teknium1 dad0057271 fix(plugin-guard): v8 — four intake false-positive classes step down where inert ...

Real catalog pins from the 2026-09-20 intake batch scored on text that cannot run on
the installing host:

1. `.github/workflows/*.yml` — a CI step's own `os.environ['RUNNER_TEMP']` read scored
   `python_os_environ/high` and made a clean plugin `caution` (remarkable). A workflow
   runs on the forge's runner; it now takes the README prose cap (one step down,
   agent-facing shapes like `curl | sh` keep full severity).
2. "pip install" inside a user-facing message literal (`"... no pip install is needed"`,
   image-utils) scored `unpinned_pip_install/medium`; mid-literal, non-command position,
   no exec verb on the line → low. `"pip install x"`, `python -m pip install`, `uv pip`,
   `subprocess.run("pip install …")` keep medium.
3. `desktop_surface_findings()` was being run by batch tooling over every `*.js`/`*.mjs`
   in a repo and flagged a Node sidecar's lazy `import('jszip')` (remarkable). The
   product check was already scoped to `desktop/`; expose that scope as
   `is_desktop_surface()` / `desktop_surface_hits()` so tooling shares it.
4. `127.0.0.1:<port>` (README, .mcp.json, client defaults) scored `hardcoded_ip_port` as
   network egress; a line whose every IP:port is loopback → low. A routable address on
   the line keeps medium.

Every finding stays in the report. PLUGIN_SCANNER_VERSION → plugin-guard-v8 so cached
verdicts on quarantined pins are re-evaluated.

2026-09-20 11:49:00 -07:00

..

dashboard_auth

…

local_runtime

fix: trim llamacpp salvage to invariant tests, drop redundant config load, document fixed-port servers

2026-09-20 10:03:32 -07:00

observability

fix(relay): shared-metrics task close skips a scope buried under a concurrent turn

2026-09-19 23:42:20 -07:00

proxy

…

subcommands

fix(peer): hermes peer dm is a 4th Bot Mode silence delivery door

2026-09-20 10:16:51 -07:00

web_routers

fix(models): credit the managed local-models library in /model validation

2026-09-20 11:14:00 -07:00

__init__.py

…

_early_recovery.py

fix(updater): import probe children never resolve external secret sources

2026-09-15 04:11:11 -07:00

_install_repair.py

…

_parser.py

fix(cli): --help lists gateway status and the --profile long form; trim epilogue tests

2026-09-18 09:50:52 -07:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

fix(cron): spawn bot-chat delivery from a live cwd

2026-09-20 11:30:36 -07:00

_subprocess_compat.py

fix(tools): bounded probes contain Windows descendants in a Job Object so the Git Bash grandchild dies

2026-09-19 02:36:56 -07:00

active_sessions.py

fix(tui,active_sessions): gate-review follow-ups for the idle bot-delivery throttle

2026-09-20 15:16:35 +05:30

agent_import_sync.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_import.py

fix(import-sync): never clobber a locally edited imported skill; keep digest on errors

2026-09-15 03:58:44 -07:00

agent_plugins.py

…

AGENTS.md

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

anon_auth.py

refactor(nous): one is_anonymous_agent seam for the five identity reads

2026-09-17 12:28:25 +05:30

anon_sign_in_cli.py

…

anon_sign_in.py

fix(free-tier): review round 2 — route-gate the allowance verdict, keep policy/billing 403s, pool the provision RPC, guard the retry race

2026-09-15 20:44:42 +05:30

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix: derive suggest globs from the raw command, class-key when redaction hits them

2026-09-15 04:57:29 -07:00

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_codex.py

feat(auth): opt-in browser authorization-code + PKCE login for openai-codex

2026-09-19 12:11:58 -07:00

auth_commands.py

feat(auth): OAuth-shaped provider plugins register, log in and refresh through their profile

