Repository navigation

r34.0: merge upstream v2026.9.24 (Hermes 0.21.5) — fork semantics re-expressed, ledger - #362

Merged

100yenadmin merged 7877 commits into

mainfrom

codex/r34.0-upstream-v2026.9.24

Sep 25, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 24, 2026

fix: import hermes_bootstrap first in the compute-host and hermes-tools MCP entry modules
teknium1
committed
ae80cb7
fix: bootstrap the hermes-tools MCP server only when it runs as python -m
teknium1
committed
1808488
fix: bootstrap the compute host only as python -m; pin library imports side-effect free
teknium1
committed
db0fe41
fix: a nested os.environ write from an audit hook no longer drops out of the C environ
teknium1
committed
d4212f7
fix: an audit hook that writes os.environ on every event can no longer spin the environ retry loop
teknium1
committed
37aad38
fix(providers): a provider registered after hermes_cli.models imports still reaches the picker catalog; unbind the terminal scope a test leaked
teknium1
committed
a25cf4d
fix(desktop): every settings row renders through one ListRow/ToggleRow/Slider/SearchField
OutThisLife
committed
1b7e8c4
feat(sdk): export ListRow/ToggleRow so plugin panes lay out like core Settings
OutThisLife
committed
7d63f57
fix(desktop): every Appearance row is a command-palette hit
OutThisLife
committed
0fb230b
feat(bot_desktop): ship Bot Screen on hosted images (-desktop tags)

authored and
teknium1
committed
686c34d
test: allowlist installable()'s sudo probe for the command-resolution ratchet
teknium1
committed
65d01a7
Merge pull request #120928 from NousResearch/bb/desktop-function-shortcuts
OutThisLife
authored
35b14ad
fix(tests): stop tui_gateway subagent snapshot fixture forking the live-subagent registry
teknium1
committed
771eb80
Merge pull request #120925 from NousResearch/bb/session-search-titles
OutThisLife
authored
fcd6e78
Merge pull request #120950 from NousResearch/bb/settings-row-consistency
OutThisLife
authored
c22b0a2
fix: TUI auth fallback no longer crashes on `model: <id>` config shorthand
teknium1
committed
e7cc383
test: tui_gateway/test_protocol stops leaking _hermes_home and a fresh transport module
teknium1
committed
8ae1dc1
fix(cli): make plugin clone timeout configurable

helix4u
authored and
teknium1
committed
5dbbc9a
fix(plugins): subdirectory installs download only that folder
teknium1
committed
72d18ce
fix(desktop): plugin probe/install from a repo subfolder downloads only that folder
teknium1
committed
d188a47
feat(desktop): index every hand-built settings row in the command palette
OutThisLife
committed
11b0bcc
Merge pull request #121039 from NousResearch/bb/settings-search-manifest
OutThisLife
authored
7135182
Merge pull request #108345 from afourniernv/fix/relay-atof-cwd
jquesnelle
authored
7de8728
fix(agent/gemini): count thinking tokens in usage and cost

Maero47
authored and
teknium1
committed
9835323
test(gemini): trim salvaged thinking-token tests to the two invariants
teknium1
committed
a980c35
chore(contributors): map Maero47's commit email
teknium1
committed
2364cde
fix(desktop): retain provider setup connection and profile ownership

BearHuddleston
authored and
teknium1
committed
994074c
test(desktop): cover provider setup route lookup failures

BearHuddleston
authored and
teknium1
committed
7213ebb
fix(desktop): keep the Desktop route alias when the picker opens provider setup

BearHuddleston
authored and
teknium1
committed
690813b
fix(desktop): pin provider setup readiness to an explicit connection

BearHuddleston
authored and
teknium1
committed
4340fa4
fix(desktop): keep provider readiness on the profile REST setup writes
teknium1
committed
db20d39
test: trim salvage tests to invariants
teknium1
committed
6fa17e8
test: restore picker alias handoff coverage
teknium1
committed
fec4920
fix(gemini): wire response_format into native Gemini generationConfig

gabbyong
authored and
teknium1
committed
03a7bf3
fix(gemini): drop JSON response_format alongside tools on pre-Gemini-3 models
teknium1
committed
b6d38fd
fix(auxiliary): recognise Gemini's structured-output 400 wording
teknium1
committed
236aab3
chore(contributors): map gabbyong's commit email
teknium1
committed
04fa849
fix(desktop): keep image frames stable through delayed loads

