Commit Graph

3304 Commits

Author SHA1 Message Date
AJV20 d8a48ee5f8 Merge remote-tracking branch 'origin/master' into fix/webui-gateway-tool-activity
# Conflicts:
#	CHANGELOG.md
#	tests/test_webui_gateway_chat_backend.py
2026-05-28 16:11:34 -04:00
nesquena-hermes cf003ae986 Merge pull request #3096 from nesquena/release/stage-batch39
stage-batch39: v0.51.157 / Release EC — 5-PR mixed-risk cleanup
v0.51.157
2026-05-28 13:08:40 -07:00
AJV20 b76a6dfedb fix: forward gateway tool activity to webui 2026-05-28 16:03:16 -04:00
nesquena-hermes 0459f60b5c stage-batch39: stamp v0.51.157 / Release EC
5-PR mixed-risk cleanup:
- #3090 gateway-chat forwards prefill+session-context into delegated Gateway turns
- #3091 sidebar keeps newer compressed continuation visible; lineage-aware state-db dedupe; session-arc marker exclusion
- #3092 browser-transcript memory guidance prompt addition
- #3093 reasoning-effort max parity with hermes_constants
- #3094 webui_prefill_context_max_chars budget (default 12000) for prefill payloads
2026-05-28 19:52:56 +00:00
nesquena-hermes 65dc5f7cf1 stage-batch39: add CHANGELOG entry for #3091 (no entry in original PR) 2026-05-28 19:52:10 +00:00
nesquena-hermes c1a7668bdf Merge PR #3091 2026-05-28 19:51:29 +00:00
nesquena-hermes 6719f35930 Merge PR #3094
# Conflicts:
#	CHANGELOG.md
#	api/streaming.py
2026-05-28 19:51:29 +00:00
nesquena-hermes 20f8bc3290 Merge PR #3090
# Conflicts:
#	CHANGELOG.md
2026-05-28 19:50:10 +00:00
nesquena-hermes 1a6409764a Merge PR #3093
# Conflicts:
#	CHANGELOG.md
2026-05-28 19:49:34 +00:00
nesquena-hermes 22db5bbe67 Merge PR #3092
# Conflicts:
#	CHANGELOG.md
2026-05-28 19:48:56 +00:00
nesquena-hermes 5ec136af3b Merge pull request #3095 from nesquena/release/stage-batch38
stage-batch38: v0.51.156 / Release EB — 2-PR Tier B cleanup
v0.51.156
2026-05-28 12:45:09 -07:00
nesquena-hermes 993e251435 stage-batch38: stamp v0.51.156 / Release EB
2-PR Tier B cleanup:
- #3084 harden WebUI request/session/runtime edges (auth.py thread-safety + body validation + frontend storage guards + sw.js vendor precache + i18n key fills + workspace_git test default-branch)
- #3087 model_provider fallback only when same model — fixes fresh-session model_provider=null bug
2026-05-28 19:38:29 +00:00
nesquena-hermes f7b4c6b0f4 Merge PR #3087
# Conflicts:
#	CHANGELOG.md
2026-05-28 19:38:10 +00:00
Hermes Agent b92204a7b7 fix(sidebar): keep newer continuation visible over older snapshot 2026-05-28 13:38:06 -06:00
nesquena-hermes d2265aaca3 Merge PR #3084 2026-05-28 19:37:11 +00:00
AJV20 d539d5c079 fix: budget webui prefill context 2026-05-28 15:26:35 -04:00
theseussss b554fd8078 fix(reasoning): 推理强度补齐 max 档,与 hermes_constants 对齐
WebUI 镜像的 VALID_REASONING_EFFORTS 此前止于 xhigh,漏了底层
hermes_constants 已有的 max 档。补齐后端常量、前端命令/下拉/帮助文本,
并同步快照测试。支持 max thinking 的 provider(如 Anthropic)现可在
composer 下拉和 /reasoning 命令中选到 Max。
2026-05-29 03:05:02 +08:00
AJV20 d5b36267f7 Merge remote-tracking branch 'origin/master' into fix/selective-durable-writeback
# Conflicts:
#	CHANGELOG.md
2026-05-28 14:59:12 -04:00
AJV20 79fd4b64c2 test: make gateway context test self-contained 2026-05-28 14:56:28 -04:00
AJV20 c494e41220 Merge remote-tracking branch 'origin/master' into fix/webui-gateway-context-prefill
# Conflicts:
#	CHANGELOG.md
2026-05-28 14:52:15 -04:00
AJV20 2cb3c9f10b Merge remote-tracking branch 'origin/master' into HEAD
# Conflicts:
#	CHANGELOG.md
#	tests/test_workspace_git.py
2026-05-28 14:50:33 -04:00
AJV20 00f4b11227 fix: limit webui durable memory guidance 2026-05-28 14:48:30 -04:00
nesquena-hermes 20f8c7c02d Merge pull request #3089 from nesquena/release/stage-batch37
stage-batch37: v0.51.155 / Release EA — 3-PR very low-risk cleanup
v0.51.155
2026-05-28 11:47:06 -07:00
AJV20 609a0c887b fix: carry WebUI context through gateway chat 2026-05-28 14:33:32 -04:00
nesquena-hermes 2893f87e19 stage-batch37: stamp v0.51.155 / Release EA
3-PR very low-risk cleanup:
- #3039 api(): timeoutToast:false opt-in for passive pollers
- #3085 _merged_session_messages_for_display: preserve sidecar order when longer
- #3086 subsecond timestamps for gateway turns + compaction batches
2026-05-28 18:28:04 +00:00
nesquena-hermes ad9b38c945 Merge PR #3086
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes 88bdc99a49 Merge PR #3085
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes 2f73eb0f8d Merge PR #3039
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes 6267716ba4 Merge pull request #3088 from nesquena/release/stage-batch36
stage-batch36: v0.51.154 / Release DZ — 9-PR medium-risk cleanup
v0.51.154
2026-05-28 11:24:31 -07:00
nesquena-hermes 0a2dabc730 stage-batch36: tighten #3064 MEDIA: token gate to non-user-role messages
Per Opus advisor on stage-batch36: skip role='user' messages in
_session_media_token_allows_image_path so a user-injected MEDIA: token
cannot mint an allow-list entry for the user's own request. Preserves
the original use case (assistant/tool emitted artifacts outside the
active workspace) while making the implicit threat model explicit.

