jinghui/hermes-webui
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,720 Commits 1 Branch 0 Tags
1b194a397c3f4ded3fb06454bf94de0ca0fb0cec
Commit Graph
4720 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rod Boev 0542d91824 fix(wiki): recheck status reads against allowlisted identity (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev db0bcaae8f fix(wiki): drop stale cached paths that no longer point to files (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev f93d1332df fix(wiki): align browse and status with page-path rules (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev b93cd10b40 fix(wiki): reject non-listed Windows path aliases (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev 10c8ae4e46 fix(wiki): reuse the checked page allowlist across wiki reads (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev 22bfed43ac fix(wiki): bind cached reads to the requested allowlisted page (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev 1dd0b5bbcf fix(wiki): keep cached reads inside their original section (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev e44fd2a6ac fix(wiki): reassert cached read-path containment (#4375) 2026-06-19 21:11:10 +00:00
Rod Boev 3f6369ae5c Address cross-provider review findings for browse-path resolve and test anchor 2026-06-19 21:11:10 +00:00
Rod Boev 46c3e495fc perf(wiki): cache resolved page allowlist and document hardlink trust boundary (#4375) 2026-06-19 21:11:09 +00:00
nesquena-hermes 772315ce2e Merge pull request #4507 from nesquena/stage-4488 
Release v0.51.522 — scope live model provider keys (#4488)
 2026-06-19 13:54:33 -07:00
nesquena-hermes 36730fe9f9 changelog: stamp v0.51.522 (Release SG) for #4488 live-model key scoping 2026-06-19 20:43:59 +00:00
nesquena-hermes 0c8e6ebf27 stage #4488: scope live model provider keys (#4488) [CHANGELOG pending post-4506] 2026-06-19 20:43:31 +00:00
nesquena-hermes 3d5ef4758e Merge pull request #4506 from nesquena/stage-4489 
Release v0.51.521 — scope imported sessions to active profile (#4489)
 2026-06-19 13:41:45 -07:00
nesquena-hermes 87aefad22f stage #4489: scope imported sessions to active profile (#4489) + v0.51.521 CHANGELOG 2026-06-19 20:25:43 +00:00
nesquena-hermes bb6338cb00 Merge pull request #4503 from nesquena/stage-4486 
Release v0.51.520 — recover from untracked-file update collisions (#4310)
 2026-06-19 13:21:06 -07:00
nesquena-hermes 99c12c6c8d changelog: stamp v0.51.520 (Release SE) for #4310 untracked-file recovery 2026-06-19 20:10:02 +00:00
nesquena-hermes 93c72adc8a stage #4486: untracked-file update collision recovery (#4310) [CHANGELOG pending post-4502] 2026-06-19 20:09:30 +00:00
nesquena-hermes 1114093d88 Merge pull request #4502 from nesquena/stage-4492 
Release v0.51.519 — reconcile stale active-run registry entries (#4492)
 2026-06-19 13:08:04 -07:00
nesquena-hermes 5a8ce51eb7 changelog: stamp v0.51.519 (Release SD) for #4492 stale active-run reconcile 2026-06-19 19:53:26 +00:00
nesquena-hermesandai-ag2026 54089a0696 fix(streams): only reap stale ACTIVE_RUNS entries when worker is gone from STREAMS (#4492 Codex gate) 
Gate-found: reaping on started_at age alone could pop a genuinely-live worker
that's mid-teardown past the 180s ceiling (active_stream_id cleared during final
writeback, STREAMS entry still present) — ACTIVE_RUNS is worker-lifecycle truth
for health/background-wakeup/agent-cache consumers. Add a 'not in STREAMS'
guard (snapshot taken sequentially before ACTIVE_RUNS_LOCK, no nesting) and pop
by the real dict key. +1 regression test (toothed). Keeps the anti-permanent-409
age behavior intact.

