fix(anthropic-oauth): sanitize user messages + tool results at a single boundary - #1

Merged

mssteuer merged 201 commits into

mainfrom

fix/anthropic-oauth-harness-sanitizer

Apr 11, 2026

Commits on Apr 10, 2026

fix(anthropic): omit tool-streaming beta on MiniMax endpoints

kshitijk4poor
authored and
teknium1
committed
08e2a1a
fix: add actionable hint for OpenRouter 'no tool endpoints' error
teknium1
committed
b87d002
fix: skip stale Nous pool entry when agent_key is expired

benbarclay
authored and
teknium1
committed
13b3ea6
fix: sync refreshed OAuth tokens from pool back to auth.json providers

benbarclay
authored and
teknium1
committed
dfde405
fix: proactive Codex CLI sync before refresh + retry on failure

benbarclay
authored and
teknium1
committed
a64d8a8
fix: add auth.json write-back for Codex retry and valid-token early-return paths
teknium1
committed
4caa635
feat: add Codex fast mode toggle (/fast command)

authored and
teknium1
committed
d416a69
feat: expand /fast to all OpenAI Priority Processing models (#6960)
teknium1
authored
8394b5d
fix(streaming): prevent <think> in prose from suppressing response output

jquesnelle
authored and
teknium1
committed
bda9aa1
fix: increase stream read timeout default to 120s, auto-raise for local LLMs (#6967)
teknium1
authored
f783986
fix(telegram): adaptive batch delay for split long messages
teknium1
committed
5075717
fix(discord): add text batching to merge split long messages
teknium1
committed
0fc0c1c
fix(matrix): add text batching to merge split long messages
teknium1
committed
07148ca
fix(wecom): add text batching to merge split long messages
teknium1
committed
1723e8e
fix(feishu): add adaptive batch delay for split long messages
teknium1
committed
f92a0b8
test: add text batching tests for Discord, Matrix, WeCom, Telegram, Feishu
teknium1
committed
1ed0049
test: disable text batching in existing adapter tests
teknium1
committed
8104f40
fix(docker): use uv for dependency resolution to fix resolution-too-deep error

EnGassa
authored and
teknium1
committed
0602ff8
docs: document streaming timeout auto-detection for local LLMs (#6990)
teknium1
authored
d5023d3
fix(gateway): bypass text batching when delay is 0 (#6996)
teknium1
authored
13d7ff3
fix: clear conversation_history after mid-loop compression to prevent empty sessions (#7001)
teknium1
authored
871313a
fix(update): always reset on stash conflict — never leave conflict markers (#7010)
teknium1
authored
0848a79
feat: add Anthropic Fast Mode support to /fast command (#7037)
teknium1
authored
8779a26
fix(gateway): /usage now shows rate limits, cost, and token details between turns (#7038)
teknium1
authored
6da952b
fix: update Kimi Coding User-Agent to KimiCLI/1.30.0

kshitijk4poor
authored and
teknium1
committed
9431f82
fix(cli): add missing os and platform imports in uninstall.py (#7034)
JiayuuWang
authored
a758883
fix: set retryable=False for message-based auth errors in _classify_by_message() (#7027)
kuishou68
authored
45034b7
Harden setup provider flows

authored and
teknium1
committed
38ccd9e
Refresh OpenRouter model catalog

authored and
teknium1
committed
7368854
fix: harden cron script timeout and provider recovery

DomGrieco
authored and
teknium1
committed
38cce22
docs: add cron script timeout and provider recovery documentation
teknium1
committed
95ee453
fix(cli): prevent stale image attachment on text paste and voice input

authored and
teknium1
committed
940237c
fix(security): require auth for session continuation and warn on missing API key

