pool rows; reuse pool ownership in load_pool

2026-09-27 18:37:01 +05:30

auth_oauth_pkce_plugin.py

…

auth_openrouter.py

…

auth_plugin_providers.py

…

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

…

azure_detect.py

…

backend_retirement.py

…

backup_restore.py

…

backup_sqlite.py

…

backup.py

fix(backup): decide full-zip publish target once and pin all-failed keep

2026-09-27 18:19:17 +05:30

bang_shell.py

…

banner.py

…

blueprint_cmd.py

…

boot_bootstrap.py

…

browser_connect.py

…

browser_runtime.py

…

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

chat_catalog.py

…

checkpoints.py

…

claw.py

fix(backup): cap logged zip-backup errors and clarify salvage messages

2026-09-27 18:19:17 +05:30

cli_agent_setup_mixin.py

fix(kanban): preserve credential startup failure exit codes

2026-09-28 03:37:09 -07:00

cli_auto_maintenance.py

…

cli_billing_mixin.py

…

cli_chat_error_copy.py

…

cli_chat_turn_mixin.py

…

cli_commands_mixin.py

…

cli_config_load.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

cli_footer_split.py

…

cli_info_mixin.py

…

cli_init_mixin.py

…

cli_loops_mixin.py

…

cli_modal_mixin.py

…

cli_model_switch_mixin.py

…

cli_output.py

…

cli_process_dock.py

…

cli_process_notifications.py

fix(process): heartbeats wake the agent only on new output, and never as a user bubble

2026-09-26 22:19:53 -05:00

cli_render.py

…

cli_session_dock.py

…

cli_session_mixin.py

…

cli_shutdown.py

…

cli_single_query.py

fix(kanban): preserve credential startup failure exit codes

2026-09-28 03:37:09 -07:00

cli_status_bar_mixin.py

…

cli_stream_mixin.py

…

cli_subagent_monitor.py

…

cli_terminal_input.py

…

cli_terminal_mixin.py

…

cli_tui_mixin.py

…

cli_tui_runtime_mixin.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard.py

…

codex_models.py

…

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

feat(cli): /s as a one-letter alias for /steer

2026-09-27 19:04:20 -05:00

completion.py

…

config_backups.py

…

config_defaults.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

config_effective.py

…

config_env_routing.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

config_home.py

…

config_migrations.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

config_providers.py

…

config_read_errors.py

…

config.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

console_engine.py

…

container_boot.py

fix(docker): boot a gateway.standalone profile's own s6 slot at container start (#120524, salvage #120525)

2026-09-28 04:04:23 -07:00

context_switch_guard.py

…

copilot_auth.py

…

credential_lifecycle.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

cron.py

fix(review): ticker heartbeat proves liveness only while its writer is alive; routed hand-off never trusts an unknown probe; satellite manual runs get the ticker's routed grant

2026-09-28 05:28:05 -07:00

curator.py

…

curses_ui.py

…

dashboard_procs.py

fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)

2026-09-28 04:44:29 -07:00

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug.py

…

default_soul.py

…

desktop_console.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

fix(gateway): warn when config still declares a retired idle/daily session_reset

2026-09-28 15:54:01 +05:30

doctor_connectivity.py

…

doctor_live.py

…

doctor_platform.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

doctor_report.py

…

doctor_state.py

…

doctor_tools.py

fix: Hermes never falls back to the user's node/npm/npx/uv

2026-09-27 22:04:26 -07:00

doctor.py

fix(doctor): report a dashboard web surface that dies at import

2026-09-28 06:42:00 -07:00

dump.py

…

env_loader.py

…

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

fs_utils.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

…

gateway_migrate_guards.py

…

gateway_migrate.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

gateway_multiplex_mode.py

…

gateway_multiplex_s6.py

…

gateway_multiplex_served.py

…

gateway_profile_lifecycle.py

fix(gateway): run every --all verb as the host root when a named profile is active (#124473)

2026-09-28 04:04:23 -07:00

gateway_setup_wizard.py

…

gateway_supervised_restart.py

…

gateway_windows_legacy.py

…

gateway_windows.py

fix(update): scope Windows gateway lifecycle to current install

2026-09-27 02:57:28 -07:00

gateway.py

fix(review): gateway restart's orphan reap is best-effort and runs on every restarting path (#125394)

2026-09-28 06:06:17 -07:00

git_credentials.py

…

github_api.py

…

gitlock.py

fix(update): one commit-graph fetch for the pre-fetch heal and the post-update pass

2026-09-28 03:08:56 -07:00

goal_command.py

…

goals.py

…

gui_uninstall.py

fix(desktop): keep the legacy Linux desktop entry as a hidden alias

2026-09-27 15:27:43 -05:00

heartbeat.py

…

home_data_layout.py

…

hooks.py

…

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

fix: Make MoA strictly opt-in in model pickers (#63353)

