Austin Pickett 6926997f05 fix(providers): make a configured relay terminal for catalog egress; refuse a foreign Anthropic endpoint ...

Addresses two P1 review findings on #121614.

1. `provider_model_ids`: a failed or empty relay probe fell through to the
   canonical per-provider fetcher, sending the provider credential to exactly
   the vendor host the user routed away from — recreating #121387 on the
   failure path. A configured `model.base_url` relay is now TERMINAL for live
   catalog egress and degrades to the local curated list instead. The curated
   tail is extracted as `_static_catalog` and shared by both paths.

   Fetchers that already resolve `model.base_url` themselves and degrade
   locally (`_anthropic_catalog`, `_custom_catalog`, `_openai_catalog`, the
   simple api-key fetchers) are excluded from interception via
   `_RELAY_AWARE_CATALOG_FETCHERS` — they already satisfy the invariant and
   produce a better-merged catalog.

2. `_try_anthropic`: an `explicit_base_url` that failed
   `_is_anthropic_compatible_host` was silently dropped, leaving `base_url` at
   the ambient/canonical host and continuing with the explicit credential —
   a silent retarget of authority, not the refusal the PR body claimed. It now
   returns unavailable before client construction.

Regressions: an egress-sentinel test pins that no vendor fetcher, profile
catalog or models.dev merge is reached after a relay 404/hang; the Anthropic
test now asserts no client and zero SDK builder calls.

2026-09-25 12:56:32 -04:00

..

dashboard_auth

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:55:33 -04:00

local_runtime

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

observability

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

proxy

…

subcommands

fix(install): don't ask the gateway install questions twice

2026-09-24 23:49:18 -04:00

web_routers

fix(tts): stream Edge speak-stream per sentence instead of whole-text fallback

2026-09-24 19:28:05 -05:00

__init__.py

fix(cli): keep hermes_cli import off os.environ; run the import-purity test on Windows

2026-09-24 14:47:06 -04:00

_early_recovery.py

refactor(recovery): split the two CC>30 early-recovery functions

2026-09-24 14:08:22 -04:00

_install_repair.py

refactor(pm): pm owns the dependency-environment layout and interpreter paths

2026-09-18 20:02:36 -04:00

_launchers.py

fix(windows): preserve active source launchers during backend startup

2026-09-24 06:03:29 -04:00

_old_updater.py

fix(update): let the Windows takeover child adopt its orchestrator's update marker

2026-09-23 12:02:05 -04:00

_parser.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

_scan_venv_blockers.py

refactor(pm): consolidate runtime ownership and updater completion

2026-09-12 16:30:35 -04:00

_secrets_common.py

…

_startup_fast.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

_subprocess_compat.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

_update_takeover.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

active_sessions.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

agent_import_sync.py

fix: read text files with encoding=utf-8-sig in code merged from main

2026-09-19 01:38:09 -04:00

agent_import.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

agent_plugins.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

AGENTS.md

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

anon_auth.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

anon_sign_in_cli.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

refactor(aux): drop the now-uncalled _read_codex_access_token and retarget its test seams

2026-09-25 21:27:06 +05:30

auth_commands.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

auth_constants.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

auth_device_flow.py

fix(auth): bound device-poll edge backoff and gate 403 on x-vercel-mitigated

2026-09-24 18:06:48 +05:30

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

auth_nous.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

auth_oauth_grants.py

fix: preserve macOS bootstrap evidence and accept BOM-prefixed auth state

2026-09-21 13:26:17 -04:00

auth_oauth_pkce_plugin.py

fix(auth): PKCE token errors reuse the canonical grant-dead code set

2026-09-20 18:21:34 -07:00

auth_openrouter.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_plugin_providers.py

fix(auth): user provider plugin owns its aliases and display name in the auth registry

2026-09-20 18:29:22 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_xai.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_zai_kimi.py

fix(picker): curated fallback for cold OAuth rows; Z.AI failed-probe negative cache; trim salvage

