kshitijk4poor e929702021 fix(lsp): trust the workspace the session was opened in, not only the process cwd ...

The trust anchor was os.getcwd(), which is the user's project only for a
plain `hermes` launched inside a repo. `hermes -w` sets TERMINAL_CWD to its
new worktree without a chdir, the Desktop/TUI backend runs from the install
tree or $HOME with the project bound as the session cwd, the gateway runs
from HERMES_HOME, and cron binds a per-job workdir. All of them lost
pyright's project venv, rust-analyzer/gopls/jdtls/... and the .ts/.rs lint
fallbacks inside the user's own repository.

operator_workspace_roots() now adds the worktree of resolve_agent_cwd()
(session cwd, then TERMINAL_CWD) to the launch dir's; only surfaces set
those, the agent's `cd` moves the terminal env's cwd, not them. $HOME is
never an anchor: a dotfiles repo there would trust every directory below it.
The service remembers every anchor it has seen, because the loop thread
that spawns servers has no session context of its own.

- The lint gate checks only the linter's cwd: npx and rustup resolve the
  toolchain from there (subprocess cwd=env.cwd), not from the file's dir.
  The try/except that wrapped code which cannot fail is gone.
- Trust is computed once per spawn and handed to ServerContext.
- Multi-root servers (pyright) share one process across trusted roots
  only; an untrusted root gets its own, so whichever root spawned first no
  longer decides the interpreter for the others.

2026-09-29 03:28:46 +05:30

..

dashboard_auth

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

local_runtime

fix(local-runtime): expand scalar sliding_window_pattern, test the real parser

2026-09-28 12:36:05 -05:00

observability

fix(desktop): onboarding metrics follow the intro removal

2026-09-28 12:43:03 -07:00

proxy

…

subcommands

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_routers

fix(gateway): keep the default's flat platforms in the multiplexer re-key (#123088, #123869, salvage #123106)

2026-09-28 13:30:57 -07:00

__init__.py

fix(cli): keep hermes_cli import off os.environ; run the import-purity test on Windows

2026-09-24 14:47:06 -04:00

_early_recovery.py

fix(pm): report unwritable install state once

2026-09-28 06:42:00 -07:00

_install_repair.py

…

_launchers.py

fix(windows): preserve active source launchers during backend startup

2026-09-24 06:03:29 -04:00

_old_updater.py

…

_parser.py

feat(tui): add native terminal mode defaults

2026-09-25 17:57:38 -05:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

…

_subprocess_compat.py

fix(gateway): keep the update restart watcher stdlib-only so it survives the bare store Python

2026-09-27 03:37:09 -07:00

_update_takeover.py

fix(pm): collect generations after maintenance syncs

2026-09-27 02:55:39 -07:00

active_sessions.py

…

agent_import_sync.py

…

agent_import.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

agent_plugins.py

…

AGENTS.md

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

anon_auth.py

…

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

auth_commands.py

…

auth_constants.py

…

auth_device_flow.py

fix(auth): bound device-poll edge backoff and gate 403 on x-vercel-mitigated

2026-09-24 18:06:48 +05:30

auth_error_copy.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

auth_minimax.py

…

auth_model_picker.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

auth_nous.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

auth_oauth_grants.py

fix(auth): read flat refresh_token for forkable pool rows; reuse pool ownership in load_pool

2026-09-27 18:37:01 +05:30

auth_oauth_pkce_plugin.py

…

auth_openrouter.py

…

auth_plugin_providers.py

…

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

azure_detect.py

…

backend_retirement.py

…

backup_restore.py

fix(backup): tell the user when an imported database fails its integrity check

2026-09-26 21:38:28 +05:30

backup_sqlite.py

…

backup.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

bang_shell.py

…

banner.py

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

blueprint_cmd.py

…

boot_bootstrap.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

browser_connect.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_runtime.py

fix(bot-desktop): choose PM headed Chromium despite headless override

2026-09-24 01:40:31 -04:00

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

chat_catalog.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

checkpoints.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

claw.py

fix(backup): cap logged zip-backup errors and clarify salvage messages

2026-09-27 18:19:17 +05:30

cli_agent_setup_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_auto_maintenance.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

cli_billing_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_error_copy.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_turn_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_commands_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_config_load.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

cli_footer_split.py

…

cli_info_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_init_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_loops_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_modal_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_model_switch_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_output.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_dock.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_notifications.py

fix(process): heartbeats wake the agent only on new output, and never as a user bubble

