hermes-admin/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity
Files
da2f473bdbfdac58ddebabd8bdf76ddb2b42fb35
hermes-agent/hermes_cli
History
Brooklyn Nicholson 036c577c86 fix(desktop): surface staged skill-write review on the desktop and TUI 
With skills.write_approval on, every skill write is staged to the
file-backed pending store, but no non-CLI surface could review it:
the desktop resolver marked the whole /skills family as the sidebar's
(desktop="settings") and discarded the subcommand token, and
tui_gateway command.dispatch had no route for /skills or /memory —
a failed slash worker turned both into the routing refusal, so staged
writes accumulated silently (#98330, #123315, #118812).

- hermes_cli/commands.py: new CommandDef.desktop_subcommands field;
  /skills declares its write-approval review slice
  (pending/approve/reject/diff/approval) and drops desktop="settings".
  command_desktop_meta serializes the allowlist (empty tuple = deny
  all); gateway contract regenerated.
- apps/desktop: the resolver threads the typed arg —
  desktopSubcommandAllowlist, an exec gate
  (desktopSubcommandUnavailableMessage) that renders an actionable
  refusal for hub mutations instead of forwarding them, completion
  filtering so the popover never suggests a dead end, and the
  isDesktopSlashCommand(name, arg) threading at the runExec gate.
  An explicit /skills spec keeps a current Desktop able to review
  staged writes even against an older backend catalog.
- tui_gateway command.dispatch: _cmd_skills answers only the
  registry-declared review slice under _session_home_scope (an
  unlisted subcommand keeps the 4018 routing refusal); _cmd_memory
  routes the shared handler with the live agent's store or a fresh
  on-disk one and a profile-scoped config setter. Gate-off still
  answers while staged writes exist (gateway parity, never stranded).
- tools/write_approval: _staged()'s review hint is surface-aware —
  slash-capable surfaces (CLI/TUI/desktop/chat gateway) keep
  "<command> pending"; headless contexts (cron, kanban, api_server,
  webhook delivery) get the pending directory path instead of a
  command nobody can deliver.

Batch skill writes also rendered "(batch on ...)" for /skills diff —
skill_pending_diff had no action='batch' case; ops now diff in order
against what earlier ops of the same batch left (finn763's #123861).

Supersedes #98794 (registry-driven desktop_subcommands + resolver
allowlist), #105773, #118821 (command.dispatch handlers + arg
threading), #123861 (batch diff renderer). #107799 is superseded by
the same subcommand-aware resolution.

Co-authored-by: foma-agent <foma@bokonon.ai>
Co-authored-by: Jason Havenaar <35441875+jasonHav@users.noreply.github.com>
Co-authored-by: finn763 <165816600+finn763@users.noreply.github.com>
Co-authored-by: chelsealong <chelsealong@126.com>
2026-09-30 23:05:43 -05:00
..
dashboard_auth
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
local_runtime
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
observability
refactor(shared_metrics): remove reset_warning_latch_for_tests
2026-09-29 15:58:55 +05:30
proxy
…
subcommands
fix(debug-share): capture update.log and desktop-update-handoff.log
2026-09-29 21:48:25 -05:00
web_routers
fix(sessions): show a steer as the user's own words in REST history
2026-09-30 12:01:29 -05:00
__init__.py
fix(cli): keep hermes_cli import off os.environ; run the import-purity test on Windows
2026-09-24 14:47:06 -04:00
_early_recovery.py
fix(marker): zombie-aware stale-marker self-heal parity across all readers
2026-09-29 20:57:17 -05:00
_install_repair.py
…
_launchers.py
fix(cli): adopt legacy venv hermes wrapper
2026-09-29 14:36:55 +05:30
_old_updater.py
fix(update): mark current updater frames with a sentinel, not missing locals
2026-09-29 16:47:48 +05:30
_parser.py
feat(tui): add native terminal mode defaults
2026-09-25 17:57:38 -05:00
_scan_venv_blockers.py
…
_secrets_common.py
…
_startup_fast.py
refactor: make install-stamp.json the single runtime version identity
2026-09-23 11:41:01 -04:00
_subprocess_compat.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
_update_takeover.py
fix(pm): collect generations after maintenance syncs
2026-09-27 02:55:39 -07:00
active_sessions.py
…
agent_import_sync.py
…
agent_import.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
agent_plugins.py
…
AGENTS.md
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
anon_auth.py
Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)
2026-09-29 07:44:13 +00:00
anon_sign_in_cli.py
…
anon_sign_in.py
…
approval_mode.py
…
approval_transport.py
…
approvals_suggest.py
…