Defense-in-depth — the single-user WebUI scope means same-origin user
input already had the same effective access, but multi-user / shared
WebUI deployments would benefit from the restriction.
2026-05-28 18:20:25 +00:00
george-andraws 0f6eab301c Fix browser chat provider fallback on fresh sessions 2026-05-28 11:10:14 -07:00
nesquena-hermes 371f77c9b9 stage-batch36: stamp v0.51.154 / Release DZ
9-PR medium-risk cleanup:
- #3037 routes.py: argv-style prefill hook + env-var override for notes drawer
- #3046 models.py: compression parent not repaired as stale interrupted turn
- #3048 session_discoverability.py: --repair-safe CLI with default dry-run
- #3053 ui.js: streaming KaTeX guard for parser-owned equations
- #3059 models.py: empty partial activity rows excluded from sidebar recency
- #3060 profiles.py: API key writes to .env (chmod 600), not config.yaml
- #3064 routes.py: MEDIA: image tokens allow exact session-referenced paths
- #3069 models.py: cron sessions with project_id surface via Cron Jobs chip
- #3077 gateway_chat.py: HTTP 401 maps to gateway_auth_error event
2026-05-28 18:04:24 +00:00
ai-ag2026 07aed6b7ff fix(session): preserve subsecond message timestamp order 2026-05-28 19:58:18 +02:00
ai-ag2026 1cd58f6f5a fix(session): preserve sidecar order in display merges 2026-05-28 19:58:17 +02:00
AJV20 cf6e3111c4 Merge remote-tracking branch 'origin/master' into fix/webui-bugfix-sweep
# Conflicts:
#	CHANGELOG.md
2026-05-28 13:56:00 -04:00
nesquena-hermes a3fc305aeb Merge PR #3077
# Conflicts:
#	CHANGELOG.md
#	tests/test_webui_gateway_chat_backend.py
2026-05-28 17:47:56 +00:00
nesquena-hermes 1c89c7d327 Merge PR #3064
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:35 +00:00
nesquena-hermes 4412aea9e8 Merge PR #3059
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes 921b94a287 Merge PR #3046
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes c642c1e438 Merge PR #3069
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes 83f8080103 Merge PR #3053
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes 11ea6c3023 Merge PR #3060 2026-05-28 17:47:33 +00:00
nesquena-hermes 007ba46c3f Merge PR #3048
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:33 +00:00
nesquena-hermes dc5b4b1697 Merge PR #3037
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:33 +00:00
nesquena-hermes b103f4ad68 Merge pull request #3081 from nesquena/release/stage-batch35
stage-batch35: v0.51.153 / Release DY — 11-PR low-risk cleanup
v0.51.153
2026-05-28 10:46:25 -07:00
AJV20 60d4b2d990 fix: harden WebUI bugfix sweep 2026-05-28 13:38:50 -04:00
nesquena-hermes 95aa69f951 stage-batch35: stamp v0.51.153 / Release DY
11-PR low-risk cleanup:
- #3043 openai-codex models.dev reasoning passes xhigh
- #3044 reset _messagesTruncated on new session
- #3047 discoverability: api lineage representative for stale CLI flag
- #3049 title-language detection threshold + English false-positive fix
- #3051 docker docs: sudo compose + Linux host-gateway
- #3054 SSE reconnect: visible-but-unfocused current pane
- #3055 fallback title: drop German-only Session Bilder case
- #3056 title prompt: language-neutral instruction
- #3070 /api/upload reports actual stored filename
- #3071 clarify SSE fallback preserves owner session id
- #3072 gateway-chat forwards image attachments as image_url parts
2026-05-28 16:13:58 +00:00
nesquena-hermes 34d7585bb7 Merge PR #3051
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:17 +00:00
nesquena-hermes 4058c741b6 Merge PR #3072
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00
nesquena-hermes 2107160bf7 Merge PR #3054
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00