2026-09-19 20:45:06 -07:00

auth_constants.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

auth_device_flow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_error_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

fix(auth): Nous unusable-JWT-without-refresh-token is a terminal pool failure

2026-09-18 10:17:59 -07:00

auth_oauth_grants.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_oauth_pkce_plugin.py

feat: declarative OAuth Authorization-Code+PKCE login for provider plugins

2026-09-19 21:15:16 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): a user provider plugin's endpoint overrides the bundled row too

2026-09-20 10:06:29 -07:00

auth_qwen.py

fix: memory-plugin and Qwen-CLI config JSON survives Windows BOM

2026-09-15 03:38:29 -07:00

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

auth_zai_kimi.py

fix(picker): curated fallback for cold OAuth rows; Z.AI failed-probe negative cache; trim salvage

2026-09-18 11:01:52 -07:00

auth.py

fix(auth): reject the placeholder secrets this repo ships as examples

2026-09-20 10:18:48 -07:00

azure_detect.py

fix(cli): bound Azure detect response reads

2026-09-19 09:23:22 -07:00

backend_retirement.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

backup.py

fix(backup): an incomplete archive never prunes the last complete ones

2026-09-19 03:43:58 +05:30

bang_shell.py

…

banner.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

blueprint_cmd.py

…

browser_connect.py

fix: only call an auth DB backup "locked" when it made no progress

2026-09-16 16:53:40 -07:00

build_info.py

…

bundles.py

…

callbacks.py

…

checkpoints.py

fix(checkpoints): clear-legacy trims to two real-path tests, aligns failure line with the log

2026-09-15 18:24:22 -07:00

claw.py

…

cli_agent_setup_mixin.py

fix(cli): release the old agent's clients before dropping it for a rebuild

2026-09-19 09:43:20 -07:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

fix: WAF 403s stop reading as key rejections; anthropic_messages routes send custom_providers extra_headers

2026-09-19 09:57:21 -07:00

cli_chat_turn_mixin.py

chore: merge origin/main (resolve website/docs/user-guide/features/fallback-providers.md)

2026-09-19 10:47:48 -07:00

cli_commands_mixin.py

fix: effort pickers and /reasoning status say what ultra really sends

2026-09-19 10:20:55 -07:00

cli_info_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_loops_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_modal_mixin.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

cli_model_switch_mixin.py

chore: merge origin/main (resolve website/docs/integrations/providers.md)

2026-09-19 10:47:48 -07:00

cli_output.py

fix: sessions list prints a footer when --limit cuts the listing

2026-09-15 18:25:46 -07:00

cli_process_notifications.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

cli_session_mixin.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

cli_status_bar_mixin.py

feat: label a model.context_length pin and warn once when it disagrees with the provider

2026-09-19 10:28:34 -07:00

cli_stream_mixin.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

cli_subagent_monitor.py

…

cli_terminal_mixin.py

fix(cli): retire the 0.0 monotonic sentinel in the remaining input-mode throttles

2026-09-15 04:08:53 -07:00

cli_tui_mixin.py

fix(tui): keep unselected list rows on the cursor column; trim tests

2026-09-18 09:55:21 -07:00

cli_unknown_command.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

cli_voice_mixin.py

…

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

fix(codex): remove dead gpt-5.3-codex from curated fallback list

2026-09-19 10:22:33 -07:00

codex_runtime_plugin_migration.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

codex_runtime_switch.py

feat(codex): configure app-server binary

2026-09-19 09:30:56 -07:00

colors.py

…

commands_completion.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

commands_platforms.py

…

commands.py

fix(desktop): /reasoning hide|show gates Thinking blocks immediately

2026-09-18 20:55:49 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

config_effective.py

fix: stat signatures cover inode + ctime everywhere config identity is cached

2026-09-15 06:29:50 -07:00

config_env_routing.py

fix(config): drop the "Hermes does not read this" note on config set

2026-09-15 21:47:48 -07:00

config_home.py

fix(security): secure HERMES_HOME when only an ancestor path is a symlink

2026-09-15 05:25:39 -07:00

config_migrations.py

fix(config): tolerate malformed nested values in config migrations

2026-09-19 23:41:10 -07:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config.py

fix: config get/unset still reach a legacy gateway.platforms-only value (review follow-up)

