sal 5d9a2110ba fix(recovery): stop pointing sqlite3 .recover guidance at the live state.db ...

Refs #100368. The forensics thread established that a sqlite3 CLI with
the WAL-reset opener bug (fixed 3.51.3+ / backports 3.50.7 / 3.44.6;
Debian/Ubuntu system shells 3.45.1/3.46.1 are in the vulnerable band)
unlinks the live -wal/-shm pair when pointed at a live state.db whose
writer's DMS lock has been cancelled, splitting the store into two
concurrent generations whose acknowledged writes vanish while both
report integrity_check ok. Hermes' own corruption banners instructed
exactly that command.

- gateway corruption broadcast, run_agent corrupt-cause explanation,
  hermes_state repair-budget and forensic-backup refusals, and the
  kanban manual-recovery hint now route operators to
  `hermes sessions recover --source <db>` (which snapshots the damaged
  bundle before any shell touches it) and warn against a raw sqlite3
  shell on the live file
- find_sqlite3_cli() now refuses a WAL-reset-vulnerable shell for the
  page-level salvage lane even on the snapshot, reusing the canonical
  gate from hermes_cli.sqlite_runtime so the embedded runtime and the
  salvage shell can never disagree
- find_sqlite3_cli_refusal() records why a shell was refused so the
  lost_and_found lane can tell the operator exactly what to install
  instead of a generic "not found"
- regression tests cover the version gate (vulnerable/fixed matrix, the
  mirror check), every refusal reason, and each guidance site

Test plan:
- scripts/run_tests.sh tests/hermes_cli/test_sqlite3_cli_salvage_gate.py
  tests/test_state_db_repair_loop_cap.py
  tests/run_agent/test_corruption_recovery_guidance.py
  tests/hermes_cli/test_session_recovery_lost_and_found.py
  tests/hermes_cli/test_session_recovery.py tests/test_sqlite_wal_reset_gate.py
  tests/hermes_cli/test_sqlite_runtime.py - 91 passed, 1 skipped locally

(cherry picked from commit e62940d1021e80e9b7d6423ced1cbdfe7dd0c37d)

2026-09-03 11:28:21 +05:30

..

dashboard_auth

fix(dashboard-auth): a non-JWT bearer is "not my token", not "provider unreachable" (#94558)

2026-09-02 01:15:58 -07:00

data

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

local_runtime

feat: local models — managed llama.cpp runtime with one-click desktop setup

2026-09-01 16:01:53 -04:00

observability

Merge pull request #96633 from afourniernv/chore/relay-0.8.0

2026-09-02 22:03:27 -04:00

proxy

fix: sibling Nous 401 recovery adopts a peer's refresh instead of rotating again

2026-09-02 21:22:07 -07:00

subcommands

feat(cron): per-job failure_deliver — route or suppress failure notices (NS-788)

2026-09-02 20:16:14 +05:30

web_routers

refactor(cli): use the router's run_in_threadpool alias; offload profile model write

2026-09-03 01:56:47 +05:30

__init__.py

chore: release v0.21.0 (2026.8.31)

2026-08-31 12:29:27 -07:00

_early_recovery.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_install_repair.py

fix(install): never strand hermes.exe when a Windows update fails

2026-08-23 01:47:26 -07:00

_parser.py

feat(cli/tui): -q now seeds a live interactive session; prompts submit literally

2026-08-28 05:15:06 -07:00

_scan_venv_blockers.py

fix(desktop): sanitized deferral evidence for ledgered manual serve blockers

2026-09-01 01:30:09 -07:00

_startup_fast.py

feat: consolidate 'hermes version' into 'hermes --version', remove the subcommand

2026-08-20 03:05:46 -07:00

_subprocess_compat.py

fix(security): close GitSpawn RCE class — malicious repo .git/config no longer executes on context gathering (GHSA-7x36-8jrh-v4pw)

2026-09-02 10:33:43 -07:00

active_sessions.py

fix(sessions): never reap an own lease younger than the vouch snapshot

2026-09-03 03:48:31 +05:30

agent_import.py

refactor(cli): review follow-ups for the config.yaml import guard

2026-08-02 14:55:32 +05:30

agent_plugins.py

feat(plugins): map portable Agent Plugins streamable-http entries into the native MCP runtime

