kshitijk4poor 9dfa8dcee3 fix(update): Electron presence via _electron_dir (workspace-local hoist), one DESKTOP_NPM_SCOPE ...

Gate review: the probe looked at the root node_modules/electron, but electronDist points at
apps/desktop/node_modules/electron where npm hoists it, so the skip could never fire there.
_desktop_deps_changed is now pure digest-vs-stamp; the caller owns the Electron check with the
helper that already knows both locations. Test pins the workspace-local layout.

2026-09-20 16:41:21 +05:30

..

dashboard_auth

…

local_runtime

…

observability

fix(relay): shared-metrics task close skips a scope buried under a concurrent turn

2026-09-19 23:42:20 -07:00

proxy

…

subcommands

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

web_routers

fix(dashboard): session search/stats/detail run SQLite off the event loop (#60747)

2026-09-20 15:15:36 +05:30

__init__.py

…

_early_recovery.py

…

_install_repair.py

…

_parser.py

…

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

…

_subprocess_compat.py

fix(tools): bounded probes contain Windows descendants in a Job Object so the Git Bash grandchild dies

2026-09-19 02:36:56 -07:00

active_sessions.py

fix(tui,active_sessions): gate-review follow-ups for the idle bot-delivery throttle

2026-09-20 15:16:35 +05:30

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

…

AGENTS.md

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

anon_auth.py

…

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_commands.py

feat(auth): OAuth-shaped provider plugins register, log in and refresh through their profile

2026-09-19 20:45:06 -07:00

auth_constants.py

…

auth_device_flow.py

…

auth_error_copy.py

…

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

…

auth_oauth_grants.py

…

auth_oauth_pkce_plugin.py

feat: declarative OAuth Authorization-Code+PKCE login for provider plugins

2026-09-19 21:15:16 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix: admitted plugin providers are selectable and status-accurate on every surface

2026-09-19 21:11:30 -07:00

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

fix: admitted plugin providers are selectable and status-accurate on every surface

2026-09-19 21:11:30 -07:00

azure_detect.py

fix(cli): bound Azure detect response reads

2026-09-19 09:23:22 -07:00

backend_retirement.py

…

backup.py

…

bang_shell.py

…

banner.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

blueprint_cmd.py

…

browser_connect.py

…

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

…

claw.py

…

cli_agent_setup_mixin.py

fix(cli): release the old agent's clients before dropping it for a rebuild

2026-09-19 09:43:20 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

fix: WAF 403s stop reading as key rejections; anthropic_messages routes send custom_providers extra_headers

2026-09-19 09:57:21 -07:00

cli_chat_turn_mixin.py

chore: merge origin/main (resolve website/docs/user-guide/features/fallback-providers.md)

2026-09-19 10:47:48 -07:00

cli_commands_mixin.py

fix: effort pickers and /reasoning status say what ultra really sends

2026-09-19 10:20:55 -07:00

cli_info_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_loops_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_modal_mixin.py

…

cli_model_switch_mixin.py

chore: merge origin/main (resolve website/docs/integrations/providers.md)

2026-09-19 10:47:48 -07:00

cli_output.py

…

cli_process_notifications.py

…

cli_session_mixin.py

…

cli_status_bar_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_stream_mixin.py

…

cli_subagent_monitor.py

…

cli_terminal_mixin.py

…

cli_tui_mixin.py

…

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard.py

…

codex_models.py

fix(codex): remove dead gpt-5.3-codex from curated fallback list

2026-09-19 10:22:33 -07:00

codex_runtime_plugin_migration.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

