Adam Durham 70598f52e1 fix(desktop): tighten shebang-exec script-name match to known console scripts ...

External review (Fable) caught a real false-positive widening in the
original commit: the new argv[1] script-name check reused the loose
`script_name == "hermes" or script_name.startswith("hermes")` pattern
(copy-pasted from the exe_name check above it), but argv[1] can be ANY
user-invoked python script path when argv[0] is a bare interpreter --
unlike a directly-resolved executable name, where a false match on the
substring is rare. A user's own script named e.g. "hermes-notes.py" or
"hermes-unrelated-tool" run via `python3 <script>` would be misidentified
as the console-script shim and become killable by profile delete.

Match against the actual known console-script entry points instead
(pyproject.toml [project.scripts]: hermes, hermes-agent, hermes-acp),
stripping the script's extension before comparing.

Added 2 regression tests: one confirms the false-positive case is now
rejected (fails against the pre-fix loose-match code, confirmed via a
scripted revert), the other confirms the other two real entry points
(hermes-agent, hermes-acp) still match via the shebang-exec path.

Tests: tests/hermes_cli/test_profiles.py -- 158 passed (156 previous + 2
new).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-08-17 02:11:27 -07:00

..

dashboard_auth

feat(dashboard-auth): extend RFC 8252 native sign-in to password providers (system-browser autofill) (#75808)

2026-08-14 21:39:01 +00:00

data

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

observability

fix(agent): omit unsupported metadata on Relay scope.pop

2026-08-15 00:33:01 -07:00

proxy

…

subcommands

Port from paperclipai/paperclip#10978: skip locally-edited hub skills on update unless --force

2026-08-16 22:10:37 -07:00

web_routers

fix(cron): stop retry storms when the gateway is deliberately stopped (OOF-266)

2026-08-16 19:50:07 -07:00

__init__.py

chore: release v0.20.2 (2026.8.16)

2026-08-16 10:32:53 -07:00

_early_recovery.py

fix(updater): mark PID probe POSIX-only

2026-08-15 03:54:07 -07:00

_install_repair.py

fix(update): restore quarantined hermes.exe shims after no-op installs on Windows

2026-08-15 14:24:35 -07:00

_parser.py

fix(cli): chat -c fails loudly on stderr and gains --create-if-missing

2026-08-16 06:31:26 -07:00

_scan_venv_blockers.py

fix(desktop): close safe preview blockers before update

2026-08-16 02:03:22 -07:00

_startup_fast.py

refactor: single chokepoint for the pre-import version fast path

2026-08-02 21:13:12 +05:30

_subprocess_compat.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

active_sessions.py

fix(sessions): release active-session leases against their acquisition registry

2026-08-15 00:33:01 -07:00

agent_import.py

refactor(cli): review follow-ups for the config.yaml import guard

2026-08-02 14:55:32 +05:30

agent_plugins.py

feat(plugins): map portable Agent Plugins streamable-http entries into the native MCP runtime

2026-08-08 23:56:46 -07:00

approval_mode.py

feat(approvals): add cross-surface mode command

2026-07-26 21:13:03 -07:00

approval_transport.py

fix(plugins): harden approval transport boundaries

2026-08-12 16:26:55 -07:00

approvals_suggest.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

approvals_test.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

auth_commands.py

…

auth.py

fix(auth): only fall back to os.getenv on ImportError in resolve_provider (#86918 review)

2026-08-16 06:29:53 -07:00

azure_detect.py

…

backup.py

fix(backup): bound locked database snapshot waits

2026-08-16 02:00:50 -07:00

bang_shell.py

feat(cli): ! shell mode — run a command without spending a model turn

2026-07-31 21:21:20 -07:00

banner.py

fix(update): widen stale-lock self-heal to banner and desktop; align with compare-API status

2026-08-15 04:33:47 -07:00

blueprint_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

browser_connect.py

fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths

2026-07-29 23:16:18 -07:00

build_info.py

…

bundles.py

…

callbacks.py

fix(approval): classify CLI/TUI approval timeouts separately from explicit denials

2026-08-02 20:21:59 -07:00

checkpoints.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

claw.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

cli_agent_setup_mixin.py

fix: compare base-URL hostnames, not substrings, in provider-identity checks

2026-08-14 20:47:13 -07:00

cli_billing_mixin.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

cli_commands_mixin.py

Inspired by Copilot CLI: /worktree — create isolated git worktrees mid-session

2026-08-16 22:09:53 -07:00

cli_output.py

…

clipboard.py

fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH

2026-07-29 08:42:16 -07:00

codex_models.py

…

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands.py

Inspired by Copilot CLI: /worktree — create isolated git worktrees mid-session

2026-08-16 22:09:53 -07:00

completion.py

…

config_defaults.py

fix(kanban): host-level cap accounting, daemon cap resolution, review-lane reservation (OOF-30 review)

