kshitij a658dfe509 fix: address self-review findings on the check_fn/ensure_deps_fn split ...

- gateway/config.py: rewrite the stale enablement-pass header comment that
  still described check_fn as 'the single source of truth for are-my-env-
  vars-set' / 'lazy-installs it' — both false under the new contract.
- teams: check_requirements docstring wrongly claimed credential checks
  (body checks only SDK/aiohttp presence); derive install_hint from the
  canonical LAZY_DEPS pins + sys.executable instead of hardcoding
  '~/.hermes/hermes-agent/venv/bin/pip' and version pins (wrong under
  HERMES_HOME overrides / profile installs; pins go stale on CVE bumps);
  connect() fatal-error hints now point at the venv pip instead of bare
  system pip (the PEP 668 trap the docs warn about).
- teams docs: drop exact version pins from the two manual-install commands
  (LAZY_DEPS is the source of truth; unpinned installs still work and the
  text can't go stale).
- hermes_cli/status.py: per-entry exception guard around check_fn so one
  raising probe can't abort the listing of all remaining plugin platforms
  (aligns with the other three call sites).
- tests: rename test_register_check_fn_is_active_lazy_installer ->
  test_register_splits_passive_probe_from_active_installer (name said the
  opposite of what it verifies).

2026-08-07 13:28:43 +05:30

..

dashboard_auth

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

observability

Merge updated client resource metrics into active-install metrics

2026-08-04 15:10:41 -07:00

proxy

rip out brew + pip/PyPI wheel support (#68217)

2026-07-22 16:51:01 -04:00

subcommands

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

web_routers

fix(dashboard): derive the stale-schema read probe from SCHEMA_SQL

2026-08-07 00:41:58 -04:00

__init__.py

chore: release v0.20.0 (2026.8.3)

2026-08-03 09:57:23 -07:00

_early_recovery.py

fix(update): test runs never mutate the live checkout — pytest-guard the marker and repair paths

2026-07-29 21:30:53 -07:00

_parser.py

feat(kanban): let a task pin its own thinking depth

2026-08-01 16:09:56 -05:00

_scan_venv_blockers.py

fix(desktop): use the canonical gateway matcher for the preflight exemption

2026-07-31 22:34:28 -07:00

_startup_fast.py

refactor: single chokepoint for the pre-import version fast path

2026-08-02 21:13:12 +05:30

_subprocess_compat.py

chore: suppress windows-footgun false positive on gated killpg

2026-08-04 17:33:36 -07:00

active_sessions.py

fix(sessions): claim the cap slot on first turn, not on open

2026-07-28 12:11:52 -05:00

agent_import.py

refactor(cli): review follow-ups for the config.yaml import guard

2026-08-02 14:55:32 +05:30

approval_mode.py

feat(approvals): add cross-surface mode command

2026-07-26 21:13:03 -07:00

approvals_suggest.py

feat(approvals): hermes approvals suggest — mine approval history into allowlist proposals

2026-07-26 17:49:03 -07:00

auth_commands.py

fix(auth): make xAI OAuth pools multi-account resilient

2026-07-17 11:37:25 +05:30

auth.py

feat(providers): add Actual Computer inference provider

2026-08-05 14:08:32 -07:00

azure_detect.py

fix(security): secure Azure catalog probes

2026-07-11 12:28:55 +05:30

backup.py

fix(backup): serialize and atomically publish snapshots

2026-08-03 23:48:55 +05:30

bang_shell.py

feat(cli): ! shell mode — run a command without spending a model turn

2026-07-31 21:21:20 -07:00

banner.py

fix(cli): route keyless first run into provider onboarding instead of a broken chat

2026-08-01 15:34:16 -07:00

blueprint_cmd.py

…

browser_connect.py

fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths

2026-07-29 23:16:18 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix(approval): classify CLI/TUI approval timeouts separately from explicit denials

