Dusk1e e9ddfee4fd fix(plugins): reject plugin names that resolve to the plugins root ...

Reject "." as a plugin name — it resolves to the plugins directory
itself, which in force-install flows causes shutil.rmtree to wipe the
entire plugins tree.

- reject "." early with a clear error message
- explicit check for target == plugins_resolved (raise instead of allow)
- switch boundary check from string-prefix to Path.relative_to()
- add regression tests for sanitizer + install flow

Co-authored-by: Dusk1e <yusufalweshdemir@gmail.com>

2026-04-05 18:40:45 -07:00

..

__init__.py

chore: release v0.7.0 (2026.4.3) (#4812)

2026-04-03 11:14:55 -07:00

auth_commands.py

fix: hermes auth remove now clears env-seeded credentials permanently (#5285)

2026-04-05 12:00:53 -07:00

auth.py

fix: repair OpenCode model routing and selection (#4508)

2026-04-02 09:36:24 -07:00

banner.py

chore: prepare Hermes for Homebrew packaging (#4099)

2026-03-30 17:34:43 -07:00

callbacks.py

feat(approvals): make dangerous command approval timeout configurable (#3886)

2026-03-30 00:02:02 -07:00

checklist.py

fix: add TTY guard to interactive CLI commands to prevent CPU spin (#3933)

2026-03-30 08:10:23 -07:00

claw.py

feat: add post-migration cleanup for OpenClaw directories (#4100)

2026-03-30 17:39:08 -07:00

clipboard.py

fix: clean up empty file after failed wl-paste clipboard extraction

2026-03-11 02:56:19 -07:00

codex_models.py

fix: add gpt-5.4-mini to Codex fallback catalog (#3855)

2026-03-29 20:10:00 -07:00

colors.py

feat: respect NO_COLOR env var and TERM=dumb (#4079)

2026-03-30 17:07:21 -07:00

commands.py

fix: Ollama Cloud auth, /model switch persistence, and alias tab completion

2026-04-05 11:06:06 -07:00

config.py

fix: hermes auth remove now clears env-seeded credentials permanently (#5285)

2026-04-05 12:00:53 -07:00

copilot_auth.py

chore: remove ~100 unused imports across 55 files (#3016)

2026-03-25 15:02:03 -07:00

cron.py

feat(cron): add script field for pre-run data collection (#5082)

2026-04-04 10:43:39 -07:00

curses_ui.py

fix: add TTY guard to interactive CLI commands to prevent CPU spin (#3933)

2026-03-30 08:10:23 -07:00

default_soul.py

fix: reset default SOUL.md to baseline identity text (#3159)

2026-03-26 01:34:27 -07:00

doctor.py

fix(doctor): sync provider checks, add config migration, WAL and mem0 diagnostics (#5077)

2026-04-04 10:21:33 -07:00

env_loader.py

chore: remove ~100 unused imports across 55 files (#3016)

2026-03-25 15:02:03 -07:00

gateway.py

fix(gateway): use kickstart -k for atomic launchd restart

2026-04-05 11:59:28 -07:00

main.py

feat(plugins): plugin CLI registration system — decouple plugin commands from core

2026-04-05 12:34:11 -07:00

mcp_config.py

fix: add TTY guard to interactive CLI commands to prevent CPU spin (#3933)

2026-03-30 08:10:23 -07:00

memory_setup.py

fix(honcho): plugin drift overhaul -- observation config, chunking, setup wizard, docs, dead code cleanup

2026-04-05 12:34:11 -07:00

model_normalize.py

feat: /model command — models.dev primary database + --provider flag (#5181)

2026-04-05 01:04:44 -07:00

model_switch.py

fix: Ollama Cloud auth, /model switch persistence, and alias tab completion

2026-04-05 11:06:06 -07:00

models.py

fix(opencode-go): strip trailing /v1 from base URL for Anthropic models (#4918)

2026-04-03 18:47:51 -07:00

nous_subscription.py

Merge branch 'main' into rewbs/tool-use-charge-to-subscription

2026-03-31 09:29:43 +09:00

pairing.py

chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)

2026-03-25 19:47:58 -07:00

plugins_cmd.py

fix(plugins): reject plugin names that resolve to the plugins root

2026-04-05 18:40:45 -07:00

plugins.py

feat(plugins): plugin CLI registration system — decouple plugin commands from core

2026-04-05 12:34:11 -07:00

profiles.py

fix(memory): profile-scoped memory isolation and clone support (#4845)

2026-04-03 13:10:11 -07:00

providers.py

feat: /model command — models.dev primary database + --provider flag (#5181)

2026-04-05 01:04:44 -07:00

runtime_provider.py

fix: Ollama Cloud auth, /model switch persistence, and alias tab completion

2026-04-05 11:06:06 -07:00

setup.py

feat: add docs links to setup wizard sections (#5283)

2026-04-05 11:46:13 -07:00

skills_config.py

fix: webhook platform support — skip home channel prompt, disable tool progress (salvage #4363) (#4660)

2026-04-02 14:00:22 -07:00

skills_hub.py

fix(skills): validate hub bundle paths before install (#3986)

2026-03-30 08:37:19 -07:00

skin_engine.py

refactor: consolidate get_hermes_home() and parse_reasoning_effort() (#3062)

2026-03-25 15:54:28 -07:00

status.py

Merge branch 'main' into rewbs/tool-use-charge-to-subscription

2026-03-31 09:29:43 +09:00

tools_config.py

feat: add docs links to setup wizard sections (#5283)

2026-04-05 11:46:13 -07:00

uninstall.py

chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)

2026-03-25 19:47:58 -07:00

webhook.py

fix: replace user-facing hardcoded ~/.hermes paths with display_hermes_home()

2026-03-28 23:47:21 -07:00