approvals_test.py
…
archive_safe.py
…
auth_codex_browser.py
…
auth_codex.py
fix(review): PR acceptance never falls through to the launch user's gh login
2026-09-28 03:37:09 -07:00
auth_commands.py
…
auth_constants.py
refactor: make install-stamp.json the single runtime version identity
2026-09-23 11:41:01 -04:00
auth_device_flow.py
fix(auth): bound device-poll edge backoff and gate 403 on x-vercel-mitigated
2026-09-24 18:06:48 +05:30
auth_error_copy.py
feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled
2026-09-28 12:43:03 -07:00
auth_minimax.py
…
auth_model_picker.py
feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled
2026-09-28 12:43:03 -07:00
auth_nous.py
fix(auth): detect the lock holder for real and route permanent lock failures
2026-09-29 18:47:44 -05:00
auth_oauth_grants.py
fix(auth): read flat refresh_token for forkable pool rows; reuse pool ownership in load_pool
2026-09-27 18:37:01 +05:30
auth_oauth_pkce_plugin.py
…
auth_openrouter.py
…
auth_plugin_providers.py
…
auth_qwen.py
…
auth_spotify.py
…
auth_xai.py
…
auth_zai_kimi.py
…
auth.py
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
azure_detect.py
…
backend_retirement.py
…
backup_restore.py
fix(backup): tell the user when an imported database fails its integrity check
2026-09-26 21:38:28 +05:30
backup_sqlite.py
…
backup.py
fix(update): restore cron agent-job prompts degraded during the update window
2026-09-29 20:58:24 -05:00
bang_shell.py
…
banner.py
Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)
2026-09-29 07:44:13 +00:00
blueprint_cmd.py
…
boot_bootstrap.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
browser_connect.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
browser_runtime.py
fix(bot-desktop): choose PM headed Chromium despite headless override
2026-09-24 01:40:31 -04:00
build_info.py
…
bundled_app.py
…
bundles.py
…
callbacks.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
chat_catalog.py
fix(models): keep generation models out of chat
2026-09-25 12:07:32 -05:00
checkpoints.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
claw.py
fix(backup): cap logged zip-backup errors and clarify salvage messages
2026-09-27 18:19:17 +05:30
cli_agent_setup_mixin.py
feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier
2026-09-29 23:54:34 +05:30
cli_auto_maintenance.py
refactor: separate checkpoint store maintenance from snapshots
2026-09-24 01:55:51 -04:00
cli_billing_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_chat_error_copy.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_chat_turn_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_commands_mixin.py
fix(cli): cancel /prompt compose on editor failure instead of shell fallback
2026-09-30 22:24:00 -05:00
cli_config_load.py
feat(fast): /fast ultrafast for GPT-6 Astra, priced at the served tier
2026-09-29 23:54:34 +05:30
cli_footer_split.py
…
cli_info_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_init_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_loops_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_modal_mixin.py
Clarify: one question shape and one result shape on every surface (skip, cancel, timeout and undelivered are told apart) (#127760)
2026-09-29 18:33:44 +05:30
cli_model_switch_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_output.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_process_dock.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_process_notifications.py
fix(process): heartbeats wake the agent only on new output, and never as a user bubble
2026-09-26 22:19:53 -05:00
cli_render.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_session_dock.py
feat(cli): live dock shows the standing /goal and queued prompts
2026-09-23 10:05:40 -07:00
cli_session_mixin.py
Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)
2026-09-29 07:44:13 +00:00
cli_shutdown.py
fix(cli): shut down the active agent's memory provider before lease release when cli.agent was retired
2026-09-30 14:23:52 -05:00
cli_single_query.py
fix(kanban): retry a failed worker turn in place; carry the recovered response
2026-09-30 22:30:35 -04:00
cli_status_bar_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_stream_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_subagent_monitor.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_terminal_input.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_terminal_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_tui_mixin.py
Clarify: one question shape and one result shape on every surface (skip, cancel, timeout and undelivered are told apart) (#127760)
2026-09-29 18:33:44 +05:30