BearHuddleston
authored and
teknium1
committed
a69f860
fix(desktop): keep the pending generated-image frame when its result arrives

authored and
teknium1
committed
39cca5f
fix(desktop): read explicitly local-owned media through the native bridge

authored and
teknium1
committed
77bb695
fix(desktop): drop stale tool-output image size overrides

BearHuddleston
authored and
teknium1
committed
99d9b62
test: trim salvage tests to invariants
teknium1
committed
81235c9
fix(desktop): never upscale a cold chat image or shrink its portrait
teknium1
committed
4c6137f
fix(desktop): remember the size of inline data-URL chat images
teknium1
committed
d113cfc
fix(desktop): collapse a broken chat image to one line
teknium1
committed
06616b4
chore(desktop): neutral wording in the pixel_size comment
teknium1
committed
51f8b7c
fix(desktop): keep a generated image visible after a remembered failure
teknium1
committed
ee8ffff
fix(desktop): restore the remote-owner image routing test
teknium1
committed
f6d0e0c
fix(desktop): persist edit previews before tool-result flush

BearHuddleston
authored and
teknium1
committed
6828ffa
fix(desktop): only an unresolved tool part claims a stored result

BearHuddleston
authored and
teknium1
committed
caf1c38
fix: consume prepared edit previews on every completion path
teknium1
committed
9579930
test: trim salvage tests to invariants
teknium1
committed
f27a0a9
fix: exclude display-only message fields from token estimates
teknium1
committed
444066b
fix(desktop): hold history reads behind reconnect replay

BearHuddleston
authored and
teknium1
committed
37e0ac0
test: trim salvage tests to invariants
teknium1
committed
9e66418
fix(desktop): let history reads proceed when the replay epoch changes
teknium1
committed
bb7788c
fix(desktop): settle a warm resume through activate when replay is lost
teknium1
committed
32cf269
fix(desktop): hold a reconnect re-resume behind its runtime's replay
teknium1
committed
1a0b6ff
fix(desktop): ignore retired secondaries in the replay barrier
teknium1
committed
04b61d1
fix(desktop): re-check the replay barrier after a cold re-resume REST read
teknium1
committed
4d58c3a
test: restore replay-barrier fallback and background-sync coverage
teknium1
committed
716db85
fix(desktop): don't let a closed secondary veto a runtime an open socket serves
teknium1
committed
defb703
fmt(js): `npm run fix` on merge (#121111)

hermes-seaeye[bot]
and
github-actions[bot]
authored
58c896e
Merge pull request #120790 from benbarclay/feat/desktop-external-browser-setting
OutThisLife
authored
074349f
feat(desktop): expose composer draft API to plugins (host.composer)

Heybinshao
authored and
teknium1
committed
a874cee
fix(composer): gate active draft requests on isActive and acknowledge SDK inserts

Heybinshao
authored and
teknium1
committed
6b3c0de
feat(desktop): add host.composer.focus(sessionId) to the plugin composer API
teknium1
committed
dcea97b
docs(desktop-sdk): host.composer signatures, arbitration, consumer migrations; document COMPOSER_AREAS.underside
teknium1
committed
9316197
fix(desktop): host.composer 'new' fails closed, single-owner draft replies, verbs in sdk/composer.ts
teknium1
committed
ef70b36
fix(desktop): collapse stale compression tips before nesting sidebar branches
OutThisLife
committed
78b1331
fix(desktop): tag and preview Windows absolute paths (C:\, UNC)
OutThisLife
committed
d78355c
refactor(desktop): share isWindowsAbsolutePath with the attachment upload check
OutThisLife
committed
2a38b29
fix(desktop): keep the selected chat's workspace when entering a project
OutThisLife
committed
1bdc455
fix(cli): bound persistent_output replay to visible terminal height

