Teknium 5eeafc8d25 fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485) ... Two amplifiers behind the 779K api.osv.dev DNS queries/16h report: 1. tools/osv_check.py: check_package_for_malware() hit OSV on EVERY call. MCP reconnect ladders, stdio recycles, and parked-server self-probes re-run the preflight for the same package on every spawn attempt, so a flapping server became a sustained OSV query/DNS stream. Verdicts (clean or blocked) are now cached for 1h (OSV_CHECK_CACHE_TTL to tune); network failures stay uncached so fail-open never masks a real advisory once connectivity returns. 2. hermes_cli/security_audit.py: cmd_security_audit() ran full component discovery twice per audit (_count_components + run_audit). Discovery now runs once via _discover_components() and run_audit() accepts the pre-discovered list. Both regression tests fail against the previous code (verified via sabotage run).		2026-08-01 10:47:20 -07:00
..
dashboard_auth	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
observability	perf(config): stop deepcopying config on per-turn read-only paths	2026-07-29 11:33:41 -07:00
proxy	rip out brew + pip/PyPI wheel support (#68217)	2026-07-22 16:51:01 -04:00
subcommands	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
web_routers	fix(api): enforce pagination bounds on session/message list routes	2026-07-31 22:35:49 -07:00
__init__.py	chore: release v0.19.1 (2026.7.30)	2026-07-30 16:45:08 -07:00
_early_recovery.py	fix(update): test runs never mutate the live checkout — pytest-guard the marker and repair paths	2026-07-29 21:30:53 -07:00
_parser.py	feat: raise default tool-calling iteration limit from 90 to 500	2026-07-26 12:54:45 -07:00
_scan_venv_blockers.py	fix(desktop): use the canonical gateway matcher for the preflight exemption	2026-07-31 22:34:28 -07:00
_subprocess_compat.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
active_sessions.py	fix(sessions): claim the cap slot on first turn, not on open	2026-07-28 12:11:52 -05:00
agent_import.py	refactor: extract atomic_write_text to utils.py; fix write-failure error handling	2026-07-29 16:49:07 +05:30
approval_mode.py	feat(approvals): add cross-surface mode command	2026-07-26 21:13:03 -07:00
approvals_suggest.py	feat(approvals): hermes approvals suggest — mine approval history into allowlist proposals	2026-07-26 17:49:03 -07:00
auth.py	fix(auth): a transient read failure is not corruption	2026-07-31 22:34:52 -07:00
auth_commands.py	…
azure_detect.py	…
backup.py	fix(state): stop cancelling our own POSIX locks on live SQLite databases	2026-07-25 21:44:43 -07:00
bang_shell.py	feat(cli): ! shell mode — run a command without spending a model turn	2026-07-31 21:21:20 -07:00
banner.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
blueprint_cmd.py	…
browser_connect.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
build_info.py	…
bundles.py	…
callbacks.py	feat(clarify): add multi-select (checkbox) support to clarify tool	2026-07-26 17:46:55 -07:00
checkpoints.py	fix(checkpoints): bind an empty orphan preview to an empty deletion allowlist	2026-07-24 16:01:06 -07:00
claw.py	fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)	2026-07-24 11:45:57 -07:00
cli_agent_setup_mixin.py	fix(update): make the git-path import check non-destructive	2026-08-01 16:09:27 +05:30
cli_billing_mixin.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
cli_commands_mixin.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
cli_output.py	…
clipboard.py	fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH	2026-07-29 08:42:16 -07:00
codex_models.py	fix(codex): send ChatGPT-Account-Id on /models probes	2026-07-21 05:27:13 -07:00
codex_runtime_plugin_migration.py	…
codex_runtime_switch.py	…
colors.py	…
commands.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
completion.py	…
config.py	fix(terminal): honor explicit config keys over stale env	2026-08-01 15:03:42 +05:30
config_defaults.py	fix(caching): honor prompt_caching.cache_ttl disable in config	2026-08-01 14:14:15 +05:30
config_migrations.py	refactor: config auto-migration support floor at v12 + deprecated shim retirement	2026-07-29 16:44:31 -07:00
console_engine.py	fix(sessions): keep kanban worker runs out of the session lists	2026-07-31 13:53:04 -05:00
container_boot.py	fix(gateway): detect and report unclean shutdowns via lifecycle ledger (NS-608)	2026-07-28 22:41:09 -07:00
context_switch_guard.py	fix(cli): honor custom_providers in preflight shrink warning	2026-07-22 21:17:21 -07:00
copilot_auth.py	fix(copilot): add explicit UTF-8 encoding to JWT store read/write	2026-07-31 22:31:09 -07:00
credential_lifecycle.py	fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)	2026-07-19 03:02:21 -07:00