2026-08-17 14:16:21 +05:30

config_migrations.py

feat(delegation): raise max_concurrent_children default 3 -> 10 (+migration) (#86745)

2026-08-15 00:20:32 -07:00

config.py

fix(config): extend structured-value parsing to multi-line YAML blocks with a conservative trigger

2026-08-16 22:18:04 -07:00

console_engine.py

fix(console): skip the checkpoints prune confirmation the console already took

2026-08-15 00:33:32 -07:00

container_boot.py

fix(install): support non-pid-1 container entrypoints

2026-08-01 10:52:34 -07:00

context_switch_guard.py

…

copilot_auth.py

test: harden cold-start regression tests + debug-log the env-var skip

2026-08-03 21:16:09 +05:30

credential_lifecycle.py

…

cron.py

feat(cron): --continuity / --no-continuity flags on hermes cron create/edit

2026-08-16 22:09:28 -07:00

curator.py

feat(curator): per-mutation audit ledger + single-edit rollback

2026-08-16 22:06:41 -07:00

curses_ui.py

cleanup: remove references to simple-term-menu

2026-08-10 15:13:29 -04:00

dashboard_procs.py

fix(update): tighten hermes-serve unit gate, dedupe fleet/cleanup restarts

2026-08-16 10:51:50 -07:00

dashboard_register.py

…

debug.py

fix(debug): say where a client-side log lives instead of "(file not found)" (#78687)

2026-08-04 11:53:32 -06:00

default_soul.py

…

dep_ensure.py

fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade

2026-08-13 02:38:28 -07:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_live.py

fix(cli): apply Termux carve-out to doctor --live's npx browser probe

2026-08-13 02:38:28 -07:00

doctor.py

fix(cli): keep doctor's journal-mode read errors specific

2026-08-17 14:02:07 +05:30

dump.py

feat(gateway): session activity watchdog, stall notify, compress timeout (#72424)

2026-08-02 16:16:36 -07:00

env_loader.py

fix(update): avoid cryptography self-lock on Windows

2026-08-15 13:28:14 -07:00

fallback_cmd.py

refactor(fallback): single owner for backend identity and failure-scoped skips

2026-07-26 23:41:54 -07:00

fallback_config.py

fix(auth): resolve fallback api keys through secret_scope, not raw env

2026-07-31 22:35:26 -07:00

focus_view.py

feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator

2026-07-26 18:10:34 -07:00

foreign_sessions.py

feat: import and resume Claude Code / Codex CLI sessions

2026-08-15 18:15:13 -07:00

gateway_enroll.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

gateway_windows.py

refactor(gateway): share breakaway marker constant

2026-08-16 06:26:12 -07:00

gateway.py

fix(gateway): ignore invalid managed Node directories

2026-08-16 19:54:37 -07:00

gitlock.py

fix(update): self-heal stale git locks and stop false 'update available' on shallow clones

2026-08-15 04:33:47 -07:00

goals.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

gui_uninstall.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

heartbeat.py

feat: /heartbeat — recurring session re-entry prompt fired when idle

2026-08-05 22:32:55 -07:00

hooks.py

feat(langfuse): widen tracing to errors, sessions, subagents, and MoA fan-out

2026-08-13 23:10:16 +05:30

init_command.py

feat(cli): /init — generate or update AGENTS.md from a project scan

2026-07-26 17:46:29 -07:00

input_sanitize.py

…

inventory.py

fix(desktop): match custom provider aliases in model catalog menu

2026-08-16 02:08:53 -07:00

journey.py

…

kanban_db.py

fix(kanban): host-level cap accounting, daemon cap resolution, review-lane reservation (OOF-30 review)

2026-08-17 14:16:21 +05:30

kanban_decompose.py

…

kanban_diagnostics.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

kanban_specify.py

…

kanban_swarm.py

fix(kanban): make write_txn nesting explicit opt-in

2026-08-10 12:43:46 -07:00

kanban.py

feat(kanban): memory-aware dispatch guard + memory-derived default concurrency cap (OOF-30)

2026-08-17 14:16:21 +05:30

lifecycle.py

Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"

2026-07-27 21:10:51 -07:00

linux_desktop_entry.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

logs.py

…

loops.py

feat: /loop — recurring in-session wakeups (Claude Code parity)

2026-08-14 13:40:19 -07:00

main.py

Inspired by Perplexity Computer: sessions pin/unpin/pinned CLI (#52955)

2026-08-16 22:09:17 -07:00

managed_scope.py

…

managed_uv.py

test(managed_uv): cover explicit-patch fallback on the next minor line; dedupe retried versions