2026-09-18 11:01:52 -07:00

auth.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

azure_detect.py

fix(cli): bound Azure detect response reads

2026-09-19 09:23:22 -07:00

backend_retirement.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

backup_restore.py

fix: round-5 CI backlog after the 779-commit main merge

2026-09-21 02:47:48 -04:00

backup_sqlite.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

backup.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

bang_shell.py

fix(cli): fail closed without bang shell sanitizer

2026-09-20 18:20:44 -07:00

banner.py

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

blueprint_cmd.py

…

boot_bootstrap.py

refactor(pm): one install_root() in pm.paths replaces six HERMES_INSTALL_ROOT ladders

2026-09-18 20:08:16 -04:00

browser_connect.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

browser_runtime.py

fix(bot-desktop): choose PM headed Chromium despite headless override

2026-09-24 01:40:31 -04:00

build_info.py

fix(update): freeze shipped updater imports across full history

2026-09-11 20:28:26 -04:00

bundled_app.py

…

bundles.py

…

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

claw.py

fix: doctor, cron status, claw and gateway status report the real host topology

2026-09-21 05:06:45 -07:00

cli_agent_setup_mixin.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

cli_auto_maintenance.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

cli_billing_mixin.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_chat_error_copy.py

fix: WAF 403s stop reading as key rejections; anthropic_messages routes send custom_providers extra_headers

2026-09-19 09:57:21 -07:00

cli_chat_turn_mixin.py

fix(cli): limit the turn-level streamed guard to interrupted results (#65666)

2026-09-24 22:32:57 +05:30

cli_commands_mixin.py

Merge origin/main into ethie/pm-clean

2026-09-23 21:55:59 -04:00

cli_config_load.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

cli_footer_split.py

fix: keep cli_footer_split importable under the prompt_toolkit test stubs

2026-09-20 13:35:09 -07:00

cli_info_mixin.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

cli_init_mixin.py

fix(cli): limit the turn-level streamed guard to interrupted results (#65666)

2026-09-24 22:32:57 +05:30

cli_loops_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_modal_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_model_switch_mixin.py

refactor(codex): one credential/route authority for aux + image paths

2026-09-25 21:27:06 +05:30

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_dock.py

feat(process_registry): stamp exited_at and expose it on process.list

2026-09-20 13:55:03 -07:00

cli_process_notifications.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

cli_render.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:13:35 -04:00

cli_session_dock.py

feat(cli): live dock shows the standing /goal and queued prompts

2026-09-23 10:05:40 -07:00

cli_session_mixin.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

cli_shutdown.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

cli_single_query.py

fix(tui-gateway): the hard-exit kill owns every foreground spawn and never blocks

2026-09-23 17:09:54 -07:00

cli_status_bar_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_stream_mixin.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

cli_subagent_monitor.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_terminal_input.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

cli_terminal_mixin.py

fix(cli): never aim the resize erase past chrome tmux clipped (#95375)

2026-09-24 00:17:13 -07:00

cli_tui_mixin.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_tui_runtime_mixin.py

fix(cli): a resize mid-stream repaints each transcript line once

2026-09-24 00:17:13 -07:00

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

fix(pm): voice enables audio-io through PM; public plugin-state readers; PM tests isolate the machine home

2026-09-19 00:48:11 -04:00

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

codex_runtime_plugin_migration.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:25:36 -07:00

commands.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

completion.py

…

config_backups.py

fix(config): a fresh process recovers the last good config.yaml instead of running on defaults

2026-09-12 16:17:04 -07:00

config_defaults.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 03:48:31 -04:00

config_effective.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

config_env_routing.py

fix(config): drop the "Hermes does not read this" note on config set

2026-09-15 21:47:48 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:08:20 -04:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config_read_errors.py

fix(config): a save refused over bad YAML says to fix the file, not "try again"

