OOOOOAO 1a6503a520 fix(mcp): thread RFC 9207 iss through every OAuth callback relay ...

mcp 2.x rejects an authorization response that omits the RFC 9207 `iss`
parameter when the authorization server advertised
`authorization_response_iss_parameter_supported`. Cloudflare advertises it
AND sends it; the CLI loopback handler has always forwarded it, but every
other callback producer parsed only code/state/error, so the SDK raised:

    OAuthFlowError: Authorization response missing iss parameter
    advertised by the authorization server

and the server parked. Same machine, same config, `hermes mcp login <name>`
from a terminal succeeded — the failure is specific to the non-CLI relays.

Forward `iss` on every producer, matching `_make_callback_handler()`:

- tools/mcp_dashboard_oauth.py: `deliver_callback()` accepts `iss`;
  `wait_for_callback()` returns `(code, state, iss)`. The bridge in
  tools/mcp_oauth.py already splats that tuple into
  `_authorization_code_result(code, state, iss)`, so it needs no change.
- tui_gateway/mcp_oauth_sessions.py: the gateway-hosted loopback listener
  parses `iss`, and `deliver_callback_flow()` forwards it.
- tui_gateway/methods_tools.py: the `oauth.callback` RPC passes `iss`.
- hermes_cli/web_routers/mcp.py: the dashboard callback route accepts it.
- apps/desktop/electron/mcp-oauth-callback-ipc.ts: the one-shot listener
  reads `iss` off the redirect (the renderer already spreads the whole
  callback object into the RPC, so it flows through unchanged).

Providers that omit `iss` round-trip as `None`/`null` rather than being
dropped, so servers that do not advertise RFC 9207 keep working.

Verified live on Windows against mcp.cloudflare.com, whose metadata sets
`authorization_response_iss_parameter_supported: true`: the server that
previously parked on the missing-iss error now reports
`Authenticated — 3452 tool(s) available` and `hermes mcp test cloudflare`
connects. State-mismatch and replay rejection are unchanged.

Tests (each fails on base, passes with the fix):
- test_dashboard_flow_preserves_rfc9207_iss
- test_deliver_callback_forwards_iss (client-redirect relay)
- test_loopback_listener_forwards_iss (real HTTP redirect)
- two vitest cases on the Electron listener, incl. the iss-absent case

Refs #92758, #99984. PR #92765 fixes the dashboard route and the loopback
listener but not the client-redirect relay
(`deliver_callback_flow` / `oauth.callback` / the Electron listener), which
is the path Desktop drives against a remote backend.

2026-09-15 13:00:12 +05:30

..

dashboard_auth

fix(dashboard-auth): one refresh single-flight for the cookie gate and the native route, off the event loop

2026-09-13 09:40:44 -07:00

local_runtime

feat(local-runtime): prefer llama.cpp b10964

2026-09-14 21:49:13 -04:00

observability

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

proxy

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

subcommands

fix(cron): a successful run resolves the job's open incidents; a repeat re-opens them

2026-09-14 09:19:32 -07:00

web_routers

fix(mcp): thread RFC 9207 iss through every OAuth callback relay

2026-09-15 13:00:12 +05:30

__init__.py

chore(release): v0.21.3 (v2026.9.14)

2026-09-14 09:02:28 -07:00

_early_recovery.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

_install_repair.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

_parser.py

feat: refresh one pooled OAuth grant from the CLI

2026-09-07 08:06:48 -07:00

_scan_venv_blockers.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

_secrets_common.py

fix(integration): restore subprocess stdin=DEVNULL / utf-8 encoding guards and windows-footgun gates dropped by round-3 compaction

2026-09-03 02:46:19 -07:00

_startup_fast.py

fix(cli): preserve explicit dashboard update checks

2026-09-07 06:13:16 -07:00

_subprocess_compat.py

refactor(git): trim safe.directory tests to two invariants, memoise the config read

2026-09-11 19:01:47 -07:00

active_sessions.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

agent_import.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

agent_plugins.py

refactor(hermes_cli): simplify agent_import/agent_plugins (1369->1020 LOC): inline single-use helpers, unify permission/memory import paths, dispatch-driven report

2026-09-02 21:00:34 -07:00

AGENTS.md

fix(migrate): hermes update refuses to fold cross-user / cross-scope gateways; auto_multiplex_migration opt-out

2026-09-13 14:48:09 -07:00

anon_auth.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

anon_sign_in_cli.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

anon_sign_in.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

approval_mode.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval_transport.py

refactor(hermes_cli): group C — AST-neutral layout compaction (hug/pack/join, verified ast.dump-equal)

2026-09-02 20:56:23 -07:00

approvals_suggest.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approvals_test.py

fix(approval): approvals.deny applies inside isolated containers too (#91002)

