fix(kanban): detect clean-exit workers reaped by init as protocol violations (#1096) - #4

Merged

mosaiq-systems merged 205 commits into

mainfrom

fix/zombie-clean-exit-detection-1096

Jul 1, 2026

Commits on Jun 28, 2026

fix(desktop): make project "Add folder" picker remote-gateway aware
OutThisLife
committed
4526fcc
style(desktop): tighten pickProjectFolder comment
OutThisLife
committed
304f065
feat(desktop): make the git cockpit work over a remote gateway
OutThisLife
committed
fc86e35
refactor(web_git): unify porcelain-v2 parsing into one walker
OutThisLife
committed
e4cf3a2
fix(desktop): write project IDEA.md through the remote-aware fs path
OutThisLife
committed
9b71221
fix(desktop): route composer context picking through remote-aware fs
OutThisLife
committed
4e9439c
refactor(desktop): centralize remote git REST routing
OutThisLife
committed
453f134
refactor(desktop): keep remote fs routing inside the fs facade
OutThisLife
committed
8d8c711
test(desktop): assert new backend sessions carry workspace cwd
OutThisLife
committed
19bae1b
docs: reconcile docs with code across last 3 releases (#54254)
teknium1
authored
b31b0b9
fix(windows): cover remaining console-flash spawn legs (#54417)
teknium1
authored
9a0010f
fix(desktop): remote project picker UX and profile-scoped fs/git routing
OutThisLife
committed
c754235
fix(browser): extend private-network guard to browser_get_images

srojk34
authored and
teknium1
committed
6121009
fix(telegram): reject unauthorized users before event construction (#40863)

committed
c648ecd
test(web_git): assert default branch invariant, not hardcoded main
OutThisLife
committed
f9b469d
fix(daytona): quote single-upload mkdir parent path (#54440)
teknium1
authored
e5d22ab
Merge pull request #54385 from NousResearch/bb/project-folder-picker-remote
OutThisLife
authored
28097d9
fix(windows): repair missing hermes.exe after pip install (#52931)

HexLab98
authored and
OutThisLife
committed
95994bb
test(cli): cover Windows console script repair (#52931)

HexLab98
authored and
OutThisLife
committed
76bb8f4
fix(windows): verify launchers after primary install

helix4u
authored and
OutThisLife
committed
df8e252
fix(curator): never archive cron-referenced skills + floor use=0 pruning (#54443)
teknium1
authored
4c2961c
fix(gateway): preserve sessions across restarts (#54442)
teknium1
authored
86e6490
fix(provider): auto+base_url bypasses cloud API when custom endpoint configured (#3846)

authored and
teknium1
committed
b0b7ff0
perf(startup): lazy-load gateway platform adapters (#54448)
teknium1
authored
95f2919
fix(anthropic): ignore stale non-Anthropic base_url across all resolution paths

clovericbot
authored and
teknium1
committed
e7d4ade
docs: add PR infographic for anthropic stale base_url guard
teknium1
committed
c8b8696
Merge pull request #54457 from NousResearch/bb/windows-console-launcher-repair
OutThisLife
authored
16ff1a3
fix(security): SSRF guard yuanbao media download_url (#54470)
teknium1
authored
d65468e
perf(startup): parse config + plugin manifests with libyaml CSafeLoader (#54486)
teknium1
authored
980622d
fix(windows): hide console flash on checkpoint git + skills_hub gh probes
OutThisLife
committed
32087e4
fix(windows): hide pdftoppm console flash on PDF attach
OutThisLife
committed
ee22d85
refactor(windows): unify windowless spawn form across the touched sites
OutThisLife
committed
cb1bb1a
Merge pull request #54492 from NousResearch/bb/windows-hide-checkpoint-skills-git
OutThisLife
authored
d0d2cf1
fix(dashboard): stop ElevenLabs voice-list 401 log spam
OutThisLife
committed
27f0324
test(gmi): stub profile fetch_models in static-fallback test
OutThisLife
committed
f34cf7e
Merge pull request #53386 from NousResearch/bb/elevenlabs-voices-401-spam
OutThisLife
authored
65d45a0
fix(desktop): restore cross-wired runtime-id guard on session resume

