-
a61baa9615
feat(desktop): PR-style file diffs in chat
Brooklyn Nicholson
2026-06-22 05:04:13 -05:00
-
ebd38e1280
test(agent): regression for token-only compression progress (#39550, #23767)
kshitijk4poor
2026-06-22 15:26:29 +05:30
-
87b60ae49a
no-mistakes(review): guard token-delta status msg on actual compression in overflow handler
David Gutowsky
2026-06-20 04:06:36 +00:00
-
47b6b4cf85
fix #39550: detect token-only compression success
David Gutowsky
2026-06-20 03:02:04 +00:00
-
ab22317d09
Merge pull request #50214 from kshitijk4poor/salvage/desktop-rename-branched-50143
kshitij
2026-06-22 15:15:30 +05:30
-
-
-
-
5ff11a689b
feat(cli): /timestamps command + timestamps in /history (#50506)
Teknium
2026-06-21 22:44:25 -07:00
-
b9b4756ab4
fix dashboard chat session titles
Shannon Sands
2026-06-22 12:56:02 +10:00
-
5dae502b86
Address email pairing review feedback
Shannon Sands
2026-06-18 17:21:43 +10:00
-
2455e1801b
Make email pairing opt-in
Shannon Sands
2026-06-18 14:26:45 +10:00
-
74f0dd62e8
feat(cli): Ctrl+G submits the edited draft on save (TUI parity) (#50560)
Teknium
2026-06-21 22:43:55 -07:00
-
4b09903de5
fix Nous auth refresh for idle agents
Shannon Sands
2026-06-18 10:32:49 +10:00
-
b5bd66eac9
fix(telegram): observed/replied group docs of any type are cached too
teknium1
2026-06-21 20:43:51 -07:00
-
4314d451ca
fix(gateway): accept any inbound file type across all messaging platforms
teknium1
2026-06-21 20:31:40 -07:00
-
de6b3ae377
fix(terminal): bridge docker_extra_args to TERMINAL_DOCKER_EXTRA_ARGS in CLI + gateway (#50631)
Ben Barclay
2026-06-22 15:41:23 +10:00
-
6202fdfc35
fix(container): detect dashboard role under s6-overlay v3 (#49196) (#50600)
Ben Barclay
2026-06-22 15:35:38 +10:00
-
e448b21414
feat(dashboard): interactive auth setup on no-provider non-loopback bind (#50551)
Teknium
2026-06-21 20:21:48 -07:00
-
9e96e70995
feat(cli): /prompt — compose your next prompt in $EDITOR (#50509)
Teknium
2026-06-21 20:21:33 -07:00
-
95d53c3bcb
feat(cli): /reasoning full — show complete thinking, not 10-line clamp (#50499)
Teknium
2026-06-21 20:21:11 -07:00
-
b0a25980f8
fix(terminal): make hermes install dir reachable in subshell PATH (#50534)
Teknium
2026-06-21 20:00:06 -07:00
-
4c1934dd87
docs: repoint remaining stale gateway/platforms adapter refs to plugins/platforms
Hermes Agent
2026-06-21 19:04:22 -07:00
-
0768ed3b33
docs(agents): fix stale platform adapter path in token-lock note
TutkuEroglu
2026-06-22 02:59:54 +03:00
-
7130d60861
feat(providers): remove google-gemini-cli + google-antigravity OAuth providers (#50492)
Teknium
2026-06-21 19:53:27 -07:00
-
5bf23ff251
fix(banner): don't advertise toolsets/skills the agent wasn't given (#50497)
Teknium
2026-06-21 19:08:54 -07:00
-
8cfcbd327d
fix(process): SIGKILL the whole tree on escalation, not just wait_procs survivors
teknium1
2026-06-21 18:09:58 -07:00
-
8cbb34b2bf
chore: map tkwong co-author email for #15008 SIGKILL-escalation credit
teknium1
2026-06-21 17:53:08 -07:00
-
8cecaf0b29
feat(process): escalate SIGTERM->SIGKILL on host-pid termination after grace
teknium1
2026-06-21 17:52:23 -07:00
-
41fe086eb6
style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)
teknium1
2026-06-21 18:19:18 -07:00
-
f45ace9318
feat(security): startup security posture audit (warn-on-load)
teknium1
2026-06-21 18:06:01 -07:00
-
eb51c180e6
fix(docker): replace dashboard --insecure with basic-auth provider
teknium1
2026-06-21 17:32:56 -07:00
-
7726ce3040
fix(security): close hermes-0day MCP-persistence attack surface
teknium1
2026-06-21 17:07:23 -07:00
-
9bf9a9f1f1
fix(swe-runner): move logging.basicConfig out of Runner __init__ into main
teknium1
2026-06-21 18:09:53 -07:00
-
0a7ae28ebc
fix(compressor): remove logging.basicConfig from library class __init__
annguyenNous
2026-06-22 07:55:19 +07:00
-
2b3a4f0af8
fix(agent): strip stale reasoning_content when falling back to a strict provider (#50480)
Teknium
2026-06-21 18:05:07 -07:00
-
73340d8be6
chore: add buihongduc132 to AUTHOR_MAP for mem0 salvage
teknium1
