AYin-Z 0f870069ea fix(url_safety): dial a declared local-proxy fake-ip block instead of blocking it ...

A TUN proxy in fake-ip mode (Mihomo/Clash `fake-ip`, Surge enhanced) answers DNS with an
address from its own block — `198.18.0.0/15` by default — for every name outside its filter.
The SSRF guard resolves names with the local resolver and reads that sentinel as a private
destination, so on such a host every fetch fails before the request leaves the machine:
`web_extract`, gateway media downloads (`is_safe_url` has ~20 call sites, including the
Feishu/WeCom/Telegram/Slack/Discord attachment paths) and the browser relay all report
"URL targets a private or internal network address".

The existing hostname allowlist (`_TRUSTED_PRIVATE_IP_HOSTS`, the QQ multimedia case) does not
generalise to this: the sentinel is a property of the host's resolver, not of one name.

Fix: `security.fake_ip_ranges` declares the CIDR blocks the local proxy owns. Answers inside a
declared block are dialable even with private-IP blocking on. Empty by default, so no existing
host changes behaviour. Loopback, RFC 1918, link-local, CGNAT and the cloud-metadata floor are
untouched. Pre-flight and connect-time checks both go through `_resolved_ip_block_reason`, so one
exemption covers the class instead of the ~20 call sites.

Tests: `TestDeclaredFakeIpSentinelRanges` in tests/tools/test_url_safety.py — red on the unfixed
module (declared sentinel rejected, "Blocked request to private/internal address during connect:
example.com -> 198.18.0.55"), green after. The pre-existing benchmark/QQ hostname tests are
unchanged and still pass (66 passed).

Docs: website/docs/user-guide/security.md + zh-Hans translation. The key is registered in
hermes_cli/config_defaults.py so `hermes config set security.fake_ip_ranges` is not flagged as
unknown.

2026-09-16 17:12:11 -07:00

..

dashboard_auth

fix(dashboard-auth): one refresh single-flight for the cookie gate and the native route, off the event loop

2026-09-13 09:40:44 -07:00

local_runtime

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

observability

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

proxy

…

subcommands

fix(profiles): purge a deleted profile's session/routing identity on delete

2026-09-16 14:21:14 -07:00

web_routers

fix(desktop): label Settings "Applies to" chips with the bot title / display name

2026-09-16 16:44:53 -07:00

__init__.py

chore(release): v0.21.3 (v2026.9.14)

2026-09-14 09:02:28 -07:00

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

…

_parser.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cli): preserve explicit dashboard update checks

2026-09-07 06:13:16 -07:00

_subprocess_compat.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

active_sessions.py

fix(bot-mode): teammate roster and every profiles/ enumerator use the profile identity predicate (#99392)

2026-09-16 16:48:42 -07:00

agent_import_sync.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_import.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_plugins.py

…

AGENTS.md

fix(profiles): profile create never deletes a live marker-less dir; dangling symlink markers count as identity

2026-09-16 16:48:42 -07:00

anon_auth.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

anon_sign_in_cli.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_commands.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_constants.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

refactor(gateway): one scoped boot-probe hop; one lost-scope warning per resolve

2026-09-16 16:16:24 +05:30

auth_oauth_grants.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_openrouter.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_xai.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_zai_kimi.py

…

auth.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

azure_detect.py

…

backup.py

fix(profiles): share the runtime-tree trio with backup via hermes_constants

2026-09-15 18:26:38 -07:00

bang_shell.py

…

banner.py

fix: drop the dead disabled guard on the lazy MCP banner line

2026-09-15 19:06:54 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: only call an auth DB backup "locked" when it made no progress

2026-09-16 16:53:40 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

fix(checkpoints): clear-legacy trims to two real-path tests, aligns failure line with the log

2026-09-15 18:24:22 -07:00

claw.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_agent_setup_mixin.py

fix(cli): resolve runtime credentials for the model the CLI will send

2026-09-16 16:54:57 -07:00

cli_billing_mixin.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_chat_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_chat_turn_mixin.py

fix(cli): one-shot -q runs report their outcome in the exit code

2026-09-15 19:28:32 -07:00

cli_commands_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_info_mixin.py

fix: widen the remaining config.yaml stat caches to file_signature

2026-09-15 06:29:50 -07:00

cli_loops_mixin.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_modal_mixin.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

cli_model_switch_mixin.py

fix(moa): show who pays on every MoA surface and trim the salvage to two invariants

