joaomarcos cd3f653b4e fix(checkpoints): never auto-delete orphans on unattended startup sweep ...

Builds on this PR's diagnosis by @Frowtek: a missing workdir is
ambiguous (deleted project vs. an unmounted external volume / network
share / VPN not yet up), so it's not safe evidence for a destructive
GC sweep — especially one that runs unattended at startup.

- cli.py / gateway/run.py: the startup auto-maintenance sweep now
  always passes delete_orphans=False to maybe_auto_prune_checkpoints().
  It still prunes by retention_days, size cap, and legacy archives —
  none of which require guessing whether a project was deleted or is
  just temporarily unreachable.
- hermes_cli/config.py: drop the now-unused delete_orphans default.
- hermes_cli/checkpoints.py: `hermes checkpoints prune` (the explicit,
  human-invoked path) now previews the orphan project list and asks
  for confirmation before deleting, unless -f/--force is passed.
- Docs updated (EN + zh-Hans) to match.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-24 16:01:06 -07:00

..

dashboard_auth

fix(dashboard-auth): harden the public native-authorize surface

2026-07-22 06:50:50 -07:00

proxy

rip out brew + pip/PyPI wheel support (#68217)

2026-07-22 16:51:01 -04:00

subcommands

feat(slack): support long app descriptions in the manifest generator

2026-07-23 12:01:24 -07:00

__init__.py

chore: release v0.19.0 (2026.7.20) (#68175)

2026-07-20 11:35:21 -07:00

_early_recovery.py

fix(ssl): detect and repair a missing certifi cacert.pem via existing venv-repair infra

2026-07-24 15:53:38 -07:00

_parser.py

feat(cli): restore cwd on resume (--no-restore-cwd)

2026-07-12 05:08:13 -04:00

_subprocess_compat.py

fix(windows): suppress console window flashes in env probes, lazy installs, and platform.win32_ver()

2026-07-23 18:20:24 -07:00

active_sessions.py

fix(tui): preserve live session identity across compression (#49041)

2026-06-24 00:54:18 +05:30

auth_commands.py

fix(auth): make xAI OAuth pools multi-account resilient

2026-07-17 11:37:25 +05:30

auth.py

fix(vertex,moa): register vertex in PROVIDER_REGISTRY and HERMES_OVERLAYS

2026-07-23 16:55:41 -07:00

azure_detect.py

fix(security): secure Azure catalog probes

2026-07-11 12:28:55 +05:30

backup.py

fix(update): correct integrity-guard bugs from #70553 salvage + tests

2026-07-24 15:59:32 -07:00

banner.py

fix(windows): widen utf-8 subprocess decode guard to sibling desktop-backend sites

2026-07-24 09:48:28 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: /browser connect times out when another app squats the CDP port

2026-07-18 02:49:28 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix(clarify): one canonical timeout across CLI, TUI/desktop, and gateway (#69774)

2026-07-22 23:25:13 -05:00

checkpoints.py

fix(checkpoints): never auto-delete orphans on unattended startup sweep

2026-07-24 16:01:06 -07:00

claw.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

cli_agent_setup_mixin.py

fix(timeline): persist typed display events (#69771)

2026-07-23 14:46:24 -04:00

cli_billing_mixin.py

feat(cli): plan catalog on Free + plan= deep link + top-up/auto-refill copy split (#68689)

2026-07-22 08:11:09 +05:30

cli_commands_mixin.py

fix(timeline): persist typed display events (#69771)

2026-07-23 14:46:24 -04:00

cli_output.py

…

clipboard.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

codex_models.py

fix(codex): send ChatGPT-Account-Id on /models probes

2026-07-21 05:27:13 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

refactor(codex-runtime): tidy reapply-migration control flow

2026-07-01 23:51:54 +05:30

colors.py

…

commands.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

completion.py

…

config.py

fix(checkpoints): never auto-delete orphans on unattended startup sweep

2026-07-24 16:01:06 -07:00

console_engine.py

rip out brew + pip/PyPI wheel support (#68217)

2026-07-22 16:51:01 -04:00

container_boot.py

fix(container): keep named multiplex gateway slots down (#65368)

2026-07-16 14:30:05 +10:00

context_switch_guard.py

fix(cli): honor custom_providers in preflight shrink warning

2026-07-22 21:17:21 -07:00

copilot_auth.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

credential_lifecycle.py

fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)

2026-07-19 03:02:21 -07:00

cron.py

fix(cron): preserve jobs.json ownership on root rewrite + surface failing-tick reason

2026-07-24 15:52:13 -07:00

curator.py

feat(curator): add hermes curator usage — all-skills usage view

2026-07-06 12:26:21 -07:00

curses_ui.py

Nous portal model pricing (#69579)