Co-authored-by: ai-ag2026 <ai-ag2026@users.noreply.github.com>
 2026-06-19 19:53:04 +00:00
nesquena-hermes e74bae1d35 stage #4492: reconcile stale active-run registry (#4492) [CHANGELOG pending post-4501] 2026-06-19 19:53:04 +00:00
nesquena-hermes 61b1f722e9 Merge pull request #4501 from nesquena/stage-4487b 
Release v0.51.518 — read-only memory writes report 403 not 500 (#4480)
 2026-06-19 12:35:49 -07:00
nesquena-hermes 4b7a17bf33 stage #4487: read-only memory write 403 (#4480) + v0.51.518 CHANGELOG 2026-06-19 19:22:43 +00:00
nesquena-hermes 2b05b21cba Merge pull request #4500 from nesquena/stage-4491 
Release v0.51.517 — multi-container gateway URL config (#4483)
 2026-06-19 12:21:00 -07:00
nesquena-hermes 8d56dcdbed stage #4491: multi-container gateway URL (#4483) + v0.51.517 CHANGELOG 2026-06-19 19:09:00 +00:00
nesquena-hermes f871131965 Merge pull request #4499 from nesquena/release-v0.51.516-4493 
Release v0.51.516 — stage per-session toolsets before the first message (#4490)
 2026-06-19 11:55:23 -07:00
nesquena-hermes d357731dcc Merge PR #4493: stage pre-session toolsets before the first message (#4490) 2026-06-19 18:45:21 +00:00
nesquena-hermes bd3d079c6a fix(toolsets): trim staging comment + widen #2518 provenance test window 
The pre-session toolset comment pushed the #2518 provenance comment past the
test_issue2518 4000-char window assertion. Trim the comment to one line and
widen the test window to 5000 (the fallback block it actually guards is well
within range; newSession() has legitimately grown).
 2026-06-19 18:44:58 +00:00
nesquena-hermesandclaw-io 4e8e6714d5 fix(toolsets): only forward staged toolsets from empty composer + clear on session load (#4490 Codex follow-up) 
Gate-found: staged _pendingSessionToolsets could leak into a later New Chat
started from an existing session (newSession forwarded it whenever it was an
array; loadSession never cleared it). Gate the forward on !S.session and clear
the staged value when a real session loads. +2 regression tests.

Co-authored-by: claw-io <claw-io@users.noreply.github.com>
 2026-06-19 18:35:46 +00:00
Frank Song fce927d5ac Fix pre-session toolsets staging 2026-06-19 18:35:04 +00:00
nesquena-hermes 2d9aa83538 Merge pull request #4498 from nesquena/release-v0.51.515-4495 
Release v0.51.515 — remote-gateway approvals work again (#4479)
 2026-06-19 11:25:24 -07:00
nesquena-hermes 193f6ffc28 changelog: stamp v0.51.515 (Release RZ) for #4479 gateway approval fix 2026-06-19 18:17:02 +00:00
nesquena-hermes e94ce7df72 Merge PR #4495: correct gateway approval URL + thread session history into runs API (#4479) 2026-06-19 18:16:45 +00:00
nesquena-hermes 1d46c610bb Merge pull request #4497 from nesquena/release-v0.51.514-4482 
Release v0.51.514 — post-start UI errors no longer hide a live stream (#4481)
 2026-06-19 11:12:46 -07:00
nesquena-hermes 1ef3cd810a changelog: stamp v0.51.514 (Release RY) for #4481 fix 2026-06-19 17:59:06 +00:00
nesquena-hermes 334caac5a2 Merge PR #4482: fix post-start live attach after UI bookkeeping throw (#4481) 2026-06-19 17:58:44 +00:00
Rod Boev c6392902cd fix(gateway): correct approval URL and thread session history into runs API (#4479) 2026-06-19 13:16:39 -04:00
Frank Song 36e992415b Fix post-start attach resilience for #4481 2026-06-19 17:51:36 +08:00
nesquena-hermes ccae754c84 Merge pull request #4476 from nesquena/release/stage-4365 
Release v0.51.513 — RX (credential-pool quota for all pooled providers, #4365)
 2026-06-18 22:38:12 -07:00
nesquena-hermes 97e977fd1e release: v0.51.513 — credential-pool quota for all pooled providers (#4365, #4360) 
Maintainer fix on top: wrap /api/provider/quota in profile_env_for_active_request
(Codex gate caught default-profile cross-read). Codex SAFE + Opus SAFE + suite 9575.

