fix(delegation): keep credential pools endpoint-coherent - #2

Open

oferlaor wants to merge 10000 commits into

waritbb:fix/delegation-runtime-pool-coherence-prfrom

oferlaor:fix/pr39862-endpoint-coherence

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 11, 2026

fix(dashboard): startup schema reconcile opens state.db read-only first
teknium1
committed
c9b71eb
fix(hosted-rooms): local_profiles skips the profile-delete tombstone dir
teknium1
committed
cfeccbd
test(hosted-rooms): pin the coordination store off the master state.db; label sidecars
teknium1
committed
d41e906
fix(state): scope uninspectable-holder fallback to the instance's own HERMES_HOME

TaoMasterCoder
authored and
teknium1
committed
085623a
test(state): trim holder-scope suite to the two behaviour contracts
teknium1
committed
902ecca
fix(desktop): give pooled remote dispatch probes the cold-start liveness budget

authored and
teknium1
committed
8ab0896
fix(desktop): probe /api/health on pooled SSH dispatch, not /api/status

bennybuoy
authored and
teknium1
committed
ee8257d
fix(desktop): dispatch probe falls back to /api/status on pre-/api/health remotes

teknium1
and
edosulai
committed
d1bd7b0
fix(desktop): pin primary backend routing to its booted profile

squevo
authored and
teknium1
committed
d27180b
fix(desktop): make pool slot timeouts actionable

JoaoMarcos44
authored and
teknium1
committed
a863bbc
fix(desktop): await LRU teardown before queued wake

Mabolla
authored and
teknium1
committed
919dea9
fix(desktop): wait for an evicted backend to release its slot

Mabolla
authored and
teknium1
committed
19cff34
test(desktop): trim salvaged pool tests to invariants
teknium1
committed
7dec815
fix(state): require nlink==0 before treating a /proc fd as an unlinked WAL sidecar

chelsealong
authored and
teknium1
committed
84a3c4d
fix(state): compare fd identity against the watched path, not st_nlink

chelsealong
authored and
teknium1
committed
d6b036b
fix(state): serialize replaced/generation probe with close() in _execute_write

ca-shrimp
authored and
teknium1
committed
3a3ec6e
fix(state): distinguish retired WAL recovery guidance

authored and
teknium1
committed
031d376
fix(db): survive DELETE fallback failure in WAL setup

nikkoxgonzales
authored and
teknium1
committed
4d9ec9b
test(state): port the #107411 dentry tests to the shared WAL-generation harness
teknium1
committed
045704c
fix(gateway): re-check the live store before broadcasting the state.db warning
teknium1
committed
9f9ec64
fix(state): gate the lock-free read pool on a confirmed WAL header, not the assumed mode

teknium1
and
QDung210
committed
295edf2
fix(state): retry a transient SQLITE_IOERR on the pooled read path before surfacing it

committed
e00a21c
chore: contributor mappings for the statedb-wal salvage (gaoanze888 work email, nikkoxgonzales noreply)
teknium1
committed
d956e05
fix(cli): release SessionDB handles when deleting a profile

authored and
teknium1
committed
f1ee8e0
fix(cli): wait for SessionDB teardown when deleting a profile

Sora-bluesky
authored and
teknium1
committed
3a35050
fix(desktop): pin launch SessionDB handle to the launch home

HexLab98
authored and
teknium1
committed
3c3ca06
test(tui): cover launch SessionDB binding under profile override windows

HexLab98
authored and
teknium1
committed
3427051
test(tui): launch-handle pin test opens a real registry SessionDB
teknium1
committed
5a720bb
fix(session_search): a bare session id never reads another profile's state.db
teknium1
committed
df0eed4
fix(agent): corrupt-session recovery guidance names the session's own state.db
teknium1
committed
16e4496
perf(state): batch message hydration in export_all

Xipong
authored and
teknium1
committed
78f8511
fix(state): tolerate malformed session marker JSON

efe-arv
authored and
teknium1
committed
a239c4f
fix(state): declare origin_session_id in the canonical async_delegations schema

liuhao1024
authored and
teknium1
committed
0bb27d3
fix(state): single durable-shape authority for async_delegations

liuhao1024
authored and
teknium1
committed
a6d65cd
test(tools): extend the delegation fd-leak injection to the schema replay

liuhao1024
authored and
teknium1
committed
df1388e
fix(state): one corrupt timestamp row no longer kills sessions list, export or insights
teknium1
committed
496eb13
fix(sessions): chunk IN-list ids in bulk delete to avoid 'too many SQL variables'

mssteuer
authored and
teknium1
committed
acfda37
fix(state): batch large session cleanup queries below SQLite's variable limit

