Casey 790e1eb6bd fix(update): pause SCM-supervised Windows gateway services before venv mutation ...

On Windows installs where the gateway runs as an SCM service (WinSW,
NSSM, sc.exe create), the existing pause machinery kills the gateway
process directly — and the service wrapper's failure ladder resurrects
it within seconds, re-taking the venv file locks mid-update. The update
then dies partway through dependency sync with access-denied errors.

This extends _pause_windows_gateways_for_update() to detect when a
gateway's process tree is owned by a running SCM service, and to stop
the SERVICE through sc.exe instead of killing the child:

- gateway/status.py: expose service-ownership discovery for gateway
  runtimes (find_windows_gateway_services maps validated gateway PIDs
  through process ancestry to running SCM service PIDs, with
  create-time identity checks against PID reuse).
- hermes_cli/update_cmd.py: stop verified services via sc.exe before
  venv mutation and restart them afterward. Stops wait for a stable
  SCM 'stopped' state AND for the original descendant processes to
  exit (service 'Stopped' is not proof the child released its
  handles). Failure to prove ownership, stop a service, or restart it
  fails closed; rollback restores attempted services, and rollback
  failures are surfaced rather than swallowed.
- Fail-closed throughout: unreadable identities, ambiguous ancestry,
  or a service that will not reach a stable state abort the update
  before any file mutation.

Complements #37039 (gateway-only concurrent instances no longer abort):
that fix lets the update proceed past the gate; this one makes the
pause actually stick when the gateway is service-supervised.

Note: tests/gateway/test_status.py::TestReadProcessCmdlinePsFallback::
test_ps_fallback_when_proc_unavailable fails on Windows on current main
before this change as well (POSIX ps fallback asserted on a platform
without it); all other touched suites pass (155 passed, 5 skipped).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-26 16:45:31 -07:00

..

dashboard_auth

fix(auth): thread use_https into the native password-login PKCE clear

2026-08-24 16:58:51 +10:00

data

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

observability

feat(nix): home-manager module, shared with the NixOS module

2026-08-18 20:42:06 -04:00

proxy

rip out brew + pip/PyPI wheel support (#68217)

2026-07-22 16:51:01 -04:00

subcommands

feat(desktop): add --setup-tcc-identity to keep macOS TCC grants across rebuilds

2026-08-25 16:24:19 -07:00

web_routers

fix(mcp): restrict catalog environment writes

2026-08-26 09:54:31 -07:00

__init__.py

chore: release v0.20.5 (2026.8.19)

2026-08-21 05:16:27 -07:00

_early_recovery.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_install_repair.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_parser.py

refactor(cli): add static fallback to parser-derived value-flag helper

2026-08-24 03:20:37 -07:00

_scan_venv_blockers.py

fix(desktop): close safe preview blockers before update

2026-08-16 02:03:22 -07:00

_startup_fast.py

feat: consolidate 'hermes version' into 'hermes --version', remove the subcommand

2026-08-20 03:05:46 -07:00

_subprocess_compat.py

refactor(deadline): consolidate site-local tree-kills onto agent.deadline.kill_process_tree (#85125 4d)

2026-08-25 01:34:56 +05:30

active_sessions.py

fix(sessions): release active-session leases against their acquisition registry

2026-08-15 00:33:01 -07:00

agent_import.py

refactor(cli): review follow-ups for the config.yaml import guard

2026-08-02 14:55:32 +05:30

agent_plugins.py

feat(plugins): map portable Agent Plugins streamable-http entries into the native MCP runtime

2026-08-08 23:56:46 -07:00

approval_mode.py

feat(approvals): add cross-surface mode command

2026-07-26 21:13:03 -07:00

approval_transport.py

fix(plugins): harden approval transport boundaries

2026-08-12 16:26:55 -07:00

approvals_suggest.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

approvals_test.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

auth_commands.py

fix(auth): canonicalize configured provider display names

2026-08-23 20:00:53 -07:00

auth.py

docs: update secure_parent_dir docstring and caller comments for the install-tree exclusion

2026-08-25 10:55:53 +10:00

azure_detect.py

fix(security): secure Azure catalog probes

2026-07-11 12:28:55 +05:30

backup.py

fix(state): fail closed when a live process still holds state.db during destructive restore (#90950)

2026-08-26 06:28:43 -07:00

bang_shell.py

feat(cli): ! shell mode — run a command without spending a model turn

2026-07-31 21:21:20 -07:00

banner.py

fix(update): sweep aborted-fetch tmp_pack debris before it corrupts the pack directory (#93732)

