unsupportedpastels bf23bccef3 fix(auth): a profile's auth add never copies root's login into the profile ...

Root's login for nous, openai-codex and xai-oauth can live only in its
auth.json `providers.<id>` block, with no pool rows yet. In a profile
that borrows from root, load_pool() seeds it as a `device_code` entry
through the root fallback. The write-time claim in add_entry() kept
every entry except root's pool rows, so the profile's first `auth add`
wrote root's single-use refresh token into the profile's auth.json: a
forked grant (#100339) that the heal cannot match, because root has no
pool row for it.

- add_entry() writes only the added row when a profile claims a
  single-use provider. Rows the profile seeds from its own sources are
  seeded again on the next load.
- _seed_tokens_singleton() (openai-codex, xai-oauth) no longer seeds
  root's providers block into a profile that owns its own rows, the
  rule _seed_nous_singleton already applies. On current main such a
  profile copied root's refresh token into its own pool on every load.

2026-10-07 09:59:11 -04:00

..

dashboard_auth

fix(dashboard): cover whole prefix class — font URLs, native chooser, logout landing

2026-10-06 11:17:11 -04:00

local_runtime

fix(local-runtime): hermes update from v2026.9.24 no longer crashes importing local_runtime

2026-10-06 20:11:00 -04:00

observability

fix(telemetry): pre-receipt exits keep their initiator; index.lock permission errors; bare-interpreter updates park

2026-10-07 06:15:58 -07:00

proxy

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

subcommands

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

web_routers

feat(local-models): pin Flash Next's downloads to the revisions the catalog describes

2026-10-06 16:08:23 -04:00

__init__.py

…

_early_recovery_zip.py

fix: ZIP recovery deletes a backup temp only on the identity the swap journaled

2026-10-06 06:22:29 -07:00

_early_recovery.py

refactor: _restore_holding_claim reads as its phases

2026-10-06 06:22:29 -07:00

_install_repair.py

…

_launchers.py

fix(update): the minted launcher keeps the first line gateway identity recognises

2026-10-06 06:21:57 -07:00

_old_updater.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

_parser.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

…

_subprocess_compat.py

fix: the update's Windows child runner and the probe runner share one kill-and-drain

2026-10-06 04:36:02 -07:00

_update_takeover.py

fix: the takeover reads HEAD through the shared git-dir helpers

2026-10-06 06:22:29 -07:00

active_sessions.py

…

agent_import_sync.py

…

agent_import.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

agent_plugins.py

feat(plugins): a portable package can ask Hermes to gate its MCP server

2026-10-07 04:51:23 -07:00

AGENTS.md

docs(update): hermes_cli/AGENTS.md keeps the post-commit rule within the size cap

2026-10-06 03:44:49 -07:00

anon_auth.py

feat(free-tier): send preview_full_connectors on account creation

2026-10-06 18:00:58 -04:00

anon_challenge.py

fix(free-tier): a failed stdio announce still shows the challenge link

2026-10-06 23:14:10 +05:30

anon_sign_in_cli.py

…

anon_sign_in.py

fix(telemetry): a free-tier sign-in outage and a Codex 5xx record as network

2026-10-05 15:36:14 -07:00

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

fix(net): sanitize bracketed-IPv6 NO_PROXY entries so bare httpx clients construct

2026-10-05 16:37:14 -05:00

auth_commands.py

fix(auth): save a profile's first single-use login, and never print Added for an unsaved row

2026-10-07 09:59:11 -04:00

auth_constants.py

…

auth_device_flow.py

fix(telemetry): a sign-in outage stays a failure; xAI and Codex keep their class

2026-10-05 15:36:14 -07:00

auth_error_copy.py

fix(telemetry): a cancelled or lapsed provider sign-in is abandoned, not failed

2026-10-05 15:36:14 -07:00

auth_minimax.py

fix(auth): serialize MiniMax OAuth refresh and keep it a credential-only write

2026-10-05 22:38:27 -05:00

auth_model_picker.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

auth_nous.py

refactor(free-tier): keep auth.py and anon_challenge.py inside the code-health ratchet

2026-10-06 23:14:10 +05:30

auth_oauth_grants.py

fix(auth): a profile's auth add never copies root's login into the profile

2026-10-07 09:59:11 -04:00

auth_oauth_pkce_plugin.py

feat(auth): brokered PKCE, expiry-driven rotation and aux on plugin OAuth rows

2026-10-05 23:33:41 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

…

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

fix(telemetry): a sign-in outage stays a failure; xAI and Codex keep their class

2026-10-05 15:36:14 -07:00

auth_zai_kimi.py

…

auth.py

refactor(free-tier): keep auth.py and anon_challenge.py inside the code-health ratchet