2026-09-23 15:05:44 -07:00

config.py

fix: reject incomplete source installer arguments before install work

2026-09-24 09:20:50 -04:00

console_engine.py

fix(console): accept the --force override the held-store refusal advertises

2026-09-20 20:13:33 -07:00

container_boot.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

context_switch_guard.py

fix(cli): model-switch warning quotes the capped compression trigger

2026-09-19 16:28:57 +05:30

copilot_auth.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

credential_lifecycle.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

cron.py

gateway: converge on multiplex-only — real migrate, no opt-out, no rollback, host lock refuses

2026-09-21 10:11:19 -07:00

curator.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

curses_ui.py

…

dashboard_procs.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

dashboard_register.py

…

data_cleanup_holders.py

fix(pm): preserve runtime and user state across failure paths

2026-09-09 15:17:08 -04:00

data_cleanup.py

refactor(pm): pm owns the dependency-environment layout and interpreter paths

2026-09-18 20:02:36 -04:00

debug.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

default_soul.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

desktop_console.py

fix(desktop): preserve source freshness and console diagnostics

2026-09-16 23:13:20 -04:00

desktop_update_verify.py

fix(cli): accept BOM-prefixed catalog and runtime metadata

2026-09-13 18:21:59 -04:00

diagnostics_upload.py

…

dingtalk_auth.py

refactor(cli): delegate Python setup and sync to PM

2026-09-11 18:12:12 -04:00

doctor_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

doctor_connectivity.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

doctor_live.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

doctor_platform.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

doctor_report.py

…

doctor_state.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

doctor_tools.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

doctor.py

refactor(doctor,gateway): share the migrate preflight's duplicate-credential check with doctor and status

2026-09-21 18:53:36 -07:00

dump.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

env_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

fix(cron): a pinned job never falls back to the global fallback chain (#120312)

2026-09-23 10:42:18 -04:00

focus_view.py

…

foreign_sessions_browser.py

fix(sessions): honor CLAUDE_CONFIG_DIR and CODEX_HOME in foreign session discovery

2026-09-12 21:39:10 -07:00

foreign_sessions.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

free_tier_bootstrap.py

fix(setup): reconcile_record() only reconciles the launch profile's record

2026-09-18 12:52:36 -07:00

fs_utils.py

…

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_launchd.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 10:52:20 -04:00

gateway_migrate_guards.py

fix(migrate): auto-fold a unit-less default when every secondary shares one manager

2026-09-21 10:11:19 -07:00

gateway_migrate.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

gateway_multiplex_mode.py

fix(gateway): gateway.multiplex_profiles has one valid value; a retired false is rewritten to true with a one-time boxed notice

2026-09-23 10:58:15 -07:00

gateway_multiplex_s6.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_profile_lifecycle.py

fix(gateway): parking composes with gateway.standalone and the dashboard Stop/Start twin

2026-09-23 08:25:28 -07:00

gateway_setup_wizard.py

fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer

2026-09-23 07:48:32 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows_legacy.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

gateway_windows.py

fix(gateway): don't ask the Windows login question when stdout is captured

2026-09-25 00:33:42 -04:00

gateway.py

fix(install): don't ask the gateway install questions twice

2026-09-24 23:49:18 -04:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

github_api.py

fix(update-check): authenticate api.github.com calls and name the branch-tip failure

2026-09-21 18:56:56 -04:00

gitlock.py

fix(update): refresh release tags before stamping source versions

2026-09-24 23:52:31 -04:00

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

gui_uninstall.py

fix(pm): integrate audited runtime and lifecycle repairs

2026-09-05 22:36:48 -04:00

heartbeat.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

home_data_layout.py

fix(pm): preserve runtime and user state across failure paths

2026-09-09 15:17:08 -04:00

hooks.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216)

2026-09-24 22:25:06 +05:30

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

inventory.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 07:39:33 -04:00

journey.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_db_dispatch.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix(gateway): close sender-routing gaps found in review

2026-09-18 22:36:24 -07:00

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

kanban_decompose.py

fix(kanban): decomposed cards fall back to the root task's assignee, never the dispatcher's own profile