OutThisLife
and
professorpalmer
committed
cd5fb76
Merge pull request #54503 from NousResearch/bb/fix-desktop-cross-wired-resume
OutThisLife
authored
10043c6

Commits on Jun 29, 2026

feat(desktop): multi-terminal panel with side tab rail
OutThisLife
committed
6875d6c
fix(desktop): keep inactive terminals sized so switching doesn't garble
OutThisLife
committed
c1bb34d
feat(desktop): ⌘W closes the focused terminal
OutThisLife
committed
2d55ff8
refactor(desktop): generalize focus check to isFocusWithin primitive
OutThisLife
committed
b02f453
fix(desktop): force a repaint when a terminal is re-activated
OutThisLife
committed
6e12f8c
feat(desktop): mirror agent background terminals as read-only tabs
OutThisLife
committed
ad831dd
feat(desktop): stream agent terminal output live instead of polling
OutThisLife
committed
520212c
fix(desktop): seed agent terminal tabs from process snapshots
OutThisLife
committed
6ac9ba9
fix(desktop): show the agent command before terminal output arrives
OutThisLife
committed
5d661a3
fix(docker): gate resource limit flags on cgroup controller availability (#54516)

benbarclay
and
angelos
authored
7cfa2fa
fix(terminal): require approval for host-bound Docker commands (#54483)

authored
9860d93
fix(security): redact bare-token credentials in URL userinfo (#6396) (#54475)
teknium1
authored
3483424
fix(gateway): log error-notification failures instead of silently swallowing (#54472)
teknium1
authored
f1cbe43
fix(config): strip `export ` prefix in .env parsers across three modules

authored and
teknium1
committed
5c1ac6c
test: cover export-prefix stripping in .env parsers (PR #6659)
teknium1
committed
490f215
fix(agent): guard Anthropic interrupt, cap vision data-URL size

aaronlab
authored and
teknium1
committed
ec148f5
fix(gateway): sanitize agent error messages, validate webhook gh args

aaronlab
authored and
teknium1
committed
27ddd8f
fix(profiles): validate custom alias names to prevent path traversal

committed
11183e8
feat(desktop): unify non-settings overlays under a shared Panel primitive
OutThisLife
committed
9912207
chore(desktop): drop dead overlay primitives
OutThisLife
committed
317b948
fix(approvals): warn and default to manual on unknown approvals.mode

authored and
teknium1
committed
dda3268
docs: add PR infographic for approval mode validation
teknium1
committed
c8fd47b
style(desktop): prettier + eslint pass
OutThisLife
committed
9f02eea
feat(desktop): live agent terminals + agent-driven tab close
OutThisLife
committed
e117cfd
feat(dashboard): catalogue all memory-provider API keys in OPTIONAL_ENV_VARS