2026-09-16 17:11:01 -07:00

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_notifications.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_session_mixin.py

fix(cli): /model switch, session restore and /new re-resolve reasoning effort for the new model

2026-09-16 17:02:56 -07:00

cli_status_bar_mixin.py

refactor(cli): vim mode is a config key only — drop the /vim slash command

2026-09-12 22:00:02 -07:00

cli_stream_mixin.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_subagent_monitor.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

fix(cli): import file_signature in TUI run-state init

2026-09-15 20:47:06 +05:30

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

…

clipboard.py

…

codex_models.py

Port pattern from zed-industries/zed#62729: request ungated Codex model catalog (clean-room)

2026-09-13 20:50:10 -07:00

codex_runtime_plugin_migration.py

refactor(codex): one shared constant for the hermes-tools MCP server name

2026-09-15 19:05:29 -07:00

codex_runtime_switch.py

refactor(codex): one shared constant for the hermes-tools MCP server name

2026-09-15 19:05:29 -07:00

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:25:36 -07:00

commands.py

Inspired by Factory Droid: /queue prompts are now listable, editable, and reorderable before they run

2026-09-13 20:41:41 -07:00

completion.py

…

config_backups.py

fix(config): a fresh process recovers the last good config.yaml instead of running on defaults

2026-09-12 16:17:04 -07:00

config_defaults.py

fix(url_safety): dial a declared local-proxy fake-ip block instead of blocking it

2026-09-16 17:12:11 -07:00

config_effective.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

config_env_routing.py

fix(config): drop the "Hermes does not read this" note on config set

2026-09-15 21:47:48 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

manage_connections covers local MCP servers; setup_mcp leaves the schema (NS-867, PR1) (#109517)

2026-09-15 00:41:13 +05:30

config_providers.py

fix(metadata): GLM context windows from the live catalog; hyphenated slugs, entry-level overrides, aux inherits main pin

2026-09-10 01:08:18 -07:00

config.py

fix(serve): launch-profile scope decided at entry; send keeps scope authority; per-reset release

2026-09-16 00:35:00 -07:00

console_engine.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

container_boot.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

context_switch_guard.py

…

copilot_auth.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

credential_lifecycle.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

cron.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

curator.py

test(journey): one end-to-end invariant for foreground-created skills; docs + list-unmanaged label

2026-09-15 05:38:31 -07:00

curses_ui.py

…

dashboard_procs.py

fix(desktop): profile backends stop reaping the Desktop's live SSH backends

2026-09-16 17:00:07 -07:00

dashboard_register.py

…

debug.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

default_soul.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

dep_ensure.py

…

desktop_update_verify.py

fix(desktop): verify the Windows update receipt against the checkout, not cwd

2026-09-10 01:25:45 -07:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor_connectivity.py

…

doctor_live.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

doctor_platform.py

fix(doctor): name the processes holding a WAL database that journal_mode=delete never converted

2026-09-16 17:02:34 -07:00

doctor_report.py

…

doctor_state.py

fix(doctor): the stop-first issue line says run, not re-run — it is now also emitted before any --fix

2026-09-16 23:19:45 +05:30

doctor_tools.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

doctor.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

dump.py

…

env_loader.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

fix(fallback): named custom providers keep their configured identity after automatic fallback (#98739)

2026-09-13 20:51:06 -07:00

focus_view.py

…

foreign_sessions_browser.py

fix(sessions): honor CLAUDE_CONFIG_DIR and CODEX_HOME in foreign session discovery

2026-09-12 21:39:10 -07:00

foreign_sessions.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

free_tier_bootstrap.py

fix(free-tier): setup.ready carries the failure block flat, the shape setup.status already spreads

2026-09-15 20:44:42 +05:30

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex resumes from live state, compensates the whole destructive phase, and refuses an unknown default principal

2026-09-16 00:33:03 -07:00

gateway_migrate.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_multiplex_mode.py

gateway status shows why an unset-default gateway stayed standalone

2026-09-16 08:57:18 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(gateway): guard Windows post-drain taskkill with the pre-drain start time