2026-09-05 18:08:00 +05:30

archive_safe.py

refactor(hermes_cli): group D — is_relative_to/closing/suppress collapses, dedupe external paths via dict, drop redundant snap_dir/guards, compact bang_shell/archive_safe/__init__ layout

2026-09-02 22:51:30 -07:00

auth_codex.py

fix(codex): both transaction locks wait out the endpoint; adopt only a complete pair

2026-09-14 20:38:07 +05:30

auth_commands.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_constants.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_device_flow.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_minimax.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

auth_model_picker.py

simplify(compat): models — drop 52 re-exports from hermes_cli.models, repoint 16 callers + 41 test files

2026-09-03 13:48:49 -07:00

auth_nous.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

auth_oauth_grants.py

refactor(auth): one stat per store file in the heal fingerprint

2026-09-09 21:17:35 +05:30

auth_openrouter.py

feat(auth): OpenRouter OAuth PKCE login via hermes auth add openrouter --type oauth

2026-09-12 22:07:41 -07:00

auth_qwen.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

auth_spotify.py

refactor(auth): share the loopback PKCE listener between OAuth flows

2026-09-12 22:07:41 -07:00

auth_xai.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

auth_zai_kimi.py

refactor(hermes_cli): group C auth modules — compact WHY-preserving comments and docstrings

2026-09-02 21:59:38 -07:00

auth.py

fix(codex): both transaction locks wait out the endpoint; adopt only a complete pair

2026-09-14 20:38:07 +05:30

azure_detect.py

refactor(hermes_cli): azure_detect — TokenProvider alias, collapsed except ladders, tighter docs

2026-09-02 20:34:28 -07:00

backup.py

fix(utils): new non-secret atomic writes follow the process umask again

2026-09-13 05:07:11 -07:00

bang_shell.py

fix(integration): bang_shell builds its env via build_subprocess_env()

2026-09-03 02:07:33 -07:00

banner.py

docs(banner): describe the current stray-spawn class

2026-09-13 20:57:03 -07:00

blueprint_cmd.py

refactor(hermes_cli): group C — pack short dict/kwarg spans (AST-verified)

2026-09-02 21:26:16 -07:00

browser_connect.py

fix(browser): bound auth backups without replacing live SQLite files

2026-09-08 05:10:57 -07:00

build_info.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

bundles.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

callbacks.py

fix: yield subagent monitor to incoming CLI prompts

2026-09-08 03:06:30 -07:00

checkpoints.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

claw.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_agent_setup_mixin.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_billing_mixin.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

cli_chat_turn_mixin.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_commands_mixin.py

refactor(sessions): one session-id minter; QQ update-prompt key from build_session_key

2026-09-13 05:21:02 -07:00

cli_info_mixin.py

fix(insights): short-circuit before opening when state.db is absent

2026-09-14 05:28:46 -07:00

cli_loops_mixin.py

chore: drop vendor name from the /queue comment

2026-09-13 20:41:41 -07:00

cli_modal_mixin.py

fix(computer_use): approval goes through the shared gate; no callback now fails closed

2026-09-13 05:21:02 -07:00

cli_model_switch_mixin.py

Port from langchain-ai/deepagents#5829: confirm mid-session model switches that abandon a large cached context

2026-09-13 20:54:50 -07:00

cli_output.py

refactor(hermes_cli): split TUI mixin god methods into phase helpers, unify panel/fragment boilerplate, compact docs

2026-09-02 21:23:44 -07:00

cli_process_notifications.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_session_mixin.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

cli_status_bar_mixin.py

refactor(cli): vim mode is a config key only — drop the /vim slash command

2026-09-12 22:00:02 -07:00

cli_stream_mixin.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

cli_subagent_monitor.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_terminal_mixin.py

fix(cli): keep monitor repaints safe during prompt handoff

2026-09-08 13:39:17 -07:00

cli_tui_mixin.py

feat(model-pickers): reasoning effort selection on every model picker

2026-09-13 16:43:50 -07:00

cli_voice_mixin.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

clipboard.py

refactor(hermes_cli): AST-neutral closer hugging across r3-17 slice files

2026-09-02 23:58:31 -07:00

codex_models.py

Port pattern from zed-industries/zed#62729: request ungated Codex model catalog (clean-room)

2026-09-13 20:50:10 -07:00

codex_runtime_plugin_migration.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

codex_runtime_switch.py

refactor(hermes_cli): group B — docstring compaction, provider scalar-field table, config mirror _items helper, regex kebab collapse

2026-09-02 21:03:13 -07:00

colors.py

refactor(hclib): remaining hermes_cli library modules — dead code, unified helpers, flattened branches

2026-09-02 15:03:42 -07:00

commands_completion.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

commands_platforms.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:25:36 -07:00

commands.py

Inspired by Factory Droid: /queue prompts are now listable, editable, and reorderable before they run

