teknium1 ff46826872 fix(update): keep commits made on a detached HEAD behind a named rescue ref ...

Both update shapes move HEAD off a detached commit: the branch update checks
out main, the release update checks out the release commit. A commit made on
the detached HEAD is on no branch, so after the move only the expiring reflog
reached it, and the branch path printed nothing about it (gated on #124643).

One helper, _park_detached_head, now runs at both sites before HEAD moves.
When HEAD is detached at a commit no ref contains (refs/stash excluded: the
autostash is dropped after the update, which is why the branch path parks
before stashing), it writes refs/hermes-update-backups/detached-<branch>-<ts>-<sha>
(the divergence rescue refs' scheme, now pruned on the same terms) and prints
the ref and how to list the commits. If the write fails the update stops
rather than orphan the work. A detached HEAD already on a branch or tag (a
pinned release) gets no ref. It replaces the release path's silent, never
pruned refs/hermes/pre-release/<sha>.

2026-09-27 01:00:31 -07:00

..

dashboard_auth

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:55:33 -04:00

local_runtime

fix(local-runtime): move a pre-PM llama.cpp engine into the PM store and pin b10964

2026-09-25 22:07:48 -04:00

observability

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

proxy

…

subcommands

docs(desktop): describe what --ignore-existing skips

2026-09-26 17:15:10 -05:00

web_routers

fix(web): scrub a session's on-disk artifacts in the delete endpoint

2026-09-26 22:52:51 -05:00

__init__.py

fix(cli): keep hermes_cli import off os.environ; run the import-purity test on Windows

2026-09-24 14:47:06 -04:00

_early_recovery.py

refactor(recovery): split the two CC>30 early-recovery functions

2026-09-24 14:08:22 -04:00

_install_repair.py

…

_launchers.py

fix(windows): preserve active source launchers during backend startup

2026-09-24 06:03:29 -04:00

_old_updater.py

fix(update): let the Windows takeover child adopt its orchestrator's update marker

2026-09-23 12:02:05 -04:00

_parser.py

feat(tui): add native terminal mode defaults

2026-09-25 17:57:38 -05:00

_scan_venv_blockers.py

…

_secrets_common.py

…

_startup_fast.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

_subprocess_compat.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

_update_takeover.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

active_sessions.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

agent_import_sync.py

…

agent_import.py

…

agent_plugins.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

AGENTS.md

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

anon_auth.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

anon_sign_in_cli.py

…

anon_sign_in.py

…

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

…

approvals_test.py

…

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

refactor(aux): drop the now-uncalled _read_codex_access_token and retarget its test seams

2026-09-25 21:27:06 +05:30

auth_commands.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

auth_constants.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

auth_device_flow.py

fix(auth): bound device-poll edge backoff and gate 403 on x-vercel-mitigated

2026-09-24 18:06:48 +05:30

auth_error_copy.py

…

auth_minimax.py

…

auth_model_picker.py

feat(providers): external-process provider support for standalone model-provider plugins (from #105863)

2026-09-20 14:29:39 -07:00

auth_nous.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

auth_oauth_grants.py

fix: preserve macOS bootstrap evidence and accept BOM-prefixed auth state

2026-09-21 13:26:17 -04:00

auth_oauth_pkce_plugin.py

fix(auth): PKCE token errors reuse the canonical grant-dead code set

2026-09-20 18:21:34 -07:00

auth_openrouter.py

…

auth_plugin_providers.py

fix(auth): user provider plugin owns its aliases and display name in the auth registry

2026-09-20 18:29:22 -07:00

auth_qwen.py

…

auth_spotify.py

…

auth_xai.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

auth_zai_kimi.py

…

auth.py

refactor(auth): share the key-prefix check; reach it via rp in the openrouter resolver