2026-06-21 17:12:15 -07:00
-
452a725ae1
fix(mem0): address PR review — restore docstrings, keep api_key required
buihongduc132
2026-05-04 13:05:30 +07:00
-
b6d2ac176e
feat(mem0): add self-hosted support via MEM0_HOST / host config
buihongduc132
2026-04-21 13:50:45 +07:00
-
012f40c98c
fix(status): cross-platform start-time fingerprint via psutil fallback
teknium1
2026-06-21 17:11:28 -07:00
-
1cefc2a24e
test(whatsapp): fix port-spares-client test race (listen before announce + retry connect)
teknium1
2026-06-21 16:54:13 -07:00
-
0fb3b13b00
chore: add valentt to AUTHOR_MAP for #43846 salvage
teknium1
2026-06-21 16:43:30 -07:00
-
615a8e6516
fix(whatsapp): add missing re import + fix test import path after adapter relocation
teknium1
2026-06-21 16:42:10 -07:00
-
069ab40c5f
fix(whatsapp): only kill LISTENers when freeing the bridge port, never clients
valentt
2026-06-11 01:36:09 +02:00
-
77fdbbfe81
fix(whatsapp): validate bridge PID identity before killing stale pidfile entry
valentt
2026-06-11 01:29:33 +02:00
-
e447723149
fix(process-registry): re-validate PID identity before killing host processes
valentt
2026-06-11 00:54:11 +02:00
-
84e1d31e54
refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)
Teknium
2026-06-21 17:06:48 -07:00
-
e5e2583635
fix(desktop): relaunch on Linux after in-app update instead of hanging (#45205)
Carl
2026-06-21 16:49:10 -07:00
-
1f6994d1ee
chore(release): add AUTHOR_MAP entry for #45205 salvage (EtherAura)
teknium1
2026-06-21 16:48:50 -07:00
-
1ec4fcf614
Merge pull request #50466 from NousResearch/bb/composer-popout-bounds
brooklyn!
2026-06-21 18:58:14 -05:00
-
-
13ce811906
fix: show desktop approval fallback (#46548)
Flownium
2026-06-22 09:57:18 +10:00
-
84fcbbf6a9
fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection
Dusk1e
2026-04-12 03:06:53 +03:00
-
bef1d3e4ff
fix(desktop): filter undefined entries in AttachmentList to prevent refText crash on session switch (#49624)
liuhao1024
2026-06-22 07:54:09 +08:00
-
16aeba1707
fix(desktop): clamp composer peel-off under cursor
Brooklyn Nicholson
2026-06-21 18:52:01 -05:00
-
c768c4b71c
fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack
Teknium
2026-06-21 15:51:37 -07:00
-
37c37c9dc5
fix(antigravity): register google-antigravity ProviderProfile + AUTHOR_MAP
Teknium
2026-06-21 15:34:39 -07:00
-
b7a912ea45
fix(antigravity): bake in public OAuth client + default project fallback
Teknium
2026-06-21 15:32:48 -07:00
-
8baa4e9976
feat(cli): add native Antigravity OAuth provider
pmos69
2026-05-20 21:18:04 +01:00
-
29176ffecf
test(gateway): cover no eager platform install on startup sweep
xxxigm
2026-06-21 19:35:40 +07:00
-
242ec45f45
fix(gateway): don't lazy-install SDKs for unconfigured platforms on startup
xxxigm
2026-06-21 19:35:27 +07:00
-
8fcb8136bb
fix(security): harden smart approval guard against prompt injection
Dusk1e
2026-06-21 15:26:15 -07:00
-
c11ae8261b
fix(codex): seed app-server sessions with configured cwd
JP Lew
2026-06-04 12:06:40 +05:30
-
7785655b4e
fix(desktop): keep the floating composer in-bounds so it can't be lost off-screen
Brooklyn Nicholson
2026-06-21 18:35:33 -05:00
-
-
745c4db235
feat(desktop/windows): show update-in-progress feedback before the desktop exits (#50419) (#50448)
Teknium
2026-06-21 15:34:52 -07:00
-
624580e836
fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)
teknium1
2026-06-21 13:39:41 -07:00
-
4d4ba0831e
refactor(session): simplify traversal guard to a helper + logger, harden non-leading separators
teknium1
2026-06-21 14:00:19 -07:00
-
aa2aac68b0
fix(V-009): reject Windows drive-letter paths in session field validation
OrbisAI Security
2026-06-05 13:40:50 +05:30
-
3a6a43cb81
fix(V-009): reject path traversal in SessionEntry.from_dict and harden _ensure_loaded
OrbisAI Security
2026-06-05 10:28:06 +05:30
-
c8eb7cf843
fix: V-009 security vulnerability
orbisai0security
2026-04-14 09:34:11 +00:00
-
bb59075b25
Merge pull request #50398 from helix4u/fix/windows-npm-path-fallback
ethernet
2026-06-21 18:55:02 -03:00
-
-
6f0ecf37da