2026-09-13 20:41:41 -07:00

completion.py

refactor(hermes_cli): commands_completion — _completion() factory (7 sites), @_quiet on tools completer, score table; completion — inline single-use locals

2026-09-03 00:06:54 -07:00

config_backups.py

fix(config): a fresh process recovers the last good config.yaml instead of running on defaults

2026-09-12 16:17:04 -07:00

config_defaults.py

fix(config): register discord websocket_event_max_silence_seconds default

2026-09-15 10:48:58 +05:30

config_effective.py

fix(config): good-config backup only for the active home; fixture-based effective-config contract

2026-09-13 05:09:06 -07:00

config_home.py

fix(config): diagnose unavailable home links without claiming YAML corruption

2026-09-07 04:46:37 -07:00

config_migrations.py

manage_connections covers local MCP servers; setup_mcp leaves the schema (NS-867, PR1) (#109517)

2026-09-15 00:41:13 +05:30

config_providers.py

fix(metadata): GLM context windows from the live catalog; hyphenated slugs, entry-level overrides, aux inherits main pin

2026-09-10 01:08:18 -07:00

config.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

console_engine.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

container_boot.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

context_switch_guard.py

refactor(hermes_cli): group B — _rewrite_key generalization (v31/v35 fold), _put in provider normalizer, dedup loop flatten, gateway configured-dict; AST-neutral layout hug/pack

2026-09-02 20:47:14 -07:00

copilot_auth.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

credential_lifecycle.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

cron.py

fix(cron): a successful run resolves the job's open incidents; a repeat re-opens them

2026-09-14 09:19:32 -07:00

curator.py

feat: curator prunes unused skills at 30 days (was 90), stale at 14

2026-09-12 05:56:15 -07:00

curses_ui.py

fix(cli): keep radio choices visible below long descriptions

2026-09-05 16:45:59 +05:30

dashboard_procs.py

fix(process-identity): desktop reap, Windows updater and profile liveness use the canonical matchers

2026-09-13 05:21:02 -07:00

dashboard_register.py

refactor(hermes_cli): group D layout — join lone closing-bracket lines (AST-neutral)

2026-09-03 00:04:40 -07:00

debug.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

default_soul.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

dep_ensure.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

desktop_update_verify.py

fix(desktop): verify the Windows update receipt against the checkout, not cwd

2026-09-10 01:25:45 -07:00

diagnostics_upload.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

dingtalk_auth.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

doctor_config.py

compat(plugins): tell users which installed plugins break on 2026-09-14, and stop loading them after

2026-09-04 01:28:31 -07:00

doctor_connectivity.py

simplify(compat): anthropic_adapter — drop 30 re-exports + 1 alias, repoint 22 caller files (32 sites), 38 test files (~125 sites)

2026-09-03 13:16:47 -07:00

doctor_live.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

doctor_platform.py

simplify(compat): tools/mcp_tool — repoint 20 non-test callers to the defining mcp_tool_* siblings

2026-09-03 13:29:35 -07:00

doctor_report.py

refactor(hermes_cli): doctor — warn_on_error ctx manager replaces try/except-warn wrappers; platform ladders/tcc text to data

2026-09-03 00:05:41 -07:00

doctor_state.py

refactor(state): stdlib-only home for read_only_db_uri; reuse the doctor/repair helpers

2026-09-15 12:51:27 +05:30

doctor_tools.py

fix(doctor): image_gen hint covers a selected provider with a missing key or SDK

2026-09-12 08:24:11 -07:00

doctor.py

compat(plugins): tell users which installed plugins break on 2026-09-14, and stop loading them after

2026-09-04 01:28:31 -07:00

dump.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

env_loader.py

fix(env-loader): split source_supplied_names() out of secret_source_names()

2026-09-15 11:03:39 +05:30

fallback_cmd.py

test(fallback): keep the two persisted-config invariants; PTY harness for the picker error path

2026-09-06 05:41:46 -07:00

fallback_config.py

fix(fallback): named custom providers keep their configured identity after automatic fallback (#98739)

2026-09-13 20:51:06 -07:00

focus_view.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

foreign_sessions_browser.py

fix(sessions): honor CLAUDE_CONFIG_DIR and CODEX_HOME in foreign session discovery

2026-09-12 21:39:10 -07:00

foreign_sessions.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

free_tier_bootstrap.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

gateway_enroll.py

refactor(hermes_cli): gateway_enroll.py — inline single-use identity-token wrapper, compact docs

2026-09-02 20:40:51 -07:00

gateway_migrate_guards.py

fix(gateway): migrate --multiplex rolls back or resumes when the default cannot come up; every installed unit counts

