John Paul Soliva 3dd848f263 fix(sessions): repair-profiles moves a session whose title the target store already holds ...

`hermes sessions repair-profiles --apply` copied a stranded session into
its owning profile's store verbatim, title included. Titles are unique
per store only (idx_sessions_title_unique), so when the target profile
already held an unrelated session with the same title, which is common
for generic auto-titles, the insert raised IntegrityError.

_MoveBatch.run imported every row before deleting any and had no
per-row handling. The exception escaped before the delete phase and
before the result was memoised. Rows copied earlier in the batch were
left in both stores. Every later finding re-ran the whole batch and hit
the same error. Every row in the batch was reported failed on every
run, the command exited 1 forever, and a non-colliding row ended up
duplicated across two profiles.

- import_moved_session gives a colliding title the moved row's id tail,
  the same convention import_foreign_history uses, capped at
  MAX_TITLE_LENGTH. The resident row keeps its name, so resolving it by
  title is unchanged.
- _MoveBatch.run handles each row separately. A failed import or delete
  is that row's failure alone, reported through apply(). The rest of
  the batch still moves, and the batch runs once. The failed row's
  lineage waits with it: its descendants are not imported without it,
  and the parent it still points at in the source is not deleted. The
  next run moves the lineage whole.

Measured on main: with two stranded rows and one title collision, both
rows failed on every run and one was left in both stores. With the fix,
one run moves both, and a second run finds nothing.

2026-09-23 07:01:11 -07:00

..

dashboard_auth

…

local_runtime

refactor(platform): one native_arch for local-runtime assets, desktop PE gate, managed Node

2026-09-22 01:13:23 -07:00

observability

fix(relay): shared-metrics task close skips a scope buried under a concurrent turn

2026-09-19 23:42:20 -07:00

proxy

…

subcommands

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

web_routers

fix(scope): failed profile-scoped secret reads must not borrow os.environ

2026-09-23 06:46:02 -07:00

__init__.py

chore(release): v0.21.4 (v2026.9.21)

2026-09-21 11:10:32 -07:00

_early_recovery.py

…

_install_repair.py

…

_parser.py

…

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cron): spawn bot-chat delivery from a live cwd

2026-09-20 11:30:36 -07:00

_subprocess_compat.py

…

active_sessions.py

fix(sessions): skip POSIX zombie probe on Windows; prune registry snapshot after lock release

2026-09-20 13:21:24 -07:00

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

Portable plugins declare the application each MCP server needs; install refuses on an unsupported host (NS-942) (#119049)

2026-09-22 17:54:41 +05:30

AGENTS.md

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

anon_auth.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

refactor(codex): keep the read-only quota guard, drop the preserve_corrupt plumbing

2026-09-22 20:44:30 +05:30

auth_commands.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_constants.py

…

auth_device_flow.py

…

auth_error_copy.py

…

auth_minimax.py

…

auth_model_picker.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

auth_nous.py

chore(auth): drop the unused tool:invoke OAuth scope from the step-up request (#118036)

2026-09-21 15:55:09 +05:30

auth_oauth_grants.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_oauth_pkce_plugin.py

fix(auth): PKCE token errors reuse the canonical grant-dead code set

2026-09-20 18:21:34 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): user provider plugin owns its aliases and display name in the auth registry

2026-09-20 18:29:22 -07:00

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_zai_kimi.py

…

auth.py

refactor(codex): keep the read-only quota guard, drop the preserve_corrupt plumbing

2026-09-22 20:44:30 +05:30

azure_detect.py

…

backend_retirement.py

…

backup.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

bang_shell.py

fix(cli): fail closed without bang shell sanitizer

2026-09-20 18:20:44 -07:00

banner.py

test: keep cross-cutting architecture lints; drop stale OS-fake baseline entries

2026-09-23 03:15:26 -07:00

blueprint_cmd.py

…

browser_connect.py

…

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

…

claw.py

fix: doctor, cron status, claw and gateway status report the real host topology

2026-09-21 05:06:45 -07:00

cli_agent_setup_mixin.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

cli_auto_maintenance.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

fix: WAF 403s stop reading as key rejections; anthropic_messages routes send custom_providers extra_headers

2026-09-19 09:57:21 -07:00

cli_chat_turn_mixin.py

chore: merge origin/main (resolve website/docs/user-guide/features/fallback-providers.md)