cli_tui_runtime_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_unknown_command.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
cli_voice_mixin.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
clipboard.py
…
codex_models.py
fix(codex): send catalog/image credentials only to their own route
2026-09-25 21:27:06 +05:30
codex_runtime_plugin_migration.py
…
codex_runtime_switch.py
…
colors.py
…
commands_completion.py
…
commands_platforms.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
commands.py
fix(desktop): surface staged skill-write review on the desktop and TUI
2026-09-30 23:05:43 -05:00
completion.py
…
config_backups.py
…
config_check_diagnostics.py
fix(cli): judge saved selections the way the runtime does in config check
2026-09-29 20:34:45 +05:30
config_defaults.py
fix(desktop): resolve the Windows ssh client instead of hard-coding System32 OpenSSH
2026-09-29 22:56:15 -04:00
config_effective.py
Merge origin/main into ethie/pm-clean
2026-09-23 19:51:34 -04:00
config_env_routing.py
fix(config): a refused .env write fails instead of reporting success and half-applying
2026-09-28 02:00:41 -07:00
config_home.py
…
config_language.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
config_migrations.py
Merge main into chore/relay-0.9
2026-09-28 13:08:49 -07:00
config_providers.py
…
config_read_errors.py
fix(config): a save refused over bad YAML says to fix the file, not "try again"
2026-09-23 15:05:44 -07:00
config.py
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
console_engine.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
container_boot.py
fix(docker): boot a gateway.standalone profile's own s6 slot at container start (#120524, salvage #120525)
2026-09-28 04:04:23 -07:00
context_switch_guard.py
…
copilot_auth.py
…
credential_lifecycle.py
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
cron.py
fix(cli): served-profile guard only counts a host gateway that is ours and not our own (#121352, #120871, salvage #121574 #122169)
2026-09-28 13:30:57 -07:00
curator.py
refactor(curator): read the usage map once per purge
2026-09-27 02:33:57 +05:30
curses_ui.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
dashboard_procs.py
fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)
2026-09-28 04:44:29 -07:00
dashboard_register.py
…
data_cleanup_holders.py
…
data_cleanup.py
…
debug.py
fix(debug-share): capture update.log and desktop-update-handoff.log
2026-09-29 21:48:25 -05:00
default_soul.py
…
desktop_build_lock.py
fix(desktop): serialize the mutable build preflight behind a cross-process lock
2026-09-29 19:49:52 -05:00
desktop_console.py
…
desktop_update_verify.py
fix(desktop): stop a stale hand-off root failing a healthy update
2026-09-26 21:43:07 -05:00
diagnostics_upload.py
…
dingtalk_auth.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
doctor_config.py
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
doctor_connectivity.py
…
doctor_live.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
doctor_platform.py
fix: skip the extras lookup when nothing configured is missing; pin probe encoding
2026-09-28 06:42:00 -07:00
doctor_report.py
…
doctor_state.py
refactor: separate checkpoint store maintenance from snapshots
2026-09-24 01:55:51 -04:00
doctor_tools.py
fix: Hermes never falls back to the user's node/npm/npx/uv
2026-09-27 22:04:26 -07:00
doctor.py
feat(relay): name the Relay plugin files in doctor and the startup log
2026-09-29 12:16:43 -04:00
dump.py
fix(debug): mask every secret fallback field per agent.redact policy, not only api_key
2026-09-29 05:59:25 -04:00
env_loader.py
fix(secret-sources): revoke a removed source's value from os.environ
2026-09-29 22:57:48 -04:00
fallback_cmd.py
…
fallback_config.py
fix(cron): a pinned job never falls back to the global fallback chain (#120312)
2026-09-23 10:42:18 -04:00
focus_view.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
foreign_sessions_browser.py
…
foreign_sessions.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
free_tier_bootstrap.py
Free tier: separate 'account exists' from 'runs this chat', and stop the mint from writing active_provider (#127486)
2026-09-29 07:44:13 +00:00
fs_utils.py
…
gateway_command_errors.py
…
gateway_enroll.py
…
gateway_launchd.py
fix(gateway): name the display-wake stall in the launchd wrapper docstring; gate the macOS wrapper test with the platforms marker
2026-09-27 01:04:39 +05:30
gateway_migrate_guards.py
…
gateway_migrate.py
fix(review): a named profile's restart --all never runs the root gateway in-process
2026-09-28 04:04:23 -07:00
gateway_multiplex_mode.py
fix(review): a second tenant's host gateway never attaches, refuses, or reports as ours (#121352)
