hermes-agent

Files

T

teknium1 8cecaf0b29 feat(process): escalate SIGTERM->SIGKILL on host-pid termination after grace

A daemon that ignores or stalls in its SIGTERM handler currently survives the
process-registry reap and leaks until reboot (observed as agent-browser
daemons accumulating to EMFILE on long-running gateways). _terminate_host_pid
now snapshots the tree, SIGTERMs it, waits a bounded grace window
(terminal.daemon_term_grace_seconds, default 2.0s, 0 disables), then SIGKILLs
any survivor. The recycled-PID identity guard still gates the whole path, so
escalation never reaches a stranger; Windows is unchanged (taskkill /F is
already a hard kill).

Config lives in config.yaml (terminal.daemon_term_grace_seconds), NOT an env
var, per the .env-secrets-only policy.

Implements the SIGKILL-escalation idea from @tkwong's #15008, reworked onto the
current _terminate_host_pid tree-kill path (the original predated it) and
config-gated instead of env-var-gated.

Co-authored-by: Benjamin Wong <tkwong@inspiresynergy.com>

2026-06-21 19:08:52 -07:00

dashboard_auth

fix(cron): serve /api/cron/fire on the dashboard app (hosted-agent surface)

2026-06-19 12:43:30 +10:00

proxy

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

subcommands

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

__init__.py

chore: release v0.17.0 (2026.6.19)

2026-06-19 12:38:31 -07:00

_parser.py

fix(desktop): keep composer usable during reconnect (#45488 )

2026-06-13 02:36:09 -07:00

_subprocess_compat.py

fix(windows): retry watcher Popen without breakaway when parent job denies it, plus regression tests for the breakaway bit (#40956 )

2026-06-07 01:21:58 -07:00

active_sessions.py

feat(sessions): add optional max session cap

2026-06-08 15:12:12 -07:00

auth_commands.py

feat(cli): add native Antigravity OAuth provider

2026-06-21 16:41:30 -07:00

auth.py

feat(cli): add native Antigravity OAuth provider

2026-06-21 16:41:30 -07:00

azure_detect.py

feat(azure-foundry): add Microsoft Entra ID auth

2026-05-18 10:14:38 -07:00

backup.py

fix(security): validate snapshot_id and file paths in restore_quick_snapshot to prevent path traversal

2026-06-21 12:44:22 -07:00

banner.py

fix(mcp): avoid false failed startup status

2026-06-11 09:01:52 -07:00

blueprint_cmd.py

refactor(cron): rebrand Cron Recipes -> Automation Blueprints

2026-06-11 10:49:47 -07:00

browser_connect.py

feat: auto-launch Chromium-family browser for CDP

2026-05-19 22:34:05 -07:00

build_info.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

bundles.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

callbacks.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

checkpoints.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

claw.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

cli_agent_setup_mixin.py

fix(cli): publish agent ref to cli module so memory on_session_end fires on exit

2026-06-19 16:59:43 -07:00

cli_commands_mixin.py

feat(delegation): async background subagents via delegate_task(background=true) (#40946 )

2026-06-15 13:33:12 -07:00

cli_output.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

clipboard.py

fix(clipboard): only read PNG signature bytes, not entire file

2026-05-13 22:54:21 -07:00

codex_models.py

fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424 )

2026-05-27 12:16:15 -07:00

codex_runtime_plugin_migration.py

fix(codex-runtime): de-dup [plugins.X] tables and stop leaking HERMES_HOME into config.toml

2026-05-15 02:31:30 -07:00

codex_runtime_switch.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355 )

2026-05-17 02:29:41 -07:00

colors.py

feat: respect NO_COLOR env var and TERM=dumb (#4079 )

2026-03-30 17:07:21 -07:00

commands.py

fix(docs): align slash-command and docker docs

2026-06-20 23:23:47 -07:00

completion.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

config.py

feat(process): escalate SIGTERM->SIGKILL on host-pid termination after grace

2026-06-21 19:08:52 -07:00

container_boot.py

fix(docker): skip gateway reconciliation in dashboard container (autodetect) (#46293 )

2026-06-15 20:51:48 +10:00

context_switch_guard.py

fix(cli): log instead of swallow preflight-warning errors; consistent TUI warning field

2026-06-21 16:31:56 +05:30

copilot_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937 )

2026-05-11 11:13:25 -07:00

cron.py

Merge pull request #50025 from NousResearch/salvage/cron-run-immediate

2026-06-21 13:53:13 +05:30

curator.py

feat(curator): make skill consolidation opt-in (prune stays default-on) (#47840 )

2026-06-17 05:20:32 -07:00

curses_ui.py

feat(cli): ranked fuzzy search in the curses model picker

2026-06-01 16:58:58 -07:00

dashboard_register.py

fix(cli): persist custom --portal-url to .env on dashboard register (#42435 )

2026-06-09 13:56:33 +10:00

debug.py

fix(debug): include gui.log (dashboard/TUI/pty/websocket) in hermes debug share

2026-06-19 07:05:42 -07:00

default_soul.py

…

dep_ensure.py

feat(dep_ensure): complete Windows bootstrap — dep_ensure + install.ps1 + detection (#27845 )