2026-08-02 20:21:59 -07:00

checkpoints.py

fix(checkpoints): bind an empty orphan preview to an empty deletion allowlist

2026-07-24 16:01:06 -07:00

claw.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

cli_agent_setup_mixin.py

fix(cli): persist YOLO mode across --resume

2026-08-02 20:30:06 -07:00

cli_billing_mixin.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

cli_commands_mixin.py

feat: /refine — run the memory/skill self-improvement review on demand

2026-08-05 22:40:51 -07:00

cli_output.py

…

clipboard.py

fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH

2026-07-29 08:42:16 -07:00

codex_models.py

fix(codex): send ChatGPT-Account-Id on /models probes

2026-07-21 05:27:13 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands.py

feat: /refine — run the memory/skill self-improvement review on demand

2026-08-05 22:40:51 -07:00

completion.py

…

config_defaults.py

feat(providers): env-var metadata, config-driven local no-auth, reasoning-effort clamp for Actual

2026-08-05 14:08:32 -07:00

config_migrations.py

refactor: config auto-migration support floor at v12 + deprecated shim retirement

2026-07-29 16:44:31 -07:00

config.py

fix(config): make get_env_value scope-aware — the last scope-blind credential reader

2026-08-01 16:42:51 -07:00

console_engine.py

fix(console): handle string SystemExit code in _capture_output

2026-08-05 11:48:03 +05:30

container_boot.py

fix(install): support non-pid-1 container entrypoints

2026-08-01 10:52:34 -07:00

context_switch_guard.py

fix(cli): honor custom_providers in preflight shrink warning

2026-07-22 21:17:21 -07:00

copilot_auth.py

test: harden cold-start regression tests + debug-log the env-var skip

2026-08-03 21:16:09 +05:30

credential_lifecycle.py

fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)

2026-07-19 03:02:21 -07:00

cron.py

feat(cron): user-owned model pins + cron.model fleet default

2026-07-28 11:52:47 -07:00

curator.py

fix(curator): make the autonomous write policy consistent (#67140)

2026-07-25 19:27:17 -07:00

curses_ui.py

fix(models): match bare Kimi Coding k3 when searching kimi

2026-07-26 21:22:40 -07:00

dashboard_procs.py

refactor: extract dashboard process-hygiene helpers to dashboard_procs.py

2026-07-29 10:59:54 -07:00

dashboard_register.py

…

debug.py

fix(debug): say where a client-side log lives instead of "(file not found)" (#78687)

2026-08-04 11:53:32 -06:00

default_soul.py

…

dep_ensure.py

fix(runtime): resolve Hermes-managed Node and uv before bare PATH

2026-08-01 21:17:51 -04:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor.py

feat(providers): add Actual Computer inference provider

2026-08-05 14:08:32 -07:00

dump.py

feat(gateway): session activity watchdog, stall notify, compress timeout (#72424)

2026-08-02 16:16:36 -07:00

env_loader.py

fix(env): make config.yaml authoritative for terminal.backend (#29186)

2026-08-02 18:21:58 -07:00

fallback_cmd.py

refactor(fallback): single owner for backend identity and failure-scoped skips

2026-07-26 23:41:54 -07:00

fallback_config.py

fix(auth): resolve fallback api keys through secret_scope, not raw env

2026-07-31 22:35:26 -07:00

focus_view.py

feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator

2026-07-26 18:10:34 -07:00

gateway_enroll.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

gateway_windows.py

fix(update): migrate legacy pythonw Windows gateway launchers to the hidden-console design

2026-07-26 17:50:54 -07:00

gateway.py

fix: align helper PID check with Python parser + dedupe drain-wait

2026-08-07 06:55:27 +05:30

goals.py

feat(goals): quality gates — deterministic commands that must pass before /goal completes

2026-08-05 22:32:39 -07:00

gui_uninstall.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

heartbeat.py

feat: /heartbeat — recurring session re-entry prompt fired when idle

2026-08-05 22:32:55 -07:00

hooks.py

feat(hooks): outbound webhooks — push signed lifecycle events to external HTTP endpoints

2026-08-02 15:01:11 -07:00

init_command.py

feat(cli): /init — generate or update AGENTS.md from a project scan

2026-07-26 17:46:29 -07:00

input_sanitize.py

fix(input): strip bracketed-paste leaks before prompt persistence (#62557)

