Maciej Lisiewski 4df12d720e Merge pull request #155345 from NousResearch/sec3/95311-files-home-cred-denylist ...

fix(dashboard): hide OS/CLI credential stores from the managed Files API

4df12d720e · 2026-11-15 15:35:27 +01:00

History

..

dashboard_auth

fix(dashboard-auth): over HTTPS read only the cookie name the setter writes

2026-11-14 13:24:26 +01:00

data

docs(plugins): publish create, restore and finish by name

2026-11-14 01:24:46 +05:30

local_runtime

fix(local-runtime): retry the --api-key-file probe after a failed --help

2026-11-14 13:23:29 +01:00

observability

fix(agent): external-process providers are not local servers (#129153)

2026-11-14 05:44:33 +05:30

proxy

…

subcommands

fix(approval): a command the hardline scan could not finish is human-only

2026-11-14 20:51:51 +01:00

web_routers

fix(dashboard): run the locked-root /api/fs read guard off the event loop

2026-11-15 02:14:15 +01:00

__init__.py

…

_early_recovery_zip.py

…

_early_recovery.py

…

_install_repair.py

…

_launchers.py

…

_old_updater.py

fix(update): module-mode old updaters still hand off; shim tests use a manifest

2026-11-14 01:03:00 -08:00

_parser.py

fix(container-boot): an invalid -p in the CMD no longer exits the reconciler

2026-11-13 16:42:15 -08:00

_scan_venv_blockers.py

…

_secrets_common.py

fix(secrets): escape server-derived text before printing through markup consoles

2026-11-14 13:22:36 +01:00

_startup_fast.py

fix: find the install root as the folder that holds hermes_agent/

2026-11-13 18:45:31 +00:00

_subprocess_compat.py

fix(gateway): keep the activity forwarder's stop event local to the turn

2026-11-14 11:37:50 -08:00

_update_takeover.py

feat: install the module-rename compat finder in every Hermes process

2026-11-13 18:45:31 +00:00

active_sessions.py

fix(cli): strip only other-user bits from the session registry; bind attach proof to the socket

2026-11-13 16:54:40 +01:00

agent_plugins.py

…

AGENTS.md

…

anon_auth.py

fix(auth): validate the sign-in token response's inference URL too

2026-11-14 12:04:53 +01:00

anon_challenge.py

…

anon_sign_in_cli.py

…

anon_sign_in.py

fix(auth): build the sign-in account state inside the profile scope

2026-11-14 12:04:53 +01:00

approval_mode.py

…

approval_transport.py

…

approvals_suggest.py

fix(approval): a scan-budget trip asks for approval instead of a hardline refusal

2026-11-14 20:51:51 +01:00

approvals_test.py

fix(approval): a command the hardline scan could not finish is human-only

2026-11-14 20:51:51 +01:00

archive_safe.py

…

auth_codex_browser.py

…

auth_codex.py

…

auth_commands.py

fix(auth): bind the Anthropic browser-login token to Anthropic, not a providers.anthropic proxy

2026-11-13 20:21:56 +01:00

auth_constants.py

…

auth_declared_providers.py

fix(cli): bare custom picker row mints a key_cmd only when it probes

2026-11-13 20:37:31 +01:00

auth_device_flow.py

fix(oauth): callback listeners serve connections concurrently, so an idle preconnect or a slow client never blocks the redirect

2026-11-13 17:58:28 -05:00

auth_error_copy.py

…

auth_external_process.py

…

auth_minimax.py

…

auth_model_picker.py

…

auth_nous.py

fix(auth): check the device-login inference URL against the Nous host allowlist

2026-11-14 12:04:52 +01:00

auth_oauth_grants.py

…

auth_oauth_pkce_plugin.py

…

auth_openrouter.py

…

auth_plugin_providers.py

…

auth_qwen.py

…

auth_xai.py

…

auth_zai_kimi.py

…

auth.py

fix(agent): use declared provider credentials for catalog probes

2026-11-13 20:37:29 +01:00

azure_detect.py

…

backend_retirement.py

…

backup_atomic.py

fix(backup): recover owned ZIP and SQLite staging after interruption

2026-11-14 13:15:34 +01:00

backup_cron_prompts.py

…

backup_restore.py

fix(profiles): profile import and snapshot restore narrow archive file modes

2026-11-13 17:48:43 -08:00

backup_sqlite.py

…

backup_staging.py

fix(backup): handle staging lease failures and recovery gaps

2026-11-14 13:15:34 +01:00

backup.py

fix(backup): handle staging lease failures and recovery gaps

2026-11-14 13:15:34 +01:00

bang_shell.py

…

banner.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

blueprint_cmd.py

fix(cron): /blueprint direct create applies the cron prompt and deliver guards

2026-11-13 18:14:34 +01:00

boot_bootstrap.py

…

browser_connect.py

…

browser_credential.py

…

browser_preview_signins.py

…

browser_runtime.py

…

build_info.py

…

bundled_app.py

…

bundles.py

…

callbacks.py

…

chat_catalog.py

…

chat_launch.py

fix(plugins): hermes_command names a file Windows can start; the example resumes and uses its own exit file

