Teknium 8081425a1c feat(security): make secret redaction off by default (#16794) ...

Flips security.redact_secrets from true to false in DEFAULT_CONFIG, and
the HERMES_REDACT_SECRETS env-var fallback in agent/redact.py now
requires explicit opt-in ("1"/"true"/"yes"/"on") to enable.

New installs and users without a security.redact_secrets key get pass-
through tool output. Existing users whose config.yaml explicitly sets
redact_secrets: true keep redaction on — the config-yaml -> env-var
bridges in hermes_cli/main.py and gateway/run.py still honor their
setting.

Also updates the inline config comments, website docs, and the
hermes-agent skill so /hermes config set security.redact_secrets true
is now the documented way to turn it on.

2026-04-27 21:24:08 -07:00

..

__init__.py

…

test_ai_gateway_models.py

refactor(ai-gateway): single source of truth for model catalog (#13304)

2026-04-20 22:21:21 -07:00

test_anthropic_model_flow_stale_oauth.py

fix: re-auth on stale OAuth token; read Claude Code credentials from macOS Keychain

2026-04-24 07:14:00 -07:00

test_anthropic_oauth_flow.py

…

test_anthropic_provider_persistence.py

…

test_api_key_providers.py

feat(providers): add GMI Cloud as a first-class API-key provider (#11955)

2026-04-27 11:17:59 -07:00

test_apply_model_switch_result_context.py

fix(cli): /model picker honors provider-specific context caps (#16030)

2026-04-26 05:43:31 -07:00

test_arcee_provider.py

test: stop testing mutable data — convert change-detectors to invariants (#13363)

2026-04-20 23:20:33 -07:00

test_argparse_flag_propagation.py

feat: shell hooks — wire shell scripts as Hermes hook callbacks

2026-04-20 20:53:51 -07:00

test_at_context_completion_filter.py

fix(tui): @folder: only yields directories, @file: only yields files

2026-04-21 14:31:48 -05:00

test_atomic_json_write.py

…

test_atomic_yaml_write.py

…

test_auth_codex_provider.py

fix(model): let Codex setup reuse or reauthenticate

2026-04-24 04:53:32 -07:00

test_auth_commands.py

fix: clarify auth retry guidance

2026-04-24 05:20:05 -07:00

test_auth_nous_provider.py

fix: validate nous auth status against runtime credentials

2026-04-24 05:20:05 -07:00

test_auth_provider_gate.py

…

test_auth_qwen_provider.py

…

test_auth_ssl_macos.py

fix(auth): honor SSL CA env vars across httpx + requests callsites

2026-04-24 03:00:33 -07:00

test_aux_config.py

fix(aux): add session_search extra_body and concurrency controls

2026-04-20 00:47:39 -07:00

test_azure_detect.py

feat(azure-foundry): auto-detect transport, models, context length

2026-04-25 18:48:43 -07:00

test_backup.py

feat(backup): exclude SQLite WAL/SHM/journal sidecars (#16576)

2026-04-27 06:43:52 -07:00

test_banner_git_state.py

…

test_banner_skills.py

…

test_banner.py

feat(banner): hyperlink startup banner title to latest GitHub release (#14945)

2026-04-23 23:28:34 -07:00

test_chat_skills_flag.py

…

test_claw.py

…

test_clear_stale_base_url.py

…

test_cmd_update.py

test: update stale tests to match current code (#11963)

2026-04-17 21:35:30 -07:00

test_coalesce_session_args.py

…

test_codex_cli_model_picker.py

fix(tests): unstick CI — sweep stale tests from recent merges (#12670)

2026-04-19 12:39:58 -07:00

test_codex_models.py

fix(model): let Codex setup reuse or reauthenticate

2026-04-24 04:53:32 -07:00

test_commands.py

feat(slack): register every gateway command as a native slash (Discord/Telegram parity) (#16164)

2026-04-26 11:38:32 -07:00

test_completion.py

…

test_config_drift.py

feat(delegate): orchestrator role and configurable spawn depth (default flat)

2026-04-21 14:23:45 -07:00

test_config_env_expansion.py

…

test_config_env_refs.py

fix(config): preserve env refs when save_config rewrites config (#11892)

