Teknium 09a5cd8084 fix(auth): sync manual:device_code Codex pool entries on re-auth (#33744) ...

#33164 made _save_codex_tokens sync the singleton-seeded `device_code`
pool entry on Codex OAuth re-auth. That fixed the #33000 path but missed
`manual:device_code` entries created by `hermes auth add openai-codex`
(the recommended workaround for users who hit #33000 before #33164
landed).

Every subsequent re-auth would refresh the device_code entry but leave
the manual:device_code entry holding the consumed refresh token plus
stale last_error_* markers — immediately recreating the 401
token_invalidated symptom on the next request, exactly as reported in
#33538.

Extend the refreshable source set to include `manual:device_code`.
Completing the device-code OAuth flow proves the user owns the ChatGPT
account, so it is safe to refresh every device-code-backed entry. Keep
`manual:api_key` and other non-device-code manual sources untouched —
those represent independent credentials.

Closes #33538.

2026-05-28 01:33:10 -07:00

..

dashboard_auth

feat(dashboard-auth): HERMES_DASHBOARD_PUBLIC_URL / dashboard.public_url override

2026-05-27 02:12:27 -07:00

proxy

docs(auth): replace stale 'hermes login' references with 'hermes auth add'

2026-05-26 15:41:11 -07:00

__init__.py

chore: release v0.14.0 (2026.5.16) (#26862)

2026-05-16 02:58:57 -07:00

_parser.py

Fix CLI verbose tool progress config fallback

2026-05-23 21:03:51 -07:00

_subprocess_compat.py

feat(windows): close remaining POSIX-only landmines — TUI crash, kanban waitpid, AF_UNIX sandbox, /bin/bash, npm .cmd shims, cwd tracking, detach flags

2026-05-08 14:27:40 -07:00

auth_commands.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

auth.py

fix(auth): sync manual:device_code Codex pool entries on re-auth (#33744)

2026-05-28 01:33:10 -07:00

azure_detect.py

feat(azure-foundry): add Microsoft Entra ID auth

2026-05-18 10:14:38 -07:00

backup.py

fix(backup): skip symlinked files in zip archives (#25289)

2026-05-25 05:07:52 -07:00

banner.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

browser_connect.py

feat: auto-launch Chromium-family browser for CDP

2026-05-19 22:34:05 -07:00

build_info.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

bundles.py

feat(skills): add skill bundles — alias /<name> loads multiple skills (#28373)

2026-05-18 21:38:05 -07:00

callbacks.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

checkpoints.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

claw.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cli_output.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

clipboard.py

fix(clipboard): only read PNG signature bytes, not entire file

2026-05-13 22:54:21 -07:00

codex_models.py

fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424)

2026-05-27 12:16:15 -07:00

codex_runtime_plugin_migration.py

fix(codex-runtime): de-dup [plugins.X] tables and stop leaking HERMES_HOME into config.toml

2026-05-15 02:31:30 -07:00

codex_runtime_switch.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

colors.py

feat: respect NO_COLOR env var and TERM=dumb (#4079)

2026-03-30 17:07:21 -07:00

commands.py

fix: ignore Telegram start pings

2026-05-27 02:41:24 -07:00

completion.py

test(cli): strengthen zsh completion regression coverage

2026-05-13 09:34:15 -07:00

config.py

fix(security): require API_SERVER_KEY before dispatching API server work

2026-05-28 00:25:08 -07:00

container_boot.py

fix(docker): make s6 lifecycle work for the unprivileged hermes user

2026-05-25 12:23:23 +10:00

copilot_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cron.py

feat: add cron job profile support

2026-05-18 17:39:50 +00:00

curator.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

curses_ui.py

fix(cli): clamp curses color 8 for 8-color terminals (Docker)

2026-05-21 23:40:58 -07:00

debug.py

fix(debug): redact BlueBubbles webhook secrets

2026-05-24 15:43:48 -07:00

default_soul.py

fix: reset default SOUL.md to baseline identity text (#3159)

2026-03-26 01:34:27 -07:00

dep_ensure.py

feat(dep_ensure): complete Windows bootstrap — dep_ensure + install.ps1 + detection (#27845)

2026-05-18 16:34:24 +05:30

dingtalk_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

doctor.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

dump.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

env_loader.py

fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)

2026-05-25 15:18:55 -07:00

fallback_cmd.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

fallback_config.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

gateway_windows.py

fix(gateway-windows): atomic write for .cmd and startup launcher scripts

2026-05-23 02:30:41 -07:00

gateway.py

feat(docker): auto-redirect gateway run to supervised mode inside s6 image

2026-05-28 12:42:13 +10:00

goals.py

feat: inject current time into goal judge prompt

2026-05-16 23:05:27 -07:00

hooks.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

inventory.py

refactor(inventory): extract shared ConfigContext + build_models_payload

2026-05-13 22:31:11 -07:00

kanban_db.py

test(auth): update entitlement CI expectations

2026-05-28 00:19:31 -07:00

kanban_decompose.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_diagnostics.py

fix(kanban): honor severity thresholds in diagnostics

2026-05-18 20:47:01 -07:00

kanban_specify.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_swarm.py

feat(cli): add kanban swarm topology helper

2026-05-18 21:10:12 -07:00

kanban.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

logs.py

feat: component-separated logging with session context and filtering (#7991)

2026-04-11 17:23:36 -07:00

main.py

feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.