2026-07-15 07:39:42 -07:00

inventory.py

feat(picker): derive a newest-per-lab featured shortlist from models.dev

2026-07-28 03:52:33 -05:00

journey.py

…

kanban_db.py

fix(tui): avoid writable Kanban opens on empty polls

2026-08-03 20:40:28 +05:30

kanban_decompose.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_diagnostics.py

…

kanban_specify.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_swarm.py

…

kanban.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

lifecycle.py

Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"

2026-07-27 21:10:51 -07:00

linux_desktop_entry.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

logs.py

…

main.py

feat(update): emit an action-scoped terminal receipt from hermes update

2026-08-05 10:34:18 -06:00

managed_scope.py

…

managed_uv.py

fix(update): survive a hermes_constants cached from before the update

2026-08-01 23:06:47 -05:00

mcp_catalog.py

fix(catalog): validate http+api_key manifests declare the header's env key

2026-08-03 22:55:36 +05:30

mcp_config.py

fix(mcp): make Figma remote OAuth work via DCR allowlist defaults

2026-07-28 00:53:16 -05:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions

2026-08-01 12:27:31 +05:30

mem_trim.py

fix(mem): 5s force floor so delegate-batch closes don't stack trims

2026-08-02 22:44:38 +05:30

memory_oauth.py

…

memory_setup.py

fix: route memory-provider dep installs through lazy_deps durable target

2026-07-28 22:40:33 -07:00

middleware.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

migrate.py

…

moa_cmd.py

feat(moa): add reference model toggles

2026-07-23 18:11:57 -07:00

moa_config.py

feat(moa): default advisor fanout to user_turn — the cheapest cadence

2026-07-23 21:07:18 -07:00

model_catalog.py

perf(model-picker): serve stale model caches instantly, refresh in background

2026-08-01 14:52:18 -07:00

model_cost_guard.py

…

model_normalize.py

fix(models): a model id missing its vendor prefix says so instead of 404ing (#78856)

2026-08-04 19:35:57 +00:00

model_search.py

fix(picker): fold live bare k3 wire id into curated kimi-k3 row

2026-07-26 21:22:40 -07:00

model_setup_flows.py

fix(cli): stabilize custom provider identities

2026-07-31 17:26:42 +05:30

model_switch.py

fix(model-switch): treat models dict as metadata, not allowlist

2026-08-04 08:52:31 -07:00

models.py

feat(providers): add Actual Computer inference provider

2026-08-05 14:08:32 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

refactor: single shared Retry-After parser

2026-07-29 10:13:50 -07:00

nous_subscription.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

npm_engine.py

Merge branch 'main' into ethie/bundled-node-path-windows-layout

2026-08-01 21:27:26 -05:00

onepassword_secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

oneshot.py

fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions

2026-08-01 12:27:31 +05:30

pairing.py

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

partial_compress.py

…

pets.py

…

platforms.py

…

plugins_cmd.py

fix(git): never block internal git calls on credential prompts

2026-07-28 17:34:21 -07:00

plugins.py

fix(gateway): split check_fn (passive probe) from ensure_deps_fn (active installer)

2026-08-07 13:28:43 +05:30

portal_cli.py

fix(auth): use refresh-free Nous status snapshot on read-only display paths

2026-07-28 22:42:19 -07:00

profile_describer.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

profile_distribution.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

profiles.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

projects_cmd.py

…

projects_db.py

feat(desktop): configure repository discovery (supersedes #67630) (#68642)

2026-07-21 10:09:31 -04:00

prompt_size.py

fix(prompt_size): search volatile tier for skills block after the stable->volatile move