2026-04-17 19:03:26 -07:00

test_config_validation.py

fix(gemini): tighten native routing and streaming replay

2026-04-19 12:40:08 -07:00

test_config.py

test: stop testing mutable data — convert change-detectors to invariants (#13363)

2026-04-20 23:20:33 -07:00

test_container_aware_cli.py

…

test_copilot_auth.py

…

test_copilot_context.py

fix(copilot): wire live /models max_prompt_tokens into context-window resolver

2026-04-24 05:09:08 -07:00

test_copilot_in_model_list.py

fix(model): repair Discord Copilot /model flow

2026-04-24 03:33:29 -07:00

test_copilot_token_exchange.py

fix(copilot): exchange raw GitHub token for Copilot API JWT

2026-04-24 05:09:08 -07:00

test_cron.py

feat(skills): consolidate find-nearby into maps as a single location skill

2026-04-19 05:19:22 -07:00

test_custom_provider_context_length.py

fix(context): honor custom_providers context_length on /model switch + bump probe tier to 256K (#15844)

2026-04-25 18:47:53 -07:00

test_custom_provider_model_switch.py

fix(model): avoid persisting key_env-resolved secrets to providers entry (#16372)

2026-04-26 21:52:12 -07:00

test_debug.py

fix(debug): distinguish empty-log from missing-log in report placeholder

2026-04-22 15:27:54 -05:00

test_deprecated_cwd_warning.py

…

test_detect_api_mode_for_url.py

fix: restrict provider URL detection to exact hostname matches

2026-04-20 22:14:29 -07:00

test_determine_api_mode_hostname.py

fix: extend hostname-match provider detection across remaining call sites

2026-04-20 22:14:29 -07:00

test_dingtalk_auth.py

test(dingtalk): cover QR device-flow auth + OpenClaw branding disclosure

2026-04-17 05:08:07 -07:00

test_doctor_command_install.py

…

test_doctor.py

fix(doctor): accept bare custom provider

2026-04-25 18:01:36 -07:00

test_env_loader.py

fix(cli): ensure project .env is sanitized before loading

2026-04-22 05:51:44 -07:00

test_env_sanitize_on_load.py

…

test_fallback_cmd.py

feat(cli): add 'hermes fallback' command to manage fallback providers (#16052)

2026-04-26 06:19:04 -07:00

test_gateway_linger.py

…

test_gateway_runtime_health.py

…

test_gateway_service.py

fix(gateway): kill tool subprocesses before adapter disconnect on drain timeout (#14728)

2026-04-23 13:59:29 -07:00

test_gateway_wsl.py

…

test_gateway.py

fix(gateway): recover stale pid and planned restart state

2026-04-22 16:33:46 -07:00

test_gemini_free_tier_setup_block.py

feat(gemini): block free-tier keys at setup + surface guidance on 429 (#15100)

2026-04-24 04:46:17 -07:00

test_gemini_provider.py

test: stop testing mutable data — convert change-detectors to invariants (#13363)

2026-04-20 23:20:33 -07:00

test_gmi_provider.py

fix(providers/gmi): post-salvage review fixes

2026-04-27 11:17:59 -07:00

test_hooks_cli.py

feat: shell hooks — wire shell scripts as Hermes hook callbacks

2026-04-20 20:53:51 -07:00

test_ignore_user_config_flags.py

feat(cli): add --ignore-user-config and --ignore-rules flags

2026-04-22 19:58:42 -07:00

test_image_gen_picker.py

fix(image-gen): persist plugin provider on reconfigure

2026-04-23 01:56:09 -07:00

test_launcher.py

…

test_logs.py

…

test_managed_installs.py

…

test_mcp_config.py

…

test_mcp_tools_config.py

…

test_memory_reset.py

…

test_model_catalog.py

feat(models): remote model catalog manifest for OpenRouter + Nous Portal (#16033)

2026-04-26 05:46:43 -07:00

test_model_normalize.py

fix(model-normalize): pass DeepSeek V-series IDs through instead of folding to deepseek-chat