2026-08-14 22:37:46 -07:00

mcp_catalog.py

feat(mcp): unify the desktop MCP suggestion directory into the catalog

2026-08-15 02:03:24 -07:00

mcp_config.py

feat(desktop): MCP fleet cost/usage overlay with schema token estimates and 30-day usage

2026-08-16 02:24:32 -07:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(review): harden portable plugin boundaries

2026-08-07 09:44:21 -07:00

mem_trim.py

fix(mem): 5s force floor so delegate-batch closes don't stack trims

2026-08-02 22:44:38 +05:30

memory_oauth.py

…

memory_setup.py

feat(hindsight): memory provider improvements — recall_sync, retain_source, setup templates, memory indicators, error hints

2026-08-13 23:15:25 +05:30

middleware.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

migrate.py

…

moa_cmd.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

moa_config.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

model_catalog.py

perf(model-picker): serve stale model caches instantly, refresh in background

2026-08-01 14:52:18 -07:00

model_cost_guard.py

fix(cli): guard expensive startup model overrides

2026-08-14 01:31:31 -07:00

model_data_policy_guard.py

feat(models): warn on data-training tiers at model selection

2026-08-14 01:06:13 -07:00

model_normalize.py

fix(models): a model id missing its vendor prefix says so instead of 404ing (#78856)

2026-08-04 19:35:57 +00:00

model_search.py

fix(picker): fold live bare k3 wire id into curated kimi-k3 row

2026-07-26 21:22:40 -07:00

model_selection_guards.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

model_setup_flows.py

fix(cli): deliver the Bedrock API key through a named provider

2026-08-16 06:25:46 -07:00

model_switch.py

perf: parallelize provider model-list fetches in model picker

2026-08-15 00:34:29 -07:00

models.py

perf: parallelize provider model-list fetches in model picker

2026-08-15 00:34:29 -07:00

nous_account.py

fix: show explicit member spend cap message instead of 'no credits'

2026-08-07 19:47:40 +05:30

nous_auth_keepalive.py

…

nous_billing.py

refactor: single shared Retry-After parser

2026-07-29 10:13:50 -07:00

nous_subscription.py

fix(cli): restore managed-node-path and PATHEXT-aware fallback rungs

2026-08-13 02:38:28 -07:00

npm_engine.py

fix(win): never rewrite the in-use managed Node tree (#80926)

2026-08-14 21:35:30 -07:00

onepassword_secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

oneshot.py

refactor: centralize dict-valued model.default coercion via shared helper

2026-08-15 10:29:05 +05:30

pairing.py

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

partial_compress.py

…

personality.py

fix(personality): single-owner personality state + one-time reset migration

2026-08-09 10:33:58 -07:00

pets.py

fix(pets): cover the pets CLI (doctor, has-active, /pet toggle) too

2026-08-15 00:32:44 -07:00

platform_actions.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

platforms.py

…

plugin_capabilities.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

plugin_dev.py

feat(plugins): manifest v2 — schema version, api_version, inter-plugin deps, pip-dependency declaration seam, config schema (#64165)

2026-08-12 18:39:22 -07:00

plugin_index.py

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

plugin_packs.py

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

plugins_cmd.py

Inspired by Claude Cowork: security scanning for plugin install/update

2026-08-16 22:08:37 -07:00

plugins.py

refactor(hooks): share fail-closed approve logic; update sibling tests

2026-08-15 23:03:52 -07:00

portal_cli.py

fix(auth): use refresh-free Nous status snapshot on read-only display paths

2026-07-28 22:42:19 -07:00

profile_describer.py

…

profile_distribution.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

profiles.py

fix(desktop): tighten shebang-exec script-name match to known console scripts

2026-08-17 02:11:27 -07:00

projects_cmd.py

…

projects_db.py

fix(projects): dedup project_create by primary_path (#75820)

2026-08-15 00:33:11 -07:00

prompt_size.py

fix: honor JSON-array string forms for skills.disabled and agent.disabled_toolsets

2026-08-16 06:24:56 -07:00

prompt_stash.py

feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests

2026-07-31 21:21:16 -07:00

provider_catalog.py

…

providers.py

feat: rename Codex OAuth provider label to "ChatGPT or Codex Subscription"

2026-08-13 03:06:08 -07:00

proxy_cli.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

psutil_android.py

…

pt_input_extras.py

fix(cli): restore Kitty keyboard protocol push and complete the extended-key alias table

2026-08-16 15:52:24 +05:30

pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

pty_session.py

fix(dashboard): redraw TUI after PTY reattach

2026-08-14 13:51:26 -07:00

relaunch.py

…

resource_limits.py

fix(gateway): persist RLIMIT_NOFILE floor into the generated launchd plist

2026-08-10 17:02:56 -07:00

route_identity.py

refactor: fold simplify-code review findings

2026-07-29 17:13:48 +05:30

runtime_provider.py

fix(runtime): exempt loopback custom-provider pool credentials from the usable-secret floor