2026-09-16 16:52:59 -07:00

gateway.py

fix(gateway): refuse user-scope systemd install in containers on every fresh-install entry

2026-09-16 16:55:18 -07:00

git_credentials.py

fix(plugins): run gh auth token under the noninteractive git env

2026-09-10 01:00:19 -07:00

gitlock.py

fix: hermes -w repack no longer stampedes a shared clone

2026-09-16 16:43:08 -07:00

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(goals): failed quality gates re-run every boundary instead of replaying a status fingerprint

2026-09-15 03:59:50 -07:00

gui_uninstall.py

…

heartbeat.py

fix(tui): heartbeat ticks share the /loop idle poll and rewind when no turn starts

2026-09-06 07:20:24 -07:00

hooks.py

…

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

inventory.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_db_dispatch.py

fix(kanban): worker fingerprint carries a boot witness; an uncaptured fingerprint never authorizes a signal

2026-09-16 00:35:00 -07:00

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_db_workspace.py

fix(kanban): remove worktree when the process cwd is already gone

2026-09-16 16:51:45 -07:00

kanban_db.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_decompose.py

fix(config): kanban decompose and local-models status keep their fail-open config reads

2026-09-13 05:09:06 -07:00

kanban_diagnostics.py

…

kanban_ops.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_output.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_parser.py

fix(kanban): claim-less complete no longer closes a live worker's run

2026-09-15 18:34:40 -07:00

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

fix(kanban): headless specify/decompose aux calls carry a relay session key

2026-09-15 18:33:43 -07:00

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

…

kanban.py

fix(kanban): claim-less complete no longer closes a live worker's run

2026-09-15 18:34:40 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(linux): a PATH hit inside the checkout never persists as desktop entry Exec

2026-09-16 16:56:22 -07:00

logs.py

…

loops.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(update): attribute an earlier --no-open respawn to its launchd job

2026-09-15 18:28:26 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

fix(desktop): app-grid launches write hermes.desktop only after the window is on screen

2026-09-15 18:29:37 -07:00

main_install_repair.py

fix(cli): accept native npm paths under mnt

2026-09-15 18:35:59 -07:00

main_platform_setup.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

main_provider_setup.py

fix(model): preserve unknown custom capabilities

2026-09-16 17:09:50 -07:00

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

…

main.py

fix(bot-mode): teammate roster and every profiles/ enumerator use the profile identity predicate (#99392)

2026-09-16 16:48:42 -07:00

managed_scope.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

managed_uv.py

fix(platforms): QR fallback tip names Hermes' own uv when it is not on PATH

2026-09-15 18:55:47 -07:00

mcp_app_detection.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_catalog.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_config.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp): report lazily registered servers as lazy, not configured or failed

2026-09-15 19:06:54 -07:00

mem_trim.py

…

memory_oauth.py

…

memory_setup.py

fix: hindsight update-time dep resolution survives a BOM in config.json

2026-09-15 03:38:29 -07:00

middleware.py

…

migrate.py

…

moa_cmd.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix(deepseek): pass custom model ids through instead of rewriting them

2026-09-10 04:22:38 -07:00

model_search.py

…

model_selection_guards.py

test: trim the context-cache guard tests to invariants; docs: name the surfaces that actually confirm

2026-09-13 20:54:50 -07:00

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix(model_switch): clear key_env only when the route changes; drop it on custom activation

2026-09-15 03:39:45 -07:00

model_setup_flows.py

fix(moa): label the aggregator as the acting, billed model across CLI and Desktop

2026-09-16 17:11:01 -07:00

model_switch_providers.py

fix(picker): native Ollama cache rows use the 300s TTL and never stale-serve empty catalogs

2026-09-16 17:06:26 -07:00

model_switch.py

fix: /model no longer calls one configured provider ambiguous when its compat view is also passed

2026-09-16 16:59:23 -07:00

models_catalog_static.py

feat(models): add stealth/union-alpha to the OpenRouter free-tier catalog

2026-09-16 10:52:32 -07:00

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

models_pricing.py

…

models_profile_cache.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_reasoning_caps.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_validate.py

fix(gateway): /status resolves the switched-to model's context window; validator names the missing slug

