Commit Graph

  • a989a79c0c fix(gateway): allow native delivery of freshly-produced agent files (#32060) Teknium 2026-05-25 05:34:31 -07:00
  • 0ff7c09e2f feat(mcp-oauth): stdin paste-back fallback for headless OAuth flow (#32053) Teknium 2026-05-25 05:20:05 -07:00
  • e9119e0eb8 chore(release): map dsr-restyn + WuKongAI-CMU + codeblackhole1024 for S04 cluster teknium1 2026-05-25 05:15:19 -07:00
  • bd2756dd22 fix(update): reject symlink members in update ZIP codeblackhole1024 2026-05-25 05:15:19 -07:00
  • 5f20322d23 fix(tts): reject '..' traversal in output_path aaronlab 2026-05-25 05:15:19 -07:00
  • ac5359a3f3 fix(streaming): route mid-tool-call partial-stream-stub through length continuation (#31998) (#32012) daimon-nous[bot] 2026-05-25 17:43:10 +05:30
  • 46d8b5dadf fix(profile): reject symlinks in distributions (#25292) nguyen binh 2026-05-25 19:07:58 +07:00
  • 0d55315c36 fix(backup): skip symlinked files in zip archives (#25289) nguyen binh 2026-05-25 19:07:52 +07:00
  • 79799c80f5 test(approval): patch _YOLO_MODE_FROZEN directly in test_yolo_overrides_cron_deny Teknium 2026-05-25 04:06:43 -07:00
  • 95848b1cbc fix(transcription): reject symlinked audio inputs (#10082) Peter 2026-05-25 08:07:45 -04:00
  • ee59ef1946 fix: reject read_file symlinks to blocking devices (#10133) Peter 2026-05-25 08:07:38 -04:00
  • b7b8bec800 fix(security): block /proc/*/environ, cmdline, maps from file read (#4609) Dakota Secula-Rosell 2026-05-25 08:07:31 -04:00
  • 4909dd84c1 chore(release): map 66773372+Tranquil-Flow@users.noreply.github.com to Tranquil-Flow (PR #27518) Teknium 2026-05-25 03:59:30 -07:00
  • 1b12cd5241 fix(cli): bracketed-paste timeout prevents permanent input freeze (#16263) Evi Nova 2026-05-25 03:59:30 -07:00
  • 8697471419 test(cli): cover KeyboardInterrupt guard around slash command dispatch Teknium 2026-05-25 03:53:53 -07:00
  • 63d6b9e637 fix(cli): catch KeyboardInterrupt during slash commands to prevent session exit ygd58 2026-05-25 03:53:52 -07:00
  • ee7789e547 chore(release): map simo.kiihamaki@gmail.com to SimoKiihamaki (PR #30773) Teknium 2026-05-25 03:50:03 -07:00
  • fae815adc2 fix(cli): prevent /reset and /new freeze on Windows by falling back to stdin prompt simokiihamaki 2026-05-25 03:50:03 -07:00
  • b1adb95038 fix(codex): surface actionable hint when stale-call detector fires on known silent-reject pattern Tranquil-Flow 2026-05-25 03:54:07 -07:00
  • 4c64638897 chore(release): map liuhao1024 for PR #20778 salvage teknium1 2026-05-25 03:40:15 -07:00
  • ba3c450914 fix(security): block read_file on project-local .env files liuhao1024 2026-05-06 22:41:14 +08:00
  • 51c913caf7 chore(release): map dusterbloom for PR #25726 salvage teknium1 2026-05-25 03:38:11 -07:00
  • 79fc92e9cb fix(security): tighten .env file permissions to 0600 at all creation sites dusterbloom 2026-05-25 03:38:11 -07:00
  • 4cb3eb03c7 fix(approval): harden YOLO bypass, LLM parsing, auto-approve audit, pipe pattern (#23835) Rodrigo 2026-05-25 07:35:33 -03:00
  • 3ab7e2aa91 harden(env_passthrough): apply GHSA-rhgp-j443-p4rf filter to config.yaml path (#27794) Dennis Vorobyov 2026-05-25 11:35:23 +01:00
  • 0219b0408a perf(cli): cut hermes startup 63% — flip head-to-head vs codex (#31968) Teknium 2026-05-25 03:06:39 -07:00
  • c0169496d0 chore(release): map jfuenmayor + Jiahui-Gu + YLChen-007 + AdamPlatin123 + waefrebeorn for S11 cluster salvage teknium1 2026-05-25 01:55:21 -07:00
  • 5faea3f618 fix(file_tools): reject '..' traversal in V4A patch headers waefrebeorn 2026-05-25 01:55:21 -07:00
  • 00bd24e27c fix(security): expand memory content scanning patterns to parity with skills guard (#9151) AdamPlatin123 2026-05-25 16:51:53 +08:00
  • 7ebebfbb8d Harden Skills Guard multi-word prompt patterns (#26852) Edward-x 2026-05-25 16:51:27 +08:00
  • 0a2ee71ccc fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276) JiahuiGu 2026-05-25 16:51:21 +08:00
  • 93660643a6 fix: harden skill trust source matching (#31229) Jorge Fuenmayor 2026-05-25 03:51:15 -05:00