2026-08-08 23:56:46 -07:00

approval_mode.py

fix(hermes_cli): surface fail-closed config write refusals cleanly

2026-08-27 13:27:24 +05:30

approval_transport.py

fix(plugins): harden approval transport boundaries

2026-08-12 16:26:55 -07:00

approvals_suggest.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

approvals_test.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

archive_safe.py

fix(profiles): make_targz writes to a temp file and renames, not the destination directly

2026-08-31 11:19:05 -07:00

auth_commands.py

fix(auth): auto-heal single-use OAuth grants already forked across profiles (#100339)

2026-09-02 00:58:29 -07:00

auth.py

fix(auth): memoize the shared-store skip and cover the aliased anthropic singleton

2026-09-03 03:31:54 +05:30

azure_detect.py

fix(security): secure Azure catalog probes

2026-07-11 12:28:55 +05:30

backup.py

feat: local models — managed llama.cpp runtime with one-click desktop setup

2026-09-01 16:01:53 -04:00

bang_shell.py

feat(cli): ! shell mode — run a command without spending a model turn

2026-07-31 21:21:20 -07:00

banner.py

fix(cli): keep passive update checks noninteractive

2026-09-02 12:34:26 -07:00

blueprint_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

browser_connect.py

fix(browser): real-profile snapshot auth files are owner-only (#96729)

2026-08-29 20:07:53 -07:00

build_info.py

fix(update): resolve code identity by reading .git directly — no subprocess

2026-08-20 21:54:25 -07:00

bundles.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

callbacks.py

feat(cli): OSC 9 + Warp OSC 777 notifications ride on the bell flags

2026-09-02 06:17:10 -07:00

checkpoints.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

claw.py

fix(cli): bound the Windows process-scan probes so a slow WMI scan cannot wedge hermes update (#87134)

2026-08-16 06:32:08 -07:00

cli_agent_setup_mixin.py

feat(fast): bounded /fast auto|cold windows behind one route-aware gate

2026-09-02 05:33:13 -07:00

cli_billing_mixin.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

cli_commands_mixin.py

feat(fast): bounded /fast auto|cold windows behind one route-aware gate

2026-09-02 05:33:13 -07:00

cli_output.py

fix(cli): widen prompt_toolkit fallback to catch any runtime failure

2026-08-24 15:42:58 +05:30

clipboard.py

fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH

2026-07-29 08:42:16 -07:00

codex_models.py

feat(model): Codex GPT slugs default back to 272K; explicit -900k picker variants opt into the verified large window

2026-08-23 02:14:35 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

refactor(codex-runtime): tidy reapply-migration control flow

2026-07-01 23:51:54 +05:30

colors.py

…

commands.py

feat(fast): bounded /fast auto|cold windows behind one route-aware gate

2026-09-02 05:33:13 -07:00

completion.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

config_defaults.py

fix(computer-use): distinguish doctor and gateway environments

2026-09-02 21:49:23 -07:00

config_migrations.py

feat(model-catalog): picker catalogs refresh every 20 minutes, gateway keeps them warm

2026-09-02 06:16:54 -07:00

config.py

fix(config): keep .env publishes inside the routed profile scope under multiplex (#88441)

2026-09-02 06:19:03 -07:00

console_engine.py

fix(hermes_cli): surface fail-closed config write refusals cleanly

2026-08-27 13:27:24 +05:30

container_boot.py

fix(container): honor config.yaml multiplex_profiles at boot

2026-09-02 05:34:28 -07:00

context_switch_guard.py

fix(cli): honor custom_providers in preflight shrink warning

2026-07-22 21:17:21 -07:00

copilot_auth.py

fix(gateway): off-loop review follow-ups for #101603 / #101605

2026-09-03 02:07:05 +05:30

credential_lifecycle.py

fix(credentials): scrub the keyed providers schema on rotate/remove

2026-08-31 03:37:43 -07:00

cron.py

feat(cron): per-job failure_deliver — route or suppress failure notices (NS-788)

2026-09-02 20:16:14 +05:30

curator.py

fix(curator): restore complete skill packages on ledger rollback (#96962)

2026-08-31 10:08:13 -07:00

curses_ui.py

refactor: collapse context_back/effective_allow_back, fix draw_header docstring

2026-08-24 15:45:52 +05:30

dashboard_procs.py

fix(update): stop the managed dashboard restart from skipping serve backends

2026-09-01 07:00:54 -07:00

dashboard_register.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

debug.py

feat(agent): escalate repeated transcript-sanitiser heals with a one-time user notice (#96870)

