feat(copilot): authentic @github/copilot CLI identity + Claude context + vision - #50064

Closed

arminanton wants to merge 157 commits into

NousResearch:mainfrom

arminanton:feat/copilot-cli-identity-claude-vision

Commits on Jun 21, 2026

feat(copilot): authentic @github/copilot CLI identity + Claude context + vision
arminanton
committed
d8e353f
fix(desktop): preserve other providers' hide-all in model visibility dialog

David Doan
authored and
kshitijk4poor
committed
8666fd7
test(desktop): harden model-visibility toggle + dedupe default expansion
kshitijk4poor
committed
461fcc0
Merge pull request #50100 from kshitijk4poor/salvage/model-visibility-cross-provider-47450
kshitijk4poor
authored
8ca38d3
fix(mcp): detect 'unknown method' phrasing in ping keepalive fallback

xxxigm
authored and
kshitijk4poor
committed
472c068
test(mcp): cover 'unknown method' ping keepalive fallback (#50028)

xxxigm
authored and
kshitijk4poor
committed
7b9a0b3
fix(cli): warn when in-session model switch will preflight-compress

tuancookiez-hub
authored and
kshitijk4poor
committed
04730f3
fix(cli): log instead of swallow preflight-warning errors; consistent TUI warning field
kshitijk4poor
committed
1ca2972
Merge pull request #50115 from NousResearch/salvage/model-switch-preflight-warning
kshitijk4poor
authored
44d552e
feat(gateway): track active_agents in runtime status on turn boundaries

benbarclay
authored and
kshitijk4poor
committed
51a338a
feat(dashboard): surface gateway busy/drainable on /api/status

benbarclay
authored and
kshitijk4poor
committed
0ee7546
refactor(gateway): dedupe drain-timeout resolution + share active_agents parse
kshitijk4poor
committed
b577f25
refactor(gateway): route all active_agents coercion through parse_active_agents; harden drain-timeout fallback
kshitijk4poor
committed
4d7bb38
Merge pull request #50131 from kshitijk4poor/salvage/gateway-busy-readout-50103
kshitijk4poor
authored
5aec00f
fix(agent): scale tool-output budget to the model context window (#23767)
kshitijk4poor
committed
1965d56
fix(agent): reset stale token calibration on model switch (#23767)
kshitijk4poor
committed
1e0b3a2
style: add explicit utf-8 encoding to copilot CLI bundle read (PLW1514)
arminanton
committed
fd45714
fix(telegram): keep chunk markers outside code fences

whoislikemiha
authored and
teknium1
committed
796f618
fix(agent): guard finalize_turn cleanup chain so it never drops the response (#50009)
teknium1
authored
9f67ba1
fix(cli): persist sessions before shutdown

Hariharan Ayappane
authored and
teknium1
committed
99233fa
feat(api-server): configurable concurrent-run cap to prevent DoS (#50007)
teknium1
authored
e499d69
fix(tui): persist session messages on force-quit / signal shutdown

bogerman1
authored and
teknium1
committed
c7e8854
fix(browser): enable SSRF guard when terminal runs in container

liuhao1024
authored and
teknium1
committed
6984026
Merge pull request #50136 from NousResearch/fix/context-aware-tool-budget
kshitijk4poor
authored
ed8f789
Merge pull request #50137 from NousResearch/fix/reset-calibration-on-model-switch
kshitijk4poor
authored
c6a0929
fix(compression): auto-compression triggers at minimum context length (#14690)

committed
3509be7
fix(gateway): raise session-hygiene hard message limit 400 → 5000 (#50194)
teknium1
authored
03563da
fix(telegram): preserve newlines in rich slash-command output (#46070)

Tranquil-Flow
authored and
teknium1
committed
31e59fe
fix(telegram): exempt tables from rich newline hard-breaks
teknium1
committed
a966932
fix(auth): make load_pool() non-destructive for env-seeded credentials

authored and
teknium1
committed
8a506ed
fix(codex): bridge app-server item/started events to Telegram tool-progress (#38835)

teknium1
and
jplew
committed
2f4f23f
fix(copilot): make Copilot ACP auxiliary client awaitable for async callers
arminanton
committed
6369374
feat(desktop): add Update now button to About panel (#50186)
OutThisLife
authored
65a477f
fix(telegram): avoid rich messages for CJK text

tt-a1i
authored and
teknium1
committed
ea056b0
fix(file): harden read_file device alias blocking

egilewski
authored and
teknium1
committed
9078b4b
fix: keep poll read-only for notify_on_complete watcher

