Elliot SluskyandGitHub 5bc8d3a2f6 Harden Docker and systemd deployment configs (#581) ...

Pin all base images and ollama to fixed versions + @sha256 digests (no floating :latest), run Docker images as an unprivileged openjarvis user (uid 10001), replace the curl|bash NodeSource install with a digest-pinned multi-stage copy, install from the committed uv.lock via uv export --frozen --no-dev (hash-verified, --no-deps), and add systemd sandboxing (NoNewPrivileges, ProtectSystem=strict, PrivateTmp, kernel/SUID protections). Closes #228, #563, #564, #565, #566, #567.

2026-06-22 19:12:07 -07:00

..

a2a

security(server): authenticate WebSocket handshakes and A2A requests (#217)

2026-05-25 23:51:29 +00:00

agents

fix(channels): use conversation_id (not channel type) as Discord reply destination (#495)

2026-06-03 19:54:03 -07:00

analytics

(bug): telemetry fixes (#421)

2026-05-27 09:36:26 -07:00

bench

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

channels

fix(channels): unify send() destination/reply contract (Discord #515/#516) (#528)

2026-06-10 14:10:06 -07:00

cli

feat(memory): native persistent memory service integrated into core (#579)

2026-06-22 13:59:02 -07:00

connectors

fix(connectors): complete Google OAuth and register Drive in Data Sources (fixes #512) (#548)

2026-06-14 19:55:22 -07:00

core

feat(core): consolidate all state under a single env-aware home directory (#462) (#549)

2026-06-15 09:32:02 -07:00

daemon

fix: resolve ruff I001 import sorting and E501 line length in tests

2026-03-17 00:13:49 +00:00

deploy

security(deploy): stop default deployments shipping an open, unauthenticated server (#221)

2026-05-25 23:56:55 +00:00

deployment

Harden Docker and systemd deployment configs (#581)

2026-06-22 19:12:07 -07:00

engine

fix(engine): drop Qwen3 control-token tool calls from Ollama responses (#578)

2026-06-22 11:40:25 -07:00

evals

fix(evals): harden terminalbench-native harness against tmux death and setup hangs (#536)

2026-06-11 14:30:10 -07:00

fixtures/docs

Feature/twitter bot (#259)

2026-04-17 15:22:17 -07:00

hardware

fix: detect total RAM on Windows via GlobalMemoryStatusEx

2026-05-20 03:36:55 +00:00

install

fix(install): use requires-python range; bootstrap shims are Python-free (#476, #484) (#492)

2026-06-03 16:59:29 -07:00

integration

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

intelligence

refactor: remove dead shims, stale files, and test duplication (#243)

2026-04-13 15:03:03 -07:00

learning

fix(learning): exclude padding tokens from SFT loss (#521)

2026-06-10 11:48:57 -07:00

mcp

fix(mcp): send Authorization: Bearer; auto-load MCP tools in ask/serve (#494)

2026-06-03 18:27:00 -07:00

memory

feat(memory): native persistent memory service integrated into core (#579)

2026-06-22 13:59:02 -07:00

mining

feat(mining): validate Gemma E4B and Qwen 3.6 Pearl artifacts (#328)

2026-05-14 20:11:24 -07:00

operators

refactor(system): decompose JarvisSystem god-object into system/ package (#257)

2026-04-17 11:02:56 -07:00

pearl

feat(mining): validate Gemma E4B and Qwen 3.6 Pearl artifacts (#328)

2026-05-14 20:11:24 -07:00

prompt

fix(chat): wire SystemPromptBuilder so persona files load in jarvis chat (fixes #458) (#497)

2026-06-10 14:10:13 -07:00

recipes

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

sandbox

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

scheduler

feat: Morning Digest with Voice Mode + unified OAuth + Apple connectors (#174)

2026-04-03 11:05:41 -07:00

sdk

fix(evals): honor --base-url/--api-key for first-party eval backends (#535)

2026-06-11 13:49:37 -07:00

security

fix(security): detect Rust at import time + SSRF Python fallback (#467)

2026-06-01 11:57:44 -07:00

server

feat(memory): native persistent memory service integrated into core (#579)

2026-06-22 13:59:02 -07:00

sessions

add test case

2026-03-31 19:25:29 +05:30

skills

fix(skills): implement skill remove and search CLI commands (#240)

2026-04-13 15:03:39 -07:00

speech

Fix desktop speech dependency setup (#574)

2026-06-20 17:08:24 -07:00

telemetry

fix(leaderboard): correct telemetry pipeline and outlier handling (#498)

2026-06-04 16:59:24 -07:00

templates

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

test_orchestrator_learning

fix(learning): exclude padding tokens from SFT loss (#521)

2026-06-10 11:48:57 -07:00

tools

Add provider-aware search support to hybrid orchestration agents (#558)

2026-06-18 13:40:06 -07:00

traces

feat(evals): ToolCall-15, LiveCodeBench, LiveResearchBench + telemetry (#169)

2026-04-01 21:06:20 -07:00

workflow

fix(channels): wire channel→agent handler and fix Telegram send pipeline (#94)

2026-03-20 18:35:18 -07:00

__init__.py

init commit

2026-03-12 17:29:39 +00:00

conftest.py

feat(mining): Pearl mining integration

2026-05-05 19:11:15 -07:00

test_digest_integration.py

feat: Morning Digest with Voice Mode + unified OAuth + Apple connectors (#174)

2026-04-03 11:05:41 -07:00

test_query_orchestrator.py

refactor(system): decompose JarvisSystem god-object into system/ package (#257)

2026-04-17 11:02:56 -07:00

test_vision.py

feat(vision): add image + screen capture input for vision models (#486)

2026-06-14 18:19:00 -07:00