hermes-agent

Files

Hermes Agent 541e4dc0ba fix(agent): protect the runtime's own interpreter from agent deletes

A session asked to clean up older Pythons removed the uv-managed base
interpreter its own venv depended on; the next boot died with 'uv
trampoline failed to spawn Python child process' and no agent tool could
repair it, because the agent itself no longer started (#58748). Prior
uninstall detection (85ce25687e) only flagged package-manager commands.

Add agent/runtime_self_protection.py and wire it into both layers:

- The approval floor (_floor_block) now blocks shell commands that
  delete the running interpreter, its own venv, the pyvenv.cfg base, or
  the uv-managed install directory — rm/rmdir/rd/del/erase/Remove-Item
  with any flags, find <root> -delete, and uv python uninstall of the
  running version (including --all). The floor runs before yolo /
  approvals.mode=off / cron approve mode, so no session setting can
  bypass it.
- The file-safety write classifier denies write/patch/move/delete to the
  same paths, so the file tools cannot overwrite the interpreter either.

Only the runtime the process itself boots from is protected; every other
venv and interpreter on the machine stays manageable.

Fixes #58748

2026-09-25 16:24:21 -05:00

lsp

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

monitoring

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

pet

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

proxy_sources

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

secret_sources

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

transports

fix: bootstrap the hermes-tools MCP server only when it runs as python -m

2026-09-23 19:26:00 -07:00

vault_backends

…

verify

…

__init__.py

…

account_usage.py

fix(codex): quota probe and /usage pool paths use the pool route base

2026-09-25 21:27:06 +05:30

acp_openai_bridge.py

…

activity_tracking.py

…

agent_init.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

agent_runtime_helpers.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

AGENTS.md

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733 )

2026-09-22 01:19:12 -07:00

anthropic_adapter.py

fix(providers): report why a lazy SDK install did not land

2026-09-24 23:37:27 -04:00

anthropic_credentials.py

merge: reconcile profile-scoped routes and shared desktop backend with PM

2026-09-21 13:18:11 -04:00

anthropic_endpoints.py

…

anthropic_message_convert.py

fix(vision): accept the image/jpg alias and give the Anthropic converter the same unsupported-subtype downgrade

2026-09-19 09:56:12 -07:00

api_error_summary.py

fix(agent): treat jiter SSE parse ValueErrors as transient provider errors (#65147 )

2026-09-24 22:26:23 +05:30

api_request_hooks.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216 )

2026-09-24 22:25:06 +05:30

async_utils.py

…

aux_accounting.py

…

auxiliary_async_rebuild.py

…

auxiliary_client.py

fix(providers): make a configured relay terminal for catalog egress; refuse a foreign Anthropic endpoint

2026-09-25 12:56:32 -04:00

auxiliary_fallback_recovery.py

…

auxiliary_health.py

…

auxiliary_hooks.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733 )

2026-09-22 01:19:12 -07:00

auxiliary_reasoning_floor.py

fix(aux): title calls on reasoning-mandatory routes stop sending a doomed disable

2026-09-23 15:13:16 -07:00

auxiliary_structured_output.py

…

auxiliary_unavailable.py

fix(time): repair surrogate-bearing locale zone names at every strftime site

2026-09-23 18:29:35 -05:00

auxiliary_wire.py

fix: drop replayed reasoning_details on every chat-completions route that does not read it

2026-09-19 09:28:45 -07:00

azure_identity_adapter.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

backend_identity.py

…

background_review.py

fix(agent): tag background-review fork turns in logs and pin supersede interrupt scoping

2026-09-23 15:00:46 -05:00

battery.py

…

bedrock_adapter.py

fix(providers): report why a lazy SDK install did not land

2026-09-24 23:37:27 -04:00

billing_links.py

…

billing_usage.py

fix(time): repair surrogate-bearing locale zone names at every strftime site

2026-09-23 18:29:35 -05:00

billing_view.py

…

bounded_response.py

…

browser_provider.py

…

browser_registry.py

…

chat_completion_helpers_relay.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863 )

2026-09-20 14:29:39 -07:00

chat_completion_helpers.py

fix(agent): keep openai-codex stale floor/hard cap for inline cron Codex (#69734 )