benbarclay
authored and
teknium1
committed
dee41d0
fix(desktop): make agent terminal tabs fully readable
OutThisLife
committed
adacb16
refactor(desktop+dashboard): extract shared WebSocket/JSON-RPC layer
OutThisLife
committed
dfb561a
fix(desktop): match agent terminal scrollback to user tabs
OutThisLife
committed
6c52e4a
fix(shared): close websocket clients deterministically
OutThisLife
committed
5a4bdfd
feat(desktop): live gateway popout + statusbar/command-center polish
OutThisLife
committed
6776b2f
refactor(web): centralize dashboard websocket URL calls
OutThisLife
committed
f6ccf08
chore(desktop): keep the diff surgical
OutThisLife
committed
5a2906a
style(shared): apply workspace formatter to websocket helpers
OutThisLife
committed
216ace4
Merge pull request #54558 from NousResearch/bb/overlay-panels
OutThisLife
authored
83f09f5
fix(desktop): stop injecting ctrl-l into terminal startup
OutThisLife
committed
1a1e00f
Merge branch 'main' of github.com:NousResearch/hermes-agent into bb/desktop-multiterminal
OutThisLife
committed
ae465e9
fix(docker): include apps/shared in dashboard image build
OutThisLife
committed
e9b95df
docs: clarify desktop is self-contained, not dependent on the dashboard
OutThisLife
committed
f019a99
Merge pull request #54517 from NousResearch/bb/desktop-multiterminal
OutThisLife
authored
4488fe1
feat(cli): add headless `hermes serve` backend; desktop no longer launches `dashboard`
OutThisLife
committed
dff491a
fix(desktop): route old runtimes through `dashboard` when `serve` is absent
OutThisLife
committed
e684b80
test(cli): pin the `hermes serve` decoupling contract
OutThisLife
committed
9d9a50c
feat(desktop): persist & restore terminal tabs + scrollback across relaunch
OutThisLife
committed
1c0fa12
fix(agent): limit .hermes.md parent walk to git repos only

aaronlab
and
teknium1
committed
306b661
test(agent): cover .hermes.md no-git-root cwd-only behavior
teknium1
committed
14204b0
chore: remove committed PR infographics and gitignore the path (#54564)
teknium1
authored
43eaf79
fix: normalize lmstudio base urls

lkevincc0
authored and
teknium1
committed
163562b
chore(release): add AUTHOR_MAP entry for PR #53295 salvage
teknium1
committed
9cf9d3a
fix(matrix,mattermost): invite auth check + API path traversal guard

aaronlab
authored and
teknium1
committed
d836b2b
test(matrix): authorize inviter in DM-invite fixture for new invite-auth gate
teknium1
committed
e20ff35
fix(cron): don't report a false 'gateway not running' on external-provider instances (#54600)
benbarclay
authored
0943e2a
fix(skills): replace string prefix check with strict path containment

Ruzzgar
authored and
teknium1
committed
313a8c6
test(cli): drop pytest dep + use real sentinel handlers in serve test
OutThisLife
committed
1af109c
Merge pull request #54585 from NousResearch/bb/desktop-terminal-history
OutThisLife
authored
fb0644f
Merge pull request #54568 from NousResearch/bb/shared-websocket-layer
OutThisLife
authored
388268e
docs(cron): document explicit per-channel delivery targets for all platforms (#54630)
benbarclay
authored
e1f4098
fix(file-tools): sanitize host/relative cwd override before it reaches container sandbox (#54447) (#54616)

benbarclay
and
Tranquil-Flow
authored
8fe800e
Add dashboard backup upload and download

shannonsands
authored and
teknium1
committed
476875a
fix(gateway): clear session-scoped model overrides on /resume

Junass1
authored and
teknium1
committed
61a4526
fix(gateway): evict cached agent on auto-reset to prevent stale context summary leak

marco0158
authored and
teknium1
committed
b4300f2
test(gateway): pin auto-reset cached-agent eviction (#10710)
teknium1
committed
0b733a8
fix(security): cap WeCom callback body size before pre-auth XML parse (#54615)
teknium1
authored
74541be
fix(logging): suppress Windows lock timeout tracebacks

helix4u
authored and
teknium1
committed
98a7cfb
infographic: Windows CLH lock-timeout traceback suppression (#54436 salvage)
teknium1
committed
25d35cc
fix(agent): omit stream_options for native Gemini streaming

sgaofen
and
teknium1
committed
032d702
fix(agent): return OpenAI-shaped copilot ACP tool calls

sgaofen
authored and
teknium1
committed
0106082
fix(agent): stream copilot ACP chat completions

sgaofen
authored and
teknium1
committed
b481348
fix(vision): detect Ollama vision models via /api/show (#54511)