2026-08-31 13:11:41 -07:00

default_soul.py

fix(install): keep install.ps1 pure ASCII — seed the SOUL text with '--' dashes

2026-08-29 18:10:47 -07:00

dep_ensure.py

fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade

2026-08-13 02:38:28 -07:00

diagnostics_upload.py

feat(debug): drop dead confirm step from --nous upload (stateless NAS)

2026-06-30 17:29:23 -07:00

dingtalk_auth.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

doctor_live.py

fix(cli): apply Termux carve-out to doctor --live's npx browser probe

2026-08-13 02:38:28 -07:00

doctor.py

fix(doctor): reuse resolved memory config at Memory Provider section

2026-09-02 06:17:25 -07:00

dump.py

feat(web): add Tavily web search and extract provider

2026-09-01 10:56:49 -07:00

env_loader.py

fix(env_loader): log routed-scope dotenv skip once per home; port single-profile control test

2026-09-02 06:19:03 -07:00

fallback_cmd.py

refactor(fallback): single owner for backend identity and failure-scoped skips

2026-07-26 23:41:54 -07:00

fallback_config.py

fix(auth): resolve fallback api keys through secret_scope, not raw env

2026-07-31 22:35:26 -07:00

focus_view.py

feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator

2026-07-26 18:10:34 -07:00

foreign_sessions.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

gateway_enroll.py

fix(cli): read multiplex topology from the default root in enroll warning

2026-08-21 14:13:28 +10:00

gateway_windows.py

fix(gateway): survive Windows Job-Object teardown across gateway restarts (#48820)

2026-09-01 11:43:36 -07:00

gateway.py

fix(cli): report a named profile as running when the default multiplexer serves it

2026-09-02 06:36:16 -07:00

gitlock.py

fix(update): sweep aborted-fetch tmp_pack debris before it corrupts the pack directory (#93732)

2026-08-26 16:45:22 -07:00

goals.py

fix(security): close GitSpawn RCE class — malicious repo .git/config no longer executes on context gathering (GHSA-7x36-8jrh-v4pw)

2026-09-02 10:33:43 -07:00

gui_uninstall.py

fix(linux): stop installing the Mint panel icon as a PNG in hicolor/scalable (#100152)

2026-09-01 22:09:24 -05:00

heartbeat.py

refactor(goals): share one dropped-write warning across managers

2026-08-18 16:08:29 -07:00

hooks.py

agent: forward first stream chunk timestamp to post_api_request hook

2026-09-01 08:30:45 -07:00

image_provenance.py

feat(update): bake authoritative image provenance into the Docker image

2026-08-26 11:41:04 -07:00

init_command.py

feat(cli): /init — generate or update AGENTS.md from a project scan

2026-07-26 17:46:29 -07:00

input_sanitize.py

fix(input): strip bracketed-paste leaks before prompt persistence (#62557)

2026-07-15 07:39:42 -07:00

install_identity.py

feat(bot-mode): add durable Group Chat authority and replay

2026-08-30 19:46:14 -07:00

inventory.py

fix(picker): keep signed-in copilot-acp visible in explicit-only desktop pickers

2026-09-02 20:51:07 +05:30

journey.py

fix(cli): keep journey labels readable

2026-08-27 17:45:43 -05:00

kanban_db.py

fix(kanban): reap notify subscriptions for stale blocked tasks too

2026-09-02 05:32:10 -07:00

kanban_decompose.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_diagnostics.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

kanban_specify.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_swarm.py

fix(kanban): make write_txn nesting explicit opt-in

2026-08-10 12:43:46 -07:00

kanban_transfer.py

feat(kanban): export and import a whole board as a portable archive

2026-08-28 22:38:01 -05:00

kanban.py

fix(recovery): stop pointing sqlite3 .recover guidance at the live state.db

2026-09-03 11:28:21 +05:30

lifecycle.py

Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"

2026-07-27 21:10:51 -07:00

linux_desktop_entry.py

fix(linux): stop installing the Mint panel icon as a PNG in hicolor/scalable (#100152)

2026-09-01 22:09:24 -05:00

logs.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

loops.py

fix(loops): pause /loop --until on a blocked verdict; trim redundant gate condition and duplicate test