2026-09-25 21:28:32 +05:30

chat_completion_nonstream.py

refactor(agent): derive the Codex attempt origin and pre-progress phase once

2026-09-24 15:58:19 +05:30

chat_completion_stream_monitor.py

fix(wait-notice): derive the near-deadline flag once; retire the stale 'provider may be slow' docstrings

2026-09-19 09:53:48 -07:00

chat_completion_wait_notice.py

fix(agent): keep Codex first-progress deadline attempt-local

2026-09-24 15:58:19 +05:30

client_lifecycle.py

fix(processes): persist_on_release keeps background jobs alive across lifecycle kill sweeps (#41225 )

2026-09-25 13:49:31 -05:00

codex_headers.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

codex_responses_adapter.py

perf(codex): categorise each distinct non-ASCII character once in the format-control scan

2026-09-23 21:28:38 +05:30

codex_runtime_history_seed.py

fix(codex): a codex app-server thread started from scratch is seeded with the session's prior turns

2026-09-19 20:44:24 -07:00

codex_runtime.py

refactor(codex): single source for app-server delta methods and delta text

2026-09-24 22:38:35 +05:30

coding_context.py

Merge origin/main into ethie/pm-clean

2026-09-23 21:55:59 -04:00

command_token_source.py

fix(decode): tolerate non-UTF-8 child output in two remaining capture paths

2026-09-23 18:52:49 -05:00

compaction_display.py

…

compression_facade.py

fix(compression): keep the /compress here N tail in state.db under in-place compaction

2026-09-23 01:11:58 -07:00

compression_marker.py

refactor(agent): derive the pruned-marker matcher from the compressor template

2026-09-24 16:29:19 +05:30

context_breakdown.py

…

context_compressor_summary.py

fix(compression): fence the durable cooldown rollback per compressor; one stale-attempt helper

2026-09-20 15:50:49 -07:00

context_compressor.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

context_engine.py

fix: clone plugin context engines via clone_for_agent(), not blind deepcopy

2026-09-21 23:38:16 -07:00

context_file_sources.py

…

context_pin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

context_references.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

conversation_compression_archive.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

conversation_compression_manual.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

conversation_compression_reply_anchor.py

fix(compaction): reinsert the delivered reply only where it keeps the transcript valid

2026-09-23 23:06:15 +05:30

conversation_compression.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

conversation_loop.py

fix(agent): tools-available note on dropped-tools continuation; keep legacy stub recognized (#74990 )

2026-09-24 22:27:18 +05:30

copilot_acp_client.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

credential_persistence.py

…

credential_pool_admin.py

fix(auth): route the borrowed-root add_entry write through the token-base boundary

2026-09-24 15:44:48 +05:30

credential_pool_model_cooldowns.py

fix: pin entitlement rotation through recover_with_credential_pool; bench until reset

2026-09-19 09:37:23 -07:00

credential_pool_plugin.py

feat: model-provider plugins classify their own API errors via ProviderProfile.classify_api_error

2026-09-19 21:24:05 -07:00

credential_pool.py

fix(codex): quota probe and /usage pool paths use the pool route base

2026-09-25 21:27:06 +05:30

credential_sources.py

feat(auth): opt out of borrowing Codex CLI / Claude Code logins (auth.adopt_external_logins)

2026-09-18 20:55:24 -07:00

credits_tracker.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 10:07:50 -04:00

curator_backup.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

curator.py

fix(curator): floor interval_hours at 1 and warn once per bad value

2026-09-25 14:08:03 +05:30

deadline.py

…

delegation_context.py

…

display.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 02:23:44 -04:00

empty_response_guard.py

…

error_classifier.py

fix(agent): only 4xx/5xx body codes count as a stream error's HTTP status (#121270 )

2026-09-24 22:36:08 +05:30

error_surface.py

chore: merge origin/main (resolve apps/desktop/src/components/assistant-ui/thread/assistant-message.tsx, website/docs/user-guide/desktop.md)

2026-09-19 10:54:43 -07:00

errors.py

…

estop.py

…

fallback_cooldown.py

fix(agent): pin the reset_at reach through try_activate_fallback and add opt-in fallback.min_switch_reset_seconds