  • 2d422720b5 fix(codex): size and propagate timeouts for Responses-API requests; lower stale defaults Kasun Athaudahetti 2026-05-25 01:36:22 -07:00
  • 76135b329d docs(i18n): translate all docs into Simplified Chinese (zh-Hans) (#31942) Teknium 2026-05-25 01:47:38 -07:00
  • ffe11c14ec test(cli): cover quiet-mode resume status lines routed to stderr Teknium 2026-05-25 00:58:51 -07:00
  • 25295e7ac9 fix(cli): redirect resume status lines to stderr in quiet mode (#11793) Michel Belleau 2026-05-25 00:58:51 -07:00
  • 11c40d6a42 test+polish(compression): pin anti-thrash gate and gateway session_id persistence Teknium 2026-05-25 00:45:12 -07:00
  • 3914089d52 fix(compression): 3-line fix for infinite compression loop (#29335) Radical Edward 2026-05-25 01:49:41 +02:00
  • 222a3a9c19 test(cli): cover exit resume hint -p flag across profiles Teknium 2026-05-25 00:52:23 -07:00
  • 2a2cef4ac7 fix: include -p profile flag in exit resume hint CK iRonin.IT 2026-05-25 00:52:23 -07:00
  • d3ffbc6409 feat(stt): add stt.providers.<name> command-provider registry teknium1 2026-05-24 23:22:50 -07:00
  • 2cd952e110 feat(stt): add register_transcription_provider() plugin hook kshitijk4poor 2026-05-22 21:03:42 +05:30
  • 2e0ac31a72 chore(release): map claw@openclaw.ai to wanwan2qq (PR #10215) Teknium 2026-05-25 00:44:35 -07:00
  • 4fbdf0e893 test(cli,gateway): cover bracket-stripping and gateway session-ID lookup Teknium 2026-05-25 00:44:24 -07:00
  • 1c7a783c42 fix(cli,gateway): strip outer brackets/quotes from /resume args + accept session IDs in gateway Claw Assistant 2026-05-25 00:44:17 -07:00
  • 920b350e57 test(auth): align copilot-remove test with borrowed-credential policy (#31416) Teknium 2026-05-25 01:06:11 -07:00
  • 9c77a0c3ce fix(plugins): widen masked secret prompt to plugin setup wizards Teknium 2026-05-24 23:05:41 -07:00
  • ec4d6f1823 fix(cli): show masked feedback for secret prompts helix4u 2026-05-24 17:15:03 -06:00
  • d952b377aa fix: add cron API provenance logging (#24889) Glen Workman 2026-05-25 04:15:56 -04:00
  • 92d91365e7 chore(release): map zapabob for PR #29826 salvage teknium1 2026-05-25 01:14:50 -07:00
  • 2c3ca475c0 fix(cron): reject id mutation + validate output paths under OUTPUT_DIR zapabob 2026-05-25 01:14:50 -07:00
  • 0c3e34e298 chore(release): map Schrotti77 for PR #25786 salvage teknium1 2026-05-25 01:09:10 -07:00
  • 9863a07af6 fix(cron): layer agent.disabled_toolsets onto cron baseline (#25752) Schrotti77 2026-05-25 01:09:10 -07:00
  • a6b0414ea0 feat(providers): extend openai-api with live /v1/models fetch + gpt-5.5-pro teknium1 2026-05-24 23:06:08 -07:00
  • aeb87508c6 feat(providers): add OpenAI API provider option jacevys 2026-05-07 17:23:54 +00:00
  • d7c5d5dee5 fix: avoid persisting borrowed credential secrets (#31416) Hasan Ali 2026-05-25 03:32:08 -04:00
  • 2b768535c9 test(acp): drop flaky runtime_calls[-1] tail-position assertion Teknium 2026-05-24 23:14:43 -07:00
  • 3b839f4369 fix(context): align guidance with 64k minimum helix4u 2026-05-24 20:31:27 -06:00
  • 1d5deac346 fix(website): cross-locale doc links + drop empty ko locale (#31895) Teknium 2026-05-24 23:16:20 -07:00
  • b0135c741d diag(xai-oauth): log loopback callback hits + wait-timeout outcome (#27385) (#31894) Teknium 2026-05-24 23:05:25 -07:00
  • b288de8bf4 Merge pull request #31081 from NousResearch/bb/tui-skinny-status-rule ethernet 2026-05-25 01:24:29 -04:00
  • 7e165e843d Merge pull request #31760 from NousResearch/hermes/hermes-bf5898da Ben Barclay 2026-05-25 12:57:51 +10:00
  • 46f8948bad test+harden(cli): cover parent-chain walk in concurrent-instance detection Teknium 2026-05-24 19:41:23 -07:00
  • 323cce7e94 fix: exclude parent process chain from concurrent instance detection on Windows Strontvod 2026-05-25 01:04:49 +02:00
  • da8b2e95fd ci(docker): run tests/docker/ in build-amd64 against the freshly-built image Ben 2026-05-25 11:55:03 +10:00
