SeaXen e8076c1ebe fix(dashboard): allow chat websockets on insecure public bind ...

Allow non-loopback websocket peers when the dashboard is explicitly exposed with --host 0.0.0.0/:: and --insecure.

This fixes the failure mode where /chat rendered over LAN but /api/ws and /api/events were rejected with HTTP 403, leaving the embedded TUI chat disconnected.

Add regression coverage for the insecure public bind case in the dashboard websocket auth tests.

2026-05-30 00:23:44 -07:00

..

dashboard_auth

fix(dashboard-auth): share /api/* public allowlist between legacy and OAuth gates

2026-05-29 12:17:12 +10:00

proxy

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

__init__.py

chore: release v0.15.1 (2026.5.29) (#34222)

2026-05-28 18:11:49 -07:00

_parser.py

Fix CLI verbose tool progress config fallback

2026-05-23 21:03:51 -07:00

_subprocess_compat.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

auth_commands.py

refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params

2026-05-29 02:24:48 -07:00

auth.py

refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params

2026-05-29 02:24:48 -07:00

azure_detect.py

feat(azure-foundry): add Microsoft Entra ID auth

2026-05-18 10:14:38 -07:00

backup.py

fix(cron): restore jobs.json emptied by config migration on update

2026-05-29 13:22:54 -07:00

banner.py

feat(cli): warn on unsupported pip installs + fix stale update-check cache (#34491) (#34846)

2026-05-29 13:30:28 -07:00

browser_connect.py

feat: auto-launch Chromium-family browser for CDP

2026-05-19 22:34:05 -07:00

build_info.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

bundles.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

callbacks.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

checkpoints.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

claw.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cli_output.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

clipboard.py

fix(clipboard): only read PNG signature bytes, not entire file

2026-05-13 22:54:21 -07:00

codex_models.py

fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424)

2026-05-27 12:16:15 -07:00

codex_runtime_plugin_migration.py

fix(codex-runtime): de-dup [plugins.X] tables and stop leaking HERMES_HOME into config.toml

2026-05-15 02:31:30 -07:00

codex_runtime_switch.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

colors.py

feat: respect NO_COLOR env var and TERM=dumb (#4079)

2026-03-30 17:07:21 -07:00

commands.py

Inspired by Claude Code: /compress here [N] — boundary-aware 'summarize up to here' (#35048)

2026-05-29 17:49:15 -07:00

completion.py

test(cli): strengthen zsh completion regression coverage

2026-05-13 09:34:15 -07:00

config.py

fix(cli): don't treat any container as the Docker image for updates (#35139)

2026-05-30 00:22:46 -07:00

container_boot.py

fix(docker): make s6 lifecycle work for the unprivileged hermes user

2026-05-25 12:23:23 +10:00

copilot_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cron.py

feat: add cron job profile support

2026-05-18 17:39:50 +00:00

curator.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

curses_ui.py

fix(cli): clamp curses color 8 for 8-color terminals (Docker)

2026-05-21 23:40:58 -07:00

debug.py

style: restore PEP8 blank-line separation after dead-code removal

2026-05-29 04:22:27 -07:00

default_soul.py

fix: reset default SOUL.md to baseline identity text (#3159)

2026-03-26 01:34:27 -07:00

dep_ensure.py

feat(dep_ensure): complete Windows bootstrap — dep_ensure + install.ps1 + detection (#27845)

2026-05-18 16:34:24 +05:30

dingtalk_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

doctor.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

dump.py

fix(docker): bake build-time git SHA into the image

2026-05-28 15:14:05 +10:00

env_loader.py

fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)

2026-05-25 15:18:55 -07:00

fallback_cmd.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

fallback_config.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

gateway_windows.py

fix(gateway): drain on Windows hermes gateway stop so sessions survive restart (#33798)

2026-05-28 03:25:32 -07:00

gateway.py

fix(gateway): anchor service WorkingDirectory at HERMES_HOME, not the source checkout

2026-05-29 12:36:59 -07:00

goals.py

feat: inject current time into goal judge prompt

2026-05-16 23:05:27 -07:00

hooks.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

inventory.py

refactor(inventory): extract shared ConfigContext + build_models_payload

2026-05-13 22:31:11 -07:00

kanban_db.py

style: restore PEP8 blank-line separation after dead-code removal

2026-05-29 04:22:27 -07:00

kanban_decompose.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_diagnostics.py

chore: remove dead code — 28 unused functions/classes across 16 files

2026-05-29 04:22:27 -07:00

kanban_specify.py

fix(kanban): close kanban.db FD after every connect() in long-lived processes

2026-05-27 22:07:49 -07:00

kanban_swarm.py

fix(kanban): CLI dispatch honors max_in_progress/max_spawn from config; swap missing 'avoid-ai-writing' skill for bundled humanizer (#33488, #29415) (#34337)

2026-05-28 21:00:46 -07:00

kanban.py

fix(kanban): add --reason flag to unblock for symmetry with block (#30897)