2026-09-20 10:08:37 -07:00

console_engine.py

fix(sessions): one-shot runs get a distinct oneshot source that pickers hide

2026-09-17 09:06:59 -07:00

container_boot.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

context_switch_guard.py

fix(cli): model-switch warning quotes the capped compression trigger

2026-09-19 16:28:57 +05:30

copilot_auth.py

…

credential_lifecycle.py

…

cron.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

curator.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

curses_ui.py

…

dashboard_procs.py

fix(dashboard): owner home for a pid follows the real profile resolver

2026-09-18 09:38:01 -07:00

dashboard_register.py

…

debug.py

…

default_soul.py

…

dep_ensure.py

…

desktop_console.py

fix(desktop): preserve source freshness and console diagnostics

2026-09-16 23:13:20 -04:00

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

feat(doctor): resolve every routed auxiliary.<task> block and report the dead ones

2026-09-19 12:30:32 -07:00

doctor_connectivity.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

doctor_live.py

…

doctor_platform.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_report.py

…

doctor_state.py

refactor(doctor): share the holder pid renderer and mirror the guard's remedy

2026-09-20 00:19:04 +05:30

doctor_tools.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

doctor.py

feat: hermes update and doctor tell you when /rollback checkpoints are on and large

2026-09-15 12:06:08 -07:00

dump.py

…

env_loader.py

fix(env): a parent-injected dashboard session token survives the .env reload

2026-09-20 10:39:01 -07:00

fallback_cmd.py

…

fallback_config.py

fix: surface the pre-agent provider fallback on the TUI/Desktop gateway and cron too

2026-09-19 01:27:29 -07:00

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

fix(setup): reconcile_record() only reconciles the launch profile's record

2026-09-18 12:52:36 -07:00

gateway_command_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

gateway_enroll.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex resumes from live state, compensates the whole destructive phase, and refuses an unknown default principal

2026-09-16 00:33:03 -07:00

gateway_migrate.py

feat(gateway): gateway.multiplex_profiles defaults to on, gated by a boot-time serve guard

2026-09-16 08:57:18 -07:00

gateway_multiplex_mode.py

gateway status shows why an unset-default gateway stayed standalone

2026-09-16 08:57:18 -07:00

gateway_multiplex_served.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

gateway_supervised_restart.py

fix: hand back a custom-unit gateway even when identify answers systemd/launchd

2026-09-15 04:07:13 -07:00

gateway_windows.py

fix(gateway-windows): decode schtasks strictly as UTF-8 first, one localized denial vocabulary, seam tests

2026-09-20 10:59:28 -07:00

gateway.py

fix(windows): ask gateway setup install questions once and stop after UAC hand-off

2026-09-20 10:58:14 -07:00

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

gitlock.py

fix(update): drop the _IS_WINDOWS test flag; prove the read-only sweep on a real Windows host

2026-09-20 10:02:55 -07:00

goal_command.py

…

goals.py

fix(auth): a revoked Codex grant names openai-codex, the failing profile and the raw error

2026-09-18 10:00:29 -07:00

gui_uninstall.py

…

heartbeat.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

hooks.py

fix(cli): hooks test prints the decision for failing hooks

2026-09-20 10:19:25 -07:00

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

inventory.py

test: trim the aggregator-twin tests to two invariants; drop the import guard

2026-09-20 10:06:50 -07:00

journey.py

…

kanban_boards.py

…

kanban_db_connect.py

fix(kanban): heal every nullable v1 tasks column and index assignee after the ALTER pass