  • c524b8a4dc test(docker): fix svstat 'want up' assertion in profile-gateway lifecycle test Ben 2026-05-25 11:21:47 +10:00
  • 7d54288d82 test(dockerfile): recognize s6-overlay/init as a valid PID-1; harden against historical-comment masquerade Ben 2026-05-25 10:32:51 +10:00
  • 4f416fc40c fix(docker): make s6 lifecycle work for the unprivileged hermes user Ben 2026-05-25 11:21:31 +10:00
  • a3abeb5954 Merge pull request #31775 from NousResearch/extending-docker-docs Ben Barclay 2026-05-25 11:41:59 +10:00
  • 6840ca2d1e docs(docker): add 'Installing more tools in the container' section Ben 2026-05-25 11:40:58 +10:00
  • 7f6f00f6ec test(dockerfile): accept s6-overlay /init as a known PID-1 init teknium1 2026-05-24 18:32:14 -07:00
  • 5cbb132c1d fix(ci): exclude tests/docker/ from regular test shards; pin read_text encoding teknium1 2026-05-24 18:23:13 -07:00
  • af144cd60d fix(model): include Premium+ in xAI OAuth label teknium1 2026-05-24 16:14:18 -07:00
  • 4987fd2a59 fix(model): disambiguate xAI OAuth picker label helix4u 2026-05-24 11:41:59 -06:00
  • 031f9c9edc fix(image_gen): cache xAI ephemeral URL responses to disk (#26942) (#31759) Teknium 2026-05-24 18:10:47 -07:00
  • a4092ab217 fix(profiles): short-circuit s6 hooks on host before importing service_manager teknium1 2026-05-24 18:07:47 -07:00
  • af973e4071 refactor(gateway): migrate Mattermost adapter to bundled plugin kshitijk4poor 2026-05-23 17:08:58 +05:30
  • 6c49bdc4f4 docs(plans): trim s6-overlay plan to a post-implementation reference Ben 2026-05-23 16:24:33 +10:00
  • cd5b2c4123 test(docker): poll for boot-log signal instead of fixed sleeps Ben 2026-05-23 16:21:00 +10:00
  • 04bdbce906 docs(docker): deprecation warning in entrypoint.sh shim Ben 2026-05-23 16:18:59 +10:00
  • d0b1ab48dc fix(container_boot): publish reconciled service dirs atomically Ben 2026-05-23 15:34:51 +10:00
  • 4443fb481d fix(container_boot): rotate container-boot.log when it exceeds 256 KiB Ben 2026-05-23 15:33:11 +10:00
  • 9914bfc594 docker: drop sh -c wrappers from stage2-hook.sh Ben 2026-05-23 15:31:46 +10:00
  • d735b083e8 fix(service_manager): rip out dead port parameter Ben 2026-05-23 15:30:15 +10:00
  • 143a189def docs(compose): update entrypoint comment for s6-overlay Ben 2026-05-23 15:24:46 +10:00
  • 1dfabe47b3 fix(docker): dashboard slot stays 'down' when HERMES_DASHBOARD unset Ben 2026-05-23 15:24:17 +10:00
  • b28b3f51d3 fix(service_manager): friendly errors for missing slots and s6-svc failures Ben 2026-05-23 15:20:41 +10:00
  • b044c1ac29 fix(container_boot): always register gateway-default slot Ben 2026-05-23 15:16:35 +10:00
  • a1a53a5d6e docs(docker): dashboard IS supervised — update note that contradicted the PR Ben 2026-05-23 15:08:48 +10:00
  • 6dedaa4846 fix(gateway): route --all stop/restart through s6 under container Ben 2026-05-23 15:08:17 +10:00
  • fc26a5a1c8 fix(ci): drop --entrypoint override in hermes-smoke-test action Ben 2026-05-23 15:00:43 +10:00
  • d4e452b67b fix(docker): SHA256-verify s6-overlay tarballs Ben 2026-05-23 14:59:42 +10:00
  • f7893df4d2 fix(docker): support multi-arch s6-overlay install (amd64 + arm64) Ben 2026-05-23 14:58:06 +10:00
  • fc39296e1f fix(service_manager): s6 detection works for unprivileged hermes user Ben 2026-05-23 14:56:39 +10:00
  • 4b4c36cb61 feat(docker): remove gosu from bundled image; s6-setuidgid handles privilege drop Ben 2026-05-22 10:43:57 +10:00
  • a36221ed91 docs(s6): document container supervision; doctor + skill + user-guide updates Ben 2026-05-21 17:05:32 +10:00
  • 2afefc501c feat(docker): per-profile s6 supervision + container-restart reconciliation Ben 2026-05-21 16:56:51 +10:00
  • 0abf661f71 feat(service_manager): add S6ServiceManager for runtime gateway supervision Ben 2026-05-21 15:41:24 +10:00
  • e0e9c895d3 feat(docker)!: replace tini with s6-overlay as PID 1 Ben 2026-05-21 15:33:25 +10:00
  • 51914b0514 feat(service_manager): add ServiceManager protocol + host wrappers Ben 2026-05-21 14:57:50 +10:00