Teknium 8b6931393e Port from langchain-ai/deepagents#5829: confirm mid-session model switches that abandon a large cached context ...

Providers key prompt caches per model, so a mid-session /model switch makes
the next reply re-read the entire conversation at full input price. deepagents
gates user-initiated switches behind a confirmation once the active thread
exceeds a configurable token threshold; this ports the same protection into
Hermes' unified selection-guard registry so it renders on every surface at
once (CLI/TUI picker, gateway /model, Telegram/Discord pickers, dashboard).

- hermes_cli/model_selection_guards.py: new context_cache guard +
  SelectionContext carrier + selection_context_for_agent() helper;
  registry threads live-session facts to guards (6-arg signature with a
  TypeError fallback for externally patched 5-arg guards).
- config: model.switch_context_confirm_tokens (default 100000, 0 disables).
- cli.py / gateway/slash_commands.py / tui_gateway/server.py: thread the
  live agent's measured context into the guard call.
- docs: configuring-models.md mid-session switch section.
- tests: tests/hermes_cli/test_context_cache_switch_guard.py (13 cases).

2026-09-13 20:54:50 -07:00

..

assets

chore: limit generic status phrases to long-running notifications

2026-07-05 06:29:26 -07:00

builtin_hooks

remove: BOOT.md built-in hook (#17093)

2026-04-28 09:50:27 -07:00

platforms

fix(gateway): validate a secondary's Docker MEDIA paths under its own profile scope

2026-09-13 19:18:26 -07:00

relay

docs: fold the root docs/ tree into the Docusaurus site and delete it

2026-09-13 06:06:46 -07:00

__init__.py

fix(gateway): stop time-triggered conversation rotation

2026-09-07 06:10:54 -07:00

agent_cache_pressure.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

AGENTS.md

refactor(platforms): one scoped-secret reader and spec-driven enablement/YAML-bridge boilerplate across all adapters

2026-09-13 05:32:38 -07:00

authz_mixin.py

fix(gateway): the central allow_bots grant honours a secondary profile's YAML policy

2026-09-13 15:39:11 -07:00

bot_loop_guard.py

fix(gateway): count each bot message once in the loop guard and consume the author variable

2026-09-10 10:27:07 -07:00

browser_control_artifacts.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

browser_control_broker.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

cgroup_cleanup.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

channel_directory.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

code_skew.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

config_env.py

fix(gateway): WHATSAPP_ENABLED=true no longer overrides an explicit platforms.whatsapp.enabled: false (#73289, salvage #73303)

2026-09-13 20:53:54 -07:00

config_loader.py

fix(gateway/config): root-level platform blocks keep their adapter keys

2026-09-12 08:42:58 -07:00

config.py

fix(desktop,dashboard): served profile's api_server/webhook read connected with their /p/<profile>/ URL; shared-gateway restart asks first

2026-09-12 12:52:19 -07:00

control_socket.py

feat(gateway): multiplexer hot-serves profiles created while it runs, unroutes deleted ones

2026-09-12 08:49:16 -07:00

cwd_placeholder.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

dead_targets.py

refactor(gateway): second-pass compaction of delivery ledger/router, control socket, dead targets

2026-09-02 20:13:08 -07:00

delivery_ledger.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

delivery.py

fix: reject blank unknown delivery destinations too

2026-09-07 06:00:05 -07:00

disk_status.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

display_config.py

refactor(gateway): wave-2 final compaction — Platform._missing_ single exit, _cleanup_expired keep-set, expression-form display normalisers and small predicates

2026-09-02 22:42:55 -07:00

drain_control.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

hooks.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

hosted_room_discussion.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_driver.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_execution_policy.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_links.py

refactor(gateway): reflow hosted-room module/function docstrings to <=120 cols (every sentence kept)

2026-09-03 00:09:14 -07:00

hosted_room_peer.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

hosted_room_policy_checkpoint.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_room_replicas.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

hosted_rooms_common.py

fix(cron): sqlite_util imports are late so a running scheduler survives an on-disk upgrade

2026-09-13 05:08:29 -07:00

hosted_rooms.py

test(hosted-rooms): pin the coordination store off the master state.db; label sidecars