2026-09-20 17:00:43 -07:00

fast_mode.py

fix(anthropic): use standard speed when an org has no fast-mode capacity

2026-09-23 13:40:45 -04:00

file_safety.py

fix(agent): protect the runtime's own interpreter from agent deletes

2026-09-25 16:24:21 -05:00

gemini_native_adapter.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 02:23:44 -04:00

gemini_schema.py

…

history_commentary.py

fix(desktop): preserve interim messages across history and tool boundaries (#107386 )

2026-09-24 00:30:45 +00:00

i18n.py

…

image_eviction_policy.py

…

image_gen_provider.py

…

image_gen_registry.py

…

image_routing.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 00:34:46 -04:00

image_token_cost.py

…

inline_tool_executors.py

feat: setup agent can search the catalog and install plugins and skills through the approval card

2026-09-23 08:04:33 +05:30

insights.py

fix(time): repair surrogate-bearing locale zone names at every strftime site

2026-09-23 18:29:35 -05:00

interrupt_compat.py

…

interrupt_control.py

…

interrupt_scope.py

…

iteration_budget.py

…

jiter_preload.py

…

kanban_stop.py

…

lazy_forward.py

…

learn_prompt.py

…

learning_graph_render.py

refactor(memory): resolve a journey fingerprint by text alone

2026-09-24 18:01:46 +05:30

learning_graph.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

learning_mutations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

legacy_cli.py

fix(update): launches racing an interrupted-pull restore take turns and never advise reset --hard

2026-09-23 18:26:45 -07:00

lmstudio_reasoning.py

…

manual_compression_feedback.py

…

markdown_tables.py

…

memory_manager.py

fix(memory): forward committed entry identity to providers

2026-09-23 01:06:32 -07:00

memory_provider.py

fix(memory): forward committed entry identity to providers

2026-09-23 01:06:32 -07:00

message_content.py

…

message_metadata.py

fix: exclude display-only message fields from token estimates

2026-09-23 22:45:56 -07:00

message_sanitization.py

perf(agent): skip surrogate regex for ASCII text

2026-09-23 21:28:38 +05:30

micro_compaction.py

fix(compression): archive the rows the compressor held, not every row up to the newest

2026-09-24 11:57:56 -05:00

moa_alternation.py

fix: MoA aggregator merges adjacent same-role messages only for destinations that reject them

2026-09-18 20:56:35 -07:00

moa_loop.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

moa_trace.py

…

model_metadata_http.py

…

model_metadata.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

models_dev.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

moonshot_schema.py

fix(moonshot): stop stamping a synthetic type on if/then/else nodes

2026-09-21 13:14:22 -07:00

native_compaction.py

fix(compression): enable Astra native compaction on official Codex OAuth

2026-09-19 00:53:26 -07:00

notification_presentation.py

…

nous_rate_guard.py

…

nous_wire.py

…

onboarding.py

…

oneshot_footprint.py

feat: one-shot runs drop the self-improvement footprint (no skill authoring, fewer process skills, delegation cap)

2026-09-19 09:21:18 -07:00

oneshot.py

…

opencode_affinity.py

chore: merge origin/main (resolve agent/opencode_affinity.py, tests/hermes_cli/test_web_server_idle_proof.py)

2026-09-19 10:56:19 -07:00

outbound_webhooks.py

…

periodic_scheduler.py

…

plan_prompt.py

…

plugin_llm.py

…

plugin_stream_hooks.py

perf(stream): resolve plugins.stream_reasoning_deltas once per stream, not per token

2026-09-22 16:15:34 +05:30

portal_tags.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

process_bootstrap.py

…

prompt_builder.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:02:44 -04:00

prompt_cache_boundary.py

…

prompt_cache_scope.py

…

prompt_caching.py

perf(prompt-caching): copy only mutable cache-plan rows

2026-09-23 21:28:38 +05:30

provider_base.py

…

provider_media.py

…

provider_projection.py

…

provider_registry.py

…

proxy_bypass.py

…

rate_limit_credits.py

fix(credits): re-warm the Nous catalog when a header finds it cold after the TTL

2026-09-20 14:02:17 +05:30

rate_limit_tracker.py

…

reactions.py

…

reasoning_effort.py

fix(models): drop gpt-6-terra, a tier OpenAI never published

2026-09-23 00:44:33 -07:00

reasoning_params.py

fix: send reasoning_effort=medium on custom endpoints when agent.reasoning_effort is unset

