ouyangbo/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions 10 Packages Projects Releases Wiki Activity

Commit Graph

  • f1e58d8c1a security(gateway): allow shared-group resume in persisted /resume fallback claudlos 2026-06-30 17:21:56 -05:00
  • 599a6391d4 security(gateway): fail closed on no-provenance persisted /resume for non-DM callers claudlos 2026-06-29 08:32:14 -05:00
  • 5248877c61 security(gateway): prove chat/thread origin for persisted /resume; tighten DM scoping claudlos 2026-06-28 19:27:02 -05:00
  • 33a5090bf6 security(gateway): fail closed on persisted /resume for identity-less callers claudlos 2026-06-28 15:48:02 -05:00
  • bb6e216aab security(gateway): scope Matrix /resume by thread, not just room claudlos 2026-06-28 10:48:58 -05:00
  • a0018cafd0 security(gateway): fail closed on blank-source rows in /resume scoping claudlos 2026-06-27 14:53:11 -05:00
  • c4f278c021 security(gateway): scope /resume and /sessions to the caller's origin (IDOR) claudlos 2026-06-25 00:02:13 -05:00
  • 5d613a5638 fix(terminal): route init_session bootstrap cd through Windows path conversion teknium1 2026-07-01 05:21:20 -07:00
  • 9ed7252a98 fix terminal cwd handling on windows LeonSGP43 2026-05-31 10:54:35 +08:00
  • ad5f3341d3 fix(terminal): prefer Git for Windows bash over Linux bash on Windows 灵越羽毛 2026-06-15 18:24:17 +08:00
  • ba0bc01d1f feat(delegate): remove model-facing toolsets arg — subagents always inherit parent's (#56386) Teknium 2026-07-01 05:35:26 -07:00
  • 1bfe08145c fix(gateway): pairing is a grant that syncs to the allowlist (#23778) (#56381) Teknium 2026-07-01 05:31:15 -07:00
  • 04b4310643 test(moa): loosen parallel-fan-out timing threshold to tolerate CI jitter (#56377) Teknium 2026-07-01 05:31:09 -07:00
  • d68d2716a7 fix(tui): use shared harden_import_path guard in slash_worker teknium1 2026-07-01 05:15:22 -07:00
  • 8dcbc910bf fix(tui): guard slash_worker sys.path against local package shadowing Christopher-Schulze 2026-06-23 19:27:22 +02:00
  • 7b45a22ddf Merge pull request #56382 from kshitijk4poor/chore/authormap-gromykoss-56372 kshitij 2026-07-01 17:59:06 +05:30
  • 3f6c6bd29e fix(vertex): surface Vertex on the desktop Keys tab for provider parity teknium1 2026-07-01 04:56:37 -07:00
  • c73e74386b feat(vertex): add Google Vertex AI provider for Gemini (OAuth2) Steve Lawton 2026-07-01 04:42:07 -07:00
  • a4af257a6d fix(browser): extend private-network guard to browser_console dsad 2026-06-29 01:10:54 +03:00
  • 0ebbfbcc84 chore: add Gromykoss to AUTHOR_MAP for PR #56372 salvage kshitijk4poor 2026-07-01 17:52:57 +05:30
  • 65a6a36093 fix(patch): preserve file Unicode when unicode_normalized strategy matches AJ 2026-07-01 17:38:28 +05:30
  • 2f167a2b84 fix: comment accuracy + AUTHOR_MAP for salvaged PR #50204 teknium1 2026-07-01 04:41:43 -07:00
  • 40dbfa0e3c fix(gateway): revive gateway on /restart under Restart=on-failure units Z 2026-06-21 22:57:05 +08:00
  • 0a75616514 security(browser): enforce cloud-metadata floor on all backends; CDP is non-local claudlos 2026-06-25 00:00:56 -05:00
  • 9f03095044 fix(telegram): cap initialize() with per-attempt timeout so unreachable fallback IPs can't hang startup Brett 2026-07-01 04:39:37 -07:00
  • d739194926 test(auth): mock new source-aware Nous state read boundary teknium1 2026-07-01 04:55:11 -07:00
  • 050e602de3 chore(release): map HODLCLONE author for PR #49351 salvage teknium1 2026-07-01 04:42:02 -07:00
  • 08d5bf9b06 fix(gateway): route session model sync through update_session_meta teknium1 2026-07-01 04:41:30 -07:00
  • 70f8b96d17 fix: preserve Nous runtime auth path label HODLCLONE 2026-06-21 18:28:41 -04:00
  • 19fb1adf44 test: avoid OpenRouter dependency in Nous fallback coverage HODLCLONE 2026-06-21 18:05:59 -04:00
  • 6ed2f5d76f fix: make Nous Portal access token resolution resilient HODLCLONE 2026-06-19 20:20:01 -04:00
  • cfbc7ed1f9 fix(browser): narrow credential-query denylist to unambiguous names teknium1 2026-07-01 04:47:58 -07:00
  • 937e56be92 fix(browser): block bracketed sensitive eval primitives yongyong 2026-06-21 08:39:04 +09:00
