feat: harden roadmap tier2 tools - #1

Merged

xbrrr merged 371 commits into

mainfrom

feat/roadmap-tier2-2605

May 26, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on May 24, 2026

fix(cli): reuse canonical root model key normalization in load_cli_config

novax635
authored and
teknium1
committed
421ab81
feat(cli): kanban promote verb for manual todo->ready recovery

thedavidmurray
authored and
teknium1
committed
d46adad
feat(kanban): --ids bulk promote + AUTHOR_MAP entry for #29464
teknium1
committed
b207dc2
fix(profiles): cross-profile soft guard on file-write tools + system-prompt hint (#31290)
teknium1
authored
d3c167b
fix(wecom-callback): retry send with fresh token on errcode 40001/42001

AhmetArif0
authored and
teknium1
committed
21db250
gateway: debounce queued text follow-ups

pnascimento9596
authored and
teknium1
committed
7abd627
chore: map pnascimento9596@gmail.com for PR #31235 salvage
teknium1
committed
51bb8c0
fix(gateway): drop text snippet from debounce debug log (CodeQL)

teknium1
and
pnascimento9596
committed
1bed4e8
fix(wecom): guard flush task against cancel-delivery race to prevent message loss

AhmetArif0
authored and
teknium1
committed
5848174
fix(cli): decouple tool_progress=verbose from global DEBUG logging (#31379)
teknium1
authored
c9b3eea
feat(secrets/bitwarden): EU Cloud + self-hosted server URL support (#31378)
teknium1
authored
bc3f1f4
fix(security): restrict dashboard websockets to loopback clients (#30741)
teknium1
authored
9732559
fix(gateway): stop enabling dingtalk allow-all during setup (#30743)
teknium1
authored
1f897b0
fix(gateway): remove discord role allowlist auth bypass (#30742)
teknium1
authored
c3caca6
security: restrict default webhook toolset capabilities (#30745)
teknium1
authored
e4a1220
fix(qqbot): authorize approval button interactions by session owner (#30737)
teknium1
authored
3e78e35
Harden msgraph webhook auth requirements (#30169)
teknium1
authored
4ca77f1
fix(docker): keep dashboard side-process loopback by default (#30740)
teknium1
authored
2df2f91
security: harden API server key placeholder handling (#30738)
teknium1
authored
be27bfe
fix(feishu): authorize interactive exec approval callbacks (#30739)
teknium1
authored
485292a
fix(feishu): enforce auth and chat binding for approval buttons (#30744)
teknium1
authored
bdb97b8
fix(feishu): require webhook auth secret and honor config extras (#30746)
teknium1
authored
197f63f
fix(acp): deliver final_response after streaming — transform_llm_output hook now visible

kenyonxu
authored and
teknium1
committed
7eb6c7f
fix: propagate response_transformed flag — plugin hook output survives streaming suppression

kenyonxu
authored and
teknium1
committed
8edeebe
fix(gateway): propagate response_transformed flag through run_sync return dict

kenyonxu
authored and
teknium1
committed
a4ceead
fix(gateway): edit streamed message instead of sending duplicate when response_transformed

kenyonxu
authored and
teknium1
committed
5cb21e3
test(gateway): regression for plugin-transformed response after streaming
teknium1
committed
b9f533a
chore: map kenyon1977@gmail.com for PR #29119 salvage
teknium1
committed
26088ca
fix(acp): only deliver final_response after streaming when transformed
teknium1
committed
60d20a3
fix(streaming): emit finish_reason=length on text-only partial-stream stub

xxxigm
authored and
teknium1
committed
9140be7
fix(conversation-loop): tailor length-continuation prompt for partial stream

xxxigm
authored and
teknium1
committed
20b3703
test(streaming): pin partial-stream-stub finish_reason + continuation contract

xxxigm
authored and
teknium1
committed
6cafcf9
fix(mcp): raise ImportError instead of NameError when stdio SDK missing (#31450)
teknium1
authored
5acaeba
fix(dashboard): require auth for plugin rescan (#27340)
LaPhilosophie
authored
ee002e7
fix(gateway): validate Svix webhook signatures (#30200)
BaxBit
authored
bbf02c3
fix: fail closed for webhook routes without secrets

m0n3r0
authored and
teknium1
committed
dbf73e9
fix(webhook): use 403 not 500 for missing-secret rejection
teknium1
committed
15aa688
chore(release): map m0n3r0 for PR #29629 salvage
teknium1
committed
5e6749f
fix(feishu): validate verification token before reflecting url_verification challenge

m0n3r0
and
teknium1
committed
f378f00
fix(state): restrict sensitive store file permissions

