Commit Graph

  • 88e6f9b98c fix(auxiliary): preserve max_tokens for NVIDIA NIM aux calls HexLab98 2026-06-29 16:56:09 +07:00
  • f53ba9bb54 fix(s6): dot-prefix gateway staging dir so svscan ignores it mid-build (#54834) Ben Barclay 2026-06-29 21:33:00 +10:00
  • dbad6d47d3 fix(gateway): also neutralize untrusted Matrix room name in prompt Teknium 2026-06-29 04:10:38 -07:00
  • 09666ceb76 fix(gateway): neutralize untrusted session metadata in prompts Xowiek 2026-04-08 02:28:09 +03:00
  • ea1372d2af fix(security): wire session-id sanitizer into artifact paths + API boundary teknium1 2026-06-29 04:08:45 -07:00
  • 1debd5e8f9 fix(security): add session-id filename sanitizer to prevent path traversal Xowiek 2026-06-29 04:08:31 -07:00
  • cdd8e0a271 test(gateway): exercise last_prompt_tokens in reset-activity tests teknium1 2026-06-29 04:07:21 -07:00
  • 0fe9755016 fix(gateway): use last_prompt_tokens for session-reset activity check Mibayy 2026-06-29 04:07:16 -07:00
  • 9e490138a0 fix(security): fail-closed feishu webhook rate limiter + whatsapp bridge path guard Mibayy 2026-06-29 04:08:04 -07:00
  • 576424cc1c fix(security): redact browser CDP endpoint logs Ruzzgar 2026-04-05 22:04:59 +03:00
  • 23c03ced75 fix(session-db): enrich NULL session metadata via upsert instead of INSERT OR IGNORE teknium1 2026-06-29 04:05:41 -07:00
  • 61f56d27db refactor(dashboard-auth): drop redundant _interactive_providers helper teknium1 2026-06-29 04:04:48 -07:00
  • f5ecbe1ec6 feat(dashboard): auto-initiate portal SSO redirect on unauthenticated load Ben 2026-06-29 17:33:16 +10:00
  • dc5ef20d89 test(reasoning-floor): isolate stale-timeout floor tests from config-module reload races (#54775) Teknium 2026-06-29 02:42:54 -07:00
  • 194bff0687 fix(gateway): confirm final delivery before suppressing send sgaofen 2026-06-29 02:14:08 -07:00
  • fa3dba4b30 docs(infographic): add list_profiles perf-fix infographic teknium1 2026-06-29 02:25:07 -07:00
  • 10c9eafde2 chore(attribution): map mango001@126.com -> max-chen for salvaged #51194 teknium1 2026-06-29 02:21:59 -07:00
  • 1bb7b59c5d fix: offload blocking profiles endpoints from asyncio event loop (#54523) Sahil-SS9 2026-06-29 03:05:32 +01:00
  • d5eee133eb perf(profiles): fix list_profiles O(N*M) wrapper rescan (6.4s -> 0.4s) chenxiang 2026-06-23 10:44:54 +08:00
  • 2f5950a83a chore(release): add telos-oc to AUTHOR_MAP for PR #14353 salvage teknium1 2026-06-29 02:13:43 -07:00
  • fa11b11cf5 fix: propagate key_env from custom_providers into ProviderDef Telos 2026-04-22 21:25:23 -07:00
  • 9f97915163 fix(browser): route open-timeout base through _safe_command_timeout teknium1 2026-06-29 02:11:33 -07:00
  • c79e6bceae fix(browser_tool): resolve race in _get_command_timeout cache returning None (#14331) Sanjay Santhanam 2026-06-29 02:10:00 -07:00
  • bf0d8fed8e fix(config): v32 migration flips baked-in verify_on_stop=true to false (#54740) Teknium 2026-06-29 01:51:08 -07:00
  • 75317d82d0 fix(vision): narrow the fan-out cap to the CPU encode burst only teknium1 2026-06-28 22:48:37 -07:00
  • eddfecd2ce fix(vision): cap vision_analyze fan-out concurrency process-wide Ben Barclay 2026-06-29 15:18:01 +10:00
  • 115e78c377 test(camofox): accept headers= kwarg in persistence test mocks teknium1 2026-06-29 01:13:58 -07:00
  • 41095fdb04 fix(camofox): register CAMOFOX_API_KEY in OPTIONAL_ENV_VARS teknium1 2026-06-29 01:01:57 -07:00
  • 08d6195bc4 fix(camofox): auto-recover from stale tab 404 on navigate kaishi00 2026-06-29 01:01:39 -07:00
  • fe38d50833 fix(tools): read browser.command_timeout in Camofox HTTP client liuhao1024 2026-06-07 07:04:33 +08:00
  • babd9168ba fix(browser): send Authorization header in Camofox HTTP calls when CAMOFOX_API_KEY is set 刘昊 2026-05-06 09:02:56 +08:00
  • 270456308c fix(tools): send listItemId instead of sessionKey in Camofox tab creation liuhao1024 2026-06-03 14:39:03 +08:00
  • 34e616e778 feat(slack): nudge stale installs to add mpim scopes; mark message.mpim required teknium1 2026-06-28 23:02:41 -07:00