2026-09-26 22:19:53 -05:00

cli_render.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_session_dock.py

…

cli_session_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_shutdown.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

cli_single_query.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_status_bar_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_stream_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_subagent_monitor.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_input.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_tui_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_tui_runtime_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_unknown_command.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_voice_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

clipboard.py

…

codex_models.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

…

commands_platforms.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

commands.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

fix(lsp): trust the workspace the session was opened in, not only the process cwd

2026-09-29 03:28:46 +05:30

config_effective.py

…

config_env_routing.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

config_home.py

…

config_language.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

config_migrations.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

config_providers.py

…

config_read_errors.py

…

config.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

console_engine.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

container_boot.py

fix(docker): boot a gateway.standalone profile's own s6 slot at container start (#120524, salvage #120525)

2026-09-28 04:04:23 -07:00

context_switch_guard.py

…

copilot_auth.py

…

credential_lifecycle.py

fix(config): a refused .env write fails instead of reporting success and half-applying

2026-09-28 02:00:41 -07:00

cron.py

fix(cli): served-profile guard only counts a host gateway that is ours and not our own (#121352, #120871, salvage #121574 #122169)

2026-09-28 13:30:57 -07:00

curator.py

refactor(curator): read the usage map once per purge

2026-09-27 02:33:57 +05:30

curses_ui.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

dashboard_procs.py

fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)

2026-09-28 04:44:29 -07:00

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug.py

…

default_soul.py

…

desktop_console.py

…

desktop_update_verify.py

fix(desktop): stop a stale hand-off root failing a healthy update

2026-09-26 21:43:07 -05:00

diagnostics_upload.py

…

dingtalk_auth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_config.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_connectivity.py

…

doctor_live.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_platform.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

doctor_report.py

…

doctor_state.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

doctor_tools.py

fix: Hermes never falls back to the user's node/npm/npx/uv

2026-09-27 22:04:26 -07:00

doctor.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

dump.py

fix(dump): report a supervised gateway without a scannable PID as running (#125390)

2026-09-28 13:30:57 -07:00

env_loader.py

fix(env): skip a launch-home dotenv load inside a foreign routed turn (#125530)

2026-09-28 12:23:25 -07:00

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

foreign_sessions_browser.py

…

foreign_sessions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

free_tier_bootstrap.py

…

fs_utils.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

fix(gateway): name the display-wake stall in the launchd wrapper docstring; gate the macOS wrapper test with the platforms marker

2026-09-27 01:04:39 +05:30

gateway_migrate_guards.py

…

gateway_migrate.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

gateway_multiplex_mode.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

gateway_multiplex_s6.py

…

gateway_multiplex_served.py

…

gateway_profile_lifecycle.py

fix(gateway): explain why parked restart unparks and status reads runtime first (#124553, salvage #124669)

2026-09-28 13:30:57 -07:00

gateway_setup_wizard.py

…

gateway_supervised_restart.py

…

gateway_windows_legacy.py

…

gateway_windows.py

fix(update): scope Windows gateway lifecycle to current install

2026-09-27 02:57:28 -07:00

gateway.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

git_credentials.py

…

github_api.py

…

gitlock.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

goal_command.py

…

goals.py

…

gui_uninstall.py

fix(desktop): hermes update puts back an installed Hermes.app that went missing

2026-09-29 02:37:33 +05:30

heartbeat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

home_data_layout.py

…

hooks.py

feat(telemetry): per-model tool-call quality, friction and context-peak counters

2026-09-28 12:43:03 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

fix: Make MoA strictly opt-in in model pickers (#63353)

2026-09-28 10:56:47 -05:00

journey.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

fix(kanban): count only real gc removals and resolve kanban home once

2026-09-27 18:29:18 +05:30

kanban_db.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_decompose.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_diagnostics.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_ops.py

fix(kanban): count only real gc removals and resolve kanban home once

2026-09-27 18:29:18 +05:30

kanban_output.py

…

kanban_parser.py

…

kanban_pr_acceptance_store.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_pr_acceptance.py

fix(review): PR acceptance never falls through to the launch user's gh login

2026-09-28 03:37:09 -07:00

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(desktop): Linux launcher targets a CLI that can serve the app and skips the rebuild (#126650)