2026-09-28 13:30:57 -07:00
gateway_multiplex_s6.py
fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly
2026-09-23 10:58:15 -07:00
gateway_multiplex_served.py
…
gateway_profile_lifecycle.py
fix(gateway): explain why parked restart unparks and status reads runtime first (#124553, salvage #124669)
2026-09-28 13:30:57 -07:00
gateway_setup_wizard.py
fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer
2026-09-23 07:48:32 -07:00
gateway_supervised_restart.py
…
gateway_windows_legacy.py
…
gateway_windows.py
fix(update): scope Windows gateway lifecycle to current install
2026-09-27 02:57:28 -07:00
gateway.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
git_credentials.py
…
github_api.py
…
gitlock.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
goal_command.py
…
goals.py
fix(goals): pause when the session workspace is missing
2026-09-29 18:09:20 -05:00
gui_uninstall.py
fix(desktop): hermes update puts back an installed Hermes.app that went missing
2026-09-29 02:37:33 +05:30
heartbeat.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
home_data_layout.py
…
hooks.py
feat(telemetry): per-model tool-call quality, friction and context-peak counters
2026-09-28 12:43:03 -07:00
image_provenance.py
…
init_command.py
…
input_sanitize.py
…
install_identity.py
…
inventory.py
fix: Make MoA strictly opt-in in model pickers (#63353)
2026-09-28 10:56:47 -05:00
journey.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
kanban_boards.py
…
kanban_db_connect.py
…
kanban_db_dispatch.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
kanban_db_graph.py
…
kanban_db_notify.py
…
kanban_db_workspace.py
fix(kanban): count only real gc removals and resolve kanban home once
2026-09-27 18:29:18 +05:30
kanban_db.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
kanban_decompose.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
kanban_diagnostics.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
kanban_ops.py
fix(kanban): count only real gc removals and resolve kanban home once
2026-09-27 18:29:18 +05:30
kanban_output.py
…
kanban_parser.py
…
kanban_pr_acceptance_store.py
fix(review): PR acceptance never falls through to the launch user's gh login
2026-09-28 03:37:09 -07:00
kanban_pr_acceptance.py
fix(review): PR acceptance never falls through to the launch user's gh login
2026-09-28 03:37:09 -07:00
kanban_specify.py
fix(kanban): board identity follows the bound profile override, not the launch env
2026-09-23 08:09:47 -07:00
kanban_swarm.py
…
kanban_transfer.py
refactor: make install-stamp.json the single runtime version identity
2026-09-23 11:41:01 -04:00
kanban.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
lifecycle.py
…
linux_desktop_entry.py
fix(desktop): Linux launcher targets a CLI that can serve the app and skips the rebuild (#126650)
2026-09-28 12:24:52 -05:00
logs.py
fix(logs): parse the update/handoff logs' ISO-8601 stamps; cover them in the LOG_FILES stamp contract
2026-09-29 21:48:25 -05:00
loops.py
…
macos_signing.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
macos_tcc_anchor.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
main_agent_cmds.py
…
main_dashboard.py
fix(cli): select dashboard/serve backends by entrypoint + subcommand tokens, not argv substrings (#121156, salvage #121243)
2026-09-28 04:44:29 -07:00
main_dep_hints.py
fix(cli): name Windows Smart App Control when it blocks the dashboard runtime
2026-09-25 16:28:14 -05:00
main_desktop.py
fix(desktop): serialize the mutable build preflight behind a cross-process lock
2026-09-29 19:49:52 -05:00
main_install_repair.py
fix: skip the extras lookup when nothing configured is missing; pin probe encoding
2026-09-28 06:42:00 -07:00
main_platform_setup.py
fix: retain WhatsApp runtime binary guards under optimized Python
2026-09-24 01:55:51 -04:00
main_profile_recovery.py
docs(profiles): say the interactive uninstall menu still offers a full wipe
2026-09-29 15:45:52 +05:30
main_provider_setup.py
…
main_tui_launch.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
main_web_build.py
…
main.py
fix(update): mark current updater frames with a sentinel, not missing locals
2026-09-29 16:47:48 +05:30
managed_scope.py
Merge remote-tracking branch 'origin/main' into ethie/pm-clean
2026-09-23 15:26:34 -04:00
managed_uv.py
…
mcp_app_detection.py
…
mcp_catalog.py
feat(telemetry): record MCP server installs as extension-install events
2026-09-28 12:43:03 -07:00
mcp_config.py
feat(telemetry): record MCP server installs as extension-install events
2026-09-28 12:43:03 -07:00
mcp_picker.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
