teknium1 aeff56aa35 fix(plugins): loader gates read the running version, survive SystemExit, quarantine deps everywhere ...

- requires_hermes compared against stale editable-install dist metadata (0.21.0) while the
  checkout ran 0.21.4, skipping plugins that required the release in use; hermes_cli.__version__
  is now the source of truth, dist metadata only a fallback.
- PEP 440 pre/post suffixes glued to a segment (99.0.0rc1) made a clause permissive and an rc
  running version disabled every gate; the segment parser drops the suffix.
- A plugin calling sys.exit() at import or in register() propagated SystemExit out of
  discovery: the whole registry emptied and `hermes chat` exited 3 with no output. Load
  isolation now covers SystemExit (KeyboardInterrupt still propagates).
- uv reads [tool.uv] exclude-newer from the cwd project only, so lazy/plugin dep installs
  launched from $HOME, a gateway service or the Desktop backend were never quarantined; the uv
  tier now runs from the checkout root when one exists.
- A flat user/project manifest naming a bundled key from a differently named directory no longer
  displaces the bundled plugin (warn + skip); a same-named override is logged at INFO.

2026-09-21 23:26:19 -07:00

..

computer_use

fix(computer-use): doctor names the stale TCC row on the health_report path too

2026-09-21 16:21:00 +05:30

connectors

fix(mcp): connector-card install keeps .env secrets-only too

2026-09-21 08:59:03 -07:00

environments

fix(terminal): cache cleanup keeps the max_age_hours kwarg the housekeeping loop calls

2026-09-21 18:54:23 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

fix(approval): keep the git branch force-delete gate off the safe -d delete

2026-09-20 15:32:00 -07:00

approval_floors.py

…

approval_gateway_wait.py

fix(approval): withdraw the queue entry when no client can answer; commit choices under the lock

2026-09-17 09:04:38 -07:00

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

fix(approval): warn on empty smart-approval guardian answers

2026-09-20 15:32:42 -07:00

approval.py

fix(approvals): route plugin asks through runs bridge

2026-09-19 23:41:45 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

fix(delegation): keep encoding= on the text=True line so the line-based footgun scanner sees it

2026-09-20 18:50:37 -07:00

async_delegation.py

feat(delegation): recovery event carries transcript tails and owner git state

2026-09-20 18:50:37 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

fix(gateway): a peer DM retries a transient turn failure once, like the other two lanes

2026-09-20 10:16:51 -07:00

bot_live_delivery.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_dm.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_probe.py

fix(profiles): hoist the profile-id grammar into hermes_constants.PROFILE_ID_RE

2026-09-20 17:00:11 -07:00

bot_relay.py

fix(bot-relay): re-offer only past the Desktop's deliver deadline, once per envelope, with a typed timeout after the waiter's budget

2026-09-20 11:51:14 -07:00

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(browser): gave-up supervisor unregisters itself; tests trimmed to two invariants

2026-09-18 10:28:40 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): orphan reaper binds only on the full socket-dir path, never its basename

2026-09-20 18:25:21 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

…

browser_tool_session.py

fix(browser): recycle a poisoned local session after a protocol-level agent-browser failure

2026-09-20 12:47:50 -07:00

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

fix: sockets keep a short temp root; lint skips git-ignored artifacts; test runner scratch leaves /tmp

2026-09-19 10:44:26 -07:00

browser_use_cli.py

…

browser_vault_tool.py

…

budget_config.py

…

checkpoint_manager_profile_rename.py

…

checkpoint_manager.py

fix(windows): delete read-only Git trees instead of failing with WinError 5

2026-09-21 08:58:37 -07:00

clarify_gateway.py

…

clarify_tool.py

…

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

feat: Hermes-owned scratch dir replaces the system temp dir for every process and child

2026-09-19 10:44:26 -07:00

code_execution_rpc.py

fix(code_execution): heartbeat is a background-only terminal modifier, blocked in the sandbox

2026-09-21 15:02:49 -07:00

code_execution_tool.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

code_kernel_remote.py

…

code_kernel.py

fix(tools): share the idle-expiry criteria between acquire and the reaper; plain once-latch

2026-09-20 15:49:52 -07:00

computer_use_tool.py

…

credential_files.py

…

cronjob_job_args.py

fix(cron): bound the Slack thread-origin horizon so an expired one-shot fails closed

2026-09-20 15:54:45 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(cron): release a profile's in-flight claim under the key it registered with

2026-09-21 02:52:15 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

feat(delegate): warn the child at 80% of its inactivity window before abandoning it

2026-09-20 15:50:20 -07:00

delegate_tool_config.py

fix(delegate): key a named custom child's credential pool by its inherited identity

2026-09-21 01:16:30 -07:00

delegate_tool_dispatch.py

fix(delegation): retain recovery transcript locators

2026-09-20 09:52:22 -07:00

delegate_tool_progress.py

fix(delegation): make remaining-depth guidance unambiguous

2026-09-19 23:57:59 -07:00

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

fix(delegate): key a named custom child's credential pool by its inherited identity