2026-09-16 16:58:43 -07:00

kanban_db_dispatch.py

fix(kanban): decode the guard's comment body once

2026-09-20 10:13:26 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

fix(gateway): close sender-routing gaps found in review

2026-09-18 22:36:24 -07:00

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

fix(kanban): order the board's done column by completion time

2026-09-20 10:18:14 -07:00

kanban_decompose.py

fix(kanban): decomposed cards fall back to the root task's assignee, never the dispatcher's own profile

2026-09-18 09:48:41 -07:00

kanban_diagnostics.py

fix(kanban): dispatcher blocks a card on the first terminal provider error

2026-09-18 20:34:16 -07:00

kanban_ops.py

fix(kanban): reap workers that outlive their finished run

2026-09-15 18:35:32 -07:00

kanban_output.py

…

kanban_parser.py

fix(kanban): add --body-file to create for shell-proof bodies

2026-09-20 10:24:53 -07:00

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

…

kanban_specify.py

fix(kanban): headless specify/decompose aux calls carry a relay session key

2026-09-15 18:33:43 -07:00

kanban_swarm.py

…

kanban_transfer.py

…

kanban.py

fix(kanban): read --body-file as UTF-8 and pin it through the real parser

2026-09-20 10:24:53 -07:00

lifecycle.py

…

linux_desktop_entry.py

fix(linux): a PATH hit inside the checkout never persists as desktop entry Exec

2026-09-16 16:56:22 -07:00

logs.py

…

loops.py

refactor(gateway): idle gates live in run_idle_gates; row semantics live with loops/heartbeat

2026-09-17 20:56:27 +05:30

macos_tcc_anchor.py

…

main_agent_cmds.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_dashboard.py

fix(cli): skip malformed launchd plists instead of aborting update cleanup (#114142)

2026-09-18 10:10:05 -07:00

main_dep_hints.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_desktop.py

fix(desktop): stop a live renderer before the POSIX stage-and-swap rename

2026-09-20 10:05:53 -07:00

main_install_repair.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

main_platform_setup.py

…

main_provider_setup.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

main_tui_launch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix: the Desktop-owned dashboard fallback spawn keeps its packaged web dist (review follow-up)

2026-09-20 11:12:12 -07:00

managed_scope.py

fix(update): heal stale root modules at every fresh import site

2026-09-18 09:38:34 -07:00

managed_uv.py

fix(install): reinstall a managed uv that no longer runs

2026-09-19 02:44:02 -07:00

mcp_app_detection.py

feat(mcp): expose optional backend-local app discovery

2026-09-16 15:16:09 -05:00

mcp_catalog.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

mcp_config.py

fix(mcp): OAuth login keeps discovered server metadata; token errors carry a redacted body excerpt

2026-09-19 23:46:42 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp_startup): take the deferred slot under the lock so two racing first clients fire once

2026-09-20 18:16:47 +05:30

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

fix(memory): migration checks provider presence in the home being migrated

2026-09-18 09:23:13 -07:00

memory_setup.py

fix: hindsight update-time dep resolution survives a BOM in config.json

2026-09-15 03:38:29 -07:00

middleware.py

fix(plugins): execution-chain middleware failures are reported once, not per call

2026-09-17 09:03:29 -07:00

migrate.py

…

moa_cmd.py

fix(moa): name the billed aggregator in the gateway /model block and qualify the advise-once copy

2026-09-16 17:11:01 -07:00

moa_config.py

fix(moa): reject non-finite temperatures before provider requests

2026-09-15 05:34:29 -07:00

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

fix: strip a matching provider: prefix like provider/ in model normalization

2026-09-19 09:34:40 -07:00

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

model_setup_flows_custom.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

model_setup_flows.py

fix(setup): profile-owned catalog keeps the curated list when the live fetch fails

2026-09-20 12:17:52 +05:30

model_switch_providers.py

refactor(models): cache-only OpenRouter read parses the disk copy once; test nits

2026-09-20 15:17:14 +05:30

model_switch.py

fix(local): the picker's Local row id and the provider resolver share one definition (#116249)

2026-09-20 10:03:32 -07:00

models_catalog_static.py

fix(models): admit every plugin provider to the picker by slug; catalogs fall back to the profile