2026-10-06 23:14:10 +05:30

azure_detect.py

…

backend_retirement.py

…

backup_restore.py

fix(backup): preserve live OAuth grants on snapshot restore

2026-10-03 16:30:59 +05:30

backup_sqlite.py

…

backup.py

fix(backup): fail closed for skipped snapshot auth restore

2026-10-03 16:30:59 +05:30

bang_shell.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

banner.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

blueprint_cmd.py

feat(plugins): let plugins register Automation Blueprints via ctx

2026-10-05 17:34:36 -07:00

boot_bootstrap.py

…

browser_connect.py

fix(browser): real-profile detects the Windows 11 25H2 default browser

2026-10-07 02:29:54 -07:00

browser_runtime.py

…

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

chat_catalog.py

…

checkpoints.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

claw.py

…

cli_agent_setup_mixin.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

cli_auto_maintenance.py

…

cli_billing_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_error_copy.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_chat_turn_mixin.py

feat(voice): auxiliary.voice_chat routes spoken voice turns to their own model

2026-10-07 01:35:11 -07:00

cli_commands_mixin.py

fix(kanban): refuse to resume a Kanban-owned worker session as an untracked writer

2026-10-06 15:15:06 -04:00

cli_commands_session_tools.py

refactor(cli,tui): move interrupt + session-tool handlers to topical modules

2026-10-06 15:15:06 -04:00

cli_config_load.py

feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier

2026-09-29 23:54:34 +05:30

cli_footer_split.py

…

cli_info_mixin.py

fix(cli): keep plugin skill lookup live and align slash precedence

2026-10-05 00:23:05 -07:00

cli_init_mixin.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

cli_loops_mixin.py

fix(cli): validate every /queue index before int()

2026-10-02 22:47:50 -04:00

cli_modal_mixin.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

cli_model_switch_mixin.py

fix(cli): decouple the custom-probe budget from for_picker visibility

2026-10-05 10:20:42 -05:00

cli_output.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_dock.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_process_notifications.py

…

cli_render.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_session_dock.py

…

cli_session_mixin.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

cli_shutdown.py

fix(cli): shut down the active agent's memory provider before lease release when cli.agent was retired

2026-09-30 14:23:52 -05:00

cli_single_query.py

fix(kanban): stop goal loop on worker/judge failures (#91264)

2026-10-04 13:50:13 -05:00

cli_status_bar_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_stream_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_subagent_monitor.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_input.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_terminal_mixin.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_tui_mixin.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

cli_tui_runtime_mixin.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

cli_unknown_command.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

cli_voice_mixin.py

feat(stt): live transcription while you speak on CLI, TUI and Desktop (stt.streaming)

2026-10-06 12:50:31 -07:00

clipboard.py

…

codex_models.py

docs(models): get_codex_model_ids documents its fallback return

2026-10-02 13:34:54 +05:30

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

fix(cli): keep plugin skill lookup live and align slash precedence

2026-10-05 00:23:05 -07:00

commands_platforms.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

commands.py

docs(goal): show the -- <text> escape in the /goal args hint

2026-10-03 20:44:07 +05:30

completion.py

…

config_backups.py

…

config_check_diagnostics.py

fix(cli): judge saved selections the way the runtime does in config check

2026-09-29 20:34:45 +05:30

config_defaults.py

feat(voice): voice turns default to reasoning off, the lowest valid level where off is refused

2026-10-07 01:35:11 -07:00

config_effective.py

…

config_env_routing.py

…

config_home.py

…

config_language.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

config_migrations.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

config_providers.py

fix(config): skip a configured provider URL that urlparse rejects instead of raising

2026-10-03 16:31:09 +05:30

config_read_errors.py

…

config_section_guard.py

refactor(cli): move _guard_section_overwrite into config_section_guard to keep config.py under its size cap

2026-10-05 19:36:32 +05:30

config_version_stamp.py

refactor(cli): move the config version stamp into config_version_stamp

2026-10-06 14:57:23 -05:00

config.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

console_engine.py

refactor(console): sessions export uses the shared export_projection()

2026-10-03 19:21:54 +05:30

container_boot.py

…

context_switch_guard.py

…

copilot_auth.py

…

credential_lifecycle.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

cron.py

fix(cron): key store state by resolved path, never swallow a flapped outage notice

2026-10-07 10:20:18 +05:30

curator.py

feat(skills): external mounts get an 'external' provenance tier (#108032)

2026-09-30 23:10:24 -05:00

curses_ui.py

fix(cli): Ctrl+D leaves a curses menu once raw mode is on, like Esc

2026-10-06 02:53:00 -07:00

dashboard_procs.py

refactor(serve): name the Desktop backend lock file once

2026-10-03 19:51:54 +05:30

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug_redaction.py

fix(debug): scrub a key-shaped free-text Bearer value before ="..."