mcp_security.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
mcp_startup.py
fix(mcp): connect servers added to config on the next agent build
2026-09-26 17:04:25 -05:00
mem_trim.py
fix(encoding): read kernel pseudo-files as plain utf-8
2026-09-24 11:50:30 -04:00
memory_oauth.py
fix(memory): resolve OAuth flow in requested profile scope
2026-09-23 07:49:35 -07:00
memory_provider_migration.py
Merge remote-tracking branch 'origin/main' into ethie/pm-clean
2026-09-23 10:52:20 -04:00
memory_setup.py
refactor(pm): one plugin-input request for sync_venv and venv_is_current
2026-09-24 14:08:21 -04:00
middleware.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
migrate.py
…
moa_cmd.py
…
moa_config.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
model_catalog.py
fix(models): catalog SWR refresh writes the requesting profile's cache (#103778, salvage #103779)
2026-09-28 05:37:55 -07:00
model_cost_guard.py
…
model_data_policy_guard.py
…
model_normalize.py
…
model_search.py
…
model_selection_guards.py
…
model_setup_flows_azure.py
…
model_setup_flows_bedrock.py
feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled
2026-09-28 12:43:03 -07:00
model_setup_flows_common.py
feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled
2026-09-28 12:43:03 -07:00
model_setup_flows_custom.py
…
model_setup_flows.py
feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled
2026-09-28 12:43:03 -07:00
model_switch_providers.py
fix(model-picker): stop the 50-model cap cutting the Nous and OpenRouter free tier
2026-09-29 12:55:46 -07:00
model_switch.py
fix(config): keep built-in model validation for settings-only provider blocks
2026-09-29 20:57:57 -05:00
models_catalog_static.py
feat(models): add stealth/space-bunny-alpha to the OpenRouter curated list
2026-09-29 12:55:46 -07:00
models_detect.py
…
models_local.py
…
models_pricing.py
…
models_profile_cache.py
…
models_reasoning_caps.py
…
models_validate.py
fix(model): validate Nebius relay models against base URL
2026-09-24 09:40:41 -04:00
models.py
fix(fast): send service_tier on the openai-api route and accept operator OpenAI tiers
2026-09-30 14:23:51 -04:00
nous_account.py
…
nous_auth_keepalive.py
fix(auth): scope Nous keepalive on multiplexed gateways
2026-09-23 06:46:02 -07:00
nous_billing.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
nous_subscription.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
npm_engine.py
…
old_updater_deps.py
…
old_updater_main.py
…
onepassword_secrets_cli.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
oneshot.py
Clarify: one question shape and one result shape on every surface (skip, cancel, timeout and undelivered are told apart) (#127760)
2026-09-29 18:33:44 +05:30
pairing.py
…
partial_compress.py
…
personality.py
…
pets.py
…
platform_actions.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
platforms.py
…
plugin_capabilities.py
…
plugin_catalog_presence.py
…
plugin_catalog.py
fix(plugins): reuse the bounded git probe for catalog freshness
2026-09-30 22:30:18 -05:00
plugin_compat.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
plugin_dev.py
…
plugin_events.py
fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop
2026-09-24 02:03:03 -07:00
plugin_packs.py
feat(telemetry): record plugin installs as extension-install events
2026-09-28 12:43:03 -07:00
plugin_validate_desktop.py
Merge remote-tracking branch 'origin/main' into ethie/pm-clean
2026-09-24 05:10:12 -04:00
plugin_validate_locales.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
plugin_validate.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
plugins_activation_live.py
…
plugins_activation.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
plugins_admission.py
refactor(pm): one plugin-input request for sync_venv and venv_is_current
2026-09-24 14:08:21 -04:00
plugins_cadence.py
…
plugins_cmd_capabilities.py
refactor(cli): split plugins_cmd.py into topical siblings
2026-09-24 11:50:29 -04:00
plugins_cmd_catalog.py
fix(plugins): keep the catalog date probe off lazy fetches on treeless clones
2026-09-30 22:30:18 -05:00
plugins_cmd_git.py
refactor(cli): split plugins_cmd.py into topical siblings
2026-09-24 11:50:29 -04:00
plugins_cmd_install.py
feat(telemetry): record plugin installs as extension-install events
2026-09-28 12:43:03 -07:00
plugins_cmd_listing.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
plugins_cmd_remove.py
refactor(cli): split plugins_cmd.py into topical siblings
2026-09-24 11:50:29 -04:00
plugins_cmd_toggle.py
fix(plugins): picker tick purges every alias of the disable; report real flips
2026-09-25 21:19:04 +05:30
plugins_cmd_update.py