2026-11-14 01:24:46 +05:30

checkpoints.py

…

cli_agent_setup_mixin.py

fix(cli): restart waits re-send one frozen request and stop on Ctrl+C

2026-11-14 06:08:53 -08:00

cli_auto_maintenance.py

…

cli_backtrack_browse.py

…

cli_backtrack.py

…

cli_billing_mixin.py

fix(usage): provider limits first, Nous balance apart

2026-11-15 08:20:26 +05:30

cli_browser_gateway.py

…

cli_chat_error_copy.py

…

cli_chat_turn_mixin.py

fix(cli): drop raw interrupt_debug.log writes that persisted typed input unredacted

2026-11-13 17:50:03 -08:00

cli_commands_mixin.py

…

cli_commands_session_tools.py

…

cli_commands_worktree.py

…

cli_config_load.py

…

cli_cron_lines.py

fix(cron): cronjob list and /cron list show a job's pinned timezone

2026-11-13 16:21:19 -08:00

cli_enter_burst.py

…

cli_footer_split.py

…

cli_info_lines.py

…

cli_info_mixin.py

fix(usage): provider limits first, Nous balance apart

2026-11-15 08:20:26 +05:30

cli_init_mixin.py

fix(cli): wait for the restarted gateway instead of exiting on runtime_draining

2026-11-14 06:08:53 -08:00

cli_inline_images.py

…

cli_loops_mixin.py

…

cli_modal_mixin.py

…

cli_model_switch_mixin.py

…

cli_modern_layout.py

…

cli_output.py

…

cli_panel.py

…

cli_process_dock.py

…

cli_process_notifications.py

…

cli_render.py

fix(agent,gateway): strip <TOOLCALL> markup at send time and from every platform's reply context

2026-11-14 02:52:41 -08:00

cli_session_dock.py

…

cli_session_mixin.py

…

cli_session_switch.py

…

cli_shutdown.py

…

cli_single_query.py

…

cli_snapshot.py

…

cli_status_bar_mixin.py

…

cli_stream_mixin.py

…

cli_subagent_monitor.py

…

cli_terminal_input.py

…

cli_terminal_mixin.py

…

cli_tui_mixin.py

fix(cli): drop raw interrupt_debug.log writes that persisted typed input unredacted

2026-11-13 17:50:03 -08:00

cli_tui_runtime_mixin.py

fix(cli): wait for the restarted gateway instead of exiting on runtime_draining

2026-11-14 06:08:53 -08:00

cli_tui_wrap.py

…

cli_undo_hint.py

…

cli_unknown_command.py

…

cli_voice_mixin.py

…

clipboard_cmd.py

…

clipboard.py

…

codex_models.py

…

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

…

colors.py

…

commands_completion.py

…

commands_platforms.py

…

commands.py

docs(debug): /debug descriptions, tips and issue templates describe the summary

2026-11-13 20:20:47 +01:00

completion.py

…

config_backend.py

fix(config): refuse redacted credential masks on the keyed config writer too

2026-11-14 15:35:44 +01:00

config_backups.py

fix(config): drop world access on backups written before the fix

2026-11-14 14:33:50 +01:00

config_check_diagnostics.py

fix(voice): secondary bots read their own auto_tts scope; config check reports a bad mode

2026-11-14 03:45:21 -08:00

config_credential_values.py

fix(config): refuse a password's own mask when the mask contains a space

2026-11-14 15:35:44 +01:00

config_defaults_auxiliary.py

…

config_defaults_env.py

…

config_defaults_voice.py

feat(tts): add configurable global reply scope

2026-11-14 03:45:21 -08:00

config_defaults.py

feat(security): opt-in security.redact_phone_numbers keeps E.164 numbers in chat replies

2026-11-14 05:01:11 -08:00

config_effective.py

…

config_env_routing.py

…

config_home.py

…

config_issues.py

…

config_key_notices.py

…

config_language.py

…

config_migrations_browser.py

…

config_migrations.py

…

config_model_section.py

…

config_provider_env.py

…

config_providers.py

fix(dashboard): the origin-move guard reads camelCase endpoint aliases too

2026-11-13 20:21:55 +01:00

config_read_errors.py

…

config_route_guard.py

fix(dashboard): settings form keeps a custom aux key across a same-origin path edit

