hermes-agent

Files

liuhao1024 b08ec00a70 fix(desktop): hand preview guest links to the audited opener via a guest preload

Preview-pane guest pages (Streamlit's traceback "Ask Google" / "Ask …"
buttons, plain `<a target="_blank">` anchors) could not open anything: the
`<webview>` has no `allowpopups`, so Chromium drops the popup before any
handler runs. Opening from `setWindowOpenHandler` is banned
(GHSA-9f4c-93c8-jc8g, window-open-policy.ts), so this adds an explicit
click bridge instead:

- main.ts installs a guest preload through `will-attach-webview`, keyed on
  the `persist:hermes-preview` partition only.
- The preload forwards a clicked `_blank` anchor's resolved href to the
  host renderer via `ipcRenderer.sendToHost`; it opens nothing itself.
- PreviewPane admits the URL and routes it through the existing audited
  `hermes:openExternal` IPC.

Salvaged from PR #112959 (squash of its two commits).

Fixes #112941

2026-09-17 09:05:24 -07:00

chat-messages

fix(desktop): reconcile failed tails without erasing later replies

2026-09-16 23:53:00 -05:00

keybinds

feat(desktop): add rebindable sidebar grouping cycle

2026-09-17 20:36:03 +05:30

preview-act

…

preview-annotate

…

tips

fix(desktop): show each in-app tip once, never lap the catalog again

2026-09-10 11:18:16 -07:00

tour

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958 )

2026-09-11 15:45:43 +05:30

ansi.test.ts

…

ansi.ts

refactor(ts): one stripAnsi in @hermes/shared (TUI's OSC/DCS/partial-CSI coverage); desktop adopts it

2026-09-13 06:50:57 -07:00

artifact-detect.test.ts

…

artifact-detect.ts

…

async-report.test.ts

fix: keep multiline delegation goals out of Desktop report bodies

2026-09-07 05:06:39 -07:00

audio-context.ts

…

brand-icon.test.ts

…

brand-icon.ts

…

budgeted-loop.test.ts

fix(desktop): keep visible renderer animations running on blur

2026-09-08 21:53:33 -05:00

budgeted-loop.ts

fix(desktop): keep visible renderer animations running on blur

2026-09-08 21:53:33 -05:00

catalog-install.test.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

chat-empty.ts

…

chat-messages.codex-json-sidecar.test.ts

fmt(js): npm run fix on merge (#105038 )

2026-09-07 12:03:25 +00:00

chat-messages.codex-sidecar-hydration.test.ts

fmt(js): npm run fix on merge (#104539 )

2026-09-06 19:22:04 +00:00

chat-messages.test.ts

fix(desktop): a stopped clarify no longer swallows the next turn's question

2026-09-14 10:18:17 -07:00

chat-runtime.test.ts

fix(desktop): a pasted PR-comment deep link lands as text like every other URL

2026-09-16 17:47:26 -07:00

chat-runtime.ts

fix(desktop): a pasted PR-comment deep link lands as text like every other URL

2026-09-16 17:47:26 -07:00

clipboard.ts

…

code-skew-error.test.ts

…

code-skew-error.ts

…

commit-changelog.test.ts

…

commit-changelog.ts

…

completion-poll.test.ts

test(desktop): trim MCP polling tests to two invariants per fix

2026-09-09 12:11:25 -07:00

completion-poll.ts

refactor(desktop): drop the serial-task layer from the MCP log poller

2026-09-09 12:11:25 -07:00

completion-sound.ts

…

composer-input-sanitize.test.ts

…

composer-input-sanitize.ts

…

connection-display.test.ts

…

connection-display.ts

…

connection-scoped.test.ts

…

connection-scoped.ts

…

connector-tools.ts

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574 )

2026-09-15 00:41:14 +05:30

deeplink-routes.test.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

deeplink-routes.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

desktop-fs.test.ts

…

desktop-fs.ts

…

desktop-git.test.ts

…

desktop-git.ts

chore(desktop): drop the dead PR-comment fetch IPC

2026-09-16 17:47:26 -07:00

desktop-remote-auth.test.ts

…

desktop-remote-auth.ts

…

desktop-slash-commands.test.ts

refactor(desktop): slash block-list derives from the Python command registry; only 5 TS-only names stay hand-typed

2026-09-13 06:50:57 -07:00

desktop-slash-commands.ts

refactor(desktop): slash block-list derives from the Python command registry; only 5 TS-only names stay hand-typed

2026-09-13 06:50:57 -07:00

desktop-slash-registry.json

refactor(desktop): slash block-list derives from the Python command registry; only 5 TS-only names stay hand-typed