de1tydev
authored and
teknium1
committed
6f5f58e
fix(process): keep CLI drain dedup after poll goes read-only (#10156)
teknium1
committed
41ba90f
chore(release): add AUTHOR_MAP entry for de1tydev (#10158)
teknium1
committed
296b290
fix(compressor): treat empty-content summary response as failure, not an empty summary (#50297)
teknium1
authored
b6a4638
fix(agent): preserve copilot routed headers

konsisumer
authored and
teknium1
committed
3e354b6
fix(agent): route repeated-compression warning through _emit_status (#36908)

teknium1
and
liuhao1024
committed
41e0c10
fix(session): finalize owned SQLite session rows on AIAgent.close()

yeyitech
authored and
teknium1
committed
b17180d
fix(session): opt the background-review fork out of session finalization
teknium1
committed
9e4fe32
fix(tui): /compress shows a before/after summary (#46686)

teknium1
and
liuhao1024
committed
d0de460
fix(hindsight): skip local_embedded daemon when running as root

LehaoLin
and
teknium1
committed
7bc6f18
fix(bedrock): price Claude prompt-cache tokens in /usage (#50307)
teknium1
authored
e0498bd
fix(config): redact api_key in config show/set output (#50245) (#50313)
teknium1
authored
a18bae6
fix(file): reject read_file line-numbered writeback

Beandon13
authored and
teknium1
committed
71274f2
test(file): update guard assertions for unified display-text message
teknium1
committed
16899ae
fix(gateway): cap inbound media download size to prevent memory exhaustion

authored and
teknium1
committed
93ea9b0
fix(gateway): persist in-flight transcript on restart/shutdown drain timeout (#50312)
teknium1
authored
d19aabb
fix(security): redact secrets in kanban tool payloads before persistence

steveonjava
authored and
teknium1
committed
3b56d3a
fix(telegram): make Bot API 10.1 rich messages opt-in (default off)

0x0sec
authored and
teknium1
committed
6183e8c
chore(release): add AUTHOR_MAP entry for #48422 salvage
teknium1
committed
7a8c4fe
fix(backup): capture memory-provider state stored outside HERMES_HOME (#50325)
teknium1
authored
587b5b9
fix(kanban): single-writer dispatch lock to prevent orphan-dispatcher DB corruption (#50331)
teknium1
authored
e581740
fix(agent): stop delegate cascade from deleting the parent session

jackjin1997
authored and
teknium1
committed
56255f8
fix(api-server): stop silently promising async delivery on stateless HTTP path (#50319)
teknium1
authored
7a131f7
fix(photon): classify Envoy overflow errors as retryable; add typing cooldown

JoaoMarcos44
authored and
teknium1
committed
2a45423
fix(photon): detect unexpected sidecar death and trigger reconnect

JoaoMarcos44
authored and
teknium1
committed
9578e52
test(photon): cover overflow retry, typing cooldown, sidecar-crash detection
teknium1
committed
e267237
fix(file): anchor device symlink guard to task cwd

egilewski
authored and
teknium1
committed
def3f63
feat(hindsight): configurable embedded daemon health grace timeout (#50341)
teknium1
authored
5e3e89c
fix(web_server): use run_in_executor for gateway pre-warm and drain-timeout

authored and
teknium1
committed
475e81d
test(web_server): add integration tests for desktop boot handshake fix

authored and
teknium1
committed
e580706
fix(desktop): make cold-start port-announcement deadline tolerant
teknium1
committed
6bbacc2
feat(gateway): typed send-error classification (SendResult.error_kind) (#50342)
teknium1
authored
c0409a8
fix(telegram): stop typing indicator lingering after final reply

natehale
authored and
teknium1
committed
565b7c8
chore(release): add AUTHOR_MAP entry for #48678 salvage
teknium1
committed
7d9f6a2
feat(plugins): add ctx.profile_name for session-agnostic profile access (#50346)
teknium1
authored
9d883ac
feat(kanban): add task lifecycle plugin hooks (claimed/completed/blocked) (#50349)
teknium1
authored
e217fd4
fix(cli): branch new worktrees from the fresh remote tip, not stale local HEAD (#50355)
teknium1
authored
b6d1072
fix(kanban): pin worker TERMINAL_CWD to the task workspace (#50348)
teknium1
authored
9630ec6
fix(kanban): bound the cross-process init lock so connect() can't hang forever (#50353)
teknium1
authored
84ba83b
fix(kanban): honor kanban.auto_decompose toggle live, without a gateway restart (#50358)
teknium1
authored
1f4c5ae
fix(security): validate snapshot_id and file paths in restore_quick_snapshot to prevent path traversal

