MaxFreedomPollard 31032b4f51 fix(auth): a transient read failure is not corruption ... _load_auth_store() treated every exception from reading auth.json as corruption and returned an empty store. EMFILE under fd exhaustion, EACCES, EIO and a stalled network mount all reached that branch. This module does read-modify-write in roughly fifteen places, so the empty store was one _save_auth_store() away from erasing every stored credential. Separate OSError from parse failure: a file that exists but cannot be read now raises, naming the real cause and leaving the file on disk untouched. Only a genuine parse failure takes the preserve-and-start- empty branch, which is unchanged. The backup was also unreliable in exactly the conditions that triggered it: shutil.copy2 opens a file, so under EMFILE it failed too, its bare except swallowed that, and the log still said "Corrupt file preserved at ..." when nothing had been written. Track whether the copy landed and say so accurately.		2026-07-31 22:34:52 -07:00
..
dashboard_auth	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
observability	perf(config): stop deepcopying config on per-turn read-only paths	2026-07-29 11:33:41 -07:00
proxy	rip out brew + pip/PyPI wheel support (#68217)	2026-07-22 16:51:01 -04:00
subcommands	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
web_routers	refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)	2026-07-29 16:21:54 -07:00
__init__.py	chore: release v0.19.1 (2026.7.30)	2026-07-30 16:45:08 -07:00
_early_recovery.py	fix(update): test runs never mutate the live checkout — pytest-guard the marker and repair paths	2026-07-29 21:30:53 -07:00
_parser.py	feat: raise default tool-calling iteration limit from 90 to 500	2026-07-26 12:54:45 -07:00
_scan_venv_blockers.py	fix(desktop): use the canonical gateway matcher for the preflight exemption	2026-07-31 22:34:28 -07:00
_subprocess_compat.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
active_sessions.py	fix(sessions): claim the cap slot on first turn, not on open	2026-07-28 12:11:52 -05:00
agent_import.py	refactor: extract atomic_write_text to utils.py; fix write-failure error handling	2026-07-29 16:49:07 +05:30
approval_mode.py	feat(approvals): add cross-surface mode command	2026-07-26 21:13:03 -07:00
approvals_suggest.py	feat(approvals): hermes approvals suggest — mine approval history into allowlist proposals	2026-07-26 17:49:03 -07:00
auth.py	fix(auth): a transient read failure is not corruption	2026-07-31 22:34:52 -07:00
auth_commands.py	fix(auth): make xAI OAuth pools multi-account resilient	2026-07-17 11:37:25 +05:30
azure_detect.py	fix(security): secure Azure catalog probes	2026-07-11 12:28:55 +05:30
backup.py	fix(state): stop cancelling our own POSIX locks on live SQLite databases	2026-07-25 21:44:43 -07:00
bang_shell.py	feat(cli): ! shell mode — run a command without spending a model turn	2026-07-31 21:21:20 -07:00
banner.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
blueprint_cmd.py	refactor(cron): rebrand Cron Recipes -> Automation Blueprints	2026-06-11 10:49:47 -07:00
browser_connect.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
build_info.py	…
bundles.py	…
callbacks.py	feat(clarify): add multi-select (checkbox) support to clarify tool	2026-07-26 17:46:55 -07:00
checkpoints.py	fix(checkpoints): bind an empty orphan preview to an empty deletion allowlist	2026-07-24 16:01:06 -07:00
claw.py	fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)	2026-07-24 11:45:57 -07:00
cli_agent_setup_mixin.py	fix(tui,cli): render a resumed interrupted turn as an event	2026-07-28 03:54:25 -05:00
cli_billing_mixin.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
cli_commands_mixin.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
cli_output.py	…
clipboard.py	fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH	2026-07-29 08:42:16 -07:00
codex_models.py	fix(codex): send ChatGPT-Account-Id on /models probes	2026-07-21 05:27:13 -07:00
codex_runtime_plugin_migration.py	…
codex_runtime_switch.py	refactor(codex-runtime): tidy reapply-migration control flow	2026-07-01 23:51:54 +05:30
colors.py	…
commands.py	fix(cli): dispatch /indicator to set the busy-indicator style (#50618)	2026-07-31 22:33:16 -07:00
completion.py	…
config.py	docs(config): document --force destructive-replace semantics	2026-07-31 22:33:08 -07:00
config_defaults.py	feat(terminal): raise Docker sandbox /dev/shm to 1g by default (configurable)	2026-07-31 21:31:51 -07:00