2026-09-02 05:32:01 -07:00

macos_tcc_anchor.py

refactor(macos): use shared atomic_write_text for the anchor marker

2026-08-28 09:05:19 +05:30

main.py

fix(cli): skip wrapper-side MCP discovery when chat launches the TUI

2026-09-03 03:48:39 +05:30

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

fix(update): defer Windows runtime repair when the updater holds the venv

2026-08-31 12:50:29 -07:00

mcp_catalog.py

fix(mcp-catalog): failed probe keeps the prior tool filter instead of wiping it

2026-08-25 04:21:37 -07:00

mcp_config.py

fix(mcp): tool-selection UIs stay in exclude mode instead of freezing include lists

2026-08-25 04:21:37 -07:00

mcp_picker.py

…

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(cli): apply the -t/--toolsets MCP spawn filter on every discovery path

2026-09-03 03:16:04 +05:30

mem_trim.py

fix(mem): 5s force floor so delegate-batch closes don't stack trims

2026-08-02 22:44:38 +05:30

memory_oauth.py

feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)

2026-06-22 19:16:47 -05:00

memory_setup.py

fix(memory-setup): route .env writer through save_env_value's validation gate

2026-08-26 15:48:39 -07:00

middleware.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

migrate.py

…

moa_cmd.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

moa_config.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

model_catalog.py

feat(model-catalog): picker catalogs refresh every 20 minutes, gateway keeps them warm

2026-09-02 06:16:54 -07:00

model_cost_guard.py

fix(cli): guard expensive startup model overrides

2026-08-14 01:31:31 -07:00

model_data_policy_guard.py

docs(meta-ai): point contributor pricing to live page

2026-09-02 21:22:53 -07:00

model_normalize.py

feat(providers): add Nebius Token Factory provider

2026-08-29 20:39:44 +05:30

model_search.py

feat(models): 'ox alpha' now finds x-preview-f-free in every model picker

2026-08-21 14:38:19 -07:00

model_selection_guards.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

model_setup_flows.py

Merge pull request #97354 from NousResearch/fix/nous-org-model-policy

2026-09-01 18:20:18 -03:00

model_switch.py

fix(model): show copilot-acp in pickers when its executable resolves

2026-09-02 20:51:07 +05:30

models.py

feat(meta-ai): live-first model catalog + generic contributor warning

2026-09-02 21:22:53 -07:00

nous_account.py

fix(nous): show the policy notice only when the filter narrowed the list

2026-09-01 16:37:36 -03:00

nous_auth_keepalive.py

Move the keepalive interval to config.yaml and tighten the schedule guard

2026-09-02 10:22:30 -07:00

nous_billing.py

refactor: single shared Retry-After parser

2026-07-29 10:13:50 -07:00

nous_subscription.py

feat(web): add Tavily web search and extract provider

2026-09-01 10:56:49 -07:00

npm_engine.py

fix(win): never rewrite the in-use managed Node tree (#80926)

2026-08-14 21:35:30 -07:00

onepassword_secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

oneshot.py

fix: harden startup route salvage — aggregator-slug guard, alias credential ownership, oneshot dedup

2026-09-01 12:07:35 -07:00

pairing.py

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

partial_compress.py

feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)

2026-07-02 05:10:31 -07:00

personality.py

fix(personality): single-owner personality state + one-time reset migration

2026-08-09 10:33:58 -07:00

pets.py

fix(pets): cover the pets CLI (doctor, has-active, /pet toggle) too

2026-08-15 00:32:44 -07:00

platform_actions.py

fix(plugins): platform_actions fails closed when the active profile cannot be resolved

2026-09-02 06:59:11 -07:00

platforms.py

…

plugin_capabilities.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

plugin_dev.py

fix(plugins): doctor temp home can no longer be stranded by a failed staging copy

2026-08-31 08:41:15 -07:00

plugin_index.py

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

plugin_packs.py

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

plugins_cmd.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

plugins.py

fix(gateway): scope force-reload hook re-registration to its own home

2026-09-02 07:00:13 -07:00

portal_cli.py

fix(auth): use refresh-free Nous status snapshot on read-only display paths

2026-07-28 22:42:19 -07:00

process_identity.py

fix(mcp): register stdio MCP helper children in the spawn ledger and reap orphans (#61514)

2026-08-26 17:42:58 -07:00

profile_describer.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

profile_distribution.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

profiles.py

fix(cli): report a named profile as running when the default multiplexer serves it