2026-10-05 13:18:19 +05:30

debug.py

fix(update): read update.log and receipts from the root home

2026-10-06 03:44:49 -07:00

default_soul.py

…

desktop_build_lock.py

fix: a held update lock covers a desktop build only of its own checkout

2026-10-06 06:22:28 -07:00

desktop_console.py

…

desktop_update_verify.py

…

diagnostics_upload.py

fix(debug): keep share_to_nous exception types

2026-10-03 21:15:17 +05:30

dingtalk_auth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor_config.py

fix(config): make destructive replacements explicit

2026-09-29 20:24:19 -04:00

doctor_connectivity.py

fix(net): sanitize bracketed-IPv6 NO_PROXY entries so bare httpx clients construct

2026-10-05 16:37:14 -05:00

doctor_live.py

fix(doctor): sanitize bracketed-IPv6 NO_PROXY for --live probes (#118159)

2026-10-05 16:37:14 -05:00

doctor_platform.py

…

doctor_report.py

…

doctor_state.py

chore(memory): remove the bundled openviking provider

2026-10-06 23:13:01 -07:00

doctor_tools.py

chore(memory): remove bundled honcho provider; install from the plugin catalog

2026-10-02 04:39:28 -07:00

doctor.py

feat(doctor): warn when the cron store is unwritable or its disk is nearly full

2026-10-07 10:20:18 +05:30

dump.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

env_loader.py

refactor(utils): stage every atomic writer's temp through one mkstemp_beside helper

2026-10-02 01:02:00 +05:30

fallback_cmd.py

…

fallback_config.py

fix(fallback): log when provider-alias collapse degrades to lowercase (reviewer)

2026-10-06 15:00:21 -05:00

focus_view.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

foreign_sessions_browser.py

…

foreign_sessions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

free_tier_bootstrap.py

Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)

2026-09-29 07:44:13 +00:00

fs_utils.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

…

gateway_migrate_guards.py

…

gateway_migrate.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

gateway_multiplex_mode.py

fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)

2026-09-28 13:30:57 -07:00

gateway_multiplex_s6.py

…

gateway_multiplex_served.py

fix(whatsapp): serve a paired WhatsApp session on every profile under the host multiplexer

2026-10-03 21:57:13 -04:00

gateway_profile_lifecycle.py

fix(gateway): explain why parked restart unparks and status reads runtime first (#124553, salvage #124669)

2026-09-28 13:30:57 -07:00

gateway_setup_wizard.py

…

gateway_supervised_restart.py

…

gateway_windows_legacy.py

…

gateway_windows.py

fix: an unmapped gateway's restart debt is retired only by its own runtime

2026-10-06 06:18:39 -07:00

gateway.py

fix: an unmapped gateway's restart debt is retired only by its own runtime

2026-10-06 06:18:39 -07:00

git_credentials.py

…

git_pack_tidy.py

fix(update): the partial-clone pack tidy's merge runs in the update's custody

2026-10-06 04:36:02 -07:00

github_api.py

…

gitlock.py

refactor(update): drop the gc-fold custody exception (#132927 removed the fold)

2026-10-06 04:36:02 -07:00

goal_command.py

refactor(goal): one control first-word set for is_goal_control

2026-10-03 20:44:07 +05:30

goals.py

fix(kanban): stop goal loop on worker/judge failures (#91264)

2026-10-04 13:50:13 -05:00

gui_uninstall.py

fix(gui): detect leftover desktop install records

2026-10-02 20:51:34 +00:00

heartbeat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

home_data_layout.py

…

hooks.py

feat(telemetry): per-model tool-call quality, friction and context-peak counters

2026-09-28 12:43:03 -07:00

image_provenance.py

…

init_command.py

fix(init): target the session's active directory, not the process cwd

2026-10-01 04:50:26 -05:00

input_sanitize.py

…

install_identity.py

…

inventory.py

fix(cli): honor excluded_providers in the TUI /model picker's unconfigured rows

2026-10-06 12:28:00 -04:00

journey.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

refactor(kanban): answer linked-worktree checks with one rev-parse

2026-10-03 16:31:23 +05:30

kanban_db.py

refactor(kanban): import VALID_STATUSES from the workflow so kanban_db does not grow

