89bc70bcb4
Enhance path validation to prevent symlink escape vulnerabilities ( #2051 )
...
Co-authored-by: 李冠辰 <liguanchen@xiaomi.com >
Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai >
2026-05-19 13:33:55 -07:00
sanil-23 and GitHub
1dbff180a3
fix(memory): accept ISO-8601 / missing modified_at + default provider ( #2237 )
2026-05-20 02:01:10 +05:30
sanil-23 and GitHub
cf5dd2d7c7
fix(voice): bound dictation WS audio buffer (partial fix for #1924 ) ( #2238 )
2026-05-20 01:59:58 +05:30
sanil-23 and GitHub
b8fbb364fb
fix(observability): classify provider config-rejection 4xx as expected user-state ( #2079 ) ( #2239 )
2026-05-20 01:58:57 +05:30
Mega Mind and GitHub
3b58ad0f4d
fix(memory): connection pooling + circuit breaker for memory_tree SQLite ( #2206 ) ( #2212 )
2026-05-20 01:11:48 +05:30
Yuvraj Singh Sisodiya and GitHub
504d10e98d
feat(core): desktop companion domain — session, pipeline, pointing ( #1909 ) ( #2025 )
2026-05-19 12:17:24 -07:00
1f2feae69f
fix(security): docker hardening, homoglyph detection, async persist, public-bind warning ( #2011 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-19 12:15:20 -07:00
YellowSnnowmann and GitHub
13500dbb37
fix(inference): propagate temperature_unsupported_models to local routing providers ( #2221 )
2026-05-19 21:22:33 +05:30
oxoxDev and GitHub
3a82782ecd
fix(observability): demote loopback sidecar-down noise to expected (#R5 #R6) ( #2063 )
2026-05-19 20:52:05 +05:30
1f98614869
feat(inference): gate local Ollama models by memory-layer context-window minimum ( #2122 )
...
Co-authored-by: Cyrus Gray <cyrus@tinyhumans.ai >
2026-05-19 19:40:06 +05:30
oxoxDev and GitHub
2f4c3f397d
feat(integrations): Polymarket trading + market data ( #1398 , venue 1/3) ( #2145 )
2026-05-19 19:15:20 +05:30
d4dacd62ae
feat(learning): explicit user-preference tool + always-on pinned-facet prompt injection ( #2150 )
...
Co-authored-by: Gray Cyrus <cyrus@tinyhumans.ai >
2026-05-19 19:06:42 +05:30
de0b254898
fix(core): skip memory init on config failure instead of fabricating a default workspace (OPENHUMAN-CORE-48) ( #2120 )
...
Co-authored-by: Gray Cyrus <cyrus@tinyhumans.ai >
2026-05-19 19:06:20 +05:30
obchain and GitHub
4384cd1a40
fix(integrations): strip inference path from backend URL ( #2075 )
...
Normalize `backend_url` before it reaches `IntegrationClient` so inference-style paths (e.g. `/openai/v1/chat/completions`) cannot produce broken composio URLs.
Three-layer fix:
1. `effective_backend_api_url` env-fallback branch now calls `normalize_backend_api_base_url` (same as the override branch)
2. `normalize_backend_api_base_url` handles scheme-less inputs with `https://` fallback retry
3. `IntegrationClient::new` defense-in-depth sanitization with redacted `warn!` log on fixup
Closes #2075
2026-05-19 16:26:13 +05:30
81a0faef9d
feat(memory): #1574 Stage 2 — per-(row,model) embedding storage live (cutover + migration + re-embed backfill + switch UX) ( #2153 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-19 01:31:11 -07:00
341ce42ff1
feat(memory): activate chat memory pipeline — Archivist wiring, LLM recaps, cross-thread STM recall, segment-granular tree, unified compaction ( #2175 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-19 01:30:59 -07:00
Steven Enamakel and GitHub
16b35af570
feat(ai-panel): per-workload temperature + endpoint URL UX for local runtimes ( #2165 )
2026-05-18 22:04:54 -07:00
Mega Mind and GitHub
a719d781d1
feat(ai-panel): add chat workload and cloud model picker with slug-based lookup fix ( #2152 )
2026-05-18 15:04:57 -07:00
Steven Enamakel and GitHub
0b053c55f5
feat(mascot): locale-aware voice + multilingual LLM replies ( #2115 )
2026-05-18 07:28:14 -07:00
Steven Enamakel and GitHub
b709941e2e
refactor(staging): dark mode polish, theme toggle, i18n restore + debug probe ( #2095 )
2026-05-18 07:06:34 -07:00
YellowSnnowmann and GitHub
52203454ce
fix(security): self-repair locked .secret_key on Windows (OPENHUMAN-TAURI-GN) ( #2061 )
2026-05-18 15:58:47 +05:30
dfb2a6caa1
feat(agent): cross-chat context retrieval for same-user threads ( #1505 ) ( #2054 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-18 15:57:35 +05:30
Steven Enamakel and GitHub
579addf0c1
fix(core): prevent SIGBUS stack overflow in composio tool path ( #2069 )
2026-05-18 02:38:11 -07:00
Steven Enamakel and GitHub
0257b2e662
feat(agent): codify chat → reasoning → worker spawn hierarchy ( #2026 )
2026-05-17 18:44:12 -07:00
86b661d829
feat(composio): expose capability matrix ( #2002 )
...