2026-09-20 16:03:38 -07:00

reasoning_summaries.py

…

reasoning_timeouts.py

fix(agent): add MiniMax M2.x to reasoning stale-timeout floor

2026-09-25 21:28:32 +05:30

redact.py

fix(agent): anchor the Telegram token regex to a digit-run start (ReDoS)

2026-09-23 21:28:38 +05:30

relay_cwd.py

…

relay_llm.py

fix(relay): the logical LLM close must not pop through a concurrent turn's scope

2026-09-23 06:31:43 -07:00

relay_runtime.py

Merge pull request #108345 from afourniernv/fix/relay-atof-cwd

2026-09-24 01:06:16 -04:00

relay_tools.py

…

repetition_guard.py

fix(agent): gate stop-path repetition abort on runaway shape

2026-09-24 22:32:05 +05:30

replay_cleanup.py

…

retry_utils.py

fix(gateway): real 401 envelopes keep the sign-in reply; quota reply reads the shared reset grammar

2026-09-19 09:49:39 -07:00

review_engine.py

…

review_idle_queue.py

…

runtime_cwd.py

Merge origin/main into fix/relay-atof-cwd

2026-09-23 07:43:29 -04:00

runtime_self_protection.py

fix(agent): protect the runtime's own interpreter from agent deletes

2026-09-25 16:24:21 -05:00

sdk_transform_bypass.py

…

search_policy.py

…

secret_scope.py

fix(profiles): route-only launch pin; profile delete names its own unit under multiplex

2026-09-23 08:09:47 -07:00

served_model.py

feat(gateway): opt-in served_model footer field shows the model that really answered

2026-09-19 10:38:30 -07:00

session_activity.py

…

session_persistence.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:21:50 -04:00

shell_hooks.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

side_question.py

…

skill_bundles.py

…

skill_commands.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

skill_preprocessing.py

fix(windows): route every bare-bash spawn through _find_bash and surface silent interpreter failures

2026-09-20 15:50:26 -07:00

skill_utils.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

ssl_verify.py

fix(ssl): build explicit-bundle contexts without importing truststore

2026-09-21 18:42:05 -04:00

status_output.py

…

stream_delivery.py

refactor(streaming): share interim visible/streamed normalization between prefix and exact verdicts

2026-09-24 22:41:10 +05:30

stream_diag.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216 )

2026-09-24 22:25:06 +05:30

stream_single_writer.py

…

subagent_lifecycle.py

…

subdirectory_hints.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

subscription_view.py

…

surface_switch.py

fix(agent): keep the session-start workspace snapshot across prompt rebuilds

2026-09-23 17:06:48 -07:00

system_prompt.py

fix(agent): don't restore a foreign Session ID or pin an empty workspace snapshot

2026-09-23 17:06:48 -07:00

terminal_approval_batch.py

…

terminal_env_provider.py

…

terminal_env_registry.py

…

think_scrubber.py

fix(agent): hide MiniMax-M3 Chinese reasoning tags (#43827 )

2026-09-24 22:41:10 +05:30

thinking_timeout_guidance.py

…

thread_scoped_output.py

…

title_generator.py

docs(title): point the wait-for-turn docstring at _is_self_hosted_provider

2026-09-24 17:59:28 +05:30

tool_dispatch_helpers.py

refactor(agent): derive the pruned-marker matcher from the compressor template

2026-09-24 16:29:19 +05:30

tool_executor.py

refactor(agent): derive the pruned-args recovery hint from the marker prefix

2026-09-24 16:29:19 +05:30

tool_guardrails.py

…

tool_result_classification.py

…

trace_upload.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

trajectory.py

…

transcript_repair.py

fix(compression): preserve steer display identity

2026-09-20 18:24:07 -07:00

transcription_provider.py

…

transcription_registry.py

…

tts_provider.py

…

tts_registry.py

…

turn_api_call.py

refactor(agent): leave the API-interrupt tail close to the finalizer

2026-09-24 15:44:26 +05:30

turn_api_error.py

fix(agent): collapse orphan continuation trail on retry exhaustion (#119001 )

