Teknium 042eb930e2 fix(security): close TOCTOU window in hermes_cli/auth.py credential writers (#21194) ... `_save_auth_store`, `_save_qwen_cli_tokens`, and `_write_shared_nous_state` all created the temp file via `Path.open('w')` / `Path.write_text` and only tightened permissions to 0o600 afterward. Between create and chmod the file existed at the process umask (commonly 0o644 = world-readable on multi-user hosts), briefly exposing OAuth access/refresh tokens for Nous, Codex, Copilot, Claude, Qwen, Gemini, and every other native OAuth provider that flows through auth.json. Switch all three to `os.open(O_WRONLY|O_CREAT|O_EXCL, 0o600)` + `os.fdopen` + `fsync` so the file is atomic at 0o600 on creation. Tighten each parent directory (`~/.hermes/`, Qwen auth dir, Nous shared auth dir) to 0o700 so siblings can't traverse to the creds. `_save_auth_store` also gains a per-process random temp suffix to match `agent/google_oauth.py` (#19673) and `tools/mcp_oauth.py` (#21148). Adds `tests/hermes_cli/test_auth_toctou_file_modes.py` asserting final file mode 0o600 and parent dir mode 0o700 across all three writers, plus an explicit `os.open(flags, mode)` check on the main auth.json writer that would fail if anyone reintroduces the `Path.open('w')` pattern. POSIX-only (mode bits skipped on Windows).		2026-05-07 05:12:05 -07:00
..
acp	fix(acp): preserve assistant reasoning metadata in session persistence	2026-05-05 10:18:28 -07:00
acp_adapter	fix(acp): run /steer as a regular prompt on idle sessions (#18258)	2026-04-30 22:45:14 -07:00
agent	test(skills): cover additional rescan paths in skill_commands cache (#14536)	2026-05-07 04:59:43 -07:00
cli	fix(cli): submit LF enter in thin PTYs (#20896)	2026-05-06 13:51:13 -07:00
cron	test(cron): update _isolate_tick_lock fixture for _get_lock_paths	2026-05-05 09:57:06 -07:00
e2e	fix(gateway): move quick-command dispatch before built-in handlers	2026-05-04 01:39:23 -07:00
environments/benchmarks	fix(security): consolidated security hardening — SSRF, timing attack, tar traversal, credential leakage (#5944)	2026-04-07 17:28:37 -07:00
fakes
gateway	test(weixin): update timeout assertion for asyncio.wait_for migration	2026-05-07 05:10:04 -07:00
hermes_cli	fix(security): close TOCTOU window in hermes_cli/auth.py credential writers (#21194)	2026-05-07 05:12:05 -07:00
hermes_state	fix(resume): redirect --resume to the descendant that actually holds the messages	2026-04-24 03:04:42 -07:00
honcho_plugin	feat(honcho): explain why when honcho_profile returns an empty card	2026-04-27 12:37:33 -07:00
integration	fix(discord): strip RTP padding before DAVE/Opus decode (#11267)	2026-04-16 16:50:15 -07:00
openviking_plugin	fix(openviking): pre-check fs/stat to route file URIs before hitting directory-only endpoints	2026-04-30 02:35:29 -07:00
plugins	fix(kanban): wire dependency selects	2026-05-05 17:26:15 -07:00
providers	feat(providers): make all 33 providers pluggable under plugins/model-providers/	2026-05-05 13:40:01 -07:00
run_agent	feat: provider modules — ProviderProfile ABC, 33 providers, fetch_models, transport single-path	2026-05-05 13:40:01 -07:00
skills	fix(google-workspace): restore required_credential_files in SKILL.md (#16452)	2026-05-04 12:43:14 -07:00
stress	feat(kanban): durable multi-profile collaboration board (#17805)	2026-04-30 13:36:47 -07:00
tools	feat: add Discord message deletion action	2026-05-07 05:11:09 -07:00
tui_gateway	fix(tui): close slash parity gaps with CLI (#20339)	2026-05-05 15:42:39 -05:00
website	docs(skills): explain restoring bundled skills	2026-05-05 13:46:20 -07:00
__init__.py
conftest.py	fix(ci): stabilize main test suite regressions (#17660)	2026-04-29 23:18:55 -07:00
run_interrupt_test.py
test_account_usage.py	feat(account-usage): add per-provider account limits module	2026-04-21 01:56:35 -07:00
test_atomic_replace_symlinks.py	refactor: consolidate symlink-safe atomic replace into shared helper	2026-04-28 04:58:22 -07:00
test_base_url_hostname.py	security(runtime_provider): close OLLAMA_API_KEY substring-leak sweep miss (#13522)	2026-04-21 06:06:16 -07:00
test_batch_runner_checkpoint.py	test: regression coverage for checkpoint dedup and inf/nan coercion	2026-04-24 14:32:21 -07:00
test_cli_file_drop.py	fix(tui): improve macOS paste and shortcut parity	2026-04-21 08:00:00 -07:00
test_cli_manual_compress.py	test(cli): regression test for manual /compress system_message	2026-04-28 05:21:49 -07:00
test_cli_skin_integration.py	fix(ci): stabilize main test suite regressions (#17660)	2026-04-29 23:18:55 -07:00