Hinotoi-agent
and
teknium1
committed
3bace07
fix(tests): align CI tests with recent security hardening (#31470)
teknium1
authored
889903f
fix: emit guardrail halt message to client before closing stream

vanthinh6886
authored and
teknium1
committed
38b8d0d
test(guardrail): assert halt message reaches stream_delta_callback
teknium1
committed
186bf25
fix(dashboard): validate WebSocket Host and Origin

Hinotoi-agent
authored and
teknium1
committed
2e66eef
test(dashboard): send loopback headers for WebSocket sidecar test

Hinotoi-agent
authored and
teknium1
committed
d9ec905
fix(vision): route auxiliary.vision.provider=openai to api.openai.com, skip text-only main (#31452)
teknium1
authored
3d66787
fix(gateway): swallow transient Telegram TimedOut at loop level
teknium1
committed
5b52e26
fix(agent): abort on HTTP 402 after pool rotation and fallback fail (#31443)
teknium1
authored
8065e70
feat(security): on-demand supply-chain audit via OSV.dev (#31460)
teknium1
authored
7ab1677
fix(transport): strip Hermes-internal scaffolding keys before chat.completions

Soju06
authored and
teknium1
committed
775a172
fix(error-classifier): treat 5xx request-validation errors as non-retryable

Soju06
authored and
teknium1
committed
6212e9a
chore: map soju06@users.noreply.github.com for PR #26054 salvage
teknium1
committed
88834ba
fix(matrix,gateway): Matrix E2EE installs full dep set; plugins respect is_connected
teknium1
committed
54e61f9
fix(telegram): gate send() on send-path health after reconnect storms (#31165)

dskwe
and
teknium1
committed
476c897
fix(agent): only strip mcp_ prefix for OAuth-injected tools (GH-25255)

hayka-pacha
authored and
teknium1
committed
2f91a84
fix(anthropic): skip mcp_ prefix on outgoing tool schemas when already prefixed
teknium1
committed
eea9553
fix(telegram): preserve new DM topic lanes

Qwinty
authored and
teknium1
committed
bdc9b0e
test(telegram): add brand-new-topic regression for #31086

committed
16eed4f
fix: show recap after in-session resume

SamuelZ12
authored and
teknium1
committed
961e34a
fix(cli): skip tool-call-only entries in resume recap, expose limits as config options

ygd58
authored and
teknium1
committed
cdf4876
chore(release): map zhangsamuel12@gmail.com to SamuelZ12 (PR #7480)
teknium1
committed
27c4ba9
test(cli): reconcile resume-recap tests with skip-tool-only default and compression-chain helper
teknium1
committed
5dc10ec
feat(config): document resume-recap tuning keys in DEFAULT_CONFIG
teknium1
committed
13b85bc
fix(debug): redact BlueBubbles webhook secrets

helix4u
authored and
teknium1
committed
514f502
fix(gateway): seed plugin extras before is_connected gate (#31703)
teknium1
authored
396ee69
fix(kanban): refuse to rmtree workspace_path outside managed scratch root (#28818)

briandevans
authored and
teknium1
committed
80ad160
fix(kanban): restrict managed-scratch roots to workspaces/ dirs only

briandevans
authored and
teknium1
committed
23115b5
fix(kanban): scratch tasks must not inherit board.default_workdir (#28818)

leeseoki0
and
teknium1
committed
ce529d6
chore(release): map leeseoki0 for PR #31315 salvage
teknium1
committed
99a7ecc
fix(cli): add inline --yes/now skip for destructive slash commands (#30768)
teknium1
committed
8e68426
fix(cli): show full session titles in /resume list

LeonSGP43
authored and
teknium1
committed
6c44d53
fix(file-safety): write-deny pairing/ directory to prevent approved-list injection