2026-09-15 18:58:02 -07:00

models.py

fix(picker): native Ollama cache rows use the 300s TTL and never stale-serve empty catalogs

2026-09-16 17:06:26 -07:00

nous_account.py

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

nous_auth_keepalive.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

nous_billing.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix: scope one-shot aux usage to the branch and keep it on failed turns

2026-09-16 17:03:25 -07:00

pairing.py

…

partial_compress.py

…

personality.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

feat: plugin catalog entries carry an optional version label and card image

2026-09-16 14:18:39 -07:00

plugin_compat.py

perf(plugins): scan each plugin's source for removed imports once per process, not once per profile

2026-09-15 15:11:33 -07:00

plugin_dev.py

…

plugin_packs.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugin_validate.py

fix: catalog installs no longer block on caution; admission runs the same scanner

2026-09-16 15:47:44 -07:00

plugins_cmd_catalog.py

fix: catalog installs no longer block on caution; admission runs the same scanner

2026-09-16 15:47:44 -07:00

plugins_cmd.py

fix: catalog installs no longer block on caution; admission runs the same scanner

2026-09-16 15:47:44 -07:00

plugins_discovery.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_dispatch.py

fix(plugins): dedupe middleware failures too, and let unload forget reported hook failures

2026-09-16 17:08:25 -07:00

plugins_ledger.py

fix(plugins): dedupe middleware failures too, and let unload forget reported hook failures

2026-09-16 17:08:25 -07:00

plugins_loader.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_manifest.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_state.py

…

plugins.py

fix(plugins): report an identically failing hook callback once, not on every call

2026-09-16 17:08:25 -07:00

portal_cli.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

process_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

profile_channels.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_cmd.py

fix(profiles): purge a deleted profile's session/routing identity on delete

2026-09-16 14:21:14 -07:00

profile_credential_audit.py

fix(auth): credential audit reads profile config.yaml through read_user_config_raw

2026-09-16 14:34:59 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

fix: merge shipped skill categories instead of replacing them on update

2026-09-15 06:22:15 -07:00

profile_identity.py

refactor(checkpoints): slim the profile-rename rekey and name it as a checkpoint_manager sibling

2026-09-16 14:34:22 -07:00

profiles.py

fix(cli): inherit the launch profile's custom provider gateway with its model

2026-09-16 17:02:38 -07:00

projects_cmd.py

…

projects_db.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): pin all Actual routes to chat completions (E-1047)

2026-09-10 14:56:55 -04:00

proxy_cli.py

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

psutil_android.py

refactor(update): psutil Android installer extracts through the shared safe-tar guard

2026-09-13 05:07:11 -07:00

pt_input_extras.py

fix(cli): keypad Alt+Enter inserts a newline instead of escape text

2026-09-07 02:09:34 -07:00

pty_bridge.py

…

pty_session.py

fix(dashboard): skip the stalled-input close when attach detached itself

2026-09-15 06:36:19 -07:00

quiet_single_query.py

fix(cli): quiet -Q drain must use the async_delegation delivery ledger

2026-09-14 21:18:47 +05:30

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

resource_limits.py

…

route_identity.py

…

runtime_provider_backends.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider_custom.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider.py

fix(runtime): keep the bare-custom fail-fast off local aliases

2026-09-15 18:19:50 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

fix(serve): launch-profile scope decided at entry; send keeps scope authority; per-reset release

2026-09-16 00:35:00 -07:00

service_manager.py

refactor(gateway): move the on-demand s6 slot helper into service_manager, trim tests

2026-09-15 18:30:05 -07:00

session_export_html.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export_md.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_filters.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_listing.py

…

session_lost_and_found.py

fix: reap the killed sqlite3 .recover children on timeout

2026-09-16 17:02:13 -07:00

session_recap.py

…

session_recovery.py

fix(sessions): salvage a page-1-header-damaged state.db in the lost_and_found lane

2026-09-11 06:37:27 -07:00

session_schema_history.py

fix(state): record display_identity/display_order in the messages schema history

2026-09-09 13:30:28 -07:00

sessions_cmd_browse.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

sessions_cmd.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

refactor(platforms): every plugin setup wizard uses the shared declines_reconfigure gate