Cafexss
authored and
teknium1
committed
a048548
fix(gateway): apply /model session overrides so switch persists across messages

kshitijk4poor
authored and
teknium1
committed
51d826f
fix(terminal): cap foreground timeout to prevent session deadlocks

kshitijk4poor
authored and
teknium1
committed
6c3565d
fix: reject foreground timeout above cap instead of clamping
teknium1
committed
a420235
fix(copilot): add missing Copilot-Integration-Id header

authored and
teknium1
committed
eaa21a8
fix(acp): populate usage from top-level result fields

Astro-Han
authored and
teknium1
committed
f92298f
fix(acp): remove dead nested usage dict path
teknium1
committed
4e78963
fix(config): allow HERMES_HOME_MODE env var to override _secure_dir() permissions (#6993)
ygd58
authored
1495647
feat(environments): unified file sync with change tracking and deletion

alt-glitch
authored and
teknium1
committed
1f1f297
test: add reproducible perf benchmark for file sync overhead

alt-glitch
authored and
teknium1
committed
41c233c
fix(tests): update mocks for file sync changes

alt-glitch
authored and
teknium1
committed
aad40f6
fix(gateway): remove DM thread session seeding to prevent cross-thread contamination (#7084)
teknium1
authored
b39ea46
feat(discord): add allowed_channels whitelist config

Jeff Davis
authored and
teknium1
committed
5b22e61
fix(model_metadata): add xAI Grok context length fallbacks

julientalbot-ergonomia
authored and
teknium1
committed
b577697
fix(dingtalk,api): validate session webhook URL origin, cap webhook cache, reject header injection

authored and
teknium1
committed
37bb4f8
fix: align auth-by-message classification with status-code path, decode URLs before secret check

authored and
teknium1
committed
738f0ba
fix(approval,mcp): log silent exception handlers, narrow OAuth catches, close server on error

authored and
teknium1
committed
94f5979
fix: hidden_div regex bypass with newlines, credential config silent failure, webhook route error severity

authored and
teknium1
committed
9afe178
fix: apply hidden_div regex newline bypass fix to skills_guard.py
teknium1
committed
30ae68d
test: update session ID tests to require auth (follow-up to #6930)
teknium1
committed
7d426e6
fix: include custom_providers in /model command listings and resolution

donrhmexe
authored and
teknium1
committed
a2f46e4
fix: extract custom_provider_slug() helper, harden gateway test
teknium1
committed
568be71
mattermost added as deliver to webhook gateway

olafthiele
authored and
teknium1
committed
52bd3bd
fix: add all platforms to webhook cross-platform delivery
teknium1
committed
6d5f607
feat(cron): support Discord thread_id in deliver targets

maxyangcn
authored and
teknium1
committed
19292eb
fix(run_agent): recover primary client on openai transport errors

helix4u
authored and
teknium1
committed
9aedab0
fix(bluebubbles): auto-register webhook with BlueBubbles server on connect

mehmoodosman
authored and
teknium1
committed
c6ff5e5
fix: improve bluebubbles webhook registration resilience
teknium1
committed
f4f8b95
fix(run-agent): rotate credential pool on billing-classified 400s

helix4u
authored and
teknium1
committed
5a8b5f1
fix: STT provider-model mismatch — whisper-1 fed to faster-whisper (#7113)
teknium1
authored
0f597dd
fix(gateway): remap all paths in system service unit to target user's home

Tranquil-Flow
authored and
teknium1
committed
8dd738c
fix(streaming): update stale-stream timer during Anthropic native streaming (#7117)
teknium1
authored
6852806
fix(gateway): scope /yolo to the active session

tesseracttars-creator
authored and
teknium1
committed
9a0dfb5
fix(mcp): combine content and structuredContent when both present (#7118)
teknium1
authored
04baab5
fix: remove 115 verified dead code symbols across 46 production files

alt-glitch
authored and
teknium1
committed
96c0600
fix: restore 6 tests that tested live code but used deleted helpers

alt-glitch
authored and
teknium1
committed
cff9b7f
chore: remove spec-dead-code.md from tracked files

