sync: defer 463-commit batch (refreshed to current upstream + Part A/B plans) - #8

Merged

alt-glitch merged 474 commits into

sid/opentuifrom

sync/defer-20260619-153127

Jun 22, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 21, 2026

fix(chat-completions): strip timestamp from messages before sending to strict providers

x7peeps
authored and
teknium1
committed
4467c22
test(chat-completions): cover timestamp strip + add AUTHOR_MAP entry
teknium1
committed
0a2b712
fix(whatsapp): resolve bridge dir with HERMES_HOME mirror in Docker

xydigit-zt
authored and
teknium1
committed
491579f
test(whatsapp): cover read-only bridge dir mirror; add author map
teknium1
committed
2213ea9
docs(kanban-worker): document kanban_complete artifacts deliverable param (#49854)
teknium1
authored
37fa3c5
fix(kanban): materialize and reuse linked worktrees for worktree tasks

ahmadashfq
authored and
teknium1
committed
d79f67f
fix(kanban): anchor no-path worktree tasks on board default_workdir
teknium1
committed
15cfc28
test(web_server): make profile-wrapper alias test OS-aware

JoaoMarcos44
authored and
teknium1
committed
67523fa
fix(doctor): audit WhatsApp bridge at its resolved (HERMES_HOME) dir (#49890)
teknium1
authored
170ef24
fix(gateway): FIFO busy-mode text follow-ups instead of newline-merging them

teknium1
and
KiruyaMomochi
committed
c11c510
test(gateway): assert queued outcome, not merge_pending_message_event call
teknium1
committed
b4b512c
fix(compression): preserve goal, platform, and session indexing across rotation

committed
7ace96b
Merge remote-tracking branch 'upstream/main' into HEAD
alt-glitch
committed
71a871b
fix(docs): remove non-existent conversation_entity setting from homeassistant troubleshooting

liuhao1024
authored and
teknium1
committed
4711936
docs(skills): fix himalaya CLI arg order and download flag

Bartok9
authored and
teknium1
committed
31bdb60
docs(README.zh-CN): update Windows install from 'not supported' to native PowerShell

baolingao
authored and
teknium1
committed
2b08a42
docs(windows): document uv.exe AV false positive

mkslzk
authored and
teknium1
committed
9e4348f
docs(contributing): add "search first" guidance to cut duplicate PRs

authored and
teknium1
committed
f6275a5
docs: add Open Scaffold MCP workflow

graphanov
authored and
teknium1
committed
e1a717a
fix(docs): regenerate skill docs to fix stale cross-links, add tool-search to sidebar

yapsrubricsz0
authored and
teknium1
committed
abfbd61
docs(skill): document context_length auto-detection resolution chain

Railway9784
authored and
teknium1
committed
a9602d2
Update docs to clarify requirement for gitignore

mintybasil
authored and
teknium1
committed
094d9cb
Expand .gitignore example

mintybasil
authored and
teknium1
committed
5d05415
chore(release): add AUTHOR_MAP entries for docs PR salvage cluster
teknium1
committed
e5e173e
fix(gateway): correct sys.path insertion in plugins to prevent cron namespace collision (#49410)

kyssta-exe
authored and
teknium1
committed
4c206b9
fix(gateway): widen cron namespace-collision fix to all migrated adapters
teknium1
committed
79f2978
fix(gateway): preserve transcript when hygiene auto-compress can't rotate

committed
4c349e8
test(matrix): make voice-detection tests hermetic against mention gating (#49946)
teknium1
authored
4b7f9a4
fix(compression): protect the summary call from mid-flight interrupts

teknium1
and
konsisumer
committed
2f3177a
fix(compression): stop fallback summary triplicating the latest user ask

committed
1f874df
fix(gateway): dedup image_generate media across the compression boundary

teknium1
and
liuhao1024
committed
8ac5e90
docs(skills): add hermes-agent verification rule

skyc1e
authored and
teknium1
committed
46cc034
docs(.env.example): add missing ELEVENLABS_API_KEY placeholder