2026-09-27 00:56:11 +05:30

azure_detect.py

…

backend_retirement.py

…

backup_restore.py

fix(backup): tell the user when an imported database fails its integrity check

2026-09-26 21:38:28 +05:30

backup_sqlite.py

…

backup.py

fix(backup): stop blaming a live holder for every snapshot restore failure

2026-09-26 21:38:28 +05:30

bang_shell.py

fix(cli): fail closed without bang shell sanitizer

2026-09-20 18:20:44 -07:00

banner.py

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

blueprint_cmd.py

…

boot_bootstrap.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

browser_connect.py

…

browser_runtime.py

fix(bot-desktop): choose PM headed Chromium despite headless override

2026-09-24 01:40:31 -04:00

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

…

chat_catalog.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

checkpoints.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

claw.py

fix: doctor, cron status, claw and gateway status report the real host topology

2026-09-21 05:06:45 -07:00

cli_agent_setup_mixin.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

cli_auto_maintenance.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

cli_billing_mixin.py

…

cli_chat_error_copy.py

…

cli_chat_turn_mixin.py

fix(cli): limit the turn-level streamed guard to interrupted results (#65666)

2026-09-24 22:32:57 +05:30

cli_commands_mixin.py

fix(processes): persist_on_release keeps background jobs alive across lifecycle kill sweeps (#41225)

2026-09-25 13:49:31 -05:00

cli_config_load.py

fix(tui_gateway): honor prefill_messages_file on the Desktop agent path

2026-09-26 17:04:32 -05:00

cli_footer_split.py

fix: keep cli_footer_split importable under the prompt_toolkit test stubs

2026-09-20 13:35:09 -07:00

cli_info_mixin.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

cli_init_mixin.py

fix(cli): don't seed a real OPENAI_API_KEY as the startup key for openrouter.ai

2026-09-27 00:56:11 +05:30

cli_loops_mixin.py

…

cli_modal_mixin.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

cli_model_switch_mixin.py

refactor(codex): one credential/route authority for aux + image paths

2026-09-25 21:27:06 +05:30

cli_output.py

…

cli_process_dock.py

feat(process_registry): stamp exited_at and expose it on process.list

2026-09-20 13:55:03 -07:00

cli_process_notifications.py

fix(process): heartbeats wake the agent only on new output, and never as a user bubble

2026-09-26 22:19:53 -05:00

cli_render.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:13:35 -04:00

cli_session_dock.py

feat(cli): live dock shows the standing /goal and queued prompts

2026-09-23 10:05:40 -07:00

cli_session_mixin.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

cli_shutdown.py

fix(tui-gateway): a SIGTERM-ignoring command no longer survives the gateway's SIGTERM exit

2026-09-23 17:09:54 -07:00

cli_single_query.py

fix(kanban): a worker the dispatcher never recorded registers itself instead of being run twice

2026-09-26 11:16:45 -07:00

cli_status_bar_mixin.py

fix(agent): clamp displayed context usage to the model window

2026-09-26 17:15:30 -05:00

cli_stream_mixin.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 13:10:14 -04:00

cli_subagent_monitor.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_terminal_input.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

cli_terminal_mixin.py

fix(cli): never aim the resize erase past chrome tmux clipped (#95375)

2026-09-24 00:17:13 -07:00

cli_tui_mixin.py

fix(cli): make function-key workflows reliable on macOS (#120666)

2026-09-23 22:05:49 +00:00

cli_tui_runtime_mixin.py

fix(cli): a resize mid-stream repaints each transcript line once

2026-09-24 00:17:13 -07:00

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard.py

fix(clipboard): give image probes a valid stdin

2026-09-20 10:52:54 -07:00

codex_models.py

fix(codex): send catalog/image credentials only to their own route

2026-09-25 21:27:06 +05:30

codex_runtime_plugin_migration.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

completion.py

…

config_backups.py

…

config_defaults.py

fix(desktop): expose the renderer accessibility tree to dictation/IME tools (#118271)

2026-09-26 21:57:37 -05:00

config_effective.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00

config_env_routing.py

…

config_home.py

…

config_migrations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:08:20 -04:00

config_providers.py

refactor(config_providers): keep main's self-resolve, read the config through the read-only loader

2026-09-20 15:17:49 +05:30

config_read_errors.py

fix(config): a save refused over bad YAML says to fix the file, not "try again"

2026-09-23 15:05:44 -07:00

config.py

fix: reject incomplete source installer arguments before install work

2026-09-24 09:20:50 -04:00

console_engine.py

refactor(sessions): export guard always counts every row; export_all reuses _active_clause

2026-09-26 22:27:13 +05:30

container_boot.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

context_switch_guard.py

…

copilot_auth.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 09:55:47 -04:00

credential_lifecycle.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

cron.py

gateway: converge on multiplex-only — real migrate, no opt-out, no rollback, host lock refuses