2026-09-28 12:24:52 -05:00

logs.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

loops.py

…

macos_signing.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

macos_tcc_anchor.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

main_agent_cmds.py

…

main_dashboard.py

fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)

2026-09-28 04:44:29 -07:00

main_dep_hints.py

fix(cli): name Windows Smart App Control when it blocks the dashboard runtime

2026-09-25 16:28:14 -05:00

main_desktop.py

refactor(desktop): write the installed-app record only when it changes

2026-09-29 02:37:33 +05:30

main_install_repair.py

fix: skip the extras lookup when nothing configured is missing; pin probe encoding

2026-09-28 06:42:00 -07:00

main_platform_setup.py

fix: retain WhatsApp runtime binary guards under optimized Python

2026-09-24 01:55:51 -04:00

main_provider_setup.py

…

main_tui_launch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

main_web_build.py

…

main.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

managed_scope.py

…

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

mcp_config.py

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

mcp_picker.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_security.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_startup.py

fix(mcp): connect servers added to config on the next agent build

2026-09-26 17:04:25 -05:00

mem_trim.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

memory_oauth.py

…

memory_provider_migration.py

…

memory_setup.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

middleware.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

model_catalog.py

fix(models): catalog SWR refresh writes the requesting profile's cache (#103778, salvage #103779)

2026-09-28 05:37:55 -07:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_common.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_custom.py

…

model_setup_flows.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_switch_providers.py

fix(model): split comma-separated fallback chains into picker entries

2026-09-27 18:31:33 -05:00

model_switch.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

models_catalog_static.py

feat(models): add anthropic/claude-sonnet-5.5 to OpenRouter and Nous Portal catalogs

2026-09-29 01:54:35 +05:30

models_detect.py

…

models_local.py

…

models_pricing.py

…

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(model): validate Nebius relay models against base URL

2026-09-24 09:40:41 -04:00

models.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

nous_subscription.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

npm_engine.py

…

old_updater_deps.py

…

old_updater_main.py

…

onepassword_secrets_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

oneshot.py

…

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

…

plugin_catalog.py

fix(plugins): make catalog known_issues informational, not a fail-closed gate

2026-09-27 17:06:55 -07:00

plugin_compat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugin_dev.py

…

plugin_events.py

fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop

2026-09-24 02:03:03 -07:00

plugin_packs.py

feat(telemetry): record plugin installs as extension-install events

2026-09-28 12:43:03 -07:00

plugin_validate_desktop.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 05:10:12 -04:00

plugin_validate_locales.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugin_validate.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_activation_live.py

…

plugins_activation.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_admission.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_cadence.py

…

plugins_cmd_capabilities.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_catalog.py

fix(tools): resolve the live plugin catalog once per plugins.list

2026-09-27 06:26:52 -05:00

plugins_cmd_git.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_install.py

feat(telemetry): record plugin installs as extension-install events

2026-09-28 12:43:03 -07:00

plugins_cmd_listing.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugins_cmd_remove.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_toggle.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_update.py

fix(plugins): carry user files across staged updates

2026-09-27 01:42:52 +05:30

plugins_cmd.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugins_discovery.py

fix(gateway): read a parked profile's config without importing its plugins (#123386, salvage #123397)

2026-09-28 04:04:23 -07:00

plugins_dispatch.py

…

plugins_ledger.py

…

plugins_loader.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_manifest.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugins_provenance.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins_settings.py

…

plugins_state.py

…

plugins_transaction.py

refactor(plugins): one helper attributes scan blocks to preserved user files

2026-09-27 01:42:52 +05:30

plugins_updates.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

portal_cli.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

post_update.py

fix(update): drop the cached live plugin catalog on boot after a code change

2026-09-27 06:26:52 -05:00

process_identity.py

fix(update): a stopped-but-unreaped dashboard is no longer a pre-update survivor

2026-09-27 21:29:39 -07:00

profile_channels.py

refactor(child-env): one secret-suffix rule, one env-table walk, one bundled manifest read

2026-09-29 02:06:58 +05:30

profile_cmd.py

…

profile_describer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

profile_distribution.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

profile_identity.py

…

profile_memory_config.py

…

profiles_service_cleanup.py

fix(review): a named profile's restart --all never runs the root gateway in-process