  • a0beb52a50 fix(browser): harden browser tool safety boundaries yongjin 2026-06-20 22:20:13 +09:00
  • 7eb9716ad7 fix(agent): apply persist override to the DB row only, never the live list (#48677) kyssta-exe 2026-07-01 17:21:38 +05:30
  • 34de127200 fix(auth): widen portal_base_url allowlist guard to runtime credential path teknium1 2026-07-01 04:41:55 -07:00
  • f3c5327e67 fix(auth): validate portal_base_url and migrate stale api.nousresearch.com (#44710) szzhoujiarui 2026-06-22 01:26:55 +08:00
  • 3b41df6d46 test(gateway): regression for multi-profile node symlink leak; AUTHOR_MAP teknium1 2026-07-01 04:42:01 -07:00
  • 9138176dcd fix(gateway): don't resolve node symlink into profile dir Jack Earnest 2026-06-18 22:42:42 +00:00
  • 50aaa426c1 fix(gateway): pairing store cannot bypass configured allowlist ygd58 2026-07-01 04:28:27 -07:00
  • 03bbd37dd7 fix(mcp): stop EventBridge silently dropping sessions.json-only changes rrevenanttt 2026-06-21 23:20:05 +03:00
  • 55c8b2c81f chore(release): add AUTHOR_MAP entry for udatny (#29433 salvage) teknium1 2026-07-01 04:37:16 -07:00
  • c126a99fc1 fix(subdirectory_hints): catch RuntimeError from Path.expanduser() ud 2026-05-20 21:08:17 +02:00
  • 18a9467fca fix(tui): prevent killpg suicide during MCP shutdown JabberELF 2026-06-18 21:21:00 +08:00
  • 04eed932eb test(gateway): cover auto-resume auth skip + fail-closed teknium1 2026-07-01 04:28:58 -07:00
  • 0de67ad604 fix(gateway): validate user authorization before auto-resume ygd58 2026-06-17 11:13:31 +02:00
  • 74e59b8b68 fix(security): close abbreviated-flag bypasses in git/sudo approval patterns srojk34 2026-07-01 13:20:23 +03:00
  • 723ccda275 fix(acp): also preserve archived rows on model-switch / restore saves kshitijk4poor 2026-07-01 17:04:29 +05:30
  • 897240462a fix(acp): stop _persist from deleting compression-archived history sasquatch9818 2026-06-21 23:19:18 +03:00
  • b4342a83bb fix(approval): close bare powershell Remove-Item bypass + add ri alias (review) kshitijk4poor 2026-07-01 17:02:06 +05:30
  • 4b92a8cd31 fix(approval): detect Windows destructive shell commands dsad 2026-07-01 13:03:21 +03:00
  • 4c2c54c78c fix(matrix): await inbound sync handlers Zeheng Huang 2026-07-01 04:26:27 -07:00
  • dc1ea005d9 fix+test(codex): self-persist projected turns; keep agent_persisted=True kshitijk4poor 2026-07-01 16:46:48 +05:30
  • 5558382457 fix(codex): persist app-server turns to session DB (fixes starved recall) Lubos Buracinsky 2026-06-19 21:10:02 +02:00
  • a76aa6198c fix(cli): flush un-persisted messages before /resume and /branch end the old session srojk34 2026-06-19 05:19:04 +03:00
  • 154c382d65 fix(gateway): recover from truncated responses Dutch Dim 2026-06-17 22:30:44 +02:00
  • 9cf47fef54 fix(auxiliary_client): demote the 2 sibling routing fall-throughs too (review) kshitijk4poor 2026-07-01 16:54:19 +05:30
  • c0d3ceb17e fix(auxiliary_client): dedup resolve_provider_client fall-through warnings kshitijk4poor 2026-07-01 16:49:55 +05:30
  • fb7a38ad21 fix(macos): compose launchd reload retry with _launchctl_bootstrap + drain-aware window kshitijk4poor 2026-07-01 16:38:31 +05:30
  • 7a7d19e73b fix(macos): retry launchd reload on transient bootstrap failure Fabio Fernandes Valente 2026-06-26 16:22:01 -05:00
  • d4e8c358c0 Merge pull request #56330 from kshitijk4poor/chore/authormap-valenteff kshitij 2026-07-01 16:49:16 +05:30
  • 3b739b990b fix(title_generator): strip think blocks from LLM output before extracting title shawchanshek 2026-07-01 03:28:29 -07:00
  • 037e389c4f Merge pull request #56325 from kshitijk4poor/chore/authormap-session-persist kshitij 2026-07-01 16:47:13 +05:30
  • 314cf43d50 test(matrix): assert real device_id in query_keys, not just guard-skip kshitijk4poor 2026-07-01 16:24:47 +05:30
  • 09dbe76955 fix(matrix): reset _device_id_unverified at start of connect() Gary Walker 2026-06-29 09:47:39 +10:00
  • 9048457eab fix(matrix): device_id fallback prevents E2EE init failure on fresh bot accounts Gary Walker 2026-06-28 15:02:04 +10:00
  • 2d8d08cae6 fix(api-server): require auth for /health/detailed and fail closed on weak keys SahilRakhaiya05 2026-07-01 02:58:14 -07:00
