This repository was archived by the owner on Jun 4, 2026. It is now read-only.

chore: sync inkbox with upstream main (2026-05-27) - #41

Merged

on-call-hermes-agent[bot] merged 109 commits into

sync/upstream-main-2026-05-27

May 27, 2026

Commits on May 9, 2026

fix(voice): honor PULSE_SERVER/PIPEWIRE_REMOTE inside Docker (#21203)
wesleysimplicio
committed
bde487c
fix(voice_mode): generalize container phrasing and use $XDG_RUNTIME_DIR
wesleysimplicio
committed
30dd554

Commits on May 20, 2026

chore: ignore local Hermes runtime files

slowtokki0409
and
OmX
committed
ec641d4

Commits on May 21, 2026

feat(cli): add --branch flag to `hermes update`
jquesnelle
committed
51689a4
fix(cli): plug silent-divergence holes in --branch flag
jquesnelle
committed
d5b7393

Commits on May 22, 2026

fix(docker): include anthropic, bedrock, azure-identity extras in image

ilonagaja509-glitch
authored and
Ubuntu
committed
b96a1a0

Commits on May 23, 2026

feat(docker): add Windows Docker Desktop compatible compose file
Sunil123135
committed
f8695ed

Commits on May 24, 2026

docs: clarify xurl auth HOME in Docker
yu-xin-c
committed
1579a6f

Commits on May 25, 2026

docs: add Docker audio bridge notes
yu-xin-c
committed
95cee44

Commits on May 26, 2026

fix(docker): propagate container env through s6 to cont-init and main CMD
jonpol01
committed
29c71e9
feat(mcp): Nous-approved MCP catalog with interactive picker (#30870)
teknium1
authored
8b69ec0
chore(models): swap qwen3.6-plus → qwen3.7-max in openrouter+nous lists (#32809)
teknium1
authored
ccd3d04
fix(cron): clarify schedule is required for create in tool schema

ygd58
authored and
teknium1
committed
5101326
test(cron): guard schedule-required description text on CRONJOB_SCHEMA
teknium1
committed
556bf7c
fix(gateway): refresh cached agent tools on /reload-mcp

teknium1
and
fujinice
committed
f05a473
docs(auth): replace stale 'hermes login' references with 'hermes auth add'
teknium1
committed
bb4703c

Commits on May 27, 2026

fix(agent): recover Codex streams with null output

carltonawong
authored and
teknium1
committed
43a3f11
chore(release): map carltonawong noreply to GitHub login
teknium1
committed
2a8d217
Merge pull request #29025 from slowtokki0409/codex/ignore-local-runtime-files
benbarclay
authored
1e267c4
chore(release): map wangpuv contributor email for #32933 (#33005)
teknium1
authored
16e86ce
fix: parse Codex image generation SSE directly

wangpuv
authored and
teknium1
committed
bba5097
Merge pull request #31031 from Sunil123135/feat/windows-docker-desktop
benbarclay
authored
840f79e
Merge pull request #32412 from jonpol01/fix/docker-env-propagation
benbarclay
authored
628aaea
Merge pull request #32122 from yu-xin-c/codex/docs-docker-audio-bridge-32009
benbarclay
authored
7d94eee
Merge pull request #31557 from yu-xin-c/codex/docs-xurl-docker-home-29108
benbarclay
authored
3c7f786
feat(opencode-go): route qwen3.7-max via anthropic_messages

beardthelion
authored and
teknium1
committed
2fc77c5
feat: add TUI session orchestrator

ticketclosed-wontfix
authored and
teknium1
committed
0a83247
chore(release): map ticketclosed-wontfix noreply to GitHub login
teknium1
committed
9feadc2
Merge pull request #22534 from wesleysimplicio/fix/voice-mode-docker-respect-pulse-pipewire
benbarclay
authored
81a4f28
refactor(docker): drop build-essential from apt install (#27507)

benbarclay
and
emonty
committed
1e5884e
Merge remote-tracking branch 'origin/main' into jq/hermes-update-branch-flag
jquesnelle
committed
3d9a26a
Merge pull request #29591 from NousResearch/jq/hermes-update-branch-flag
jquesnelle
authored
9d3e931
fix(codex-responses): gracefully recover from invalid_encrypted_content (salvage #10144) (#33035)

teknium1
and
victorGPT
authored
b6ca56f
fix(docker): targeted chown to preserve host file ownership in HERMES_HOME (#19795)

benbarclay
and
ptichalouf
committed
9eadb68
fix(docker): chown ui-tui and node_modules on UID remap so TUI esbuild works (#28851)

benbarclay
and
deas
committed
22eb4d1
feat(docker): upgrade Node to 22 LTS via multi-stage from node:22-bookworm-slim (#4977)