2026-09-19 10:47:48 -07:00

cli_commands_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_config_load.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_footer_split.py

fix: keep cli_footer_split importable under the prompt_toolkit test stubs

2026-09-20 13:35:09 -07:00

cli_info_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_init_mixin.py

fix(cli): don't flag plugin toolsets as unknown at startup

2026-09-21 23:26:19 -07:00

cli_loops_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_modal_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_model_switch_mixin.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

cli_output.py

…

cli_process_dock.py

feat(process_registry): stamp exited_at and expose it on process.list

2026-09-20 13:55:03 -07:00

cli_process_notifications.py

…

cli_render.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_session_mixin.py

fix(cli): clear-screen fallback spawns no shell and no console window (#116904)

2026-09-20 15:56:33 -07:00

cli_shutdown.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_single_query.py

fix: give plugins the CLI reference in hermes chat -q/-Q too

2026-09-21 23:38:16 -07:00

cli_status_bar_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_stream_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_subagent_monitor.py

feat(cli): background processes show in the live-work dock and monitor

2026-09-20 13:55:03 -07:00

cli_terminal_input.py

refactor(cli): move cli.py module-level helper clusters into topical siblings; cli.py lands under 2,000 lines (#116911)

2026-09-20 20:42:17 -07:00

cli_terminal_mixin.py

…

cli_tui_mixin.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

cli_tui_runtime_mixin.py

refactor(cli): move HermesCLI init phases and TUI run-loop phases into mixin siblings (#116911)

2026-09-20 18:43:11 -07:00

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

fix(models): drop gpt-6-terra, a tier OpenAI never published

2026-09-23 00:44:33 -07:00

codex_runtime_plugin_migration.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

config_effective.py

…

config_env_routing.py

…

config_home.py

…

config_migrations.py

Profile editor MCP toggles take effect at runtime (#89441, salvage #107451) (#119536)

2026-09-22 21:09:44 +00:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config.py

fix(scope): failed profile-scoped secret reads must not borrow os.environ

2026-09-23 06:46:02 -07:00

console_engine.py

fix(console): accept the --force override the held-store refusal advertises

2026-09-20 20:13:33 -07:00

container_boot.py

fix(gateway): prove gateway ownership, not just liveness; stop trapping a mid-migration host

2026-09-21 10:11:19 -07:00

context_switch_guard.py

…

copilot_auth.py

hermes_platform.resolver: locate/inspect/probe tiers, AppResolver, gh lookup migrated (NS-921) (#118065)

2026-09-22 17:08:30 +05:30

credential_lifecycle.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

cron.py

gateway: converge on multiplex-only — real migrate, no opt-out, no rollback, host lock refuses

2026-09-21 10:11:19 -07:00

curator.py

…

curses_ui.py

…

dashboard_procs.py

fix(cli): attribute a scrubbed-env dashboard to its owner's home

2026-09-20 18:25:48 -07:00

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_console.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

feat(doctor): resolve every routed auxiliary.<task> block and report the dead ones

2026-09-19 12:30:32 -07:00

doctor_connectivity.py

fix: doctor validates GitHub tokens against /rate_limit so Actions installation tokens pass (review follow-up)

2026-09-20 12:15:07 -07:00

doctor_live.py

…

doctor_platform.py

fix(host-topology): a createTime-null record is not a live gateway, and the restart we print must run

2026-09-21 05:06:45 -07:00

doctor_report.py

…

doctor_state.py

fix(memory): user-dir memory providers keep Desktop config + OAuth

2026-09-23 01:07:08 -07:00

doctor_tools.py

fix(doctor): stop prescribing audit fixes that updates revert (#116774)

2026-09-20 15:57:25 -07:00

doctor.py

refactor(doctor,gateway): share the migrate preflight's duplicate-credential check with doctor and status

2026-09-21 18:53:36 -07:00

dump.py

…

env_loader.py

perf(gateway): enter each profile scope once per heartbeat-restore scan; signature-cache profile config.yaml parses

2026-09-22 16:15:34 +05:30

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

fix(gateway): scope the Local Network hint and keep the osascript wrapper out of gateway process scans

2026-09-21 17:16:23 +05:30

gateway_migrate_guards.py

fix(migrate): auto-fold a unit-less default when every secondary shares one manager

2026-09-21 10:11:19 -07:00

gateway_migrate.py

gateway: frame gateway.standalone as a TEMPORARY compatibility shim, not a kept topology

2026-09-22 19:55:02 -07:00

gateway_multiplex_mode.py

gateway: frame gateway.standalone as a TEMPORARY compatibility shim, not a kept topology