Jackal991
authored and
teknium1
committed
e7bcdcc
fix(cli): refill only the viewport on redraw and erase it without CSI 2J
teknium1
committed
f748481
fix(cli): a resize mid-stream repaints each transcript line once
teknium1
committed
d486536
fix(cli): size the resize replay for how the terminal re-wraps
teknium1
committed
38f9764
fix(cli): measure the re-wrapped chrome as prompt_toolkit wrote it
teknium1
committed
29b9d7a
fix(cli): resize keeps each transcript row once on tmux and never loses rows elsewhere (#95375)
teknium1
committed
68b0f85
fix(cli): a shrink refills the viewport on terminals that don't reflow
teknium1
committed
0b8278d
fix(cli): treat GNU screen as a reflowing terminal
teknium1
committed
9f288ba
test: drop the _cprint hold test added for #95375
teknium1
committed
1a36408
test(e2e): (cli, resize_scrollback) passes plainly now that #95375 is fixed
teknium1
committed
6055214
fix(cli): close resize-drag row loss and modal refill dups (#95375)
teknium1
committed
e389aa4
fix(cli): settle before a mid-drag resize recovery; keep-above erase only where rows stay put (#95375)
teknium1
committed
9d1390f
fix(cli): hold resize-drag output 0.7 s before a recovery (#95375)
teknium1
committed
764d5bf
fix(cli): tmux with a generic TERM still counts as reflowing (#95375)
teknium1
committed
a95242c
refactor(cli): move the output-history row helpers out of the cli facade (#95375)
teknium1
committed
0004e3a
fix(cli): never aim the resize erase past chrome tmux clipped (#95375)
teknium1
committed
6d57e9e
fix(compression): a compressor no attempt claimed is never judged stale

100yenadmin
authored and
teknium1
committed
71cca15
test(compression): trim unclaimed-compressor coverage to two invariants
teknium1
committed
9ec5640
feat(desktop): expose typed plugin settings gateway

zyz619963502zyz
authored and
teknium1
committed
748f039
docs(desktop): host.settings — teardown rule, declined keys, consumer migration
teknium1
committed
21f6e35
fix(desktop): host.settings refuses inherited keys instead of TypeErroring
teknium1
committed
ab2c1cb
fix(desktop): label the settings sessions group 'Sessions', not 'Archived Chats'
OutThisLife
committed
540442a
fix(desktop): don't warn about lost work when quitting a remote backend
OutThisLife
committed
0e69909
fix(desktop): let the project folder picker create a new folder
OutThisLife
committed
771b42e
fix(desktop): scroll the composer caret into view after paste and voice inserts
OutThisLife
committed
b9b9476
fix(desktop): keep menu search focus while hovering rows
OutThisLife
committed
c0c7e95
fix(desktop): don't flash the profile-default effort before a resumed session reports its own
OutThisLife
committed
0048071
fix(desktop): keep popped-out pet on-screen after a monitor unplug

scottaki
authored and
OutThisLife
committed
174ea05
fix(desktop): never let a blank pet-overlay window capture clicks

scottaki
authored and
OutThisLife
committed
32fbb5a
fix(desktop): keep the popped-out pet wholly inside a display work area

OutThisLife
and
scottaki
committed
412d0b7
fix(desktop): clamp pet overlay drags and persist the clamped spot
OutThisLife
committed
75fef37
feat(desktop): session-list API and row-decoration slots for plugins

tobenwarrior
authored and
teknium1
committed
585e296
feat(desktop): host.sessions.pin takes a drop index; reorder([]) resets the manual order
teknium1
committed
9d8ae38
fix(desktop): host.sessions.reorder writes live ids; add reorderPinned; move verbs to sdk/sessions.ts
teknium1
committed
4f3426e
fix(desktop): avoid deprecated ASAR stat when resolving renderer

daresan
authored and
OutThisLife
committed
1ad2e8b
fix(desktop): resolve the app icon from the unpacked dist before any in-archive path

jonpol01
authored and
OutThisLife
committed
ee6852c
test(desktop): pin that renderer and icon probes never stat inside app.asar
OutThisLife
committed
dcf5728
fix(desktop): drop the remaining stat probes on app.asar paths