alt-glitch
authored and
teknium1
committed
f63cc3c
fix: clean up stale test references to removed attributes

alt-glitch
authored and
teknium1
committed
c6c7697
fix: update 6 test files broken by dead code removal
teknium1
committed
9574858
fix(gateway): launchd_stop uses bootout so KeepAlive doesn't respawn (#7119)
teknium1
authored
437feab
fix(acp): declare session load and resume capabilities in initialize response (#6985)
luyao618
authored
1bcc87a
docs: add cron troubleshooting guide

authored and
teknium1
committed
fbfa7c2
fix: correct inaccuracies and add sidebar entry for cron troubleshooting guide
teknium1
committed
af7d809
fix(gateway): avoid false failure reactions on restart cancellation

bobashopcashier
authored and
teknium1
committed
4f2f09a
fix(gateway): route /background through active-session bypass

Tranquil-Flow
authored and
teknium1
committed
429da6c
test(gateway): add /background to active-session bypass tests

Tranquil-Flow
authored and
teknium1
committed
bb3a4fc
fix(gateway): replace assertions with proper error handling in Telegram and Feishu

Cafexss
authored and
teknium1
committed
96f9b91
fix(telegram): harden HTTPX request pools during reconnect

borischou
authored and
teknium1
committed
b1e2b5e
fix(gateway): prevent duplicate messages on no-message-id platforms

KUSH42
authored and
teknium1
committed
5dea7e1
fix(tests): repair three pre-existing gateway test failures

KUSH42
authored and
teknium1
committed
9bb8cb8
fix(gateway): implement platform-aware PID termination

H-5-Isminiz
authored and
teknium1
committed
00dd5cc
fix: prevent duplicate completion notifications on process kill (#7124)
teknium1
authored
c8e4dcf
fix(gateway): validate Slack image downloads before caching

Tranquil-Flow
authored and
teknium1
committed
0b143f2
fix(api-server): share one Docker container across all API conversations (#7127)
teknium1
authored
f4c7086
fix(security): prevent SSRF redirect bypass in Slack adapter

Dusk1e
authored and
teknium1
committed
7148096
fix: make safe_url_for_log public, add SSRF redirect guards to base.py cache helpers
teknium1
committed
7663c98
fix(security): enforce path boundary checks in skill manager operations

Junass1
authored and
teknium1
committed
e683c9d
feat(auth): add is_provider_explicitly_configured() helper

authored and
teknium1
committed
d716460
fix(auth): gate Claude Code credential seeding behind explicit provider config

authored and
teknium1
committed
f3fb3ed
fix(auth): make 'auth remove' for claude_code prevent re-seeding

authored and
teknium1
committed
419b719
fix(auxiliary): skip anthropic in fallback chain when not explicitly configured

authored and
teknium1
committed
5a1cce5
security(approval): close 4 pattern gaps found by source-grounded audit

win4r
authored and
teknium1
committed
aedf6c7
fix(feishu): wrap image bytes in BytesIO before uploading to lark SDK

Cygra
authored and
teknium1
committed
2629927
feat(telegram): support custom base_url for credential proxy

authored and
teknium1
committed
e376a9b
fix(cli): make /status show gateway-style session status

xinbenlv
authored and
teknium1
committed
74e883c
fix(matrix): remove eyes reaction on processing complete

fxfitz
authored and
teknium1
committed
cc12ab8
test: update Matrix reaction tests for new _send_reaction return type

fxfitz
authored and
teknium1
committed
58413c4
fix(matrix): log redact failures and add missing reaction test cases

authored and
teknium1
committed
21bb254
feat(discord): add channel_skill_bindings for auto-loading skills per channel