2026-09-21 10:11:19 -07:00

curator.py

refactor(curator): read the usage map once per purge

2026-09-27 02:33:57 +05:30

curses_ui.py

…

dashboard_procs.py

fix(dashboard): list --port 0 serve backends in --status

2026-09-26 17:04:59 -05:00

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug.py

…

default_soul.py

…

desktop_console.py

…

desktop_update_verify.py

fix(desktop): stop a stale hand-off root failing a healthy update

2026-09-26 21:43:07 -05:00

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

doctor_connectivity.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

doctor_live.py

…

doctor_platform.py

fix(update,doctor): reconcile duplicate Windows gateway autostart entries

2026-09-26 21:44:50 -05:00

doctor_report.py

…

doctor_state.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

doctor_tools.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

doctor.py

refactor(doctor,gateway): share the migrate preflight's duplicate-credential check with doctor and status

2026-09-21 18:53:36 -07:00

dump.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

env_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

fallback_cmd.py

…

fallback_config.py

fix(cron): a pinned job never falls back to the global fallback chain (#120312)

2026-09-23 10:42:18 -04:00

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

fs_utils.py

…

gateway_command_errors.py

…

gateway_enroll.py

…

gateway_launchd.py

fix(gateway): name the display-wake stall in the launchd wrapper docstring; gate the macOS wrapper test with the platforms marker

2026-09-27 01:04:39 +05:30

gateway_migrate_guards.py

fix(migrate): auto-fold a unit-less default when every secondary shares one manager

2026-09-21 10:11:19 -07:00

gateway_migrate.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

gateway_multiplex_mode.py

fix(gateway): gateway.multiplex_profiles has one valid value; a retired false is rewritten to true with a one-time boxed notice

2026-09-23 10:58:15 -07:00

gateway_multiplex_s6.py

fix(gateway): multiplex convergence works inside an s6 container; a standalone-on-a-guard host says so loudly

2026-09-23 10:58:15 -07:00

gateway_multiplex_served.py

…

gateway_profile_lifecycle.py

fix(gateway): parking composes with gateway.standalone and the dashboard Stop/Start twin

2026-09-23 08:25:28 -07:00

gateway_setup_wizard.py

fix(gateway): launchd install honours --no-start-now and the wizard's "start now" answer

2026-09-23 07:48:32 -07:00

gateway_supervised_restart.py

…

gateway_windows_legacy.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

gateway_windows.py

fix(gateway): warn when the legacy Windows login item survives migration

2026-09-26 21:44:50 -05:00

gateway.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

git_credentials.py

fix(git-auth): a rejected GITHUB_TOKEN yields to the gh CLI login instead of failing the clone (#115257)

2026-09-20 10:44:52 -07:00

github_api.py

fix(update-check): authenticate api.github.com calls and name the branch-tip failure

2026-09-21 18:56:56 -04:00

gitlock.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

goal_command.py

…

goals.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

gui_uninstall.py

…

heartbeat.py

…

home_data_layout.py

…

hooks.py

fix(stream_diag): feed the existing chunk-body upstream_provider into diag + hook payload (#90216)

2026-09-24 22:25:06 +05:30

image_provenance.py

…

init_command.py

…

input_sanitize.py

…

install_identity.py

…

inventory.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 07:39:33 -04:00

journey.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 08:51:52 -04:00

kanban_boards.py

…

kanban_db_connect.py

…

kanban_db_dispatch.py

fix(kanban): a worker the dispatcher never recorded registers itself instead of being run twice

2026-09-26 11:16:45 -07:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

fix(kanban): NFC-normalize worktree path identity checks

2026-09-20 10:41:25 -07:00

kanban_db.py

fix(kanban): run clock ticks from the current run, not the task's first start

2026-09-26 16:51:19 -05:00

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_ops.py

kanban gc: validate retention flags before the workspace sweep

2026-09-22 13:41:11 +05:30

kanban_output.py

fix(kanban): expose task runtime limit in JSON

2026-09-20 18:43:59 -07:00

kanban_parser.py

refactor(kanban): narrow _nonnegative_int except to ValueError

2026-09-22 13:41:11 +05:30

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

kanban_specify.py

fix(kanban): board identity follows the bound profile override, not the launch env