2026-09-22 19:55:02 -07:00

gateway_multiplex_served.py

…

gateway_service_unit.py

refactor(gateway): retire the --replace drop-in in one step, two invariant tests

2026-09-23 06:27:24 -07:00

gateway_setup_wizard.py

refactor(gateway): move the platform setup wizard out of hermes_cli/gateway.py

2026-09-21 01:24:28 -07:00

gateway_supervised_restart.py

…

gateway_windows_legacy.py

fix: a secondary profile no longer removes the default profile's bare-named gateway launchers (review follow-up)

2026-09-20 12:47:14 -07:00

gateway_windows.py

fix(update): pending fleet restart leaves gateways already on the checkout code alone

2026-09-20 18:52:45 -07:00

gateway.py

gateway: frame gateway.standalone as a TEMPORARY compatibility shim, not a kept topology

2026-09-22 19:55:02 -07:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

gitlock.py

fix(checkpoints): sweep tmp_pack debris stranded by timed-out store gcs

2026-09-20 12:03:06 -07:00

goal_command.py

…

goals.py

…

gui_uninstall.py

…

heartbeat.py

…

hooks.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

test: trim the aggregator-twin tests to two invariants; drop the import guard

2026-09-20 10:06:50 -07:00

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

fix(profile-scope): stamp profile_home only for FOREIGN homes; cache the gate-prefix scan

2026-09-23 06:46:02 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

refactor(kanban): share one _retention_seconds helper across both gc sweeps

2026-09-22 13:41:11 +05:30

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

kanban gc: validate retention flags before the workspace sweep

2026-09-22 13:41:11 +05:30

kanban_output.py

fix(kanban): expose task runtime limit in JSON

2026-09-20 18:43:59 -07:00

kanban_parser.py

refactor(kanban): narrow _nonnegative_int except to ValueError

2026-09-22 13:41:11 +05:30

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

fix(kanban): CLI and kanban_complete tool report an empty-completion refusal

2026-09-20 19:03:47 -07:00

lifecycle.py

fix(gateway): await async pre_gateway_dispatch callbacks on the event loop

2026-09-21 23:47:51 -07:00

linux_desktop_entry.py

…

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

…

main_dashboard.py

fix(gateway): a failed host attach never exits 0, and SIGTERM clears the record

2026-09-21 02:51:58 -07:00

main_dep_hints.py

…

main_desktop.py

refactor(platform): one native_arch for local-runtime assets, desktop PE gate, managed Node

2026-09-22 01:13:23 -07:00

main_install_repair.py

fix(update): drop the --reinstall plumbing; a plain editable install already rewrites the finder

2026-09-23 06:51:47 -07:00

main_platform_setup.py

…

main_provider_setup.py

…

main_tui_launch.py

fix(windows): route every bare-bash spawn through _find_bash and surface silent interpreter failures

2026-09-20 15:50:26 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix(docker): the image's gateway run keeps the root profile, and a leading -p reaches hermes

2026-09-23 06:24:19 -07:00

managed_scope.py

…

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_config.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp_startup): take the deferred slot under the lock so two racing first clients fire once

2026-09-20 18:16:47 +05:30

mem_trim.py

…

memory_oauth.py

fix(memory): user-dir memory providers keep Desktop config + OAuth

2026-09-23 01:07:08 -07:00

memory_provider_migration.py

fix: treat core memory-provider sentinels as built-in, not plugins

2026-09-21 23:38:16 -07:00

memory_setup.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

middleware.py

fix(plugins): route execution middleware through lazy discovery (#105827)

2026-09-21 23:47:51 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

model_switch_providers.py

fix(models): plugin providers without a static catalog row keep their pinned models in the GUI picker

2026-09-20 14:29:39 -07:00

model_switch.py

feat(models): GPT-6 Sol/Terra/Luna replace the 5.6 tiers in Nous/OpenRouter catalogs, with Codex -900k variants

2026-09-22 11:50:39 -07:00

models_catalog_static.py

fix(models): drop gpt-6-terra, a tier OpenAI never published

2026-09-23 00:44:33 -07:00

models_detect.py

…

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(models_validate): one profile-catalog helper decides accept/reject before the generic listing