config_migrations.py	refactor: config auto-migration support floor at v12 + deprecated shim retirement	2026-07-29 16:44:31 -07:00
console_engine.py	fix(sessions): keep kanban worker runs out of the session lists	2026-07-31 13:53:04 -05:00
container_boot.py	fix(gateway): detect and report unclean shutdowns via lifecycle ledger (NS-608)	2026-07-28 22:41:09 -07:00
context_switch_guard.py	fix(cli): honor custom_providers in preflight shrink warning	2026-07-22 21:17:21 -07:00
copilot_auth.py	fix(copilot): add explicit UTF-8 encoding to JWT store read/write	2026-07-31 22:31:09 -07:00
credential_lifecycle.py	fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)	2026-07-19 03:02:21 -07:00
cron.py	feat(cron): user-owned model pins + cron.model fleet default	2026-07-28 11:52:47 -07:00
curator.py	fix(curator): make the autonomous write policy consistent (#67140)	2026-07-25 19:27:17 -07:00
curses_ui.py	fix(models): match bare Kimi Coding k3 when searching kimi	2026-07-26 21:22:40 -07:00
dashboard_procs.py	refactor: extract dashboard process-hygiene helpers to dashboard_procs.py	2026-07-29 10:59:54 -07:00
dashboard_register.py	fix(cli): correct stale `hermes auth login nous` hints to `hermes auth add nous` (#53929)	2026-06-27 21:30:37 -07:00
debug.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
default_soul.py	fix(soul): installers seed the real default persona, upgrade legacy empty templates (#52246)	2026-06-24 18:56:26 -07:00
dep_ensure.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
diagnostics_upload.py	feat(debug): drop dead confirm step from --nous upload (stateless NAS)	2026-06-30 17:29:23 -07:00
dingtalk_auth.py	refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder	2026-07-07 04:09:35 -07:00
doctor.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
dump.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
env_loader.py	perf(config): one raw config.yaml parse per process instead of 3-4	2026-07-29 10:32:25 -07:00
fallback_cmd.py	refactor(fallback): single owner for backend identity and failure-scoped skips	2026-07-26 23:41:54 -07:00
fallback_config.py	fix(auth): honor per-entry key_env when resolving fallback providers	2026-07-16 07:19:36 -07:00
focus_view.py	feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator	2026-07-26 18:10:34 -07:00
gateway.py	fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths	2026-07-29 23:16:18 -07:00
gateway_enroll.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
gateway_windows.py	fix(update): migrate legacy pythonw Windows gateway launchers to the hidden-console design	2026-07-26 17:50:54 -07:00
goals.py	fix(goals): auto-pause goal loop on consecutive transport failures	2026-07-20 05:38:25 -07:00
gui_uninstall.py	feat: uninstall the Chat GUI without removing the agent (CLI + desktop UI) (#40355)	2026-06-06 18:22:38 -07:00
hooks.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
init_command.py	feat(cli): /init — generate or update AGENTS.md from a project scan	2026-07-26 17:46:29 -07:00
input_sanitize.py	fix(input): strip bracketed-paste leaks before prompt persistence (#62557)	2026-07-15 07:39:42 -07:00
inventory.py	feat(picker): derive a newest-per-lab featured shortlist from models.dev	2026-07-28 03:52:33 -05:00
journey.py	fix(cli): render /journey color instead of leaking raw ANSI	2026-07-01 16:25:48 -05:00
kanban.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
kanban_db.py	fix(kanban): deliver notifications from non-dispatch gateways	2026-07-31 21:52:11 -07:00
kanban_decompose.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
kanban_diagnostics.py	fix(kanban): clear failure/crash diagnostics while a retry is in flight	2026-07-09 16:13:59 -05:00
kanban_specify.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
kanban_swarm.py	refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)	2026-06-21 17:06:48 -07:00
lifecycle.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
logs.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
main.py	fix(update): stop gateway holders the guard finds after the pause	2026-07-31 22:34:28 -07:00
managed_scope.py	fix(managed-scope): honor managed scope in all standalone config loaders	2026-06-19 07:46:33 -07:00
managed_uv.py	fix(cli): sweep aged venv.stale.runtime-* backups on hermes update	2026-07-29 18:15:54 -07:00
mcp_catalog.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