2026-09-19 20:54:06 -07:00

models_detect.py

…

models_local.py

fix: custom-provider key_env in the CLI picker/catalog helpers reads through the profile secret scope

2026-09-19 10:26:08 -07:00

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(models): credit the managed local-models library in /model validation

2026-09-20 11:14:00 -07:00

models.py

fix(models): filter retired Zen ids on every picker path, not only the live merge

2026-09-20 10:14:01 -07:00

nous_account.py

…

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(oneshot): consult the fallback chain at provider resolution time

2026-09-19 09:42:18 -07:00

pairing.py

…

partial_compress.py

…

personality.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog.py

refactor(plugins): kill-list annotation takes the pre-resolved list directly; trim to two invariants

2026-09-18 09:43:19 -07:00

plugin_compat.py

fix(plugins): record plugin-compat hit paths in POSIX form on every OS

2026-09-16 17:15:38 -07:00

plugin_dev.py

…

plugin_packs.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugin_python_deps.py

fix: read plugin-home config through the loader; register update export

2026-09-17 00:11:27 -07:00

plugin_validate_desktop.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

plugin_validate.py

feat(plugin-catalog): refuse desktop plugins that step outside the SDK surface

2026-09-19 03:19:18 -07:00

plugins_cmd_catalog.py

fix(plugins): removed_annotation takes the resolved kill list as a required argument

2026-09-18 09:43:19 -07:00

plugins_cmd.py

fix(update): make intent-to-add entries stashable so hermes update can run

2026-09-19 23:58:35 -07:00

plugins_discovery.py

fix(plugins): one unreadable plugin dir no longer aborts loader or list discovery

2026-09-15 18:48:59 -07:00

plugins_dispatch.py

fix(plugins): stream observer hooks and event subscribers fail-report once, not per event

2026-09-17 09:03:29 -07:00

plugins_ledger.py

fix(plugins): dedupe middleware failures too, and let unload forget reported hook failures

2026-09-16 17:08:25 -07:00

plugins_loader.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_manifest.py

feat(plugins): install declared Python dependencies and re-apply them after hermes update

2026-09-17 00:11:27 -07:00

plugins_state.py

…

plugins.py

fix(plugins): an installed directory plugin keeps its identity over a same-name pip entry point

2026-09-17 18:36:20 -07:00

portal_cli.py

…

process_identity.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

profile_channels.py

…

profile_cmd.py

fix(profiles): purge a deleted profile's session/routing identity on delete

2026-09-16 14:21:14 -07:00

profile_credential_audit.py

fix(auth): credential audit reads profile config.yaml through read_user_config_raw

2026-09-16 14:34:59 -07:00

profile_describer.py

…

profile_distribution.py

fix(plugins): attach stored git credentials only after an anonymous refusal, on every network verb

2026-09-18 10:01:01 -07:00

profile_identity.py

refactor(checkpoints): slim the profile-rename rekey and name it as a checkpoint_manager sibling

2026-09-16 14:34:22 -07:00

profiles.py

fix(profiles): log the tolerated failure when a rename cannot record its previous name

2026-09-20 10:29:54 -07:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

refactor(providers): drop the now-dead keyless provider plumbing

2026-09-18 15:40:37 +05:30

providers.py

fix(providers): restore the trimmed api_mode gates lost in the rebase onto #116853

2026-09-20 10:11:40 -07:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

fix(cli): Super+<printable> under modifyOtherKeys types the character

2026-09-18 09:52:03 -07:00

pty_bridge.py

…

pty_session.py

fix(dashboard): skip the stalled-input close when attach detached itself

2026-09-15 06:36:19 -07:00

quiet_single_query.py

fix(gateway): a peer DM retries a transient turn failure once, like the other two lanes

2026-09-20 10:16:51 -07:00

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

fix(gateway): surface secondary WhatsApp/Relay skipped under multiplex instead of a silent continue