2026-09-20 16:22:25 -07:00

models.py

fix(models): a curated fallback never pins itself in the provider models cache

2026-09-23 02:19:11 -07:00

nous_account.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

nous_auth_keepalive.py

fix(auth): scope Nous keepalive on multiplexed gateways

2026-09-23 06:46:02 -07:00

nous_billing.py

…

nous_subscription.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

feat: catalog marks onboarding plugins; catalog rows carry the app's presence

2026-09-23 09:26:07 +05:30

plugin_catalog.py

fix: curated catalog fields a published doc does not carry come from the checkout

2026-09-23 09:26:07 +05:30

plugin_compat.py

…

plugin_dev.py

fix(plugins): unload the doctor's temp plugin before removing its home

2026-09-22 00:06:29 -07:00

plugin_packs.py

fix(plugin-packs): refuse and strip secret/consent keys at every depth of a config seed

2026-09-22 00:06:29 -07:00

plugin_python_deps.py

feat(gateway): gateway.standalone opts a named profile out of the host multiplexer

2026-09-22 19:55:02 -07:00

plugin_validate_desktop.py

fix(plugins): admission lint refuses static URL-scheme imports in desktop/plugin.js

2026-09-21 22:39:35 -07:00

plugin_validate.py

Portable plugins declare the application each MCP server needs; install refuses on an unsupported host (NS-942) (#119049)

2026-09-22 17:54:41 +05:30

plugins_activation_live.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_activation.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_cmd_catalog.py

fix: plugins installed a second apart both keep their install record

2026-09-23 11:45:29 +05:30

plugins_cmd.py

fix: plugins installed a second apart both keep their install record

2026-09-23 11:45:29 +05:30

plugins_discovery.py

fix(plugins): canonical activation keys + remove/toggle bookkeeping across CLI, dashboard and RPC

2026-09-22 00:13:50 -07:00

plugins_dispatch.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

plugins_ledger.py

feat(desktop): the Connectors page replaces the MCP tab (#119074)

2026-09-22 17:16:00 +05:30

plugins_loader.py

feat(plugins): late-loaded plugins wire their platform handlers live (#87770)

2026-09-22 09:50:22 -07:00

plugins_manifest.py

Portable plugin MCP tools keep their names instead of a hash (64-char provider cap) (#119263)

2026-09-22 22:05:28 +05:30

plugins_settings.py

feat(desktop): render plugin-declared settings in the Plugins tab (#46600, #87934)

2026-09-22 01:48:18 -07:00

plugins_state.py

feat(desktop): render plugin-declared settings in the Plugins tab (#46600, #87934)

2026-09-22 01:48:18 -07:00

plugins.py

feat: installed plugins' MCP tools and skills are live in every open chat, no Connect-now (#119644)

2026-09-23 05:11:44 +05:30

portal_cli.py

…

process_identity.py

…

profile_channels.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

profile_cmd.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profile_describer.py

…

profile_distribution.py

Setup profile is minted by the backend and found by role, not by name (#119456)

2026-09-23 01:25:04 +05:30

profile_identity.py

…

profile_memory_config.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profiles.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): restore the trimmed api_mode gates lost in the rebase onto #116853

2026-09-20 10:11:40 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

fix(dashboard): a /chat tab's attach token is per tab, and one token maps to one PTY

2026-09-20 12:51:30 -07:00

quiet_single_query.py

fix(bot-relay): a relayed turn is booked from its turn report at the cap, not killed with its handoff

2026-09-20 11:55:07 -07:00

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

chore: merge origin/main (resolve tests/agent/test_output_cap_parsing.py, tests/hermes_cli/test_runtime_provider_resolution.py)

2026-09-19 10:52:01 -07:00

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

fix: a chat switched to Codex no longer sends its model to the previous provider's endpoint

2026-09-23 04:44:31 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

service_manager.py

…

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

fix: state the real failure mode of the model_config sanitiser

2026-09-20 20:13:41 -07:00

session_schema_history.py

…

sessions_cmd_browse.py

…

sessions_cmd_journal_mode.py

fix(sessions): make set-journal-mode portable and fail closed where it cannot prove quiescence

2026-09-20 20:13:25 -07:00

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(sessions): resolve the held-store scan path from the store resolver, not the db object

2026-09-20 20:13:33 -07:00

sessions_repair_profiles.py

fix(sessions): repair-profiles moves a session whose title the target store already holds

2026-09-23 07:01:11 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

Setup profile is minted by the backend and found by role, not by name (#119456)

2026-09-23 01:25:04 +05:30

setup_quick.py

…

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

perf(skills): pool the guarded HTTP client across do_install's resolve + fetch

2026-09-22 15:59:17 +05:30

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

docs(gateway): name the SIGUSR2 consumer in the stderr wrapper's forwarding comment