2026-10-07 11:19:10 +05:30

kanban_decompose.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_diagnostics.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

kanban_ops.py

refactor(kanban): fold the worktree sharing guard into one helper

2026-10-03 16:31:23 +05:30

kanban_output.py

feat(kanban): one workflow definition for columns, traits and transitions

2026-10-07 11:19:10 +05:30

kanban_parser.py

…

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_resume_guard.py

fix(kanban): refuse to resume a Kanban-owned worker session as an untracked writer

2026-10-06 15:15:06 -04:00

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban_workflow.py

docs(kanban): document archived as a manual-move source in the workflow contract

2026-10-07 11:19:10 +05:30

kanban.py

fix(kanban): make can_move total over task statuses; stats derives from the workflow

2026-10-07 11:19:10 +05:30

left_core_migration.py

fix: send_message to a Home Assistant target names the install command while its plugin is absent

2026-10-04 00:08:20 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(desktop): Linux launcher targets a CLI that can serve the app and skips the rebuild (#126650)

2026-09-28 12:24:52 -05:00

logs.py

fix(update): read update.log and receipts from the root home

2026-10-06 03:44:49 -07:00

loops.py

…

macos_signing.py

…

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(skills): a refused hub update or uninstall exits non-zero too; blocked installs toast

2026-10-05 16:00:48 -07:00

main_container.py

refactor(cli): container exec routing moves out of main.py into main_container.py

2026-10-06 04:36:02 -07:00

main_dashboard.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

main_dep_hints.py

…

main_desktop_tcc.py

refactor(desktop): move --setup-tcc-identity into hermes_cli/main_desktop_tcc.py

2026-10-06 05:44:21 -07:00

main_desktop.py

fix(desktop): a direct desktop build holds the checkout lock an updater takes, then its own

2026-10-06 06:22:27 -07:00

main_install_repair.py

refactor(update): the startup half of a previous update runs from main_install_repair

2026-10-06 06:18:39 -07:00

main_platform_setup.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

main_profile_recovery.py

docs(profiles): say the interactive uninstall menu still offers a full wipe

2026-09-29 15:45:52 +05:30

main_provider_setup.py

feat(voice): voice turns default to reasoning off, the lowest valid level where off is refused

2026-10-07 01:35:11 -07:00

main_tui_launch.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

main_web_build.py

…

main.py

fix(telemetry): review findings on pre-apply stop reasons

2026-10-07 06:15:58 -07:00

managed_scope.py

…

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

feat(telemetry): extension installs and update runs say why they failed; hub skills name their registry

2026-10-06 11:10:43 -07:00

mcp_config.py

fix(telemetry): extension failure classifiers are inert; the contract rejects contradictory install rows

2026-10-06 11:10:43 -07:00

mcp_picker.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_security.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

fix(memory): catalog memory-provider installs stop failing on every start and every Install click

2026-10-05 16:06:32 -07:00

memory_setup.py

fix(memory): a missing catalog memory provider names its install command

2026-10-02 04:39:28 -07:00

middleware.py

fix(plugins): trim request-middleware chaining to the minimal shape

2026-10-05 00:22:31 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

refactor(cli): move the config version stamp into config_version_stamp

2026-10-06 14:57:23 -05:00

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_common.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