2026-09-13 06:50:57 -07:00

desktop-toolsets.test.ts

…

desktop-toolsets.ts

…

display-path.test.ts

…

display-path.ts

…

download-text.ts

…

draft-title.ts

refactor(slash): delete the dead web slash re-implementation; one slash parser + command.dispatch narrowing in @hermes/shared

2026-09-13 06:50:57 -07:00

drag-ghost.ts

…

embedded-images.test.ts

fix(desktop): retain Markdown boundary and code-copy whitespace

2026-09-07 04:57:11 -07:00

embedded-images.ts

fix(desktop): retain Markdown boundary and code-copy whitespace

2026-09-07 04:57:11 -07:00

error-surface-copy.ts

fix(free-tier): the desktop renders a free-tier refusal as its own card, not an OAuth re-login

2026-09-15 20:44:42 +05:30

error-surface.test.ts

fix(free-tier): the desktop renders a free-tier refusal as its own card, not an OAuth re-login

2026-09-15 20:44:42 +05:30

error-surface.ts

fix(free-tier): the desktop renders a free-tier refusal as its own card, not an OAuth re-login

2026-09-15 20:44:42 +05:30

escape-layers.test.ts

…

escape-layers.ts

…

excluded-paths.ts

…

external-link.test.tsx

…

external-link.tsx

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958 )

2026-09-11 15:45:43 +05:30

file-preview-math.render.test.tsx

…

find-in-page-scope.test.ts

…

find-in-page-scope.ts

…

find-in-page.ts

Port from cloudflare/cloudflare-os#291 : IME-aware Enter guards across every desktop text field

2026-09-13 21:10:27 -07:00

first-build-start.test.ts

fix(desktop): keep envelope errors and sealed calls settled outside the tool row

2026-09-14 05:29:08 -07:00

first-build-start.ts

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574 )

2026-09-15 00:41:14 +05:30

gateway-events.test.ts

test: port desktop, TUI and gateway suites to server→client request frames

2026-09-14 06:02:05 -07:00

gateway-events.ts

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574 )

2026-09-15 00:41:14 +05:30

gateway-liveness-policy.test.ts

…

gateway-liveness-policy.ts

…

gateway-rpc.test.ts

refactor(ts): ui-tui rides apps/shared's JSON-RPC request channel; one pending map, one heartbeat, typed RPC errors

2026-09-13 05:42:31 -07:00

gateway-rpc.ts

refactor(ts): ui-tui rides apps/shared's JSON-RPC request channel; one pending map, one heartbeat, typed RPC errors

2026-09-13 05:42:31 -07:00

gateway-ws-url.test.ts

…

generated-images.test.ts

perf(desktop): stop per-event full-timeline allocations on streamed tool events

2026-09-09 12:13:14 -07:00

generated-images.ts

perf(desktop): stop per-event full-timeline allocations on streamed tool events

2026-09-09 12:13:14 -07:00

guarded-model-switch.test.tsx

fix: drop the Tailwind class assertion and document the guarded-switch dialog

2026-09-16 17:13:17 -07:00

guarded-model-switch.ts

fix(desktop): guarded model switch asks in a dialog with a real decline

2026-09-16 17:13:17 -07:00

guest-pointer-guard.ts

…

haptics.ts

…

hermes-open-target.test.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

hermes-open-target.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

icons.ts

feat: agent signs into sites from an encrypted local vault (CLI, browser fill, Desktop Settings)

2026-09-10 10:35:07 -07:00

image-resize.test.ts

…

image-resize.ts

…

ime.test.ts

Port from cloudflare/cloudflare-os#291 : IME-aware Enter guards across every desktop text field

2026-09-13 21:10:27 -07:00

ime.ts

Port from cloudflare/cloudflare-os#291 : IME-aware Enter guards across every desktop text field

2026-09-13 21:10:27 -07:00

incremental-external-store-runtime.test.ts

…

incremental-external-store-runtime.ts

…

incremental-runtime-adapter-notify.test.ts

…

inflight-turn-journal.test.ts

…

inflight-turn-journal.ts

…

input-modality.test.ts

…

input-modality.ts

…

json-format.test.ts

…

json-format.ts

…

json-rpc-gateway-heartbeat.test.ts

test(desktop): the no-heartbeat check expects the capability advertisement

2026-09-17 09:04:38 -07:00

json-rpc-gateway-recovery.test.ts

…

json-rpc-gateway-url-guard.test.ts

…

katex-memo.ts

…

keyed-timeouts.ts

…

legacy-session-owner-backfill.test.ts

…

legacy-session-owner-backfill.ts

…

listing-embed.test.ts

…

listing-embed.ts

…

loadout.ts

…

local-preview.test.ts

…

local-preview.ts

…

lru-cache.test.ts

…

lru-cache.ts

…

markdown-blocks.test.ts

…

markdown-blocks.ts

…

markdown-code.test.ts

…

markdown-code.ts

…

markdown-html-depth.test.ts

…

markdown-html-depth.ts

…

markdown-preprocess.directives.test.ts

fix(desktop): transcript directives survive markdown, and the guide keeps its reasoning to itself