2026-04-24 05:24:54 -07:00

test_model_picker_viewport.py

refactor(cli): align model picker viewport with PR #11260 vocabulary

2026-04-17 06:33:21 -07:00

test_model_provider_persistence.py

feat: add Step Plan provider support (salvage #6005)

2026-04-22 02:59:58 -07:00

test_model_switch_context_display.py

fix(context): honor custom_providers context_length on /model switch + bump probe tier to 256K (#15844)

2026-04-25 18:47:53 -07:00

test_model_switch_copilot_api_mode.py

…

test_model_switch_custom_providers.py

fix(opencode): derive api_mode from target model, not stale config default (#15106)

2026-04-24 04:58:46 -07:00

test_model_switch_opencode_anthropic.py

fix(opencode): derive api_mode from target model, not stale config default (#15106)

2026-04-24 04:58:46 -07:00

test_model_switch_variant_tags.py

…

test_model_validation.py

fix(azure-foundry): auto-route gpt-5.x / codex / o-series to Responses API (#16361)

2026-04-26 21:33:31 -07:00

test_models_dev_preferred_merge.py

feat(/model): merge models.dev entries for lesser-loved providers (#14221)

2026-04-22 17:33:42 -07:00

test_models.py

fix(tui): resolve startup model aliases statically

2026-04-25 14:13:02 -05:00

test_non_ascii_credential.py

fix(env_loader): warn when non-ASCII stripped from credential env vars (#13300)

2026-04-20 22:14:03 -07:00

test_nous_hermes_non_agentic.py

…

test_nous_subscription.py

fix(cli): coerce use_gateway config flags in tool routing

2026-04-26 19:02:55 -07:00

test_ollama_cloud_auth.py

fix(opencode): derive api_mode from target model, not stale config default (#15106)

2026-04-24 04:58:46 -07:00

test_ollama_cloud_provider.py

…

test_opencode_go_in_model_list.py

feat(/model): merge models.dev entries for lesser-loved providers (#14221)

2026-04-22 17:33:42 -07:00

test_opencode_go_validation_fallback.py

fix(/model): accept provider switches when /models is unreachable

2026-04-21 05:19:43 -07:00

test_overlay_slug_resolution.py

fix(model_picker): detect mapped-provider auth-store credentials

2026-04-24 05:20:05 -07:00

test_path_completion.py

…

test_placeholder_usage.py

…

test_plugin_cli_registration.py

…

test_plugin_scanner_recursion.py

feat(plugins): pluggable image_gen backends + OpenAI provider (#13799)

2026-04-21 21:30:10 -07:00

test_plugins_cmd.py

…

test_plugins.py

refactor(spotify): convert to built-in bundled plugin under plugins/spotify (#15174)

2026-04-24 07:06:11 -07:00

test_profile_export_credentials.py

…

test_profiles.py

fix(profiles): stage profile imports to prevent directory clobbering

2026-04-23 03:02:34 -07:00

test_provider_config_validation.py

fix(config): preserve list-format models in custom_providers normalize

2026-04-23 02:37:07 -07:00

test_pty_bridge.py

feat(web): add /api/pty WebSocket bridge to embed TUI in dashboard

2026-04-24 10:51:49 -04:00

test_reasoning_effort_menu.py

…

test_redact_config_bridge.py

feat(security): make secret redaction off by default (#16794)

2026-04-27 21:24:08 -07:00

test_resolve_last_session.py

fix(cli): tighten MRU lookup and session DB cleanup

2026-04-27 08:52:12 -07:00

test_runtime_provider_resolution.py

fix(azure-foundry): auto-route gpt-5.x / codex / o-series to Responses API (#16361)

2026-04-26 21:33:31 -07:00

test_session_browse.py

fix(sessions): /save lands under $HERMES_HOME, widen browse+TUI picker, force-refresh ollama-cloud on setup (#16296)

2026-04-26 18:49:48 -07:00

test_sessions_delete.py

test(sessions): wire sessions_dir through auto-prune + file-cleanup regression tests