2026-08-16 01:48:59 -07:00

secret_prompt.py

…

secrets_cli.py

fix(secrets_cli): defer bitwarden backend import to first attribute access

2026-08-15 01:55:22 -07:00

security_advisories.py

…

security_audit_startup.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

security_audit.py

fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)

2026-08-01 10:47:20 -07:00

send_cmd.py

fix(cli): apply BOM-safe .env decoding to hermes send's private loader

2026-08-08 12:32:23 -07:00

service_manager.py

fix(gateway): don't restart supervised services on clean exit

2026-08-14 21:07:21 -07:00

session_export_html.py

fix(cli): coalesce None title/model in single-session HTML export

2026-08-15 02:04:49 -07:00

session_export_md.py

…

session_export.py

feat: bare /save shows a usage card instead of exporting

2026-08-15 02:04:49 -07:00

session_filters.py

fix(sessions): preserve recently active sessions during pruning

2026-07-26 19:30:21 -07:00

session_listing.py

fix(gateway): scope session lists before limiting

2026-07-31 22:36:55 -07:00

session_lost_and_found.py

feat(sessions): generic 'hidden' session flag (sidebar-hide, still resumable) (#86797)

2026-08-15 00:31:37 -07:00

session_recap.py

…

session_recovery.py

fix(sessions): recover budget exhaustion + lost_and_found last-resort lane

2026-08-12 19:43:47 -07:00

sessions_cmd.py

Inspired by Perplexity Computer: sessions pin/unpin/pinned CLI (#52955)

2026-08-16 22:09:17 -07:00

setup_hidden_env.py

fix(setup): stop asking about self-configuring platform knobs

2026-07-26 08:43:24 -07:00

setup_whatsapp_cloud.py

…

setup.py

feat: auto-install gateway service during setup and import

2026-08-12 16:59:37 -07:00

sizefmt.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

skills_config.py

…

skills_hub.py

Port from paperclipai/paperclip#10978: skip locally-edited hub skills on update unless --force

2026-08-16 22:10:37 -07:00

skin_cmd.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

skin_engine.py

…

slack_cli.py

fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)

2026-07-29 09:33:48 -07:00

slash_exec.py

refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)

2026-07-29 12:11:24 -07:00

sqlite_runtime.py

…

sqlite_safe_read.py

fix(cli): untrack sqlite connections only after close succeeds

2026-07-31 23:18:12 -07:00

sqlite_util.py

…

status.py

feat(cli): global emergency stop — hermes pause / hermes resume

2026-08-07 08:58:14 -07:00

stderr_timestamp.py

fix(gateway): put --external-supervisor on launchd gateway argv

2026-08-16 01:54:35 -07:00

stdio.py

…

suggestions_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

telegram_managed_bot.py

…

terminal_breadcrumbs.py

feat: per-terminal --continue via terminal breadcrumbs

2026-08-15 18:15:18 -07:00

timefmt.py

chore: round-2 review nits (re-review #9)

2026-08-02 16:16:36 -07:00

timeouts.py

…

tips.py

feat(gateway): concise background process notifications by default

2026-08-14 00:26:11 -07:00

tools_config.py

fix(computer-use): auto-repair an installed driver that fails the runtime contract

2026-08-16 13:01:20 -07:00

toolset_validation.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

uninstall.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

update_cmd.py

fix: suppress windows-footgun false positive on binary tomllib open

2026-08-16 22:07:09 -07:00

update_lock.py

fix(update): make the ancestor-PID lock handoff cross-platform via psutil

2026-07-31 22:28:46 -07:00

urllib_security.py

fix(models): trust certifi for credentialed catalogs (E-1002)

2026-08-14 16:43:37 -07:00

vercel_auth.py

Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"

2026-07-29 19:48:37 -07:00

verify_cmd.py

Integrate verify subsystem with the existing verification stack

2026-08-07 10:11:05 -07:00

voice.py

fix(cli): convert Alt key shortcuts to sequence tuple for prompt_toolkit (#74169)

2026-08-15 01:05:39 -07:00

web_deps.py

refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)

2026-07-29 16:21:54 -07:00

web_git.py

fix(desktop): make git worktrees work end-to-end on a remote gateway backend

2026-08-16 20:53:44 -07:00

web_models.py

feat(desktop): mark a session as unread/read with a persisted watermark

2026-08-15 01:21:40 -07:00

web_server.py

feat(cron): continuity toggle across dashboard, Bot Mode routines, and TUI cron RPC

2026-08-16 22:09:28 -07:00

webhook.py

…

win_pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

windows_ssh_runtime.py

fix(desktop): keep Windows SSH runtime at machine root

2026-08-01 14:30:16 -07:00

write_approval_commands.py

…

xai_retirement.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30