2026-11-13 21:23:31 +01:00

config_runtime_keys.py

…

config_secret_display.py

fix(cli): apply numeric-secret masking to the config set echo on main

2026-11-14 13:09:23 +01:00

config_secret_refs.py

fix(cli): apply numeric-secret masking to the config set echo on main

2026-11-14 13:09:23 +01:00

config_section_guard.py

…

config_set_scalars.py

…

config_show.py

…

config_turn_limit.py

…

config_value_checks.py

feat(tts): add configurable global reply scope

2026-11-14 03:45:21 -08:00

config_version_stamp.py

…

config_worker_save.py

…

config.py

Merge pull request #155255 from NousResearch/sec3/42727-reject-redacted-creds

2026-11-14 22:20:16 +01:00

connectors_cmd.py

…

console_engine.py

…

container_boot.py

fix(container-boot): an invalid -p in the CMD no longer exits the reconciler

2026-11-13 16:42:15 -08:00

context_switch_guard.py

…

cpu_profile.py

…

credential_lifecycle.py

…

cron.py

feat(cron): per-job wrap_response flag to skip header/footer

2026-11-14 03:58:59 -08:00

curator.py

fix(curator): name a damaged lock record in lock/pin errors and docs

2026-11-14 12:50:47 +01:00

curses_ui.py

…

dashboard_procs.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

dashboard_register.py

…

data_cleanup_holders.py

…

data_cleanup.py

…

debug_redaction.py

fix(debug): don't mask systemd unit instances as email addresses

2026-11-14 12:05:40 +01:00

debug_summary.py

fix(debug): count custom platforms and confine source checks in the public summary

2026-11-13 22:55:53 +01:00

debug.py

fix(debug): summary notice and test follow main's /debug upload consent form

2026-11-13 20:20:46 +01:00

default_plugins.py

…

default_soul.py

…

desktop_build_lock.py

…

desktop_build_reuse.py

…

desktop_console.py

…

desktop_plugin_halves.py

…

desktop_plugin_install.py

…

desktop_release_holders.py

…

desktop_update_verify.py

…

diagnostics_upload.py

…

dingtalk_auth.py

…

doctor_config.py

…

doctor_connectivity.py

…

doctor_live.py

…

doctor_platform.py

Merge pull request #151880 from NousResearch/sid/migrate-branch-tool

2026-11-14 05:37:07 +05:30

doctor_report.py

…

doctor_state.py

…

doctor_tools.py

…

doctor.py

…

dump.py

…

env_loader.py

fix(redact): unregister a routed profile's masks when every source is disabled

2026-11-15 01:38:42 +01:00

fallback_check.py

…

fallback_cmd.py

…

fallback_config.py

…

focus_view.py

…

foreign_sessions_browser.py

…

foreign_sessions.py

…

free_tier_bootstrap.py

…

free_tier_offer.py

…

fs_utils.py

…

gateway_agent.py

…

gateway_automation.py

…

gateway_bundled_env.py

fix(gateway): a malformed on-disk launchd plist no longer blocks regeneration

2026-11-14 03:43:44 -08:00

gateway_chat_commands.py

…

gateway_chat_listing.py

…

gateway_chat_startup.py

…

gateway_chat_view.py

…

gateway_chat.py

…

gateway_cli_commands.py

…

gateway_client.py

…

gateway_command_errors.py

…

gateway_connection.py

…

gateway_connections_normalize.py

…

gateway_connections_oauth.py

…

gateway_connections_probe.py

…

gateway_connections_reach.py

…

gateway_connections_ssh_programs.py

…

gateway_connections_ssh_remote.py

…

gateway_connections_ssh_transport.py

…

gateway_connections_ssh.py

…

gateway_connections_watch.py

…

gateway_connections.py

…

gateway_enroll.py

…

gateway_host_record.py

…

gateway_launchd_runtime.py

…

gateway_launchd.py

fix(gateway): propagate HERMES_BUNDLED_* into launchd/systemd service units (#85357)

2026-11-14 03:43:44 -08:00

gateway_lifecycle_guards.py

…

gateway_migrate_backends.py

…

gateway_migrate_guards.py

…

gateway_migrate.py

…

gateway_multiplex_mode.py

…

gateway_multiplex_s6.py

…

gateway_multiplex_served.py

…

gateway_mutations.py

…

gateway_owner_restart.py

fix(cli): restart waits re-send one frozen request and stop on Ctrl+C

2026-11-14 06:08:53 -08:00

gateway_plugin_commands.py

…

gateway_profile_lifecycle.py

…

gateway_queue.py

…

gateway_replay_gap.py

…

gateway_restart_env.py

…

gateway_restart_watcher.py

fix(gateway): load the restart watcher builder with the gateway module

2026-11-14 11:37:50 -08:00

gateway_rollback.py

…

gateway_runtime_attach.py

feat(gateway): mint host-scoped interactive tickets in gateway tickets

2026-11-14 10:50:28 -05:00

gateway_runtime_cli.py

feat(gateway): report the Windows start context in gateway attach

2026-11-14 10:40:53 -05:00

gateway_runtime_discovery.py

…

gateway_runtime_multiplex.py

…

gateway_runtime_progress.py

…

gateway_runtime_replace.py

…

gateway_runtime_service_identity.py

fix(windows): the logon task's launcher waits for the gateway and returns its exit