2026-09-18 09:48:41 -07:00

kanban_diagnostics.py

fix(kanban): dispatcher blocks a card on the first terminal provider error

2026-09-18 20:34:16 -07:00

kanban_ops.py

kanban gc: validate retention flags before the workspace sweep

2026-09-22 13:41:11 +05:30

kanban_output.py

fix(kanban): expose task runtime limit in JSON

2026-09-20 18:43:59 -07:00

kanban_parser.py

refactor(kanban): narrow _nonnegative_int except to ValueError

2026-09-22 13:41:11 +05:30

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

fix(kanban): board identity follows the bound profile override, not the launch env

2026-09-23 08:09:47 -07:00

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

kanban.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

lifecycle.py

fix(gateway): await async pre_gateway_dispatch callbacks on the event loop

2026-09-21 23:47:51 -07:00

linux_desktop_entry.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

logs.py

…

loops.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

macos_signing.py

fix(pm): preserve complete environments and bound install work

2026-09-13 12:52:35 -04:00

macos_tcc_anchor.py

refactor(pm): pm owns the dependency-environment layout and interpreter paths

2026-09-18 20:02:36 -04:00

main_agent_cmds.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

main_dashboard.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

main_dep_hints.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

main_desktop.py

fix(desktop): spare the updating Desktop's helper processes on POSIX

2026-09-24 16:17:35 -04:00

main_install_repair.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

main_platform_setup.py

fix: retain WhatsApp runtime binary guards under optimized Python

2026-09-24 01:55:51 -04:00

main_provider_setup.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

main_tui_launch.py

fix(windows): route every bare-bash spawn through _find_bash and surface silent interpreter failures

2026-09-20 15:50:26 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix(update): repair an install whose venv runs another checkout

2026-09-25 01:21:28 -04:00

managed_scope.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

managed_uv.py

fix(install): reinstall a managed uv that no longer runs

2026-09-19 02:44:02 -07:00

mcp_app_detection.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_catalog.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 18:01:46 -04:00

mcp_config.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp_startup): take the deferred slot under the lock so two racing first clients fire once

2026-09-20 18:16:47 +05:30

mem_trim.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

memory_oauth.py

fix(memory): resolve OAuth flow in requested profile scope

2026-09-23 07:49:35 -07:00

memory_provider_migration.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 10:52:20 -04:00

memory_setup.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

middleware.py

fix(plugins): route execution middleware through lazy discovery (#105827)

2026-09-21 23:47:51 -07:00

migrate.py

…

moa_cmd.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

test: trim the context-cache guard tests to invariants; docs: name the surfaces that actually confirm

2026-09-13 20:54:50 -07:00

model_setup_flows_azure.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

model_setup_flows_bedrock.py

fix(cli): route dependency hints through pm

2026-09-11 18:13:53 -04:00

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows.py

refactor(codex): one credential/route authority for aux + image paths

2026-09-25 21:27:06 +05:30

model_switch_providers.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 07:39:33 -04:00

model_switch.py

fix(model): prefer the current provider's alias on implicit switches too

2026-09-23 17:08:21 -07:00

models_catalog_static.py

fix(providers): a provider registered after hermes_cli.models imports still reaches the picker catalog; unbind the terminal scope a test leaked

2026-09-23 19:33:40 -07:00

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_reasoning_caps.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_validate.py

fix(model): validate Nebius relay models against base URL

2026-09-24 09:40:41 -04:00

models.py

fix(providers): make a configured relay terminal for catalog egress; refuse a foreign Anthropic endpoint