2026-09-14 16:16:06 -07:00

gateway_migrate.py

fix(gateway): migrate --multiplex rolls back or resumes when the default cannot come up; every installed unit counts

2026-09-14 16:16:06 -07:00

gateway_multiplex_served.py

fix(gateway): served_profiles bind to a verified gateway identity, not bare PID existence

2026-09-13 15:41:01 -07:00

gateway_windows.py

fix(gateway-windows): bind the attestation to process birth, not the ledger claim

2026-09-14 20:51:37 +05:30

gateway.py

fix(gateway): --profile=ops gateway is never matched as the default profile's

2026-09-13 15:41:01 -07:00

git_credentials.py

fix(plugins): run gh auth token under the noninteractive git env

2026-09-10 01:00:19 -07:00

gitlock.py

refactor(cli): hold shallow.lock across write-verify-restore; share the atomic write

2026-09-12 15:00:37 +05:30

goal_command.py

fix: share goal controls while messaging turns are active

2026-09-07 00:51:41 -07:00

goals.py

fix(goals): evict a registry-torn-down handle from _DB_CACHE

2026-09-13 15:41:01 -07:00

gui_uninstall.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

heartbeat.py

fix(tui): heartbeat ticks share the /loop idle poll and rewind when no turn starts

2026-09-06 07:20:24 -07:00

hooks.py

refactor(hermes_cli): compact hooks CLI payload table and handlers, no behavior change

2026-09-02 20:06:17 -07:00

image_provenance.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

init_command.py

refactor(hermes_cli): second pass on the 15 small modules — compact bodies, drop redundant locals/blanks, tighten module docs

2026-09-02 21:20:42 -07:00

input_sanitize.py

refactor(hermes_cli): small modules — default_soul scaffold constants, input_sanitize sub table, diagnostics_upload request helper, gui_uninstall/dep_ensure packing

2026-09-03 00:06:30 -07:00

install_identity.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

inventory.py

feat(desktop): Nous free tier on Hermes Desktop (#105260)

2026-09-11 03:45:32 +05:30

journey.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

kanban_boards.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_db_connect.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

kanban_db_dispatch.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

kanban_db_graph.py

fix(kanban): preserve durable origins for worker-created tasks

2026-09-07 14:16:57 -07:00

kanban_db_notify.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_db_workspace.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_db.py

fix(kanban): review handoff rollback discards staged copies; no double upload

2026-09-13 14:37:17 -07:00

kanban_decompose.py

fix(config): kanban decompose and local-models status keep their fail-open config reads

2026-09-13 05:09:06 -07:00

kanban_diagnostics.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

kanban_ops.py

fix(kanban): clarify that watch names its initial board

2026-09-07 06:04:06 -07:00

kanban_output.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_parser.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

kanban_pr_acceptance_store.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_pr_acceptance.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_specify.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

kanban_swarm.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

kanban_transfer.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban.py

fix(kanban): preserve Discord thread route anchors

2026-09-14 16:14:33 -07:00

lifecycle.py

refactor(cli-misc): lifecycle.py — single plugin-hook dispatch helper

2026-09-02 20:12:36 -07:00

linux_desktop_entry.py

fix(desktop): preserve custom Linux launcher entries when opted out

2026-09-07 04:55:17 -07:00

logs.py

refactor(cli-misc): logs.py — pass filter kwargs through instead of re-listing them

2026-09-02 20:15:37 -07:00

loops.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

macos_tcc_anchor.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

main_agent_cmds.py

fix(insights): short-circuit before opening when state.db is absent

2026-09-14 05:28:46 -07:00

main_dashboard.py

fix(update): retain the detached updater log mirror

2026-09-07 05:56:50 -07:00

main_desktop.py

refactor(desktop): gate the WSLg D3D12 selection inside the helper and test the real launch env

2026-09-09 10:28:52 -07:00

main_install_repair.py

fix(update): probe configured-feature deps in the target venv, not the updater

2026-09-12 08:47:21 -07:00

main_platform_setup.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

main_provider_setup.py

feat(hermes model): delegation's effort step says 'Inherit parent'

2026-09-13 16:43:50 -07:00

main_tui_launch.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

main_web_build.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

main.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

managed_scope.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

managed_uv.py

docs(update): scope the stderr-merge comments to legacy hand-offs

2026-09-05 15:02:53 +02:00

mcp_catalog.py

fix(claw): detect the gateway's process title openclaw-gateway

2026-09-12 08:34:43 -07:00

mcp_config.py

fix(mcp): fully redact credential headers in MCP probe errors and test display (salvage #97466)

2026-09-12 20:49:18 -07:00

mcp_picker.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

mcp_security.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

mcp_startup.py

fix(mcp): key the desktop/TUI discovery slot by profile home (#67605)