BBCrypto-web
authored and
teknium1
committed
1eb2959
docs(session-search): document source-first retrieval limits

lkz-de
authored and
teknium1
committed
6403ed0
docs: clarify search_files newline regex behavior

andressommerhoff
authored and
teknium1
committed
eb9a002
fix: warn on line-oriented newline search patterns

andressommerhoff
authored and
teknium1
committed
97563ab
docs(hermes-agent skill): document project context files and their discovery rules

Greg DeYoung
authored and
teknium1
committed
5eb158e
docs(config): document auxiliary task fallback_chain

GauravPatil2515
authored and
teknium1
committed
cc30e0b
docs(docker): document gateway tool-loop hard stops

Sworntech-dev
authored and
teknium1
committed
38756f2
feat(i18n): add complete Spanish translation

authored and
teknium1
committed
2609bcc
docs: session lifecycle documentation

x7peeps
authored and
teknium1
committed
df4015b
docs(hooks): document subagent_start plugin hook

m24927605
authored and
teknium1
committed
063155e
docs(agents): clarify background delegation durability

brett-bonner_infodesk
authored and
teknium1
committed
eec9c1d
docs: add missing Prerequisites/How to Run sections to SKILL.md template

authored and
teknium1
committed
f80088f
docs(hooks): document manual shell hook allowlisting

Sworntech-dev
authored and
teknium1
committed
fa53e36
fix(docs): document curl, xz-utils, and g++ as Linux prerequisites

x7peeps
authored and
teknium1
committed
fe5c8d2
docs(providers): clarify vllm qwen reasoning output

authored and
teknium1
committed
242962e
fix(spotify): quarantine dead tokens on terminal refresh failure

EloquentBrush0x
authored and
teknium1
committed
9bd5003
docs(spotify): document 6-month re-auth cycle and add client-level invalid_grant test

aieng-abdullah
authored and
teknium1
committed
74b5cc7
docs: sharpen software-development skills

whoislikemiha
authored and
teknium1
committed
95d970a
docs: sync documentation with current implementation

virtuadex
authored and
teknium1
committed
defeda8
docs(cli): fix broken terminal-backend guide link in setup wizard

authored and
teknium1
committed
b337afd
docs(mcp): fix stale ~0.75s discovery-wait reference in late-refresh docstring
teknium1
committed
98ecd0b
fix(docs): align slash-command and docker docs

Tortugasaur
authored and
teknium1
committed
c02648c
docs: document per-event extra keys in shell-hook wire protocol

alloevil
authored and
teknium1
committed
bc85f61
test(cron): document consent-first self-learning suggestions

loes5050
authored and
teknium1
committed
85f108e
docs(.env.example): add HF_BASE_URL placeholder

authored and
teknium1
committed
225dcf8
docs: remove file tools TBD placeholder

Sworntech-dev
authored and
teknium1
committed
9f507a0
docs(antigravity-cli): add delegation patterns + output/bounding caveats

namredips
authored and
teknium1
committed
b1ab5a8
docs(config): correct MCP docs path in cli-config.yaml.example

authored and
teknium1
committed
72e4cca
docs: align contributor test checklist with wrapper

asimons81
authored and
teknium1
committed
2008a96
chore(release): add AUTHOR_MAP entries for docs PR salvage cluster 2
teknium1
committed
fcdefb4
fix(telegram): recover reply text from native rich echo

izumi0uu
authored and
teknium1
committed
29e5e12
fix(telegram): index streamed rich finals via editMessageText too
teknium1
committed
c1f11f8
chore(release): add AUTHOR_MAP entry for #49544 salvage
teknium1
committed
d5f0e73
fix(memory): recover from missing old_text on single-op replace/remove (#49997)
teknium1
authored
c6bf6bd
fix(compression): decay protect_first_n so early turns don't fossilize (#11996)

committed
14ef631
fix(cron): resolve model.default + fail fast on missing model

authored and
kshitijk4poor
committed
73b9226
chore: add szzhoujiarui-sketch and rayjun to AUTHOR_MAP
kshitijk4poor
committed
35752fc
fix(cron): make live-adapter delivery confirmation reliable (#38922, #47056, #43014)

committed
d548908
fix(cron): keep ticker alive on BaseException + heartbeat-aware status

