Files

T

kshitijk4poor 801466765b fix: harden temp fallback against predictable-path attacks; neutral error text; docs

Final-diff review findings (/simplify-code on the full 3-commit stack):

- Temp-dir fallback uses a per-uid name (hermes-profile-exports-<uid>) and
  get_profile_export_path refuses a pre-existing symlink or a directory
  owned by another user — a fixed /tmp/hermes-profile-exports is a
  predictable shared path a local attacker could pre-create to receive the
  secret-bearing archive. Regression test mutation-checked.
- Fail-closed message reworded interface-neutrally (the web API surfaces it
  as HTTP 400 detail where '-o' alone made no sense).
- Docs now cover the temp fallback and the fail-closed refusal.

2026-09-01 01:00:23 -07:00

docs

fix: harden temp fallback against predictable-path attacks; neutral error text; docs

2026-09-01 01:00:23 -07:00

i18n/zh-Hans/docusaurus-plugin-content-docs/current

test(cron): cover execution identity and sync docs

2026-08-31 09:59:39 -07:00

scripts

fix(docs): index every docs page in llms.txt, not a hand-picked 98

2026-08-19 12:41:45 -05:00

src

docs(user-stories): drop the Tokyo itinerary entry

2026-08-29 03:45:57 -07:00

static

add tencent/hy4-preview to model pickers

2026-08-28 19:53:06 -07:00

.gitignore

feat(skills-hub): health checks, freshness badge, and a watchdog cron (#32345 )

2026-05-25 23:10:45 -07:00

.npmrc

fix(sec): patch the npm advisories main left open

2026-08-10 13:49:37 -04:00

docusaurus.config.ts

feat(docs): replace local lunr search with Algolia DocSearch

2026-08-08 11:14:13 -07:00

package-lock.json

fix(sec): patch the npm advisories main left open

2026-08-10 13:49:37 -04:00

package.json

fix(sec): patch the npm advisories main left open

2026-08-10 13:49:37 -04:00

README.md

…

sidebars.ts

refactor(skills): shipped-set slim — 15 to optional, github 6-way merge, pdf absorbs OCR, channel-gated teams pipeline (index −26%) (#98539 )

2026-08-30 04:53:39 -07:00

tsconfig.json

change(tooling): typecheck in CI, update ts to 6

2026-06-10 11:59:34 -04:00

README.md

Website

This website is built using Docusaurus, a modern static website generator.

Installation

yarn

Local Development

yarn start

This command starts a local development server and opens up a browser window. Most changes are reflected live without having to restart the server.

Build

yarn build

This command generates static content into the build directory and can be served using any static contents hosting service.

Deployment

Using SSH:

USE_SSH=true yarn deploy

Not using SSH:

GIT_USER=<Your GitHub username> yarn deploy

If you are using GitHub pages for hosting, this command is a convenient way to build the website and push to the gh-pages branch.

Diagram Linting

CI runs ascii-guard to lint docs for ASCII box diagrams. Use Mermaid (````mermaid`) or plain lists/tables instead of ASCII boxes to avoid CI failures.