2026-09-28 10:56:47 -05:00

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

fix(kanban): unknown-assignee skip is recorded once per card, never once per tick (#122422, salvage #122567)

2026-09-28 03:37:09 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

fix(kanban): count only real gc removals and resolve kanban home once

2026-09-27 18:29:18 +05:30

kanban_db.py

…

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

fix(kanban): count only real gc removals and resolve kanban home once

2026-09-27 18:29:18 +05:30

kanban_output.py

…

kanban_parser.py

…

kanban_pr_acceptance_store.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_pr_acceptance.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

…

lifecycle.py

…

linux_desktop_entry.py

fix(desktop): keep the legacy Linux desktop entry as a hidden alias

2026-09-27 15:27:43 -05:00

logs.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

loops.py

…

macos_signing.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

…

main_dashboard.py

fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)

2026-09-28 04:44:29 -07:00

main_dep_hints.py

…

main_desktop.py

fix(desktop): only Electron's singleton socket gets the short TMPDIR

2026-09-27 11:44:31 -07:00

main_install_repair.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

main_platform_setup.py

…

main_provider_setup.py

…

main_tui_launch.py

fix(cli): include -p <profile> in TUI exit summary resume hints (#125078, salvage #125079)

2026-09-28 03:13:19 -07:00

main_web_build.py

…

main.py

…

managed_scope.py

…

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

…

mcp_config.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

…

memory_setup.py

…

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

fix(models): catalog SWR refresh writes the requesting profile's cache (#103778, salvage #103779)

2026-09-28 05:37:55 -07:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

…

model_setup_flows.py

…

model_switch_providers.py

fix(model): split comma-separated fallback chains into picker entries

2026-09-27 18:31:33 -05:00

model_switch.py

…

models_catalog_static.py

…

models_detect.py

…

models_local.py

…

models_pricing.py

…

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

…

models.py

…

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

old_updater_deps.py

…

old_updater_main.py

…

onepassword_secrets_cli.py

…

oneshot.py

…

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

…

plugin_catalog.py

fix(plugins): make catalog known_issues informational, not a fail-closed gate

2026-09-27 17:06:55 -07:00

plugin_compat.py

…

plugin_dev.py

…

plugin_events.py

…

plugin_packs.py

…

plugin_validate_desktop.py

…

plugin_validate.py

…

plugins_activation_live.py

…

plugins_activation.py

…

plugins_admission.py

…

plugins_cadence.py

…

plugins_cmd_capabilities.py

…

plugins_cmd_catalog.py

fix(tools): resolve the live plugin catalog once per plugins.list

2026-09-27 06:26:52 -05:00

plugins_cmd_git.py

…

plugins_cmd_install.py

refactor(plugins): fold known_issues loops into one helper, print them once

2026-09-27 17:06:55 -07:00

plugins_cmd_listing.py

…

plugins_cmd_remove.py

…

plugins_cmd_toggle.py

…

plugins_cmd_update.py

…

plugins_cmd.py

…

plugins_discovery.py

fix(gateway): read a parked profile's config without importing its plugins (#123386, salvage #123397)

2026-09-28 04:04:23 -07:00

plugins_dispatch.py

…

plugins_ledger.py

…

plugins_loader.py

…

plugins_manifest.py

…

plugins_provenance.py

…

plugins_settings.py

…

plugins_state.py

…

plugins_transaction.py

…

plugins_updates.py

…

plugins.py

fix(gateway): publish plugin injector across profiles

2026-09-28 05:24:26 -07:00

portal_cli.py

…

post_update.py

fix(update): drop the cached live plugin catalog on boot after a code change

2026-09-27 06:26:52 -05:00

process_identity.py

fix(update): a stopped-but-unreaped dashboard is no longer a pre-update survivor

2026-09-27 21:29:39 -07:00

profile_channels.py

…

profile_cmd.py

…

profile_describer.py

…

profile_distribution.py

…

profile_identity.py

…

profile_memory_config.py

…

profiles_service_cleanup.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

profiles.py

fix(profiles): delete/rename also remove the system-scope unit and Windows task (#124401, #97897 class)

2026-09-28 04:04:23 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

…

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

fix(review): supersede displaced PTY viewer, route project tile by active source

2026-09-28 04:59:38 -07:00

quiet_single_query.py

…

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

release_channels.py

fix(update): only an explicit hermes update retries channel reads

2026-09-27 03:41:42 -07:00

resource_limits.py

…

route_identity.py

…

runtime_paths.py

…

runtime_provider_backends.py

…

runtime_provider_custom.py

…

runtime_provider.py

…

runtime_state.py

fix(pm): close the lease create→flock race on the writer side, no grace window

2026-09-28 04:44:29 -07:00

sandbox_image_switch.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

…

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

…

session_reset_retirement.py

fix(gateway): warn when config still declares a retired idle/daily session_reset

2026-09-28 15:54:01 +05:30

session_schema_history.py

…

sessions_cmd_browse.py

fix(sessions): tell the user when a delete is refused for a live turn

2026-09-27 20:49:04 +05:30

sessions_cmd_journal_mode.py

…

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(sessions): share the write-guard filter and trim repeated walks