2026-09-28 04:04:23 -07:00

profiles.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): keep llamacpp as the model table's managed-runtime id

2026-09-25 14:25:16 -05:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

fix(review): supersede displaced PTY viewer, route project tile by active source

2026-09-28 04:59:38 -07:00

quiet_single_query.py

…

relaunch.py

fix(metrics): startup latency counts once per client launch, never after an in-place exec

2026-09-28 12:43:03 -07:00

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

release_channels.py

fix(update): only an explicit hermes update retries channel reads

2026-09-27 03:41:42 -07:00

resource_limits.py

…

route_identity.py

…

runtime_paths.py

…

runtime_provider_backends.py

refactor(auth): share the key-prefix check; reach it via rp in the openrouter resolver

2026-09-27 00:56:11 +05:30

runtime_provider_custom.py

…

runtime_provider.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

runtime_state.py

fix(pm): close the lease create→flock race on the writer side, no grace window

2026-09-28 04:44:29 -07:00

sandbox_image_switch.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

security_audit_startup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

security_audit.py

…

send_cmd.py

…

service_manager.py

fix(docker): stop sourcing the relocatable venv's activate from sh

2026-09-24 12:30:00 -04:00

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

fix(sessions): add sessions.show_subagents to list delegate runs

2026-09-26 20:40:40 -05:00

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

fix(recovery): repair out-of-window timestamp cells in the recovered database

2026-09-25 10:46:54 -05:00

session_reset_retirement.py

fix(gateway): warn when config still declares a retired idle/daily session_reset

2026-09-28 15:54:01 +05:30

session_schema_history.py

fix(state): add immutable created_source provenance column (#56439)

2026-09-26 21:12:19 -04:00

sessions_cmd_browse.py

fix(sessions): tell the user when a delete is refused for a live turn

2026-09-27 20:49:04 +05:30

sessions_cmd_journal_mode.py

fix(sessions): let set-journal-mode --force waive only a failed holder scan

2026-09-24 18:08:24 +05:30

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(sessions): share the write-guard filter and trim repeated walks

2026-09-27 20:49:04 +05:30

sessions_repair_profiles.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

refactor(onboarding): remove the intro cinematic, the guided-onboarding tests, and their comments (#126139)

2026-09-28 08:33:43 +00:00

setup_quick.py

feat(telemetry): record setup completion from the CLI wizard

2026-09-28 12:43:03 -07:00

setup_summary.py

…

setup_terminal.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

docs(telemetry): consent copy names the v5 usage categories

2026-09-28 12:43:03 -07:00

shared_profile_warning.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

feat(telemetry): record skill installs as extension-install events

2026-09-28 12:43:03 -07:00

skin_cmd.py

…

skin_engine.py

fix(desktop): pass skin customCSS through to desktop theme context

2026-09-25 20:00:57 -05:00

slack_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

slash_exec.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

source_build.py

fix(update): install the SDKs of configured gateway platforms instead of only warning (#124228)

2026-09-28 06:42:00 -07:00

source_check.py

fix(source-check): strip inherited pathspec modes from read-only git probes

2026-09-27 01:36:34 +05:30

source_completion.py

fix(update): expose PM's git only for git checkouts, and record the installer's copy

2026-09-27 02:54:03 -07:00

source_releases.py

fix(update): follow the main branch when its channel record is unpublished

2026-09-24 14:23:48 -04:00

source_stamp.py

fix(update): every published checkout identity moves the bootstrap receipt

2026-09-23 22:05:57 -04:00

sqlite_runtime.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

sqlite_safe_read.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

sqlite_util.py

…

stale_modules.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

fix(status): render the session profile home

2026-09-27 07:43:23 -05:00

status.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

stderr_timestamp.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

stdio.py

…

steward.py

fix(pm): resolve the install stamp in pm.paths so sealed stages can read it

2026-09-24 11:12:27 -04:00

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

tool_availability_notices.py

…

tools_config_cua.py

fix(updates/win): click-session poll, Intel-Mac installer docs, cua-driver opt-in autostart