AhmetArif0
authored and
teknium1
committed
4f4e337
feat: support numbered resume selection in cli and gateway

daizhonggeng
authored and
teknium1
committed
fef733d
chore(release): map 490408354@qq.com to daizhonggeng (PR #9020)
teknium1
committed
8758007
i18n+tests: add list_item_numbered, list_footer_numbered, out_of_range for 15 locales
teknium1
committed
c043c86
test(cli): update resume usage-hint assertion for numbered selection
teknium1
committed
9c08070

Commits on May 25, 2026

fix(security): add missing credential paths to write denylist (#27217)
flamiinngo
authored
fa957c0
fix(file-safety): deny reads of Google OAuth tokens (#30972)
Hinotoi-agent
authored
bba76f3
fix(security): close TOCTOU window when saving Claude Code OAuth credentials (#21152)
Gutslabs
authored
223a397
ci(supply-chain): anchor install-hook regex at repo root (#31744)
teknium1
authored
be89c2e
fix(security): restrict write access to Anthropic OAuth credential store

kronexoi
authored and
teknium1
committed
4694524
chore(release): map kronexoi for PR #30553 salvage
teknium1
committed
5598781
Protect dashboard OAuth credentials with the same file-safety guarantees as other auth paths

shaun0927
authored and
teknium1
committed
243ebc7
fix(security): redact credentials before persistence in session capture

committed
dcc163e
chore(release): map vgocoder for PR #24758 salvage
teknium1
committed
bf2f3b2
fix(google_chat): harden oauth credential persistence with atomic private writes (#24788)
Zyrixtrex
authored
782681f
feat(tts): add register_tts_provider() plugin hook (closes #30398)

kshitijk4poor
authored and
teknium1
committed
00ec0b6
docs(plans): add s6-overlay supervision plan (v3)

benbarclay
authored and
teknium1
committed
d36461d
test(docker): add conftest fixtures for docker harness

benbarclay
authored and
teknium1
committed
0830213
test(docker): lock baseline behavior for Phase 0 harness

benbarclay
authored and
teknium1
committed
6e6acde
test(docker): apply 180s timeout to docker harness tests

benbarclay
authored and
teknium1
committed
a18f69e
test(docker): stabilize Phase 0 baseline harness

benbarclay
authored and
teknium1
committed
440147e
ci(docker): add hadolint + shellcheck for container build inputs

benbarclay
authored and
teknium1
committed
b2168bf
feat(service_manager): add ServiceManager protocol + host wrappers

benbarclay
authored and
teknium1
committed
51914b0
feat(docker)!: replace tini with s6-overlay as PID 1

benbarclay
authored and
teknium1
committed
e0e9c89
feat(service_manager): add S6ServiceManager for runtime gateway supervision

benbarclay
authored and
teknium1
committed
0abf661
feat(docker): per-profile s6 supervision + container-restart reconciliation

benbarclay
authored and
teknium1
committed
2afefc5
docs(s6): document container supervision; doctor + skill + user-guide updates

benbarclay
authored and
teknium1
committed
a36221e
feat(docker): remove gosu from bundled image; s6-setuidgid handles privilege drop

benbarclay
authored and
teknium1
committed
4b4c36c
fix(service_manager): s6 detection works for unprivileged hermes user

benbarclay
authored and
teknium1
committed
fc39296
fix(docker): support multi-arch s6-overlay install (amd64 + arm64)

benbarclay
authored and
teknium1
committed
f7893df
fix(docker): SHA256-verify s6-overlay tarballs

benbarclay
authored and
teknium1
committed
d4e452b
fix(ci): drop --entrypoint override in hermes-smoke-test action

benbarclay
authored and
teknium1
committed
fc26a5a
fix(gateway): route --all stop/restart through s6 under container

benbarclay
authored and
teknium1
committed
6dedaa4
docs(docker): dashboard IS supervised — update note that contradicted the PR

benbarclay
authored and
teknium1
committed
a1a53a5
fix(container_boot): always register gateway-default slot

benbarclay
authored and
teknium1
committed
b044c1a
fix(service_manager): friendly errors for missing slots and s6-svc failures

benbarclay
authored and
teknium1
committed
b28b3f5
fix(docker): dashboard slot stays 'down' when HERMES_DASHBOARD unset