Mi55ed
authored and
teknium1
committed
25670cd
test(state): pin corrupt-row robustness — one bad timestamp/oversized IN-list never kills the command
teknium1
committed
c4a8572
fix(state): route the remaining model_config marker reads through _sql_json_extract
teknium1
committed
46afbfe
fix(state): fts_trigram_session_sql qualifies model_config under the json_valid guard
teknium1
committed
a241349
fix(state): drop orphan FTS5 shadow tables per family on SessionDB open

authored and
teknium1
committed
bd2c7e2
fix(recovery): skip rows the destination schema rejects during partial salvage

leegunwoo98
authored and
teknium1
committed
1dcc0b0
fix(recovery): seed a damaged rowid edge from min()/max() before the INT64 domain
teknium1
committed
8a9f9ec
fix(state): exclude the cjk index family from the legacy FTS demote rename

liuhao1024
authored and
teknium1
committed
b811dfd
fix(state): escape underscores in the cjk family exclusion LIKE pattern

liuhao1024
authored and
teknium1
committed
c816bfa
fix(sessions): salvage a page-1-header-damaged state.db in the lost_and_found lane

TaoMasterCoder
authored and
teknium1
committed
1077782
fix(state): quarantine a corrupt/replaced handle out of rebuild_fts() too

nftpoetrist
authored and
teknium1
committed
17b2768
fix(state): classify FTS-scoped corruption as fts_index, never whole-file damage

authored and
teknium1
committed
38adfe9
fix(doctor): name structural state.db corruption honestly and route it to sessions recover

liuhao1024
authored and
teknium1
committed
3d167a8
fix(state): pin corrupt-session recovery guidance to the failing profile
teknium1
committed
754ecff
fix(state): make the FTS write-health probe flush segments and catch IntegrityError
teknium1
committed
d8cf5da
fix(cli): exit non-zero from `sessions repair --check-only` on an unhealthy store

jangomango76
authored and
teknium1
committed
5a2f512
fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll
teknium1
committed
fdd32f8
test(web): count only the dashboard's own warning in the corrupt-store poll test
teknium1
committed
04dd80a
fix(bootstrap-installer): stamp setup app version from release semver

authored and
yoniebans
committed
0b8daf3
fix(desktop): qualify group (you) by connection, not bare profile name

authored and
yoniebans
committed
3b45681
fix(desktop): serve local hermes-media ranges so chat video can seek

xxxigm
authored and
OutThisLife
committed
73a2597
test(desktop): pin local media seeking through the production fetchLocal

xxxigm
authored and
OutThisLife
committed
ad03f20
Add attribution
dagardner-nv
committed
90307af
fix(local-models): keep automatic recommendations GPU-resident
jquesnelle
committed
5764ae3
Merge pull request #108429 from NousResearch/fix/local-recommendation-policy
jquesnelle
authored
698ab88
Merge pull request #107708 from dagardner-nv/feat/propagate-request-metadata-to-relay
jquesnelle
authored
8226c2f
fix(desktop): restore flat glass surfaces without text bleed

jquesnelle
authored and
OutThisLife
committed
4e865d4
revert: remove Collective Wisdom V1 (#94266)
teknium1
committed
0dcadf6
fmt(js): `npm run fix` on merge (#108522)

hermes-seaeye[bot]
and
github-actions[bot]
authored
7469c0f
fix(deepseek): honor Flash 1M window leftovers and native vision
teknium1
committed
759024b
chore: release v0.21.2 (2026.9.11)
teknium1
committed
939e45c
fix: delete magicmock crud
ethernet8023
committed
35a9d6b
fix: add MagicMock to gitignore
ethernet8023
committed
31d0a24
fix(gateway): parse named-profile namespaces in session keys

kokhlo
authored and
teknium1
committed
bdb38e3
fix(qqbot): authorize approval buttons for named-profile session keys

LovePlayCode
authored and
teknium1
committed
adc4fad
fix(gateway): shutdown notices parse named-profile keys directly

teknium1
and
kokhlo
committed
5fc784a
fix(gateway): default-profile rows and /undo eviction stay on the profile that owns them
teknium1
committed
75ae285
fix(tui_gateway): profile sessions never read or write through the launch store
teknium1
committed
e7136f1
fix(goals): GoalManager borrows the registry's shared state.db handle
teknium1
committed
6806a38
docs(multi-profile): profile sessions keep their own keys and store on every gateway path
teknium1
committed
956793a
test(goals): patch the registry construction seam, not hermes_state.SessionDB
teknium1
committed
915c0f8
fix(hindsight): keep scopeless daemon worker from clobbering profile env key

red4711
authored and
teknium1
committed
2c24ed4
test(hindsight): run pure gate tests on Windows too

red4711
authored and
teknium1
committed
d0d5c77
fix(hindsight): accept HINDSIGHT_API_LLM_API_KEY vault name in key resolution

red4711
authored and
teknium1
committed
778ad61
fix(mem0): skip platform key lookup in OSS mode

honor2030
authored and
teknium1
committed
a1b689f
fix(multiplex): tool and memory-provider env reads stay inside the routed profile

committed
a9838c2
test(hindsight): trim salvaged #103957 tests to the three invariants
teknium1
committed
5e04961
fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

committed
ceaf622
fix(gateway): a secondary API_SERVER_KEY no longer skips the profile; start/install/status honour the live multiplexer
teknium1
committed
37dcc0a
fix(gateway): bind HERMES_SESSION_PROFILE per /p/<profile>/ api request

nmediaie
authored and
teknium1
committed
65579d8
fix(gateway): scope multiplex busy-session handler to its owning profile

chelsealong
authored and
teknium1
committed
fc4f564
fix(gateway): resolve authorization routing in multiplexed busy sessions