mcp_config.py	fix(mcp): make Figma remote OAuth work via DCR allowlist defaults	2026-07-28 00:53:16 -05:00
mcp_picker.py	…
mcp_security.py	fix(security): close hermes-0day MCP-persistence attack surface	2026-06-21 19:05:27 -07:00
mcp_startup.py	fix(mcp): propagate profile HERMES_HOME override into shared discovery owner; restore stdio startup + WSTransport tests	2026-07-26 14:14:03 -07:00
memory_oauth.py	feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)	2026-06-22 19:16:47 -05:00
memory_setup.py	fix: route memory-provider dep installs through lazy_deps durable target	2026-07-28 22:40:33 -07:00
middleware.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
migrate.py	…
moa_cmd.py	feat(moa): add reference model toggles	2026-07-23 18:11:57 -07:00
moa_config.py	feat(moa): default advisor fanout to user_turn — the cheapest cadence	2026-07-23 21:07:18 -07:00
model_catalog.py	feat(models): catalog-labeled silent default — GLM-5.2 marked "default": true in the model catalog	2026-07-15 00:10:31 -07:00
model_cost_guard.py	fix(model): require confirmation for expensive model selections	2026-06-10 00:24:06 -07:00
model_normalize.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
model_search.py	fix(picker): fold live bare k3 wire id into curated kimi-k3 row	2026-07-26 21:22:40 -07:00
model_setup_flows.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
model_switch.py	fix(cli): stabilize custom provider identities	2026-07-31 17:26:42 +05:30
models.py	fix(models): honor model.base_url in OpenAI discovery, cache identity, and listing authority	2026-07-31 21:31:56 -07:00
nous_account.py	feat(billing): /credits command — balance + portal top-up handoff (#44776)	2026-06-12 08:51:10 +00:00
nous_auth_keepalive.py	fix Nous auth refresh for idle agents	2026-06-21 22:43:48 -07:00
nous_billing.py	refactor: single shared Retry-After parser	2026-07-29 10:13:50 -07:00
nous_subscription.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
npm_engine.py	fix(npm): self-upgrade a managed npm when engines.npm rejects it	2026-07-31 13:42:04 -04:00
onepassword_secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
oneshot.py	feat(clarify): add multi-select (checkbox) support to clarify tool	2026-07-26 17:46:55 -07:00
pairing.py	fix(pairing): keep GUI approvals off the code brute-force lockout	2026-07-29 17:51:40 -05:00
partial_compress.py	feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)	2026-07-02 05:10:31 -07:00
pets.py	feat(pets): generation RPCs, non-blocking gallery + gateway plumbing	2026-06-24 13:48:38 -05:00
platforms.py	…
plugins.py	Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"	2026-07-27 21:10:51 -07:00
plugins_cmd.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
portal_cli.py	fix(auth): use refresh-free Nous status snapshot on read-only display paths	2026-07-28 22:42:19 -07:00
profile_describer.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
profile_distribution.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
profiles.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
projects_cmd.py	feat(projects): add per-profile project store	2026-06-25 16:40:26 -05:00
projects_db.py	feat(desktop): configure repository discovery (supersedes #67630) (#68642)	2026-07-21 10:09:31 -04:00
prompt_size.py	fix(prompt-size): include names-only skills in breakdown	2026-07-26 18:06:21 -07:00
prompt_stash.py	feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests	2026-07-31 21:21:16 -07:00
provider_catalog.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
providers.py	refactor(providers): delegate is_official_openai_host to base_url_host_matches	2026-07-31 21:31:56 -07:00
proxy_cli.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
psutil_android.py	…
pt_input_extras.py	fix(cli): route Cmd+Backspace and Cmd+ForwardDelete to the kill bindings	2026-07-30 03:39:26 -05:00
pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
pty_session.py	feat(pty): periodic reaper wired into dashboard lifespan	2026-07-07 15:15:37 -07:00
relaunch.py	revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)	2026-06-27 15:59:00 -07:00
route_identity.py	refactor: fold simplify-code review findings	2026-07-29 17:13:48 +05:30
runtime_provider.py	fix(runtime): fall back to the provider's declared transport, not chat_completions	2026-07-31 21:31:56 -07:00
secret_prompt.py	feat(memory): improve OpenViking setup UX	2026-06-17 01:04:26 +08:00