2026-09-13 05:32:38 -07:00

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

shared_session_attach.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

skin_cmd.py

…

skin_engine.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

slack_cli.py

…

slash_exec.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

status_auth.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

status_bar_git.py

feat(cli): opt-in git_branch status-bar field (⎇ current branch)

2026-09-12 21:47:53 -07:00

status_report.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

status.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

stderr_timestamp.py

fix(launchd): park EX_CONFIG token conflicts instead of KeepAlive-looping (#112079)

2026-09-16 17:58:25 +00:00

stdio.py

…

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

…

telegram_managed_bot.py

fix(platforms): QR fallback tip names Hermes' own uv when it is not on PATH

2026-09-15 18:55:47 -07:00

terminal_breadcrumbs.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

timeouts.py

…

tips.py

fix: correct two stale comments/docs strings left out of the docs batch

2026-09-08 19:52:26 +05:30

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

…

tools_config_mcp.py

fix(mcp): CLI readers no longer reopen include: [] as "all tools enabled"

2026-09-12 08:34:43 -07:00

tools_config_post_setup.py

…

tools_config_providers.py

fix(tools): one "Nous Subscription" image row instead of two rows that both read active

2026-09-16 16:42:47 -07:00

tools_config.py

fix(tools): one "Nous Subscription" image row instead of two rows that both read active

2026-09-16 16:42:47 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

update_abort_recovery.py

fix(update): Desktop-owned serve no longer fails the update or holds fleet_restart_pending

2026-09-15 18:30:32 -07:00

update_cmd_common.py

…

update_cmd_config.py

refactor(update): inline the tests exclusion; fix comments the wider purge made stale

2026-09-15 21:57:59 +05:30

update_cmd_deps.py

fix(updater): a probe that cannot be spawned stays advisory instead of failing the update

2026-09-15 04:11:11 -07:00

update_cmd_drain_report.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_fleet.py

fix: post-update fleet settle poll no longer ends early on inconclusive signals

2026-09-16 17:04:46 -07:00

update_cmd_git.py

…

update_cmd_maint.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

update_cmd_stash.py

…

update_cmd_windows.py

fix: count service-supervised gateways as running for per-profile cold-start

2026-09-15 04:13:44 -07:00

update_cmd_zip.py

…

update_cmd.py

refactor(update): single defer flag for the deferred catch-up; trim tests; document the flag

2026-09-15 19:28:39 -07:00

update_contract.py

…

update_inventory.py

docs(updater): say what a deferred desktop serve actually proves

2026-09-16 16:55:42 -07:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(update): identity-pending fleet row no longer claims 'restarted by this update'

2026-09-16 17:04:46 -07:00

update_restart_recovery.py

…

urllib_security.py

…

vault.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

feat(desktop): add per-auxiliary reasoning effort control

2026-09-13 19:19:32 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

…

web_server_config.py

fix(web): lock the remaining off-loop config RMWs; keep model probes outside the lock

2026-09-15 03:40:26 -07:00

web_server_cron.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

web_server_dashboard.py

fix(dashboard): skip unreadable plugin manifests

2026-09-15 18:48:59 -07:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

fix: make the allow_all_users env bridge own what it writes and re-derive it on restart

2026-09-15 04:37:41 -07:00

web_server_idle_exit.py

fix(serve): SSH-isolated idle-exit keeps the backend alive while a cron job runs

2026-09-11 15:28:37 -07:00

web_server_lifecycle.py

refactor(dashboard): startup reconcile reuses the routers' own-store opener

2026-09-14 08:10:36 -07:00

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

fix(profiles): --clone leaves messaging channels behind; --clone-channels opts in

2026-09-12 18:35:21 -07:00

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

fix(desktop): label Settings "Applies to" chips with the bot title / display name

2026-09-16 16:44:53 -07:00

web_server_sessions.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

web_server.py

fix(web): join the state.db eager-reconcile worker at lifespan shutdown

2026-09-16 17:11:08 -07:00

webhook.py

Inspired by ChatGPT Work: event-triggered cron jobs via webhook routes

2026-09-13 21:30:02 -07:00

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

fix: hermes -w repack no longer stampedes a shared clone

2026-09-16 16:43:08 -07:00

write_approval_commands.py

…

xai_retirement.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00