2026-09-11 19:50:46 -07:00

mem_trim.py

refactor(hermes_cli): layout compaction of managed_uv/mem_trim/migrate/managed_scope (AST-neutral) + small collapses

2026-09-02 21:44:59 -07:00

memory_oauth.py

refactor(hermes_cli): group F — drop section banners, one-line UI helpers, fold configure pre-selection, hug closers

2026-09-02 20:50:08 -07:00

memory_setup.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

middleware.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

migrate.py

refactor(hermes_cli): layout compaction of managed_uv/mem_trim/migrate/managed_scope (AST-neutral) + small collapses

2026-09-02 21:44:59 -07:00

moa_cmd.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

moa_config.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

model_catalog.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

model_cost_guard.py

refactor(hermes_cli): models cluster — AST-neutral layout compaction (hug brackets, pack hanging lists)

2026-09-02 20:51:30 -07:00

model_data_policy_guard.py

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

model_normalize.py

fix(deepseek): pass custom model ids through instead of rewriting them

2026-09-10 04:22:38 -07:00

model_search.py

refactor(hermes_cli): models cluster — AST-neutral layout compaction (hug brackets, pack hanging lists)

2026-09-02 20:51:30 -07:00

model_selection_guards.py

test: trim the context-cache guard tests to invariants; docs: name the surfaces that actually confirm

2026-09-13 20:54:50 -07:00

model_setup_flows_azure.py

refactor(hermes_cli): compact setup-flow docstrings/comments; fold env-ref identity indexing

2026-09-02 21:54:56 -07:00

model_setup_flows_bedrock.py

refactor(hermes_cli): compact setup-flow docstrings/comments; fold env-ref identity indexing

2026-09-02 21:54:56 -07:00

model_setup_flows_common.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

model_setup_flows_custom.py

fix(cli): report the auto-detected context length when a custom provider is saved without one

2026-09-12 05:10:51 -07:00

model_setup_flows.py

feat(model-pickers): reasoning effort selection on every model picker

2026-09-13 16:43:50 -07:00

model_switch_providers.py

feat(desktop): Nous free tier on Hermes Desktop (#105260)

2026-09-11 03:45:32 +05:30

model_switch.py

feat(model-pickers): reasoning effort selection on every model picker

2026-09-13 16:43:50 -07:00

models_catalog_static.py

fix(models): delist hy3-free and laguna-s-2.1-free — OpenCode relay dropped them (anon 401)

2026-09-13 21:06:39 -07:00

models_detect.py

fix(routing): address review — session runtime decides, quarantine continues the chain, unclassified ids break ownership

2026-09-10 09:11:00 -07:00

models_local.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

models_pricing.py

simplify(compat): models — drop 52 re-exports from hermes_cli.models, repoint 16 callers + 41 test files

2026-09-03 13:48:49 -07:00

models_profile_cache.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_reasoning_caps.py

fix(multiplex): per-profile catalog, skin and guest-mint state in hermes_cli

2026-09-12 01:35:05 -07:00

models_validate.py

fix(model): a selected model id is never rewritten to a catalog neighbour

2026-09-12 14:05:36 -07:00

models.py

Port from OpenHands/OpenHands#16758: Anthropic model catalogs no longer stop at the first page

2026-09-13 21:07:35 -07:00

nous_account.py

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

nous_auth_keepalive.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

nous_billing.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

nous_subscription.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

npm_engine.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

onepassword_secrets_cli.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

oneshot.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

pairing.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

partial_compress.py

refactor(hermes_cli): join wrapped signatures/conditions that fit one line

2026-09-02 20:40:15 -07:00

personality.py

fix(personality): honour the top-level personalities: config block on every surface

2026-09-12 08:24:26 -07:00

pets.py

refactor(hermes_cli): join wrapped signatures/conditions that fit one line

2026-09-02 20:40:15 -07:00

platform_actions.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

platforms.py

refactor(hermes_cli): personality/platforms — compact docstrings, hoist os import

2026-09-02 20:19:57 -07:00

plugin_capabilities.py

refactor(hermes_cli): plugin_packs reuses plugins_cmd console/tty/yes/fail helpers; one-line section banners

2026-09-02 21:57:39 -07:00

plugin_catalog.py

feat(plugin-catalog): default shelf is Desktop, catch-all is General; categorise today's six entries

2026-09-14 21:00:29 -07:00

plugin_compat.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

plugin_dev.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

plugin_packs.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

plugin_validate.py

fix(plugins): validate requires_hermes from manifest module

2026-09-12 07:57:13 -07:00

plugins_cmd_catalog.py

feat(plugin-catalog): shelve the catalog by category (Memory, Desktop, Platforms, …)

2026-09-14 21:00:29 -07:00

plugins_cmd.py

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

plugins_discovery.py

refactor(hermes_cli): compact plugin manifest/loader/discovery/ledger/state helpers (-100 LOC)