2026-09-21 01:16:30 -07:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(security): match credential env names case-insensitively

2026-09-20 12:53:47 -07:00

env_probe.py

…

fal_common.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_operations_lint.py

fix(lsp): treat a deleted process cwd as no anchor so write diagnostics never fail a landed write

2026-09-19 01:32:28 -07:00

file_operations_search.py

fix(tools): grep fallback follows a symlinked search root on the content lane

2026-09-20 10:44:16 -07:00

file_operations.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_state.py

fix(file_state): drop the module-level forget_task wrapper

2026-09-18 10:10:40 -07:00

file_tools_paths.py

fix(checkpoints): do not feed container paths into host checkpoint storage

2026-09-18 10:38:08 -07:00

file_tools_read_tracking.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

file_tools_write_guards.py

…

file_tools.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

focus_pane_tool.py

…

fuzzy_match.py

…

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

…

image_generation_tool.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

kanban_tools.py

fix(kanban): CLI and kanban_complete tool report an empty-completion refusal

2026-09-20 19:03:47 -07:00

kanban_toolset_context.py

…

lazy_deps.py

fix(plugins): loader gates read the running version, survive SystemExit, quarantine deps everywhere

2026-09-21 23:26:19 -07:00

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

mcp_dashboard_oauth.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix(mcp): ask Google-hosted OAuth for offline access and normalize the device-flow issuer check

2026-09-20 18:22:18 -07:00

mcp_oauth_manager.py

fix(mcp): OAuth discovery/registration carry a User-Agent; cancelled login frees its callback port

2026-09-18 12:47:49 -07:00

mcp_oauth_provider.py

fix(mcp-oauth): classify discovery URLs by path

2026-09-20 19:02:21 -07:00

mcp_oauth.py

fix(mcp): OAuth login waits for oauth.timeout and a probe timeout names itself

2026-09-20 12:40:36 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

…

mcp_tool_common.py

fix(mcp): error sanitizer redacts dotted/dashed sk- keys

2026-09-18 09:58:12 -07:00

mcp_tool_config.py

fix(mcp): keep the new resolver lines formatter-stable

2026-09-20 15:34:58 -07:00

mcp_tool_content.py

…

mcp_tool_discovery.py

feat(mcp): make the discovery connect cap configurable (mcp.discovery_concurrency, default 4, 0 = unlimited)

2026-09-21 01:44:16 -07:00

mcp_tool_errors.py

fix(mcp): redirect header stripper builds httpx.AsyncClient at call time so proxy mounts stay observable

2026-09-20 10:07:26 -07:00

mcp_tool_handlers.py

fix(mcp): dual-emit check is per text block; an over-cap structuredContent never doubles the flood cap

2026-09-19 23:47:17 -07:00

mcp_tool_health.py

fix(mcp): skip dynamic tool refresh when the server session is already gone (#109824)

2026-09-17 19:06:29 -04:00

mcp_tool_lifecycle.py

fix(mcp): divide the shutdown budget across profile passes and stop poisoning the teardown context

2026-09-21 02:58:40 -07:00

mcp_tool_loop.py

…

mcp_tool_registration.py

…

mcp_tool_sampling.py

…

mcp_tool_schema.py

fix(mcp): keep required-only constraint fragments in tool schemas

2026-09-21 13:14:22 -07:00

mcp_tool_scope.py

…

mcp_tool_server_run.py

fix(mcp): enforce strict_redirect_headers on redirects and the preflight probe (#115155)

2026-09-20 10:07:26 -07:00

mcp_tool_transport.py

fix(mcp): redirect header stripper builds httpx.AsyncClient at call time so proxy mounts stay observable

2026-09-20 10:07:26 -07:00

mcp_tool.py

fix(mcp): cap discovery pass timeout and derive lock waiter budget from it

2026-09-21 01:44:16 -07:00

memory_tool_store.py

fix(memory): key replaced_entries by 1-based op position; tidy review nits

2026-09-21 14:26:37 +05:30

memory_tool.py

fix(memory): surface the overwritten entry on the /memory approve surface too

2026-09-21 14:26:37 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

fix(tts): reject MEDIA directives and control chars in output_path

2026-09-20 10:57:35 -07:00

plugin_guard_context.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

plugin_guard.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_notifications.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

process_registry_results.py

…

process_registry.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix(gateway): cut api-server startup cost Closes #79047

2026-09-20 17:30:01 +05:30

schema_sanitizer.py

fix(tools): coerce a missing required to [] and pin the MCP normalizer entry (#56123)

2026-09-19 10:16:59 -07:00

self_repo_guard.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

send_message_senders.py

fix(telegram): attach real video geometry and a thumbnail so large uploads aren't square

2026-09-20 11:20:26 -07:00

send_message_targets.py

…

send_message_tool.py

fix(messaging): hermes send reports dropped MEDIA attachments instead of success:true