2026-09-23 08:09:47 -07:00

kanban_swarm.py

…

kanban_transfer.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

kanban.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

lifecycle.py

fix(gateway): await async pre_gateway_dispatch callbacks on the event loop

2026-09-21 23:47:51 -07:00

linux_desktop_entry.py

…

logs.py

…

loops.py

…

macos_signing.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

macos_tcc_anchor.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

main_agent_cmds.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

main_dashboard.py

fix(dashboard): list --port 0 serve backends in --status

2026-09-26 17:04:59 -05:00

main_dep_hints.py

fix(cli): name Windows Smart App Control when it blocks the dashboard runtime

2026-09-25 16:28:14 -05:00

main_desktop.py

fix(desktop): the skip notice names the in-app update, and hermes desktop reopens the app it kept

2026-09-26 23:50:01 -04:00

main_install_repair.py

fix(update): cap boot recovery retries and derive self-lock native modules

2026-09-24 04:27:31 -05:00

main_platform_setup.py

fix: retain WhatsApp runtime binary guards under optimized Python

2026-09-24 01:55:51 -04:00

main_provider_setup.py

…

main_tui_launch.py

feat(tui): add native terminal mode defaults

2026-09-25 17:57:38 -05:00

main_web_build.py

perf(update): skip the web build's npm ci when the manifests digest is unchanged

2026-09-20 16:41:21 +05:30

main.py

fix(update): rebuild Desktop for an installed app with no checkout build

2026-09-26 21:42:48 -05:00

managed_scope.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

managed_uv.py

…

mcp_app_detection.py

…

mcp_catalog.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 18:01:46 -04:00

mcp_config.py

fix(mcp): point hermes mcp add and configure at /reload-mcp

2026-09-26 17:04:25 -05:00

mcp_picker.py

…

mcp_security.py

…

mcp_startup.py

fix(mcp): connect servers added to config on the next agent build

2026-09-26 17:04:25 -05:00

mem_trim.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

memory_oauth.py

fix(memory): resolve OAuth flow in requested profile scope

2026-09-23 07:49:35 -07:00

memory_provider_migration.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 10:52:20 -04:00

memory_setup.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

middleware.py

fix(plugins): route execution middleware through lazy discovery (#105827)

2026-09-21 23:47:51 -07:00

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_catalog.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

…

model_setup_flows_custom.py

…

model_setup_flows.py

refactor(codex): one credential/route authority for aux + image paths

2026-09-25 21:27:06 +05:30

model_switch_providers.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

model_switch.py

fix(models): keep generation models out of chat

2026-09-25 12:07:32 -05:00

models_catalog_static.py

fix(models): keep Sonnet 5 as the Bedrock default after adding Opus 5.5

2026-09-26 07:14:26 +05:30

models_detect.py

…

models_local.py

…

models_pricing.py

refactor(credits): gate the re-warm on the pricing cache's own failure window

2026-09-20 14:02:17 +05:30

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(model): validate Nebius relay models against base URL

2026-09-24 09:40:41 -04:00

models.py

refactor(copilot): one GitHub effort clamp for the profile and main agent

2026-09-26 22:21:47 +05:30

nous_account.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

nous_auth_keepalive.py

fix(auth): scope Nous keepalive on multiplexed gateways

2026-09-23 06:46:02 -07:00

nous_billing.py

…

nous_subscription.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 16:17:47 -04:00

npm_engine.py

…

old_updater_deps.py

…

old_updater_main.py

…

onepassword_secrets_cli.py

…

oneshot.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

…

platforms.py

…

plugin_capabilities.py

…

plugin_catalog_presence.py

feat: catalog marks onboarding plugins; catalog rows carry the app's presence

2026-09-23 09:26:07 +05:30

plugin_catalog.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugin_compat.py

…

plugin_dev.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugin_events.py

fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop

2026-09-24 02:03:03 -07:00

plugin_packs.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugin_validate_desktop.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 05:10:12 -04:00

plugin_validate.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins_activation_live.py

fix: two plugins installed together both go live with their MCP tools

2026-09-23 12:45:32 +05:30

plugins_activation.py

fix(dashboard): Desktop children publish their own host role; SSH spawn shape is Desktop-owned

