Teknium 27a2c4f36f fix(mcp): stop reporting false OAuth success when no token was obtained (#34807) ... * docs(code-execution): document HERMES_* env narrowing + passthrough workaround The execute_code sandbox-child env scrub (108397726, #27303) deliberately dropped the broad HERMES_ prefix passthrough, keeping only an operational 4-var allowlist (HERMES_HOME/PROFILE/CONFIG/ENV). A script that relied on a non-secret HERMES_* var (HERMES_BASE_URL, HERMES_KANBAN_DB, HERMES_*_WEBHOOK, or a plugin-defined one) now sees it unset in the child. Document the behavior change and the two recovery routes (terminal.env_passthrough in config.yaml, or required_environment_variables in skill frontmatter), plus the debug log line that surfaces the drop for diagnosis. * fix(mcp): stop reporting false OAuth success when no token was obtained `hermes mcp login` reported "Authenticated — N tool(s) available" for servers that serve tools/list without auth (e.g. Google's official Drive MCP server) even when the OAuth flow never completed — dynamic client registration 400'd because the provider doesn't support RFC 7591, so no token was ever acquired. Every real tool call then hung until timeout with no indication of why. Login now verifies a token actually landed on disk after the probe. When it didn't, it warns that authentication didn't complete and shows the config needed to supply a pre-registered client_id/client_secret (the existing, already-supported workaround for DCR-less providers). Adds a docs pitfall for Google Drive / Atlassian-style providers. Fixes #34775		2026-05-29 12:32:19 -07:00
..
dashboard_auth	fix(dashboard-auth): share /api/* public allowlist between legacy and OAuth gates	2026-05-29 12:17:12 +10:00
proxy	chore: remove dead code — 28 unused functions/classes across 16 files	2026-05-29 04:22:27 -07:00
__init__.py	chore: release v0.15.1 (2026.5.29) (#34222)	2026-05-28 18:11:49 -07:00
_parser.py	Fix CLI verbose tool progress config fallback	2026-05-23 21:03:51 -07:00
_subprocess_compat.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
auth.py	refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params	2026-05-29 02:24:48 -07:00
auth_commands.py	refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params	2026-05-29 02:24:48 -07:00
azure_detect.py	feat(azure-foundry): add Microsoft Entra ID auth	2026-05-18 10:14:38 -07:00
backup.py	fix: limit pre-update state snapshots	2026-05-28 02:45:25 -07:00
banner.py	chore: remove dead code — 28 unused functions/classes across 16 files	2026-05-29 04:22:27 -07:00
browser_connect.py	feat: auto-launch Chromium-family browser for CDP	2026-05-19 22:34:05 -07:00
build_info.py	fix(docker): bake build-time git SHA into the image	2026-05-28 15:14:05 +10:00
bundles.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
callbacks.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
checkpoints.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
claw.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
cli_output.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
clipboard.py	fix(clipboard): only read PNG signature bytes, not entire file	2026-05-13 22:54:21 -07:00
codex_models.py	fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424)	2026-05-27 12:16:15 -07:00
codex_runtime_plugin_migration.py	fix(codex-runtime): de-dup [plugins.X] tables and stop leaking HERMES_HOME into config.toml	2026-05-15 02:31:30 -07:00
codex_runtime_switch.py	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
colors.py
commands.py	fix(model picker): unify /model and hermes model lists, add disk cache (#33867)	2026-05-28 11:33:16 -07:00
completion.py	test(cli): strengthen zsh completion regression coverage	2026-05-13 09:34:15 -07:00
config.py	feat: embedder environment-hint hook for the system prompt (#34574)	2026-05-29 04:10:05 -07:00
container_boot.py	fix(docker): make s6 lifecycle work for the unprivileged hermes user	2026-05-25 12:23:23 +10:00
copilot_auth.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
cron.py	feat: add cron job profile support	2026-05-18 17:39:50 +00:00
curator.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
curses_ui.py	fix(cli): clamp curses color 8 for 8-color terminals (Docker)	2026-05-21 23:40:58 -07:00
debug.py	style: restore PEP8 blank-line separation after dead-code removal	2026-05-29 04:22:27 -07:00
default_soul.py
dep_ensure.py	feat(dep_ensure): complete Windows bootstrap — dep_ensure + install.ps1 + detection (#27845)	2026-05-18 16:34:24 +05:30
dingtalk_auth.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
doctor.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
dump.py	fix(docker): bake build-time git SHA into the image	2026-05-28 15:14:05 +10:00
env_loader.py	fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)	2026-05-25 15:18:55 -07:00
fallback_cmd.py	fix(fallback): merge fallback_providers with legacy fallback_model configurations	2026-05-23 05:24:57 -07:00
fallback_config.py	fix(fallback): merge fallback_providers with legacy fallback_model configurations	2026-05-23 05:24:57 -07:00
gateway.py	style: restore PEP8 blank-line separation after dead-code removal	2026-05-29 04:22:27 -07:00
gateway_windows.py	fix(gateway): drain on Windows hermes gateway stop so sessions survive restart (#33798)	2026-05-28 03:25:32 -07:00
goals.py	feat: inject current time into goal judge prompt	2026-05-16 23:05:27 -07:00
hooks.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
inventory.py	refactor(inventory): extract shared ConfigContext + build_models_payload	2026-05-13 22:31:11 -07:00