HexLab98
authored and
teknium1
committed
d7e573e
test(vision): cover Ollama /api/show vision capability routing (#54511)

HexLab98
authored and
teknium1
committed
23f245e
feat(dashboard): list & add arbitrary custom .env keys on the Keys page

benbarclay
authored and
teknium1
committed
1c75e7c
i18n: add Custom Keys strings to all locale files

benbarclay
authored and
teknium1
committed
20b03d9
fix(desktop): launch Windows backend as console python so child consoles are inherited, not flashed

jquesnelle
authored and
teknium1
committed
aa2ae36
test(desktop): match multiline spawn(ps, fullArgs) via regex like sibling sites
teknium1
committed
f860492
fix(memory): lazy-install supermemory + mem0 SDKs like honcho/hindsight

benbarclay
authored and
teknium1
committed
1289f12
chore: regenerate uv.lock for supermemory + mem0 extras
teknium1
committed
0434a9a
test(windows): harden pid-scan no-window assertion against captured-call leakage (#54707)
teknium1
authored
29f0968
fix(slack): subscribe to message.mpim + mpim scopes so group DMs work

benbarclay
authored and
teknium1
committed
4125cc3
feat(slack): nudge stale installs to add mpim scopes; mark message.mpim required
teknium1
committed
34e616e
fix(tools): send listItemId instead of sessionKey in Camofox tab creation

liuhao1024
authored and
teknium1
committed
2704563
fix(browser): send Authorization header in Camofox HTTP calls when CAMOFOX_API_KEY is set

liuhao1024
authored and
teknium1
committed
babd916
fix(tools): read browser.command_timeout in Camofox HTTP client

liuhao1024
authored and
teknium1
committed
fe38d50
fix(camofox): auto-recover from stale tab 404 on navigate

kaishi00
authored and
teknium1
committed
08d6195
fix(camofox): register CAMOFOX_API_KEY in OPTIONAL_ENV_VARS
teknium1
committed
41095fd
test(camofox): accept headers= kwarg in persistence test mocks
teknium1
committed
115e78c
fix(vision): cap vision_analyze fan-out concurrency process-wide

benbarclay
authored and
teknium1
committed
eddfecd
fix(vision): narrow the fan-out cap to the CPU encode burst only
teknium1
committed
75317d8
fix(config): v32 migration flips baked-in verify_on_stop=true to false (#54740)
teknium1
authored
bf0d8fe
fix(browser_tool): resolve race in _get_command_timeout cache returning None (#14331)

Sanjays2402
authored and
teknium1
committed
c79e6bc
fix(browser): route open-timeout base through _safe_command_timeout
teknium1
committed
9f97915
fix: propagate key_env from custom_providers into ProviderDef

telos-oc
authored and
teknium1
committed
fa11b11
chore(release): add telos-oc to AUTHOR_MAP for PR #14353 salvage
teknium1
committed
2f5950a
perf(profiles): fix list_profiles O(N*M) wrapper rescan (6.4s -> 0.4s)

max-chen
authored and
teknium1
committed
d5eee13
fix: offload blocking profiles endpoints from asyncio event loop (#54523)

Sahil-SS9
authored and
teknium1
committed
1bb7b59
chore(attribution): map mango001@126.com -> max-chen for salvaged #51194
teknium1
committed
10c9eaf
docs(infographic): add list_profiles perf-fix infographic
teknium1
committed
fa3dba4
fix(gateway): confirm final delivery before suppressing send

sgaofen
authored and
teknium1
committed
194bff0
test(reasoning-floor): isolate stale-timeout floor tests from config-module reload races (#54775)
teknium1
authored
dc5ef20
feat(dashboard): auto-initiate portal SSO redirect on unauthenticated load

benbarclay
authored and
teknium1
committed
f5ecbe1
refactor(dashboard-auth): drop redundant _interactive_providers helper
teknium1
committed
61f56d2
fix(session-db): enrich NULL session metadata via upsert instead of INSERT OR IGNORE
teknium1
committed
23c03ce
fix(security): redact browser CDP endpoint logs