2026-07-22 16:47:06 -04:00

dashboard_register.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

debug.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

default_soul.py

fix(soul): installers seed the real default persona, upgrade legacy empty templates (#52246)

2026-06-24 18:56:26 -07:00

dep_ensure.py

fix(security): centralize credential-safe subprocess env (#29157)

2026-06-27 20:45:31 -07:00

diagnostics_upload.py

feat(debug): drop dead confirm step from --nous upload (stateless NAS)

2026-06-30 17:29:23 -07:00

dingtalk_auth.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

doctor.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

dump.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

env_loader.py

fix(secrets): scope BWS-injected provider keys

2026-07-22 04:39:17 -07:00

fallback_cmd.py

…

fallback_config.py

fix(auth): honor per-entry key_env when resolving fallback providers

2026-07-16 07:19:36 -07:00

gateway_enroll.py

feat(gateway): generic OIDC client-credentials relay provisioning (NAS-free) (#60730)

2026-07-08 16:55:32 +10:00

gateway_windows.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

gateway.py

fix(gateway): deregister transient reload label after one-shot job + test

2026-07-24 15:49:29 -07:00

goals.py

fix(goals): auto-pause goal loop on consecutive transport failures

2026-07-20 05:38:25 -07:00

gui_uninstall.py

…

hooks.py

feat(agent): add pre_verify hook and verify-on-stop coding guidance

2026-06-30 00:59:29 -05:00

input_sanitize.py

fix(input): strip bracketed-paste leaks before prompt persistence (#62557)

2026-07-15 07:39:42 -07:00

inventory.py

fix(api-server): expose model options inventory

2026-07-24 11:20:07 -07:00

journey.py

fix(cli): render /journey color instead of leaking raw ANSI

2026-07-01 16:25:48 -05:00

kanban_db.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

kanban_decompose.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_diagnostics.py

fix(kanban): clear failure/crash diagnostics while a retry is in flight

2026-07-09 16:13:59 -05:00

kanban_specify.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_swarm.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)

2026-06-21 17:06:48 -07:00

kanban.py

fix(kanban): harden delegated-child mutation boundary

2026-07-23 07:33:36 -07:00

logs.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

main.py

fix(runtime): preserve cutover lifecycle on retry (E-949)

2026-07-24 16:00:03 -07:00

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

fix(runtime): request minor line for SQLite runtime repair + tests

2026-07-24 16:00:03 -07:00

mcp_catalog.py

feat(mcp): enforce exact version pins across the whole MCP catalog

2026-07-15 04:56:25 -07:00

mcp_config.py

fix(mcp): close hosted OAuth lifecycle gaps

2026-07-17 04:50:47 -07:00

mcp_picker.py

…

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(mcp): allow background discovery retry after a run that connected nothing

2026-07-21 12:43:27 -07:00

memory_oauth.py

feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)

2026-06-22 19:16:47 -05:00

memory_setup.py

fix(memory-setup): sanitize .env values in the core writer too

2026-07-24 13:00:53 +05:30

middleware.py

…

migrate.py

…

moa_cmd.py

feat(moa): add reference model toggles

2026-07-23 18:11:57 -07:00

moa_config.py

feat(moa): default advisor fanout to user_turn — the cheapest cadence

2026-07-23 21:07:18 -07:00

model_catalog.py

feat(models): catalog-labeled silent default — GLM-5.2 marked "default": true in the model catalog

2026-07-15 00:10:31 -07:00

model_cost_guard.py

…

model_normalize.py

…

model_setup_flows.py

feat(pricing): refresh Fireworks snapshot to 2026-07, cover full serverless catalog + cached picker pricing

2026-07-16 04:24:14 -07:00

model_switch.py

fix(vertex): surface vertex in the /model picker — credential gate + curated model list

2026-07-23 16:55:41 -07:00

models.py

feat(models): add anthropic/claude-opus-5 to OpenRouter and Nous Portal catalogs

2026-07-24 13:00:15 -07:00

nous_account.py

…

nous_auth_keepalive.py

fix Nous auth refresh for idle agents

2026-06-21 22:43:48 -07:00

nous_billing.py

fix(billing): rename user-facing "terminal billing" copy to Remote Spending (#68355)

2026-07-21 12:20:25 +05:30

nous_subscription.py

fix(browser): validate agent-browser is runnable, not just present (#51740)

2026-06-24 00:14:49 -07:00

onepassword_secrets_cli.py

fix: extend UTF-8 encoding to _op_version probe (#53428)

2026-07-24 11:45:57 -07:00

oneshot.py

fix: preserve named custom provider vision overrides

2026-07-23 17:57:33 +05:30

pairing.py

…

partial_compress.py

feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)

