Teknium b0a52d74ac fix(mcp): resolve ${ENV} in discovery probe so header auth works (#38571) ...

`hermes mcp add --auth header` built `Authorization: Bearer ${MCP_X_API_KEY}`
and passed it straight to the discovery probe without interpolation, so the
probe sent the literal placeholder and auth-requiring servers (e.g. n8n)
returned 401. Runtime tool loading worked because `_load_mcp_config()`
interpolates, but the four CLI probe call sites (add/test/login/configure)
all used unresolved config.

Resolve `${ENV}` inside `_probe_single_server` via a new
`_resolve_mcp_server_config()` (load_hermes_dotenv + _interpolate_env_vars),
mirroring runtime loading. This covers all four call sites, not just add.

Also strip a leading `Bearer ` from pasted tokens before saving to
`MCP_*_API_KEY`, so a token pasted with the prefix doesn't produce
`Bearer Bearer <jwt>` (also a 401).

Reported with a precise root-cause analysis in #37792.

Co-authored-by: ThyFriendlyFox <116314616+ThyFriendlyFox@users.noreply.github.com>

2026-06-03 17:49:39 -07:00

..

dashboard_auth

test(dashboard): direct unit coverage for internal WS credential + docstring fix

2026-06-02 23:43:27 -07:00

proxy

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

__init__.py

chore: release v0.15.1 (2026.5.29) (#34222)

2026-05-28 18:11:49 -07:00

_parser.py

feat(cli): configurable default interface (cli vs tui)

2026-06-02 20:49:44 -05:00

_subprocess_compat.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

auth_commands.py

fix(auth): align Codex OAuth persistence paths (#37517)

2026-06-02 12:19:44 -05:00

auth.py

fix(auth): align Codex OAuth persistence paths (#37517)

2026-06-02 12:19:44 -05:00

azure_detect.py

feat(azure-foundry): add Microsoft Entra ID auth

2026-05-18 10:14:38 -07:00

backup.py

fix(cron): restore jobs.json emptied by config migration on update

2026-05-29 13:22:54 -07:00

banner.py

fix(mcp): banner shows 'disabled' not 'failed' for enabled:false servers (#38204)

2026-06-03 05:41:13 -07:00

browser_connect.py

feat: auto-launch Chromium-family browser for CDP

2026-05-19 22:34:05 -07:00

build_info.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

bundles.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

callbacks.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

checkpoints.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

claw.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

cli_output.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

clipboard.py

fix(clipboard): only read PNG signature bytes, not entire file

2026-05-13 22:54:21 -07:00

codex_models.py

fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424)

2026-05-27 12:16:15 -07:00

codex_runtime_plugin_migration.py

fix(codex-runtime): de-dup [plugins.X] tables and stop leaking HERMES_HOME into config.toml

2026-05-15 02:31:30 -07:00

codex_runtime_switch.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

colors.py

feat: respect NO_COLOR env var and TERM=dumb (#4079)

2026-03-30 17:07:21 -07:00

commands.py

feat(tui): single /model command + unified Sessions overlay (#37112)

2026-06-01 22:28:36 -04:00

completion.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

config.py

fix(doctor): detect + repair stale HERMES_MAX_ITERATIONS .env ghost shadowing config.yaml (#38222)

2026-06-03 06:38:40 -07:00

container_boot.py

fix(docker): seed s6 gateway state for legacy run cmd (#34829)

2026-06-01 11:28:56 +10:00

copilot_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cron.py

fix(gateway,cron): reuse existing _HERMES_GATEWAY marker; tighten cron regex

2026-05-30 23:05:56 -07:00

curator.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

curses_ui.py

feat(cli): ranked fuzzy search in the curses model picker

2026-06-01 16:58:58 -07:00

debug.py

feat(debug): include desktop.log in hermes debug share / /debug / hermes logs (#38203)

2026-06-03 05:41:35 -07:00

default_soul.py

fix: reset default SOUL.md to baseline identity text (#3159)

2026-03-26 01:34:27 -07:00

dep_ensure.py

feat(dep_ensure): complete Windows bootstrap — dep_ensure + install.ps1 + detection (#27845)

2026-05-18 16:34:24 +05:30

dingtalk_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

doctor.py

fix(doctor): detect + repair stale HERMES_MAX_ITERATIONS .env ghost shadowing config.yaml (#38222)

2026-06-03 06:38:40 -07:00

dump.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

env_loader.py

fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)

2026-05-25 15:18:55 -07:00

fallback_cmd.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

fallback_config.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

gateway_windows.py

fix(gateway): decode schtasks output with locale encoding on Windows

2026-06-03 09:29:19 -07:00

gateway.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

goals.py

feat(kanban): goal_mode cards run workers in a /goal loop (#35710)

2026-05-31 01:16:33 -07:00

hooks.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

inventory.py

feat(desktop): inline model picker in the status bar

2026-06-02 19:09:41 -05:00

kanban_db.py

fix(kanban): don't permanently block tasks that hit a provider rate limit (#38223)

2026-06-03 06:19:32 -07:00

kanban_decompose.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_diagnostics.py

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

kanban_specify.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_swarm.py

fix(kanban): CLI dispatch honors max_in_progress/max_spawn from config; swap missing 'avoid-ai-writing' skill for bundled humanizer (#33488, #29415) (#34337)

2026-05-28 21:00:46 -07:00

kanban.py

feat(kanban): goal_mode cards run workers in a /goal loop (#35710)

2026-05-31 01:16:33 -07:00

logs.py

feat(debug): include desktop.log in hermes debug share / /debug / hermes logs (#38203)

