hermes-agent

Files

Alex Honecker 8ec668b3cc fix(security): treat whitespace-only HMAC secrets as unset

A blank or whitespace-only secret now fails closed at webhook startup,
on the request path, and when a dynamic route is admitted.

(cherry picked from commit 05e918d52c41e905d88e6c0a0f55e7612f4d899d)

2026-10-07 13:19:35 +05:30

_fixtures

…

acp_adapter

…

agent

fix(providers): review fold for the LM Studio / TokenHub profiles

2026-10-07 11:27:35 +05:30

ci: package __init__ files on the update path start the update E2Es

2026-10-06 20:30:06 -04:00

compat

…

computer_use

fix(vision): MCP embeds keep both caps and their coordinate map; capture route follows config live (review)

2026-10-06 22:54:13 -07:00

conformance

…

cron

fix(cron): key store state by resolved path, never swallow a flapped outage notice

2026-10-07 10:20:18 +05:30

dashboard

…

desktop

…

docker

…

e2e

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

evals

…

fakes

test(e2e): the fixture's shared-metrics answer carries offer_version, so interactive suites stop on no prompt

2026-10-06 03:29:28 -07:00

fixtures

fix(providers): review fold for the LM Studio / TokenHub profiles

2026-10-07 11:27:35 +05:30

gateway

fix(security): treat whitespace-only HMAC secrets as unset

2026-10-07 13:19:35 +05:30

hermes_cli

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

hermes_platform

Plugins: apps are found wherever they are installed on Windows, macOS and Linux (#134050 )

2026-10-07 00:58:22 +05:30

hermes_state

fix(sessions): validate imported values before persistence

2026-10-06 12:40:04 -04:00

install

fix(smoke): check bundled Hermes home before sandbox setup

2026-10-06 11:04:35 -04:00

installation

…

integration

…

manual

…

monitoring

fix(cron): chunk the store probe and forget stores this gateway stops ticking

2026-10-07 10:20:18 +05:30

perf_guards

…

plugins

fix(photon): a threaded reply to our bubble stays "own" after a restart

2026-10-07 13:18:15 +05:30

fix(pm): the long-paths live test runs the real bundled-copy install (review)

2026-10-07 06:40:39 +05:30

providers

…

scripts

test(release): both bundle-env validators reject the retired HERMES_SKIP_INTRO (review)

2026-10-07 01:00:00 +05:30

secret_sources

…

security

…

skills

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

tools

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

tui_gateway

fix(desktop): persist project cwd for new sessions

2026-10-06 18:02:57 -05:00

verify

…

website

…

__init__.py

…

AGENTS.md

…

conftest.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

git_safety.py

…

home_io_guard.py

…

installation_launcher_fixture.py

…

live_process_fixtures.py

…

posix_lock_probe.py

…

run_interrupt_test.py

…

termux_fixtures.py

…

test_agent_close_lifecycle.py

…

test_atomic_json_writers_unified.py

…

test_atomic_replace_symlinks.py

…

test_atomic_write_fsync_dir_target.py

…

test_atomic_write_text_metadata.py

…

test_audit_old_updater_imports.py

…

test_base_url_hostname.py

…

test_basetemp_isolation.py

…

test_batch_runner_checkpoint.py

…

test_batch_runner_discard_resume.py

…

test_batch_runner_durability.py

…

test_credential_file_permissions.py

…

test_dispatch_session_id.py

…

test_display_hermes_home.py

…

test_engines_satisfiable.py

…

test_fast_safe_load.py

…

test_get_tool_definitions_cache_isolation.py

…

test_git_safety_boundary.py

…

test_hermes_bootstrap.py

…

test_hermes_constants.py

…

test_hermes_home_key_cache.py

…

test_hermes_home_profile_warning.py

…

test_hermes_logging.py

…

test_hermes_yaml.py

…

test_ipv4_preference.py

…

test_live_system_guard_self_test.py

…

test_live_system_guard.py

…

test_load_yaml_file_readonly.py

…

test_log_isolation.py

…

test_managed_runtime_resolution.py

…

test_mcp_serve.py

…

test_mini_swe_runner.py

…

test_model_forces_max_completion_tokens.py

…

test_model_tools_async_bridge.py

…

test_no_shadowed_test_definitions.py

…

test_old_updater_compat_surface.py

…

test_os_marker_gating.py

…

test_packaging_build_guard.py

…

test_packaging_metadata.py

…

test_packaging_py_modules.py

…

test_platforms_marker.py

…

test_project_metadata.py

chore(memory): remove the bundled mem0 provider (moved to the plugin catalog)

2026-10-06 05:50:08 -07:00

test_sanitize_tool_error.py

…

test_scratch_dir.py

fix(scratch): escape control characters in prune-log paths and names

2026-10-06 13:22:50 -04:00

test_scratch_scan_failures.py

…

test_search_cjk_prefix_wildcard.py

…

test_tests_tree_layout.py

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

test_trajectory_compressor_async.py

…

test_trajectory_compressor.py

…

test_utils_atomic_roundtrip_yaml_save.py

…

test_utils_atomic_writers_deleted_profile.py

…

test_utils_no_proxy_sanitize.py

…

test_utils_rmtree_readonly.py

…

test_utils_truthy_values.py

…

test_wal_reset_repair_hint.py

…

test_windows_subprocess_no_window_flags.py

…

test_yaml_indent_consistency.py

…