Ben Barclay 8d66e78844 feat(dashboard): expose profile names + gateway_mode on gated /api/status (#60585) ...

The profile+gateway topology added in #60537 sits entirely behind the
loopback/--insecure auth gate. But a hosted agent (Hermes Cloud) binds
non-loopback with OAuth, so should_require_auth is True, and NAS reads
/api/status over the network (fly-provider.ts getInstanceRuntimeStatus)
with no session token. On that gated path the whole topology block was
omitted, so the Portal could never render the profile list.

Split the topology readout by sensitivity:
- profile NAMES (profiles) + gateway_mode are low-sensitivity product
  surface and now ride the always-public status body, surviving the auth
  gate so NAS/the Portal can enumerate profiles.
- the per-gateway detail (gateways[], carrying host ports) is deployment
  recon and stays gated alongside hermes_home / config_path / env_path /
  gateway_pid / gateway_health_url.

The collector now runs unconditionally (still in the executor, off the
event loop). No new fields; only the gate placement changes.

2026-07-08 00:20:13 +00:00

..

dashboard_auth

fix(dashboard): accept HA ingress prefix paths

2026-07-06 03:18:02 -07:00

proxy

security(gateway): set explicit client_max_size on 3 uncapped aiohttp servers (#59180)

2026-07-05 14:48:28 -07:00

subcommands

feat: add uninstall dry-run mode

2026-07-07 05:12:24 -07:00

__init__.py

chore: release v0.18.0 (2026.7.1) (#56611)

2026-07-01 13:07:40 -07:00

_parser.py

feat(oneshot): add --usage-file JSON usage report to hermes -z (#59615)

2026-07-06 11:10:51 -07:00

_subprocess_compat.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

active_sessions.py

fix(tui): preserve live session identity across compression (#49041)

2026-06-24 00:54:18 +05:30

auth_commands.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

auth.py

fix: limit desktop model pickers to explicit providers

2026-07-07 15:12:54 -07:00

azure_detect.py

…

backup.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

banner.py

feat(banner): size skills display to terminal width instead of fixed 8/47

2026-07-06 11:17:41 -07:00

blueprint_cmd.py

…

browser_connect.py

fix(browser): surface launch diagnostics when debug browser never opens the CDP port

2026-07-03 01:05:22 -07:00

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

…

claw.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

cli_agent_setup_mixin.py

fix(cli): publish agent ref to cli module so memory on_session_end fires on exit

2026-06-19 16:59:43 -07:00

cli_commands_mixin.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

cli_output.py

…

clipboard.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

codex_models.py

…

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

refactor(codex-runtime): tidy reapply-migration control flow

2026-07-01 23:51:54 +05:30

colors.py

…

commands.py

feat(cli): autocomplete + ghost text for stacked slash-skill invocations (#58763)

2026-07-05 04:34:14 -07:00

completion.py

…

config.py

feat(discord): optionally mention approval owners on exec prompts

2026-07-07 13:46:51 -07:00

console_engine.py

perf(console): cache CLI-surface summaries + bound console worker pool

2026-07-03 20:18:00 +05:30

container_boot.py

fix(container-boot): also autostart a gateway stranded in 'degraded'

2026-06-29 21:12:36 -07:00

context_switch_guard.py

fix(cli): log instead of swallow preflight-warning errors; consistent TUI warning field

2026-06-21 16:31:56 +05:30

copilot_auth.py

fix(copilot): prefer endpoints.api for base URL, guard empty chat base URL

2026-06-30 03:27:41 -07:00

cron.py

fix(gateway,cron): guard cron model-tool path + add auto-resume loop breaker (#30719)

2026-07-01 02:48:36 -07:00

curator.py

feat(curator): add hermes curator usage — all-skills usage view

2026-07-06 12:26:21 -07:00

curses_ui.py

…

dashboard_register.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

debug.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

default_soul.py

fix(soul): installers seed the real default persona, upgrade legacy empty templates (#52246)

2026-06-24 18:56:26 -07:00

dep_ensure.py

fix(security): centralize credential-safe subprocess env (#29157)

2026-06-27 20:45:31 -07:00

diagnostics_upload.py

feat(debug): drop dead confirm step from --nous upload (stateless NAS)

2026-06-30 17:29:23 -07:00

dingtalk_auth.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

doctor.py

fix(config): close unreadable-overwrite bug class at a single chokepoint

2026-07-05 23:00:34 +05:30

dump.py

fix(dump): flag API keys visible only to the shell, not the managed backend

2026-07-02 19:52:18 -05:00

env_loader.py

fix(secrets): make 1Password bootstrap token reliable outside systemd

2026-07-06 04:58:07 -07:00

fallback_cmd.py

…

fallback_config.py

…

gateway_enroll.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

gateway_windows.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

gateway.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

goals.py

feat(goals): completion contracts for /goal — evidence-based judging (#50501)

2026-06-22 12:20:09 -07:00

gui_uninstall.py

…

hooks.py

feat(agent): add pre_verify hook and verify-on-stop coding guidance

2026-06-30 00:59:29 -05:00

inventory.py

fix: limit desktop model pickers to explicit providers

2026-07-07 15:12:54 -07:00

journey.py

fix(cli): render /journey color instead of leaking raw ANSI

2026-07-01 16:25:48 -05:00

kanban_db.py

fix(kanban): retry write_txn on transient SQLITE_BUSY

2026-06-28 02:44:04 -07:00

kanban_decompose.py

…

kanban_diagnostics.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

kanban_specify.py

…

kanban_swarm.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)

2026-06-21 17:06:48 -07:00

kanban.py

feat(kanban): typed block reasons + unblock-loop breaker (#52848)