OutThisLife
and
CupaJ12
committed
387298a
fix(desktop): keep the bundle Dock icon in packaged macOS builds
OutThisLife
committed
d5c446e
fix(desktop): re-read the sidebar when a same-route activation voids the page
OutThisLife
committed
02b07ac
fix(desktop): report failed primary session reads instead of empty slices
OutThisLife
committed
2054ab9
fix(desktop-update): stop launching a Chrome instance for the macOS update shim
OutThisLife
committed
14a8a77
fix(desktop): save hand-registered Cloud connections as oauth with a sign-in row
OutThisLife
committed
9a2507e
fix(web): re-measure xterm once the bundled terminal font loads
OutThisLife
committed
0f9feda
fix(tts): keep local voices warm for tts.keep_warm_seconds after the last lease drops
OutThisLife
committed
80e3063
fix(tui-gateway): never park an idle /steer on the agent
OutThisLife
committed
0641ee1
fix(update): anchor discarded local commits before the diverged reset

Moep90
authored and
OutThisLife
committed
21cc8bf
fix(install): keep dropped commits behind a rescue ref on the installer reset
OutThisLife
committed
c7d2985
fix(update): say how many commits the diverged reset drops and where they went

committed
db1ff59
docs(update): document rescue refs for local commits on the target branch
OutThisLife
committed
511b879
fix(delegation): re-offer completions orphaned by a dead owner while the process runs
OutThisLife
committed
021530a
fix(delegation): hand a dropped orphan offer back to the sweep
OutThisLife
committed
02ed55e
fix(desktop): group messaging sidebar sections by profile when showing all profiles (#87715)

webtecnica
authored and
OutThisLife
committed
3fa2123
fix(desktop): group messaging platforms by gateway/profile owner in all-profiles view

OutThisLife
and
webtecnica
committed
bbba4d4
fix(desktop): open the Nous sign-in dialog from Billing's logged-out notice

OutThisLife
and
georgejieh
committed
72b8502
feat(desktop): sidebar nav visibility and order for plugins

tobenwarrior
authored and
teknium1
committed
632a5cd
feat(desktop): sidebar nav prefs become a `sidebarNav.prefs` contribution
teknium1
committed
7fba0e6
fix(desktop): sidebarNav.prefs cannot hide the Plugins row; document the real order rule and namespaced ids
teknium1
committed
2553b86
fix(desktop): trim wrapper parens from raw URL autolinks

harjothkhara
authored and
OutThisLife
committed
826e40c
refactor(desktop): single-pass unbalanced-paren trim in raw-URL autolinker

authored and
OutThisLife
committed
d51727f
fix(desktop): preserve matched URL parentheses

harjothkhara
authored and
OutThisLife
committed
ef9a5f9
fix(desktop): raw-URL autolinker steps over markdown links (#49822)

OutThisLife
and
Tranquil-Flow
committed
c882636
fix(project): keep task-scoped create/switch off the profile-global pointer

Börje
authored and
OutThisLife
committed
0c7c8b6
fix(project): report the calling session's project from desktop_project list

OutThisLife
and
diffen77
committed
a932f22
feat(desktop): model-pill label providers for plugins

tobenwarrior
authored and
teknium1
committed
2b4a5a0
feat(desktop): memoise model-pill providers on primitives; cover compact mode
teknium1
committed
eecabbe
docs(desktop-sdk): model-pill label providers — signatures, arbitration, migration
teknium1
committed
1b77007
fix(desktop): model-pill provider must return a string; non-strings fall through
teknium1
committed
6b2c23a
fmt(js): `npm run fix` on merge (#121210)

hermes-seaeye[bot]
and
github-actions[bot]
authored
3b8c77c
feat(desktop): typed skills/toolsets/profiles bridge for plugins

tobenwarrior
authored and
teknium1
committed
bd55633
feat(desktop): move the capabilities bridge to sdk/bridge.ts; pluginDecisions read-only
teknium1
committed
488cd56
docs(desktop): capabilities bridge section; pluginDecisions documented read-only
teknium1
committed
7daf818
fix(desktop): host.pluginDecisions hands out frozen copies, not the live store object
teknium1
committed
4cec3f8
docs(gateway): drop the remaining whichever-home --replace claims
kshitijk4poor
committed
0717586
docs(gateway): --replace crosses homes only for an owner serving this profile
kshitijk4poor
committed
9a27bcc
fix(gateway): log the foreign-standalone-owner warning once per start
kshitijk4poor
committed
78fbbb0
test(gateway): make the lock-refusal tests' standalone checks real
kshitijk4poor
committed
c564a85
refactor(gateway): trim the --replace ownership prose and reuse _migrate_command
kshitijk4poor
committed
fa4714c
feat(desktop): appearance-settings slot and the app's swatch grid for plugins

tobenwarrior
authored and
teknium1
committed
8d71403
feat(desktop): keep ColorSwatches export as on main; document APPEARANCE_AREAS.extra contract
teknium1
committed
84ac69e
fix(desktop): appearance extras use the pane boundary and render on the top-level page only
teknium1
committed
55c52f2
fix(desktop): rebuild a packaged app whose node-pty has no native binary