2026-08-26 16:45:22 -07:00

blueprint_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

browser_connect.py

fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths

2026-07-29 23:16:18 -07:00

build_info.py

fix(update): resolve code identity by reading .git directly — no subprocess

2026-08-20 21:54:25 -07:00

bundles.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

callbacks.py

fix(approval): classify CLI/TUI approval timeouts separately from explicit denials

2026-08-02 20:21:59 -07:00

checkpoints.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

claw.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

cli_agent_setup_mixin.py

fix(cli): guard empty message text in _display_resumed_history

2026-08-22 03:59:28 +05:30

cli_billing_mixin.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

cli_commands_mixin.py

fix(backup): restore state.db through SQLite backup API so live connections see restored data (#65942)

2026-08-26 06:28:43 -07:00

cli_output.py

fix(cli): widen prompt_toolkit fallback to catch any runtime failure

2026-08-24 15:42:58 +05:30

clipboard.py

fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH

2026-07-29 08:42:16 -07:00

codex_models.py

feat(model): Codex GPT slugs default back to 272K; explicit -900k picker variants opt into the verified large window

2026-08-23 02:14:35 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

refactor(codex-runtime): tidy reapply-migration control flow

2026-07-01 23:51:54 +05:30

colors.py

…

commands.py

feat: /review command — independent reviewer subagent on every surface

2026-08-23 17:38:38 -07:00

completion.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

config_defaults.py

feat(compression): lean tail retention is the default — compaction keeps 10-25K verbatim, not 100-240K

2026-08-26 07:16:04 -07:00

config_migrations.py

refactor(tools): remove expired BFL FLUX 3 promo core tools (migration v39); FLUX 3 stays via video_gen/FAL for subscribers (#94599)

2026-08-25 02:45:10 -07:00

config.py

fix(config): block generic Copilot ACP controls

2026-08-26 09:54:31 -07:00

console_engine.py

feat(cron): add explicit one-shot re-arm

2026-08-24 00:34:26 -07:00

container_boot.py

fix(install): support non-pid-1 container entrypoints

2026-08-01 10:52:34 -07:00

context_switch_guard.py

fix(cli): honor custom_providers in preflight shrink warning

2026-07-22 21:17:21 -07:00

copilot_auth.py

fix(desktop): Models/Providers settings no longer hang 20s when gh CLI is signed out

2026-08-19 19:22:48 -07:00

credential_lifecycle.py

fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)

2026-07-19 03:02:21 -07:00

cron.py

feat(cron): acked failure signatures stop re-pinging — durable incidents + ack CLI (salvage #94692) (#95017)

2026-08-25 14:02:40 -07:00

curator.py

fix(curator): say what pin actually does on an unmanaged skill

2026-08-23 21:12:20 -07:00

curses_ui.py

refactor: collapse context_back/effective_allow_back, fix draw_header docstring

2026-08-24 15:45:52 +05:30

dashboard_procs.py

fix(update): never respawn backends from a foreign HERMES_HOME (#94030)

2026-08-26 08:39:04 -07:00

dashboard_register.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

debug.py

feat(desktop): Send Diagnostics — one-click redacted debug-bundle upload from the error card

2026-08-21 23:01:30 -07:00

default_soul.py

fix(soul): installers seed the real default persona, upgrade legacy empty templates (#52246)

2026-06-24 18:56:26 -07:00

dep_ensure.py

fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade

2026-08-13 02:38:28 -07:00

diagnostics_upload.py

feat(debug): drop dead confirm step from --nous upload (stateless NAS)

2026-06-30 17:29:23 -07:00

dingtalk_auth.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

doctor_live.py

fix(cli): apply Termux carve-out to doctor --live's npx browser probe

2026-08-13 02:38:28 -07:00

doctor.py

revert(macos): remove the TCC interpreter anchor — anchored copies could not load libpython

2026-08-26 06:50:53 -07:00

dump.py

feat: execution-discipline guidance now reaches all tool-capable models (config model.execution_guidance)

2026-08-19 16:16:37 -07:00

env_loader.py

fix(update): avoid cryptography self-lock on Windows

2026-08-15 13:28:14 -07:00

fallback_cmd.py

refactor(fallback): single owner for backend identity and failure-scoped skips

2026-07-26 23:41:54 -07:00

fallback_config.py

fix(auth): resolve fallback api keys through secret_scope, not raw env

2026-07-31 22:35:26 -07:00

focus_view.py

feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator

2026-07-26 18:10:34 -07:00

foreign_sessions.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

gateway_enroll.py

fix(cli): read multiplex topology from the default root in enroll warning

2026-08-21 14:13:28 +10:00

gateway_windows.py

refactor(gateway): share breakaway marker constant

2026-08-16 06:26:12 -07:00

gateway.py

fix(update): pause SCM-supervised Windows gateway services before venv mutation

2026-08-26 16:45:31 -07:00

gitlock.py

fix(update): sweep aborted-fetch tmp_pack debris before it corrupts the pack directory (#93732)

