Skip to content

chore: refine feature + credential pool fixes + security hardening (DAN-2485, DAN-2503) - #80173

Closed
Meraniya wants to merge 1 commit into
NousResearch:mainfrom
Meraniya:fresh-contributions
Closed

chore: refine feature + credential pool fixes + security hardening (DAN-2485, DAN-2503)#80173
Meraniya wants to merge 1 commit into
NousResearch:mainfrom
Meraniya:fresh-contributions

Conversation

@Meraniya

@Meraniya Meraniya commented Aug 6, 2026

Copy link
Copy Markdown

Summary

This PR brings forward contributions from the dizhaky/hermes-agent fork, rebased against current upstream main.

Key changes

Feature: /refine

  • Background memory/skill self-improvement review on demand
  • Focus steering: /refine [instructions]

Security & Fixes

  • credential_pool fixes (DAN-2503)
  • env injection hardening (GHSA-mv8x-fg99-32mf)
  • secret redaction in approval previews (DAN-2114)
  • 1Password Secrets Manager integration
  • CRM plugin (personal CRM keep-in-touch pipeline)
  • Gateway lifecycle detection, platform restore fixes

Dependency updates

  • cryptography 50.0.0, aiohttp, setuptools, npm/security deps

Test plan

  • CI: ./scripts/run_tests.sh

@Meraniya
chore: refine feature + credential pool fixes + security hardening (D…
51dc4cc 
…AN-2485, DAN-2503)

240-file contribution from dizhaky/hermes-agent fork:
- /refine feature (background memory/skill review)
- credential_pool fixes (DAN-2503)
- env injection hardening (GHSA-mv8x-fg99-32mf)
- secret redaction in approval previews (DAN-2114)
- 1Password Secrets Manager integration
- CRM plugin (Dex-style personal CRM)
- gateway lifecycle, platform restore, service fixes
- dependency updates (cryptography, aiohttp, npm/security deps)
@Meraniya
Meraniya requested a review from a team August 6, 2026 08:13
@alt-glitch alt-glitch added type/bug Something isn't working comp/agent Core agent runtime: loop, agent_init, prompt builder, context-compression, responses endpoint comp/cli CLI entry point, hermes_cli/, setup wizard comp/cron Cron scheduler and job management comp/dashboard Web dashboard / control panel UI (dashboard/, landing) comp/gateway Gateway runner, session dispatch, delivery comp/plugins Plugin system and bundled plugins comp/tools Tool registry, model_tools, toolsets area/docker Docker image, Compose, packaging area/nix Nix flake, NixOS module, container packaging P3 Low — cosmetic, nice to have needs-decision Awaiting maintainer decision before any implementation sweeper:risk-automation Sweeper risk: may affect CI, automerge, label sync, or maintainer automation sweeper:risk-compatibility Sweeper risk: may break existing users, config, migrations, defaults, or upgrades sweeper:risk-message-delivery Sweeper risk: may drop, duplicate, misroute, or suppress messages sweeper:risk-security-boundary Sweeper risk: may affect sandboxing, auth, credentials, or sensitive data sweeper:risk-session-state Sweeper risk: may lose/corrupt/mis-associate session or context state labels Aug 6, 2026
@andrexibiza andrexibiza mentioned this pull request Aug 6, 2026
Open
@briandevans briandevans mentioned this pull request Aug 7, 2026
Open
13 of 19 tasks
@Meraniya Meraniya closed this by deleting the head repository Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/docker Docker image, Compose, packaging area/nix Nix flake, NixOS module, container packaging comp/agent Core agent runtime: loop, agent_init, prompt builder, context-compression, responses endpoint comp/cli CLI entry point, hermes_cli/, setup wizard comp/cron Cron scheduler and job management comp/dashboard Web dashboard / control panel UI (dashboard/, landing) comp/gateway Gateway runner, session dispatch, delivery comp/plugins Plugin system and bundled plugins comp/tools Tool registry, model_tools, toolsets needs-decision Awaiting maintainer decision before any implementation P3 Low — cosmetic, nice to have sweeper:risk-automation Sweeper risk: may affect CI, automerge, label sync, or maintainer automation sweeper:risk-compatibility Sweeper risk: may break existing users, config, migrations, defaults, or upgrades sweeper:risk-message-delivery Sweeper risk: may drop, duplicate, misroute, or suppress messages sweeper:risk-security-boundary Sweeper risk: may affect sandboxing, auth, credentials, or sensitive data sweeper:risk-session-state Sweeper risk: may lose/corrupt/mis-associate session or context state type/bug Something isn't working

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Meraniya @alt-glitch