teknium1
and
RunzhouLi
committed
76a1e6e
test(discord): add tests for channel_skill_bindings resolution
teknium1
committed
49da1ff
fix: flush stdin after curses/terminal menus to prevent escape sequence leakage (#7167)
teknium1
authored
f3ae1d7
fix: UTF-8 config encoding, pairing hint, credential_pool key, header normalization (#7174)
teknium1
authored
6d2fa03
fix(telegram): use valid reaction emojis for processing completion (#7175)
teknium1
authored
0e315a6
fix: add Alibaba/DashScope rate-limit pattern to error classifier
teknium1
committed
5fc5ced
fix: pass config_context_length to switch_model context compressor

rarf
authored and
teknium1
committed
fd3e855
fix: opencode-go missing from /model list and improve HERMES_OVERLAYS credential check

rarf
authored and
teknium1
committed
49bba10
fix: always show model selection menu for custom providers

r266-tech
authored and
teknium1
committed
0cdf523
test: add regression tests for custom provider model switching

r266-tech
authored and
teknium1
committed
e3b395e
fix(test): correct mock target for fetch_api_models in custom provider tests

authored and
teknium1
committed
1662b7f
fix(model): normalize native provider-prefixed model ids

bobashopcashier
authored and
teknium1
committed
fd5cc6e
fix(model): normalize direct provider ids in auxiliary routing

bobashopcashier
authored and
teknium1
committed
b730c29
fix(model): tighten direct-provider fallback normalization

bobashopcashier
authored and
teknium1
committed
916fbf3
fix: profile paths broken in Docker — profiles go to /root/.hermes instead of mounted volume (#7170)
teknium1
authored
4a65c9c
feat(gateway): add native Weixin/WeChat support via iLink Bot API

bravohenry
authored and
teknium1
committed
5b63bf7
fix: salvage follow-ups for Weixin adapter (#6747)
teknium1
committed
be4f049
fix: complete Weixin platform parity audit — 16 missing integration points
teknium1
committed
7cec784
fix(gateway): handle provider command without config

bobashopcashier
authored and
teknium1
committed
5b8beb0
feat(gateway): add fast mode support to gateway chats

Felix Cardix
authored and
teknium1
committed
970192f
fix: add _session_model_overrides to test runner fixture
teknium1
committed
7e60b09
fix: fall back to default certs when CA bundle path doesn't exist (#7352)
teknium1
authored
f72faf1
fix: propagate child activity to parent during delegate_task (#7295)
teknium1
authored
a093eb4
fix: parallelize skills browse/search to prevent hanging (#7301)
teknium1
authored
7e28b7b
fix: handle UnicodeEncodeError with ASCII codec (#6843)

Hermes Audit
authored and
teknium1
committed
71036a7
fix(unicode): sanitize surrogate metadata and allow two-pass retry

Hermes Audit
authored and
teknium1
committed
2c99b4e
fix(agent): preserve quoted @file references with spaces

WAXLYY
authored and
teknium1
committed
c6e1add
fix(browser): hardening — dead code, caching, scroll perf, security, thread safety

kshitijk4poor
authored and
teknium1
committed
37a1c75
fix(gateway): reject file paths in get_command() + file-drop tests (#7356)
teknium1
authored
360b21c
fix: handle NoneType request_overrides in fast_mode check (#7350)
0xbyt4
authored
0bea603
feat(cli): restore live per-tool elapsed timer in TUI spinner (#7359)
teknium1
authored
f83e86d
fix: per-profile subprocess HOME isolation (#4426) (#7357)
teknium1
authored
4fb42d0
fix(delegate): sync self.base_url with client_kwargs after credential resolution

Tranquil-Flow
authored and
teknium1
committed
6c11544
fix(delegate): make max_concurrent_children configurable + error on excess

angelos
authored and
teknium1
committed
7ccdb74
test: update schema assertion after maxItems removal
teknium1
committed
363d5d5
fix: use raw docstring to suppress invalid escape sequence warning

0xbyt4
authored and
teknium1
committed
f07b35a
feat(providers): add native xAI provider