2026-09-02 06:36:16 -07:00

projects_cmd.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

projects_db.py

fix(projects): dedup project_create by primary_path (#75820)

2026-08-15 00:33:11 -07:00

prompt_size.py

fix: honor JSON-array string forms for skills.disabled and agent.disabled_toolsets

2026-08-16 06:24:56 -07:00

prompt_stash.py

feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests

2026-07-31 21:21:16 -07:00

provider_catalog.py

feat: keyless flag on the provider catalog — GUI contract tests exempt anonymous providers

2026-08-21 00:24:32 -07:00

providers.py

feat: local models — managed llama.cpp runtime with one-click desktop setup

2026-09-01 16:01:53 -04:00

proxy_cli.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

psutil_android.py

fix(android): reject unsafe tar members in psutil compatibility installer

2026-05-28 02:36:09 -07:00

pt_input_extras.py

fix(cli): stop raw CSI bytes from Shift+Space leaking into buffer (#88071)

2026-08-31 10:08:48 -07:00

pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

pty_session.py

fix(dashboard): redraw TUI after PTY reattach

2026-08-14 13:51:26 -07:00

relaunch.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

relay_plugin_cutover.py

fix(relay): complete native plugin cutover

2026-08-19 08:52:03 -07:00

resource_limits.py

fix(gateway): persist RLIMIT_NOFILE floor into the generated launchd plist

2026-08-10 17:02:56 -07:00

route_identity.py

refactor: fold simplify-code review findings

2026-07-29 17:13:48 +05:30

runtime_provider.py

feat(providers): let an external-process provider ship out of tree

2026-09-02 09:57:39 -07:00

secret_prompt.py

feat(memory): improve OpenViking setup UX

2026-06-17 01:04:26 +08:00

secrets_cli.py

fix(secrets_cli): defer bitwarden backend import to first attribute access

2026-08-15 01:55:22 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

security_audit_startup.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

security_audit.py

fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)

2026-08-01 10:47:20 -07:00

send_cmd.py

fix(cli): apply BOM-safe .env decoding to hermes send's private loader

2026-08-08 12:32:23 -07:00

service_manager.py

fix(cli): supervised gateway launches skip the sticky active_profile redirect

2026-08-31 12:05:07 -07:00

session_export_html.py

fix(cli): coalesce None title/model in single-session HTML export

2026-08-15 02:04:49 -07:00

session_export_md.py

feat(sessions): full prune-filter set + --redact on sessions export

2026-07-07 12:36:41 -07:00

session_export.py

feat: bare /save shows a usage card instead of exporting

2026-08-15 02:04:49 -07:00

session_filters.py

fix(sessions): preserve recently active sessions during pruning

2026-07-26 19:30:21 -07:00

session_listing.py

fix(gateway): announce declined 'all' scope in /sessions and /resume listings

2026-08-31 14:40:09 -07:00

session_lost_and_found.py

fix(recovery): stop pointing sqlite3 .recover guidance at the live state.db

2026-09-03 11:28:21 +05:30

session_recap.py

fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)

2026-07-17 04:53:38 -07:00

session_recovery.py

fix(recovery): stop pointing sqlite3 .recover guidance at the live state.db

2026-09-03 11:28:21 +05:30

sessions_cmd.py

fix(sessions): error paths return non-zero exit codes (delete/rename/prune/import)

2026-08-20 02:06:05 -07:00

setup_hidden_env.py

fix(setup): stop asking about self-configuring platform knobs

2026-07-26 08:43:24 -07:00

setup_whatsapp_cloud.py

fix(cli): give every wizard free-text prompt arrow-key and Ctrl+A/E editing

2026-08-19 19:34:36 -07:00

setup.py

feat(telemetry): opt-in shared-metrics exporter (#95278)

2026-09-02 08:35:36 +10:00

sizefmt.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

skills_config.py

fix: system prompt no longer references tools/skills the session can't use; hermes-agent skill is always kept

2026-08-24 20:25:10 -07:00

skills_hub.py

feat(skills-hub): impeccable joins the optional-skills catalog, content pulled live from upstream

2026-08-29 19:15:32 -07:00

skin_cmd.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

skin_engine.py

feat(themes): dedicated code-syntax palette keys

2026-07-21 21:00:43 -05:00

slack_cli.py

fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)

2026-07-29 09:33:48 -07:00

slash_exec.py

feat(profiles): rename any agent — the default profile gets a display name (#45624)