OutThisLife
and
Snowdchike
committed
ff8c8f0
fix(desktop): download Kanban attachments through authenticated gateway

jroest
authored and
OutThisLife
committed
d9a44a0
fix(desktop): Kanban attachment download through the one gated resolver

OutThisLife
and
jroest
committed
efafed5
fix(desktop): flag a failed cold-start sidebar read instead of reporting an empty list
OutThisLife
committed
72bc2f6
fix(desktop): show retry in place of "No sessions yet" when the first read fails
OutThisLife
committed
620d388
fix(update): diagnose SSH publickey / host-key fetch failures
OutThisLife
committed
db114c2
fix(bootstrap): show the update child's exit-2 refusal instead of "still running"

OutThisLife
and
RelaxJonh
committed
edecebf
fix(projects): CLI and pathless switches move the active project again
OutThisLife
committed
f928860
fix(tts): lease release reads the requesting profile's keep-warm window
OutThisLife
committed
3804baa
fix(desktop): branches of a collapsed stale tip nest under the live tip
OutThisLife
committed
83ee4bc
fix(desktop): pet overlay stays clickable on Linux and survives a replaced close
OutThisLife
committed
f003387
feat(desktop): sandboxed embed primitive for plugins

tobenwarrior
authored and
teknium1
committed
d81db86
feat(desktop): trim SandboxedFrame tests to invariants; document the allowlist contract
teknium1
committed
a48557b
style(desktop): blank lines before statements in sandboxed-frame test
teknium1
committed
8636d6a
fix(desktop): SandboxedFrame takes an explicit prop allowlist, not iframe attrs
teknium1
committed
c2645ef
fix(desktop): serve uvicorn on SelectorEventLoop on Windows despite uvicorn 0.41 proactor default Closes #120164

Finn763
authored and
OutThisLife
committed
d8814dc
test(desktop): run the serve loop-factory regression on the Windows lane
OutThisLife
committed
355f5cb
fix(desktop): branch long sessions without renderer transcript load

benjaminbrumbaugh
authored and
OutThisLife
committed
44812b5
fix(desktop): preserve branch compatibility with older gateways

benjaminbrumbaugh
authored and
OutThisLife
committed
1c7ec93
fix(desktop): preserve message-level branch responses

benjaminbrumbaugh
authored and
OutThisLife
committed
d95a6bc
fix(desktop): declare the branch methods in the typed gateway contract
OutThisLife
committed
ecacf3d
feat(plugins): public event bridge for plugin backends

tobenwarrior
authored and
teknium1
committed
8034d49
feat(plugins): plugin event names take a dotted hierarchy; ids are catalog names
teknium1
committed
5fa1402
fix(plugins): desktop lint reads a new RegExp("<script…") pattern as a sanitiser
teknium1
committed
00c9f3e
docs(plugins): broadcast_plugin_event contract, delivery scope and rss-reader migration
teknium1
committed
3593b63
fix(plugins): desktop lint masks a new RegExp("<script…") only where it is used as a matcher
teknium1
committed
5765f8d
fix(plugins): broadcast_plugin_event from the turn-isolation child reaches the Desktop
teknium1
committed
be59f04
fix(update): cap boot recovery retries and derive self-lock native modules
OutThisLife
committed
d892451
fix(desktop): closing a tool tab in the chat's zone fronts the chat
OutThisLife
committed
7ba3a71
fix(desktop): profile backend env drops the launch profile's dotenv names

OutThisLife
and
YAshhh29
committed
d17f519
fix(desktop): isolate primary and pooled backend spawns from launch-profile secrets

OutThisLife
and
YAshhh29
committed
94dcb17
fix(desktop): keep root-only project chats out of Home

