Teknium 09a5cd8084 fix(auth): sync manual:device_code Codex pool entries on re-auth (#33744) ... #33164 made _save_codex_tokens sync the singleton-seeded `device_code` pool entry on Codex OAuth re-auth. That fixed the #33000 path but missed `manual:device_code` entries created by `hermes auth add openai-codex` (the recommended workaround for users who hit #33000 before #33164 landed). Every subsequent re-auth would refresh the device_code entry but leave the manual:device_code entry holding the consumed refresh token plus stale last_error_* markers — immediately recreating the 401 token_invalidated symptom on the next request, exactly as reported in #33538. Extend the refreshable source set to include `manual:device_code`. Completing the device-code OAuth flow proves the user owns the ChatGPT account, so it is safe to refresh every device-code-backed entry. Keep `manual:api_key` and other non-device-code manual sources untouched — those represent independent credentials. Closes #33538.		2026-05-28 01:33:10 -07:00
..
dashboard_auth	feat(dashboard-auth): HERMES_DASHBOARD_PUBLIC_URL / dashboard.public_url override	2026-05-27 02:12:27 -07:00
proxy	docs(auth): replace stale 'hermes login' references with 'hermes auth add'	2026-05-26 15:41:11 -07:00
__init__.py
_parser.py	Fix CLI verbose tool progress config fallback	2026-05-23 21:03:51 -07:00
_subprocess_compat.py
auth.py	fix(auth): sync manual:device_code Codex pool entries on re-auth (#33744)	2026-05-28 01:33:10 -07:00
auth_commands.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
azure_detect.py
backup.py	fix(backup): skip symlinked files in zip archives (#25289)	2026-05-25 05:07:52 -07:00
banner.py	fix(docker): bake build-time git SHA into the image	2026-05-28 15:14:05 +10:00
browser_connect.py
build_info.py	fix(docker): bake build-time git SHA into the image	2026-05-28 15:14:05 +10:00
bundles.py
callbacks.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
checkpoints.py
claw.py
cli_output.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
clipboard.py
codex_models.py	fix(codex): drop dead model slugs that HTTP 400 on ChatGPT Pro (#33424)	2026-05-27 12:16:15 -07:00
codex_runtime_plugin_migration.py
codex_runtime_switch.py
colors.py
commands.py	fix: ignore Telegram start pings	2026-05-27 02:41:24 -07:00
completion.py
config.py	fix(security): require API_SERVER_KEY before dispatching API server work	2026-05-28 00:25:08 -07:00
container_boot.py	fix(docker): make s6 lifecycle work for the unprivileged hermes user	2026-05-25 12:23:23 +10:00
copilot_auth.py
cron.py
curator.py
curses_ui.py	fix(cli): clamp curses color 8 for 8-color terminals (Docker)	2026-05-21 23:40:58 -07:00
debug.py	fix(debug): redact BlueBubbles webhook secrets	2026-05-24 15:43:48 -07:00
default_soul.py
dep_ensure.py
dingtalk_auth.py
doctor.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
dump.py	fix(docker): bake build-time git SHA into the image	2026-05-28 15:14:05 +10:00
env_loader.py	fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)	2026-05-25 15:18:55 -07:00
fallback_cmd.py	fix(fallback): merge fallback_providers with legacy fallback_model configurations	2026-05-23 05:24:57 -07:00
fallback_config.py	fix(fallback): merge fallback_providers with legacy fallback_model configurations	2026-05-23 05:24:57 -07:00
gateway.py	feat(docker): auto-redirect gateway run to supervised mode inside s6 image	2026-05-28 12:42:13 +10:00
gateway_windows.py	fix(gateway-windows): atomic write for .cmd and startup launcher scripts	2026-05-23 02:30:41 -07:00
goals.py
hooks.py
inventory.py
kanban.py	fix(kanban): close kanban.db FD after every connect() in long-lived processes	2026-05-27 22:07:49 -07:00
kanban_db.py	test(auth): update entitlement CI expectations	2026-05-28 00:19:31 -07:00
kanban_decompose.py	fix(kanban): close kanban.db FD after every connect() in long-lived processes	2026-05-27 22:07:49 -07:00
kanban_diagnostics.py
kanban_specify.py	fix(kanban): close kanban.db FD after every connect() in long-lived processes	2026-05-27 22:07:49 -07:00
kanban_swarm.py
logs.py
main.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
mcp_catalog.py	feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)	2026-05-26 12:48:14 -07:00
mcp_config.py	feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)	2026-05-26 12:48:14 -07:00
mcp_picker.py	feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)	2026-05-26 12:48:14 -07:00
memory_setup.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
migrate.py
model_catalog.py
model_normalize.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
model_switch.py
models.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
nous_account.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
nous_subscription.py	fix(auth): refresh Nous entitlement in tool menus	2026-05-28 00:19:31 -07:00
oneshot.py	fix(provider): make config.yaml model.provider the single source of truth (#31222)	2026-05-23 18:18:41 -07:00
pairing.py
platforms.py
plugins.py	feat(plugins): add register_dashboard_auth_provider hook on PluginContext	2026-05-27 02:12:27 -07:00
plugins_cmd.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
portal_cli.py	feat(portal): one-shot setup, status CLI, and Nous-included markers (#30860)	2026-05-23 02:39:09 -07:00
profile_describer.py	fix(skills): prune dependency/venv dirs from all skill scanners (#30042)	2026-05-21 14:18:02 -07:00
profile_distribution.py	fix(profile): reject symlinks in distributions (#25292)	2026-05-25 05:07:58 -07:00
profiles.py	fix(security): tighten .env file permissions to 0600 at all creation sites	2026-05-25 03:40:47 -07:00
providers.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
pt_input_extras.py
pty_bridge.py
relaunch.py
runtime_provider.py	fix(custom): pass custom provider extra body	2026-05-21 07:48:53 -07:00
secret_prompt.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
secrets_cli.py	fix(cli): show masked feedback for secret prompts	2026-05-25 01:20:33 -07:00
security_advisories.py
security_audit.py	feat(security): on-demand supply-chain audit via OSV.dev (#31460)	2026-05-24 15:15:16 -07:00
send_cmd.py
service_manager.py	fix(docker): align HOME for dashboard and s6 gateway services (#33481)	2026-05-28 13:42:27 +10:00
session_recap.py
setup.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
skills_config.py
skills_hub.py	fix: backfill official optional skill provenance	2026-05-27 13:39:58 -07:00
skin_engine.py
slack_cli.py
status.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
stdio.py
timeouts.py
tips.py	docs(auth): replace stale 'hermes login' references with 'hermes auth add'	2026-05-26 15:41:11 -07:00
tools_config.py	fix: expose context engine tools with saved toolsets	2026-05-28 00:28:42 -07:00
uninstall.py
voice.py
web_server.py	feat(dashboard-auth): honour X-Forwarded-Prefix + __Host-/__Secure- cookies	2026-05-27 02:12:27 -07:00
webhook.py	fix(state): restrict sensitive store file permissions	2026-05-24 04:55:18 -07:00
xai_retirement.py