2026-05-28 00:19:31 -07:00

mcp_catalog.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

mcp_config.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

mcp_picker.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

memory_setup.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

migrate.py

feat(cli): hermes migrate xai [--apply] [--no-backup]

2026-05-20 09:18:23 -07:00

model_catalog.py

codebase: add encoding='utf-8' to all bare open() calls (PLW1514)

2026-05-08 14:27:40 -07:00

model_normalize.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

model_switch.py

fix(model-switch): mark bare custom provider as current

2026-05-19 10:57:35 -07:00

models.py

feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.

2026-05-28 00:19:31 -07:00

nous_account.py

feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.

2026-05-28 00:19:31 -07:00

nous_subscription.py

fix(auth): refresh Nous entitlement in tool menus

2026-05-28 00:19:31 -07:00

oneshot.py

fix(provider): make config.yaml model.provider the single source of truth (#31222)

2026-05-23 18:18:41 -07:00

pairing.py

fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)

2026-05-07 07:18:21 -07:00

platforms.py

feat: complete plugin platform parity — all 12 integration points

2026-04-29 21:56:51 -07:00

plugins_cmd.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

plugins.py

feat(plugins): add register_dashboard_auth_provider hook on PluginContext

2026-05-27 02:12:27 -07:00

portal_cli.py

feat(portal): one-shot setup, status CLI, and Nous-included markers (#30860)

2026-05-23 02:39:09 -07:00

profile_describer.py

fix(skills): prune dependency/venv dirs from all skill scanners (#30042)

2026-05-21 14:18:02 -07:00

profile_distribution.py

fix(profile): reject symlinks in distributions (#25292)

2026-05-25 05:07:58 -07:00

profiles.py

fix(security): tighten .env file permissions to 0600 at all creation sites

2026-05-25 03:40:47 -07:00

providers.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

pt_input_extras.py

fix(cli): make Ctrl+Enter insert newline on WSL/SSH/Windows Terminal (#22777)

2026-05-09 12:48:14 -07:00

pty_bridge.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

relaunch.py

fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch

2026-05-08 14:27:40 -07:00

runtime_provider.py

fix(custom): pass custom provider extra body

2026-05-21 07:48:53 -07:00

secret_prompt.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

secrets_cli.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

security_advisories.py

feat(security): supply-chain advisory checker + lazy-install framework + tiered install fallback (#24220)

2026-05-12 01:02:25 -07:00

security_audit.py

feat(security): on-demand supply-chain audit via OSV.dev (#31460)

2026-05-24 15:15:16 -07:00

send_cmd.py

fix(review): address Copilot follow-up on sanitizer and file decode errors

2026-05-16 23:00:58 -05:00

service_manager.py

fix(docker): align HOME for dashboard and s6 gateway services (#33481)

2026-05-28 13:42:27 +10:00

session_recap.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

setup.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

skills_config.py

refactor(config): migrate remaining 33 cfg_get call sites (#17311)

2026-04-29 04:03:03 -07:00

skills_hub.py

fix: backfill official optional skill provenance

2026-05-27 13:39:58 -07:00

skin_engine.py

fix(tui): improve charizard completion menu contrast

2026-05-18 20:05:23 -07:00

slack_cli.py

fix(slack): enable writable app home DMs in manifest

2026-05-08 17:01:12 -07:00

status.py

feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.

2026-05-28 00:19:31 -07:00

stdio.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

timeouts.py

perf(agent-loop): cut 47% of per-conversation function calls via 3 targeted hot-path optimizations (#28866)

2026-05-19 14:25:10 -07:00

tips.py

docs(auth): replace stale 'hermes login' references with 'hermes auth add'

2026-05-26 15:41:11 -07:00

tools_config.py

fix: expose context engine tools with saved toolsets

2026-05-28 00:28:42 -07:00

uninstall.py

docs(windows): avoid piping installer directly into iex

2026-05-18 20:05:47 -07:00

voice.py

fix(tui): restore voice push-to-talk parity (#20897)

2026-05-06 15:49:59 -07:00

web_server.py

feat(dashboard-auth): honour X-Forwarded-Prefix + __Host-/__Secure- cookies

2026-05-27 02:12:27 -07:00

webhook.py

fix(state): restrict sensitive store file permissions

2026-05-24 04:55:18 -07:00

xai_retirement.py

fix(xai): align migrate retirement map with docs

2026-05-20 09:18:23 -07:00