2026-09-11 06:21:48 -07:00

kanban_watchers_common.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

kanban_watchers_dispatcher.py

fix(kanban): trim auto-decompose scope shim and add an invariant test

2026-09-13 14:43:19 -07:00

kanban_watchers_notifier.py

fix(kanban): stage review-bound handoff artifacts in request_review

2026-09-13 14:37:17 -07:00

kanban_watchers.py

fix(kanban): gate gateway notifier polling

2026-09-13 14:43:19 -07:00

lifecycle_ledger.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

media_fetch.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_policy.py

fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy

2026-09-11 15:44:00 -07:00

media_repair.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

memory_monitor.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

memory_status.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

message_timestamps.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

mirror.py

fix(gateway): mirror_to_session reports False when the transcript write fails

2026-09-12 08:22:42 -07:00

pairing.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

platform_registry.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

profile_routing.py

fix(gateway): profile_routes no longer hijack DMs to a dedicated secondary bot (#104933)

2026-09-11 15:28:00 -07:00

readiness.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

response_filters.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

restart_loop_guard.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

restart.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

rich_sent_store.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

run_adapters.py

fix(gateway): a single-profile gateway start clears an inherited served_profiles list

2026-09-13 15:41:01 -07:00

run_agent_cache.py

feat(gateway): fire agent_loop_stopped plugin hook on interrupt

2026-09-12 22:19:44 -07:00

run_busy.py

fix(gateway): resolve authorization routing in multiplexed busy sessions

2026-09-11 15:28:00 -07:00

run_common.py

refactor(gateway): split GatewayRunner into 13 run_* mixins + TurnRunner module (run.py 31332 -> 6957)

2026-09-02 16:11:50 -07:00

run_config_loaders.py

refactor(platforms): one scoped-secret reader and spec-driven enablement/YAML-bridge boilerplate across all adapters

2026-09-13 05:32:38 -07:00

run_goals.py

fix(multiplex): cron, kanban, /loop and completion paths for a served profile match its standalone gateway

2026-09-11 19:58:07 -07:00

run_heartbeat_acceptance.py

fix: keep admitted heartbeats in their owning conversation

2026-09-07 14:16:57 -07:00

run_heartbeat_restore.py

fix: keep admitted heartbeats in their owning conversation

2026-09-07 14:16:57 -07:00

run_inbound.py

fix(gateway): generation-guarded slot release on /stop; displaced lease tokens swept

2026-09-12 12:24:24 +05:30

run_notifications.py

fix(gateway): a profile named 'main' gets its own session namespace

2026-09-13 15:41:01 -07:00

run_profile_reconcile.py

fix(gateway): a profile named 'main' gets its own session namespace

2026-09-13 15:41:01 -07:00

run_shutdown.py

feat(update): name the work a draining gateway is waiting on

2026-09-13 05:08:20 -07:00

run_startup.py

feat(gateway): multiplexer hot-serves profiles created while it runs, unroutes deleted ones

2026-09-12 08:49:16 -07:00

run_topics.py

style(discord): trim rename comments

2026-09-13 15:39:11 -07:00

run_turn_followup_ack.py

fix(gateway): fire processing hooks for runner-drained queued follow-ups (#72502, salvage #72503)

2026-09-13 20:52:02 -07:00

run_turn_runner.py

fix(agent): unify replay history canonicalization

2026-09-13 19:23:09 +05:30

run_turn.py

fix(gateway): fire processing hooks for runner-drained queued follow-ups (#72502, salvage #72503)

2026-09-13 20:52:02 -07:00

run_voice.py

fix(gateway): mid-turn authorization reads the admitting bot's allowlist; shared-bot satellites keep a transport

2026-09-11 15:28:00 -07:00

run_watchers.py

fix(sessions): remove remaining timer migration and guidance

2026-09-07 06:10:54 -07:00

run.py

fix(fallback): named custom providers keep their configured identity after automatic fallback (#98739)

2026-09-13 20:51:06 -07:00

runtime_footer.py

refactor(gateway): third pass on scale_to_zero/wake/status_phrases/runtime_footer/systemd_notify

2026-09-02 21:14:22 -07:00

scale_to_zero.py

fix(gateway): stop dropping the first message after an Azure agent sleeps (#99736)

2026-09-04 15:41:27 -03:00

session_context.py

fix: persist API delegation units once without waking the model

2026-09-09 10:55:32 -07:00

session_db_recovery.py

refactor(gateway): session — checkpoint: phase helpers for get_or_create_session, shared clock/id helpers in lifecycle, context/state/stall folding

2026-09-02 19:21:38 -07:00

session_lifecycle.py

refactor(sessions): one session-id minter; QQ update-prompt key from build_session_key