  • 9c870548e3 chore: add AUTHOR_MAP entry for valenteff (#53277 salvage) kshitijk4poor 2026-07-01 16:44:07 +05:30
  • 5126902f1d fix(title): honor configured auxiliary timeout shandian64 2026-06-08 13:57:47 +08:00
  • b3f55c2037 chore: add AUTHOR_MAP entries for session-persistence salvage batch kshitijk4poor 2026-07-01 16:38:56 +05:30
  • 5178b3f056 fix(code-exec): bind execute_code tool socket to a per-session RPC token SahilRakhaiya05 2026-07-01 02:52:04 -07:00
  • 5de65624d1 fix(moa): capture streamed aggregator output into full-turn traces (#56312) Teknium 2026-07-01 04:07:46 -07:00
  • 81595cd588 fix(dashboard): run plugin gate after auth + enable example fixture Teknium 2026-07-01 03:36:31 -07:00
  • b2e0086f1b fix(dashboard): enforce plugin disabled gate at request time and for bundled assets manusjs 2026-06-23 11:50:38 +00:00
  • 7cff95644d fix(dashboard): gate plugin asset serving and API mount on plugins.enabled manusjs 2026-06-16 22:44:06 +00:00
  • 8415c4703a Merge pull request #56317 from kshitijk4poor/chore/authormap-bitcryptic kshitij 2026-07-01 16:33:47 +05:30
  • d3c8667462 fix(slack): authorize bot/workflow senders before the no-user-id guard Tao Chen 2026-06-25 15:18:00 +08:00
  • fcbf850f33 chore: add AUTHOR_MAP entry for bitcryptic-gw (#53997 salvage) kshitijk4poor 2026-07-01 16:28:15 +05:30
  • 27347b2239 fix(gateway): align resume safety-net note with canonical recovery wording teknium1 2026-07-01 02:59:01 -07:00
  • c2db3ed7d8 fix(gateway): recover resume_pending sessions instead of sending a blank turn Adam Chiaravalle 2026-06-15 22:37:25 -04:00
  • d1d1d81900 fix(gateway): repair sibling tests + harden _adapter_for_source after fail-closed flip teknium1 2026-07-01 03:26:41 -07:00
  • 49a87bcd1e chore(release): map SahilRakhaiya05 contributor email for #44073 salvage teknium1 2026-07-01 02:53:09 -07:00
  • bb304b4914 fix(gateway): fail-closed external-surface defaults + profile-aware multiplex authz SahilRakhaiya05 2026-07-01 03:08:29 -07:00
  • 8e94e8f882 fix(discord): tag unverified channel-context senders like Slack threads srojk34 2026-07-01 13:26:20 +03:00
  • 23518a5e02 test(review): add integration guards for the two isolation wirings (review) kshitijk4poor 2026-07-01 16:15:15 +05:30
  • e2fa509bf3 fix(review): isolate the background-review fork from the canonical session arminanton 2026-07-01 16:14:55 +05:30
  • 242c9639a8 fix(cron): prevent multi-target delivery loop crash on per-target failure Swissly 2026-07-01 03:02:54 -07:00
  • d3010b74db test(agent): strengthen id-reuse regression + refresh flush docstring (review) kshitijk4poor 2026-07-01 16:00:19 +05:30
  • e4c6d1b22b fix(agent): persist messages by intrinsic marker to stop id() reuse data loss rrevenanttt 2026-07-01 15:53:11 +05:30
  • 1d6645b17f Merge pull request #56296 from kshitijk4poor/fix/gateway-force-exit-pidlock-release kshitij 2026-07-01 16:14:26 +05:30
  • b7adad1a72 test(error-classifier): parametrize 5xx overflow test over 500/502/503/529 kshitijk4poor 2026-07-01 15:47:46 +05:30
  • a04b7024ff fix(error-classifier): route 5xx context-overflow into compression pefontana 2026-07-01 15:46:47 +05:30
  • 74809b4e94 fix(cli): reap dead-locked worktrees so .worktrees/ can't grow unbounded (#56288) Teknium 2026-07-01 03:43:20 -07:00
  • 5c2dccd06f chore(release): map kangsoo-bit author for PR #47508 salvage teknium1 2026-07-01 03:24:40 -07:00
  • 7a2369718a fix(telegram): keep polling alive during transient bootstrap outages kangsoo-bit 2026-07-01 03:24:35 -07:00
  • 9dd6451c80 chore(release): add WXBR to AUTHOR_MAP for #46183 salvage teknium1 2026-07-01 02:57:59 -07:00
  • 59e7e9d007 fix(agent): persist recovered final responses WXBR 2026-06-14 22:43:56 +08:00
  • df27267ed7 fix(gateway): release PID file + runtime lock in the force-exit backstop kshitijk4poor 2026-07-01 15:59:37 +05:30
  • e23f723389 fix: make streaming reasoning-tag filter case-insensitive YLChen-007 2026-07-01 03:11:53 -07:00
  • f049227f31 fix(state): order conversation replay by id, not timestamp pprism13 2026-07-01 15:46:07 +05:30