kanban.py	fix(kanban): add --reason flag to unblock for symmetry with block (#30897)	2026-05-28 23:41:44 -07:00
kanban_db.py	style: restore PEP8 blank-line separation after dead-code removal	2026-05-29 04:22:27 -07:00
kanban_decompose.py	fix(kanban): close kanban.db FD after every connect() in long-lived processes	2026-05-27 22:07:49 -07:00
kanban_diagnostics.py	chore: remove dead code — 28 unused functions/classes across 16 files	2026-05-29 04:22:27 -07:00
kanban_specify.py	fix(kanban): close kanban.db FD after every connect() in long-lived processes	2026-05-27 22:07:49 -07:00
kanban_swarm.py	fix(kanban): CLI dispatch honors max_in_progress/max_spawn from config; swap missing 'avoid-ai-writing' skill for bundled humanizer (#33488, #29415) (#34337)	2026-05-28 21:00:46 -07:00
logs.py	feat: component-separated logging with session context and filtering (#7991)	2026-04-11 17:23:36 -07:00
main.py	refactor(state): return FTS index count from vacuum()	2026-05-29 05:09:56 -07:00
mcp_catalog.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
mcp_config.py	fix(mcp): stop reporting false OAuth success when no token was obtained (#34807)	2026-05-29 12:32:19 -07:00
mcp_picker.py	feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)	2026-05-26 12:48:14 -07:00
memory_setup.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
migrate.py	feat(cli): hermes migrate xai [--apply] [--no-backup]	2026-05-20 09:18:23 -07:00
model_catalog.py	fix(model-catalog): fall through to raw.github when Vercel 403s; swap step-3.5-flash for step-3.7-flash on OpenRouter+Nous	2026-05-29 00:25:36 -07:00
model_normalize.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
model_switch.py	chore: remove dead code — 28 unused functions/classes across 16 files	2026-05-29 04:22:27 -07:00
models.py	chore(models): gemini-3.5-flash replaces gemini-3-flash-preview in OpenRouter + Nous lists (#34581)	2026-05-29 04:27:58 -07:00
nous_account.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
nous_subscription.py	feat(video_gen): wire Nous subscription override into hermes tools UX	2026-05-29 22:26:24 +05:30
oneshot.py	fix(provider): make config.yaml model.provider the single source of truth (#31222)	2026-05-23 18:18:41 -07:00
pairing.py	fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)	2026-05-07 07:18:21 -07:00
platforms.py	feat: complete plugin platform parity — all 12 integration points	2026-04-29 21:56:51 -07:00
plugins.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
plugins_cmd.py	fix: improve plugins list usability	2026-05-29 00:59:42 -07:00
portal_cli.py	style: restore PEP8 blank-line separation after dead-code removal	2026-05-29 04:22:27 -07:00
profile_describer.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
profile_distribution.py	fix(profile): reject symlinks in distributions (#25292)	2026-05-25 05:07:58 -07:00
profiles.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
providers.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
psutil_android.py	fix(android): reject unsafe tar members in psutil compatibility installer	2026-05-28 02:36:09 -07:00
pt_input_extras.py	fix(cli): ignore terminal focus reports (salvage of #16780)	2026-05-29 00:31:44 -07:00
pty_bridge.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
relaunch.py	fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch	2026-05-08 14:27:40 -07:00
runtime_provider.py	refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params	2026-05-29 02:24:48 -07:00
secret_prompt.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
secrets_cli.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
security_advisories.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
security_audit.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
send_cmd.py	fix(review): address Copilot follow-up on sanitizer and file decode errors	2026-05-16 23:00:58 -05:00
service_manager.py	fix(docker): align HOME for dashboard and s6 gateway services (#33481)	2026-05-28 13:42:27 +10:00
session_recap.py	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
setup.py	feat(video_gen): wire Nous subscription override into hermes tools UX	2026-05-29 22:26:24 +05:30
skills_config.py	refactor(config): migrate remaining 33 cfg_get call sites (#17311)	2026-04-29 04:03:03 -07:00
skills_hub.py	fix(skills-hub): stop ellipsis-truncating the Identifier column (#33810)	2026-05-28 04:53:13 -07:00
skin_engine.py	fix(tui): improve charizard completion menu contrast	2026-05-18 20:05:23 -07:00
slack_cli.py	fix(slack): enable writable app home DMs in manifest	2026-05-08 17:01:12 -07:00
status.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
stdio.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
timeouts.py	perf(agent-loop): cut 47% of per-conversation function calls via 3 targeted hot-path optimizations (#28866)	2026-05-19 14:25:10 -07:00
tips.py	docs(auth): replace stale 'hermes login' references with 'hermes auth add'	2026-05-26 15:41:11 -07:00
tools_config.py	feat(video_gen): wire Nous subscription override into hermes tools UX	2026-05-29 22:26:24 +05:30
uninstall.py	docs(windows): avoid piping installer directly into iex	2026-05-18 20:05:47 -07:00
voice.py	fix(tui): restore voice push-to-talk parity (#20897)	2026-05-06 15:49:59 -07:00
web_server.py	refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params	2026-05-29 02:24:48 -07:00
webhook.py	fix(state): restrict sensitive store file permissions	2026-05-24 04:55:18 -07:00
xai_retirement.py	fix(xai): align migrate retirement map with docs	2026-05-20 09:18:23 -07:00