committed
07424da
chore: add sweetcornna to AUTHOR_MAP
kshitijk4poor
committed
d6cb69a
Merge pull request #50016 from NousResearch/salvage/cron-ticker-liveness
kshitijk4poor
authored
9f4c0b2
fix(cron): execute job immediately on action='run'
kyssta-exe
committed
65d7c7f
Merge pull request #50018 from NousResearch/salvage/f3a-delivery-confirm
kshitijk4poor
authored
02a3288
fix(cron): repair migrated cron timezone offsets to prevent double-fire
Tranquil-Flow
committed
f1f36b3
fix(cron): route Telegram DM-topic cron delivery through DeliveryRouter (#22773)

committed
4cc28aa
chore(release): add devsart95 to AUTHOR_MAP
kshitijk4poor
committed
f43c616
Merge pull request #50023 from NousResearch/salvage/f3b-telegram-dmtopic
kshitijk4poor
authored
3051a16
Merge pull request #50025 from NousResearch/salvage/cron-run-immediate
kshitijk4poor
authored
f6a504d
Merge pull request #50034 from NousResearch/salvage/cron-tz-offset-repair
kshitijk4poor
authored
f57ff7a
fix(desktop): preserve other providers' hide-all in model visibility dialog

David Doan
authored and
kshitijk4poor
committed
8666fd7
test(desktop): harden model-visibility toggle + dedupe default expansion
kshitijk4poor
committed
461fcc0
Merge pull request #50100 from kshitijk4poor/salvage/model-visibility-cross-provider-47450
kshitijk4poor
authored
8ca38d3
fix(mcp): detect 'unknown method' phrasing in ping keepalive fallback

xxxigm
authored and
kshitijk4poor
committed
472c068
test(mcp): cover 'unknown method' ping keepalive fallback (#50028)

xxxigm
authored and
kshitijk4poor
committed
7b9a0b3
fix(cli): warn when in-session model switch will preflight-compress

tuancookiez-hub
authored and
kshitijk4poor
committed
04730f3
fix(cli): log instead of swallow preflight-warning errors; consistent TUI warning field
kshitijk4poor
committed
1ca2972
Merge pull request #50115 from NousResearch/salvage/model-switch-preflight-warning
kshitijk4poor
authored
44d552e
feat(gateway): track active_agents in runtime status on turn boundaries

benbarclay
authored and
kshitijk4poor
committed
51a338a
feat(dashboard): surface gateway busy/drainable on /api/status

benbarclay
authored and
kshitijk4poor
committed
0ee7546
refactor(gateway): dedupe drain-timeout resolution + share active_agents parse
kshitijk4poor
committed
b577f25
refactor(gateway): route all active_agents coercion through parse_active_agents; harden drain-timeout fallback
kshitijk4poor
committed
4d7bb38
Merge pull request #50131 from kshitijk4poor/salvage/gateway-busy-readout-50103
kshitijk4poor
authored
5aec00f
fix(agent): scale tool-output budget to the model context window (#23767)
kshitijk4poor
committed
1965d56
fix(agent): reset stale token calibration on model switch (#23767)
kshitijk4poor
committed
1e0b3a2
fix(telegram): keep chunk markers outside code fences

whoislikemiha
authored and
teknium1
committed
796f618
fix(agent): guard finalize_turn cleanup chain so it never drops the response (#50009)
teknium1
authored
9f67ba1
fix(cli): persist sessions before shutdown

Hariharan Ayappane
authored and
teknium1
committed
99233fa
feat(api-server): configurable concurrent-run cap to prevent DoS (#50007)
teknium1
authored
e499d69
fix(tui): persist session messages on force-quit / signal shutdown

bogerman1
authored and
teknium1
committed
c7e8854
fix(browser): enable SSRF guard when terminal runs in container

liuhao1024
authored and
teknium1
committed
6984026
Merge pull request #50136 from NousResearch/fix/context-aware-tool-budget
kshitijk4poor
authored
ed8f789
Merge pull request #50137 from NousResearch/fix/reset-calibration-on-model-switch
kshitijk4poor
authored
c6a0929
fix(compression): auto-compression triggers at minimum context length (#14690)

committed
3509be7
fix(gateway): raise session-hygiene hard message limit 400 → 5000 (#50194)
teknium1
authored
03563da
fix(telegram): preserve newlines in rich slash-command output (#46070)