2026-08-03 23:23:39 +05:30

prompt_stash.py

feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests

2026-07-31 21:21:16 -07:00

provider_catalog.py

…

providers.py

feat(providers): add Actual Computer inference provider

2026-08-05 14:08:32 -07:00

proxy_cli.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

psutil_android.py

…

pt_input_extras.py

fix(cli): route Cmd+Backspace and Cmd+ForwardDelete to the kill bindings

2026-07-30 03:39:26 -05:00

pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

pty_session.py

…

relaunch.py

…

route_identity.py

refactor: fold simplify-code review findings

2026-07-29 17:13:48 +05:30

runtime_provider.py

fix: adapt Actual provider salvage to current main

2026-08-05 14:08:32 -07:00

secret_prompt.py

…

secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

security_advisories.py

…

security_audit_startup.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

security_audit.py

fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)

2026-08-01 10:47:20 -07:00

send_cmd.py

feat(gateway): simplex channel enumeration + show configured platforms in hermes send --list

2026-08-02 15:08:45 -07:00

service_manager.py

fix(hermes_cli): drop privileges before clearing s6-log lock

2026-07-27 19:19:01 +05:30

session_export_html.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

session_export_md.py

…

session_export.py

…

session_filters.py

fix(sessions): preserve recently active sessions during pruning

2026-07-26 19:30:21 -07:00

session_listing.py

fix(gateway): scope session lists before limiting

2026-07-31 22:36:55 -07:00

session_recap.py

fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)

2026-07-17 04:53:38 -07:00

session_recovery.py

fix(state): deduplicate session system prompts

2026-08-03 20:37:17 +05:30

sessions_cmd.py

fix(cli): back up state.db before clean-markers writes by default

2026-08-04 11:26:15 +05:30

setup_hidden_env.py

fix(setup): stop asking about self-configuring platform knobs

2026-07-26 08:43:24 -07:00

setup_whatsapp_cloud.py

…

setup.py

fix(runtime): resolve Hermes-managed Node and uv before bare PATH

2026-08-01 21:17:51 -04:00

skills_config.py

…

skills_hub.py

refactor: share category detection and prune vendored SKILL.md hits

2026-08-02 13:31:16 +05:30

skin_cmd.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

skin_engine.py

feat(themes): dedicated code-syntax palette keys

2026-07-21 21:00:43 -05:00

slack_cli.py

fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)

2026-07-29 09:33:48 -07:00

slash_exec.py

refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)

2026-07-29 12:11:24 -07:00

sqlite_runtime.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

sqlite_safe_read.py

fix(cli): untrack sqlite connections only after close succeeds

2026-07-31 23:18:12 -07:00

sqlite_util.py

…

status.py

fix: address self-review findings on the check_fn/ensure_deps_fn split

2026-08-07 13:28:43 +05:30

stdio.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

timefmt.py

chore: round-2 review nits (re-review #9)

2026-08-02 16:16:36 -07:00

timeouts.py

…

tips.py

fix(gateway): defer in-band restart until active turns finish (#77184)

2026-08-03 09:57:58 +05:30

tools_config.py

fix(tools): reuse subscription features for toolset listing

2026-08-03 16:07:16 +05:30

toolset_validation.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

uninstall.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

update_cmd.py

feat(update): emit an action-scoped terminal receipt from hermes update

2026-08-05 10:34:18 -06:00

update_lock.py

fix(update): make the ancestor-PID lock handoff cross-platform via psutil

2026-07-31 22:28:46 -07:00

urllib_security.py

fix(security): order sanitizer after installed hooks

2026-07-11 12:28:55 +05:30

vercel_auth.py

Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"

2026-07-29 19:48:37 -07:00

voice.py

fix(voice): spoken barge-in works on every TTS playback path (CLI + gateway/desktop backends)

2026-07-29 08:24:00 -07:00

web_deps.py

refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)

2026-07-29 16:21:54 -07:00

web_git.py

fix(git): never block internal git calls on credential prompts

2026-07-28 17:34:21 -07:00

web_models.py

feat(profiles): REST export/import + extra_files overlay hook

2026-08-04 12:07:29 -06:00

web_server.py

fix(dashboard): derive the stale-schema read probe from SCHEMA_SQL

2026-08-07 00:41:58 -04:00

webhook.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

win_pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

windows_ssh_runtime.py

fix(desktop): keep Windows SSH runtime at machine root

2026-08-01 14:30:16 -07:00

write_approval_commands.py

…

xai_retirement.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30