2026-09-23 07:09:45 -07:00

plugins_admission.py

refactor(pm): one plugin-input request for sync_venv and venv_is_current

2026-09-24 14:08:21 -04:00

plugins_cadence.py

…

plugins_cmd_capabilities.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_catalog.py

fix(plugins): never walk guard-excluded dirs when carrying user files

2026-09-27 01:42:52 +05:30

plugins_cmd_git.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_install.py

refactor(plugins): one helper attributes scan blocks to preserved user files

2026-09-27 01:42:52 +05:30

plugins_cmd_listing.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_remove.py

refactor(cli): split plugins_cmd.py into topical siblings

2026-09-24 11:50:29 -04:00

plugins_cmd_toggle.py

fix(plugins): picker tick purges every alias of the disable; report real flips

2026-09-25 21:19:04 +05:30

plugins_cmd_update.py

fix(plugins): carry user files across staged updates

2026-09-27 01:42:52 +05:30

plugins_cmd.py

refactor(plugins): one helper attributes scan blocks to preserved user files

2026-09-27 01:42:52 +05:30

plugins_discovery.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_dispatch.py

feat(plugins): fire pre/post_auxiliary_call events on every auxiliary LLM call (#79733)

2026-09-22 01:19:12 -07:00

plugins_ledger.py

feat(desktop): the Connectors page replaces the MCP tab (#119074)

2026-09-22 17:16:00 +05:30

plugins_loader.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 13:03:25 -04:00

plugins_manifest.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

plugins_provenance.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins_settings.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_state.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

plugins_transaction.py

refactor(plugins): one helper attributes scan blocks to preserved user files

2026-09-27 01:42:52 +05:30

plugins_updates.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

plugins.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 11:58:45 -04:00

portal_cli.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

post_update.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

process_identity.py

fix(mcp): kill Windows stdio MCP orphan trees (#61059)

2026-09-26 20:58:16 -04:00

profile_channels.py

fix(config): route every config.yaml writer through one comment-preserving writer

2026-09-22 01:07:59 -07:00

profile_cmd.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profile_describer.py

…

profile_distribution.py

fix(profile_distribution): a dir inside a skill stays part of that skill

2026-09-27 02:42:27 +05:30

profile_identity.py

…

profile_memory_config.py

fix(profiles): --clone copies the active memory provider's config (#120115)

2026-09-23 05:37:40 -07:00

profiles.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

fix(providers): keep llamacpp as the model table's managed-runtime id

2026-09-25 14:25:16 -05:00

proxy_cli.py

…

psutil_android.py

…

pt_input_extras.py

…

pty_bridge.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:36:31 -04:00

pty_session.py

fix(dashboard): a /chat tab's attach token is per tab, and one token maps to one PTY

2026-09-20 12:51:30 -07:00

quiet_single_query.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

release_channels.py

feat(release): channel records name the attempt archive

2026-09-23 12:58:33 -04:00

resource_limits.py

…

route_identity.py

…

runtime_paths.py

…

runtime_provider_backends.py

refactor(auth): share the key-prefix check; reach it via rp in the openrouter resolver

2026-09-27 00:56:11 +05:30

runtime_provider_custom.py

fix(tui_gateway): scope manual compression to session profile

2026-09-20 11:19:50 -07:00

runtime_provider.py

refactor(auth): share the key-prefix check; reach it via rp in the openrouter resolver

2026-09-27 00:56:11 +05:30

runtime_state.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

secret_prompt.py

…

secrets_cli.py

…

security_advisories.py

…

security_audit_startup.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

security_audit.py

…

send_cmd.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

service_manager.py

fix(docker): stop sourcing the relocatable venv's activate from sh

2026-09-24 12:30:00 -04:00

session_export_html.py

…

session_export_md.py

…

session_export.py

fix(sessions): transcript exports keep compacted turns, so --delete-after-verified no longer deletes them unseen

2026-09-23 22:22:32 +05:30

session_filters.py

…

session_listing.py

fix(sessions): add sessions.show_subagents to list delegate runs

2026-09-26 20:40:40 -05:00

session_lost_and_found.py

fix: key the tools[] pin by code version; never re-add config-excluded tools

2026-09-23 15:43:51 -07:00

session_recap.py

…

session_recovery.py

fix(recovery): repair out-of-window timestamp cells in the recovered database

2026-09-25 10:46:54 -05:00

session_schema_history.py

fix(state): add immutable created_source provenance column (#56439)