…

completion.py

…

config_backups.py

…

config_defaults.py

fix(config): register tool search deferral settings

2026-09-19 23:51:25 -07:00

config_effective.py

…

config_env_routing.py

…

config_home.py

…

config_migrations.py

fix(config): tolerate malformed nested values in config migrations

2026-09-19 23:41:10 -07:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config.py

config: extend env-writer denylist to the full subprocess-execution class

2026-09-20 00:08:36 -07:00

console_engine.py

…

container_boot.py

…

context_switch_guard.py

fix(cli): model-switch warning quotes the capped compression trigger

2026-09-19 16:28:57 +05:30

copilot_auth.py

…

credential_lifecycle.py

…

cron.py

…

curator.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

curses_ui.py

…

dashboard_procs.py

…

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_console.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

feat(doctor): resolve every routed auxiliary.<task> block and report the dead ones

2026-09-19 12:30:32 -07:00

doctor_connectivity.py

fix: hermes doctor probes Azure Foundry Anthropic endpoints like the runtime

2026-09-19 09:29:18 -07:00

doctor_live.py

…

doctor_platform.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_report.py

…

doctor_state.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_tools.py

…

doctor.py

…

dump.py

…

env_loader.py

fix(env_loader): restore only values a source is authoritative for

2026-09-19 16:20:29 +05:30

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_migrate_guards.py

…

gateway_migrate.py

…

gateway_multiplex_mode.py

…

gateway_multiplex_served.py

…

gateway_supervised_restart.py

…

gateway_windows.py

fix(update): classify Windows gateway supervisors by Hermes ownership, not ancestry

2026-09-19 02:02:14 -07:00

gateway.py

refactor(gateway): one unit-file Environment= reader for HERMES_HOME and LD_LIBRARY_PATH

2026-09-20 16:28:59 +05:30

git_credentials.py

…

gitlock.py

…

goal_command.py

…

goals.py

…

gui_uninstall.py

…

heartbeat.py

…

hooks.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

…

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

…

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

…

kanban_db.py

…

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

…

kanban_output.py

…

kanban_parser.py

…

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

…

lifecycle.py

…

linux_desktop_entry.py

…

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

…

main_dashboard.py

…

main_dep_hints.py

…

main_desktop.py

fix(update): Electron presence via _electron_dir (workspace-local hoist), one DESKTOP_NPM_SCOPE

2026-09-20 16:41:21 +05:30

main_install_repair.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

main_platform_setup.py

…

main_provider_setup.py

…

main_tui_launch.py

…

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix: admitted plugin providers are selectable and status-accurate on every surface

2026-09-19 21:11:30 -07:00

managed_scope.py

…

managed_uv.py

fix(install): reinstall a managed uv that no longer runs

2026-09-19 02:44:02 -07:00

mcp_app_detection.py

…

mcp_catalog.py

…

mcp_config.py

fix(mcp): OAuth login keeps discovered server metadata; token errors carry a redacted body excerpt

2026-09-19 23:46:42 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

…

memory_setup.py

…

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows.py

fix(setup): profile-owned catalog keeps the curated list when the live fetch fails

2026-09-20 12:17:52 +05:30

model_switch_providers.py

refactor(models): cache-only OpenRouter read parses the disk copy once; test nits

2026-09-20 15:17:14 +05:30

model_switch.py

fix(model_switch): authenticated-slug lookup is cache-only

2026-09-20 15:17:14 +05:30

models_catalog_static.py

fix(models): admit every plugin provider to the picker by slug; catalogs fall back to the profile

2026-09-19 20:54:06 -07:00

models_detect.py

…

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(cli): model-switch validation trusts a profile-owned catalog

2026-09-19 20:56:31 -07:00

models.py

refactor(models): cache-only OpenRouter read parses the disk copy once; test nits

2026-09-20 15:17:14 +05:30

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(oneshot): consult the fallback chain at provider resolution time

2026-09-19 09:42:18 -07:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

…

plugin_compat.py

…

plugin_dev.py

…

plugin_packs.py

…

plugin_python_deps.py

…

plugin_validate_desktop.py

fix(plugin-guard): two intake false positives — regex literal <script, allowlist "printenv"