benbarclay
authored and
teknium1
committed
1dfabe4
docs(compose): update entrypoint comment for s6-overlay

benbarclay
authored and
teknium1
committed
143a189
fix(service_manager): rip out dead port parameter

benbarclay
authored and
teknium1
committed
d735b08
docker: drop sh -c wrappers from stage2-hook.sh

benbarclay
authored and
teknium1
committed
9914bfc
fix(container_boot): rotate container-boot.log when it exceeds 256 KiB

benbarclay
authored and
teknium1
committed
4443fb4
fix(container_boot): publish reconciled service dirs atomically

benbarclay
authored and
teknium1
committed
d0b1ab4
docs(docker): deprecation warning in entrypoint.sh shim

benbarclay
authored and
teknium1
committed
04bdbce
test(docker): poll for boot-log signal instead of fixed sleeps

benbarclay
authored and
teknium1
committed
cd5b2c4
docs(plans): trim s6-overlay plan to a post-implementation reference

benbarclay
authored and
teknium1
committed
6c49bdc
refactor(gateway): migrate Mattermost adapter to bundled plugin

kshitijk4poor
authored and
teknium1
committed
af973e4
fix(profiles): short-circuit s6 hooks on host before importing service_manager
teknium1
committed
a4092ab
fix(image_gen): cache xAI ephemeral URL responses to disk (#26942) (#31759)
teknium1
authored
031f9c9
fix(model): disambiguate xAI OAuth picker label

helix4u
authored and
teknium1
committed
4987fd2
fix(model): include Premium+ in xAI OAuth label
teknium1
committed
af144cd
fix(ci): exclude tests/docker/ from regular test shards; pin read_text encoding
teknium1
committed
5cbb132
test(dockerfile): accept s6-overlay /init as a known PID-1 init
teknium1
committed
7f6f00f
docs(docker): add 'Installing more tools in the container' section
benbarclay
committed
6840ca2
Merge pull request #31775 from NousResearch/extending-docker-docs
benbarclay
authored
a3abeb5
fix(docker): make s6 lifecycle work for the unprivileged hermes user
benbarclay
committed
4f416fc
test(dockerfile): recognize s6-overlay/init as a valid PID-1; harden against historical-comment masquerade
benbarclay
committed
7d54288
test(docker): fix svstat 'want up' assertion in profile-gateway lifecycle test
benbarclay
committed
c524b8a
ci(docker): run tests/docker/ in build-amd64 against the freshly-built image
benbarclay
committed
da8b2e9
fix: exclude parent process chain from concurrent instance detection on Windows

Strontvod
authored and
teknium1
committed
323cce7
test+harden(cli): cover parent-chain walk in concurrent-instance detection
teknium1
committed
46f8948
Merge pull request #31760 from NousResearch/hermes/hermes-bf5898da
benbarclay
authored
7e165e8
Merge pull request #31081 from NousResearch/bb/tui-skinny-status-rule
ethernet8023
authored
b288de8
diag(xai-oauth): log loopback callback hits + wait-timeout outcome (#27385) (#31894)
teknium1
authored
b0135c7
fix(website): cross-locale doc links + drop empty ko locale (#31895)
teknium1
authored
1d5deac
fix(context): align guidance with 64k minimum

helix4u
authored and
teknium1
committed
3b839f4
test(acp): drop flaky runtime_calls[-1] tail-position assertion
teknium1
committed
2b76853
fix: avoid persisting borrowed credential secrets (#31416)
H-Ali13381
authored
d7c5d5d
feat(providers): add OpenAI API provider option

jacevys
authored and
teknium1
committed
aeb8750
feat(providers): extend openai-api with live /v1/models fetch + gpt-5.5-pro
teknium1
committed
a6b0414
fix(cron): layer agent.disabled_toolsets onto cron baseline (#25752)

Schrotti77
and
teknium1
committed
9863a07
chore(release): map Schrotti77 for PR #25786 salvage
teknium1
committed
0c3e34e
fix(cron): reject id mutation + validate output paths under OUTPUT_DIR

zapabob
and
teknium1
committed
2c3ca47
chore(release): map zapabob for PR #29826 salvage
teknium1
committed
92d9136
fix: add cron API provenance logging (#24889)
sgtworkman
authored
d952b37
fix(cli): show masked feedback for secret prompts

helix4u
authored and
teknium1
committed
ec4d6f1
fix(plugins): widen masked secret prompt to plugin setup wizards
teknium1
committed
9c77a0c
test(auth): align copilot-remove test with borrowed-credential policy (#31416)
teknium1
committed
920b350
fix(cli,gateway): strip outer brackets/quotes from /resume args + accept session IDs in gateway