2026-09-25 12:56:32 -04:00

nous_account.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

nous_auth_keepalive.py

fix(auth): scope Nous keepalive on multiplexed gateways

2026-09-23 06:46:02 -07:00

nous_billing.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

nous_subscription.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 16:17:47 -04:00

npm_engine.py

refactor(pm): remove legacy dependency and launch managers

2026-09-12 14:57:38 -04:00

old_updater_deps.py

refactor(pm): consolidate runtime ownership and updater completion

2026-09-12 16:30:35 -04:00

old_updater_main.py

fix(update): freeze shipped updater imports across full history

2026-09-11 20:28:26 -04:00

onepassword_secrets_cli.py

…

oneshot.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

pairing.py

…

partial_compress.py

…

personality.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

feat: catalog marks onboarding plugins; catalog rows carry the app's presence

2026-09-23 09:26:07 +05:30

plugin_catalog.py

fix: restore upstream behavior lost in PM conflict resolutions

2026-09-24 23:59:55 -04:00

plugin_compat.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

plugin_dev.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugin_events.py

fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop

2026-09-24 02:03:03 -07:00

plugin_packs.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugin_validate_desktop.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 05:10:12 -04:00

plugin_validate.py

Merge origin/main into ethie/pm-clean

2026-09-23 21:55:59 -04:00

plugins_activation_live.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_activation.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

plugins_admission.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_cadence.py

fix(pm): close runtime publication and updater audit gaps

2026-09-06 11:45:41 -04:00

plugins_cmd_capabilities.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_catalog.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_cmd_git.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_install.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_listing.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_remove.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_toggle.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_update.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_discovery.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_dispatch.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

plugins_ledger.py

feat(desktop): the Connectors page replaces the MCP tab (#119074)

2026-09-22 17:16:00 +05:30

plugins_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 13:03:25 -04:00

plugins_manifest.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

plugins_provenance.py

fix(plugins): provenance probes origin with the resolved git

2026-09-21 18:55:13 -04:00

plugins_settings.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_state.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_transaction.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_updates.py

fix(plugins): reject plaintext feed redirect hops

2026-09-24 05:18:38 -04:00

plugins.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 11:58:45 -04:00

portal_cli.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

post_update.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

process_identity.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

profile_channels.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

profile_cmd.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:14:42 -04:00

profile_identity.py

refactor(checkpoints): slim the profile-rename rekey and name it as a checkpoint_manager sibling

2026-09-16 14:34:22 -07:00

profile_memory_config.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profiles.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

projects_cmd.py

…

projects_db.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

providers.py

fix(providers): restore the trimmed api_mode gates lost in the rebase onto #116853

2026-09-20 10:11:40 -07:00

proxy_cli.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

psutil_android.py

fix(update): restore the retired old-updater shims the main merge overwrote

2026-09-19 03:52:12 -04:00

pt_input_extras.py

fix(cli): Super+<printable> under modifyOtherKeys types the character

2026-09-18 09:52:03 -07:00

pty_bridge.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:36:31 -04:00

pty_session.py

fix(dashboard): a /chat tab's attach token is per tab, and one token maps to one PTY

2026-09-20 12:51:30 -07:00

quiet_single_query.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

release_channels.py

feat(release): channel records name the attempt archive

2026-09-23 12:58:33 -04:00

resource_limits.py

…

route_identity.py

fix(config): provider switch via config set drops the previous provider's route (#113719)

2026-09-18 12:49:40 -07:00

runtime_paths.py

refactor(pm): pm owns the dependency-environment layout and interpreter paths

2026-09-18 20:02:36 -04:00

runtime_provider_backends.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

fix(xai): honor model.base_url when the pool row is still the registry host

2026-09-24 09:40:09 -04:00

runtime_state.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

secret_prompt.py

…

secrets_cli.py

refactor(pm): consolidate runtime ownership and updater completion

2026-09-12 16:30:35 -04:00

security_advisories.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

security_audit_startup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

security_audit.py

…

send_cmd.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

service_manager.py

fix(docker): stop sourcing the relocatable venv's activate from sh

2026-09-24 12:30:00 -04:00

session_export_html.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export_md.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-11 09:36:04 -04:00