2026-09-19 14:30:36 -07:00

plugin_validate.py

feat(plugin-catalog): refuse desktop plugins that step outside the SDK surface

2026-09-19 03:19:18 -07:00

plugins_cmd_catalog.py

…

plugins_cmd.py

fix(update): make intent-to-add entries stashable so hermes update can run

2026-09-19 23:58:35 -07:00

plugins_discovery.py

…

plugins_dispatch.py

…

plugins_ledger.py

…

plugins_loader.py

…

plugins_manifest.py

…

plugins_state.py

…

plugins.py

…

portal_cli.py

…

process_identity.py

…

profile_channels.py

…

profile_cmd.py

…

profile_credential_audit.py

…

profile_describer.py

…

profile_distribution.py

…

profile_identity.py

…

profiles.py

…

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

feat(providers): accept chatgpt / chatgpt-codex as names for the openai-codex provider

2026-09-19 09:38:01 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

…

quiet_single_query.py

…

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

chore: merge origin/main (resolve tests/agent/test_output_cap_parsing.py, tests/hermes_cli/test_runtime_provider_resolution.py)

2026-09-19 10:52:01 -07:00

runtime_provider_custom.py

fix(aux): provider "openai" resolves the same on the runtime and aux-client paths

2026-09-19 12:30:31 -07:00

runtime_provider.py

fix(runtime): model.openai_runtime: codex_app_server applies to provider "openai" again

2026-09-19 20:44:24 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

service_manager.py

fix(service): drop the s6 chmod-after-chown reorder

2026-09-19 01:31:49 -07:00

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

…

session_schema_history.py

chore(sessions): record the transport_profile column in the schema history

2026-09-19 02:28:50 -07:00

sessions_cmd_browse.py

…

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

…

sessions_repair_profiles.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

…

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

fix: render dict-form reasoning_effort in the TUI config.get and setup wizard readers

2026-09-19 09:25:29 -07:00

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

…

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

docs(gateway): name the SIGUSR2 consumer in the stderr wrapper's forwarding comment

2026-09-20 15:49:42 +05:30

stdio.py

…

stream_json.py

…

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

…

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

fix(setup): Codex image post-setup names the auth command instead of starting a device login without a terminal

2026-09-19 10:05:26 -07:00

tools_config_providers.py

fix(setup): Image Generation 'OpenAI (Codex auth)' row starts Codex sign-in and names the real auth command

2026-09-19 10:05:26 -07:00

tools_config.py

fix(cli): warn once when platform_toolsets.<platform> is not a list

2026-09-19 23:46:08 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

…

update_abort_recovery.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_deps.py

fix(update): Electron presence via _electron_dir (workspace-local hoist), one DESKTOP_NPM_SCOPE

2026-09-20 16:41:21 +05:30

update_cmd_drain_report.py

…

update_cmd_fleet.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_git.py

…

update_cmd_maint.py

…

update_cmd_stash.py

fix(update): record every autostash disposition in the update receipt

2026-09-20 00:13:01 -07:00

update_cmd_windows.py

…

update_cmd_zip.py

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

update_cmd.py

fix(update): "Already up to date" re-syncs a venv installed from an older release

2026-09-19 02:02:14 -07:00

update_contract.py

…

update_handoff.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

update_inventory.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_lock.py

…

update_receipt.py

…

update_restart_recovery.py

…

update_serve_obligations.py

fix(update): discharge an unreadable-create_time manual-serve row once its pid is provably dead

2026-09-19 23:59:11 -07:00

urllib_security.py

…

vault.py

…

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

fix(web): the dashboard's submitted custom endpoint survives the model assignment

2026-09-19 22:05:32 +05:30

web_server_cron.py

…

web_server_dashboard.py

…

web_server_files.py

…

web_server_gateway.py

…

web_server_idle_exit.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_idle_proof.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_lifecycle.py

…

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

…

web_server_profiles.py

…

web_server_sessions.py

…

web_server.py

…

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

…

write_approval_commands.py

…

xai_retirement.py

…