Hermes Agent
authored and
teknium1
committed
350b9c9
fix(gateway): profile_routes no longer hijack DMs to a dedicated secondary bot (#104933)

committed
27768a9
refactor(gateway): share the primary admit/scope step between message and busy handlers
teknium1
committed
7ecee9e
fix(gateway): mid-turn authorization reads the admitting bot's allowlist; shared-bot satellites keep a transport
teknium1
committed
77180ac
fix(gateway): deliver secondary-profile async completions under their own profile scope
teknium1
committed
c632437
test(gateway): invariants for multiplex routing/authz (#104933, #103717)
teknium1
committed
cdedfe9
chore: map salvaged contributor emails (remi-td, nmediaie)
teknium1
committed
3efbd79
fix(cron): scope restart-safe worker environment

fangliquanflq
authored and
teknium1
committed
c17629a
fix(desktop): yield single-profile cron to its running gateway

tachyon-r
authored and
teknium1
committed
32c5388
fix(cron): routed-profile cron delivers through the shared bot for guild-scoped routes and profiles without a platforms block

teknium1
and
web3blind
committed
444fa81
fix(desktop): cron ticker follows the multiplexer allowlist and stands down for served satellites

teknium1
and
fangliquanflq
committed
0e57543
fix(serve): SSH-isolated idle-exit keeps the backend alive while a cron job runs
teknium1
committed
a6c5b7a
fix(gateway): a named-profile multiplexer ticks its own cron store and owns the shared adapters

committed
1c08edc
docs(multiplex): cron ticker allowlist, named multiplexer, guild-scoped route delivery
teknium1
committed
d807a34
fix(discord): apply YAML allow_bots to ingress policy

Chike Okonta
authored and
teknium1
committed
9541138
fix(tools): never ambient-bridge TERMINAL_* under a profile home override

infinitycrew39
authored and
teknium1
committed
a5c801c
fix(tui): bind launch-profile terminal scope once multiplexing is active

infinitycrew39
authored and
teknium1
committed
606903b
fix(file-safety): resolve HERMES_HOME/config per call so multiplex profiles don't poison the write guards (#107327)

PRATHAMESH75
authored and
teknium1
committed
1271622
fix(file-safety): bind the write-guard resolver fallback to the active profile

PRATHAMESH75
authored and
teknium1
committed
7af5006
fix(gateway): a secondary profile's config.yaml no longer poisons the process env under multiplex

teknium1
and
nftpoetrist
committed
545e74d
fix(gateway,tools): per-profile Yuanbao home, env_passthrough allowlist and Slack ignored-channel guard under multiplex
teknium1
committed
388b881
docs(multiplex): per-profile config.yaml behaviour, env_passthrough and write guards
teknium1
committed
651878e
test: trim salvaged multiplex tests to the invariant pair per fix
teknium1
committed
72cc965
chore(contributors): map see-k's commit email for release credit
teknium1
committed
d198082
fix(env_passthrough): tolerate an unresolvable home when keying the allowlist cache
teknium1
committed
53e32d0
security(gateway): re-resolve hooks directory per call to fix profile isolation

srojk34
authored and
teknium1
committed
0c74353
fix(gateway): routed profiles get their own max_turns, fallback chain, hooks, aux auth and media policy
teknium1
committed
819517f
fix(security): re-resolve checkpoint/sticker-cache paths per call

srojk34
authored and
teknium1
committed
e70db09
fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

teknium1
and
nateEc
committed
adf2355
test(hooks): synthetic payload carries the new profile field like production
teknium1
committed
bdb5bf9
docs(multiplex): make the multiplexed-gateway page match what the code does
teknium1
committed
bf51fee
fix(models): resolve context length for OpenRouter :nitro/:floor routing variants

jakobdylanc
authored and
teknium1
committed
284ee03
fix(models): resolve routed OpenRouter ids in models.dev catalog lookups

jakobdylanc
authored and
teknium1
committed
f28c528
refactor(models): import openrouter_variant_base from its defining module
teknium1
committed
30e4673
test(models): trim routing-variant tests to invariants
teknium1
committed
3a2cfb7
chore: map contributor email for jakobdylanc
teknium1
committed
1021a03

Commits

Commits on Sep 11, 2026

Commits on Sep 12, 2026