Claw Assistant
authored and
teknium1
committed
1c7a783
test(cli,gateway): cover bracket-stripping and gateway session-ID lookup
teknium1
committed
4fbdf0e
chore(release): map claw@openclaw.ai to wanwan2qq (PR #10215)
teknium1
committed
2e0ac31
feat(stt): add register_transcription_provider() plugin hook

kshitijk4poor
authored and
teknium1
committed
2cd952e
feat(stt): add stt.providers.<name> command-provider registry
teknium1
committed
d3ffbc6
fix: include -p profile flag in exit resume hint

iRonin
authored and
teknium1
committed
2a2cef4
test(cli): cover exit resume hint -p flag across profiles
teknium1
committed
222a3a9
fix(compression): 3-line fix for infinite compression loop (#29335)

Radical Edward
authored and
teknium1
committed
3914089
test+polish(compression): pin anti-thrash gate and gateway session_id persistence
teknium1
committed
11c40d6
fix(cli): redirect resume status lines to stderr in quiet mode (#11793)

malaiwah
authored and
teknium1
committed
25295e7
test(cli): cover quiet-mode resume status lines routed to stderr
teknium1
committed
ffe11c1
docs(i18n): translate all docs into Simplified Chinese (zh-Hans) (#31942)
teknium1
authored
76135b3
fix(codex): size and propagate timeouts for Responses-API requests; lower stale defaults

authored and
teknium1
committed
2d42272
fix: harden skill trust source matching (#31229)

jfuenmayor
and
gaia
authored
9366064
fix(skill): guard pickle.loads in darwinian-evolver show_snapshot with explicit flag (#29276)

Jiahui-Gu
and
jiahuigu
authored
0a2ee71
Harden Skills Guard multi-word prompt patterns (#26852)

YLChen-007
and
openhands-agent
authored
7ebebfb
fix(security): expand memory content scanning patterns to parity with skills guard (#9151)
AdamPlatin123
authored
00bd24e
fix(file_tools): reject '..' traversal in V4A patch headers

waefrebeorn
and
teknium1
committed
5faea3f
chore(release): map jfuenmayor + Jiahui-Gu + YLChen-007 + AdamPlatin123 + waefrebeorn for S11 cluster salvage
teknium1
committed
c016949
perf(cli): cut hermes startup 63% — flip head-to-head vs codex (#31968)
teknium1
authored
0219b04
harden(env_passthrough): apply GHSA-rhgp-j443-p4rf filter to config.yaml path (#27794)
roadhero
authored
3ab7e2a
fix(approval): harden YOLO bypass, LLM parsing, auto-approve audit, pipe pattern (#23835)

rodrigoeqnit
and
claude
authored
4cb3eb0
fix(security): tighten .env file permissions to 0600 at all creation sites

dusterbloom
and
teknium1
committed
79fc92e
chore(release): map dusterbloom for PR #25726 salvage
teknium1
committed
51c913c
fix(security): block read_file on project-local .env files

liuhao1024
authored and
teknium1
committed
ba3c450
chore(release): map liuhao1024 for PR #20778 salvage
teknium1
committed
4c64638
fix(codex): surface actionable hint when stale-call detector fires on known silent-reject pattern

Tranquil-Flow
authored and
teknium1
committed
b1adb95
fix(cli): prevent /reset and /new freeze on Windows by falling back to stdin prompt

SimoKiihamaki
authored and
teknium1
committed
fae815a
chore(release): map simo.kiihamaki@gmail.com to SimoKiihamaki (PR #30773)
teknium1
committed
ee7789e
fix(cli): catch KeyboardInterrupt during slash commands to prevent session exit

ygd58
authored and
teknium1
committed
63d6b9e
test(cli): cover KeyboardInterrupt guard around slash command dispatch
teknium1
committed
8697471
fix(cli): bracketed-paste timeout prevents permanent input freeze (#16263)