Tranquil-Flow
authored and
teknium1
committed
31e59fe
fix(telegram): exempt tables from rich newline hard-breaks
teknium1
committed
a966932
fix(auth): make load_pool() non-destructive for env-seeded credentials

authored and
teknium1
committed
8a506ed
Merge remote-tracking branch 'upstream/main' into HEAD
alt-glitch
committed
2cb5d95
fix(codex): bridge app-server item/started events to Telegram tool-progress (#38835)

teknium1
and
jplew
committed
2f4f23f
feat(desktop): add Update now button to About panel (#50186)
OutThisLife
authored
65a477f
fix(telegram): avoid rich messages for CJK text

tt-a1i
authored and
teknium1
committed
ea056b0
fix(file): harden read_file device alias blocking

egilewski
authored and
teknium1
committed
9078b4b
fix: keep poll read-only for notify_on_complete watcher

de1tydev
authored and
teknium1
committed
6f5f58e
fix(process): keep CLI drain dedup after poll goes read-only (#10156)
teknium1
committed
41ba90f
chore(release): add AUTHOR_MAP entry for de1tydev (#10158)
teknium1
committed
296b290
fix(compressor): treat empty-content summary response as failure, not an empty summary (#50297)
teknium1
authored
b6a4638
fix(agent): preserve copilot routed headers

konsisumer
authored and
teknium1
committed
3e354b6
fix(agent): route repeated-compression warning through _emit_status (#36908)

teknium1
and
liuhao1024
committed
41e0c10
fix(session): finalize owned SQLite session rows on AIAgent.close()

yeyitech
authored and
teknium1
committed
b17180d
fix(session): opt the background-review fork out of session finalization
teknium1
committed
9e4fe32
fix(tui): /compress shows a before/after summary (#46686)

teknium1
and
liuhao1024
committed
d0de460
fix(hindsight): skip local_embedded daemon when running as root

LehaoLin
and
teknium1
committed
7bc6f18
fix(bedrock): price Claude prompt-cache tokens in /usage (#50307)
teknium1
authored
e0498bd
fix(config): redact api_key in config show/set output (#50245) (#50313)
teknium1
authored
a18bae6
fix(file): reject read_file line-numbered writeback

Beandon13
authored and
teknium1
committed
71274f2
test(file): update guard assertions for unified display-text message
teknium1
committed
16899ae
fix(gateway): cap inbound media download size to prevent memory exhaustion

authored and
teknium1
committed
93ea9b0
fix(gateway): persist in-flight transcript on restart/shutdown drain timeout (#50312)
teknium1
authored
d19aabb
fix(security): redact secrets in kanban tool payloads before persistence

steveonjava
authored and
teknium1
committed
3b56d3a
fix(telegram): make Bot API 10.1 rich messages opt-in (default off)

0x0sec
authored and
teknium1
committed
6183e8c
chore(release): add AUTHOR_MAP entry for #48422 salvage
teknium1
committed
7a8c4fe
fix(backup): capture memory-provider state stored outside HERMES_HOME (#50325)
teknium1
authored
587b5b9
fix(kanban): single-writer dispatch lock to prevent orphan-dispatcher DB corruption (#50331)
teknium1
authored
e581740
fix(agent): stop delegate cascade from deleting the parent session

jackjin1997
authored and
teknium1
committed
56255f8
fix(api-server): stop silently promising async delivery on stateless HTTP path (#50319)
teknium1
authored
7a131f7
fix(photon): classify Envoy overflow errors as retryable; add typing cooldown

JoaoMarcos44
authored and
teknium1
committed
2a45423
fix(photon): detect unexpected sidecar death and trigger reconnect