  • 4125cc3b7c fix(slack): subscribe to message.mpim + mpim scopes so group DMs work Ben 2026-06-29 14:44:59 +10:00
  • 29f0968275 test(windows): harden pid-scan no-window assertion against captured-call leakage (#54707) Teknium 2026-06-29 01:01:29 -07:00
  • 0434a9a5ec chore: regenerate uv.lock for supermemory + mem0 extras Teknium 2026-06-28 22:44:17 -07:00
  • 1289f12812 fix(memory): lazy-install supermemory + mem0 SDKs like honcho/hindsight Ben Barclay 2026-06-29 13:36:46 +10:00
  • f860492842 test(desktop): match multiline spawn(ps, fullArgs) via regex like sibling sites teknium1 2026-06-28 22:46:57 -07:00
  • aa2ae36c3f fix(desktop): launch Windows backend as console python so child consoles are inherited, not flashed emozilla 2026-06-28 23:57:47 -04:00
  • 20b03d9aee i18n: add Custom Keys strings to all locale files Ben 2026-06-29 11:49:43 +10:00
  • 1c75e7c9d8 feat(dashboard): list & add arbitrary custom .env keys on the Keys page Ben 2026-06-29 11:19:03 +10:00
  • 23f245eda5 test(vision): cover Ollama /api/show vision capability routing (#54511) HexLab98 2026-06-29 07:13:00 +07:00
  • d7e573e54d fix(vision): detect Ollama vision models via /api/show (#54511) HexLab98 2026-06-29 07:13:00 +07:00
  • b481348fbc fix(agent): stream copilot ACP chat completions sgaofen 2026-04-23 00:30:22 -07:00
  • 0106082d1f fix(agent): return OpenAI-shaped copilot ACP tool calls sgaofen 2026-04-23 00:28:24 -07:00
  • 032d702140 fix(agent): omit stream_options for native Gemini streaming sgaofen 2026-06-28 22:37:18 -07:00
  • 25d35cce18 infographic: Windows CLH lock-timeout traceback suppression (#54436 salvage) Teknium 2026-06-28 21:24:48 -07:00
  • 98a7cfb8f9 fix(logging): suppress Windows lock timeout tracebacks helix4u 2026-06-28 15:10:35 -06:00
  • 74541beb9c fix(security): cap WeCom callback body size before pre-auth XML parse (#54615) Teknium 2026-06-28 22:35:43 -07:00
  • 0b733a8418 test(gateway): pin auto-reset cached-agent eviction (#10710) teknium1 2026-06-28 21:22:45 -07:00
  • b4300f2d96 fix(gateway): evict cached agent on auto-reset to prevent stale context summary leak marco0158 2026-04-16 11:00:25 +08:00
  • 61a4526ac7 fix(gateway): clear session-scoped model overrides on /resume Junass1 2026-06-28 21:16:13 -07:00
  • 476875acb9 Add dashboard backup upload and download Shannon Sands 2026-06-29 12:05:09 +10:00
  • 8fe800ee1a fix(file-tools): sanitize host/relative cwd override before it reaches container sandbox (#54447) (#54616) Ben Barclay 2026-06-29 15:32:20 +10:00
  • e1f4098b9f docs(cron): document explicit per-channel delivery targets for all platforms (#54630) Ben Barclay 2026-06-29 15:23:16 +10:00
  • 388268ecde Merge pull request #54568 from NousResearch/bb/shared-websocket-layer brooklyn! 2026-06-28 23:43:49 -05:00
  • fb0644fbc2 Merge pull request #54585 from NousResearch/bb/desktop-terminal-history brooklyn! 2026-06-28 23:38:16 -05:00
  • 1af109c79c test(cli): drop pytest dep + use real sentinel handlers in serve test Brooklyn Nicholson 2026-06-28 23:24:45 -05:00
  • 313a8c6833 fix(skills): replace string prefix check with strict path containment Ruzzgar 2026-04-10 18:05:30 +03:00
  • 0943e2a272 fix(cron): don't report a false 'gateway not running' on external-provider instances (#54600) Ben Barclay 2026-06-29 14:03:02 +10:00
  • e20ff352b9 test(matrix): authorize inviter in DM-invite fixture for new invite-auth gate Teknium 2026-06-28 19:29:24 -07:00
  • d836b2bac4 fix(matrix,mattermost): invite auth check + API path traversal guard aaronagent 2026-06-28 19:18:32 -07:00
  • 9cf9d3a28f chore(release): add AUTHOR_MAP entry for PR #53295 salvage Teknium 2026-06-28 19:16:46 -07:00
  • 163562bf88 fix: normalize lmstudio base urls lkevincc 2026-06-27 08:06:51 +10:00
  • 43eaf79ae6 chore: remove committed PR infographics and gitignore the path (#54564) Teknium 2026-06-28 20:46:35 -07:00
  • 14204b0646 test(agent): cover .hermes.md no-git-root cwd-only behavior teknium1 2026-06-28 19:09:33 -07:00
  • 306b6615cf fix(agent): limit .hermes.md parent walk to git repos only aaronagent 2026-06-28 19:09:33 -07:00