Ruzzgar
authored and
teknium1
committed
576424c
fix(security): fail-closed feishu webhook rate limiter + whatsapp bridge path guard

Mibayy
authored and
teknium1
committed
9e49013
fix(gateway): use last_prompt_tokens for session-reset activity check

Mibayy
authored and
teknium1
committed
0fe9755
test(gateway): exercise last_prompt_tokens in reset-activity tests
teknium1
committed
cdd8e0a
fix(security): add session-id filename sanitizer to prevent path traversal

Xowiek
authored and
teknium1
committed
1debd5e
fix(security): wire session-id sanitizer into artifact paths + API boundary
teknium1
committed
ea1372d
fix(gateway): neutralize untrusted session metadata in prompts

Xowiek
authored and
teknium1
committed
09666ce
fix(gateway): also neutralize untrusted Matrix room name in prompt
teknium1
committed
dbad6d4
fix(s6): dot-prefix gateway staging dir so svscan ignores it mid-build (#54834)
benbarclay
authored
f53ba9b
fix(auxiliary): preserve max_tokens for NVIDIA NIM aux calls

HexLab98
authored and
kshitijk4poor
committed
88e6f9b
test(auxiliary): cover NVIDIA NIM max_tokens in _build_call_kwargs

HexLab98
authored and
kshitijk4poor
committed
f134529
feat(desktop): add context usage breakdown popover

austinpickett
and
cursoragent
committed
fd32456
Merge pull request #54907 from NousResearch/austin/feat/context-usage-popover
OutThisLife
authored
3bbeb9e
docs: create dev venv outside the source tree (root-cause fix for #7779) (#54862)
teknium1
authored
c6c1fd8
feat(web_extract): truncate-and-store instead of LLM summarization (#54843)
teknium1
authored
ee8cbfd
feat(desktop): read-only spectator transcript for subagent watch windows
OutThisLife
committed
7cf6758
Merge pull request #55033 from NousResearch/bb/subagent-watch-readonly
OutThisLife
authored
929dd9c
fix(desktop): show Gateway statusbar tooltip via composed trigger Slots

OutThisLife
and
wnuuee1
committed
7a6b3cb
Merge pull request #55086 from NousResearch/fix/gateway-statusbar-tooltip
OutThisLife
authored
ccc92c5
feat(gateway): suppress home-channel shutdown broadcast on flagged drains (#54824)
benbarclay
authored
b963d32
feat(desktop): add pet roam + motion/direction store signals
OutThisLife
committed
c6d6a1c
feat(desktop): pick directional run row from travel direction
OutThisLife
committed
964ec68
feat(desktop): add surface-aware pet wander loop
OutThisLife
committed
a8f1d9c
feat(desktop): wire roaming into the floating pet
OutThisLife
committed
7d3c1d5
feat(desktop): let the pet perch on the status bar and profile rail
OutThisLife
committed
4da744e
feat(desktop): add pet roam opt-in toggle + i18n
OutThisLife
committed
b72c9e1
fix(web): remove marketing backdrop stack for lighter dashboard shell

authored and
teknium1
committed
57d98eb
fix(web): theme terminal foreground and restore backdrop plugin slot

authored and
teknium1
committed
10374bb
fix(web): polish dashboard sidebar chrome and model card menus

authored and
teknium1
committed
1abf0c6
fix(web): confirm sidebar gateway restart and use DS checkboxes

authored and
teknium1
committed
dbe92b9
fix(web): confirm sidebar Update Hermes before running