cron.py	feat(cron): user-owned model pins + cron.model fleet default	2026-07-28 11:52:47 -07:00
curator.py	fix(curator): make the autonomous write policy consistent (#67140)	2026-07-25 19:27:17 -07:00
curses_ui.py	fix(models): match bare Kimi Coding k3 when searching kimi	2026-07-26 21:22:40 -07:00
dashboard_procs.py	refactor: extract dashboard process-hygiene helpers to dashboard_procs.py	2026-07-29 10:59:54 -07:00
dashboard_register.py	…
debug.py	…
default_soul.py	…
dep_ensure.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
diagnostics_upload.py	…
dingtalk_auth.py	…
doctor.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
dump.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
env_loader.py	perf(config): one raw config.yaml parse per process instead of 3-4	2026-07-29 10:32:25 -07:00
fallback_cmd.py	refactor(fallback): single owner for backend identity and failure-scoped skips	2026-07-26 23:41:54 -07:00
fallback_config.py	fix(auth): resolve fallback api keys through secret_scope, not raw env	2026-07-31 22:35:26 -07:00
focus_view.py	feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator	2026-07-26 18:10:34 -07:00
gateway.py	fix(update): let callers pass the platform verdict to the venv helpers	2026-08-01 16:45:00 +05:30
gateway_enroll.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
gateway_windows.py	fix(update): migrate legacy pythonw Windows gateway launchers to the hidden-console design	2026-07-26 17:50:54 -07:00
goals.py	fix(goals): auto-pause goal loop on consecutive transport failures	2026-07-20 05:38:25 -07:00
gui_uninstall.py	…
hooks.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
init_command.py	feat(cli): /init — generate or update AGENTS.md from a project scan	2026-07-26 17:46:29 -07:00
input_sanitize.py	…
inventory.py	feat(picker): derive a newest-per-lab featured shortlist from models.dev	2026-07-28 03:52:33 -05:00
journey.py	…
kanban.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
kanban_db.py	fix(kanban): deliver notifications from non-dispatch gateways	2026-07-31 21:52:11 -07:00
kanban_decompose.py	…
kanban_diagnostics.py	…
kanban_specify.py	…
kanban_swarm.py	…
lifecycle.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
logs.py	…
main.py	fix(update): let callers pass the platform verdict to the venv helpers	2026-08-01 16:45:00 +05:30
managed_scope.py	…
managed_uv.py	fix(update): let callers pass the platform verdict to the venv helpers	2026-08-01 16:45:00 +05:30
mcp_catalog.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
mcp_config.py	fix(mcp): make Figma remote OAuth work via DCR allowlist defaults	2026-07-28 00:53:16 -05:00
mcp_picker.py	…
mcp_security.py	…
mcp_startup.py	fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions	2026-08-01 12:27:31 +05:30
memory_oauth.py	…
memory_setup.py	fix: route memory-provider dep installs through lazy_deps durable target	2026-07-28 22:40:33 -07:00
middleware.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
migrate.py	…
moa_cmd.py	feat(moa): add reference model toggles	2026-07-23 18:11:57 -07:00
moa_config.py	feat(moa): default advisor fanout to user_turn — the cheapest cadence	2026-07-23 21:07:18 -07:00
model_catalog.py	…
model_cost_guard.py	…
model_normalize.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
model_search.py	fix(picker): fold live bare k3 wire id into curated kimi-k3 row	2026-07-26 21:22:40 -07:00
model_setup_flows.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
model_switch.py	fix(gateway): offload /model context-length resolution off the event loop	2026-07-31 22:39:34 -07:00
models.py	fix(models): honor model.base_url in OpenAI discovery, cache identity, and listing authority	2026-07-31 21:31:56 -07:00
nous_account.py	…
nous_auth_keepalive.py	…
nous_billing.py	refactor: single shared Retry-After parser	2026-07-29 10:13:50 -07:00
nous_subscription.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
npm_engine.py	fix(npm): self-upgrade a managed npm when engines.npm rejects it	2026-07-31 13:42:04 -04:00
onepassword_secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
oneshot.py	fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions	2026-08-01 12:27:31 +05:30
pairing.py	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
partial_compress.py	…
pets.py	…
platforms.py	…
plugins.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
plugins_cmd.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
portal_cli.py	fix(auth): use refresh-free Nous status snapshot on read-only display paths	2026-07-28 22:42:19 -07:00
profile_describer.py	…
