Ben 865cae4f61 feat(dashboard-auth): json-lines audit log at $HERMES_HOME/logs/dashboard-auth.log ...

Phase 1, Task 1.4. Records every auth event (login start/success/failure,
logout, refresh success/failure, revoke, session verify failure, WS
ticket mint) as one JSON object per line. Token-like kwargs (access_token,
refresh_token, code, code_verifier, state, ticket, cookie, Authorization)
are dropped before serialisation so the log never contains live secrets.

Write failures log at WARNING but never raise — auth flows must not fail
because the audit logger broke.

2026-05-27 02:12:27 -07:00

..

__init__.py

…

conftest.py

…

test_anthropic_model_flow_stale_oauth.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_anthropic_oauth_flow.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_anthropic_provider_persistence.py

…

test_api_key_providers.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_apply_model_switch_result_context.py

…

test_apply_profile_override.py

…

test_arcee_provider.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_argparse_flag_propagation.py

Fix CLI verbose tool progress config fallback

2026-05-23 21:03:51 -07:00

test_at_context_completion_filter.py

…

test_atomic_json_write.py

…

test_atomic_yaml_write.py

…

test_auth_codex_provider.py

…

test_auth_commands.py

test(auth): align copilot-remove test with borrowed-credential policy (#31416)

2026-05-25 01:23:31 -07:00

test_auth_loopback_ssh_hint.py

…

test_auth_manual_paste.py

…

test_auth_nous_provider.py

…

test_auth_profile_fallback.py

…

test_auth_provider_gate.py

…

test_auth_qwen_provider.py

fix(cli): validate runtime token refresh capability in Qwen auth status

2026-05-23 17:47:36 -07:00

test_auth_ssl_macos.py

…

test_auth_toctou_file_modes.py

…

test_auth_usable_secret.py

security: harden API server key placeholder handling (#30738)

2026-05-24 04:25:32 -07:00

test_auth_xai_oauth_provider.py

…

test_aux_config.py

…

test_azure_detect.py

…

test_azure_foundry_entra.py

…

test_backup.py

fix(backup): skip symlinked files in zip archives (#25289)

2026-05-25 05:07:52 -07:00

test_banner_git_state.py

…

test_banner_pip_update.py

…

test_banner_skills.py

…

test_banner.py

…

test_bedrock_model_picker.py

…

test_bundles.py

…

test_chat_skills_flag.py

…

test_claw.py

…

test_clear_stale_base_url.py

…

test_cli_output.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_cmd_update.py

…

test_coalesce_session_args.py

…

test_codex_cli_model_picker.py

…

test_codex_models.py

…

test_codex_runtime_plugin_migration.py

…

test_codex_runtime_switch.py

…

test_commands.py

…

test_completion.py

…

test_config_drift.py

…

test_config_env_expansion.py

…

test_config_env_refs.py

…

test_config_validation.py

…

test_config.py

fix(dashboard): suffix-allowlist plugin assets + denylist subprocess-influencing env vars (#32277)

2026-05-25 15:07:19 -07:00

test_container_aware_cli.py

…

test_container_boot.py

fix(container_boot): publish reconciled service dirs atomically

2026-05-24 18:05:33 -07:00

test_copilot_auth.py

…

test_copilot_catalog_oauth_fallback.py

…

test_copilot_context.py

…

test_copilot_in_model_list.py

…

test_copilot_token_exchange.py

…

test_cron.py

…

test_curator_archive_prune.py

…

test_curator_recent_run_notice.py

…

test_curator_run.py

…

test_curator_status.py

…

test_curses_color_compat.py

fix(cli): clamp curses color 8 for 8-color terminals (Docker)

2026-05-21 23:40:58 -07:00

test_custom_provider_context_length.py

…

test_custom_provider_model_switch.py

…

test_dashboard_auth_audit.py

feat(dashboard-auth): json-lines audit log at $HERMES_HOME/logs/dashboard-auth.log

2026-05-27 02:12:27 -07:00

test_dashboard_auth_gate.py

feat(dashboard): stash auth_required flag on app.state

2026-05-27 02:12:27 -07:00

test_dashboard_auth_plugin_hook.py

feat(plugins): add register_dashboard_auth_provider hook on PluginContext

2026-05-27 02:12:27 -07:00

test_dashboard_auth_provider_base.py

test(dashboard-auth): cover registry register/get/list/clear semantics

2026-05-27 02:12:27 -07:00

test_dashboard_browser_safe_imports.py

…

test_dashboard_lifecycle_flags.py

…

test_dashboard_profiles_nav_label.py

…

test_debug.py

fix(debug): redact BlueBubbles webhook secrets

2026-05-24 15:43:48 -07:00

test_dep_ensure.py

…

test_deprecated_cwd_warning.py

…

test_destructive_slash_confirm_gate.py

…

test_detect_api_mode_for_url.py

…

test_determine_api_mode_hostname.py

…

test_dingtalk_auth.py

…

test_discord_skill_clamp_warning.py

…

test_doctor_command_install.py

…

test_doctor_dedicated_provider_skip.py

…

test_doctor.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_env_load_cache.py