session_export.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

session_filters.py

docs(sessions): recency wording matches the freshest-of rule

2026-09-17 21:17:15 +05:30

session_listing.py

…

session_lost_and_found.py

fix: key the tools[] pin by code version; never re-add config-excluded tools

2026-09-23 15:43:51 -07:00

session_recap.py

…

session_recovery.py

fix(recovery): repair out-of-window timestamp cells in the recovered database

2026-09-25 10:46:54 -05:00

session_schema_history.py

chore(sessions): record the transport_profile column in the schema history

2026-09-19 02:28:50 -07:00

sessions_cmd_browse.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

sessions_cmd_journal_mode.py

fix(sessions): let set-journal-mode --force waive only a failed holder scan

2026-09-24 18:08:24 +05:30

sessions_cmd_repair_profiles.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

sessions_cmd.py

refactor(sessions): one transcript-format rule and one missing-display-index probe

2026-09-23 22:22:32 +05:30

sessions_repair_profiles.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

refactor(platforms): every plugin setup wizard uses the shared declines_reconfigure gate

2026-09-13 05:32:38 -07:00

setup_profile.py

Setup profile is minted by the backend and found by role, not by name (#119456)

2026-09-23 01:25:04 +05:30

setup_quick.py

fix(config): stop seeding global display values that override every messaging platform's defaults

2026-09-24 17:59:37 +05:30

setup_summary.py

fix(pm): ship full chromium without headless shell

2026-09-10 16:08:03 -04:00

setup_terminal.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

setup_tts.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-18 17:26:10 -04:00

setup_whatsapp_cloud.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

shared_profile_warning.py

feat(desktop): warn when another install uses the same profile

2026-09-11 19:47:00 -04:00

shared_session_attach.py

fix(cli): name the real state when cooperative attach is unavailable

2026-09-18 10:45:07 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

skin_cmd.py

fix(pm): isolate bootstrap dependencies and unify YAML on ruamel

2026-09-11 12:23:51 -04:00

skin_engine.py

merge: reconcile origin/main with PM runtime ownership

2026-09-12 16:55:32 -04:00

slack_cli.py

…

slash_exec.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

source_build.py

fix(icons): commit generated icons; installs and regular builds never render

2026-09-24 19:17:34 -04:00

source_check.py

refactor(cli): split source_check.check_for_updates into cache, channel, fetch helpers

2026-09-24 11:50:30 -04:00

source_completion.py

fix: preserve source update completion and runtime ownership boundaries

2026-09-24 02:03:58 -04:00

source_releases.py

fix(update): follow the main branch when its channel record is unpublished

2026-09-24 14:23:48 -04:00

source_stamp.py

fix(update): every published checkout identity moves the bootstrap receipt

2026-09-23 22:05:57 -04:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

stale_modules.py

fix(update): bridge stale utils so pre-handoff upgrades finish restart

2026-09-18 09:38:34 -07:00

status_auth.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

status_bar_git.py

fix: read text files with encoding=utf-8-sig in code merged from main

2026-09-19 01:38:09 -04:00

status_report.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

status.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

stderr_timestamp.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

stdio.py

…

steward.py

fix(pm): resolve the install stamp in pm.paths so sealed stages can read it

2026-09-24 11:12:27 -04:00

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

terminal_breadcrumbs.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

timeouts.py

…

tips.py

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

tools_config_mcp.py

The last four MCP enabled-flag readers use the shared reader (ACP, hermes tools picker, desktop connector card, health sweep) (#119601)

2026-09-22 22:24:31 +00:00

tools_config_post_setup.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

tools_config_providers.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

tools_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 16:17:47 -04:00

toolset_scope.py

…

toolset_validation.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

uninstall.py

merge: reconcile origin/main with PM runtime ownership

2026-09-12 16:55:32 -04:00

update_abort_recovery.py

FLEET: one host-scoped update-restart obligation, one restart per host

2026-09-21 07:14:37 -07:00

update_channel.py

feat(release): derive canaries from stable build identity

2026-09-21 22:02:46 -04:00

update_cmd_check.py

refactor(update): split hermes update --check into update_cmd_check

2026-09-24 14:08:22 -04:00

update_cmd_common.py

…

update_cmd_config.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

update_cmd_drain_report.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_fleet_checkout.py

fix(update): checkout_contains reads the build stamp on a no-.git image, so the pending-restart catch-up stops contradicting itself