2026-09-20 15:49:42 +05:30

stdio.py

…

stream_json.py

…

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

tool_availability_notices.py

…

tools_config_cua.py

fix(computer-use): windowless, non-interactive Windows autostart repair

2026-09-20 11:28:15 -07:00

tools_config_mcp.py

The last four MCP enabled-flag readers use the shared reader (ACP, hermes tools picker, desktop connector card, health sweep) (#119601)

2026-09-22 22:24:31 +00:00

tools_config_post_setup.py

fix(setup): Codex image post-setup names the auth command instead of starting a device login without a terminal

2026-09-19 10:05:26 -07:00

tools_config_providers.py

fix(tools): gate the browser picker on an actual backend choice

2026-09-20 20:29:14 +05:30

tools_config.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

toolset_scope.py

…

toolset_validation.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

uninstall.py

…

update_abort_recovery.py

FLEET: one host-scoped update-restart obligation, one restart per host

2026-09-21 07:14:37 -07:00

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_deps.py

fix(update): the import-health probe sees the venv's editable finder, not the checkout cwd

2026-09-23 06:51:47 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet_checkout.py

fix(update): a carried local commit no longer strands the fleet-restart obligation

2026-09-23 07:01:11 -07:00

update_cmd_fleet.py

fix(update): a carried local commit no longer strands the fleet-restart obligation

2026-09-23 07:01:11 -07:00

update_cmd_git.py

…

update_cmd_maint.py

fix(memory): user-dir memory providers keep Desktop config + OAuth

2026-09-23 01:07:08 -07:00

update_cmd_stale_survivors.py

fix(cron): stale-code yield reads as an outage in cron status; hermes update restarts proven-stale gateways

2026-09-21 01:57:31 -07:00

update_cmd_stash.py

fix(update,plugins): address autostash entries by sha / bare index, never stash@{N}

2026-09-22 00:06:29 -07:00

update_cmd_windows.py

fix(desktop): report a failed gateway restart as a manual step, not a failed update

2026-09-23 06:05:29 -07:00

update_cmd_zip.py

…

update_cmd.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

update_contract.py

…

update_fleet_scope.py

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

update_handoff.py

fix(update): start the post-swap child in the checkout

2026-09-23 06:51:47 -07:00

update_host_obligation.py

fix(update): never disarm the host restart obligation, and never discharge unknown terms

2026-09-21 07:14:37 -07:00

update_inventory.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_lock.py

…

update_receipt.py

fix(update): an in-gateway cron update no longer exits STALE for the gateway it runs inside

2026-09-23 06:51:47 -07:00

update_restart_recovery.py

FLEET: one host-scoped update-restart obligation, one restart per host

2026-09-21 07:14:37 -07:00

update_serve_obligations.py

fix(update): discharge an unreadable-create_time manual-serve row once its pid is provably dead

2026-09-19 23:59:11 -07:00

urllib_security.py

fix(urllib): log the default-certificates fallback once, after every bundle failed

2026-09-22 15:55:23 +05:30

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

web_server_config.py

fix(plugins): per-plugin load deadline so a hung register() no longer hangs startup

2026-09-22 01:11:17 -07:00

web_server_cron.py

feat(gateway): gateway.standalone opts a named profile out of the host multiplexer

2026-09-22 19:55:02 -07:00

web_server_dashboard.py

fix(plugins): canonical activation keys + remove/toggle bookkeeping across CLI, dashboard and RPC

2026-09-22 00:13:50 -07:00

web_server_files.py

…

web_server_gateway.py

fix(dashboard): a served profile is not a gateway of its own

2026-09-23 07:01:11 -07:00

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

…

web_server_mcp.py

fix(profile-scope): bind home and secret tokens inside the try that resets them

2026-09-23 06:46:02 -07:00

web_server_memory.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

web_server_messaging.py

…

web_server_oauth.py

…

web_server_profiles.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

web_server_sessions.py

fix(state): per-profile store housekeeping under one multiplexed process

2026-09-21 02:56:31 -07:00

web_server.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

fix(gateway): a failed host attach never exits 0, and SIGTERM clears the record

2026-09-21 02:51:58 -07:00

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

…

write_approval_commands.py

fix(memory): surface the overwritten entry on the /memory approve surface too

2026-09-21 14:26:37 +05:30

xai_retirement.py

…