2026-08-26 16:45:22 -07:00

goals.py

fix(goals): honor auxiliary.goal_judge.timeout instead of a hardcoded 30s

2026-08-21 02:48:14 +08:00

gui_uninstall.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

heartbeat.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

hooks.py

feat(langfuse): widen tracing to errors, sessions, subagents, and MoA fan-out

2026-08-13 23:10:16 +05:30

image_provenance.py

feat(update): bake authoritative image provenance into the Docker image

2026-08-26 11:41:04 -07:00

init_command.py

feat(cli): /init — generate or update AGENTS.md from a project scan

2026-07-26 17:46:29 -07:00

input_sanitize.py

fix(input): strip bracketed-paste leaks before prompt persistence (#62557)

2026-07-15 07:39:42 -07:00

inventory.py

fix: accept pool-only Anthropic OAuth entries in the desktop picker filter

2026-08-22 22:00:19 -07:00

journey.py

fix(cli): render /journey color instead of leaking raw ANSI

2026-07-01 16:25:48 -05:00

kanban_db.py

fix(kanban): host-level cap accounting, daemon cap resolution, review-lane reservation (OOF-30 review)

2026-08-17 14:16:21 +05:30

kanban_decompose.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_diagnostics.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

kanban_specify.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_swarm.py

fix(kanban): make write_txn nesting explicit opt-in

2026-08-10 12:43:46 -07:00

kanban.py

feat(kanban): memory-aware dispatch guard + memory-derived default concurrency cap (OOF-30)

2026-08-17 14:16:21 +05:30

lifecycle.py

Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"

2026-07-27 21:10:51 -07:00

linux_desktop_entry.py

fix(cli): Linux hermes.desktop entry launches instead of silently dying on system python (#90292)

2026-08-21 13:41:39 -07:00

logs.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

loops.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

main.py

fix(update): conservative outcomes + serve-ledger coverage for fresh restart recovery

2026-08-26 16:45:26 -07:00

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

fix: preserve macOS TCC identity for managed Python

2026-08-26 04:14:16 -07:00

mcp_catalog.py

fix(mcp-catalog): failed probe keeps the prior tool filter instead of wiping it

2026-08-25 04:21:37 -07:00

mcp_config.py

fix(mcp): tool-selection UIs stay in exclude mode instead of freezing include lists

2026-08-25 04:21:37 -07:00

mcp_picker.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(review): harden portable plugin boundaries

2026-08-07 09:44:21 -07:00

mem_trim.py

fix(mem): 5s force floor so delegate-batch closes don't stack trims

2026-08-02 22:44:38 +05:30

memory_oauth.py

feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)

2026-06-22 19:16:47 -05:00

memory_setup.py

fix(memory-setup): route .env writer through save_env_value's validation gate

2026-08-26 15:48:39 -07:00

middleware.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

migrate.py

…

moa_cmd.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

moa_config.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

model_catalog.py

perf(model-picker): serve stale model caches instantly, refresh in background

2026-08-01 14:52:18 -07:00

model_cost_guard.py

fix(cli): guard expensive startup model overrides

2026-08-14 01:31:31 -07:00

model_data_policy_guard.py

feat(models): warn on data-training tiers at model selection

2026-08-14 01:06:13 -07:00

model_normalize.py

fix(opencode): family-wide provider predicate + reserved tool-name aliases for custom opencode-* providers

2026-08-20 20:21:12 -07:00

model_search.py

feat(models): 'ox alpha' now finds x-preview-f-free in every model picker

2026-08-21 14:38:19 -07:00

model_selection_guards.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

model_setup_flows.py

feat: opencode-free is fully keyless — no env var, no account, anonymous wire

2026-08-21 00:24:32 -07:00

model_switch.py

feat: keyless providers count as authenticated everywhere — opencode-free appears in /model and desktop pickers with zero setup

2026-08-21 04:39:31 -07:00

models.py

feat(models): add z-ai/glm-5.3-flash to OpenRouter and Nous Portal catalogs

2026-08-26 07:52:56 -07:00

nous_account.py

fix: show explicit member spend cap message instead of 'no credits'