benbarclay
and
Prithvi1994
committed
27a29ee
ci(docker): add shellcheck shell=sh directive to main-wrapper.sh
benbarclay
committed
c3bdb2a
fix(docker): mkdir HERMES_HOME as root in stage2 before chown / privilege drop (#18488)

benbarclay
and
wpengpeng168
committed
fb298a9
refactor(codex): drop SDK responses.stream() helper; consume events directly (#33042)
teknium1
authored
cb38ce2
remove Vercel AI Gateway and Vercel Sandbox (#33067)
teknium1
authored
febc4cf
feat(api-server): add GET /v1/skills and /v1/toolsets (#33016)
teknium1
authored
25f43d3
feat(nix): add #messaging and #full package variants (#33108)
alt-glitch
authored
9769794
fix(codex): update silent-hang workaround hint

EvilHumphrey
authored and
teknium1
committed
4243b6d
chore(release): map EvilHumphrey noreply for #33034 salvage
teknium1
committed
f0be322
feat: add API server session controls

Codename-11
authored and
teknium1
committed
f7527b0
Support media in session chat API

Schwartz10
authored and
teknium1
committed
464b51d
chore(api-server): mark skills_api capability True now that /v1/skills shipped
teknium1
committed
9622326
feat(catalog): add qwen3.7-max to alibaba + alibaba-coding-plan model lists

orcool
authored and
teknium1
committed
f0fdb5e
test(codex): cover null output stream terminal events

superearn-fisher
authored and
teknium1
committed
4920f84
chore(release): map superearn-fisher noreply for #33122 salvage
teknium1
committed
c752205
plugins: add security-guidance — pattern-matched warnings on dangerous code writes (#33131)
teknium1
authored
249534e
test(dashboard): pin current loopback auth behavior as regression harness

benbarclay
authored and
teknium1
committed
f2b479e
feat(dashboard): add should_require_auth predicate for OAuth gate

benbarclay
authored and
teknium1
committed
8773bbf
feat(dashboard): stash auth_required flag on app.state

benbarclay
authored and
teknium1
committed
949ad95
feat(dashboard-auth): define DashboardAuthProvider ABC + Session dataclass

benbarclay
authored and
teknium1
committed
2dc6d03
test(dashboard-auth): cover registry register/get/list/clear semantics

benbarclay
authored and
teknium1
committed
1bbfed7
feat(plugins): add register_dashboard_auth_provider hook on PluginContext

benbarclay
authored and
teknium1
committed
c32b17f
feat(dashboard-auth): json-lines audit log at $HERMES_HOME/logs/dashboard-auth.log

benbarclay
authored and
teknium1
committed
865cae4
test(dashboard-auth): stub auth provider for E2E gate testing

benbarclay
authored and
teknium1
committed
628a52f
feat(dashboard-auth): cookie helpers for session_at/session_rt/pkce

benbarclay
authored and
teknium1
committed
a30c4d8
feat(dashboard-auth): auth gate middleware + /auth/* routes + /login HTML

benbarclay
authored and
teknium1
committed
5b17eab
feat(dashboard-auth): fail-closed on no providers; proxy_headers when gated; suppress _SESSION_TOKEN injection

benbarclay
authored and
teknium1
committed
53736b3
docs(dashboard-auth): plan v2 — incorporate Portal OAuth contract (PR #180)

benbarclay
authored and
teknium1
committed
53999b9
feat(dashboard-auth): plugins/dashboard_auth/nous — contract-compliant Nous OAuth provider

benbarclay
authored and
teknium1
committed
848baeb
feat(dashboard-auth): single-use WS tickets + POST /api/auth/ws-ticket

benbarclay
authored and
teknium1
committed
b69fce9
feat(dashboard-auth): _ws_auth_ok helper + ticket auth on all 4 WS endpoints

benbarclay
authored and
teknium1
committed
b2360ba
feat(dashboard-auth): SPA WS auth — getWsTicket() + buildWsAuthParam()

benbarclay
authored and
teknium1
committed
8971e94
feat(dashboard-auth): Phase 6 — 401 re-auth envelope + next= propagation

benbarclay
authored and
teknium1
committed
5e9308b
feat(dashboard-auth): Phase 7 — SPA AuthWidget + /api/status auth fields

benbarclay
authored and
teknium1
committed
2fc4615
docs(dashboard-auth): Phase 7 — OAuth Authentication section in web-dashboard.md

benbarclay
authored and
teknium1
committed
7c9cdbc
fix(dashboard-auth): ChatPage cleanup closes WS via wsRef.current

benbarclay
authored and
teknium1
committed
af3d4a6
feat(dashboard-auth): Nous plugin always-on; default portal URL; specific error messages