  • 1c0fa12edb feat(desktop): persist & restore terminal tabs + scrollback across relaunch Brooklyn Nicholson 2026-06-28 22:12:29 -05:00
  • 9d9a50c2bc test(cli): pin the hermes serve decoupling contract Brooklyn Nicholson 2026-06-28 22:11:48 -05:00
  • e684b808ad fix(desktop): route old runtimes through dashboard when serve is absent Brooklyn Nicholson 2026-06-28 22:10:42 -05:00
  • dff491a2b9 feat(cli): add headless hermes serve backend; desktop no longer launches dashboard Brooklyn Nicholson 2026-06-28 22:04:22 -05:00
  • 4488fe134b Merge pull request #54517 from NousResearch/bb/desktop-multiterminal brooklyn! 2026-06-28 21:52:14 -05:00
  • f019a999d8 docs: clarify desktop is self-contained, not dependent on the dashboard Brooklyn Nicholson 2026-06-28 21:50:33 -05:00
  • e9b95dfd19 fix(docker): include apps/shared in dashboard image build Brooklyn Nicholson 2026-06-28 21:43:56 -05:00
  • ae465e9fb8 Merge branch 'main' of github.com:NousResearch/hermes-agent into bb/desktop-multiterminal Brooklyn Nicholson 2026-06-28 21:37:52 -05:00
  • 1a1e00f37e fix(desktop): stop injecting ctrl-l into terminal startup Brooklyn Nicholson 2026-06-28 21:33:20 -05:00
  • 83f09f52f9 Merge pull request #54558 from NousResearch/bb/overlay-panels brooklyn! 2026-06-28 21:32:14 -05:00
  • 216ace4bf3 style(shared): apply workspace formatter to websocket helpers Brooklyn Nicholson 2026-06-28 21:30:43 -05:00
  • 5a2906a11b chore(desktop): keep the diff surgical Brooklyn Nicholson 2026-06-28 21:30:14 -05:00
  • f6ccf08ee6 refactor(web): centralize dashboard websocket URL calls Brooklyn Nicholson 2026-06-28 21:27:06 -05:00
  • 6776b2f9b5 feat(desktop): live gateway popout + statusbar/command-center polish Brooklyn Nicholson 2026-06-28 21:26:15 -05:00
  • 5a4bdfda50 fix(shared): close websocket clients deterministically Brooklyn Nicholson 2026-06-28 21:25:12 -05:00
  • 6c52e4a318 fix(desktop): match agent terminal scrollback to user tabs Brooklyn Nicholson 2026-06-28 21:22:17 -05:00
  • dfb561a3ae refactor(desktop+dashboard): extract shared WebSocket/JSON-RPC layer Brooklyn Nicholson 2026-06-28 21:20:35 -05:00
  • adacb16d62 fix(desktop): make agent terminal tabs fully readable Brooklyn Nicholson 2026-06-28 21:18:49 -05:00
  • dee41d0716 feat(dashboard): catalogue all memory-provider API keys in OPTIONAL_ENV_VARS Ben 2026-06-29 11:10:15 +10:00
  • e117cfdff0 feat(desktop): live agent terminals + agent-driven tab close Brooklyn Nicholson 2026-06-28 21:15:14 -05:00
  • 9f02eea1d2 style(desktop): prettier + eslint pass Brooklyn Nicholson 2026-06-28 21:04:43 -05:00
  • c8fd47be14 docs: add PR infographic for approval mode validation Teknium 2026-06-28 15:17:22 -07:00
  • dda3268d09 fix(approvals): warn and default to manual on unknown approvals.mode LIC99 2026-06-28 15:15:40 -07:00
  • 317b94871b chore(desktop): drop dead overlay primitives Brooklyn Nicholson 2026-06-28 21:03:04 -05:00
  • 991220747f feat(desktop): unify non-settings overlays under a shared Panel primitive Brooklyn Nicholson 2026-06-28 20:56:52 -05:00
  • 11183e8332 fix(profiles): validate custom alias names to prevent path traversal Teknium 2026-06-28 15:22:15 -07:00
  • 27ddd8fd80 fix(gateway): sanitize agent error messages, validate webhook gh args aaronagent 2026-06-28 15:25:25 -07:00
  • ec148f5d31 fix(agent): guard Anthropic interrupt, cap vision data-URL size aaronlab 2026-06-28 15:25:36 -07:00
  • 490f215a19 test: cover export-prefix stripping in .env parsers (PR #6659) Teknium 2026-06-28 15:25:35 -07:00
  • 5c1ac6c70d fix(config): strip export prefix in .env parsers across three modules aaronagent 2026-04-09 22:40:15 +08:00
  • f1cbe4308f fix(gateway): log error-notification failures instead of silently swallowing (#54472) Teknium 2026-06-28 18:52:51 -07:00
  • 3483424aaa fix(security): redact bare-token credentials in URL userinfo (#6396) (#54475) Teknium 2026-06-28 18:52:42 -07:00
  • 9860d93f2a fix(terminal): require approval for host-bound Docker commands (#54483) Teknium 2026-06-28 18:35:41 -07:00