2026-08-07 19:47:40 +05:30

nous_auth_keepalive.py

fix Nous auth refresh for idle agents

2026-06-21 22:43:48 -07:00

nous_billing.py

refactor: single shared Retry-After parser

2026-07-29 10:13:50 -07:00

nous_subscription.py

fix(gateway): honor env-configured local backends and persist Tool Gateway declines

2026-08-22 21:36:55 -07:00

npm_engine.py

fix(win): never rewrite the in-use managed Node tree (#80926)

2026-08-14 21:35:30 -07:00

onepassword_secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

oneshot.py

fix(cli): one-shot runs linger for notify_on_complete background processes so Bot Mode replies survive parent exit

2026-08-23 03:56:37 -07:00

pairing.py

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

partial_compress.py

feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)

2026-07-02 05:10:31 -07:00

personality.py

fix(personality): single-owner personality state + one-time reset migration

2026-08-09 10:33:58 -07:00

pets.py

fix(pets): cover the pets CLI (doctor, has-active, /pet toggle) too

2026-08-15 00:32:44 -07:00

platform_actions.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

platforms.py

feat(whatsapp): add WhatsApp Business Cloud API adapter

2026-05-23 01:07:01 -04:00

plugin_capabilities.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

plugin_dev.py

feat(plugins): manifest v2 — schema version, api_version, inter-plugin deps, pip-dependency declaration seam, config schema (#64165)

2026-08-12 18:39:22 -07:00

plugin_index.py

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

plugin_packs.py

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

plugins_cmd.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

plugins.py

feat: browser snapshots drop LLM summarization — truncate-and-store like web_extract; auxiliary.web_extract slot removed

2026-08-24 20:11:18 -07:00

portal_cli.py

fix(auth): use refresh-free Nous status snapshot on read-only display paths

2026-07-28 22:42:19 -07:00

process_identity.py

feat(update): network-bound serve backends survive hermes update on their recorded endpoints (#63206)

2026-08-26 07:57:04 -07:00

profile_describer.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

profile_distribution.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

profiles.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

projects_cmd.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

projects_db.py

fix(projects): dedup project_create by primary_path (#75820)

2026-08-15 00:33:11 -07:00

prompt_size.py

fix: honor JSON-array string forms for skills.disabled and agent.disabled_toolsets

2026-08-16 06:24:56 -07:00

prompt_stash.py

feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests

2026-07-31 21:21:16 -07:00

provider_catalog.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

providers.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

proxy_cli.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

psutil_android.py

fix(android): reject unsafe tar members in psutil compatibility installer

2026-05-28 02:36:09 -07:00

pt_input_extras.py

refactor(cli): fold lock-bit review findings - docstrings, dead tilde forms, _lock_twins idiom

2026-08-20 12:16:20 +05:30

pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

pty_session.py

fix(dashboard): redraw TUI after PTY reattach

2026-08-14 13:51:26 -07:00

relaunch.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

relay_plugin_cutover.py

fix(relay): complete native plugin cutover

2026-08-19 08:52:03 -07:00

resource_limits.py

fix(gateway): persist RLIMIT_NOFILE floor into the generated launchd plist

2026-08-10 17:02:56 -07:00

route_identity.py

refactor: fold simplify-code review findings

2026-07-29 17:13:48 +05:30

runtime_provider.py

fix(cli): honor target_model when resolving custom providers

2026-08-23 18:25:35 -07:00

secret_prompt.py

feat(memory): improve OpenViking setup UX

2026-06-17 01:04:26 +08:00

secrets_cli.py

fix(secrets_cli): defer bitwarden backend import to first attribute access

2026-08-15 01:55:22 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

security_audit_startup.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

security_audit.py

fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)

2026-08-01 10:47:20 -07:00

send_cmd.py

fix(cli): apply BOM-safe .env decoding to hermes send's private loader

2026-08-08 12:32:23 -07:00

service_manager.py

fix(gateway): don't restart supervised services on clean exit

2026-08-14 21:07:21 -07:00

session_export_html.py

fix(cli): coalesce None title/model in single-session HTML export

2026-08-15 02:04:49 -07:00

session_export_md.py

feat(sessions): full prune-filter set + --redact on sessions export

2026-07-07 12:36:41 -07:00

session_export.py

feat: bare /save shows a usage card instead of exporting

2026-08-15 02:04:49 -07:00

session_filters.py

fix(sessions): preserve recently active sessions during pruning

2026-07-26 19:30:21 -07:00

session_listing.py

fix(gateway): scope session lists before limiting

2026-07-31 22:36:55 -07:00

session_lost_and_found.py

feat(sessions): generic 'hidden' session flag (sidebar-hide, still resumable) (#86797)