2026-04-26 18:31:07 -07:00

test_set_config_value.py

…

test_setup_agent_settings.py

fix(setup): stop hardcoding max-iterations copy

2026-04-19 00:28:25 -07:00

test_setup_hermes_script.py

…

test_setup_matrix_e2ee.py

…

test_setup_model_provider.py

…

test_setup_noninteractive.py

feat(setup): auto-reconfigure on existing installs (#15879)

2026-04-25 22:02:02 -07:00

test_setup_ollama_cloud_force_refresh.py

fix(sessions): /save lands under $HERMES_HOME, widen browse+TUI picker, force-refresh ollama-cloud on setup (#16296)

2026-04-26 18:49:48 -07:00

test_setup_openclaw_migration.py

Update env vars for openclaw migration

2026-04-20 14:56:04 -07:00

test_setup_prompt_menus.py

…

test_setup_reconfigure.py

feat(setup): auto-reconfigure on existing installs (#15879)

2026-04-25 22:02:02 -07:00

test_setup.py

fix(cli): validate user-defined providers consistently

2026-04-24 04:48:56 -07:00

test_skills_config.py

fix(tests): resolve 17 persistent CI test failures (#15084)

2026-04-24 03:46:46 -07:00

test_skills_hub.py

feat(skills): install skills from a direct HTTP(S) URL (#16323)

2026-04-26 20:57:10 -07:00

test_skills_install_flags.py

…

test_skills_skip_confirm.py

…

test_skills_subparser.py

…

test_skin_engine.py

fix: align status bar skin tests with upstream main

2026-04-22 13:20:02 -07:00

test_spotify_auth.py

feat(spotify): interactive setup wizard + docs page (#15130)

2026-04-24 05:30:05 -07:00

test_status_model_provider.py

…

test_status.py

fix: validate nous auth status against runtime credentials

2026-04-24 05:20:05 -07:00

test_subparser_routing_fallback.py

…

test_subprocess_timeouts.py

…

test_suppress_eio_on_interrupt.py

fix(cli): suppress OSError EIO on interrupt shutdown

2026-04-25 18:25:13 -07:00

test_terminal_menu_fallbacks.py

…

test_timeouts.py

fix(config): add stale timeout settings

2026-04-20 00:52:50 -07:00

test_tips.py

…

test_tool_token_estimation.py

…

test_tools_config.py

fix(cron): keep homeassistant toolset enabled when HASS_TOKEN is set (#16208)

2026-04-26 12:55:58 -07:00

test_tools_disable_enable.py

…

test_tui_npm_install.py

fix(tui): mouse + keyboard text selection in the composer (#16732)

2026-04-27 16:43:48 -07:00

test_tui_resume_flow.py

chore: uptick

2026-04-27 08:52:12 -07:00

test_update_autostash.py

…

test_update_check.py

test: remove 8 flaky tests that fail under parallel xdist scheduling (#12784)

2026-04-19 19:38:02 -07:00

test_update_config_clears_custom_fields.py

fix(anthropic): complete third-party Anthropic-compatible provider support (#12846)

2026-04-19 22:43:09 -07:00

test_update_gateway_restart.py

fix(gateway): drain-aware hermes update + faster still-working pings (#14736)

2026-04-23 14:01:57 -07:00

test_update_hangup_protection.py

fix(update): survive mid-update terminal disconnect (#11960)

2026-04-17 21:29:24 -07:00

test_user_providers_model_switch.py

fix(cli): non-zero /model counts for native OpenAI and direct API rows

2026-04-24 05:48:15 -07:00

test_voice_wrapper.py

feat(tui): match CLI's voice slash + VAD-continuous recording model

2026-04-23 16:18:15 -07:00

test_web_server_host_header.py

fix(web_server,whatsapp-bridge): validate Host header against bound interface (#13530)

2026-04-21 06:26:35 -07:00

test_web_server.py

feat(dashboard): page-scoped plugin slots for built-in pages (#15658)

2026-04-25 06:55:35 -07:00

test_web_ui_build.py

fix(cli): check hermes_cli/web_dist/ not web/dist/ for build staleness

2026-04-26 18:43:57 -07:00

test_webhook_cli.py

…

test_xiaomi_provider.py

fix(normalize): lowercase Xiaomi model IDs for case-insensitive config (#15066)

2026-04-24 03:33:05 -07:00