model_setup_flows_custom.py

…

model_setup_flows_local.py

feat(cli): local models in hermes model

2026-10-03 22:32:13 -04:00

model_setup_flows.py

refactor(solstice): rebuild the provider as a standard model-provider plugin

2026-10-05 23:33:41 -07:00

model_switch_providers.py

fix(nous): register the fingerprinted pricing cache key so cached_only reads hit

2026-10-05 16:41:47 -05:00

model_switch.py

fix(cli): let persist_switch_by_default cover provider-scoped model picks

2026-10-02 22:40:31 -05:00

models_catalog_static.py

fix(models): add Ling 3.0 Flash to OpenRouter picker

2026-10-06 17:23:23 -04:00

models_detect.py

…

models_local.py

…

models_pricing.py

fix(pricing): wire kilocode into the pricing dispatcher

2026-10-06 17:22:46 -04:00

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

…

models.py

feat(providers): pre-release profiles stay off discovery until signed in

2026-10-05 23:33:41 -07:00

nous_account.py

refactor(web): drop the gate's leftovers and keep the tier rules tested

2026-10-04 00:10:54 +05:30

nous_auth_keepalive.py

feat(free-tier): browser challenge primitive for the anonymous token exchange

2026-10-06 23:14:10 +05:30

nous_billing.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

nous_subscription.py

fix(web): pick own key or Nous Tool Gateway per web capability in Desktop

2026-10-06 02:53:56 -07:00

npm_engine.py

…

old_updater_deps.py

…

old_updater_main.py

…

onepassword_secrets_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

oneshot.py

fix(kanban): refuse to resume a Kanban-owned worker session as an untracked writer

2026-10-06 15:15:06 -04:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

platforms.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

plugin_capabilities.py

…

plugin_catalog_presence.py

feat(plugins): requires.gpu gates a plugin server on the host's GPU vendor

2026-10-03 10:26:12 -07:00

plugin_catalog.py

refactor: keep subdir/sha shape rules at the admission gate only

2026-10-01 10:46:45 -07:00

plugin_compat.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugin_dev.py

…

plugin_events.py

…

plugin_host_child.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_host_profiles.py

fix(plugins): model-provider plugins load under plugins.isolation: host on Windows

2026-10-03 10:15:11 -07:00

plugin_host_wire.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_host.py

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

plugin_install_phase.py

fix(catalog): sessions off the desktop no longer see manage_catalog through tool_search (review)

2026-10-07 01:01:14 +05:30

plugin_isolation_audit.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugin_isolation.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugin_packs.py

feat(telemetry): record plugin installs as extension-install events

2026-09-28 12:43:03 -07:00

plugin_validate_core_override.py

fix(plugins): no core override check catches patch helpers that are methods

2026-10-03 13:34:08 -07:00

plugin_validate_desktop.py

fix(plugins): lint every Desktop entry layout the installer accepts, incl. repo-root plugin.js

2026-10-04 17:53:20 -07:00

plugin_validate_locales.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugin_validate.py

feat(plugins): a portable package can ask Hermes to gate its MCP server

2026-10-07 04:51:23 -07:00

plugins_activation_live.py

…

plugins_activation.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

plugins_admission.py

…

plugins_aux_tasks.py

refactor: move aux-slot growth into topical siblings (code-health caps)

2026-10-05 17:24:40 -07:00

plugins_cadence.py

…

plugins_cmd_capabilities.py

…

plugins_cmd_catalog.py

feat(telemetry): extension installs and update runs say why they failed; hub skills name their registry

2026-10-06 11:10:43 -07:00

plugins_cmd_git.py

feat(telemetry): extension installs and update runs say why they failed; hub skills name their registry

2026-10-06 11:10:43 -07:00

plugins_cmd_install.py

fix(plugins): refuse checkout mutations while the gateway is live

2026-10-06 17:22:18 -04:00

plugins_cmd_listing.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugins_cmd_remove.py

fix(plugins): refuse checkout mutations while the gateway is live

2026-10-06 17:22:18 -04:00

plugins_cmd_toggle.py

…

plugins_cmd_update.py

fix(plugins): refuse checkout mutations while the gateway is live

2026-10-06 17:22:18 -04:00

plugins_cmd.py

fix(plugins): refuse checkout mutations while the gateway is live

2026-10-06 17:22:18 -04:00

plugins_content.py

feat(plugins): let plugins register Automation Blueprints via ctx

2026-10-05 17:34:36 -07:00

plugins_discovery.py

feat(computer-use): pluggable single-select computer-use providers

2026-10-05 17:20:30 -07:00

plugins_dispatch.py

feat(gateway): reshape post_gateway_admission into a fail-open consume hook

2026-10-05 01:26:23 -07:00

plugins_injection.py

feat(plugins): inject_message(origin=...) starts a gateway session in the plugin's own profile

2026-10-05 17:11:30 -07:00

plugins_ledger.py

feat(plugins): let plugins register Automation Blueprints via ctx

2026-10-05 17:34:36 -07:00

plugins_loader.py

fix(gateway): run the plugin re-arm off the event loop and share the loader thread prefix