OutThisLife
and
networthexplained
committed
03add1f
fix(desktop): every project session is reachable from the sidebar

committed
0397efe
fmt(js): `npm run fix` on merge (#121304)

hermes-seaeye[bot]
and
github-actions[bot]
authored
76c5bdc
fix(dashboard): reject credential preview writeback

JoaoMarcos44
authored and
kshitijk4poor
committed
eb4f92b
test(dashboard): cover secret preview boundaries

JoaoMarcos44
authored and
kshitijk4poor
committed
e3ef141
fix(dashboard): make credential previews non-reusable

JoaoMarcos44
authored and
kshitijk4poor
committed
f8b66c7
fix(dashboard): reject legacy credential masks by shape, not equality

committed
af4c928
test(dashboard): fold preview-writeback coverage into two invariant tests
kshitijk4poor
committed
a7c6803
fix(dashboard): treat any «redacted… value as a credential preview
kshitijk4poor
committed
ea478da
refactor(dashboard): hoist /api/env preview check out of the write thread
kshitijk4poor
committed
b9a50dd
chore: map MarkTro1969 for salvage of #120557
kshitijk4poor
committed
a7279d6
fix(agent): make compression stall fallback deterministic

MarkTro1969
authored and
kshitijk4poor
committed
aabb7a6
refactor(compression): single stall-fallback ladder for every stall exit

kshitijk4poor
and
MarkTro1969
committed
f0672a0
refactor(compression): sample the stall wait once, before the retry chain
kshitijk4poor
committed
3bd93da
fix(compression): an in-place compaction never archives turns the compacting surface did not hold

jonpol01
authored and
kshitijk4poor
committed
3028995
fix(compression): a trailing held row without any stamp keeps the lease watermark

teknium1
authored and
kshitijk4poor
committed
f53c0f6
fix(compression): a held row a merge rewrote does not bound the archive

jonpol01
authored and
kshitijk4poor
committed
1a632c3
fix(compression): a here-N tail copy vouches for its row id only when its source is unchanged
kshitijk4poor
committed
4d58998
test(cli): stop leaking a real MCP discovery thread from the TUI launcher test
teknium1
committed
a702791
fix(journey): route memory edit/delete through MemoryStore._mutate
OutThisLife
committed
43d3d4e
fix(config): stop the migration ladder rewriting unversioned configs

jonpol01
authored and
kshitijk4poor
committed
a88bef9
fix(config): keep v41 off the unversioned ladder and drop the stamp read guard

kshitijk4poor
and
JoaoMarcos44
committed
49aaa52
refactor(config): read the version stamp once and drop has_version_stamp
kshitijk4poor
committed
9232479
test(config): tie LEGACY_KEY_STEPS to the migration ladder
kshitijk4poor
committed
19bd20f
test(docker): pin the non-mapping config.yaml boot path
kshitijk4poor
committed
03584e4
fix(profiles): merge distributed cron jobs safely

JoaoMarcos44
authored and
kshitijk4poor
committed
39682e3
test(profiles): cover cron distribution ownership

JoaoMarcos44
authored and
kshitijk4poor
committed
439e3a3
refactor(cron): move job-definition merge schema into cron/job_definition.py

committed
c2063cf
fix(profiles): narrow cron-merge error wrapper to the corrupt-store case

kshitijk4poor
and
JoaoMarcos44
committed
0bf0e03
fix(profiles): reject an unschedulable shipped cron job before any file is replaced
kshitijk4poor
committed
bb0650e
refactor(cron): own the store-import loop in cron/job_definition.py
kshitijk4poor
committed
ca1ef78
refactor(cron): gate imported schedule changes on is_job_runnable
kshitijk4poor
committed
b0aefcc
fix(memory): pin a staged replace/remove to the entry the approver reviewed

jonpol01
authored and
kshitijk4poor
committed
b96e88b
fix(memory): refuse unpinned legacy replace/remove at approval

kshitijk4poor
and
JoaoMarcos44
committed
3da1c59
refactor(memory): dry-run the staged batch through apply_batch's own walk
kshitijk4poor
committed
c013f1b
refactor(memory): derive a payload's destructive ops in one place
kshitijk4poor
committed
5c3afee
refactor(memory): derive batch receipts from the matched list
kshitijk4poor
committed
88dee3e
chore: release v0.21.5 (2026.9.24)
teknium1
committed
f97608f

Commits on Sep 25, 2026