Julientalbot
authored and
teknium1
committed
8bcb8b8
feat: multi-agent Discord filtering — skip messages addressed to other bots
shannonsands
committed
03f23f1
fix: resolve overlay provider slug mismatch in /model picker (#7373)

authored
496e378
fix: guard api_kwargs in except handler to prevent UnboundLocalError (#7376)
teknium1
authored
ea81aa2
fix(install): handle Playwright deps correctly on non-apt systems

Tranquil-Flow
authored and
teknium1
committed
2b0912a
fix(docker): --init for zombie reaping + sleep infinity for idle-based lifetime

angelos
authored and
teknium1
committed
8254b82
fix(deps): add socks extra to httpx for SOCKS proxy support

duerzy
authored and
teknium1
committed
e1167c5
fix(docker): add missing skins/plans/workspace dirs to entrypoint

teknium1
and
Tranquil-Flow
committed
e8f16f7
fix(feishu): register group chat member event handlers

ygd58
authored and
teknium1
committed
d8cd797
feat(matrix): add MATRIX_DM_MENTION_THREADS env var

fxfitz
authored and
teknium1
committed
3e24ba1
fix(mcp): fall back when SIGKILL is unavailable

Junass1
authored and
teknium1
committed
6f63ba9
fix(tools): guard against ValueError on int() env var and header parsing

Cafexss
authored and
teknium1
committed
c1f832a
fix(aux): honor api_mode for custom auxiliary endpoints

iacker
authored and
teknium1
committed
475cbce
fix(patch): harden V4A patch parser and fuzzy match — 9 correctness bugs

KUSH42
authored and
teknium1
committed
0e939af
test: remove dead TestResolveForcedProvider tests (function doesn't exist on main)
teknium1
committed
a4fc38c
fix(cron): missing field init, unnecessary save, and shutdown cleanup

Cafexss
authored and
teknium1
committed
c5ab760
fix(cron): prevent silent data loss by raising exceptions on unrecoverable jobs.json read failures (#6797)

devorun
authored and
teknium1
committed
2a6cbf5
fix(security): enforce API_SERVER_KEY for non-loopback binding

entropidelic
authored and
teknium1
committed
989b950
feat(agent): add AIAgent.close() for subprocess cleanup

pefontana
authored and
teknium1
committed
5b42aec
fix(gateway): call agent.close() on session end to prevent zombies

pefontana
authored and
teknium1
committed
fbe2835
fix(delegate): close child agent after delegation completes

pefontana
authored and
teknium1
committed
672cc80
test: add zombie process cleanup tests

pefontana
authored and
teknium1
committed
8414f41
fix(gateway): guard _agent_cache_lock access in reset handler

pefontana
authored and
teknium1
committed
f00dd31
fix(gateway): look up expired agents in _agent_cache, add global kill_all

pefontana
authored and
teknium1
committed
9555a0c
test(e2e): add Discord e2e integration tests

dsocolobsky
authored and
teknium1
committed
7033dbf
refactor(e2e): unify Telegram and Discord e2e tests into parametrized platform fixtures

dsocolobsky
authored and
teknium1
committed
7956563
test(e2e): add Slack to parametrized e2e platform tests

dsocolobsky
authored and
teknium1
committed
dab5ec8

Commits on Apr 11, 2026

fix(gateway): replace os.environ session state with contextvars for concurrency safety

0xFrank-eth
and
teknium1
committed
e8034e2
fix(gateway): derive channel directory platforms from enum instead of hardcoded list (#7450)
teknium1
authored
baddb6f
fix(nix): gate matrix extra to Linux in [all] profile (#7461)
alt-glitch
authored
9a0c44f
fix(api): send tool progress as custom SSE event to prevent model corruption (#6972)

