Teknium d7522118ef fix(cli): route keyless first run into provider onboarding instead of a broken chat ... A completely unconfigured install previously booted into a working-looking chat (banner showed model 'unknown'), accepted a message, spun ~30s, then failed with 'Set OPENROUTER_API_KEY' — a provider the user never chose — and never offered setup. - HermesCLI.run() now probes provider readiness at startup (TTY only) and offers the shared provider picker (hermes model flow, which fronts Quick Setup / Nous Portal OAuth) when nothing is configured. Decline is respected; picker state re-syncs into the live CLI so the next turn works without a restart. - New silent probe _runtime_credentials_ready(): no printing, no state mutation; handles keyless local endpoints and callable bearer providers. - The empty-api-key error is provider-aware: names the actual resolved provider and points at 'hermes model' / 'hermes setup' instead of hardcoding OPENROUTER_API_KEY. - Banner: unconfigured installs render 'no model configured — run /model' in red instead of the silent 'unknown' model slug. Consumer-onboarding audit finding #2 (sev 5), Aug 2026.		2026-08-01 15:34:16 -07:00
..
dashboard_auth	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
observability	perf(config): stop deepcopying config on per-turn read-only paths	2026-07-29 11:33:41 -07:00
proxy	…
subcommands	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
web_routers	fix(api): enforce pagination bounds on session/message list routes	2026-07-31 22:35:49 -07:00
__init__.py	chore: release v0.19.1 (2026.7.30)	2026-07-30 16:45:08 -07:00
_early_recovery.py	fix(update): test runs never mutate the live checkout — pytest-guard the marker and repair paths	2026-07-29 21:30:53 -07:00
_parser.py	feat(kanban): let a task pin its own thinking depth	2026-08-01 16:09:56 -05:00
_scan_venv_blockers.py	fix(desktop): use the canonical gateway matcher for the preflight exemption	2026-07-31 22:34:28 -07:00
_subprocess_compat.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
active_sessions.py	fix(sessions): claim the cap slot on first turn, not on open	2026-07-28 12:11:52 -05:00
agent_import.py	refactor: extract atomic_write_text to utils.py; fix write-failure error handling	2026-07-29 16:49:07 +05:30
approval_mode.py	…
approvals_suggest.py	…
auth.py	fix(auth): a transient read failure is not corruption	2026-07-31 22:34:52 -07:00
auth_commands.py	…
azure_detect.py	…
backup.py	…
bang_shell.py	feat(cli): ! shell mode — run a command without spending a model turn	2026-07-31 21:21:20 -07:00
banner.py	fix(cli): route keyless first run into provider onboarding instead of a broken chat	2026-08-01 15:34:16 -07:00
blueprint_cmd.py	…
browser_connect.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
build_info.py	…
bundles.py	…
callbacks.py	…
checkpoints.py	…
claw.py	…
cli_agent_setup_mixin.py	fix(cli): route keyless first run into provider onboarding instead of a broken chat	2026-08-01 15:34:16 -07:00
cli_billing_mixin.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
cli_commands_mixin.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
cli_output.py	…
clipboard.py	fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH	2026-07-29 08:42:16 -07:00
codex_models.py	…
codex_runtime_plugin_migration.py	…
codex_runtime_switch.py	…
colors.py	…
commands.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
completion.py	…
config.py	fix(terminal): honor explicit config keys over stale env	2026-08-01 15:03:42 +05:30
config_defaults.py	feat(desktop): add configurable terminal font family (terminal.font_family in config.yaml)	2026-08-01 14:30:08 -07:00
config_migrations.py	refactor: config auto-migration support floor at v12 + deprecated shim retirement	2026-07-29 16:44:31 -07:00
console_engine.py	fix(sessions): keep kanban worker runs out of the session lists	2026-07-31 13:53:04 -05:00
container_boot.py	fix(install): support non-pid-1 container entrypoints	2026-08-01 10:52:34 -07:00
context_switch_guard.py	…
copilot_auth.py	fix(model-picker): stop Copilot token-exchange retry backoff from stalling /model open	2026-08-01 14:29:04 -07:00
credential_lifecycle.py	…
cron.py	feat(cron): user-owned model pins + cron.model fleet default	2026-07-28 11:52:47 -07:00
curator.py	…
curses_ui.py	…
dashboard_procs.py	refactor: extract dashboard process-hygiene helpers to dashboard_procs.py	2026-07-29 10:59:54 -07:00
dashboard_register.py	…
debug.py	…
default_soul.py	…
dep_ensure.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
diagnostics_upload.py	…
dingtalk_auth.py	…
doctor.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
dump.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
env_loader.py	perf(config): one raw config.yaml parse per process instead of 3-4	2026-07-29 10:32:25 -07:00
fallback_cmd.py	…
fallback_config.py	fix(auth): resolve fallback api keys through secret_scope, not raw env	2026-07-31 22:35:26 -07:00
focus_view.py	…
gateway.py	fix(update): let callers pass the platform verdict to the venv helpers	2026-08-01 16:45:00 +05:30
gateway_enroll.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
gateway_windows.py	…
goals.py	…
gui_uninstall.py	…
hooks.py	…
init_command.py	…
input_sanitize.py	…
inventory.py	…
journey.py	…
kanban.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
kanban_db.py	feat(kanban): let a task pin its own thinking depth	2026-08-01 16:09:56 -05:00
kanban_decompose.py	…
kanban_diagnostics.py	…
kanban_specify.py	…
kanban_swarm.py	…
lifecycle.py	…
logs.py	…
main.py	Merge pull request #76417 from NousResearch/bb/kanban-model-picker	2026-08-01 16:55:01 -05:00
managed_scope.py	…