2026-09-23 17:39:15 -07:00

update_cmd_fleet_gatewayless.py

fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)

2026-09-23 18:48:33 -05:00

update_cmd_fleet.py

refactor(update): split _marker_only_restart_obsolete below CC 30

2026-09-24 14:08:22 -04:00

update_cmd_git.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 05:03:23 -04:00

update_cmd_maint.py

fix(update): refresh release tags before stamping source versions

2026-09-24 23:52:31 -04:00

update_cmd_stale_survivors.py

fix(cron): stale-code yield reads as an outage in cron status; hermes update restarts proven-stale gateways

2026-09-21 01:57:31 -07:00

update_cmd_stash.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

update_cmd_validation.py

fix(update): the import-health probe never resolves external secret sources

2026-09-19 04:39:53 -04:00

update_cmd_windows.py

refactor(update): drop the dead Windows venv-holder gate

2026-09-24 11:50:30 -04:00

update_cmd_zip.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

update_cmd.py

refactor(update): split hermes update --check into update_cmd_check

2026-09-24 14:08:22 -04:00

update_completion.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

update_contract.py

refactor(update): table-drive the steward refusal rungs

2026-09-24 14:08:22 -04:00

update_finish.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

update_fleet_scope.py

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

update_handoff.py

fix(update): start the post-swap child in the checkout

2026-09-23 06:51:47 -07:00

update_host_obligation.py

merge origin/main (7 commits) into ethie/pm-clean

2026-09-21 10:51:15 -04:00

update_inventory.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 10:07:50 -04:00

update_lock.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:39 -04:00

update_owning_install.py

fix(update): repair an install whose venv runs another checkout

2026-09-25 01:21:28 -04:00

update_receipt.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

update_restart_recovery.py

merge origin/main (7 commits) into ethie/pm-clean

2026-09-21 10:51:15 -04:00

update_serve_obligations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 10:07:50 -04:00

update_serve_resume.py

refactor(pm): pm owns the dependency-environment layout and interpreter paths

2026-09-18 20:02:36 -04:00

update_stage.py

fix(update_stage): look the shim marker up in the process home, not ~/.hermes

2026-09-21 19:32:37 -04:00

urllib_security.py

fix(urllib): log the default-certificates fallback once, after every bundle failed

2026-09-22 15:55:23 +05:30

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

venv_sync.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

fix(desktop): show how far past the release an install is, not its commit

2026-09-24 14:23:48 -04:00

voice.py

fix(pm): integrate audited runtime and lifecycle repairs

2026-09-05 22:36:48 -04:00

web_deps.py

…

web_git.py

…

web_models.py

fix(desktop): custom endpoints pin an API mode and keep /v1/models alias metadata

2026-09-19 00:17:19 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

web_server_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

web_server_cron.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

web_server_dashboard.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

web_server_idle_exit.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_idle_proof.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_lifecycle.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

web_server_mcp.py

fix(profile-scope): bind home and secret tokens inside the try that resets them

2026-09-23 06:46:02 -07:00

web_server_memory.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

web_server_messaging.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

web_server_sessions.py

fix(state): per-profile store housekeeping under one multiplexed process

2026-09-21 02:56:31 -07:00

web_server.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 11:58:45 -04:00

webhook.py

Merge origin/main into ethie/pm-clean

2026-09-23 21:55:59 -04:00

win_pty_bridge.py

fix(cli): route dependency hints through pm

2026-09-11 18:13:53 -04:00

windows_ssh_runtime.py

fix(windows): create protected token descriptors on ARM64

2026-09-21 14:13:07 -04:00

worktree_cmd.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 13:45:07 -04:00

write_approval_commands.py

refactor(memory): derive a payload's destructive ops in one place

2026-09-24 15:38:22 +05:30

xai_retirement.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00