benbarclay
authored and
teknium1
committed
b3dc539
fix(dashboard): trigger plugin discovery in cmd_dashboard before start_server

benbarclay
authored and
teknium1
committed
4272977
feat(dashboard-auth-nous): surface token iss/aud in verification-failure error

benbarclay
authored and
teknium1
committed
a498485
test(dashboard-auth): strip HERMES_DASHBOARD_OAUTH_* env vars in hermetic fixture

benbarclay
authored and
teknium1
committed
c598076
fix(dashboard-auth): use fixed-length sig suffix in stub token framing

benbarclay
authored and
teknium1
committed
866cc98
fix(dashboard-auth): bypass loopback WS peer check in gated mode

benbarclay
authored and
teknium1
committed
c310419
fix(dashboard-auth): propagate next= through login page + PKCE cookie

benbarclay
authored and
teknium1
committed
034ad95
feat(dashboard-auth): honour X-Forwarded-Prefix + __Host-/__Secure- cookies

benbarclay
authored and
teknium1
committed
b26d81d
chore: gitignore .hermes/ working directory; drop tracked plan artifact

benbarclay
authored and
teknium1
committed
e2a92ce
feat(dashboard-auth): config.yaml as canonical surface for dashboard.oauth

benbarclay
authored and
teknium1
committed
61dcc33
style(dashboard-auth): redesign /login page to match Nous design system

benbarclay
authored and
teknium1
committed
0af37ff
feat(dashboard-auth): HERMES_DASHBOARD_PUBLIC_URL / dashboard.public_url override

benbarclay
authored and
teknium1
committed
a890389
tools(terminal): nudge homebrewed CI pollers at the tool surface (#33142)
teknium1
authored
187cf0f
fix(codex): drop transient rs_tmp reasoning replay state

kpadilha
authored and
teknium1
committed
b1a46b3
chore(release): map kpadilha noreply for #11038 salvage
teknium1
committed
c819bc5
fix(codex_responses_adapter): drop foreign-issuer reasoning on replay

chaconne67
authored and
teknium1
committed
9c69204
chore(release): map chaconne67 noreply for #31629 salvage
teknium1
committed
581b021
fix(gateway): hide telegram compaction status noise

sir-ad
authored and
teknium1
committed
8807b1c
fix: ignore Telegram start pings

rdasilva1016-ui
authored and
teknium1
committed
efa9525
gateway: quiet Telegram operational chatter

houenyang-momo
authored and
teknium1
committed
60f84c6
refactor(gateway): drop try/except wrappers around resolve_display_setting
teknium1
committed
2f7ba51
chore(release): map sir-ad + rdasilva1016-ui in AUTHOR_MAP
teknium1
committed
4feb181
fix(cli): sync credential_pool on Codex re-auth

konsisumer
authored and
teknium1
committed
2bbd534
fix(gateway): classify Codex 429 quota as rate-limit, not missing credentials

konsisumer
authored and
teknium1
committed
f1422ff
test(verbose): align with telegram tier-1 inbox default
teknium1
committed
0b6ace6
Merge pull request #30504 from ilonagaja509-glitch/fix/30394-docker-anthropic-package
benbarclay
authored
bb65beb
fix(discord): recover Windows voice opus decoding

helix4u
authored and
teknium1
committed
ea34925
fix(docker): discover agent-browser Chromium binary at boot

benbarclay
and
jackey8616
committed
3e33e14
fix(auth): codex chat path falls back to credential_pool when singleton is empty
teknium1
committed
69dfcdc
fix(gateway): keep Telegram heartbeat + interim commentary on; edit heartbeat in place (#33187)
teknium1
authored
0325e18
fix(xai-oauth): strip service_tier and add safety-net sanitization for slash enums

Nami4D
authored and
teknium1
committed
a699de8
fix(xai-oauth): gate slash-enum strip on model name + add regression tests (#28490)

teknium1
and
Nami4D
committed
b4eea18
ci(docker): simplify tagging — push both :main and :latest on main push

ethernet8023
authored and
teknium1
committed
825948e
fix(agent): roll back switch_model() state when client rebuild fails (#33228)
teknium1
authored
f0de3cd
fix(cli): keep destructive slash modal on Linux

LeonSGP43
authored and
teknium1
committed
458a94e
chore: sync inkbox with upstream main (2026-05-27)

inkbox-on-call-agent
and
claude
committed
8fc55ba
fix(kanban): drop orphan idx_tasks_session_id from SCHEMA_SQL

inkbox-on-call-agent
and
claude
committed
0f22847
chore: map inkbox-on-call-agent@inkboxmail.com to dimavrem22 in AUTHOR_MAP

inkbox-on-call-agent
and
claude
committed
f90d8d2