2026-11-14 06:33:40 -08:00

gateway_runtime_service.py

…

gateway_runtime_start.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

gateway_runtime_tickets.py

feat(gateway): mint host-scoped interactive tickets in gateway tickets

2026-11-14 10:50:28 -05:00

gateway_runtime.py

…

gateway_service_owner.py

…

gateway_session_store.py

fix(cli): restart waits re-send one frozen request and stop on Ctrl+C

2026-11-14 06:08:53 -08:00

gateway_setting_commands.py

…

gateway_setup_service.py

…

gateway_setup_wizard.py

…

gateway_side.py

…

gateway_status_notes.py

fix(gateway): keep systemctl status redaction in place, no facade shim

2026-11-14 12:05:38 +01:00

gateway_supervised_restart.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

gateway_tools_notify.py

…

gateway_tools.py

…

gateway_windows_legacy.py

…

gateway_windows.py

Merge pull request #155556 from NousResearch/sec3/152218-schtasks-xml-principal

2026-11-14 20:30:43 +01:00

gateway.py

fix(gateway): load the restart watcher builder with the gateway module

2026-11-14 11:37:50 -08:00

git_commit_graph.py

fix(logging): print logger names without the hermes_agent. package prefix

2026-11-13 18:45:32 +00:00

git_credentials.py

…

git_pack_tidy.py

…

github_api.py

…

gitlock.py

…

goal_command.py

…

goals.py

…

guest_handoff.py

…

gui_uninstall.py

…

heartbeat.py

…

home_data_layout.py

fix(security): one credential-store dir list for file tools, delivery and dashboard

2026-11-14 14:31:05 +01:00

hooks.py

…

image_provenance.py

…

init_command.py

fix(cli): /init reads AGENTS.md only when it resolves inside the project

2026-11-14 16:16:34 +01:00

input_sanitize.py

…

install_identity.py

…

install_state.py

…

inventory.py

fix(model-picker): the Local row honours exclusions and max_models; only the managed URL's custom row is its duplicate

2026-11-14 02:38:28 -08:00

isolated_scope.py

…

journey.py

…

kanban_boards.py

…

kanban_db_boards.py

…

kanban_db_connect.py

…

kanban_db_context.py

…

kanban_db_default_assignee.py

…

kanban_db_dispatch.py

fix(kanban): keep worker logs out of world read; redact the booked reply

2026-11-13 17:49:25 -08:00

kanban_db_graph.py

…

kanban_db_notify.py

…

kanban_db_workspace.py

…

kanban_db.py

…

kanban_decompose.py

…

kanban_diagnostics.py

…

kanban_notify_thread.py

fix(kanban): notify-unsubscribe without --thread-id removes the topic subscribe inferred

2026-11-14 03:44:36 -08:00

kanban_ops.py

…

kanban_output.py

…

kanban_owner_recovery.py

…

kanban_parser.py

…

kanban_pr_acceptance_store.py

…

kanban_pr_acceptance.py

fix(kanban): let an empty proxy var in the assignee's .env clear the inherited one

2026-11-14 17:16:29 +01:00

kanban_resume_guard.py

…

kanban_specify.py

…

kanban_swarm.py

…

kanban_transfer.py

…

kanban_worker_client.py

fix(cli): wait for the restarted gateway instead of exiting on runtime_draining

2026-11-14 06:08:53 -08:00

kanban_worker_env.py

…

kanban_worker_log.py

fix(kanban): reopen another owner's private worker log; close fd on failed tighten

2026-11-13 17:49:25 -08:00

kanban_workflow.py

…

kanban.py

fix(kanban): notify-unsubscribe without --thread-id removes the topic subscribe inferred

2026-11-14 03:44:36 -08:00

left_core_migration.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

lifecycle.py

…

linux_desktop_entry.py

…

logs.py

…

loops.py

…

macos_signing.py

…

macos_tcc_anchor.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

main_agent_cmds.py

…

main_container.py

…

main_dashboard.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

main_dep_hints.py

…

main_desktop_apparmor.py

…

main_desktop_tcc.py

…

main_desktop.py

…

main_install_repair.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

main_platform_setup.py

…

main_profile_recovery.py

…

main_provider_setup.py

fix(cli): every aux writer drops the old route's key on a route change

2026-11-13 20:46:28 +01:00

main_query_file.py

…

main_resume_args.py

refactor(cli): the -w worktree of a chat session is three functions any launcher can call