2026-09-16 02:49:21 -05:00

markdown-preprocess.file-preview.test.ts

…

markdown-preprocess.reasoning.test.ts

test(desktop): reasoning tests follow the sibling naming

2026-09-17 21:18:30 +05:30

markdown-preprocess.ts

test(desktop): reasoning tests follow the sibling naming

2026-09-17 21:18:30 +05:30

markdown-table-widths.ts

…

markdown-whitespace.test.ts

fmt(js): npm run fix on merge (#105038 )

2026-09-07 12:03:25 +00:00

mcp-brands.tsx

feat(desktop): connector cards that wait for the sign-in, and a guided first launch that holds together (#108292 )

2026-09-12 10:00:06 +05:30

mcp-cost.test.ts

…

mcp-cost.ts

…

mcp-dashboard-oauth.test.ts

test(desktop): trim MCP relay coverage to ownership and cleanup invariants

2026-09-07 06:10:28 -07:00

mcp-dashboard-oauth.ts

fix(desktop): omit a null iss from the oauth.callback relay; hoist the loopback parse import

2026-09-15 13:00:12 +05:30

mcp-deeplink.test.ts

…

mcp-deeplink.ts

…

mcp-import.test.ts

…

mcp-import.ts

…

mcp-probe-cache.test.ts

…

mcp-probe-cache.ts

…

mcp-servers.test.ts

…

mcp-servers.ts

…

mcp-tool-filter.test.ts

fix(desktop): treat an explicit empty MCP include list as block-all

2026-09-12 08:34:43 -07:00

mcp-tool-filter.ts

fix(desktop): treat an explicit empty MCP include list as block-all

2026-09-12 08:34:43 -07:00

media.remote.test.ts

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

media.ts

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

middle-click.test.tsx

…

middle-click.ts

…

model-options.test.ts

fix(model): a selected model id is never rewritten to a catalog neighbour

2026-09-12 14:05:36 -07:00

model-options.ts

feat(contracts): TypeScript consumes the generated contract; hand-typed wire shapes deleted

2026-09-14 06:12:19 -07:00

model-picker-owner.test.ts

…

model-picker-owner.ts

…

model-status-label.test.ts

feat(desktop): reasoning effort gets its own composer pill

2026-09-13 06:11:49 -07:00

model-status-label.ts

feat(desktop): reasoning effort gets its own composer pill

2026-09-13 06:11:49 -07:00

mutable-ref.ts

…

onboarding-enabled.ts

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958 )

2026-09-11 15:45:43 +05:30

onboarding-recommendations.test.ts

fix(onboarding): consume future catalog entries without custom metadata

2026-09-16 15:54:47 -05:00

onboarding-recommendations.ts

fix(onboarding): consume future catalog entries without custom metadata

2026-09-16 15:54:47 -05:00

oneshot.ts

…

path-compare.test.ts

…

path-compare.ts

…

persisted.test.ts

…

persisted.ts

…

personalities.ts

…

platform.ts

…

plugin-source-urls.test.ts

…

plugin-source-urls.ts

…

pointer-drag.ts

…

pool.test.ts

…

pool.ts

…

preview-external.test.ts

fix(desktop): hand preview guest links to the audited opener via a guest preload

2026-09-17 09:05:24 -07:00

preview-external.ts

fix(desktop): hand preview guest links to the audited opener via a guest preload

2026-09-17 09:05:24 -07:00

preview-reach.test.ts

…

preview-reach.ts

…

preview-targets.test.ts

fix(desktop): retain Markdown boundary and code-copy whitespace

2026-09-07 04:57:11 -07:00

preview-targets.ts

fix(desktop): retain Markdown boundary and code-copy whitespace

2026-09-07 04:57:11 -07:00

profile-color.ts

…

profile-order.ts

refactor(desktop): one profile-order sort for the active strip and the at-rest groups

2026-09-15 16:07:43 +05:30

project-idea-templates.ts

…

provider-setup-errors.test.ts

…

provider-setup-errors.ts

…

query-client.test.ts

…

query-client.ts

feat(desktop): restore native skill and plugin catalogs

2026-09-16 13:55:13 -05:00

raf-coalesce.ts

…

reasoning-blocks.test.ts

…

reasoning-blocks.ts

…

reasoning-effort.test.ts

refactor(ts): one compactNumber and one reasoning-effort value set in @hermes/shared