Bartok Moltbot
authored and
teknium1
committed
9924229
fix: activate fallback provider on repeated empty responses + user-visible status (#7505)
teknium1
authored
842e669
feat: add ContextEngine ABC, refactor ContextCompressor to inherit from it

stephenschoettler
authored and
teknium1
committed
fe7e6c1
feat: wire context engine plugin slot into agent and plugin system

stephenschoettler
authored and
teknium1
committed
92382fb
feat: wire context engine tools, session lifecycle, and tool dispatch

stephenschoettler
authored and
teknium1
committed
5d8dd62
fix: robust context engine interface — config selection, plugin discovery, ABC completeness
teknium1
committed
3fe6938
fix: no auto-activation + unified hermes plugins UI with provider categories
teknium1
committed
436dfd5
docs: context engine plugin system + unified hermes plugins UI
teknium1
committed
79198eb
perf(daytona): bulk upload files in single HTTP call

Rafa-Ross
authored and
teknium1
committed
bff6485
fix(config): bridge container resource settings to env vars

Rafa-Ross
authored and
teknium1
committed
ac30abd
fix(daytona): use logger.warning instead of warnings.warn for disk cap

Rafa-Ross
authored and
teknium1
committed
223a062
test(file_sync): add tests for bulk_upload_fn callback

Rafa-Ross
authored and
teknium1
committed
97bb64d
fix: remove unused BulkUploadFn import from daytona.py

Rafa-Ross
authored and
teknium1
committed
830040f
feat(gateway): WSL-aware gateway with smart systemd detection (#7510)
teknium1
authored
a8fd725
refactor(matrix): swap matrix-nio for mautrix-python dependency

alt-glitch
authored and
teknium1
committed
1850747
refactor(matrix): rewrite adapter from matrix-nio to mautrix-python

alt-glitch
authored and
teknium1
committed
8053d48
test(matrix): update all test mocks for mautrix-python API

alt-glitch
authored and
teknium1
committed
417e28f
docs(matrix): update all references from matrix-nio to mautrix

alt-glitch
authored and
teknium1
committed
d5be23a
fix(matrix): persist E2EE crypto store and fix decrypted event dedup

alt-glitch
authored and
teknium1
committed
1f3f120
refactor(matrix): simplify adapter after code review

alt-glitch
authored and
teknium1
committed
bc8b938
fix(matrix): close leaked sessions on connect failure + HMAC-sign pickle store

alt-glitch
authored and
teknium1
committed
5d3332d
fix(matrix): ignore m.notice messages to prevent bot-to-bot loops

alt-glitch
authored and
teknium1
committed
be06db7
fix: guard mautrix imports for gateway-safe fallback + fix test isolation
teknium1
committed
be9198f
feat(delegation): add configurable reasoning_effort for subagents

hermes-agent-dhabibi
authored and
teknium1
committed
718e8ad
fix: wrap copilot Responses-API models in CodexAuxiliaryClient for auxiliary tasks

hermes-agent-dhabibi
authored and
teknium1
committed
c1af614
fix(tools): remove dead code in _is_likely_binary and harden _check_lint against brace paths

authored and
teknium1
committed
fc06a01
fix(gateway): make compress responses truthful

bobashopcashier
authored and
teknium1
committed
d6c2ad7
fix(gateway): make manual compression feedback truthful

bobashopcashier
authored and
teknium1
committed
1ffd92c
fix: don't evict cached agent on failed runs — prevents MCP restart loop (#7539)
teknium1
authored
2410324
fix(gateway): drain in-flight work before restart

bobashopcashier
authored and
teknium1
committed
3163731
fix(gateway): tolerate partial runner construction

bobashopcashier
authored and
teknium1
committed
c4ccb32
fix(gateway): self-request service restarts when invoked in-process

bobashopcashier
authored and
teknium1
committed
a55c044
fix(gateway): address restart review feedback

bobashopcashier
authored and
teknium1
committed
ecfae98
fix: restore agent.close() cleanup and correct /restart category
teknium1
committed
9605195
fix(anthropic-oauth): sanitize user messages and tool results at single boundary
jeanclawd99
committed
b2b9e51