2026-08-15 00:31:37 -07:00

session_recap.py

fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)

2026-07-17 04:53:38 -07:00

session_recovery.py

fix(sessions): recover budget exhaustion + lost_and_found last-resort lane

2026-08-12 19:43:47 -07:00

sessions_cmd.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

setup_hidden_env.py

fix(setup): stop asking about self-configuring platform knobs

2026-07-26 08:43:24 -07:00

setup_whatsapp_cloud.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

setup.py

feat(macos): one-switch Full Disk Access guidance in doctor and setup

2026-08-26 06:26:07 -07:00

sizefmt.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

skills_config.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

skills_hub.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

skin_cmd.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

skin_engine.py

feat(themes): dedicated code-syntax palette keys

2026-07-21 21:00:43 -05:00

slack_cli.py

fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)

2026-07-29 09:33:48 -07:00

slash_exec.py

feat(profiles): rename any agent — the default profile gets a display name (#45624)

2026-08-18 02:27:18 -07:00

sqlite_runtime.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

sqlite_safe_read.py

fix(cli): untrack sqlite connections only after close succeeds

2026-07-31 23:18:12 -07:00

sqlite_util.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

status.py

feat(terminal): pluggable terminal environment backends via plugin registry

2026-08-24 20:10:44 -07:00

stderr_timestamp.py

fix(gateway): put --external-supervisor on launchd gateway argv

2026-08-16 01:54:35 -07:00

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

suggestions_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

telegram_managed_bot.py

Add CLI Telegram QR onboarding

2026-06-05 03:20:10 -07:00

terminal_breadcrumbs.py

feat: per-terminal --continue via terminal breadcrumbs

2026-08-15 18:15:18 -07:00

timefmt.py

chore: round-2 review nits (re-review #9)

2026-08-02 16:16:36 -07:00

timeouts.py

…

tips.py

feat(cli): rotating task-oriented composer placeholder (C-09)

2026-08-20 04:08:57 -07:00

tools_config.py

feat(update): unattended-safe cua-driver refresh with fail-fast preflights

2026-08-25 21:59:52 -07:00

toolset_validation.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

uninstall.py

fix(windows): remove the hermes launchers on uninstall

2026-08-22 13:39:04 -04:00

update_cmd.py

fix(update): pause SCM-supervised Windows gateway services before venv mutation

2026-08-26 16:45:31 -07:00

update_contract.py

feat(update): image/package-managed installs refuse in-place updates through one shared gate (#91277 Phase 3)

2026-08-26 11:41:04 -07:00

update_inventory.py

fix(update): pause SCM-supervised Windows gateway services before venv mutation

2026-08-26 16:45:31 -07:00

update_lock.py

fix(update): make the ancestor-PID lock handoff cross-platform via psutil

2026-07-31 22:28:46 -07:00

update_receipt.py

fix(update): conservative outcomes + serve-ledger coverage for fresh restart recovery

2026-08-26 16:45:26 -07:00

update_restart_recovery.py

fix(update): conservative outcomes + serve-ledger coverage for fresh restart recovery

2026-08-26 16:45:26 -07:00

urllib_security.py

fix(models): trust certifi for credentialed catalogs (E-1002)

2026-08-14 16:43:37 -07:00

vercel_auth.py

Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"

2026-07-29 19:48:37 -07:00

verify_cmd.py

Integrate verify subsystem with the existing verification stack

2026-08-07 10:11:05 -07:00

voice.py

fix(cli): convert Alt key shortcuts to sequence tuple for prompt_toolkit (#74169)

2026-08-15 01:05:39 -07:00

web_deps.py

refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)

2026-07-29 16:21:54 -07:00

web_git.py

fix(desktop): make git worktrees work end-to-end on a remote gateway backend

2026-08-16 20:53:44 -07:00

web_models.py

fix(desktop): keep bot reconciliation off inactive backends

2026-08-26 00:21:29 -07:00

web_server.py

fix(serve): serve Desktop token page at / in headless mode (#94227)

2026-08-26 15:51:22 -07:00

webhook.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

win_pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

windows_ssh_runtime.py

fix(desktop): keep Windows SSH runtime at machine root

2026-08-01 14:30:16 -07:00

worktree_cmd.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

worktree_gc.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

write_approval_commands.py

refactor(memory,skills): replace tri-state write_mode with boolean write_approval (default off) (#43354)

2026-06-09 23:21:14 -07:00

xai_retirement.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30