2026-09-03 00:09:39 -07:00

plugins_dispatch.py

fix(plugins): only mark a timed-out hook worker abandoned while it still holds its token

2026-09-15 10:48:49 +05:30

plugins_ledger.py

fix(plugins): keep one worker per callback while a timed-out worker is still running

2026-09-15 10:48:49 +05:30

plugins_loader.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_manifest.py

feat(plugins): requires_hermes manifest gate on main's manifest/loader siblings

2026-09-09 04:38:01 -07:00

plugins_state.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

plugins.py

fix(cron): routed fires are multiplexed at the worker handoff; managed keys keep policy precedence

2026-09-15 11:03:39 +05:30

portal_cli.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

process_identity.py

fix(identity): spawn-ledger write survives surrogate-escaped argv

2026-09-12 08:27:53 -07:00

profile_channels.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_cmd.py

fix(profiles): clone builds in a hidden staging dir, never writes through symlinks, refuses --clone-channels in core; channel inventory is ownership-based

2026-09-13 14:33:11 -07:00

profile_describer.py

test(profiles): two invariants for the truncated-JSON refusal, comment trimmed to the why

2026-09-06 05:34:01 -07:00

profile_distribution.py

feat(plugins): install plugins from private git repos using the user's stored credentials

2026-09-10 01:00:19 -07:00

profiles.py

refactor(cli): one special-file filter for every profile copytree

2026-09-15 12:45:29 +05:30

projects_cmd.py

refactor(hermes_cli): session-export/projects pass 2 — fold export renderers, projects_db row/meta helpers, projects_cmd str-return handlers

2026-09-03 00:06:57 -07:00

projects_db.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

prompt_size.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

prompt_stash.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

provider_catalog.py

refactor(hermes_cli): provider cluster — fold multi-line boolean chains

2026-09-02 22:55:15 -07:00

providers.py

fix(providers): pin all Actual routes to chat completions (E-1047)

2026-09-10 14:56:55 -04:00

proxy_cli.py

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

psutil_android.py

refactor(update): psutil Android installer extracts through the shared safe-tar guard

2026-09-13 05:07:11 -07:00

pt_input_extras.py

fix(cli): keypad Alt+Enter inserts a newline instead of escape text

2026-09-07 02:09:34 -07:00

pty_bridge.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

pty_session.py

fix(cli): concurrent PTY reaps skip already-popped keys

2026-09-09 11:31:10 -07:00

quiet_single_query.py

fix(cli): quiet -Q drain must use the async_delegation delivery ledger

2026-09-14 21:18:47 +05:30

relaunch.py

refactor(cli): the launcher guard is linux_desktop_entry._needs_interpreter

2026-09-14 19:49:12 +05:30

relay_plugin_cutover.py

refactor(hermes_cli): fold short multi-line calls/signatures in g5 files (AST-identical)

2026-09-02 20:47:24 -07:00

resource_limits.py

refactor(hermes_cli): drop intra-function paragraph blanks in g5 files (whitespace-only)

2026-09-02 21:00:55 -07:00

route_identity.py

refactor(hermes_cli): provider cluster — hanging-indent repack of exploded call sites (AST-identical)

2026-09-02 22:39:49 -07:00

runtime_provider_backends.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider_custom.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

runtime_provider.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

secret_prompt.py

refactor(hermes_cli): setup cluster — drop statement-separating blanks inside function bodies (AST-neutral)

2026-09-02 22:25:24 -07:00

secrets_cli.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

security_advisories.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

security_audit_startup.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

security_audit.py

refactor(hermes_cli): g7 code compaction — unified pt_input_extras installer, dict/comprehension collapses in security audit + prompt_size

2026-09-02 21:07:16 -07:00

send_cmd.py

refactor(config): one effective-user-config loader replaces 9 hand-rolled raw→overlay→expand pipelines

2026-09-13 05:09:06 -07:00

service_manager.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_export_html.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export_md.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_export.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_filters.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

session_listing.py

refactor(hermes_cli): session-export/projects pass 2 — fold export renderers, projects_db row/meta helpers, projects_cmd str-return handlers

2026-09-03 00:06:57 -07:00

session_lost_and_found.py

refactor(sessions): one session-id minter; QQ update-prompt key from build_session_key

2026-09-13 05:21:02 -07:00

session_recap.py

refactor(hermes_cli): session_recap _coerce_text flattening

2026-09-02 23:59:27 -07:00

session_recovery.py

fix(sessions): salvage a page-1-header-damaged state.db in the lost_and_found lane