Co-authored-by: rodboev <rodboev@users.noreply.github.com>

Closes #4365
Closes #4360
 2026-06-19 05:28:22 +00:00
nesquena-hermes 83a479d7a5 fix(#4365): wrap /api/provider/quota in profile_env_for_active_request 
Codex gate caught that the new load_pool() path runs under the process-default
profile (sibling endpoints /api/providers + /api/models/live already wrap).
Without it a multi-profile client sees+seeds the default profile's pool
(#4247/#4067 profile-isolation class).
 2026-06-19 05:27:42 +00:00
nesquena-hermes 16a94ba0b3 Merge pull request #4475 from nesquena/release/stage-4393 
Release v0.51.512 — RW (interrupted-turn user prompt no longer replays, #4393)
 2026-06-18 22:27:21 -07:00
nesquena-hermes 3dd2e9ddfe release: v0.51.512 — interrupted-turn user prompt no longer replays (#4393, #4283) 
Maintainer fix on top: pass-4 recovered-user keep now uses actual kept
neighbours (was forward-scan-only → adjacent-user 400). + 3 regression tests.
Codex SAFE + Opus 'ship it' + suite 9575.

Co-authored-by: kaishi00 <kaishi00@users.noreply.github.com>

Closes #4393
Closes #4283
 2026-06-19 05:23:51 +00:00
nesquena-hermes c845e14087 fix(#4283/#4393): pass-4 recovered-user keep decision uses actual kept neighbours 
Codex+Opus gate caught that the forward-scan-only keep produced [user, _recovered
user, assistant] -> adjacent users -> strict-provider 400 once the anchoring
assistant's prev kept neighbour was a user. Keep a recovered user ONLY when it
separates two assistants (prev_kept==assistant AND next==assistant); mirror in
_api_safe_message_positions. + 3 regression tests.
 2026-06-19 05:19:52 +00:00
nesquena-hermesnesquena-hermesnesquena-hermes
 		26f54b9972 docs: weekly contributor tally refresh + cherry-pick credit accuracy fix (#4473) 
* docs: weekly contributor tally refresh (20260619)

Regenerated by scripts/regen_contributors.py --apply. Includes the source (e)/(f)
ship-signal accuracy fix that recovers systematically-undercounted cherry-picked
contributions (~77 contributors). 280 contributors / 1559 credits (was 263/1232).
Markers spliced, prose untouched, --verify clean, 0 double-counts.

* docs: align CONTRIBUTORS header prose with the 5-source credit algorithm

Addresses greptile P2: the header still described the old three-source union
(merged-PR list + CHANGELOG + Co-authored-by) but regen_contributors.py now adds
two more — ship-comment scans and absorb-commit scans — for five total. Updates
the prose to match what the script actually runs.

---------

Co-authored-by: nesquena-hermes <nesquena-hermes@users.noreply.github.com>
Co-authored-by: nesquena-hermes <agent@nesquena-hermes>
 2026-06-18 22:05:37 -07:00
nesquena-hermes b5ece8adc6 Merge pull request #4472 from nesquena/release/stage-4468 
Release v0.51.511 — RV (virtual transcript renders during programmatic scrolls, #4468)
 2026-06-18 21:43:03 -07:00
nesquena-hermesandrodboev f040d2a047 release: v0.51.511 — virtual transcript renders during programmatic scrolls (#4468) 
Fixes a regression from #4434 (v0.51.500). Author (rodboev) gave explicit
go-ahead. Gated earlier: Codex SAFE + Opus SAFE + browser-smoke + suite.

Co-authored-by: rodboev <rodboev@users.noreply.github.com>

Closes #4468
 2026-06-19 04:36:39 +00:00
nesquena-hermes 0498e0e345 Merge pull request #4471 from nesquena/release/stage-4453 
Release v0.51.510 — RU (Kanban task workspace + dependency controls, #4453)
 2026-06-18 21:27:39 -07:00
nesquena-hermes e480adae66 release: v0.51.510 — Kanban task workspace + dependency controls (#4453, #3797) 
Maintainer fixes on top of the contributor PR: dependency direction, XSS-safe
ID encoding, dark-theme dependency input + task-autocomplete datalist,
self-dep guard, i18n backfill. Remaining parity gaps tracked in #4470.

Co-authored-by: rodboev <rodboev@users.noreply.github.com>

Closes #4453
Closes #3797
 2026-06-19 04:24:16 +00:00