…

test_env_loader.py

fix(env): strip null bytes from .env before python-dotenv loads

2026-05-23 17:17:05 -07:00

test_env_sanitize_on_load.py

…

test_fallback_cmd.py

fix(fallback): merge fallback_providers with legacy fallback_model configurations

2026-05-23 05:24:57 -07:00

test_gateway_linger.py

…

test_gateway_platform_gating.py

…

test_gateway_proc_fallback.py

…

test_gateway_runtime_health.py

…

test_gateway_s6_dispatch.py

fix(service_manager): friendly errors for missing slots and s6-svc failures

2026-05-24 18:05:33 -07:00

test_gateway_service_paths.py

…

test_gateway_service.py

…

test_gateway_windows.py

…

test_gateway_wsl.py

…

test_gateway.py

…

test_gemini_free_tier_setup_block.py

…

test_gemini_provider.py

…

test_gmi_provider.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_goals.py

…

test_hooks_cli.py

…

test_ignore_user_config_flags.py

…

test_image_gen_picker.py

refactor(image_gen): port FAL backend to plugins/image_gen/fal

2026-05-22 04:10:45 -07:00

test_install_cua_driver.py

…

test_inventory.py

…

test_kanban_blocked_sticky.py

…

test_kanban_boards.py

…

test_kanban_cli.py

…

test_kanban_core_functionality.py

…

test_kanban_db_init.py

…

test_kanban_db.py

fix(kanban): scratch tasks must not inherit board.default_workdir (#28818)

2026-05-24 15:48:58 -07:00

test_kanban_decompose_db.py

…

test_kanban_decompose.py

…

test_kanban_diagnostics.py

…

test_kanban_notify.py

fix(tests): allowlist tmp_path for kanban_notify artifact delivery (#30852)

2026-05-23 02:34:34 -07:00

test_kanban_promote.py

feat(kanban): --ids bulk promote + AUTHOR_MAP entry for #29464

2026-05-23 23:10:36 -07:00

test_kanban_specify_db.py

…

test_kanban_specify.py

…

test_kanban_swarm.py

…

test_launcher.py

…

test_list_picker_providers.py

…

test_logs.py

…

test_managed_installs.py

…

test_mcp_add_command_dest.py

…

test_mcp_catalog.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

test_mcp_config.py

…

test_mcp_reload_confirm_gate.py

…

test_mcp_tools_config.py

feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)

2026-05-26 12:48:14 -07:00

test_memory_reset.py

…

test_migrate_xai.py

…

test_model_catalog.py

…

test_model_normalize.py

…

test_model_picker_viewport.py

…

test_model_provider_persistence.py

…

test_model_switch_context_display.py

…

test_model_switch_copilot_api_mode.py

…

test_model_switch_custom_providers.py

…

test_model_switch_opencode_anthropic.py

…

test_model_switch_variant_tags.py

…

test_model_validation.py

feat(opencode-go): route qwen3.7-max via anthropic_messages

2026-05-26 20:44:43 -07:00

test_models_dev_preferred_merge.py

…

test_models.py

chore(models): swap qwen3.6-plus → qwen3.7-max in openrouter+nous lists (#32809)

2026-05-26 14:01:47 -07:00

test_non_ascii_credential.py

…

test_nous_auth_status_cache.py

…

test_nous_hermes_non_agentic.py

…

test_nous_inference_url_validation.py

fix(security): wire Nous URL allowlist into refresh / mint persistence sites

2026-05-22 14:17:40 -07:00

test_nous_subscription.py

…

test_ollama_cloud_auth.py

…

test_ollama_cloud_provider.py

…

test_openai_codex_model_validation_fallback.py

…

test_opencode_go_flat_namespace.py

…

test_opencode_go_in_model_list.py

…

test_opencode_go_validation_fallback.py

…

test_overlay_slug_resolution.py

…

test_path_completion.py

…

test_pin_kanban_board_env.py

…

test_pip_install_detection.py

…

test_placeholder_usage.py

…

test_plugin_auxiliary_tasks.py

feat(plugins): add register_auxiliary_task() to PluginContext API

2026-05-23 17:49:47 -07:00

test_plugin_cli_registration.py

…

test_plugin_scanner_recursion.py

…

test_plugins_cmd.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_plugins_transcription_registration.py

feat(stt): add register_transcription_provider() plugin hook

2026-05-25 01:41:19 -07:00

test_plugins_tts_registration.py

feat(tts): add register_tts_provider() plugin hook (closes #30398)

2026-05-24 18:04:54 -07:00

test_plugins.py

…

test_post_setup_gating.py

…

test_profile_describer.py

…

test_profile_distribution.py

fix(profile): reject symlinks in distributions (#25292)