2026-09-11 06:37:27 -07:00

session_schema_history.py

fix(state): record display_identity/display_order in the messages schema history

2026-09-09 13:30:28 -07:00

sessions_cmd_browse.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

sessions_cmd.py

refactor(state): stdlib-only home for read_only_db_uri; reuse the doctor/repair helpers

2026-09-15 12:51:27 +05:30

setup_hidden_env.py

refactor(hermes_cli): setup cluster — pack hidden-env suffix and home-channel tables

2026-09-02 22:39:06 -07:00

setup_migration.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_platforms.py

refactor(platforms): every plugin setup wizard uses the shared declines_reconfigure gate

2026-09-13 05:32:38 -07:00

setup_quick.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup_summary.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

setup_terminal.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_tts.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

setup_whatsapp_cloud.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

setup.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

shared_session_attach.py

feat(tui): discover cooperative local session owners

2026-09-07 22:25:12 -07:00

sizefmt.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

skills_config.py

simplify(compat): hermes_cli split-module docstrings — drop 're-exported there' compat pointers (9 files, comments only)

2026-09-03 13:08:40 -07:00

skills_hub.py

fix(skills): never call a rate-limited fetch a stale index entry; drop per-search caveat

2026-09-12 05:10:31 -07:00

skin_cmd.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

skin_engine.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

slack_cli.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

slash_exec.py

refactor(hermes_cli): slash_exec executor compaction; tips closer hug

2026-09-02 23:04:20 -07:00

sqlite_runtime.py

refactor(hermes_cli): fold verify-token branches, share track/untrack counter, compact probe script

2026-09-02 20:59:41 -07:00

sqlite_safe_read.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

sqlite_util.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

status_auth.py

feat(auth): Nous free tier: free inference and connectors out of the box, one command to sign in (#105258)

2026-09-11 03:45:31 +05:30

status_bar_git.py

feat(cli): opt-in git_branch status-bar field (⎇ current branch)

2026-09-12 21:47:53 -07:00

status_report.py

refactor(status): CLI, gateway and TUI /status render the same field set from hermes_cli/status_report.py

2026-09-13 05:21:02 -07:00

status.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

stderr_timestamp.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

stdio.py

refactor(hermes_cli): drop blank lines after in-body imports

2026-09-02 21:36:24 -07:00

suggestions_cmd.py

refactor(hermes_cli): group A — body blank-line squeeze, slash tap/diff-line helpers

2026-09-02 21:34:25 -07:00

telegram_managed_bot.py

fix(compat): pointers resolve to the object that MOVED, not a same-named stranger; stdin checker binds stdin= to the splatted definition

2026-09-03 22:00:01 -07:00

terminal_breadcrumbs.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

terminal_notify.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

timefmt.py

fix(state): one corrupt timestamp row no longer kills sessions list, export or insights

2026-09-11 06:24:54 -07:00

timeouts.py

refactor(hermes_cli): compact stdio/breadcrumbs/notify/timeouts/sqlite_runtime/sizefmt helpers

2026-09-02 20:43:25 -07:00

tips.py

fix: correct two stale comments/docs strings left out of the docs batch

2026-09-08 19:52:26 +05:30

tools_config_cua.py

simplify(compat): tools/computer_use/cua_backend — drop 24 re-exports + shutil re-import, repoint 5 callers + 14 test files

2026-09-03 13:22:51 -07:00

tools_config_mcp.py

fix(mcp): CLI readers no longer reopen include: [] as "all tools enabled"

2026-09-12 08:34:43 -07:00

tools_config_post_setup.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

tools_config_providers.py

simplify(compat): image_generation_tool — drop 2 re-export noqa blocks (13 names), repoint 2 callers + 2 tests to image_generation_catalog

2026-09-03 13:10:38 -07:00

tools_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

toolset_scope.py

refactor(hermes_cli): tools_config group — AST-neutral bracket hugging

2026-09-02 20:38:18 -07:00

toolset_validation.py

refactor(hermes_cli): tools_config group — dense docstring reflow (word-identical, AST-verified)

2026-09-02 21:31:17 -07:00

uninstall.py

fix(branding): use the Caduceus ☤ (U+2624), not the Rod of Asclepius ⚕ (U+2625)

2026-09-12 08:25:54 -07:00

update_abort_recovery.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_common.py

refactor(update): collapse 90 try/except-pass and try/except-logger.debug blocks into suppress()/_best_effort() (new leaf update_cmd_common.py)

2026-09-02 16:34:55 -07:00

update_cmd_config.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_deps.py

simplify(compat): tools/browser_tool — drop the last warm_agent_browser_npx_cache re-export, repoint 1 caller (update_cmd_deps internal import) + 1 test file

2026-09-03 14:27:29 -07:00

update_cmd_drain_report.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_fleet.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

update_cmd_git.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_maint.py

fix(update): protect the whole hermes_cli.update_* family from the stale-module purge