2026-10-05 20:07:25 +05:30

plugins_manifest.py

feat(computer-use): pluggable single-select computer-use providers

2026-10-05 17:20:30 -07:00

plugins_provenance.py

…

plugins_settings.py

…

plugins_state.py

…

plugins_transaction.py

fix(telemetry): extension failure classifiers are inert; the contract rejects contradictory install rows

2026-10-06 11:10:43 -07:00

plugins_updates.py

…

plugins.py

feat(plugins): let plugins register Automation Blueprints via ctx

2026-10-05 17:34:36 -07:00

portal_cli.py

fix(portal): show FAL for an unset image pick with a Portal model id

2026-10-01 16:22:28 +05:30

post_update.py

fix(update): an adoption stamp never discharges an owed completion tail

2026-10-01 22:35:29 -07:00

process_identity.py

fix(serve): reap orphaned host owner instead of looping observe-only

2026-10-05 16:41:08 -05:00

profile_channels.py

fix: a channel-less profile clone drops Home Assistant identity while its plugin is absent

2026-10-04 00:08:20 -07:00

profile_cmd.py

fix(profiles): carry install records and skip install staging when cloning plugins

2026-10-02 01:29:41 -07:00

profile_describer.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

profile_distribution.py

refactor(profiles): one predicate decides what a distribution never writes

2026-10-03 16:29:29 +05:30

profile_identity.py

…

profile_memory_config.py

…

profiles_service_cleanup.py

…

profiles.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

refactor(providers): LM Studio and Tencent TokenHub get provider profiles; base_url-only agents get snapshot cells

2026-10-07 11:27:35 +05:30

providers.py

fix(providers): a timeout-only providers.<name> block no longer shadows the builtin

2026-09-29 20:57:57 -05:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

fix(pty-bridge): sweep helpers of a non-leader child on close

2026-10-05 16:42:57 -05:00

pty_session.py

fix(web): satisfy code-health ratchet and contributor attribution

2026-10-06 12:46:06 -04:00

quiet_single_query.py

…

relaunch.py

fix(metrics): startup latency counts once per client launch, never after an in-place exec

2026-09-28 12:43:03 -07:00

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

release_channels.py

…

resource_limits.py

…

route_identity.py

…

runtime_paths.py

…

runtime_provider_backends.py

fix(bedrock): route GPT-6 family and prefixed OpenAI inference profiles, size their 1M window (#133573)

2026-10-06 08:13:51 -04:00

runtime_provider_custom.py

…

runtime_provider.py

fix(copilot): recompute api_mode on fallback and stop stale-mode veto (#46527)

2026-10-06 23:54:51 -05:00

runtime_state.py

…

sandbox_image_switch.py

…

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

security_audit_startup.py

…

security_audit.py

fix(security-audit): skip the agent's placeholder dist when no release is known

2026-10-05 12:37:47 +05:30

send_cmd.py

…

service_manager.py

…

session_export_html.py

…

session_export_md.py

…

session_export.py

fix(tui_gateway): TUI/Desktop /save json exports the stored session and obeys the export cap

2026-10-03 23:28:02 +05:30

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

docs(state): trim derived-id recognizer comments to the contract

2026-10-04 12:05:37 +05:30

session_recap.py

…

session_recovery.py

…

session_reset_retirement.py

…

session_schema_history.py

fix(sessions): un-hide an auto-archived chat when it is resumed or compressed

2026-09-28 21:03:09 -04:00

sessions_cmd_browse.py

…

sessions_cmd_journal_mode.py

…

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(sessions): /save json snapshots keep compaction-archived turns too

2026-10-03 19:21:54 +05:30

sessions_repair_profiles.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

…

setup_quick.py

feat(telemetry): record setup completion from the CLI wizard

2026-09-28 12:43:03 -07:00

setup_summary.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

setup_terminal.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

setup_tts.py

…

setup_whatsapp_cloud.py

fix(whatsapp): tighten cloud webhook identity binding and its diagnostics

2026-10-02 02:58:18 +05:30

setup.py

docs(telemetry): the send explainer and Desktop consent window name the fresh-install note

2026-10-06 11:10:43 -07:00

shared_profile_warning.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

refactor(telemetry): registry prefixes come from the hub adapters; update reasons use tables

2026-10-06 11:10:43 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

slash_exec.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

source_build.py

fix(update): the Node build stays in the caller's process group and leaves no descendant behind

2026-10-06 04:36:02 -07:00

source_check.py

fix(update): keep never-pushed and unmerged branches pinned in source check

2026-09-28 21:02:35 -04:00

source_completion.py

fix(update): pause POSIX gateways before the first checkout move, restart them after deps