fix(plugins): carry user files across staged updates
2026-09-27 01:42:52 +05:30
plugins_cmd.py
Merge main into chore/relay-0.9
2026-09-28 12:18:42 -07:00
plugins_discovery.py
Merge origin/main into chore/relay-0.9
2026-09-28 09:22:11 -07:00
plugins_dispatch.py
…
plugins_ledger.py
…
plugins_loader.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
plugins_manifest.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
plugins_provenance.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
plugins_settings.py
…
plugins_state.py
…
plugins_transaction.py
refactor(plugins): one helper attributes scan blocks to preserved user files
2026-09-27 01:42:52 +05:30
plugins_updates.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
plugins.py
fix(cron): routed fires are multiplexed at the worker handoff; managed keys keep policy precedence
2026-09-29 22:57:48 -04:00
portal_cli.py
feat(web): serve managed search through Perplexity
2026-09-24 16:17:16 -04:00
post_update.py
fix(update): drop the cached live plugin catalog on boot after a code change
2026-09-27 06:26:52 -05:00
process_identity.py
fix(update): a stopped-but-unreaped dashboard is no longer a pre-update survivor
2026-09-27 21:29:39 -07:00
profile_channels.py
fix(config): make destructive replacements explicit
2026-09-29 20:24:19 -04:00
profile_cmd.py
…
profile_describer.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
profile_distribution.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
profile_identity.py
…
profile_memory_config.py
…
profiles_service_cleanup.py
fix(review): a named profile's restart --all never runs the root gateway in-process
2026-09-28 04:04:23 -07:00
profiles.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
projects_cmd.py
…
projects_db.py
…
prompt_size.py
…
prompt_stash.py
…
provider_catalog.py
…
providers.py
fix(providers): a timeout-only providers.<name> block no longer shadows the builtin
2026-09-29 20:57:57 -05:00
proxy_cli.py
…
psutil_android.py
…
pt_input_extras.py
…
pty_bridge.py
…
pty_session.py
fix(review): supersede displaced PTY viewer, route project tile by active source
2026-09-28 04:59:38 -07:00
quiet_single_query.py
…
relaunch.py
fix(metrics): startup latency counts once per client launch, never after an in-place exec
2026-09-28 12:43:03 -07:00
relay_plugin_cutover.py
…
relay_plugin_migrate.py
…
release_channels.py
fix(update): only an explicit hermes update retries channel reads
2026-09-27 03:41:42 -07:00
resource_limits.py
…
route_identity.py
…
runtime_paths.py
…
runtime_provider_backends.py
refactor(auth): share the key-prefix check; reach it via rp in the openrouter resolver
2026-09-27 00:56:11 +05:30
runtime_provider_custom.py
…
runtime_provider.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
runtime_state.py
fix(pm): close the lease create→flock race on the writer side, no grace window
2026-09-28 04:44:29 -07:00
sandbox_image_switch.py
feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)
2026-09-28 03:34:07 -07:00
secret_prompt.py
…
secrets_cli.py
…
security_advisories.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
security_audit_startup.py
fix(encoding): read kernel pseudo-files as plain utf-8
2026-09-24 11:50:30 -04:00
security_audit.py
…
send_cmd.py
…
service_manager.py
fix(docker): stop sourcing the relocatable venv's activate from sh
2026-09-24 12:30:00 -04:00
session_export_html.py
…
session_export_md.py
…
session_export.py
fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen
2026-09-23 22:22:32 +05:30
session_filters.py
…
session_listing.py
fix(sessions): add sessions.show_subagents to list delegate runs
2026-09-26 20:40:40 -05:00
session_lost_and_found.py
fix: key the tools[] pin by code version; never re-add config-excluded tools
2026-09-23 15:43:51 -07:00
session_recap.py
…
session_recovery.py
fix(recovery): repair out-of-window timestamp cells in the recovered database
2026-09-25 10:46:54 -05:00
session_reset_retirement.py
fix(gateway): warn when config still declares a retired idle/daily session_reset
2026-09-28 15:54:01 +05:30
session_schema_history.py
fix(sessions): un-hide an auto-archived chat when it is resumed or compressed
2026-09-28 21:03:09 -04:00
sessions_cmd_browse.py
fix(sessions): tell the user when a delete is refused for a live turn
2026-09-27 20:49:04 +05:30
sessions_cmd_journal_mode.py
fix(sessions): let set-journal-mode --force waive only a failed holder scan
2026-09-24 18:08:24 +05:30
sessions_cmd_repair_profiles.py
…
sessions_cmd.py
fix(sessions): share the write-guard filter and trim repeated walks
2026-09-27 20:49:04 +05:30
sessions_repair_profiles.py
Merge origin/main into ethie/pm-clean