2026-09-15 03:44:36 -07:00

resource_limits.py

…

route_identity.py

fix(config): provider switch via config set drops the previous provider's route (#113719)

2026-09-18 12:49:40 -07:00

runtime_provider_backends.py

chore: merge origin/main (resolve tests/agent/test_output_cap_parsing.py, tests/hermes_cli/test_runtime_provider_resolution.py)

2026-09-19 10:52:01 -07:00

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

fix(auth): reject the placeholder secrets this repo ships as examples

2026-09-20 10:18:48 -07:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

service_manager.py

fix(service): drop the s6 chmod-after-chown reorder

2026-09-19 01:31:49 -07:00

session_export_html.py

…

session_export_md.py

…

session_export.py

…

session_filters.py

docs(sessions): recency wording matches the freshest-of rule

2026-09-17 21:17:15 +05:30

session_listing.py

…

session_lost_and_found.py

fix: reap the killed sqlite3 .recover children on timeout

2026-09-16 17:02:13 -07:00

session_recap.py

…

session_recovery.py

fix: drop the retired tool high-water key on stale-FTS recovery and session recover

2026-09-18 10:38:41 -07:00

session_schema_history.py

chore(sessions): record the transport_profile column in the schema history

2026-09-19 02:28:50 -07:00

sessions_cmd_browse.py

…

sessions_cmd_repair_profiles.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

sessions_cmd.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

sessions_repair_profiles.py

feat(sessions): hermes sessions repair-profiles settles crossed-profile durable state

2026-09-18 22:36:41 -07:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

setup_summary.py

…

setup_terminal.py

fix(cli): doctor and terminal setup resolve the container runtime too

2026-09-18 21:47:13 +05:30

setup_tts.py

fix(setup): xAI TTS wizard checks XAI_API_KEY before OAuth to match runtime

2026-09-18 09:47:06 -07:00

setup_whatsapp_cloud.py

…

setup.py

fix: render dict-form reasoning_effort in the TUI config.get and setup wizard readers

2026-09-19 09:25:29 -07:00

shared_session_attach.py

fix(cli): name the real state when cooperative attach is unavailable

2026-09-18 10:45:07 -07:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(skills): built-in name collisions show a note in /skills, /help skills and the palette

2026-09-18 12:51:22 -07:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

fix(skills): built-in name collisions show a note in /skills, /help skills and the palette

2026-09-18 12:51:22 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

fix(update): bridge stale utils so pre-handoff upgrades finish restart

2026-09-18 09:38:34 -07:00

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

docs(gateway): name the SIGUSR2 consumer in the stderr wrapper's forwarding comment

2026-09-20 15:49:42 +05:30

stdio.py

…

stream_json.py

fix(stream-json): verbatim text deltas, closed protocol on init failure, per-call tool keys

2026-09-15 03:53:13 -07:00

suggestions_cmd.py

fix(cron): name the home-channel target when a non-push session's deliver=origin job is rerouted

2026-09-19 09:54:20 -07:00

telegram_managed_bot.py

fix(platforms): QR fallback tip names Hermes' own uv when it is not on PATH

2026-09-15 18:55:47 -07:00

terminal_breadcrumbs.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

terminal_notify.py

refactor(cli): one notification payload, one sink per branch in _ring_bell

2026-09-15 14:52:26 +05:30

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

tools_config_cua.py

fix(computer-use): windowless, non-interactive Windows autostart repair

2026-09-20 11:28:15 -07:00

tools_config_mcp.py

…

tools_config_post_setup.py

fix(setup): Codex image post-setup names the auth command instead of starting a device login without a terminal

2026-09-19 10:05:26 -07:00

tools_config_providers.py

fix(tools): gate the browser picker on an actual backend choice

2026-09-20 20:29:14 +05:30

tools_config.py

fix(cli): warn once when platform_toolsets.<platform> is not a list

2026-09-19 23:46:08 -07:00

toolset_scope.py

…

toolset_validation.py

…

uninstall.py

…

update_abort_recovery.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_common.py