2026-05-18 16:34:24 +05:30

dingtalk_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937 )

2026-05-11 11:13:25 -07:00

doctor.py

fix(doctor): audit WhatsApp bridge at its resolved (HERMES_HOME) dir (#49890 )

2026-06-20 19:55:12 -07:00

dump.py

fix(dump): show commit date instead of release date in hermes debug (#48104 )

2026-06-17 16:53:42 -07:00

env_loader.py

feat(managed-scope): apply managed .env last with override

2026-06-19 07:46:33 -07:00

fallback_cmd.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

fallback_config.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

gateway_enroll.py

feat(relay): connector⇄gateway channel auth + signed-HTTP inbound receiver + enroll CLI (#48147 )

2026-06-18 12:01:54 +10:00

gateway_windows.py

fix(gateway): Windows restart no longer causes a silent outage

2026-06-19 06:31:56 -07:00

gateway.py

fix(gateway): respawn unmapped Windows gateways after update (#50090 ) (#50373 )

2026-06-21 13:33:26 -07:00

goals.py

fix(compression): preserve goal, platform, and session indexing across rotation

2026-06-20 20:06:24 -07:00

gui_uninstall.py

feat: uninstall the Chat GUI without removing the agent (CLI + desktop UI) (#40355 )

2026-06-06 18:22:38 -07:00

hooks.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937 )

2026-05-11 11:13:25 -07:00

inventory.py

feat(model-picker): add Refresh Models control to bust stale model cache (#48691 )

2026-06-18 21:37:41 -07:00

kanban_db.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473 )

2026-06-21 17:06:48 -07:00

kanban_decompose.py

docs(kanban): clarify decomposer profile roles

2026-06-06 19:29:00 -07:00

kanban_diagnostics.py

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

kanban_specify.py

fix: guard int(os.getenv()) casts against malformed env vars (#40598 )

2026-06-07 06:14:24 -07:00

kanban_swarm.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473 )

2026-06-21 17:06:48 -07:00

kanban.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473 )

2026-06-21 17:06:48 -07:00

logs.py

feat(debug): include desktop.log in hermes debug share / /debug / hermes logs (#38203 )

2026-06-03 05:41:35 -07:00

main.py

fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack

2026-06-21 16:41:30 -07:00

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

fix(update/windows): don't return _UvResult on Windows (subprocess argv crash) (#39820 )

2026-06-05 07:54:08 -05:00

mcp_catalog.py

fix(mcp): block exfil-shaped stdio server configs (#46083 )

2026-06-14 04:24:14 -07:00

mcp_config.py

fix(mcp): block suspicious stdio configs before probe (#46112 )

2026-06-14 04:46:54 -07:00

mcp_picker.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870 )

2026-05-26 12:48:14 -07:00

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(mcp): address adversarial review round 2 (stale-publish race, parity holes)

2026-06-19 11:57:43 -07:00

memory_providers.py

fix(desktop): show Hindsight memory provider (#37546 )

2026-06-18 16:48:47 -05:00

memory_setup.py

feat(memory): improve OpenViking setup UX

2026-06-17 01:04:26 +08:00

middleware.py

fix(middleware): single-use next_call guard + deepcopy-safe request copies

2026-06-06 23:07:25 +05:30

migrate.py

feat(cli): hermes migrate xai [--apply] [--no-backup]

2026-05-20 09:18:23 -07:00

model_catalog.py

feat(models): seed model-catalog disk cache from checkout on update (#42614 )

2026-06-08 22:31:06 -07:00

model_cost_guard.py

fix(model): require confirmation for expensive model selections

2026-06-10 00:24:06 -07:00

model_normalize.py

fix(gemini): strip native self prefixes before generateContent (#36141 )

2026-06-13 13:47:08 -07:00

model_setup_flows.py

fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack

2026-06-21 16:41:30 -07:00

model_switch.py

fix(model): persist /model switch by default across sessions

2026-06-19 07:07:06 -07:00

models.py

fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack

2026-06-21 16:41:30 -07:00

nous_account.py

feat(billing): /credits command — balance + portal top-up handoff (#44776 )

2026-06-12 08:51:10 +00:00

nous_billing.py

feat(billing): /billing terminal billing — interactive TUI + CLI client (#45449 )

2026-06-19 01:53:32 +05:30

nous_subscription.py

fix(whatsapp-cloud): review follow-ups for #43921

2026-06-11 07:51:01 -07:00

oneshot.py

fix(cli): surface oneshot agent exceptions to stderr with rc=1

2026-05-30 07:31:48 -07:00

pairing.py

fix(pairing): enforce lockout on approve_code, not just generate_code (#10195 ) (#21325 )

2026-05-07 07:18:21 -07:00

partial_compress.py

Inspired by Claude Code: /compress here [N] — boundary-aware 'summarize up to here' (#35048 )

2026-05-29 17:49:15 -07:00

platforms.py

feat(whatsapp): add WhatsApp Business Cloud API adapter

2026-05-23 01:07:01 -04:00

plugins_cmd.py

fix(plugins): normalize browser-pasted GitHub repo URLs (#33539 )