2026-06-25 21:46:58 -07:00

logs.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

main.py

feat(sessions): trace export + HF upload via 'sessions export --format trace' (#60507)

2026-07-07 15:12:49 -07:00

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

mcp_catalog.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

mcp_config.py

fix(mcp): sanitize server names for auth env keys

2026-07-06 03:18:07 -07:00

mcp_picker.py

…

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(mcp): late-refresh must see desktop/dashboard discovery thread owner (#55514)

2026-06-30 02:08:37 -07:00

memory_oauth.py

feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)

2026-06-22 19:16:47 -05:00

memory_providers.py

…

memory_setup.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

middleware.py

…

migrate.py

…

moa_cmd.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

moa_config.py

feat(moa): per-preset fanout cadence — user_turn runs advisors once per user turn (#57591)

2026-07-03 01:02:44 -07:00

model_catalog.py

…

model_cost_guard.py

…

model_normalize.py

…

model_setup_flows.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

model_switch.py

fix(tui): keep bare custom model listing stable

2026-07-06 13:08:50 -07:00

models.py

fix(copilot): set x-initiator per turn so user prompts bill as premium requests (salvage #4097) (#58544)

2026-07-05 00:44:15 -07:00

nous_account.py

…

nous_auth_keepalive.py

fix Nous auth refresh for idle agents

2026-06-21 22:43:48 -07:00

nous_billing.py

…

nous_subscription.py

fix(browser): validate agent-browser is runnable, not just present (#51740)

2026-06-24 00:14:49 -07:00

onepassword_secrets_cli.py

fix(secrets): remove unused masked_secret_prompt import from onepassword CLI

2026-07-06 04:58:07 -07:00

oneshot.py

feat(oneshot): add --usage-file JSON usage report to hermes -z (#59615)

2026-07-06 11:10:51 -07:00

pairing.py

…

partial_compress.py

feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)

2026-07-02 05:10:31 -07:00

pets.py

feat(pets): generation RPCs, non-blocking gallery + gateway plumbing

2026-06-24 13:48:38 -05:00

platforms.py

…

plugins_cmd.py

feat(plugins): surface entry-point plugins in hermes plugins list

2026-07-06 11:20:47 -07:00

plugins.py

feat(plugins): pass approve rule keys to approval gate

2026-07-07 15:14:30 -07:00

portal_cli.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

profile_describer.py

…

profile_distribution.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

profiles.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

projects_cmd.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

projects_db.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

prompt_size.py

fix(prompt-size): respect enabled/disabled toolsets per platform

2026-07-05 19:13:20 -07:00

provider_catalog.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

providers.py

fix: propagate key_env from custom_providers into ProviderDef

2026-06-29 02:25:48 -07:00

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

feat(pty): periodic reaper wired into dashboard lifespan

2026-07-07 15:15:37 -07:00

relaunch.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

runtime_provider.py

fix(opencode-go): heal stripped /v1 base_url so non-minimax models stop 404ing (#57585)

2026-07-03 00:46:45 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)

2026-06-21 19:05:27 -07:00

security_audit.py

…

send_cmd.py

fix(managed-scope): honor managed scope in config→env bridges too

2026-06-19 07:46:33 -07:00

service_manager.py

fix(s6): dot-prefix gateway staging dir so svscan ignores it mid-build (#54834)

2026-06-29 21:33:00 +10:00

session_export_html.py

feat(cli): filter internal session_meta messages from HTML export

2026-07-07 13:29:58 -07:00

session_export_md.py

feat(sessions): full prune-filter set + --redact on sessions export

2026-07-07 12:36:41 -07:00

session_export.py

feat: add prompt-only session export

2026-07-07 13:29:58 -07:00

session_filters.py

feat(sessions): full filter surface for prune + bulk archive subcommand (#59327)

2026-07-05 22:04:52 -07:00

session_listing.py

feat(gateway): add /sessions search <query> (#57685)

2026-07-03 13:44:00 -07:00

session_recap.py

…

setup_whatsapp_cloud.py

…

setup.py

feat(gateway): default session auto-reset to off (mode: none) (#60194)

2026-07-07 05:11:10 -07:00

skills_config.py

…

skills_hub.py

fix(skills-hub): surface per-tap providers (NVIDIA/OpenAI/...) in runtime search (#53191)

2026-06-26 11:04:41 -07:00

skin_engine.py

…

slack_cli.py

fix(slack): subscribe to message.mpim + mpim scopes so group DMs work

2026-06-29 01:02:53 -07:00

sqlite_util.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

status.py

refactor: consolidate gateway session metadata into state.db (#58899)

2026-07-05 14:01:03 -07:00

stdio.py

…

suggestions_cmd.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

telegram_managed_bot.py

…

timeouts.py

…

tips.py

fix: use os.pathsep, add tests, update tips for multi-root support

2026-06-27 04:01:12 +05:30

tools_config.py

fix(tools): enable platform-native toolsets when their composite is explicitly configured (#35527)

2026-07-07 16:27:28 -07:00

toolset_validation.py

fix(config): surface invalid platform_toolsets instead of silently dropping tools (#38798)

2026-06-26 14:07:43 +05:30

uninstall.py

feat: add uninstall dry-run mode

2026-07-07 05:12:24 -07:00

voice.py

…

web_git.py

refactor(web_git): unify porcelain-v2 parsing into one walker

2026-06-28 14:29:59 -05:00

web_server.py

feat(dashboard): expose profile names + gateway_mode on gated /api/status (#60585)

2026-07-08 00:20:13 +00:00

webhook.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

win_pty_bridge.py

…

write_approval_commands.py

…

xai_retirement.py

fix(config): guard xai migration writer + drop gratuitous annotation

2026-07-05 23:00:34 +05:30