Tranquil-Flow
authored and
teknium1
committed
1b12cd5
chore(release): map 66773372+Tranquil-Flow@users.noreply.github.com to Tranquil-Flow (PR #27518)
teknium1
committed
4909dd8
fix(security): block /proc/*/environ, cmdline, maps from file read (#4609)
dsr-restyn
authored
b7b8bec
fix: reject read_file symlinks to blocking devices (#10133)
WuKongAI-CMU
authored
ee59ef1
fix(transcription): reject symlinked audio inputs (#10082)
WuKongAI-CMU
authored
95848b1
test(approval): patch _YOLO_MODE_FROZEN directly in test_yolo_overrides_cron_deny
teknium1
committed
79799c8
fix(backup): skip symlinked files in zip archives (#25289)
binhnt92
authored
0d55315
fix(profile): reject symlinks in distributions (#25292)
binhnt92
authored
46d8b5d
fix(streaming): route mid-tool-call partial-stream-stub through length continuation (#31998) (#32012)

daimon-nous[bot]
and
alt-glitch
authored
ac5359a
fix(tts): reject '..' traversal in output_path

aaronlab
and
teknium1
committed
5f20322
fix(update): reject symlink members in update ZIP

codeblackhole1024
and
teknium1
committed
bd2756d
chore(release): map dsr-restyn + WuKongAI-CMU + codeblackhole1024 for S04 cluster
teknium1
committed
e9119e0
feat(mcp-oauth): stdin paste-back fallback for headless OAuth flow (#32053)
teknium1
authored
0ff7c09
fix(gateway): allow native delivery of freshly-produced agent files (#32060)
teknium1
authored
a989a79
fix(codex): add time-to-first-byte watchdog for stalled Codex streams

authored and
teknium1
committed
8601c4d
chore(release): map adam91holt for PR #31984 salvage
teknium1
committed
2b16de0
feat(cli): show live background terminal-process count in status bar (#32061)
teknium1
authored
1c3c364
docs(mcp-oauth): document paste-back flow and SSH options for remote MCP OAuth (#32067)
teknium1
authored
bdf3696
feat(mcp-oauth): accept 'skip' at paste prompt to bypass auth without disabling server (#32069)
teknium1
authored
8191f66
fix(tui): remove 'q' alias from /quit, add to /queue

8bit64k
authored and
daimon-nous[bot]
committed
064ac28
test(tui): regression test for /q alias resolving to queue (#31983)

alt-glitch
authored and
daimon-nous[bot]
committed
85a0b34
chore(release): map 8bit64k + hclsys in AUTHOR_MAP

alt-glitch
authored and
daimon-nous[bot]
committed
f5bb595
fix(tests): four pre-existing flakes from the security cluster merge (#32072)
teknium1
authored
46c1ae8
fix(auxiliary): universal main-model fallback for aux tasks (#31845)

wysie
authored and
teknium1
committed
dbe5d84
feat(errors): actionable guidance for Nous OAuth 401s (#32082)
teknium1
authored
0d137f1
fix(skills): guard uninstall lock paths

zapabob
and
teknium1
committed
3b9b9a7
test(skills): widen assertion in PR#6656 regression to accept new validator msg
teknium1
committed
0a6a0ba
fix(credential-pool): rotate immediately when credential already exhausted

zccyman
authored and
teknium1
committed
973bb12
feat: configurable paste collapse thresholds (TUI + CLI)

kylekahraman
authored and
teknium1
committed
ab42658
chore(release): map kylekahraman email to GitHub login
teknium1
committed
8f19485
fix(credential-pool): correct pool rotation when weekly usage limit is reached

savanne-kham
authored and
teknium1
committed
4117fc3
Merge pull request #31084 from NousResearch/bb/tui-right-click-copy-selection
OutThisLife
authored
0ec0caf
fix(tui): delineate assistant responses from details (#31087)
OutThisLife
authored
50aaf0c
fix(gateway): protect in-flight subagents from busy-mode interrupts (#30170)

xxxigm
authored and
daimon-nous[bot]
committed
99d62f6
test(gateway): regression tests for #30170 subagent interrupt protection

xxxigm
authored and
daimon-nous[bot]
committed
737ee81
chore: drop stale line-number reference in PRIORITY path comment

alt-glitch
authored and
daimon-nous[bot]
committed
b62af47
fix(tts): prevent double [pause] in xAI auto speech tags for multi-paragraph text