managed_uv.py	fix(update): let callers pass the platform verdict to the venv helpers	2026-08-01 16:45:00 +05:30
mcp_catalog.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
mcp_config.py	…
mcp_picker.py	…
mcp_security.py	…
mcp_startup.py	fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions	2026-08-01 12:27:31 +05:30
memory_oauth.py	…
memory_setup.py	fix: route memory-provider dep installs through lazy_deps durable target	2026-07-28 22:40:33 -07:00
middleware.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
migrate.py	…
moa_cmd.py	…
moa_config.py	…
model_catalog.py	perf(model-picker): serve stale model caches instantly, refresh in background	2026-08-01 14:52:18 -07:00
model_cost_guard.py	…
model_normalize.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
model_search.py	…
model_setup_flows.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
model_switch.py	fix(gateway): offload /model context-length resolution off the event loop	2026-07-31 22:39:34 -07:00
models.py	perf(model-picker): serve stale model caches instantly, refresh in background	2026-08-01 14:52:18 -07:00
nous_account.py	…
nous_auth_keepalive.py	…
nous_billing.py	refactor: single shared Retry-After parser	2026-07-29 10:13:50 -07:00
nous_subscription.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
npm_engine.py	fix(npm): self-upgrade a managed npm when engines.npm rejects it	2026-07-31 13:42:04 -04:00
onepassword_secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
oneshot.py	fix(mcp): ensure MCP discovery completes before agent build in non-interactive sessions	2026-08-01 12:27:31 +05:30
pairing.py	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
partial_compress.py	…
pets.py	…
platforms.py	…
plugins.py	…
plugins_cmd.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
portal_cli.py	fix(auth): use refresh-free Nous status snapshot on read-only display paths	2026-07-28 22:42:19 -07:00
profile_describer.py	…
profile_distribution.py	fix(distribution): path-aware allowlist; preserve legacy copy-everything when omitted	2026-07-31 22:39:34 -07:00
profiles.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
projects_cmd.py	…
projects_db.py	…
prompt_size.py	…
prompt_stash.py	feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests	2026-07-31 21:21:16 -07:00
provider_catalog.py	…
providers.py	refactor(providers): delegate is_official_openai_host to base_url_host_matches	2026-07-31 21:31:56 -07:00
proxy_cli.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
psutil_android.py	…
pt_input_extras.py	fix(cli): route Cmd+Backspace and Cmd+ForwardDelete to the kill bindings	2026-07-30 03:39:26 -05:00
pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
pty_session.py	…
relaunch.py	…
route_identity.py	refactor: fold simplify-code review findings	2026-07-29 17:13:48 +05:30
runtime_provider.py	fix(cli): heal a bare custom provider to its config key, not its display name	2026-07-31 22:36:15 -07:00
secret_prompt.py	…
secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
security_advisories.py	…
security_audit.py	fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)	2026-08-01 10:47:20 -07:00
security_audit_startup.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
send_cmd.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
service_manager.py	…
session_export.py	…
session_export_html.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
session_export_md.py	…
session_filters.py	…
session_listing.py	fix(gateway): scope session lists before limiting	2026-07-31 22:36:55 -07:00
session_recap.py	…
session_recovery.py	…
sessions_cmd.py	refactor: hoist cmd_sessions out of main() into sessions_cmd.py	2026-07-29 10:59:54 -07:00
setup.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
setup_hidden_env.py	…
setup_whatsapp_cloud.py	…
skills_config.py	…
skills_hub.py	refactor: remove the claude-marketplace skill source (redundant Marketplace hub tab)	2026-07-28 23:16:27 -07:00
skin_cmd.py	…
skin_engine.py	…
slack_cli.py	fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)	2026-07-29 09:33:48 -07:00
slash_exec.py	refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)	2026-07-29 12:11:24 -07:00
sqlite_runtime.py	…
sqlite_safe_read.py	fix(cli): untrack sqlite connections only after close succeeds	2026-07-31 23:18:12 -07:00
sqlite_util.py	…
status.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
stdio.py	…
suggestions_cmd.py	…
telegram_managed_bot.py	…
timeouts.py	…
tips.py	…
tools_config.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
toolset_validation.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
uninstall.py	fix(install): expose hermes-agent and hermes-acp launchers on PATH	2026-07-31 22:39:11 -07:00
update_cmd.py	fix(update): detect EOL-only churn via numstat, not name-only	2026-08-01 14:52:45 -07:00
update_lock.py	fix(update): make the ancestor-PID lock handoff cross-platform via psutil	2026-07-31 22:28:46 -07:00
urllib_security.py	…
vercel_auth.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
voice.py	fix(voice): spoken barge-in works on every TTS playback path (CLI + gateway/desktop backends)	2026-07-29 08:24:00 -07:00
web_deps.py	refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)	2026-07-29 16:21:54 -07:00
web_git.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
web_models.py	fix(pairing): scope the approve/revoke endpoints to a profile	2026-07-29 18:43:50 -05:00
web_server.py	Merge remote-tracking branch 'origin/main' into fix-73914-atomic-cancel	2026-07-31 03:35:08 -03:00
webhook.py	…
win_pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
windows_ssh_runtime.py	fix(desktop): keep Windows SSH runtime at machine root	2026-08-01 14:30:16 -07:00
write_approval_commands.py	…
xai_retirement.py	…