2026-09-23 10:43:45 -04:00
setup_hidden_env.py
…
setup_migration.py
…
setup_platforms.py
…
setup_profile.py
refactor(onboarding): remove the intro cinematic, the guided-onboarding tests, and their comments (#126139)
2026-09-28 08:33:43 +00:00
setup_quick.py
feat(telemetry): record setup completion from the CLI wizard
2026-09-28 12:43:03 -07:00
setup_summary.py
…
setup_terminal.py
feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)
2026-09-28 12:33:01 -07:00
setup_tts.py
…
setup_whatsapp_cloud.py
…
setup.py
docs(telemetry): consent copy names the v5 usage categories
2026-09-28 12:43:03 -07:00
shared_profile_warning.py
…
shared_session_attach.py
…
sizefmt.py
…
skills_config.py
…
skills_hub.py
feat(telemetry): record skill installs as extension-install events
2026-09-28 12:43:03 -07:00
skin_cmd.py
…
skin_engine.py
fix(desktop): pass skin customCSS through to desktop theme context
2026-09-25 20:00:57 -05:00
slack_cli.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
slash_exec.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
source_build.py
fix(desktop): serialize the mutable build preflight behind a cross-process lock
2026-09-29 19:49:52 -05:00
source_check.py
fix(update): keep never-pushed and unmerged branches pinned in source check
2026-09-28 21:02:35 -04:00
source_completion.py
fix(update): expose PM's git only for git checkouts, and record the installer's copy
2026-09-27 02:54:03 -07:00
source_releases.py
fix(update): follow the main branch when its channel record is unpublished
2026-09-24 14:23:48 -04:00
source_stamp.py
fix(update): every published checkout identity moves the bootstrap receipt
2026-09-23 22:05:57 -04:00
sqlite_runtime.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
sqlite_safe_read.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
sqlite_util.py
…
ssh_workspace_fs.py
fix(desktop): secure SSH workspace browsing
2026-09-29 15:28:19 -05:00
stale_modules.py
…
status_auth.py
fix(time): tolerate Windows locale strftime errors
2026-09-23 18:29:35 -05:00
status_bar_git.py
…
status_report.py
fix(status): render the session profile home
2026-09-27 07:43:23 -05:00
status.py
feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)
2026-09-28 12:33:01 -07:00
stderr_timestamp.py
fix(logs): hermes logs --since/--level handle unstamped lines and MCP output
2026-09-28 19:02:20 +05:30
stdio.py
…
steward.py
fix(pm): resolve the install stamp in pm.paths so sealed stages can read it
2026-09-24 11:12:27 -04:00
stream_json.py
…
suggestions_cmd.py
…
telegram_managed_bot.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
terminal_breadcrumbs.py
…
terminal_notify.py
…
timefmt.py
…
timeouts.py
…
tips.py
feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)
2026-09-28 14:16:18 -07:00
tool_availability_notices.py
…
tools_config_cua.py
fix(updates/win): click-session poll, Intel-Mac installer docs, cua-driver opt-in autostart
2026-09-26 17:09:16 -05:00
tools_config_mcp.py
…
tools_config_post_setup.py
fix(browser): ship the Browser Use CLI engine in every install, Desktop included
2026-09-27 23:53:40 -07:00
tools_config_providers.py
feat(web): serve managed search through Perplexity
2026-09-24 16:17:16 -04:00
tools_config.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
toolset_scope.py
…
toolset_validation.py
perf(cli): scan platform manifests only for names the cheap checks cannot place
2026-09-29 20:34:45 +05:30
uninstall.py
fix(uninstall): mark darwin-only os.getuid as windows-footgun ok
2026-09-26 21:00:12 -04:00
update_abort_recovery.py
fix(update): restart hermes-dashboard* systemd units during fleet update
2026-09-27 14:09:15 -05:00
update_channel.py
…
update_cmd_check.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
update_cmd_common.py
…
update_cmd_config.py
fix(update): restore cron agent-job prompts degraded during the update window
2026-09-29 20:58:24 -05:00
update_cmd_drain_report.py
fix(gateway): restart wait survives a non-finite drain; tighten its tests
2026-09-26 20:07:47 +05:30
update_cmd_fleet_checkout.py
fix(cli): pin utf-8 decoding on all text-mode subprocess readers
2026-09-25 14:22:12 -04:00
update_cmd_fleet_gatewayless.py
fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)
2026-09-23 18:48:33 -05:00
update_cmd_fleet.py
fix: log missing successor evidence for a planned gateway
2026-09-29 21:50:16 -05:00
update_cmd_git.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
update_cmd_maint.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
update_cmd_stale_survivors.py
…
update_cmd_stash.py
fix(update): an autostash the update could not restore ends the update partial, never 'Update complete!'