2026-05-25 05:07:58 -07:00

test_profile_export_credentials.py

…

test_profiles_s6_hooks.py

fix(profiles): short-circuit s6 hooks on host before importing service_manager

2026-05-24 18:07:47 -07:00

test_profiles.py

…

test_project_plugin_rce_bypass.py

test(plugins): regression coverage for project-plugin RCE chain (#29156)

2026-05-23 01:43:52 -07:00

test_prompt_api_key.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_provider_config_validation.py

…

test_proxy.py

docs(auth): replace stale 'hermes login' references with 'hermes auth add'

2026-05-26 15:41:11 -07:00

test_pty_bridge.py

…

test_reasoning_effort_menu.py

…

test_redact_config_bridge.py

…

test_regression_16767.py

…

test_relaunch.py

…

test_resolve_last_session.py

…

test_runtime_provider_resolution.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_secret_prompt.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_security_advisories.py

…

test_security_audit.py

feat(security): on-demand supply-chain audit via OSV.dev (#31460)

2026-05-24 15:15:16 -07:00

test_send_cmd.py

…

test_service_manager.py

fix(docker): make s6 lifecycle work for the unprivileged hermes user

2026-05-25 12:23:23 +10:00

test_session_browse.py

…

test_session_handoff.py

…

test_session_recap.py

…

test_sessions_delete.py

…

test_set_config_value.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_setup_agent_settings.py

…

test_setup_hermes_script.py

…

test_setup_irc.py

…

test_setup_matrix_e2ee.py

…

test_setup_model_provider.py

…

test_setup_noninteractive.py

…

test_setup_ollama_cloud_force_refresh.py

…

test_setup_openclaw_migration.py

…

test_setup_prompt_menus.py

fix(cli): show masked feedback for secret prompts

2026-05-25 01:20:33 -07:00

test_setup_reconfigure.py

…

test_setup.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_skills_config.py

…

test_skills_hub.py

fix: harden skill trust source matching (#31229)

2026-05-25 01:51:15 -07:00

test_skills_install_flags.py

…

test_skills_skip_confirm.py

…

test_skills_subparser.py

…

test_skin_engine.py

…

test_slack_cli.py

…

test_spotify_auth.py

…

test_startup_plugin_gating.py

…

test_status_model_provider.py

…

test_status.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_subparser_routing_fallback.py

…

test_subprocess_timeouts.py

…

test_suppress_eio_on_interrupt.py

…

test_teams_pipeline_plugin_cli.py

…

test_tencent_tokenhub_provider.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_terminal_menu_fallbacks.py

…

test_timeouts.py

fix(codex): size and propagate timeouts for Responses-API requests; lower stale defaults

2026-05-25 01:47:55 -07:00

test_tips.py

…

test_tool_token_estimation.py

…

test_tools_config.py

fix: run computer use post-setup when enabling tool

2026-05-22 01:24:11 -07:00

test_tools_disable_enable.py

…

test_tts_picker.py

feat(tts): add register_tts_provider() plugin hook (closes #30398)

2026-05-24 18:04:54 -07:00

test_tui_bundled.py

…

test_tui_npm_install.py

fix(tui): surface verbose tool details (#30225)

2026-05-22 00:16:52 -05:00

test_tui_resume_flow.py

perf(termux): speed up bare cli prompt startup

2026-05-22 14:27:38 -07:00

test_update_autostash.py

…

test_update_check.py

…

test_update_concurrent_quarantine.py

test+harden(cli): cover parent-chain walk in concurrent-instance detection

2026-05-24 19:51:46 -07:00

test_update_config_clears_custom_fields.py

…

test_update_hangup_protection.py

…

test_update_post_pull_syntax_guard.py

…

test_update_stale_dashboard.py

…

test_update_yes_flag.py

…

test_update_zip_symlink_reject.py

fix(tests): four pre-existing flakes from the security cluster merge (#32072)

2026-05-25 05:50:29 -07:00

test_user_providers_model_switch.py

…

test_video_gen_picker.py

…

test_voice_wrapper.py

…

test_web_oauth_dispatch.py

…

test_web_server_cron_profiles.py

fix(cron): reject id mutation + validate output paths under OUTPUT_DIR

2026-05-25 01:15:24 -07:00

test_web_server_host_header.py

fix(dashboard): validate WebSocket Host and Origin

2026-05-24 15:00:44 -07:00

test_web_server_oauth_write.py

Protect dashboard OAuth credentials with the same file-safety guarantees as other auth paths

2026-05-24 17:47:24 -07:00

test_web_server.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_web_ui_build.py

…

test_webhook_cli.py

fix(state): restrict sensitive store file permissions

2026-05-24 04:55:18 -07:00

test_whatsapp_setup_ordering.py

…

test_xai_oauth_pkce_token_exchange.py

…

test_xai_provider_labels.py

fix(model): include Premium+ in xAI OAuth label

2026-05-24 18:12:16 -07:00

test_xai_retirement.py

…

test_xiaomi_provider.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00