2026-09-20 11:12:48 -07:00

session_search_tool.py

fix(session_search): cap title-match discovery entries like FTS hits

2026-09-18 10:30:57 -07:00

shell_heredoc.py

fix(tools): classify prefixed heredoc consumers

2026-09-18 09:35:16 -07:00

skill_ledger.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

skill_linter.py

…

skill_manager_batch.py

…

skill_manager_guards.py

…

skill_manager_tool.py

…

skill_provenance.py

…

skill_usage.py

fix(curator): never-used built-ins get their inactivity clock anchored at first curator sight

2026-09-19 09:20:54 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(skills): share the credential-file alternation and pin plugin admission for py_read_secrets_file

2026-09-20 16:21:37 -07:00

skills_hub_clawhub.py

fix(skills): retry a failed skills.sh sitemap shard; never cache a partial catalog

2026-09-18 12:51:49 -07:00

skills_hub_github.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_install.py

fix(skills): write quarantined text members verbatim, without newline translation

2026-09-20 16:00:26 -07:00

skills_hub_models.py

fix(skills): a SKILL.md link above the skill directory no longer makes the skill uninstallable

2026-09-20 12:03:43 -07:00

skills_hub_official.py

…

skills_hub_search.py

…

skills_hub_skillssh.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_sources.py

…

skills_hub.py

fix(skills-hub): keep the gzip-only Accept-Encoding pin on sitemap fetches

2026-09-18 10:22:14 -07:00

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

…

skills_sync_optional.py

…

skills_sync.py

…

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

fix(tools): read_file's dedup stub skips the review fork too

2026-09-19 00:33:58 +05:30

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

fix(lsp): release language servers on every in-process workspace removal; pin the call sites

2026-09-19 01:29:03 -07:00

terminal_hints.py

…

terminal_scope.py

…

terminal_tool_backends.py

fix(tools): sanitize cwd overrides written into live container envs

2026-09-18 09:54:45 -07:00

terminal_tool_background.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

terminal_tool_config.py

…

terminal_tool_guards.py

fix(tools): execute_code shares the interpreter-kill rejection text; collapse redundant supervisor branch

2026-09-18 12:49:13 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

…

terminal_tool_sudo.py

…

terminal_tool.py

chore(terminal): diet the heartbeat schema description

2026-09-21 15:02:49 -07:00

thread_context.py

…

threat_patterns.py

fix(skills): an env-var NAME constant is not an embedded credential

2026-09-20 11:30:03 -07:00

tip_tool.py

…

tirith_security.py

fix(tirith): half-open the circuit breaker instead of latching it open

2026-09-18 09:59:54 -07:00

todo_tool.py

…

tool_backend_helpers.py

fix(auth): a removed env:XAI_API_KEY no longer overrides xai-oauth for x_search

2026-09-20 10:17:04 -07:00

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

tool_search_catalog.py

…

tool_search_validation.py

fix(tools): tool_call bridge treats blank arguments as no arguments

2026-09-19 10:03:11 -07:00

tool_search.py

fix(tools): warn once when tools.tool_search.defer is a scalar, then use the curated default

2026-09-19 23:51:25 -07:00

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_command.py

…

transcription_common.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_local.py

…

transcription_tools.py

…

tts_command_provider.py

…

tts_streaming.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

fix: forward tts.openai.consent_attestation to every OpenAI-compatible TTS request

2026-09-19 10:10:29 -07:00

tts_tool_plugins.py

…

tts_tool_providers.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_tool_speaker.py

fix(tts): drop the empty mkstemp placeholder when the provider wrote elsewhere

2026-09-20 10:25:30 -07:00

tts_tool.py

fix: quoted MEDIA payloads in tts output_path are rejected too (review follow-up)

2026-09-20 10:57:35 -07:00

url_safety.py

fix(url_safety): classify the IPv4-translated wrapper by its embedded IPv4

2026-09-20 15:28:59 -07:00

video_generation_tool.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

vision_tools_history_budget.py

fix: vision_analyze does not re-embed an image already attached natively to the current turn

2026-09-19 09:52:18 -07:00

vision_tools_image_prep.py

fix(vision): accept the image/jpg alias and give the Anthropic converter the same unsupported-subtype downgrade

2026-09-19 09:56:12 -07:00

vision_tools.py

fix(vision): computer_use capture and vision_analyze share one native-vision gate

2026-09-20 10:16:27 -07:00

voice_client_config.py

chore: merge origin/main (resolve apps/desktop/src/lib/voice-client-direct.ts, hermes_cli/config_defaults.py, tools/voice_client_config.py, website/docs/user-guide/features/tts.md)

2026-09-19 10:54:38 -07:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

wake_word_engines.py

…

wake_word.py

fix(voice): wake-word pause/stop no longer hangs on a wedged microphone stream

2026-09-20 18:26:41 -07:00

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

web_tools.py

fix: web gate follows the dispatcher when the web-xai plugin resolves xai (review follow-up)

2026-09-20 10:14:37 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

yuanbao_tools.py

…