memosr
authored and
teknium1
committed
ae46699
test(backup): add regression tests for restore_quick_snapshot path traversal

memosr
authored and
teknium1
committed
87615f4
fix(kanban): make reclaim claim-lock-aware to stop task/run status desync (#50366)
teknium1
authored
d164ed0
docs(ui-tui): fix file paths, add billing command, update file map

alelpoan
authored and
teknium1
committed
d7737bf
docs(ui-tui): add billing.step_up.verification event + perfPane.tsx to README
teknium1
committed
b6f03ab
docs(plugins): document acting from hooks via ctx.profile_name + dispatch_tool (#50352)
teknium1
authored
8e4d2fd
fix(windows): prefer cmd npm shim on PATH fallback
helix4u
committed
7502d38
fix(security): sanitize kanban markdown html

zapabob
authored and
teknium1
committed
5b45fb2
fix(cli): guard missing ui-tui workspace before TUI launch

konsisumer
authored and
teknium1
committed
537ad9e
fix(cli): auto-restore a deleted ui-tui workspace from git before TUI launch
teknium1
committed
db097fb
fix(cli): make ZIP-update directory replace atomic so it can't delete ui-tui
teknium1
committed
6902eb3
fix(gateway): pause Telegram typing before stream finalize

LeonSGP43
authored and
teknium1
committed
09a96ba
fix(desktop/windows): stop in-app update from cascading into a backend restart loop (#50381)
teknium1
authored
f726908
fix(whatsapp): normalize bare phone targets to JIDs before bridge send

authored and
teknium1
committed
a4b1554
fix(security): fail-closed when WebSocket peer is empty in loopback mode

memosr
authored and
teknium1
committed
ed3d12a
fix(model-switch): a failed in-place swap must be a no-op, not a dead session (#50375)
teknium1
authored
99f3072
fix(gateway): respawn unmapped Windows gateways after update (#50090) (#50373)

teknium1
and
Hermes Agent
authored
bb77a8b
fix(config): alias model.api_base -> model.base_url for custom providers (#50385)
teknium1
authored
824c9d3
fix(approval): honor interrupt in blocking gateway approval wait (#8697)

panghuer023
authored and
teknium1
committed
a9c8025
test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP
teknium1
committed
4cff036
fix(email): resolve IMAP/SMTP host from config and validate before connecting

devorun
authored and
teknium1
committed
b7f6cb9
chore(release): map devorun salvage author email
teknium1
committed
e921c4f
fix(email): mark missing-config as non-retryable + reject blank env vars (#40715)
teknium1
committed
f79e0a7
fix(gateway): respect adapter decline of fresh-final to prevent double delivery

liuhao1024
authored and
teknium1
committed
b5b8a4c
fix(security): handle IPv6 scope IDs in URL safety checks to prevent bypass

sprmn24
authored and
teknium1
committed
ed96669
test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards
teknium1
committed
87ab373
fix(redact): mask all Authorization schemes and x-api-key style headers

devorun
authored and
teknium1
committed
6f0ecf3
Merge pull request #50398 from helix4u/fix/windows-npm-path-fallback
ethernet8023
authored
bb59075
fix: V-009 security vulnerability

orbisai0security
authored and
teknium1
committed
c8eb7cf
fix(V-009): reject path traversal in SessionEntry.from_dict and harden _ensure_loaded

authored and
teknium1
committed
3a6a43c
fix(V-009): reject Windows drive-letter paths in session field validation

authored and
teknium1
committed
aa2aac6
refactor(session): simplify traversal guard to a helper + logger, harden non-leading separators
teknium1
committed
4d4ba08
fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)

teknium1
and
sgaofen
committed
624580e
feat(desktop/windows): show update-in-progress feedback before the desktop exits (#50419) (#50448)
teknium1
authored
745c4db
fix(desktop): keep the floating composer in-bounds so it can't be lost off-screen
OutThisLife
committed
7785655
fix(codex): seed app-server sessions with configured cwd

jplew
authored and
teknium1
committed
c11ae82
fix(security): harden smart approval guard against prompt injection