secrets_cli.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
security_advisories.py	…
security_audit.py	…
security_audit_startup.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
send_cmd.py	refactor: canonical config loaders for behavioral reads + guarded raw-read primitive (kills the managed-scope/env-expansion drift class)	2026-07-29 10:53:29 -07:00
service_manager.py	fix(hermes_cli): drop privileges before clearing s6-log lock	2026-07-27 19:19:01 +05:30
session_export.py	feat: add prompt-only session export	2026-07-07 13:29:58 -07:00
session_export_html.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
session_export_md.py	feat(sessions): full prune-filter set + --redact on sessions export	2026-07-07 12:36:41 -07:00
session_filters.py	fix(sessions): preserve recently active sessions during pruning	2026-07-26 19:30:21 -07:00
session_listing.py	feat(gateway): add /sessions search <query> (#57685)	2026-07-03 13:44:00 -07:00
session_recap.py	fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)	2026-07-17 04:53:38 -07:00
session_recovery.py	fix(sessions): verify fully reconstructed recovery	2026-07-26 23:34:29 -07:00
sessions_cmd.py	refactor: hoist cmd_sessions out of main() into sessions_cmd.py	2026-07-29 10:59:54 -07:00
setup.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
setup_hidden_env.py	fix(setup): stop asking about self-configuring platform knobs	2026-07-26 08:43:24 -07:00
setup_whatsapp_cloud.py	fix(whatsapp-cloud): review follow-ups for #43921	2026-06-11 07:51:01 -07:00
skills_config.py	fix(cli): normalize malformed skills config in get_disabled_skills (#61797)	2026-07-09 19:57:54 -07:00
skills_hub.py	refactor: remove the claude-marketplace skill source (redundant Marketplace hub tab)	2026-07-28 23:16:27 -07:00
skin_cmd.py	feat(themes): `hermes skin set` — deterministic one-color tweak, bg untouched	2026-07-21 21:00:43 -05:00
skin_engine.py	feat(themes): dedicated code-syntax palette keys	2026-07-21 21:00:43 -05:00
slack_cli.py	fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)	2026-07-29 09:33:48 -07:00
slash_exec.py	refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)	2026-07-29 12:11:24 -07:00
sqlite_runtime.py	fix(runtime): repair vulnerable managed SQLite builds (E-949)	2026-07-24 16:00:03 -07:00
sqlite_safe_read.py	fix(sessions): close the snapshot check/use race and guard damaged state_meta	2026-07-25 23:05:30 -07:00
sqlite_util.py	feat(projects): add per-profile project store	2026-06-25 16:40:26 -05:00
status.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
stdio.py	…
suggestions_cmd.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
telegram_managed_bot.py	Add CLI Telegram QR onboarding	2026-06-05 03:20:10 -07:00
timeouts.py	…
tips.py	feat: raise default tool-calling iteration limit from 90 to 500	2026-07-26 12:54:45 -07:00
tools_config.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
toolset_validation.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
uninstall.py	fix(install): install a hermes-acp launcher onto PATH	2026-07-28 11:53:12 -07:00
update_cmd.py	fix(update): snapshot venv launchers before the gateway drain	2026-07-31 22:34:28 -07:00
update_lock.py	fix(update): make the ancestor-PID lock handoff cross-platform via psutil	2026-07-31 22:28:46 -07:00
urllib_security.py	fix(security): order sanitizer after installed hooks	2026-07-11 12:28:55 +05:30
vercel_auth.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
voice.py	fix(voice): spoken barge-in works on every TTS playback path (CLI + gateway/desktop backends)	2026-07-29 08:24:00 -07:00
web_deps.py	refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)	2026-07-29 16:21:54 -07:00
web_git.py	fix(git): never block internal git calls on credential prompts	2026-07-28 17:34:21 -07:00
web_models.py	fix(pairing): scope the approve/revoke endpoints to a profile	2026-07-29 18:43:50 -05:00
web_server.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
webhook.py	fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests	2026-07-24 11:45:57 -07:00
win_pty_bridge.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
windows_ssh_runtime.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
write_approval_commands.py	refactor(memory,skills): replace tri-state write_mode with boolean write_approval (default off) (#43354)	2026-06-09 23:21:14 -07:00
xai_retirement.py	fix(config): guard xai migration writer + drop gratuitous annotation	2026-07-05 23:00:34 +05:30