2026-10-07 04:39:00 -07:00

source_releases.py

…

source_stamp.py

fix(update): an adoption stamp never discharges an owed completion tail

2026-10-01 22:35:29 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

sqlite_util.py

…

ssh_workspace_fs.py

fix(desktop): secure SSH workspace browsing

2026-09-29 15:28:19 -05:00

stale_modules.py

…

status_auth.py

feat(cli): make the summary the default hermes status, --full for every section

2026-10-01 22:03:11 -07:00

status_bar_git.py

…

status_report.py

…

status.py

fix(status): one row per messaging platform, judged by the gateway (#96190)

2026-10-01 22:27:03 -07:00

stderr_timestamp.py

…

stdio.py

…

steward.py

…

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

tool_availability_notices.py

…

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

fix(stt): local turbo model is selectable in every STT picker (#79629)

2026-10-06 22:01:38 -07:00

tools_config_providers.py

fix(stt): every model picker lists the runtime catalog; Mistral STT is selectable again

2026-10-06 12:08:49 -07:00

tools_config.py

fix(stt): every model picker lists the runtime catalog; Mistral STT is selectable again

2026-10-06 12:08:49 -07:00

toolset_scope.py

…

toolset_validation.py

test(config): cover plugin MCP servers' mcp-<server> names; name the canonical form in the docstring

2026-10-03 16:29:54 +05:30

uninstall.py

fix(gui): keep shared workspace node_modules on uninstall --gui

2026-10-02 18:06:40 +00:00

update_abort_recovery.py

…

update_channel.py

…

update_cmd_check.py

fix(update): one custody policy for every updater git and Node child

2026-10-06 04:36:02 -07:00

update_cmd_commit.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

update_cmd_common.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

update_cmd_config.py

fix: an active config write failure still migrates siblings and restores snapshots

2026-10-06 03:44:49 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet_checkout.py

fix(update): one custody policy for every updater git and Node child

2026-10-06 04:36:02 -07:00

update_cmd_fleet_gatewayless.py

…

update_cmd_fleet_unit_budget.py

refactor(update): move the systemd unit timing budgets into update_cmd_fleet_unit_budget

2026-10-06 06:21:10 -07:00

update_cmd_fleet_verify.py

fix: a same-SHA catch-up adds newly stopped unmapped gateways to the owed inventory

2026-10-06 03:44:49 -07:00

update_cmd_fleet.py

fix(update): pause POSIX gateways before the first checkout move, restart them after deps

2026-10-07 04:39:00 -07:00

update_cmd_git.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

update_cmd_maint.py

chore(update): post-commit catch-all boundaries carry the code-health waiver

2026-10-06 03:44:49 -07:00

update_cmd_pause_gate.py

fix(update): commit-point tree moves bind the paused gateways' tree gate

2026-10-06 06:27:57 -07:00

update_cmd_posix_pause.py

fix: POSIX update pause drains turns first and survives a killed update cleanly

2026-10-07 04:39:00 -07:00

update_cmd_stale_survivors.py

fix(update): after the commit point nothing fails hermes update (C3)

2026-10-06 03:44:49 -07:00

update_cmd_stash.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

update_cmd_validation.py

…

update_cmd_windows.py

fix(update): pause POSIX gateways before the first checkout move, restart them after deps

2026-10-07 04:39:00 -07:00

update_cmd_zip.py

feat(telemetry): updates that stop before applying say why

2026-10-07 06:15:58 -07:00

update_cmd.py

fix(telemetry): pre-receipt exits keep their initiator; index.lock permission errors; bare-interpreter updates park

2026-10-07 06:15:58 -07:00

update_completion.py

fix(update): Windows keeps resuming after the fleet restart, never twice

2026-10-07 04:39:00 -07:00

update_contract.py

…

update_custody.py

fix: a build command that starts outside the update job is put in it instead of refused

2026-10-06 06:22:28 -07:00

update_finish.py

fix(update): A7 marker mutex, one incarnation rule, delegate-aware release, checkout custody

2026-10-06 04:36:02 -07:00

update_fleet_scope.py

fix: a paused unmapped gateway keeps the home discovery proved

2026-10-06 06:18:39 -07:00

update_handoff.py

fix(update): read update.log and receipts from the root home

2026-10-06 03:44:49 -07:00

update_host_obligation.py

fix: an unreadable profile roster never admits a restart debt only one profile can see