Co-authored-by: honor2030 <19909783+honor2030@users.noreply.github.com >
2026-05-17 18:28:31 -07:00
Maxen Wong and GitHub
82c8320e7a
fix: enforce session check before creating custom LLM providers ( #2014 )
2026-05-17 18:23:23 -07:00
Zavian Wang and GitHub
8896aa14d6
feat(core): add global tool registry ( #2003 )
2026-05-17 18:21:55 -07:00
ac245a0a19
fix(rust): remove unused import warnings across core domains ( #2019 )
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-17 18:14:25 -07:00
Ruifeng Xue and GitHub
f471d53823
fix: prevent command executors from bypassing security policy ( #2013 )
2026-05-17 18:10:43 -07:00
3b7c4cdc38
feat(memory): add per-model embedding tables ( #2010 )
...
Co-authored-by: honor2030 <19909783+honor2030@users.noreply.github.com >
2026-05-17 18:09:37 -07:00
paulpanwang and GitHub
d241e8c69e
fix: report missing generic CLI parameter values ( #2016 )
2026-05-17 15:23:16 -07:00
Zavian Wang and GitHub
447105144e
fix(security): enforce DNS-aware URL validation ( #2009 )
2026-05-17 15:22:48 -07:00
Sathvik Gilakamsetty and GitHub
9e8348b118
fix(webhooks): offload persist() I/O to blocking thread ( #2006 )
2026-05-17 15:21:52 -07:00
Jarl and GitHub
3aaba5e30c
fix: harden token handling and key rotation logs ( #1999 )
2026-05-17 15:20:10 -07:00
Steven Enamakel and GitHub
f65ef6a431
feat(vault): folder-of-files ingestion into memory (NotebookLM-style) ( #1994 )
2026-05-17 15:17:41 -07:00
Sathvik Gilakamsetty and GitHub
3e7fde4c63
fix: add provider/model failover to streaming LLM calls ( #2022 )
2026-05-17 15:16:48 -07:00
Steven Enamakel and GitHub
b43bba7dac
test: expand and stabilize settings e2e coverage ( #2024 )
2026-05-17 15:15:21 -07:00
Steven Enamakel and GitHub
95f1f5f063
Refactor inference around external Ollama routing ( #1975 )
2026-05-17 02:37:42 -07:00
d412aaa72f
fix (security): truncate command in policy.rs allowlist-miss Err return ( #1967 )
...
Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai >
2026-05-17 01:36:49 -07:00
c7052709e7
Add background loop controls and usage diagnostics ( #1965 )
...
Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai >
2026-05-17 01:35:55 -07:00
3297cf0125
feat: add config model pins for agents ( #1905 )
...
Co-authored-by: honor2030 <19909783+honor2030@users.noreply.github.com >
Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai >
2026-05-17 01:34:58 -07:00
Steven Enamakel and GitHub
780510f618
feat(todos): add CRUD tool + RPC for the agent task board ( #1983 )
2026-05-16 22:28:32 -07:00
Justin and GitHub
a6e311e744
feat(mcp): add memory navigation and entity discovery tools ( #1974 )
2026-05-16 21:02:44 -07:00
89d5ef96a4
fix(security): prevent path traversal in agent definition prompt file loading ( #1904 )
...
Signed-off-by: Jason L <jason@outland.art >
Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai >
2026-05-16 20:44:47 -07:00
ibstellar and GitHub
c8cd15be91
fix (prompt_injection): drop false positives on credential questions ( #1968 )
2026-05-16 20:35:36 -07:00
ibstellar and GitHub
b4fd252c20
perf (prompt_injection): cache classifier behind Lazy<> (was Box-alloc per call) ( #1962 )
2026-05-16 20:23:54 -07:00
Pranav Agarkar and GitHub
33a76615e5
fix: add max size check on audio base64 input ( closes #1944 ) ( #1951 )
2026-05-16 20:21:37 -07:00
Pranav Agarkar and GitHub
004775534b
fix(security): truncate command in policy error message ( closes #1941 ) ( #1950 )
2026-05-16 20:21:12 -07:00
ae0718cd90
fix(memory,security,perf): chunker line splitting, DNS rebinding guard, regex caching ( #1918 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-16 20:19:20 -07:00
0fcbe0a177
fix(security): audit-log set_browser_allow_all RPC transitions ( #1907 )
...
Co-authored-by: Kiro <kiro@kiro.dev >
2026-05-16 20:16:37 -07:00