fix(redact): mask all Authorization schemes and x-api-key style headers
devorun
2026-06-21 23:20:01 +03:00
-
87ab373381
test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards
teknium1
2026-06-21 13:38:32 -07:00
-
ed966696eb
fix(security): handle IPv6 scope IDs in URL safety checks to prevent bypass
sprmn24
2026-05-25 18:23:44 +03:00
-
b5b8a4cd56
fix(gateway): respect adapter decline of fresh-final to prevent double delivery
liuhao1024
2026-06-21 13:34:06 -07:00
-
f79e0a7060
fix(email): mark missing-config as non-retryable + reject blank env vars (#40715)
teknium1
2026-06-21 12:43:25 -07:00
-
e921c4f826
chore(release): map devorun salvage author email
teknium1
2026-06-21 12:37:04 -07:00
-
b7f6cb9c8b
fix(email): resolve IMAP/SMTP host from config and validate before connecting
devorun
2026-06-21 00:12:39 +03:00
-
4cff0360ea
test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP
teknium1
2026-06-21 12:44:04 -07:00
-
a9c8025984
fix(approval): honor interrupt in blocking gateway approval wait (#8697)
panghuer023
2026-06-21 12:44:04 -07:00
-
824c9d3812
fix(config): alias model.api_base -> model.base_url for custom providers (#50385)
Teknium
2026-06-21 13:33:41 -07:00
-
bb77a8b0d5
fix(gateway): respawn unmapped Windows gateways after update (#50090) (#50373)
Teknium
2026-06-21 13:33:26 -07:00
-
99f3072aa0
fix(model-switch): a failed in-place swap must be a no-op, not a dead session (#50375)
Teknium
2026-06-21 13:33:23 -07:00
-
ed3d12a762
fix(security): fail-closed when WebSocket peer is empty in loopback mode
memosr
2026-06-05 14:51:26 +03:00
-
a4b1554c73
fix(whatsapp): normalize bare phone targets to JIDs before bridge send
sgaofen
2026-06-21 12:43:45 -07:00
-
f72690825e
fix(desktop/windows): stop in-app update from cascading into a backend restart loop (#50381)
Teknium
2026-06-21 13:10:32 -07:00
-
09a96ba0f6
fix(gateway): pause Telegram typing before stream finalize
LeonSGP43
2026-06-21 12:42:16 -07:00
-
6902eb3913
fix(cli): make ZIP-update directory replace atomic so it can't delete ui-tui
teknium1
2026-06-21 12:49:13 -07:00
-
db097fb088
fix(cli): auto-restore a deleted ui-tui workspace from git before TUI launch
teknium1
2026-06-21 12:32:43 -07:00
-
537ad9ea9a
fix(cli): guard missing ui-tui workspace before TUI launch
konsisumer
2026-06-19 19:54:16 +02:00
-
5b45fb269a
fix(security): sanitize kanban markdown html
峯岸 亮
2026-06-06 01:33:15 +09:00
-
7502d38bf9
fix(windows): prefer cmd npm shim on PATH fallback
helix4u
2026-06-21 14:06:39 -06:00
-
-
8e4d2fd23f
docs(plugins): document acting from hooks via ctx.profile_name + dispatch_tool (#50352)
Teknium
2026-06-21 12:54:40 -07:00
-
b6f03ab891
docs(ui-tui): add billing.step_up.verification event + perfPane.tsx to README
teknium1
2026-06-21 12:37:02 -07:00
-
d7737bfd97
docs(ui-tui): fix file paths, add billing command, update file map
alelpoan
2026-06-21 22:03:25 +03:00
-
d164ed0326
fix(kanban): make reclaim claim-lock-aware to stop task/run status desync (#50366)
Teknium
2026-06-21 12:49:07 -07:00
-
87615f47b9
test(backup): add regression tests for restore_quick_snapshot path traversal
memosr
2026-06-05 14:37:08 +03:00
-
ae46699905
fix(security): validate snapshot_id and file paths in restore_quick_snapshot to prevent path traversal
memosr
2026-04-13 23:42:03 +03:00
-
1f4c5aed6d
fix(kanban): honor kanban.auto_decompose toggle live, without a gateway restart (#50358)
Teknium
2026-06-21 12:43:44 -07:00
-
84ba83b09a
fix(kanban): bound the cross-process init lock so connect() can't hang forever (#50353)
Teknium
2026-06-21 12:43:41 -07:00
-
9630ec6c19
fix(kanban): pin worker TERMINAL_CWD to the task workspace (#50348)
Teknium
2026-06-21 12:43:37 -07:00
-
b6d1072408
fix(cli): branch new worktrees from the fresh remote tip, not stale local HEAD (#50355)
Teknium
2026-06-21 12:42:11 -07:00
-
e217fd42e2
feat(kanban): add task lifecycle plugin hooks (claimed/completed/blocked) (#50349)
Teknium
2026-06-21 12:38:14 -07:00
-
9d883ac90e
feat(plugins): add ctx.profile_name for session-agnostic profile access (#50346)
Teknium
2026-06-21 12:38:11 -07:00