2026-10-06 06:22:29 -07:00

update_inventory.py

fix(update): after the commit point nothing fails hermes update (C3)

2026-10-06 03:44:49 -07:00

update_lock.py

fix(update): pause record survives killed recoveries and partner-claimed updates

2026-10-06 06:18:39 -07:00

update_owning_install.py

…

update_pause_record.py

fix: POSIX update pause drains turns first and survives a killed update cleanly

2026-10-07 04:39:00 -07:00

update_receipt.py

fix(telemetry): pre-receipt exits keep their initiator; index.lock permission errors; bare-interpreter updates park

2026-10-07 06:15:58 -07:00

update_restart_recovery.py

…

update_serve_obligations.py

fix(update): keep the unsaved manual-serve restart warning while an update runs

2026-10-06 03:44:49 -07:00

update_serve_resume.py

…

update_stage.py

…

url_utils.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

urllib_security.py

…

vault.py

…

venv_sync.py

fix(update): the launch-time completion tail runs in Windows checkout custody (review N10, R6b)

2026-10-06 04:36:02 -07:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

feat(metrics): hermes.update.run/stage derived from the final update receipt

2026-09-28 12:43:03 -07:00

voice.py

feat(stt): live transcription while you speak on CLI, TUI and Desktop (stt.streaming)

2026-10-06 12:50:31 -07:00

web_asset_mime_types.py

fix(dashboard): serve SPA assets with explicit MIME types

2026-10-06 11:15:27 -04:00

web_deps.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_git.py

fix(review): preserve effective Git commit identity

2026-10-06 12:59:08 -05:00

web_models.py

fix(web): preserve repeat count when creating cron jobs from dashboard

2026-10-06 12:27:22 -04:00

web_read_coalescing.py

…

web_server_chat.py

refactor(dashboard): single origin_mismatch return in WS origin guard

2026-10-03 16:54:59 +05:30

web_server_config.py

feat(voice): voice turns default to reasoning off, the lowest valid level where off is refused

2026-10-07 01:35:11 -07:00

web_server_cron.py

fix(web): preserve repeat count when creating cron jobs from dashboard

2026-10-06 12:27:22 -04:00

web_server_dashboard.py

fix(dashboard): serve SPA assets with explicit MIME types

2026-10-06 11:15:27 -04:00

web_server_files.py

fix(dashboard): don't 500 file listings on dangling symlinks or vanished entries

2026-10-06 12:30:01 -04:00

web_server_gateway.py

fix(dashboard): authenticate the gateway health probe without leaking the key to /health

2026-10-06 17:22:39 -04:00

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

web_server_mcp.py

…

web_server_memory.py

fix(plugins): memory provider setup lists the dependencies PM would install

2026-10-01 23:27:08 -07:00

web_server_messaging.py

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

web_server_oauth.py

fix(telemetry): a cancelled or lapsed provider sign-in is abandoned, not failed

2026-10-05 15:36:14 -07:00

web_server_owner_exit.py

refactor(serve): one fenced retirement loop for the skew and owner watchdogs

2026-10-03 19:51:54 +05:30

web_server_profiles.py

fix(dashboard): cron delivery targets, blueprints, recommended default, voice config, official skills and debug share answer an unknown ?profile= with 404

2026-09-28 12:18:58 -07:00

web_server_sessions.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

web_server_skew_exit.py

fix(update): "is an update running" readers honour the checkout lock

2026-10-06 04:36:02 -07:00

web_server.py

fix(dashboard): bracket IPv6 URL authorities everywhere hosts compose URLs

2026-10-06 14:23:00 -04:00

webhook.py

refactor(webhook): drop dead revision snapshot, lock-free reads, CAS owns the disable rule

2026-10-02 02:54:18 +05:30

win_pty_bridge.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

windows_appinstaller_update.py

fix(desktop): run the Windows update checkers from bundled core code

2026-10-02 10:42:07 -04:00

windows_ssh_runtime.py

fix(desktop): Windows SSH host locks let a superseded backend retire

2026-10-06 21:52:50 -05:00

windows_store_update.py

fix(desktop): run the Windows update checkers from bundled core code

2026-10-02 10:42:07 -04:00

worktree_cmd.py

…

worktree_gc.py

revert: stale worktree reaping revalidation (#132260)

2026-10-03 22:03:44 +05:30

worktree_ops.py

revert: stale worktree reaping revalidation (#132260)

2026-10-03 22:03:44 +05:30

write_approval_commands.py

…

xai_retirement.py

…