2026-08-18 02:27:18 -07:00

sqlite_runtime.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

sqlite_safe_read.py

fix(cli): untrack sqlite connections only after close succeeds

2026-07-31 23:18:12 -07:00

sqlite_util.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

status.py

feat(web): add Tavily web search and extract provider

2026-09-01 10:56:49 -07:00

stderr_timestamp.py

fix(gateway): put --external-supervisor on launchd gateway argv

2026-08-16 01:54:35 -07:00

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

suggestions_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

telegram_managed_bot.py

Add CLI Telegram QR onboarding

2026-06-05 03:20:10 -07:00

terminal_breadcrumbs.py

feat: per-terminal --continue via terminal breadcrumbs

2026-08-15 18:15:18 -07:00

terminal_notify.py

feat(cli): OSC 9 + Warp OSC 777 notifications ride on the bell flags

2026-09-02 06:17:10 -07:00

timefmt.py

chore: round-2 review nits (re-review #9)

2026-08-02 16:16:36 -07:00

timeouts.py

…

tips.py

feat: /plan graduates from bundled skill to built-in command on every surface

2026-08-29 19:14:15 -07:00

tools_config.py

chore: trim salvaged #101772 to the fix (2 invariant tests, drop cosmetic comment rewrites)

2026-09-02 21:49:23 -07:00

toolset_scope.py

fix(config): warn for empty platform toolsets

2026-08-31 10:08:31 -07:00

toolset_validation.py

fix(config): warn for empty platform toolsets

2026-08-31 10:08:31 -07:00

uninstall.py

fix(windows): remove the hermes launchers on uninstall

2026-08-22 13:39:04 -04:00

update_abort_recovery.py

fix(update): keep serve-unit recovery identity scope-qualified

2026-09-01 07:00:54 -07:00

update_cmd.py

fix(update): hermes update no longer hangs on a GitHub username prompt

2026-09-02 12:34:26 -07:00

update_contract.py

feat(update): image/package-managed installs refuse in-place updates through one shared gate (#91277 Phase 3)

2026-08-26 11:41:04 -07:00

update_inventory.py

fix(update): reconcile serve/dashboard runtimes in their own vocabulary and escalate survivors (#100479)

2026-09-02 00:42:53 -07:00

update_lock.py

fix(update): make the ancestor-PID lock handoff cross-platform via psutil

2026-07-31 22:28:46 -07:00

update_receipt.py

fix(update): recover hermes-serve units after an aborted restart phase

2026-09-01 07:00:54 -07:00

update_restart_recovery.py

fix(update): keep serve-unit recovery identity scope-qualified

2026-09-01 07:00:54 -07:00

urllib_security.py

fix(models): trust certifi for credentialed catalogs (E-1002)

2026-08-14 16:43:37 -07:00

vercel_auth.py

Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"

2026-07-29 19:48:37 -07:00

verify_cmd.py

Integrate verify subsystem with the existing verification stack

2026-08-07 10:11:05 -07:00

voice.py

fix(cli): convert Alt key shortcuts to sequence tuple for prompt_toolkit (#74169)

2026-08-15 01:05:39 -07:00

web_deps.py

refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)

2026-07-29 16:21:54 -07:00

web_git.py

fix(security): close GitSpawn RCE class — malicious repo .git/config no longer executes on context gathering (GHSA-7x36-8jrh-v4pw)

2026-09-02 10:33:43 -07:00

web_models.py

feat(tts): speech toggles warm up and unload local TTS engines (#100881)

2026-09-01 21:43:59 -07:00

web_server.py

chore: trim salvaged #101772 to the fix (2 invariant tests, drop cosmetic comment rewrites)

2026-09-02 21:49:23 -07:00

webhook.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

win_pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

windows_ssh_runtime.py

fix(desktop): keep Windows SSH runtime at machine root

2026-08-01 14:30:16 -07:00

worktree_cmd.py

feat: hermes worktree list/prune — attended reclaim for accumulated worktrees and merged branches

2026-08-19 23:55:20 -07:00

worktree_gc.py

feat(worktree): pushed open-PR lanes reclaim their disk; cron tick prunes worktrees

2026-08-31 07:27:50 -07:00

write_approval_commands.py

refactor(memory,skills): replace tri-state write_mode with boolean write_approval (default off) (#43354)

2026-06-09 23:21:14 -07:00

xai_retirement.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30