2026-11-14 01:24:46 +05:30

main_tui_launch.py

refactor(cli): the -w worktree of a chat session is three functions any launcher can call

2026-11-14 01:24:46 +05:30

main_web_build.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

main.py

fix(cli): keep main.py at its line cap after the fail-closed profile override

2026-11-14 10:05:22 -08:00

managed_scope.py

fix(mcp): fail closed on an unreadable managed overlay in the trust fallback

2026-11-14 17:07:12 +01:00

managed_uv.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

mcp_catalog.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

mcp_config.py

fix(mcp): mask URL credentials in rejection diagnostics and mcp test

2026-11-14 17:07:10 +01:00

mcp_picker.py

…

mcp_security.py

refactor(approval): import _split_env_string from approval_env_split

2026-11-14 21:03:31 +01:00

mcp_startup.py

…

mem_trim.py

…

memory_oauth.py

…

memory_provider_migration.py

…

memory_setup.py

…

middleware.py

…

migrate.py

…

moa_cmd.py

…

moa_config.py

…

model_assignment.py

…

model_catalog.py

…

model_cost_guard.py

…

model_data_policy_guard.py

…

model_normalize.py

…

model_picker_usage.py

…

model_search.py

…

model_selection_guards.py

…

model_setup_flows_azure.py

…

model_setup_flows_bedrock.py

…

model_setup_flows_common.py

fix(model): a stored endpoint key stays with the endpoint it was entered for

2026-11-13 20:21:54 +01:00

model_setup_flows_custom.py

fix(config): move every shared legacy name of the saved endpoint, not just the first

2026-11-13 20:34:31 +01:00

model_setup_flows_local.py

…

model_setup_flows.py

fix(model): a stored endpoint key stays with the endpoint it was entered for

2026-11-13 20:21:54 +01:00

model_setup.py

…

model_switch_providers.py

fix(model-picker): the Local row honours exclusions and max_models; only the managed URL's custom row is its duplicate

2026-11-14 02:38:28 -08:00

model_switch.py

refactor(model): keep the endpoint-key fixes inside the size ratchet

2026-11-13 20:21:55 +01:00

models_cache_lock.py

…

models_catalog_static.py

…

models_detect.py

…

models_fast_regions.py

fix(fast): gate regional OpenAI fast tiers by OpenAI's published matrix

2026-11-13 15:48:27 -08:00

models_local.py

…

models_pricing.py

…

models_process_fingerprint.py

…

models_profile_cache.py

…

models_reasoning_caps.py

…

models_validate.py

fix(models): an OpenRouter preset on a custom openrouter.ai provider switches without a false catalog note

2026-11-14 03:42:26 -08:00

models.py

fix(models): Anthropic model discovery at a Foundry URL sends the Foundry key, not the OAuth token

2026-11-14 15:35:26 +01:00

nous_account.py

fix(usage): provider limits first, Nous balance apart

2026-11-15 08:20:26 +05:30

nous_auth_keepalive.py

…

nous_billing.py

…

nous_subscription.py

…

npm_engine.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

old_updater_deps.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

old_updater_main.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

onboarding_due.py

…

onboarding_run.py

…

onepassword_secrets_cli.py

fix(secrets): escape server-derived text before printing through markup consoles

2026-11-14 13:22:36 +01:00

oneshot.py

…

pairing.py

…

partial_compress.py

…

personality.py

…

pets.py

…

platform_actions.py

fix(platform_actions): a topic-routed satellite may react to its own turn's message

2026-11-13 19:23:34 +01:00

platforms.py

…

plugin_capabilities.py

fix(plugins): a session fork holds only its plugin's own tools

2026-11-13 15:30:30 -08:00

plugin_catalog_presence.py

fix(plugins): pin liveness endpoint URL to loopback (salvage #125745) (#155387)

2026-11-14 12:46:07 +01:00

plugin_catalog.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

plugin_choices.py

…

plugin_command_dispatch.py

…

plugin_compat.py

…

plugin_dev.py

…

plugin_events.py

…

plugin_host_child.py

fix(logging): print logger names without the hermes_agent. package prefix

2026-11-13 18:45:32 +00:00

plugin_host_http_auth.py

…

plugin_host_profiles.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

plugin_host_wire.py

…

plugin_host.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

plugin_install_phase.py

…

plugin_isolation_audit.py

fix: make path-keyed guards follow MOVES so a chunk need not edit them

2026-11-13 20:47:04 +00:00

plugin_isolation.py

feat(plugins): ctx.fork_session runs a bounded background copy of the session agent