JoaoMarcos44
authored and
teknium1
committed
9578e52
test(photon): cover overflow retry, typing cooldown, sidecar-crash detection
teknium1
committed
e267237
fix(file): anchor device symlink guard to task cwd

egilewski
authored and
teknium1
committed
def3f63
feat(hindsight): configurable embedded daemon health grace timeout (#50341)
teknium1
authored
5e3e89c
fix(web_server): use run_in_executor for gateway pre-warm and drain-timeout

authored and
teknium1
committed
475e81d
test(web_server): add integration tests for desktop boot handshake fix

authored and
teknium1
committed
e580706
fix(desktop): make cold-start port-announcement deadline tolerant
teknium1
committed
6bbacc2
feat(gateway): typed send-error classification (SendResult.error_kind) (#50342)
teknium1
authored
c0409a8
fix(telegram): stop typing indicator lingering after final reply

natehale
authored and
teknium1
committed
565b7c8
chore(release): add AUTHOR_MAP entry for #48678 salvage
teknium1
committed
7d9f6a2
feat(plugins): add ctx.profile_name for session-agnostic profile access (#50346)
teknium1
authored
9d883ac
feat(kanban): add task lifecycle plugin hooks (claimed/completed/blocked) (#50349)
teknium1
authored
e217fd4
fix(cli): branch new worktrees from the fresh remote tip, not stale local HEAD (#50355)
teknium1
authored
b6d1072
fix(kanban): pin worker TERMINAL_CWD to the task workspace (#50348)
teknium1
authored
9630ec6
fix(kanban): bound the cross-process init lock so connect() can't hang forever (#50353)
teknium1
authored
84ba83b
fix(kanban): honor kanban.auto_decompose toggle live, without a gateway restart (#50358)
teknium1
authored
1f4c5ae
fix(security): validate snapshot_id and file paths in restore_quick_snapshot to prevent path traversal

memosr
authored and
teknium1
committed
ae46699
test(backup): add regression tests for restore_quick_snapshot path traversal

memosr
authored and
teknium1
committed
87615f4
fix(kanban): make reclaim claim-lock-aware to stop task/run status desync (#50366)
teknium1
authored
d164ed0
docs(ui-tui): fix file paths, add billing command, update file map

alelpoan
authored and
teknium1
committed
d7737bf
docs(ui-tui): add billing.step_up.verification event + perfPane.tsx to README
teknium1
committed
b6f03ab
docs(plugins): document acting from hooks via ctx.profile_name + dispatch_tool (#50352)
teknium1
authored
8e4d2fd
fix(windows): prefer cmd npm shim on PATH fallback
helix4u
committed
7502d38
fix(security): sanitize kanban markdown html

zapabob
authored and
teknium1
committed
5b45fb2
fix(cli): guard missing ui-tui workspace before TUI launch

konsisumer
authored and
teknium1
committed
537ad9e
fix(cli): auto-restore a deleted ui-tui workspace from git before TUI launch
teknium1
committed
db097fb
fix(cli): make ZIP-update directory replace atomic so it can't delete ui-tui
teknium1
committed
6902eb3
fix(gateway): pause Telegram typing before stream finalize

LeonSGP43
authored and
teknium1
committed
09a96ba
fix(desktop/windows): stop in-app update from cascading into a backend restart loop (#50381)
teknium1
authored
f726908
fix(whatsapp): normalize bare phone targets to JIDs before bridge send

authored and
teknium1
committed
a4b1554
fix(security): fail-closed when WebSocket peer is empty in loopback mode

memosr
authored and
teknium1
committed
ed3d12a
fix(model-switch): a failed in-place swap must be a no-op, not a dead session (#50375)
teknium1
authored
99f3072
fix(gateway): respawn unmapped Windows gateways after update (#50090) (#50373)

teknium1
and
Hermes Agent
authored
bb77a8b
fix(config): alias model.api_base -> model.base_url for custom providers (#50385)
teknium1
authored
824c9d3
fix(approval): honor interrupt in blocking gateway approval wait (#8697)

panghuer023
authored and
teknium1
committed
a9c8025
test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP
teknium1
committed
4cff036
fix(email): resolve IMAP/SMTP host from config and validate before connecting