2026-05-28 23:41:44 -07:00

logs.py

feat: component-separated logging with session context and filtering (#7991)

2026-04-11 17:23:36 -07:00

main.py

fix(honcho): harden self-hosted setup paths

2026-05-29 22:29:48 -07:00

mcp_catalog.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

mcp_config.py

fix(mcp): stop reporting false OAuth success when no token was obtained (#34807)

2026-05-29 12:32:19 -07:00

mcp_picker.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

memory_setup.py

fix(honcho): harden self-hosted setup paths

2026-05-29 22:29:48 -07:00

migrate.py

feat(cli): hermes migrate xai [--apply] [--no-backup]

2026-05-20 09:18:23 -07:00

model_catalog.py

fix(model-catalog): fall through to raw.github when Vercel 403s; swap step-3.5-flash for step-3.7-flash on OpenRouter+Nous

2026-05-29 00:25:36 -07:00

model_normalize.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

model_switch.py

fix(model): isolate custom provider picker credentials

2026-05-29 12:32:35 -07:00

models.py

chore(models): gemini-3.5-flash replaces gemini-3-flash-preview in OpenRouter + Nous lists (#34581)

2026-05-29 04:27:58 -07:00

nous_account.py

feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.

2026-05-28 00:19:31 -07:00

nous_subscription.py

fix(setup): write config for image_gen and video_gen in apply_nous_managed_defaults (#35109)

2026-05-30 03:45:12 +00:00

oneshot.py

fix(provider): make config.yaml model.provider the single source of truth (#31222)

2026-05-23 18:18:41 -07:00

pairing.py

fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)

2026-05-07 07:18:21 -07:00

partial_compress.py

Inspired by Claude Code: /compress here [N] — boundary-aware 'summarize up to here' (#35048)

2026-05-29 17:49:15 -07:00

platforms.py

feat: complete plugin platform parity — all 12 integration points

2026-04-29 21:56:51 -07:00

plugins_cmd.py

fix: improve plugins list usability

2026-05-29 00:59:42 -07:00

plugins.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

portal_cli.py

style: restore PEP8 blank-line separation after dead-code removal

2026-05-29 04:22:27 -07:00

profile_describer.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

profile_distribution.py

fix(profile): reject symlinks in distributions (#25292)

2026-05-25 05:07:58 -07:00

profiles.py

fix(honcho): harden self-hosted setup paths

2026-05-29 22:29:48 -07:00

providers.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

psutil_android.py

fix(android): reject unsafe tar members in psutil compatibility installer

2026-05-28 02:36:09 -07:00

pt_input_extras.py

fix(cli): ignore terminal focus reports (salvage of #16780)

2026-05-29 00:31:44 -07:00

pty_bridge.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

relaunch.py

fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch

2026-05-08 14:27:40 -07:00

runtime_provider.py

refactor(auth): remove vestigial Nous min_key_ttl/inference_auth_mode params

2026-05-29 02:24:48 -07:00

secret_prompt.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

secrets_cli.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

security_audit.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

send_cmd.py

fix(review): address Copilot follow-up on sanitizer and file decode errors

2026-05-16 23:00:58 -05:00

service_manager.py

fix(docker): align HOME for dashboard and s6 gateway services (#33481)

2026-05-28 13:42:27 +10:00

session_recap.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

setup.py

feat(video_gen): wire Nous subscription override into hermes tools UX

2026-05-29 22:26:24 +05:30

skills_config.py

refactor(config): migrate remaining 33 cfg_get call sites (#17311)

2026-04-29 04:03:03 -07:00

skills_hub.py

fix(skills-hub): stop ellipsis-truncating the Identifier column (#33810)

2026-05-28 04:53:13 -07:00

skin_engine.py

fix(tui): improve charizard completion menu contrast

2026-05-18 20:05:23 -07:00

slack_cli.py

fix(slack): enable writable app home DMs in manifest

2026-05-08 17:01:12 -07:00

status.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

timeouts.py

perf(agent-loop): cut 47% of per-conversation function calls via 3 targeted hot-path optimizations (#28866)

2026-05-19 14:25:10 -07:00

tips.py

docs(auth): replace stale 'hermes login' references with 'hermes auth add'

2026-05-26 15:41:11 -07:00

tools_config.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

uninstall.py

fix(cli): remove Hermes-managed node/npm/npx symlinks on uninstall

2026-05-29 17:24:38 -07:00

voice.py

fix(tui): restore voice push-to-talk parity (#20897)

2026-05-06 15:49:59 -07:00

web_server.py

fix(dashboard): allow chat websockets on insecure public bind

2026-05-30 00:23:44 -07:00

webhook.py

fix(state): restrict sensitive store file permissions

2026-05-24 04:55:18 -07:00

xai_retirement.py

fix(xai): align migrate retirement map with docs

2026-05-20 09:18:23 -07:00