2026-09-26 17:09:16 -05:00

tools_config_mcp.py

…

tools_config_post_setup.py

fix(browser): ship the Browser Use CLI engine in every install, Desktop included

2026-09-27 23:53:40 -07:00

tools_config_providers.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

tools_config.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

fix(uninstall): mark darwin-only os.getuid as windows-footgun ok

2026-09-26 21:00:12 -04:00

update_abort_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_channel.py

…

update_cmd_check.py

fix(update): self-heal git pack-objects crash on partial-clone fetches

2026-09-28 03:08:56 -07:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): migrate default config.yaml on named-profile update

2026-09-28 04:44:29 -07:00

update_cmd_drain_report.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

update_cmd_fleet_checkout.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

update_cmd_fleet_gatewayless.py

…

update_cmd_fleet.py

fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds

2026-09-28 04:44:29 -07:00

update_cmd_git.py

fix(update): one commit-graph fetch for the pre-fetch heal and the post-update pass

2026-09-28 03:08:56 -07:00

update_cmd_maint.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

update_cmd_stale_survivors.py

…

update_cmd_stash.py

fix(update): an autostash the update could not restore ends the update partial, never 'Update complete!'

2026-09-28 05:33:25 -07:00

update_cmd_validation.py

…

update_cmd_windows.py

fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds

2026-09-28 04:44:29 -07:00

update_cmd_zip.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

update_cmd.py

fix(telemetry): update initiator reads the lock marker raw

2026-09-28 12:43:03 -07:00

update_completion.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

update_contract.py

refactor(update): table-drive the steward refusal rungs

2026-09-24 14:08:22 -04:00

update_finish.py

…

update_fleet_scope.py

fix(update): judge Windows gateway ownership by home, warn on unreadable ones

2026-09-27 02:57:28 -07:00

update_handoff.py

…

update_host_obligation.py

fix(update): trim SHA-less obligation salvage to the checkout fallback (#125952, salvage #125964)

2026-09-28 04:44:29 -07:00

update_inventory.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

update_lock.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

update_owning_install.py

chore: read .project-root BOM-tolerantly; drop a trailing blank line

2026-09-28 05:33:25 -07:00

update_receipt.py

fix(telemetry): update runs counted once, parked only while opted in, recovered files kept until saved

2026-09-28 12:43:03 -07:00

update_restart_recovery.py

fix(update): restart hermes-dashboard* systemd units during fleet update

2026-09-27 14:09:15 -05:00

update_serve_obligations.py

…

update_serve_resume.py

…

update_stage.py

…

urllib_security.py

…

vault.py

…

venv_sync.py

fix(cli): compare interpreter paths lexically, not through symlinks

2026-09-27 03:38:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

voice.py

…

web_deps.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_git.py

fix(worktree): refresh any valid branch name used as a base

2026-09-28 16:23:22 +05:30

web_models.py

fix(telemetry): Desktop provider-connection forms count Gemini/xAI/DeepInfra keys again (M13)

2026-09-28 12:43:03 -07:00

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

web_server_cron.py

…

web_server_dashboard.py

fix(dashboard): plugin API routes run in the request profile's scope (#120310, salvage #120332)

2026-09-28 05:37:55 -07:00

web_server_files.py

…

web_server_gateway.py

fix(dashboard): name -p default for unnamed gateway verbs on the default home

2026-09-28 12:18:58 -07:00

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

fix(telemetry): graceful os._exit stops stamp the process exit marker clean

2026-09-28 12:43:03 -07:00

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

fix(dashboard): xAI and MiniMax sign-ins save into the profile they started in, never after a cancel

2026-09-28 12:18:58 -07:00

web_server_profiles.py

fix(dashboard): cron delivery targets, blueprints, recommended default, voice config, official skills and debug share answer an unknown ?profile= with 404

2026-09-28 12:18:58 -07:00

web_server_sessions.py

…

web_server_skew_exit.py

fix(serve): retire an SSH-isolated backend once the install moves to new code

2026-09-25 12:09:37 -05:00

web_server.py

feat(metrics): startup latency and install version-lag/hardware fields

2026-09-28 12:43:03 -07:00

webhook.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

win_pty_bridge.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

fix(worktree): hermes -w branches from the remote tip on narrow clones

2026-09-28 16:23:22 +05:30

write_approval_commands.py

refactor(memory): derive a payload's destructive ops in one place

2026-09-24 15:38:22 +05:30

xai_retirement.py

…