2026-11-13 15:30:30 -08:00

plugin_messages.py

…

plugin_oauth.py

…

plugin_packs.py

…

plugin_provider_requests.py

…

plugin_rpc.py

…

plugin_session.py

…

plugin_validate_core_override.py

fix: make path-keyed guards follow MOVES so a chunk need not edit them

2026-11-13 20:47:04 +00:00

plugin_validate_desktop.py

…

plugin_validate_locales.py

…

plugin_validate_private_imports.py

fix(guards): stop passing truncated AGENTS.md chains and misjudging moved modules

2026-11-13 20:47:05 +00:00

plugin_validate.py

feat: install the module-rename compat finder in every Hermes process

2026-11-13 18:45:31 +00:00

plugins_activation_live.py

…

plugins_activation.py

fix(providers): publish an updated provider plugin only once it imported whole

2026-11-14 05:45:02 +05:30

plugins_admission.py

…

plugins_auto_update.py

fix(providers): reload an updated provider plugin in the running gateway

2026-11-14 05:45:02 +05:30

plugins_aux_tasks.py

fix(plugins): inheriting a built-in auxiliary slot's route needs llm.allow_task_override

2026-11-13 15:30:30 -08:00

plugins_cadence.py

…

plugins_capability_ctx.py

fix(plugins): a session fork holds only its plugin's own tools

2026-11-13 15:30:30 -08:00

plugins_cmd_capabilities.py

…

plugins_cmd_catalog.py

…

plugins_cmd_git.py

…

plugins_cmd_inspect.py

…

plugins_cmd_install.py

…

plugins_cmd_listing.py

…

plugins_cmd_remove.py

…

plugins_cmd_toggle.py

…

plugins_cmd_update_all.py

fix(providers): reload an updated provider plugin in the running gateway

2026-11-14 05:45:02 +05:30

plugins_cmd_update.py

fix(plugins): print a linked plugin's checkout path as text, not markup

2026-11-15 01:22:06 +05:30

plugins_cmd.py

fix(plugins): print a linked plugin's checkout path as text, not markup

2026-11-15 01:22:06 +05:30

plugins_content.py

…

plugins_context.py

fix(plugins): a timed-out plugin load can no longer register an idle task

2026-11-13 15:30:30 -08:00

plugins_discovery.py

…

plugins_dispatch.py

…

plugins_idle_tasks.py

fix(gateway): plugin idle-task runs stop with gateway housekeeping

2026-11-13 15:30:30 -08:00

plugins_injection.py

…

plugins_ledger.py

…

plugins_load_guard.py

fix(plugins): a timed-out plugin load can no longer register an idle task

2026-11-13 15:30:30 -08:00

plugins_loader.py

…

plugins_manifest.py

…

plugins_provenance.py

…

plugins_registrars.py

…

plugins_session_env.py

fix(lint): clear the findings ruff preview reports

2026-11-15 14:02:40 +05:30

plugins_settings.py

…

plugins_state.py

…

plugins_transaction.py

…

plugins_updates.py

fix(plugins): a linked plugin gets an update hint that works, not adopt

2026-11-15 01:22:06 +05:30

plugins.py

fix(providers): reload an updated provider plugin in the running gateway

2026-11-14 05:45:02 +05:30

portal_cli.py

…

post_update.py

fix(post_update): migration backups are owner-only

2026-11-14 14:33:50 +01:00

process_identity.py

…

process_supervisor.sh

…

profile_channels.py

…

profile_cmd.py

…

profile_describer.py

…

profile_distribution.py

fix(config): drop world access on config.yaml copies outside the writer

2026-11-13 17:48:43 -08:00

profile_identity.py

…

profile_memory_config.py

…

profile_model_seed.py

…

profile_provision_gateway.py

…

profile_provision.py

…

profiles_cache.py

…

profiles_config.py

…

profiles_export_scrub.py

…

profiles_initialization.py

fix(profiles): profile import and snapshot restore narrow archive file modes

2026-11-13 17:48:43 -08:00

profiles_remove.py

…

profiles_service_cleanup.py

…

profiles.py

test(security): cover legacy credential-store layouts; profile export reuses the store list

2026-11-14 14:31:37 +01:00

projects_cmd.py

…

projects_db.py

…

prompt_size.py

…

prompt_stash.py

…

provider_catalog.py

…

providers.py

…

proxy_cli.py

fix(egress): escape Bitwarden refresh error in egress start/restart

2026-11-14 13:22:36 +01:00

prune_advisor.py

…

psutil_android.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

pt_input_extras.py

…

pty_bridge.py

…

pty_session.py

…

quiet_single_query.py

…

relaunch.py

…

relay_plugin_cutover.py

…

relay_plugin_migrate.py

…

release_channels.py

…

resource_limits.py

…

route_identity.py

refactor(model): keep the endpoint-key fixes inside the size ratchet

2026-11-13 20:21:55 +01:00

runtime_paths.py

…

runtime_provider_backends.py

…

runtime_provider_custom.py

fix(providers): bind every pooled custom-endpoint key to the origin it was entered for