test_ctx_halving_fix.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_empty_model_fallback.py	fix: fall back to provider's default model when model config is empty (#8303)	2026-04-12 03:53:30 -07:00
test_evidence_store.py
test_get_tool_definitions_cache_isolation.py	fix(tools): isolate get_tool_definitions quiet_mode cache + dedup LCM injection (#17335)	2026-04-30 04:32:06 -07:00
test_hermes_constants.py	fix(gateway): harden Docker/container gateway pathway	2026-04-12 16:36:11 -07:00
test_hermes_home_profile_warning.py	fix(constants): warn once when get_hermes_home() falls back under an active profile (#18746)	2026-05-02 01:49:55 -07:00
test_hermes_logging.py	fix(logging): attach gateway log after cli init	2026-04-26 19:01:26 -07:00
test_hermes_state.py	fix(telegram): polish topic mode — CASCADE, General-topic handling, rename guard, debounce	2026-05-04 12:07:17 -07:00
test_honcho_client_config.py	feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)	2026-04-02 15:33:51 -07:00
test_install_sh_pythonpath_sanitization.py	fix: harden install.sh against inherited Python env leakage	2026-05-06 04:02:02 -07:00
test_install_sh_setup_wizard_tty_probe.py	fix(install): widen /dev/tty open-probe to sibling gates (#16746)	2026-04-28 06:45:55 -07:00
test_ipv4_preference.py	feat: add network.force_ipv4 config to fix IPv6 timeout issues (#8196)	2026-04-11 23:12:11 -07:00
test_lazy_session_regressions.py	fix: resolve lazy session creation regressions (#18370 fallout) (#20363)	2026-05-06 01:11:49 +05:30
test_mcp_serve.py	feat: add MCP server mode — hermes mcp serve (#3795)	2026-03-29 15:47:19 -07:00
test_mini_swe_runner.py	fix(kimi): omit temperature entirely for Kimi/Moonshot models (#13157)	2026-04-20 12:23:05 -07:00
test_minimax_model_validation.py	fix(models): validate MiniMax models against static catalog (#12611, #12460, #12399, #12547)	2026-04-19 22:44:47 -07:00
test_minimax_oauth.py	test(cli): cover minimax-oauth resolution, refresh, menu wiring	2026-04-29 09:53:42 -07:00
test_minisweagent_path.py
test_model_picker_scroll.py	fix: CLI/UX batch — ChatConsole errors, curses scroll, skin-aware banner, git state banner (#5974)	2026-04-07 17:59:42 -07:00
test_model_tools.py	fix(plugins): stop firing pre_tool_call hook twice per tool execution (#17611)	2026-04-29 12:43:39 -07:00
test_model_tools_async_bridge.py	fix(model_tools): cancel coroutine on timeout so worker thread exits + log full traceback	2026-04-29 05:00:40 -07:00
test_ollama_num_ctx.py	fix: provider/model resolution — salvage 4 PRs + MiniMax aux URL fix (#5983)	2026-04-07 22:23:28 -07:00
test_packaging_metadata.py	chore: prepare Hermes for Homebrew packaging (#4099)	2026-03-30 17:34:43 -07:00
test_plugin_skills.py	fix(skills): support category-qualified local skill names	2026-05-05 10:15:31 -07:00
test_project_metadata.py	build(deps): add qrcode to dingtalk + feishu extras (parity with messaging) (#11627)	2026-04-17 13:31:53 -07:00
test_retry_utils.py	feat(agent): add jittered retry backoff	2026-04-08 00:41:36 -07:00
test_sql_injection.py
test_subprocess_home_isolation.py	fix: per-profile subprocess HOME isolation (#4426) (#7357)	2026-04-10 13:37:45 -07:00
test_timezone.py	test: speed up slow tests (backoff + subprocess + IMDS network) (#11797)	2026-04-17 14:21:22 -07:00
test_toolset_distributions.py
test_toolsets.py	fix: merge plugin tools into builtin toolsets	2026-05-05 10:14:17 -07:00
test_trajectory_compressor.py	fix(kimi): omit temperature entirely for Kimi/Moonshot models (#13157)	2026-04-20 12:23:05 -07:00
test_trajectory_compressor_async.py	fix(kimi): omit temperature entirely for Kimi/Moonshot models (#13157)	2026-04-20 12:23:05 -07:00
test_transform_tool_result_hook.py	test: stop testing mutable data — convert change-detectors to invariants (#13363)	2026-04-20 23:20:33 -07:00
test_tui_gateway_server.py	fix(tui): restore voice push-to-talk parity (#20897)	2026-05-06 15:49:59 -07:00
test_utils_truthy_values.py	Gate tool-gateway behind an env var, so it's not in users' faces until we're ready. Even if users enable it, it'll be blocked server-side for now, until we unlock for non-admin users on tool-gateway.	2026-03-30 13:28:10 +09:00
test_yuanbao_integration.py	yuanbao platform (#16298)	2026-04-26 18:50:49 -07:00
test_yuanbao_markdown.py	yuanbao platform (#16298)	2026-04-26 18:50:49 -07:00
test_yuanbao_pipeline.py	yuanbao platform (#16298)	2026-04-26 18:50:49 -07:00
test_yuanbao_proto.py	yuanbao platform (#16298)	2026-04-26 18:50:49 -07:00