2026-06-13 13:23:59 -07:00

plugins.py

feat(kanban): add task lifecycle plugin hooks (claimed/completed/blocked) (#50349 )

2026-06-21 12:38:14 -07:00

portal_cli.py

feat(cli): make hermes portal run the full quick-setup Nous flow (model picker)

2026-06-04 02:20:31 +05:30

profile_describer.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

profile_distribution.py

fix(dist): stop USER_OWNED_EXCLUDE from filtering nested directories

2026-06-07 21:50:57 -07:00

profiles.py

feat(gateway): multiplex phase 0 — config flag, profile enumeration, profile-stamped session keys

2026-06-19 07:34:15 -07:00

prompt_size.py

feat(cli): add hermes prompt-size diagnostic (#35276 )

2026-05-30 02:53:42 -07:00

provider_catalog.py

feat: unified provider_catalog() — one source for CLI picker and desktop tabs

2026-06-19 07:26:46 -07:00

providers.py

feat(cli): add native Antigravity OAuth provider

2026-06-21 16:41:30 -07:00

psutil_android.py

fix(android): reject unsafe tar members in psutil compatibility installer

2026-05-28 02:36:09 -07:00

pt_input_extras.py

fix(cli): ignore terminal focus reports (salvage of #16780 )

2026-05-29 00:31:44 -07:00

pty_bridge.py

fix(pty-bridge): mark os.killpg/getpgid windows-footgun-ok (POSIX-only module)

2026-06-08 07:03:12 -07:00

relaunch.py

fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch

2026-05-08 14:27:40 -07:00

runtime_provider.py

feat(cli): add native Antigravity OAuth provider

2026-06-21 16:41:30 -07:00

secret_prompt.py

feat(memory): improve OpenViking setup UX

2026-06-17 01:04:26 +08:00

secrets_cli.py

fix(secrets): fail early with clear error when bitwarden setup runs without TTY (#40571 )

2026-06-06 18:36:40 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841 )

2026-05-29 13:24:12 -07:00

security_audit_startup.py

style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)

2026-06-21 19:05:27 -07:00

security_audit.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

send_cmd.py

fix(managed-scope): honor managed scope in config→env bridges too

2026-06-19 07:46:33 -07:00

service_manager.py

fix(docker): supervised gateway uses --replace to take over stale holder (NS-505) (#47555 )

2026-06-18 10:49:02 +10:00

session_listing.py

fix: harden salvaged session and browser improvements

2026-06-15 07:46:34 -07:00

session_recap.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355 )

2026-05-17 02:29:41 -07:00

setup_whatsapp_cloud.py

fix(whatsapp-cloud): review follow-ups for #43921

2026-06-11 07:51:01 -07:00

setup.py

docs(cli): fix broken terminal-backend guide link in setup wizard

2026-06-20 23:23:47 -07:00

skills_config.py

fix(skills): apply global|platform disabled union to all resolution sites

2026-06-14 22:54:54 +05:30

skills_hub.py

feat(skills): find & diff user-modified bundled skills

2026-06-18 12:26:20 +05:30

skin_engine.py

fix(tui): improve charizard completion menu contrast

2026-05-18 20:05:23 -07:00

slack_cli.py

fix(slack): enable writable app home DMs in manifest

2026-05-08 17:01:12 -07:00

status.py

Merge commit '6110aed9b' into feat/whatsapp-cloud-api

2026-06-10 21:39:22 -04:00

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

suggestions_cmd.py

refactor(cron): rebrand Cron Recipes -> Automation Blueprints

2026-06-11 10:49:47 -07:00

telegram_managed_bot.py

Add CLI Telegram QR onboarding

2026-06-05 03:20:10 -07:00

timeouts.py

perf(agent-loop): cut 47% of per-conversation function calls via 3 targeted hot-path optimizations (#28866 )

2026-05-19 14:25:10 -07:00

tips.py

fix: make profile subprocess HOME policy explicit

2026-06-14 03:20:21 -07:00

tools_config.py

refactor: remove agent-callable send_message tool (#47856 )

2026-06-17 07:11:23 -07:00

uninstall.py

feat: uninstall the Chat GUI without removing the agent (CLI + desktop UI) (#40355 )

2026-06-06 18:22:38 -07:00

voice.py

fix(tui): restore voice push-to-talk parity (#20897 )

2026-05-06 15:49:59 -07:00

web_server.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

webhook.py

fix(state): restrict sensitive store file permissions

2026-05-24 04:55:18 -07:00

win_pty_bridge.py

feat(windows): enable dashboard /chat tab via ConPTY (win_pty_bridge) + tests (#42251 )

2026-06-08 11:32:43 -07:00

write_approval_commands.py

refactor(memory,skills): replace tri-state write_mode with boolean write_approval (default off) (#43354 )

2026-06-09 23:21:14 -07:00

xai_retirement.py

fix(xai): align migrate retirement map with docs

2026-05-20 09:18:23 -07:00