2026-09-26 21:12:19 -04:00

sessions_cmd_browse.py

…

sessions_cmd_journal_mode.py

fix(sessions): let set-journal-mode --force waive only a failed holder scan

2026-09-24 18:08:24 +05:30

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

fix(state): add immutable created_source provenance column (#56439)

2026-09-26 21:12:19 -04:00

sessions_repair_profiles.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:43:45 -04:00

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_profile.py

Setup profile is minted by the backend and found by role, not by name (#119456)

2026-09-23 01:25:04 +05:30

setup_quick.py

fix(config): stop seeding global display values that override every messaging platform's defaults

2026-09-24 17:59:37 +05:30

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup_whatsapp_cloud.py

…

setup.py

docs(env): OPENAI_API_KEY selects openai-api; OpenRouter only for sk-or- keys

2026-09-27 00:56:11 +05:30

shared_profile_warning.py

…

shared_session_attach.py

…

sizefmt.py

…

skills_config.py

…

skills_hub.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

skin_cmd.py

…

skin_engine.py

fix(desktop): pass skin customCSS through to desktop theme context

2026-09-25 20:00:57 -05:00

slack_cli.py

…

slash_exec.py

fix(gateway): /help and /commands show a gated non-admin only the commands they can run

2026-09-21 01:06:02 -07:00

source_build.py

fix(desktop): launch the installed Hermes.app from hermes desktop

2026-09-26 21:42:48 -05:00

source_check.py

fix(source-check): strip inherited pathspec modes from read-only git probes

2026-09-27 01:36:34 +05:30

source_completion.py

fix: preserve source update completion and runtime ownership boundaries

2026-09-24 02:03:58 -04:00

source_releases.py

fix(update): follow the main branch when its channel record is unpublished

2026-09-24 14:23:48 -04:00

source_stamp.py

fix(update): every published checkout identity moves the bootstrap receipt

2026-09-23 22:05:57 -04:00

sqlite_runtime.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

sqlite_safe_read.py

…

sqlite_util.py

…

stale_modules.py

…

status_auth.py

fix(time): tolerate Windows locale strftime errors

2026-09-23 18:29:35 -05:00

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

stdio.py

…

steward.py

fix(pm): resolve the install stamp in pm.paths so sealed stages can read it

2026-09-24 11:12:27 -04:00

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

terminal_breadcrumbs.py

…

terminal_notify.py

…

timefmt.py

…

timeouts.py

…

tips.py

fix: restore catalog Hindsight and harden installers and test guards

2026-09-24 02:03:59 -04:00

tool_availability_notices.py

…

tools_config_cua.py

fix(updates/win): click-session poll, Intel-Mac installer docs, cua-driver opt-in autostart

2026-09-26 17:09:16 -05:00

tools_config_mcp.py

The last four MCP enabled-flag readers use the shared reader (ACP, hermes tools picker, desktop connector card, health sweep) (#119601)

2026-09-22 22:24:31 +00:00

tools_config_post_setup.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

tools_config_providers.py

feat(web): serve managed search through Perplexity

2026-09-24 16:17:16 -04:00

tools_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 16:17:47 -04:00

toolset_scope.py

…

toolset_validation.py

fix(config): hermes doctor and plugins enable read a list-literal platform_toolsets string

2026-09-20 12:44:48 -07:00

uninstall.py

fix(uninstall): mark darwin-only os.getuid as windows-footgun ok

2026-09-26 21:00:12 -04:00

update_abort_recovery.py

fix(update): classify a Desktop SSH serve as its remote client's, not manual-serve

2026-09-25 12:09:37 -05:00

update_channel.py

feat(release): derive canaries from stable build identity

2026-09-21 22:02:46 -04:00

update_cmd_check.py

refactor(update): split hermes update --check into update_cmd_check

2026-09-24 14:08:22 -04:00

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_drain_report.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

update_cmd_fleet_checkout.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

update_cmd_fleet_gatewayless.py

fix(update): a Desktop-only host settles an inventory-less restart obligation (#120740)

2026-09-23 18:48:33 -05:00

update_cmd_fleet.py

fix(gateway): restart wait survives a non-finite drain; tighten its tests

2026-09-26 20:07:47 +05:30

update_cmd_git.py

fix(update): keep commits made on a detached HEAD behind a named rescue ref

2026-09-27 01:00:31 -07:00

update_cmd_maint.py

fix(update): refresh release tags before stamping source versions

2026-09-24 23:52:31 -04:00

update_cmd_stale_survivors.py

fix(cron): stale-code yield reads as an outage in cron status; hermes update restarts proven-stale gateways