2026-09-28 05:33:25 -07:00
update_cmd_validation.py
…
update_cmd_windows.py
fix(review): all-external fleet proves nothing for a SHA-less marker; holder argv strips both quote kinds
2026-09-28 04:44:29 -07:00
update_cmd_zip.py
feat(metrics): hermes.update.run/stage derived from the final update receipt
2026-09-28 12:43:03 -07:00
update_cmd.py
fix(cli,desktop): hide every console-subsystem child spawn on Windows
2026-09-29 18:49:58 -05:00
update_completion.py
feat(metrics): hermes.update.run/stage derived from the final update receipt
2026-09-28 12:43:03 -07:00
update_contract.py
refactor(update): table-drive the steward refusal rungs
2026-09-24 14:08:22 -04:00
update_finish.py
refactor: make install-stamp.json the single runtime version identity
2026-09-23 11:41:01 -04:00
update_fleet_scope.py
fix(update): judge Windows gateway ownership by home, warn on unreadable ones
2026-09-27 02:57:28 -07:00
update_handoff.py
fix(update): start the post-swap child in the checkout
2026-09-23 06:51:47 -07:00
update_host_obligation.py
fix(update): trim SHA-less obligation salvage to the checkout fallback (#125952, salvage #125964)
2026-09-28 04:44:29 -07:00
update_inventory.py
fix: only unresolved gateway rows make successor evidence ambiguous
2026-09-29 21:50:16 -05:00
update_lock.py
fix(update): decide ancestry link by link so an unreadable /proc/1 cannot hide the orchestrator
2026-09-29 20:58:59 -05:00
update_owning_install.py
chore: read .project-root BOM-tolerantly; drop a trailing blank line
2026-09-28 05:33:25 -07:00
update_receipt.py
fix(update): record Desktop's correlation_id in the update receipt
2026-09-28 21:02:29 -04:00
update_restart_recovery.py
fix(update): restart hermes-dashboard* systemd units during fleet update
2026-09-27 14:09:15 -05:00
update_serve_obligations.py
…
update_serve_resume.py
…
update_stage.py
…
urllib_security.py
…
vault.py
…
venv_sync.py
fix(desktop,pm): stop the boot parking on a failed update receipt and bound completion retries (#122206)
2026-09-29 20:57:51 -05:00
vercel_auth.py
…
verify_cmd.py
…
version_info.py
feat(metrics): hermes.update.run/stage derived from the final update receipt
2026-09-28 12:43:03 -07:00
voice.py
…
web_deps.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
web_git.py
fix(worktree): refresh any valid branch name used as a base
2026-09-28 16:23:22 +05:30
web_models.py
fix(desktop): warm local STT on mic-open so cold model load stops timing out transcription (#105955)
2026-09-29 11:40:36 -05:00
web_read_coalescing.py
…
web_server_chat.py
fix(auth): accept provider-verified session tokens in gated WS auth
2026-09-29 21:39:17 -05:00
web_server_config.py
feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)
2026-09-28 12:33:01 -07:00
web_server_cron.py
Merge remote-tracking branch 'origin/main' into ethie/pm-clean
2026-09-23 15:26:34 -04:00
web_server_dashboard.py
fix(dashboard): plugin API routes run in the request profile's scope (#120310, salvage #120332)
2026-09-28 05:37:55 -07:00
web_server_files.py
…
web_server_gateway.py
fix(dashboard): name -p default for unnamed gateway verbs on the default home
2026-09-28 12:18:58 -07:00
web_server_idle_exit.py
…
web_server_idle_proof.py
…
web_server_lifecycle.py
fix(serve): shut down gracefully on parent death instead of os._exit
2026-09-29 19:06:35 -05:00
web_server_mcp.py
fix(profile-scope): bind home and secret tokens inside the try that resets them
2026-09-23 06:46:02 -07:00
web_server_memory.py
…
web_server_messaging.py
refactor: make install-stamp.json the single runtime version identity
2026-09-23 11:41:01 -04:00
web_server_oauth.py
fix(dashboard): xAI and MiniMax sign-ins save into the profile they started in, never after a cancel
2026-09-28 12:18:58 -07:00
web_server_profiles.py
fix(dashboard): cron delivery targets, blueprints, recommended default, voice config, official skills and debug share answer an unknown ?profile= with 404
2026-09-28 12:18:58 -07:00
web_server_sessions.py
…
web_server_skew_exit.py
fix(serve): retire an SSH-isolated backend once the install moves to new code
2026-09-25 12:09:37 -05:00
web_server.py
serve: retire desktop-owned local backends on code skew; guard every model-mutating path (#99859)
2026-09-29 20:57:23 -05:00
webhook.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
win_pty_bridge.py
Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)
2026-09-28 10:21:41 -07:00
windows_ssh_runtime.py
…
worktree_cmd.py
…
worktree_gc.py
…
worktree_ops.py
refactor(update): tighten the partial-clone heal after review
2026-09-29 15:24:15 +05:30
write_approval_commands.py
refactor(memory): derive a payload's destructive ops in one place
2026-09-24 15:38:22 +05:30
xai_retirement.py
Merge origin/main into ethie/pm-clean
2026-09-23 19:51:34 -04:00