2026-09-13 06:50:57 -07:00

reasoning-effort.ts

refactor(ts): one compactNumber and one reasoning-effort value set in @hermes/shared

2026-09-13 06:50:57 -07:00

remote-url.test.ts

…

remote-url.ts

…

render-weight.test.ts

…

render-weight.ts

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574 )

2026-09-15 00:41:14 +05:30

renderer-loop-pause.test.ts

fix(desktop): keep visible renderer animations running on blur

2026-09-08 21:53:33 -05:00

renderer-loop-pause.ts

fmt(js): npm run fix on merge (#106231 )

2026-09-09 03:02:27 +00:00

reorder.ts

…

runtime-readiness.test.ts

…

runtime-readiness.ts

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

sanitize.test.ts

…

sanitize.ts

…

selectable-card.ts

…

selection-copy-colors.test.ts

…

selection-copy-colors.ts

…

session-branch-tree.test.ts

…

session-branch-tree.ts

…

session-date-groups.test.ts

fmt(js): npm run fix on merge (#107022 )

2026-09-10 01:27:32 +00:00

session-date-groups.ts

feat(desktop): limit recency previews at complete group boundaries

2026-09-09 20:22:22 -05:00

session-export.ts

…

session-ids.test.ts

…

session-ids.ts

…

session-link-title.test.ts

…

session-link-title.ts

…

session-owner-stamp.ts

…

session-project-label.ts

…

session-refs.test.ts

…

session-refs.ts

…

session-search.test.ts

…

session-search.ts

…

session-signatures.test.ts

…

session-signatures.ts

…

session-source.test.ts

…

session-source.ts

…

shared-gateway-restart.test.ts

fix(desktop,dashboard): served profile's api_server/webhook read connected with their /p/<profile>/ URL; shared-gateway restart asks first

2026-09-12 12:52:19 -07:00

shared-gateway-restart.ts

fmt(js): npm run fix on merge (#110132 )

2026-09-13 17:58:46 +00:00

slash-completion-cache.ts

…

speech-text.test.ts

…

speech-text.ts

…

spoken-reply.test.ts

…

spoken-reply.ts

…

stable-array.ts

…

statusbar.test.ts

…

statusbar.tsx

refactor(ts): one compactNumber and one reasoning-effort value set in @hermes/shared

2026-09-13 06:50:57 -07:00

steered-turn-hydration-order.test.ts

…

storage.test.ts

…

storage.ts

…

summarize-command.test.ts

…

summarize-command.ts

…

svg-image.test.ts

…

svg-image.ts

…

text.ts

fix(desktop): fold separators in model search so filters and highlights agree

2026-09-07 06:21:44 -07:00

thinking-sound.test.ts

…

thinking-sound.ts

…

time.test.ts

…

time.ts

…

todos.test.ts

…

todos.ts

fix(desktop): task panel follows the todo_list wire name

2026-09-07 11:25:20 -07:00

tool-render-class.ts

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574 )

2026-09-15 00:41:14 +05:30

tool-result-metadata.ts

fix(desktop): keep envelope errors and sealed calls settled outside the tool row

2026-09-14 05:29:08 -07:00

tool-result-summary.test.ts

fix(desktop): stop inferring tool failures from returned data

2026-09-13 23:50:45 -05:00

tool-result-summary.ts

fix(desktop): stop inferring tool failures from returned data

2026-09-13 23:50:45 -05:00

tool-run-continuity.test.ts

…

trackpad-gestures.ts

…

transcript-directives.test.ts

…

transcript-directives.ts

fmt(js): npm run fix on merge (#108127 )

2026-09-11 10:23:35 +00:00

tts-lease.test.ts

…

tts-lease.ts

…

update-copy.test.ts

…

update-copy.ts

…

use-enter-animation.test.tsx

…

use-enter-animation.ts

…

use-session-slice.ts

…

use-stores-selector.test.tsx

…

utils.ts

…

version-status.test.ts

…

version-status.ts

…

voice-barge-in.ts

…

voice-client-direct.test.ts

…

voice-client-direct.ts

…

voice-live.ts

fmt(js): npm run fix on merge (#108745 )

2026-09-12 02:19:48 +00:00

voice-playback.routing.test.ts

…

voice-playback.ts

…

voice-stop-word.test.ts

…

voice-stop-word.ts

…

wake-client-capture.ts

…

wake-indicator.test.ts

…

wake-indicator.ts

…

wake-sound.test.ts

…

wake-sound.ts

…

with-timeout.test.ts

…

with-timeout.ts

…

yolo-session.ts

…