2026-09-21 01:57:31 -07:00

update_cmd_stash.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

update_cmd_validation.py

…

update_cmd_windows.py

fix(update,doctor): reconcile duplicate Windows gateway autostart entries

2026-09-26 21:44:50 -05:00

update_cmd_zip.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-19 22:57:07 -04:00

update_cmd.py

fix(update): keep commits made on a detached HEAD behind a named rescue ref

2026-09-27 01:00:31 -07:00

update_completion.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

update_contract.py

refactor(update): table-drive the steward refusal rungs

2026-09-24 14:08:22 -04:00

update_finish.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

update_fleet_scope.py

fix: hermes update restarts only the gateways of the home it updates (#93349)

2026-09-23 05:36:30 -07:00

update_handoff.py

fix(update): start the post-swap child in the checkout

2026-09-23 06:51:47 -07:00

update_host_obligation.py

merge origin/main (7 commits) into ethie/pm-clean

2026-09-21 10:51:15 -04:00

update_inventory.py

fix(update): classify a Desktop SSH serve as its remote client's, not manual-serve

2026-09-25 12:09:37 -05:00

update_lock.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

update_owning_install.py

fix(update): repair an install whose venv runs another checkout

2026-09-25 01:21:28 -04:00

update_receipt.py

fix(gateway): include cron drain in restart exit wait

2026-09-26 20:07:47 +05:30

update_restart_recovery.py

fix(gateway): do not let a launching profile own the host gateway

2026-09-25 12:01:44 -05:00

update_serve_obligations.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-20 10:07:50 -04:00

update_serve_resume.py

…

update_stage.py

fix(update_stage): look the shim marker up in the process home, not ~/.hermes

2026-09-21 19:32:37 -04:00

urllib_security.py

fix(urllib): log the default-certificates fallback once, after every bundle failed

2026-09-22 15:55:23 +05:30

vault.py

refactor(vault): trim the malformed-state coverage and drop the load_config shape guard

2026-09-20 10:21:52 -07:00

venv_sync.py

fix(pm): disable plugins that no longer fit instead of failing the update

2026-09-25 00:00:09 -04:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

fix(cli): pin utf-8 decoding on all text-mode subprocess readers

2026-09-25 14:22:12 -04:00

voice.py

…

web_deps.py

…

web_git.py

…

web_models.py

…

web_read_coalescing.py

…

web_server_chat.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

web_server_config.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

web_server_cron.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

web_server_dashboard.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

web_server_files.py

…

web_server_gateway.py

fix(gateway): do not let a launching profile own the host gateway

2026-09-25 12:01:44 -05:00

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

web_server_mcp.py

fix(profile-scope): bind home and secret tokens inside the try that resets them

2026-09-23 06:46:02 -07:00

web_server_memory.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

web_server_messaging.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

web_server_oauth.py

fix(desktop): label the Anthropic OAuth/Pro card 'Anthropic Account'

2026-09-25 17:18:06 -05:00

web_server_profiles.py

fix(secret-scope): scoped misses fail closed under a foreign-home scope

2026-09-23 06:46:02 -07:00

web_server_sessions.py

fix(state): per-profile store housekeeping under one multiplexed process

2026-09-21 02:56:31 -07:00

web_server_skew_exit.py

fix(serve): retire an SSH-isolated backend once the install moves to new code

2026-09-25 12:09:37 -05:00

web_server.py

fix(desktop): stand down cron ticker when a live gateway owns cron on same HERMES_HOME

2026-09-26 21:38:43 -04:00

webhook.py

Merge origin/main into ethie/pm-clean

2026-09-23 21:55:59 -04:00

win_pty_bridge.py

…

windows_ssh_runtime.py

fix(windows): create protected token descriptors on ARM64

2026-09-21 14:13:07 -04:00

worktree_cmd.py

…

worktree_gc.py

…

worktree_ops.py

…

write_approval_commands.py

refactor(memory): derive a payload's destructive ops in one place

2026-09-24 15:38:22 +05:30

xai_retirement.py

Merge origin/main into ethie/pm-clean

2026-09-23 19:51:34 -04:00