2026-11-13 20:21:55 +01:00

runtime_provider_missing_key.py

…

runtime_provider.py

fix(fallback): drop the primary's failure when the turn's overrides change the resolved route

2026-11-15 01:58:38 +01:00

runtime_readiness.py

…

runtime_state.py

…

sandbox_image_switch.py

…

secret_prompt.py

…

secrets_cli.py

fix(secrets): escape bws install/setup-fetch errors too; lint salvaged test

2026-11-14 13:22:36 +01:00

security_advisories.py

…

security_audit_startup.py

…

security_audit.py

…

send_cmd.py

…

service_manager.py

…

session_export_html.py

…

session_export_md.py

fix(sessions): export --redact keeps every entry when two keys mask to the same text

2026-11-14 02:37:48 -08:00

session_export.py

…

session_filters.py

…

session_listing.py

…

session_lost_and_found.py

…

session_recap.py

…

session_recovery.py

…

session_reset_retirement.py

…

session_schema_history.py

…

session_worktree.py

refactor(cli): the -w worktree of a chat session is three functions any launcher can call

2026-11-14 01:24:46 +05:30

sessions_adopt.py

…

sessions_cmd_browse.py

…

sessions_cmd_journal_mode.py

…

sessions_cmd_repair_profiles.py

…

sessions_cmd.py

…

sessions_discard.py

…

sessions_owner.py

…

sessions_repair_profiles.py

…

setup_agent_import.py

…

setup_hidden_env.py

…

setup_migration.py

…

setup_platforms.py

…

setup_quick.py

…

setup_summary.py

…

setup_terminal.py

…

setup_tts.py

…

setup.py

…

shared_profile_warning.py

…

shared_session_attach.py

fix(cli): strip only other-user bits from the session registry; bind attach proof to the socket

2026-11-13 16:54:40 +01:00

sizefmt.py

…

skills_config.py

…

skills_hub.py

fix(skills): print the third-party notice after the file list on unprompted installs

2026-11-14 19:54:21 -05:00

skin_cmd.py

…

skin_engine.py

…

slack_cli.py

…

slash_exec.py

…

source_build.py

fix(build): normalize a lone mixed-case userconfig for pnpm; state pnpm's twin rule

2026-11-13 18:16:09 +01:00

source_check.py

test: put the packaged state store at hermes_agent/ in the downgrade guard fixtures

2026-11-13 20:47:04 +00:00

source_completion.py

…

source_releases.py

…

source_stamp.py

…

sqlite_runtime.py

…

sqlite_safe_read.py

…

sqlite_util.py

…

ssh_workspace_fs.py

…

staged_uploads.py

…

stale_modules.py

…

status_auth.py

…

status_bar_git.py

…

status_report.py

…

status.py

…

stderr_timestamp.py

…

stdio.py

…

steward.py

…

stream_json.py

…

suggestions_cmd.py

…

telegram_managed_bot.py

…

terminal_breadcrumbs.py

…

terminal_notify.py

…

termination_guard.py

fix(backup): recover owned ZIP and SQLite staging after interruption

2026-11-14 13:15:34 +01:00

timefmt.py

…

timeouts.py

…

tips.py

…

tool_availability_notices.py

…

tools_config_cua.py

…

tools_config_mcp.py

…

tools_config_post_setup.py

…

tools_config_providers.py

docs(cli): vision wizard comment states which key the custom endpoint gets

2026-11-13 20:46:29 +01:00

tools_config.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

toolset_scope.py

…

toolset_validation.py

…

tui_worktree_resume.py

…

turn_exit.py

…

ui_preferences.py

…

uninstall.py

…

update_abort_recovery.py

…

update_channel.py

…

update_cmd_check.py

…

update_cmd_commit.py

fix(update): preload hermes_cli.config_backups before the tree move

2026-11-14 16:16:33 +01:00

update_cmd_common.py

…

update_cmd_config.py

…

update_cmd_drain_report.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_cmd_fleet_checkout.py

…

update_cmd_fleet_gatewayless.py

…

update_cmd_fleet_unit_budget.py

…

update_cmd_fleet_verify.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_cmd_fleet.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_cmd_force_stop.py

fix(update): resolve systemctl through hermes_platform in the --force scope kill

2026-11-14 01:11:55 -08:00

update_cmd_git.py

fix(update): order pm-store PortableGit trees by version, not by name

2026-11-14 17:07:29 +01:00

update_cmd_maint.py

fix(update): retired updater shims never start an update from live code

2026-11-14 01:03:00 -08:00

update_cmd_pause_gate.py

…

update_cmd_posix_pause.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_cmd_stale_survivors.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_cmd_stash.py

…

update_cmd_validation.py

…

update_cmd_windows.py

…

update_cmd_zip.py

…

update_cmd.py

feat(update): hermes update --force stops the gateways at once instead of draining