EloquentBrush0x
authored and
teknium1
committed
1d73d5f
test(tts): regression coverage for #29417 double-[pause] fix
teknium1
committed
5caeb65
feat(skills): add code-wiki skill — closes #486 (#32240)
teknium1
authored
5671461
feat(skills): add optional openhands skill — closes #477
teknium1
committed
386f245
feat(skills): add web-pentest optional skill (#32265)
teknium1
authored
263e008
chore(models): drop retired grok-4-1-fast from metadata, tests, docs

authored and
teknium1
committed
bbc8f2f
chore(release): add ronhi for PR #29523 salvage
teknium1
committed
b6ce7a4
feat(security): promptware defense — shared threat patterns + memory load-time scan + tool-result delimiters (#32269)
teknium1
authored
0dee92d
fix: route Telegram DM topic deliveries directly

stepanov1975
authored and
teknium1
committed
415be55
test: isolate API server env in gateway tests

stepanov1975
authored and
teknium1
committed
6b7da11
fix: require anchors for Telegram DM topic deliveries

stepanov1975
authored and
teknium1
committed
96c71d8
fix: auto-create Telegram DM topics for delivery

stepanov1975
authored and
teknium1
committed
dcd504c
fix: refresh stale Telegram DM topic threads

stepanov1975
authored and
teknium1
committed
c394e79
refactor: simplify Telegram DM topic refresh

stepanov1975
authored and
teknium1
committed
5b1c75d
test(telegram): switch transient-flake retry test to group chat
teknium1
committed
926da69
fix(telegram): exempt reply_to_mode=off DM topic sends from anchor-required guard
teknium1
committed
27df4b3
fix(dashboard): suffix-allowlist plugin assets + denylist subprocess-influencing env vars (#32277)
teknium1
authored
30928f9
fix(agent): log outer-loop exceptions at ERROR with traceback (#32264)
teknium1
authored
c2aa235
feat(patch): indentation preservation, CRLF preservation, per-file failure escalation (#507) (#32273)
teknium1
authored
6bd0be3
fix(secrets): only apply external secrets once per HERMES_HOME per process (#32271)
teknium1
authored
de76f4d
fix(gateway): coerce scalar `model:` to dict before /model --global persist (#32272)
teknium1
authored
2c6bbaf

Commits on May 26, 2026

fix(anthropic): API-key path skips OAuth autodiscovery + prunes stale entries
teknium1
committed
e3236e9
fix(cron): split scanner into two tiers so skill prose stops false-positiving (#32339)
teknium1
authored
ccd8993
chore(release): map ffr31mr + TheOnlyMika in AUTHOR_MAP
teknium1
committed
fe9744c
fix(skills): reject symlinks in skill bundles before install

MorAlekss
authored and
teknium1
committed
c26af46
fix(skills-hub): show every catalog source on /docs/skills (skills.sh, ClawHub, browse.sh, OpenAI, …) (#32336)
teknium1
authored
cea87d9
feat(skills-hub): health checks, freshness badge, and a watchdog cron (#32345)
teknium1
authored
d8703e2
chore: add krislidimo to AUTHOR_MAP for PR #29775 (#32434)
kshitijk4poor
authored
66851dc
fix(telegram): tighten table row-group spacing and drop redundant first bullet

krislidimo
authored and
kshitijk4poor
committed
9d10c45
fix(subdirectory_hints): prevent loading AGENTS.md outside workspace

dearmayo
authored and
teknium1
committed
f4953bc
harden: restrict markdown link schemes; parse untrusted XML with defusedxml

TheOnlyMika
authored and
teknium1
committed
5744b17
chore(wecom): make defusedxml dep acquireable and tolerant of absence
teknium1
committed
31c8d5f
fix(cli): restore fallback paste collapse + handle long single-line pastes (#32447)
teknium1
authored
2517917
feat: harden roadmap tier2 tools

Mike
authored and
Mike
committed
56fc1c1
fix: resolve roadmap tier2 CI failures

Mike
authored and
Mike
committed
6c4aff4