Dusk1e
authored and
teknium1
committed
8fcb813
fix(gateway): don't lazy-install SDKs for unconfigured platforms on startup

xxxigm
authored and
teknium1
committed
242ec45
test(gateway): cover no eager platform install on startup sweep

xxxigm
authored and
teknium1
committed
29176ff
feat(cli): add native Antigravity OAuth provider

pmos69
authored and
teknium1
committed
8baa4e9
fix(antigravity): bake in public OAuth client + default project fallback
teknium1
committed
b7a912e
fix(antigravity): register google-antigravity ProviderProfile + AUTHOR_MAP
teknium1
committed
37c37c9
fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack
teknium1
committed
c768c4b
fix(desktop): clamp composer peel-off under cursor
OutThisLife
committed
16aeba1
fix(desktop): filter undefined entries in AttachmentList to prevent refText crash on session switch (#49624)
liuhao1024
authored
bef1d3e
fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection

Dusk1e
authored and
teknium1
committed
84fcbbf
fix: show desktop approval fallback (#46548)
itsflownium
authored
13ce811
Merge pull request #50466 from NousResearch/bb/composer-popout-bounds
OutThisLife
authored
1ec4fcf

Commits on Jun 22, 2026

chore(release): add AUTHOR_MAP entry for #45205 salvage (EtherAura)
teknium1
committed
1f6994d
fix(desktop): relaunch on Linux after in-app update instead of hanging (#45205)

EtherAura
authored and
teknium1
committed
e5e2583
refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)
teknium1
authored
84e1d31
fix(process-registry): re-validate PID identity before killing host processes

authored and
teknium1
committed
e447723
fix(whatsapp): validate bridge PID identity before killing stale pidfile entry

authored and
teknium1
committed
77fdbbf
fix(whatsapp): only kill LISTENers when freeing the bridge port, never clients

authored and
teknium1
committed
069ab40
fix(whatsapp): add missing re import + fix test import path after adapter relocation
teknium1
committed
615a8e6
chore: add valentt to AUTHOR_MAP for #43846 salvage
teknium1
committed
0fb3b13
test(whatsapp): fix port-spares-client test race (listen before announce + retry connect)
teknium1
committed
1cefc2a
fix(status): cross-platform start-time fingerprint via psutil fallback
teknium1
committed
012f40c
feat(mem0): add self-hosted support via MEM0_HOST / host config

buihongduc132
authored and
teknium1
committed
b6d2ac1
fix(mem0): address PR review — restore docstrings, keep api_key required

buihongduc132
authored and
teknium1
committed
452a725
chore: add buihongduc132 to AUTHOR_MAP for mem0 salvage
teknium1
committed
73340d8
fix(agent): strip stale reasoning_content when falling back to a strict provider (#50480)
teknium1
authored
2b3a4f0
fix(compressor): remove logging.basicConfig from library class __init__

annguyenNous
authored and
teknium1
committed
0a7ae28
fix(swe-runner): move logging.basicConfig out of Runner __init__ into main
teknium1
committed
9bf9a9f
fix(security): close hermes-0day MCP-persistence attack surface
teknium1
committed
7726ce3
fix(docker): replace dashboard --insecure with basic-auth provider
teknium1
committed
eb51c18
feat(security): startup security posture audit (warn-on-load)
teknium1
committed
f45ace9
style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)
teknium1
committed
41fe086
feat(process): escalate SIGTERM->SIGKILL on host-pid termination after grace

teknium1
and
tkwong
committed
8cecaf0
chore: map tkwong co-author email for #15008 SIGKILL-escalation credit
teknium1
committed
8cbb34b
fix(process): SIGKILL the whole tree on escalation, not just wait_procs survivors
teknium1
committed
8cfcbd3
fix(banner): don't advertise toolsets/skills the agent wasn't given (#50497)
teknium1
authored
5bf23ff
feat(providers): remove google-gemini-cli + google-antigravity OAuth providers (#50492)
teknium1
authored
7130d60
docs(agents): fix stale platform adapter path in token-lock note

authored and
teknium1
committed
0768ed3
docs: repoint remaining stale gateway/platforms adapter refs to plugins/platforms
teknium1
committed
4c1934d
fix(terminal): make hermes install dir reachable in subshell PATH (#50534)
teknium1
authored
b0a2598
feat(cli): /reasoning full — show complete thinking, not 10-line clamp (#50499)
teknium1
authored
95d53c3
feat(cli): /prompt — compose your next prompt in $EDITOR (#50509)
teknium1
authored
9e96e70
feat(dashboard): interactive auth setup on no-provider non-loopback bind (#50551)
teknium1
authored
e448b21
Merge branch '_c_50064' into z50064
arminanton
committed
1ad961f
test(copilot): restore dropped @patch decorator on canonical-header test
arminanton
committed
415cbb1
fix(copilot): keep hermes_cli/inventory.py (out-of-scope deletion broke upstream test_inventory_pricing.py)
arminanton
committed
ce4162b