authored and
teknium1
committed
75d4aa9
feat(desktop): ground the roaming pet — sprite-paced walk + feet on surface
OutThisLife
committed
0e2a5a3
feat(desktop): roaming pet patrols the base of an open overlay
OutThisLife
committed
a1e699a
Merge pull request #55114 from NousResearch/bb/pet-roam
OutThisLife
authored
d417ffb
feat(desktop): type voice.auto_tts in desktop config
OutThisLife
committed
bff91f9
feat(desktop): mirror voice.auto_tts into an $autoSpeakReplies store
OutThisLife
committed
09abbf8
feat(desktop): add read-replies-aloud composer strings
OutThisLife
committed
572c7db
feat(desktop): add auto-speak watcher hook
OutThisLife
committed
fcdc05c
feat(desktop): add read-replies-aloud toggle and wire auto-speak
OutThisLife
committed
596b813
fix(gateway): skip confirmed-dead delivery targets (deleted groups, blocked bots) (#55115)
teknium1
authored
290fa7f
Merge pull request #55154 from NousResearch/bb/desktop-auto-speak-replies
OutThisLife
authored
f171842
test(gateway): cover AsyncSessionDB offload + raw-call guard (failing)

yoniebans
authored and
teknium1
committed
89daacb
feat(gateway): add AsyncSessionDB offload facade

yoniebans
authored and
teknium1
committed
ea26f22
fix(gateway): route SessionDB calls through AsyncSessionDB

yoniebans
authored and
teknium1
committed
0896fac
fix(gateway): route aliased SessionDB calls through AsyncSessionDB

yoniebans
authored and
teknium1
committed
0a997aa
fix(gateway): offload the Telegram topic-recovery helper tree off the loop

yoniebans
authored and
teknium1
committed
6735162
test(gateway): assert interleaving safety of concurrent offloaded DB calls

yoniebans
authored and
teknium1
committed
d2ce2c8
fix(dashboard_auth): allow any http:// host in self-hosted OIDC redirect_uri (#55099)
spjoes
authored
f3d2dfb

Commits on Jun 30, 2026

refactor(relay): adopt scope_id wire key (guild_id → scope_id dual-read/write) (#55289)
benbarclay
authored
3a55f66
feat(ci): add CI timing report
ethernet8023
committed
808ba82
change(ci): remove lint PR comment
ethernet8023
committed
66ba9e0
fix(ci): unify amd64/arm64 docker pipelines
ethernet8023
committed
cca8b4e
fix(agents.md): fix documentation on subprocess isolation in tests
ethernet8023
committed
41c85fb
feat(display): friendly human-phrased tool labels for built-in tools (#55166)
teknium1
authored
481caa6
feat(dashboard_auth): support confidential clients (client_secret) in self-hosted OIDC (#55344)
benbarclay
authored
53a75f1
feat(gateway): show per-category context breakdown in /usage (#55204)
teknium1
authored
6aefc9d
feat(desktop): calmer, more realistic pet roam + split roam modules
OutThisLife
committed
b7322f9
refactor(desktop): collapse stroll-direction coin to a single draw
OutThisLife
committed
30cd39d
Merge pull request #55400 from NousResearch/bb/pet-roam-calmer
OutThisLife
authored
33d044c
fix(slack): warn when configured token is a user token, not a bot token

benbarclay
authored and
teknium1
committed
184c10c
feat(xai): Imagine public-URL storage, chaining & video edit/extend

Jaaneek
authored and
teknium1
committed
9ce79cd
fix(xai): suppress false-positive windows-footgun on binary image read
teknium1
committed
5a3d7fb
feat(claude-design): add surface-first conditioning + slop diagnostic (#55399)
teknium1
authored
d4c1401
fix(container-boot): autostart a gateway stranded in 'draining' state

benbarclay
authored and
teknium1
committed
d3f2931
fix(container-boot): also autostart a gateway stranded in 'degraded'
teknium1
committed
463b1df
feat(gateway): per-platform typing_indicator toggle

benbarclay
authored and
teknium1
committed
05ac167
fix(kanban): detect clean-exit workers reaped by init as protocol violations (#1096)
MosaIQ
committed
00b3e33