…

update_cmd_config.py

fix(update): finish hermes update in an interpreter born on the pulled code

2026-09-17 00:02:09 -07:00

update_cmd_deps.py

fix(update): scrub interpreter-steering env keys from the critical-module import probe (#115032)

2026-09-20 09:52:06 -07:00

update_cmd_drain_report.py

…

update_cmd_fleet.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_cmd_git.py

fix(update): one bad workspaces glob no longer aborts the lockfile-churn cleanup

2026-09-16 17:44:36 -07:00

update_cmd_maint.py

fix(config,update): replace an unwritable SOUL.md symlink; say when the pre-update snapshot failed

2026-09-18 10:15:11 -07:00

update_cmd_stash.py

fix(update): record every autostash disposition in the update receipt

2026-09-20 00:13:01 -07:00

update_cmd_windows.py

fix(cli): symmetric Windows resume-failure handling + atexit disarm

2026-09-20 10:40:12 -07:00

update_cmd_zip.py

fix(update): ZIP dirty-tree guard admits what the swap cannot destroy

2026-09-19 02:33:41 -07:00

update_cmd.py

fix(cli): symmetric Windows resume-failure handling + atexit disarm

2026-09-20 10:40:12 -07:00

update_contract.py

…

update_handoff.py

fix(update): shim hand-off child outwaits the launcher pid before the update lock and pins the wiring

2026-09-19 02:01:36 -07:00

update_inventory.py

fix(update): classify launchd-owned serve/dashboard rows as launchd, not manual-serve

2026-09-20 00:22:24 -07:00

update_lock.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

update_receipt.py

fix(update): clear fleet restart warning for multiplexers

2026-09-18 12:47:23 -07:00

update_restart_recovery.py

fix(profiles): a child spawned for another profile no longer inherits the spawner's authorization gates

2026-09-18 15:11:47 -07:00

update_serve_obligations.py

fix(update): discharge an unreadable-create_time manual-serve row once its pid is provably dead

2026-09-19 23:59:11 -07:00

urllib_security.py

…

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

vercel_auth.py

…

verify_cmd.py

…

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

fix(desktop): custom endpoints pin an API mode and keep /v1/models alias metadata

2026-09-19 00:17:19 -07:00

web_read_coalescing.py

…

web_server_chat.py

…

web_server_config.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

web_server_cron.py

fix(dashboard): say when the scheduler last ticked on the Cron page

2026-09-18 12:46:54 -07:00

web_server_dashboard.py

fix(dashboard): profile-less chat deep links inherit the launcher's preselected profile

2026-09-18 15:12:27 -07:00

web_server_files.py

…

web_server_gateway.py

fix(profiles): a child spawned for another profile no longer inherits the spawner's authorization gates

2026-09-18 15:11:47 -07:00

web_server_idle_exit.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_idle_proof.py

docs(serve): say why turn_in_flight is kept as the bool view; one union spelling

2026-09-19 15:04:44 +05:30

web_server_lifecycle.py

…

web_server_mcp.py

fix(mcp): dashboard OAuth failures keep their first cause on every surface

2026-09-18 09:20:07 -07:00

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

web_server_profiles.py

fix(desktop): custom endpoints pin an API mode and keep /v1/models alias metadata

2026-09-19 00:17:19 -07:00

web_server_sessions.py

…

web_server.py

feat(cron): jobs follow the main agent model at fire time; pinned locks it on request

2026-09-20 09:20:51 -07:00

webhook.py

…

win_pty_bridge.py

…

windows_ssh_runtime.py

…

worktree_cmd.py

…

worktree_gc.py

fix(worktree): judge no-remote repos against the local trunk instead of reaping everything

2026-09-15 18:27:06 -07:00

worktree_ops.py

fix(lsp): release a worktree's language servers on removal; reap deleted roots

2026-09-19 01:29:03 -07:00

write_approval_commands.py

…

xai_retirement.py

…