2026-09-27 20:49:04 +05:30

sessions_repair_profiles.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

refactor(onboarding): remove the intro cinematic, the guided-onboarding tests, and their comments (#126139)

2026-09-28 08:33:43 +00:00

setup_quick.py

…

setup_summary.py

…

setup_terminal.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

…

shared_profile_warning.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

…

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

…

source_build.py

fix(update): install the SDKs of configured gateway platforms instead of only warning (#124228)

2026-09-28 06:42:00 -07:00

source_check.py

…

source_completion.py

fix(update): expose PM's git only for git checkouts, and record the installer's copy

2026-09-27 02:54:03 -07:00

source_releases.py

…

source_stamp.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

fix(files): one live-DB refusal source; hold the lock through /api/files/read

2026-09-27 20:45:56 +05:30

sqlite_util.py

…

stale_modules.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

fix(status): render the session profile home

2026-09-27 07:43:23 -05:00

status.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

stderr_timestamp.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

stdio.py

…

steward.py

…

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

…

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

fix(browser): ship the Browser Use CLI engine in every install, Desktop included

2026-09-27 23:53:40 -07:00

tools_config_providers.py

…

tools_config.py

…

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

…

update_abort_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_channel.py

…

update_cmd_check.py

fix(update): self-heal git pack-objects crash on partial-clone fetches

2026-09-28 03:08:56 -07:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): migrate default config.yaml on named-profile update

2026-09-28 04:44:29 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet_checkout.py

…

update_cmd_fleet_gatewayless.py

…

update_cmd_fleet.py

fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds

2026-09-28 04:44:29 -07:00

update_cmd_git.py

fix(update): one commit-graph fetch for the pre-fetch heal and the post-update pass

2026-09-28 03:08:56 -07:00

update_cmd_maint.py

fix(update): record a failed dashboard respawn as "failed" in the receipt

2026-09-28 01:52:54 -07:00

update_cmd_stale_survivors.py

…

update_cmd_stash.py

fix(update): an autostash the update could not restore ends the update partial, never 'Update complete!'

2026-09-28 05:33:25 -07:00

update_cmd_validation.py

…

update_cmd_windows.py

fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds

2026-09-28 04:44:29 -07:00

update_cmd_zip.py

…

update_cmd.py

fix(update): an autostash the update could not restore ends the update partial, never 'Update complete!'

2026-09-28 05:33:25 -07:00

update_completion.py

fix(pm): collect generations after maintenance syncs

2026-09-27 02:55:39 -07:00

update_contract.py

…

update_finish.py

…

update_fleet_scope.py

fix(update): judge Windows gateway ownership by home, warn on unreadable ones

2026-09-27 02:57:28 -07:00

update_handoff.py

…

update_host_obligation.py

fix(update): trim SHA-less obligation salvage to the checkout fallback (#125952, salvage #125964)

2026-09-28 04:44:29 -07:00

update_inventory.py

fix(update): record a failed dashboard respawn as "failed" in the receipt

2026-09-28 01:52:54 -07:00

update_lock.py

…

update_owning_install.py

chore: read .project-root BOM-tolerantly; drop a trailing blank line

2026-09-28 05:33:25 -07:00

update_receipt.py

fix(update): trim SHA-less obligation salvage to the checkout fallback (#125952, salvage #125964)

2026-09-28 04:44:29 -07:00

update_restart_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_serve_obligations.py

…

update_serve_resume.py

…

update_stage.py

…

urllib_security.py

…

vault.py

…

venv_sync.py

fix(cli): compare interpreter paths lexically, not through symlinks

2026-09-27 03:38:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

fix(version): retain tagless derived display identity

2026-09-27 15:08:15 -05:00

voice.py

…

web_deps.py

…

web_git.py

fix(worktree): refresh any valid branch name used as a base

2026-09-28 16:23:22 +05:30

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

…

web_server_cron.py

…

web_server_dashboard.py

fix(dashboard): plugin API routes run in the request profile's scope (#120310, salvage #120332)

2026-09-28 05:37:55 -07:00

web_server_files.py

…

web_server_gateway.py

…

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

…

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

…

web_server_profiles.py

…

web_server_sessions.py

…

web_server_skew_exit.py

…

web_server.py

fix(gateway): restart refuses before it stops anything (#125394)

2026-09-28 06:06:17 -07:00

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

fix(worktree): hermes -w branches from the remote tip on narrow clones

2026-09-28 16:23:22 +05:30

write_approval_commands.py

…

xai_retirement.py

…