2026-09-13 05:21:02 -07:00

session_persistence.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

session_recovery.py

fix(gateway): a profile named 'main' gets its own session namespace

2026-09-13 15:41:01 -07:00

session_stall.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_state.py

refactor(gateway): keep one per-generation turn-lease token map

2026-09-12 12:03:39 +05:30

session_transcript.py

refactor(state): one carrier-aware user-turn rewind behind CLI /undo, /retry, gateway and TUI

2026-09-13 05:20:26 -07:00

session.py

fix(gateway): a profile named 'main' gets its own session namespace

2026-09-13 15:41:01 -07:00

shutdown_flush.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

shutdown_forensics.py

fix(update): let systemd clients outwait legitimate unit transactions

2026-09-07 08:20:09 -07:00

shutdown_watchdog.py

review-fix(suppress-audit): skill_usage hub-lock walk, watchdog tick finally, session.create cwd — restore BASE exception semantics

2026-09-03 10:00:07 -07:00

slash_access.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

slash_commands_goals.py

fix(gateway): secondary-profile send_message, notices and /loop wakeups go out via their own bot

2026-09-10 18:17:22 -07:00

slash_commands_login.py

feat(gateway): sign in with a Nous account from a chat (/login), one shared sign-in flow (#105261)

2026-09-11 03:45:33 +05:30

slash_commands_model.py

Port from langchain-ai/deepagents#5829: confirm mid-session model switches that abandon a large cached context

2026-09-13 20:54:50 -07:00

slash_commands_session.py

fix(gateway): /save delivers the export document instead of crashing on get_adapter

2026-09-13 14:45:10 -07:00

slash_commands_status.py

fix(gateway): /usage billing route follows the most recent model too

2026-09-13 14:45:41 -07:00

slash_commands.py

refactor(config): one effective-user-config loader replaces 9 hand-rolled raw→overlay→expand pipelines

2026-09-13 05:09:06 -07:00

startup_watchdog.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

status_phrases.py

refactor(gateway): third pass on scale_to_zero/wake/status_phrases/runtime_footer/systemd_notify

2026-09-02 21:14:22 -07:00

status.py

fix(gateway): --profile=ops gateway is never matched as the default profile's

2026-09-13 15:41:01 -07:00

sticker_cache.py

fix(security): re-resolve checkpoint/sticker-cache paths per call

2026-09-11 15:44:00 -07:00

stream_consumer_fallback.py

fix(relay): authorize send_message targets and surface egress declines (P5) (#99220)

2026-09-08 17:51:35 +10:00

stream_consumer_fences.py

refactor(gateway): stream/runner — checkpoint: consumer init/reset helpers, sentinel dispatch table, fallback/transport dedupe, watcher/voice/lease compaction

2026-09-02 19:19:38 -07:00

stream_consumer_think.py

refactor(display): one think-tag list; ACP tool titles derive from agent/display previews

2026-09-13 05:20:26 -07:00

stream_consumer_transport.py

fix(relay): authorize send_message targets and surface egress declines (P5) (#99220)

2026-09-08 17:51:35 +10:00

stream_consumer.py

fix(relay): authorize send_message targets and surface egress declines (P5) (#99220)

2026-09-08 17:51:35 +10:00

stream_dispatch.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

stream_events.py

refactor(gateway): stream transport/fallback/events — docstrings to summary + invariant

2026-09-02 20:24:52 -07:00

streaming_tts_consumer.py

fix(gateway): flush spoken acknowledgments at tool boundaries

2026-09-09 10:59:52 -07:00

systemd_notify.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

turn_context.py

fix(gateway): carry accepted-input ownership through persistence

2026-09-07 14:11:18 -07:00

turn_lease.py

refactor(gateway): drop the write-only one-shot generation stamp; /stop and eviction share _drop_turn_slot

2026-09-12 12:03:39 +05:30

wake.py

fix: persist API delegation units once without waking the model

2026-09-09 10:55:32 -07:00

whatsapp_identity.py

fix(live-qa): nous_subscription managed table indexes only selectable features (KeyError 'modal' crashed status/tools/dashboard toolsets); restore PluginManager public API (has_portable_mcp_servers, get_telegram_handler_factories, register_approval_transport), extract_json_candidate public name, canonical_whatsapp_identifier main semantics

2026-09-03 08:16:44 -07:00