devorun
authored and
teknium1
committed
b7f6cb9
chore(release): map devorun salvage author email
teknium1
committed
e921c4f
fix(email): mark missing-config as non-retryable + reject blank env vars (#40715)
teknium1
committed
f79e0a7
fix(gateway): respect adapter decline of fresh-final to prevent double delivery

liuhao1024
authored and
teknium1
committed
b5b8a4c
fix(security): handle IPv6 scope IDs in URL safety checks to prevent bypass

sprmn24
authored and
teknium1
committed
ed96669
test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards
teknium1
committed
87ab373
fix(redact): mask all Authorization schemes and x-api-key style headers

devorun
authored and
teknium1
committed
6f0ecf3
Merge pull request #50398 from helix4u/fix/windows-npm-path-fallback
ethernet8023
authored
bb59075
fix: V-009 security vulnerability

orbisai0security
authored and
teknium1
committed
c8eb7cf
fix(V-009): reject path traversal in SessionEntry.from_dict and harden _ensure_loaded

authored and
teknium1
committed
3a6a43c
fix(V-009): reject Windows drive-letter paths in session field validation

authored and
teknium1
committed
aa2aac6
refactor(session): simplify traversal guard to a helper + logger, harden non-leading separators
teknium1
committed
4d4ba08
fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)

teknium1
and
sgaofen
committed
624580e
feat(desktop/windows): show update-in-progress feedback before the desktop exits (#50419) (#50448)
teknium1
authored
745c4db
fix(desktop): keep the floating composer in-bounds so it can't be lost off-screen
OutThisLife
committed
7785655
fix(codex): seed app-server sessions with configured cwd

jplew
authored and
teknium1
committed
c11ae82
fix(security): harden smart approval guard against prompt injection

Dusk1e
authored and
teknium1
committed
8fcb813
fix(gateway): don't lazy-install SDKs for unconfigured platforms on startup

xxxigm
authored and
teknium1
committed
242ec45
test(gateway): cover no eager platform install on startup sweep

xxxigm
authored and
teknium1
committed
29176ff
feat(cli): add native Antigravity OAuth provider

pmos69
authored and
teknium1
committed
8baa4e9
fix(antigravity): bake in public OAuth client + default project fallback
teknium1
committed
b7a912e
fix(antigravity): register google-antigravity ProviderProfile + AUTHOR_MAP
teknium1
committed
37c37c9
fix(antigravity): move model flow to model_setup_flows + stop bare-alias hijack
teknium1
committed
c768c4b
fix(desktop): clamp composer peel-off under cursor
OutThisLife
committed
16aeba1
fix(desktop): filter undefined entries in AttachmentList to prevent refText crash on session switch (#49624)
liuhao1024
authored
bef1d3e
fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection

Dusk1e
authored and
teknium1
committed
84fcbbf
fix: show desktop approval fallback (#46548)
itsflownium
authored
13ce811
Merge pull request #50466 from NousResearch/bb/composer-popout-bounds
OutThisLife
authored
1ec4fcf

Commits on Jun 22, 2026

chore(release): add AUTHOR_MAP entry for #45205 salvage (EtherAura)
teknium1
committed
1f6994d
fix(desktop): relaunch on Linux after in-app update instead of hanging (#45205)

EtherAura
authored and
teknium1
committed
e5e2583
refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)
teknium1
authored
84e1d31
fix(process-registry): re-validate PID identity before killing host processes

authored and
teknium1
committed
e447723
fix(whatsapp): validate bridge PID identity before killing stale pidfile entry

authored and
teknium1
committed
77fdbbf
fix(whatsapp): only kill LISTENers when freeing the bridge port, never clients

authored and
teknium1
committed
069ab40
fix(whatsapp): add missing re import + fix test import path after adapter relocation
teknium1
committed
615a8e6
chore: add valentt to AUTHOR_MAP for #43846 salvage
teknium1
committed
0fb3b13
test(whatsapp): fix port-spares-client test race (listen before announce + retry connect)
teknium1
committed
1cefc2a
fix(status): cross-platform start-time fingerprint via psutil fallback
teknium1
committed
012f40c
feat(mem0): add self-hosted support via MEM0_HOST / host config

buihongduc132
authored and
teknium1
committed
b6d2ac1
fix(mem0): address PR review — restore docstrings, keep api_key required