2026-06-03 05:41:35 -07:00

main.py

fix(tui): cgroup-aware V8 heap cap so memory-limited containers stop dying silently (#38541)

2026-06-03 16:40:28 -07:00

managed_uv.py

refactor(uv): single managed-uv path, delete fts5 installer escalation

2026-06-02 20:29:54 -04:00

mcp_catalog.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

mcp_config.py

fix(mcp): resolve ${ENV} in discovery probe so header auth works (#38571)

2026-06-03 17:49:39 -07:00

mcp_picker.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

mcp_startup.py

perf(cli): stop eager MCP discovery from blocking agent-capable startup

2026-05-30 07:45:26 -07:00

memory_setup.py

fix(honcho): harden self-hosted setup paths

2026-05-29 22:29:48 -07:00

migrate.py

feat(cli): hermes migrate xai [--apply] [--no-backup]

2026-05-20 09:18:23 -07:00

model_catalog.py

feat(models): refresh model catalog hourly instead of daily (#35756)

2026-05-31 00:29:40 -07:00

model_normalize.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

model_switch.py

fix(model-picker): stop routing OpenAI selection to OpenRouter (#37175)

2026-06-01 20:27:41 -07:00

models.py

feat(desktop): inline model picker in the status bar

2026-06-02 19:09:41 -05:00

nous_account.py

feat(tools): surface the free tool pool in entitlement + setup (#36153)

2026-06-01 06:32:48 +05:30

nous_subscription.py

feat(tools): surface the free tool pool in entitlement + setup (#36153)

2026-06-01 06:32:48 +05:30

oneshot.py

fix(cli): surface oneshot agent exceptions to stderr with rc=1

2026-05-30 07:31:48 -07:00

pairing.py

fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)

2026-05-07 07:18:21 -07:00

partial_compress.py

Inspired by Claude Code: /compress here [N] — boundary-aware 'summarize up to here' (#35048)

2026-05-29 17:49:15 -07:00

platforms.py

feat: complete plugin platform parity — all 12 integration points

2026-04-29 21:56:51 -07:00

plugins_cmd.py

Add Hermes desktop app (#20059)

2026-05-31 17:46:56 -05:00

plugins.py

feat(observability): observer-grade telemetry hooks + NeMo-Relay plugin

2026-06-03 06:36:46 -07:00

portal_cli.py

feat(cli): make hermes portal run the full quick-setup Nous flow (model picker)

2026-06-04 02:20:31 +05:30

profile_describer.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

profile_distribution.py

fix(profile): reject symlinks in distributions (#25292)

2026-05-25 05:07:58 -07:00

profiles.py

fix(honcho): harden self-hosted setup paths

2026-05-29 22:29:48 -07:00

prompt_size.py

feat(cli): add hermes prompt-size diagnostic (#35276)

2026-05-30 02:53:42 -07:00

providers.py

fix(model-picker): OpenAI shows curated models; OpenRouter no longer phantom-shows (#37404)

2026-06-02 06:31:37 -07:00

psutil_android.py

fix(android): reject unsafe tar members in psutil compatibility installer

2026-05-28 02:36:09 -07:00

pt_input_extras.py

fix(cli): ignore terminal focus reports (salvage of #16780)

2026-05-29 00:31:44 -07:00

pty_bridge.py

fix(dashboard): clamp PTY resize dimensions for WSL2 winsize garbage (#38200)

2026-06-03 09:00:16 -07:00

relaunch.py

fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch

2026-05-08 14:27:40 -07:00

runtime_provider.py

refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params

2026-05-29 02:24:48 -07:00

secret_prompt.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

secrets_cli.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

security_audit.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

send_cmd.py

fix(review): address Copilot follow-up on sanitizer and file decode errors

2026-05-16 23:00:58 -05:00

service_manager.py

Remove prviliges drop when you never ran as root (#34837)

2026-06-01 13:54:18 +10:00

session_recap.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

setup.py

fix(cli): harden hermes portal SystemExit handling + finish model-pick doc sweep

2026-06-04 02:33:33 +05:30

skills_config.py

refactor(config): migrate remaining 33 cfg_get call sites (#17311)

2026-04-29 04:03:03 -07:00

skills_hub.py

feat(skills): fix browse cap, add source links + copy buttons + category cleanup (#37143)

2026-06-01 19:52:28 -07:00

skin_engine.py

fix(tui): improve charizard completion menu contrast

2026-05-18 20:05:23 -07:00

slack_cli.py

fix(slack): enable writable app home DMs in manifest

2026-05-08 17:01:12 -07:00

status.py

feat(cli): make hermes portal the human-readable Portal onboarding alias

2026-06-04 01:19:28 +05:30

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

timeouts.py

perf(agent-loop): cut 47% of per-conversation function calls via 3 targeted hot-path optimizations (#28866)

2026-05-19 14:25:10 -07:00

tips.py

fix(gateway): stop system tips from auto-uploading local files

2026-05-30 18:58:46 -07:00

tools_config.py

fix(setup): default browser/TTS picker to free local backend, not paid Nous (#37800)

2026-06-02 19:49:10 -07:00

uninstall.py

fix(cli): remove Hermes-managed node/npm/npx symlinks on uninstall

2026-05-29 17:24:38 -07:00

voice.py

fix(tui): restore voice push-to-talk parity (#20897)

2026-05-06 15:49:59 -07:00

web_server.py

feat(web): wire local/custom endpoints into model assignment

2026-06-03 17:48:55 -07:00

webhook.py

fix(state): restrict sensitive store file permissions

2026-05-24 04:55:18 -07:00

xai_retirement.py

fix(xai): align migrate retirement map with docs

2026-05-20 09:18:23 -07:00