2026-09-05 00:24:40 -07:00

update_cmd_stash.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd_windows.py

fix(gateway-windows): bind the attestation to process birth, not the ledger claim

2026-09-14 20:51:37 +05:30

update_cmd_zip.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

update_cmd.py

fix(updater): finish Node phase after Windows handoff

2026-09-13 14:44:38 -07:00

update_contract.py

refactor(hermes_cli/update): share profile-home + socket-identity probes between receipt and inventory; fold refusal builder; collapse try/except-pass

2026-09-02 21:49:26 -07:00

update_inventory.py

fix(gateway): served_profiles bind to a verified gateway identity, not bare PID existence

2026-09-13 15:41:01 -07:00

update_lock.py

refactor(hermes_cli/update): reflow to 120 cols, drop blanks after local imports (AST-identical)

2026-09-02 21:45:19 -07:00

update_receipt.py

refactor(update): share command-boundary receipt reason

2026-09-06 14:53:33 +05:30

update_restart_recovery.py

refactor(hermes_cli/update): compact update_restart_recovery signatures, skips normaliser, and comments (module docstring is --help text: untouched)

2026-09-02 22:12:58 -07:00

urllib_security.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

vault.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

vercel_auth.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

verify_cmd.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

voice.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

web_deps.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

web_git.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

web_models.py

feat(desktop): add per-auxiliary reasoning effort control

2026-09-13 19:19:32 -07:00

web_read_coalescing.py

refactor(dashboard): drop the redundant hash() pre-check in coalesced_read

2026-09-09 21:16:40 +05:30

web_server_chat.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

web_server_config.py

manage_connections covers local MCP servers; setup_mcp leaves the schema (NS-867, PR1) (#109517)

2026-09-15 00:41:13 +05:30

web_server_cron.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

web_server_dashboard.py

feat(plugins): catalog is the sole discovery system — re-port onto main's layout

2026-09-09 04:38:01 -07:00

web_server_files.py

fix(desktop): resolve artifact downloads in their originating session

2026-09-07 07:11:36 -07:00

web_server_gateway.py

fix(desktop): served profiles show running and route lifecycle to the multiplexer from a pooled local backend

2026-09-12 06:13:44 -07:00

web_server_idle_exit.py

fix(serve): SSH-isolated idle-exit keeps the backend alive while a cron job runs

2026-09-11 15:28:37 -07:00

web_server_lifecycle.py

refactor(dashboard): startup reconcile reuses the routers' own-store opener

2026-09-14 08:10:36 -07:00

web_server_mcp.py

simplify(compat): web_server — drop 221 re-exports (config/status/shutil/run_in_threadpool, lifecycle, 13 web_server_<concern> blocks, 47 route-handler legacy re-exports); web_deps.late()/LateState() take an owning-module arg; concern modules import each other directly (62 lazy sites)

2026-09-03 14:21:32 -07:00

web_server_memory.py

simplify(compat): web_server — drop 221 re-exports (config/status/shutil/run_in_threadpool, lifecycle, 13 web_server_<concern> blocks, 47 route-handler legacy re-exports); web_deps.late()/LateState() take an owning-module arg; concern modules import each other directly (62 lazy sites)

2026-09-03 14:21:32 -07:00

web_server_messaging.py

fix(profiles): --clone leaves messaging channels behind; --clone-channels opts in

2026-09-12 18:35:21 -07:00

web_server_oauth.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

web_server_profiles.py

fix(messaging): keep profile status truthful without credential inheritance

2026-09-07 05:56:33 -07:00

web_server_sessions.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

web_server.py

feat(multiplex)!: drop gateway.multiplex_profile_allowlist — serve every profile

2026-09-11 19:50:46 -07:00

webhook.py

Inspired by ChatGPT Work: event-triggered cron jobs via webhook routes

2026-09-13 21:30:02 -07:00

win_pty_bridge.py

fix(dashboard): prevent PTY input from blocking event loop (#93565)

2026-09-04 20:24:24 -04:00

windows_ssh_runtime.py

refactor(web_server helpers): second pass — helper dedupe in windows_ssh_runtime, webhook via atomic_json_write, table packing

2026-09-02 23:08:44 -07:00

worktree_cmd.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_gc.py

Port from code-yeongyu/oh-my-openagent#7151: worktree audit gains --json, --older-than, and external-tree visibility

2026-09-13 20:55:29 -07:00

worktree_ops.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

write_approval_commands.py

refactor(web_server helpers): compact gateway/messaging/cron/oauth helpers and CLI utils (-21% LOC, zero behavior change)

2026-09-02 21:54:36 -07:00

xai_retirement.py

fix(config): one bounded backups/config/ dir replaces four config.yaml.bak schemes

2026-09-09 02:36:00 -07:00