buihongduc132
authored and
teknium1
committed
452a725
chore: add buihongduc132 to AUTHOR_MAP for mem0 salvage
teknium1
committed
73340d8
fix(agent): strip stale reasoning_content when falling back to a strict provider (#50480)
teknium1
authored
2b3a4f0
fix(compressor): remove logging.basicConfig from library class __init__

annguyenNous
authored and
teknium1
committed
0a7ae28
fix(swe-runner): move logging.basicConfig out of Runner __init__ into main
teknium1
committed
9bf9a9f
fix(security): close hermes-0day MCP-persistence attack surface
teknium1
committed
7726ce3
fix(docker): replace dashboard --insecure with basic-auth provider
teknium1
committed
eb51c18
feat(security): startup security posture audit (warn-on-load)
teknium1
committed
f45ace9
style(security-audit): add explicit encoding to read_text calls (ruff PLW1514)
teknium1
committed
41fe086
feat(process): escalate SIGTERM->SIGKILL on host-pid termination after grace

teknium1
and
tkwong
committed
8cecaf0
chore: map tkwong co-author email for #15008 SIGKILL-escalation credit
teknium1
committed
8cbb34b
fix(process): SIGKILL the whole tree on escalation, not just wait_procs survivors
teknium1
committed
8cfcbd3
fix(banner): don't advertise toolsets/skills the agent wasn't given (#50497)
teknium1
authored
5bf23ff
feat(providers): remove google-gemini-cli + google-antigravity OAuth providers (#50492)
teknium1
authored
7130d60
docs(agents): fix stale platform adapter path in token-lock note

authored and
teknium1
committed
0768ed3
docs: repoint remaining stale gateway/platforms adapter refs to plugins/platforms
teknium1
committed
4c1934d
fix(terminal): make hermes install dir reachable in subshell PATH (#50534)
teknium1
authored
b0a2598
feat(cli): /reasoning full — show complete thinking, not 10-line clamp (#50499)
teknium1
authored
95d53c3
feat(cli): /prompt — compose your next prompt in $EDITOR (#50509)
teknium1
authored
9e96e70
feat(dashboard): interactive auth setup on no-provider non-loopback bind (#50551)
teknium1
authored
e448b21
Merge remote-tracking branch 'upstream/main' into HEAD
alt-glitch
committed
067a7eb
fix(container): detect dashboard role under s6-overlay v3 (#49196) (#50600)

benbarclay
and
kyssta-exe
authored
6202fdf
fix(terminal): bridge docker_extra_args to TERMINAL_DOCKER_EXTRA_ARGS in CLI + gateway (#50631)
benbarclay
authored
de6b3ae
fix(gateway): accept any inbound file type across all messaging platforms
teknium1
committed
4314d45
fix(telegram): observed/replied group docs of any type are cached too
teknium1
committed
b5bd66e
fix Nous auth refresh for idle agents

shannonsands
authored and
teknium1
committed
4b09903
feat(cli): Ctrl+G submits the edited draft on save (TUI parity) (#50560)
teknium1
authored
74f0dd6
Make email pairing opt-in

shannonsands
authored and
teknium1
committed
2455e18
Address email pairing review feedback

shannonsands
authored and
teknium1
committed
5dae502
fix dashboard chat session titles

shannonsands
authored and
teknium1
committed
b9b4756
feat(cli): /timestamps command + timestamps in /history (#50506)
teknium1
authored
5ff11a6
Merge branch 'sid/opentui' into HEAD
alt-glitch
committed
1cfb000
Merge remote-tracking branch 'upstream/main' into HEAD
alt-glitch
committed
46139f0
docs(opentui): add Part A advance plan + Part B feature-port handoff
alt-glitch
committed
f5e751a
fix(opentui): make /reload-mcp actually rebuild the live agent's tools on the OpenTUI TUI
alt-glitch
committed
cad2b14
docs(opentui): record Part A execution findings + Part B working method
alt-glitch
committed
2334173
feat(opentui): port /timestamps and /reasoning full|clamp into the Solid engine (Part B)
alt-glitch
committed
117d069