profile_distribution.py	fix(distribution): path-aware allowlist; preserve legacy copy-everything when omitted	2026-07-31 22:39:34 -07:00
profiles.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
projects_cmd.py	…
projects_db.py	feat(desktop): configure repository discovery (supersedes #67630) (#68642)	2026-07-21 10:09:31 -04:00
prompt_size.py	fix(prompt-size): include names-only skills in breakdown	2026-07-26 18:06:21 -07:00
prompt_stash.py	feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests	2026-07-31 21:21:16 -07:00
provider_catalog.py	…
providers.py	refactor(providers): delegate is_official_openai_host to base_url_host_matches	2026-07-31 21:31:56 -07:00
proxy_cli.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
psutil_android.py	…
pt_input_extras.py	fix(cli): route Cmd+Backspace and Cmd+ForwardDelete to the kill bindings	2026-07-30 03:39:26 -05:00
pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
pty_session.py	…
relaunch.py	…
route_identity.py	refactor: fold simplify-code review findings	2026-07-29 17:13:48 +05:30
runtime_provider.py	fix(cli): heal a bare custom provider to its config key, not its display name	2026-07-31 22:36:15 -07:00
secret_prompt.py	…
secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
security_advisories.py	…
security_audit.py	fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)	2026-08-01 10:47:20 -07:00
security_audit_startup.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
send_cmd.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
service_manager.py	fix(hermes_cli): drop privileges before clearing s6-log lock	2026-07-27 19:19:01 +05:30
session_export.py	…
session_export_html.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
session_export_md.py	…
session_filters.py	fix(sessions): preserve recently active sessions during pruning	2026-07-26 19:30:21 -07:00
session_listing.py	fix(gateway): scope session lists before limiting	2026-07-31 22:36:55 -07:00
session_recap.py	…
session_recovery.py	fix(sessions): verify fully reconstructed recovery	2026-07-26 23:34:29 -07:00
sessions_cmd.py	refactor: hoist cmd_sessions out of main() into sessions_cmd.py	2026-07-29 10:59:54 -07:00
setup.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
setup_hidden_env.py	fix(setup): stop asking about self-configuring platform knobs	2026-07-26 08:43:24 -07:00
setup_whatsapp_cloud.py	…
skills_config.py	…
skills_hub.py	refactor: remove the claude-marketplace skill source (redundant Marketplace hub tab)	2026-07-28 23:16:27 -07:00
skin_cmd.py	feat(themes): `hermes skin set` — deterministic one-color tweak, bg untouched	2026-07-21 21:00:43 -05:00
skin_engine.py	feat(themes): dedicated code-syntax palette keys	2026-07-21 21:00:43 -05:00
slack_cli.py	fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)	2026-07-29 09:33:48 -07:00
slash_exec.py	refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)	2026-07-29 12:11:24 -07:00
sqlite_runtime.py	fix(runtime): repair vulnerable managed SQLite builds (E-949)	2026-07-24 16:00:03 -07:00
sqlite_safe_read.py	fix(cli): untrack sqlite connections only after close succeeds	2026-07-31 23:18:12 -07:00
sqlite_util.py	…
status.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
stdio.py	…
suggestions_cmd.py	…
telegram_managed_bot.py	…
timeouts.py	…
tips.py	feat: raise default tool-calling iteration limit from 90 to 500	2026-07-26 12:54:45 -07:00
tools_config.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
toolset_validation.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
uninstall.py	fix(install): expose hermes-agent and hermes-acp launchers on PATH	2026-07-31 22:39:11 -07:00
update_cmd.py	fix(update): discard staging litter when the commit phase fails	2026-08-01 17:25:08 +05:30
update_lock.py	fix(update): make the ancestor-PID lock handoff cross-platform via psutil	2026-07-31 22:28:46 -07:00
urllib_security.py	…
vercel_auth.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
voice.py	fix(voice): spoken barge-in works on every TTS playback path (CLI + gateway/desktop backends)	2026-07-29 08:24:00 -07:00
web_deps.py	refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)	2026-07-29 16:21:54 -07:00
web_git.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
web_models.py	fix(pairing): scope the approve/revoke endpoints to a profile	2026-07-29 18:43:50 -05:00
web_server.py	Merge remote-tracking branch 'origin/main' into fix-73914-atomic-cancel	2026-07-31 03:35:08 -03:00
webhook.py	fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests	2026-07-24 11:45:57 -07:00
win_pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
windows_ssh_runtime.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
write_approval_commands.py	…
xai_retirement.py	…