2026-09-24 22:33:58 +05:30

turn_api_request.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216 )

2026-09-24 22:25:06 +05:30

turn_author.py

…

turn_context_compaction.py

refactor(agent): module-level _refund_api_call import; int verdict count (#77305 )

2026-09-24 22:27:18 +05:30

turn_context.py

fix: exclude display-only message fields from token estimates

2026-09-23 22:45:56 -07:00

turn_empty_response.py

refactor(agent): module-level _refund_api_call import; int verdict count (#77305 )

2026-09-24 22:27:18 +05:30

turn_explainers.py

fix(sessions): storage maintenance refuses while a writer holds state.db; human-first retired-WAL guard text + recovery guide

2026-09-20 20:13:33 -07:00

turn_facade_lease.py

…

turn_facade.py

fix(relay): clear stale cwd scope data

2026-09-23 07:46:43 -04:00

turn_failure_copy.py

fix(agent): close non-interrupted tool-tail turns with a visible response

2026-09-25 12:27:24 -05:00

turn_final_response.py

fix(agent): gate stop-path repetition abort on runaway shape

2026-09-24 22:32:05 +05:30

turn_finalizer.py

fix(agent): close non-interrupted tool-tail turns with a visible response

2026-09-25 12:27:24 -05:00

turn_iteration_prep.py

fix(agent): share the truncation-retry output boost; clamp to model limit (#72770 , #79715 )

2026-09-24 22:27:18 +05:30

turn_liveness.py

…

turn_loop_errors.py

…

turn_overflow.py

fix(agent): hosted providers no longer get the local-server "wait and /retry" context rejection

2026-09-23 04:38:27 -07:00

turn_preflight_gate.py

…

turn_preflight.py

fix(agent): re-anchor after post-tool compression

2026-09-23 05:36:34 -07:00

turn_recovery_autorecover.py

feat(agent): bounded auto-recovery ladder after retries and fallback are spent (#85426 , #107307 )

2026-09-19 12:38:55 -07:00

turn_recovery.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

turn_request_assembly.py

fix: hand Codex reasoning-only stalls to the fallback provider instead of the incomplete sentinel

2026-09-19 00:04:42 -07:00

turn_response_check.py

chore: merge origin/main (resolve website/docs/user-guide/features/credential-pools.md)

2026-09-19 10:47:48 -07:00

turn_response_intake.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216 )

2026-09-24 22:25:06 +05:30

turn_retry_state.py

feat(agent): bounded auto-recovery ladder after retries and fallback are spent (#85426 , #107307 )

2026-09-19 12:38:55 -07:00

turn_stop_gates.py

docs(agent): pin prefix semantics at the previewed-mark call site (#88954 )

2026-09-24 22:41:10 +05:30

turn_summary.py

…

turn_tool_round.py

fix(agent): re-anchor after post-tool compression

2026-09-23 05:36:34 -07:00

turn_tool_validation.py

…

turn_truncation.py

revert(agent): drop the no-op side-channel length-stop change

2026-09-25 01:08:23 -05:00

turn_usage.py

…

usage_anchor.py

…

usage_pricing.py

fix(pricing): price direct OpenAI/xAI/Anthropic/Google models missing from the snapshot

2026-09-23 11:33:09 -07:00

vault_login_classifier.py

…

vault_store.py

harden vault error handling for malformed state

2026-09-20 10:21:52 -07:00

verification_evidence.py

fix: verify-on-stop recognises python.exe / py launcher interpreters (review follow-up)

2026-09-20 10:23:04 -07:00

verification_stop.py

…

verify_hooks.py

…

vertex_adapter.py

fix: CI python-tests backlog — no import-time dependency syncs, CI-shaped test fixtures

2026-09-20 11:47:06 -04:00

video_gen_provider.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 10:52:20 -04:00

video_gen_registry.py

…

vision_message_prep.py

…

web_search_provider.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

web_search_registry.py

…