2026-11-14 01:11:55 -08:00

update_completion.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_contract.py

…

update_custody.py

…

update_downgrade_guard.py

fix: make path-keyed guards follow MOVES so a chunk need not edit them

2026-11-13 20:47:04 +00:00

update_finish.py

…

update_fleet_scope.py

fix(update): judge a runtime's checkout by the source it runs, not a shared interpreter

2026-11-13 23:49:02 -08:00

update_handoff.py

…

update_host_obligation.py

…

update_inventory.py

fix(update): a restart left pending survives into the completion process, by (pid, start time), and reconciles as pending

2026-11-14 02:23:19 -08:00

update_launch_files.py

fix(update): a worktree or scratch-home update never rewrites or restarts another checkout's gateway

2026-11-13 23:49:02 -08:00

update_lock.py

…

update_owning_install.py

…

update_pause_record.py

fix(update): --force sweeps only its gateway's jobs, fails on a stuck scope, holds an unsettled unit

2026-11-14 01:11:55 -08:00

update_proxy_env.py

…

update_receipt.py

fix(gateway): a non-forced restart or update never stops a gateway still doing work

2026-11-14 02:23:19 -08:00

update_restart_recovery.py

…

update_serve_obligations.py

…

update_serve_resume.py

…

update_stage.py

…

update_windows_acl.py

…

url_utils.py

…

urllib_security.py

…

vault.py

…

venv_sync.py

fix(move-shims): an old-name python -m launch reaches the killed-update repair before hermes_agent imports

2026-11-13 18:45:33 +00:00

vercel_auth.py

…

verify_cmd.py

…

version_info.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

voice.py

…

web_asset_mime_types.py

…

web_build_limits.py

…

web_deps.py

…

web_git.py

…

web_host_terminal_sessions.py

…

web_host_terminal_ssh.py

…

web_host_terminal.py

…

web_models.py

fix(cron): dashboard can update wrap_response, rejects coercible values; store stays under baseline

2026-11-14 03:58:59 -08:00

web_read_coalescing.py

…

web_server_app.py

…

web_server_boundary.py

…

web_server_chat.py

…

web_server_config.py

fix(agent): external-process providers are not local servers (#129153)

2026-11-14 05:44:33 +05:30

web_server_cron.py

feat(cron): per-job wrap_response flag to skip header/footer

2026-11-14 03:58:59 -08:00

web_server_dashboard.py

…

web_server_file_response.py

…

web_server_file_tickets.py

…

web_server_files.py

fix(dashboard): refuse credential stores reached through a symlink in the Files API

2026-11-15 02:14:14 +01:00

web_server_gateway.py

…

web_server_idle_exit.py

…

web_server_idle_proof.py

…

web_server_lifecycle.py

…

web_server_mcp.py

…

web_server_memory.py

…

web_server_messaging.py

…

web_server_oauth.py

fix(auth): a CLI-login plugin's sign-in card and re-login hints show the login command it declares

2026-11-15 01:58:38 +01:00

web_server_owner_exit.py

…

web_server_plugin_profiles.py

fix(plugins): name the profile home in the dropped Set-Cookie warning

2026-11-14 17:11:29 +01:00

web_server_profiles.py

fix(skills): isolate concurrent hub installs

2026-11-14 17:09:40 +01:00

web_server_remote_media.py

…

web_server_session_token.py

…

web_server_sessions.py

feat(plugins): ctx.register_idle_task runs a plugin job on the curator's idle schedule

2026-11-13 15:30:30 -08:00

web_server_skew_exit.py

…

web_server_static_assets.py

refactor: callers find the install folder through project_root_str()

2026-11-13 18:45:31 +00:00

web_server_surface.py

…

web_server.py

…

web_session_sockets.py

…

web_upload_limit.py

…

web_whatsapp_session.py

…

webapp_access.py

…

webapp_launcher.py

…

webapp_page_policy.py

…

webapp_previews.py

…

webapp_relay_target.py

…

webapp_sign_in.py

…

webapp.py

…

webhook.py

fix(webhook): one shared target check, non-string targets flagged, repair hint keeps route settings

2026-11-14 03:49:07 -08:00

welcome_trial.py

…

win_pty_bridge.py

…

windows_appinstaller_update.py

…

windows_ssh_runtime.py

…

windows_store_update.py

…

worktree_archive.py

…

worktree_cmd.py

…

worktree_exit.py

…

worktree_gc.py

…

worktree_ops.py

…

worktree_registry.py

…

worktree_retention.py

…

worktree_sweep.py

…

write_approval_commands.py

fix(skills): always scan background-review skill writes

2026-11-13 17:51:19 -08:00

xai_retirement.py

fix(config): drop world access on config.yaml copies outside the writer

2026-11-13 17:48:43 -08:00