2026-07-02 05:10:31 -07:00

pets.py

feat(pets): generation RPCs, non-blocking gallery + gateway plumbing

2026-06-24 13:48:38 -05:00

platforms.py

…

plugins_cmd.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

plugins.py

fix(approval): emit observer hooks for smart verdicts

2026-07-13 02:00:09 -07:00

portal_cli.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

profile_describer.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

profile_distribution.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

profiles.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

projects_cmd.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

projects_db.py

feat(desktop): configure repository discovery (supersedes #67630) (#68642)

2026-07-21 10:09:31 -04:00

prompt_size.py

fix(prompt-size): respect enabled/disabled toolsets per platform

2026-07-05 19:13:20 -07:00

provider_catalog.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

providers.py

fix(vertex,moa): register vertex in PROVIDER_REGISTRY and HERMES_OVERLAYS

2026-07-23 16:55:41 -07:00

proxy_cli.py

Reapply "Merge pull request #30179 from NousResearch/feat/iron-proxy"

2026-07-24 09:49:00 -07:00

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

feat(pty): periodic reaper wired into dashboard lifespan

2026-07-07 15:15:37 -07:00

relaunch.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

route_identity.py

fix: restore base_url rstrip, extract should_clear_context_pin helper

2026-07-22 11:19:37 +05:30

runtime_provider.py

fix(tui_gateway): recover custom provider identity from the session's model name

2026-07-24 10:47:32 -07:00

secret_prompt.py

…

secrets_cli.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

security_advisories.py

…

security_audit_startup.py

style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)

2026-06-21 19:05:27 -07:00

security_audit.py

…

send_cmd.py

fix(managed-scope): honor managed scope in config→env bridges too

2026-06-19 07:46:33 -07:00

service_manager.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

session_export_html.py

fix(session-export): escape html tool call names

2026-07-09 19:54:02 -07:00

session_export_md.py

feat(sessions): full prune-filter set + --redact on sessions export

2026-07-07 12:36:41 -07:00

session_export.py

feat: add prompt-only session export

2026-07-07 13:29:58 -07:00

session_filters.py

feat(sessions): full filter surface for prune + bulk archive subcommand (#59327)

2026-07-05 22:04:52 -07:00

session_listing.py

feat(gateway): add /sessions search <query> (#57685)

2026-07-03 13:44:00 -07:00

session_recap.py

fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)

2026-07-17 04:53:38 -07:00

setup_whatsapp_cloud.py

…

setup.py

fix(windows): sweep remaining unguarded text-mode subprocess sites codebase-wide

2026-07-24 11:45:57 -07:00

skills_config.py

fix(cli): normalize malformed skills config in get_disabled_skills (#61797)

2026-07-09 19:57:54 -07:00

skills_hub.py

fix: widen UTF-8 BOM tolerance to all sibling frontmatter parsers

2026-07-17 04:52:02 -07:00

skin_cmd.py

feat(themes): hermes skin set — deterministic one-color tweak, bg untouched

2026-07-21 21:00:43 -05:00

skin_engine.py

feat(themes): dedicated code-syntax palette keys

2026-07-21 21:00:43 -05:00

slack_cli.py

feat(slack): support long app descriptions in the manifest generator

2026-07-23 12:01:24 -07:00

sqlite_runtime.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

sqlite_util.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

status.py

fix(cron): accept UTF-8 BOM when reading jobs.json

2026-07-18 02:31:20 -07:00

stdio.py

…

suggestions_cmd.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

telegram_managed_bot.py

…

timeouts.py

…

tips.py

fix(cli): widen startup worktree pruning to all .worktrees/ trees and detect squash-merged work (#69831)

2026-07-23 07:33:07 -07:00

tools_config.py

fix(windows): sweep remaining unguarded text-mode subprocess sites codebase-wide

2026-07-24 11:45:57 -07:00

toolset_validation.py

fix(config): surface invalid platform_toolsets instead of silently dropping tools (#38798)

2026-06-26 14:07:43 +05:30

uninstall.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

urllib_security.py

fix(security): order sanitizer after installed hooks

2026-07-11 12:28:55 +05:30

voice.py

…

web_git.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

web_server.py

fix(api-server): expose model options inventory

2026-07-24 11:20:07 -07:00

webhook.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

win_pty_bridge.py

…

windows_ssh_runtime.py

fix(windows): sweep remaining unguarded text-mode subprocess sites codebase-wide

2026-07-24 11:45:57 -07:00

write_approval_commands.py

…

xai_retirement.py

fix(config): guard xai migration writer + drop gratuitous annotation

2026-07-05 23:00:34 +05:30