molecule-ai/hermes-agent
36
0
Fork 0
Code Issues 4 Pull Requests 5 Actions 1 Packages Projects Releases Wiki Activity
12bc86d9c9
hermes-agent/tests
History
Sebastion 12bc86d9c9 fix: prevent path traversal in .worktreeinclude file processing 
Resolve .worktreeinclude entries and validate that both the source path
stays within the repository root and the destination path stays within
the worktree directory before copying files or creating symlinks.

A malicious .worktreeinclude in a cloned repository could previously
reference paths like "../../etc/passwd" to copy or symlink arbitrary
files from outside the repo into the worktree.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory
2026-03-14 21:48:19 -07:00
..
acp feat: restore ACP server implementation from PR #949 (#1254) 2026-03-14 00:09:05 -07:00
agent fix: save /plan output in workspace (#1381) 2026-03-14 21:28:51 -07:00
cron Merge origin/main into hermes/hermes-dd253d81 2026-03-14 20:53:59 -07:00
fakes fix: streaming tool call parsing, error handling, and fake HA state mutation 2026-03-14 14:27:20 +03:00
gateway Merge origin/main into hermes/hermes-7ef7cb6a 2026-03-14 21:39:01 -07:00
hermes_cli feat: add gateway install scope prompts (#1374) 2026-03-14 21:06:52 -07:00
honcho_integration refactor(honcho): remove local memory mode 2026-03-12 16:23:34 -04:00
integration chore: remove nous-api provider (API key path) 2026-03-11 20:14:44 -07:00
skills feat(skills): add optional telephony skill with Twilio, SMS, and AI calls (#1289) 2026-03-14 04:16:48 -07:00
tools Merge pull request #1383 from NousResearch/hermes/hermes-7ef7cb6a 2026-03-14 21:41:50 -07:00
__init__.py
conftest.py feat: add direct endpoint overrides for auxiliary and delegation 2026-03-14 21:11:37 -07:00
run_interrupt_test.py fix: use session_key instead of chat_id for adapter interrupt lookups 2026-03-12 08:35:45 -07:00
test_413_compression.py feat: improve context compaction handoff summaries (#1273) 2026-03-14 02:33:31 -07:00
test_860_dedup.py
test_agent_loop_tool_calling.py fix: skip hanging tests + add global test timeout 2026-03-12 01:23:28 -07:00
test_agent_loop_vllm.py test: skip atropos-dependent tests when atroposlib not installed 2026-03-11 06:52:55 -07:00
test_agent_loop.py fix: salvage gateway dedup and executor cleanup from PR #993 2026-03-14 11:03:20 -07:00
test_anthropic_adapter.py fix: refresh Anthropic OAuth before stale env tokens 2026-03-14 19:22:31 -07:00
test_anthropic_oauth_flow.py fix: preflight Anthropic auth and prefer Claude store 2026-03-14 19:38:55 -07:00
test_anthropic_provider_persistence.py fix: preflight Anthropic auth and prefer Claude store 2026-03-14 19:38:55 -07:00
test_api_key_providers.py fix: exclude Coding Plan-only models from Moonshot model selection 2026-03-14 20:42:30 -07:00
test_atomic_json_write.py fix: reuse shared atomic session log helper 2026-03-14 02:56:13 -07:00
test_auth_codex_provider.py
test_auth_nous_provider.py
test_auxiliary_config_bridge.py feat: add direct endpoint overrides for auxiliary and delegation 2026-03-14 21:11:37 -07:00
test_batch_runner_checkpoint.py fix: sanitize chat payloads and provider precedence 2026-03-13 23:59:12 -07:00
test_cli_approval_ui.py fix(cli): repair dangerous command approval UI 2026-03-14 11:57:44 -07:00
test_cli_init.py fix: initialize CLI voice state for single-query mode 2026-03-14 06:31:32 -07:00
test_cli_interrupt_subagent.py fix: use session_key instead of chat_id for adapter interrupt lookups 2026-03-12 08:35:45 -07:00
test_cli_loading_indicator.py
test_cli_model_command.py fix: stop rejecting unlisted models, accept with warning instead 2026-03-12 16:02:35 -07:00
test_cli_new_session.py fix(cli): make /new, /reset, and /clear start real fresh sessions 2026-03-13 21:53:54 -07:00
test_cli_plan_command.py fix: save /plan output in workspace (#1381) 2026-03-14 21:28:51 -07:00
test_cli_prefix_matching.py fix(test): add missing session_id and _pending_input to _make_cli fixture 2026-03-14 10:33:58 -07:00
test_cli_preloaded_skills.py feat: preload CLI skills on launch (#1359) 2026-03-14 19:33:59 -07:00
test_cli_provider_resolution.py fix(test): provide required model config keys to prevent KeyError on base_url 2026-03-14 11:53:16 -07:00
test_cli_retry.py test: lock retry replacement semantics 2026-03-14 21:19:22 -07:00
test_cli_secret_capture.py feat: secure skill env setup on load (core #688) 2026-03-13 03:14:04 -07:00
test_cli_skin_integration.py fix(test): add missing voice state attrs to CLI stub in skin tests 2026-03-14 15:00:45 +03:00
test_codex_execution_paths.py
test_codex_models.py fix: add codex forward-compat model listing 2026-03-13 21:34:01 -07:00
test_display.py
test_external_credential_detection.py
test_fallback_model.py refactor: route main agent client + fallback through centralized router 2026-03-11 21:38:29 -07:00
test_file_permissions.py
test_flush_memories_codex.py fix: update all test mocks for call_llm migration 2026-03-11 21:06:54 -07:00
test_hermes_state.py test: cover gateway session model backfill 2026-03-14 06:44:14 -07:00
test_honcho_client_config.py
test_insights.py
test_interactive_interrupt.py fix: use session_key instead of chat_id for adapter interrupt lookups 2026-03-12 08:35:45 -07:00
test_interrupt_propagation.py fix: use session_key instead of chat_id for adapter interrupt lookups 2026-03-12 08:35:45 -07:00
test_managed_server_tool_support.py test: fix stale CI assumptions in parser and quick-command coverage (#1236) 2026-03-13 21:56:12 -07:00
test_minisweagent_path.py fix: worktree-aware minisweagent path discovery + clean up requirements check (#1248) 2026-03-13 23:39:51 -07:00
test_model_provider_persistence.py
test_model_tools.py
test_personality_none.py
test_provider_parity.py test: cover fireworks tool-call payload sanitization 2026-03-13 23:59:12 -07:00
test_quick_commands.py fix(gateway): support quick commands from GatewayConfig 2026-03-14 03:51:28 -07:00
test_real_interrupt_subagent.py fix(test): patch correct method in subagent interrupt test 2026-03-12 15:05:42 -04:00
test_reasoning_command.py fix: /reasoning command — add gateway support, fix display, persist settings (#1031) 2026-03-12 05:38:19 -07:00
test_redirect_stdout_issue.py fix: use session_key instead of chat_id for adapter interrupt lookups 2026-03-12 08:35:45 -07:00
test_resume_display.py
test_run_agent_codex_responses.py fix: add missing Responses API parameters for Codex provider 2026-03-11 04:28:31 -07:00
test_run_agent.py fix: preflight Anthropic auth and prefer Claude store 2026-03-14 19:38:55 -07:00
test_runtime_provider_resolution.py fix: restore config-saved custom endpoint resolution 2026-03-14 20:58:12 -07:00
test_setup_model_selection.py fix(setup): remove dead code causing is_coding_plan NameError crash 2026-03-13 04:42:26 +03:00
test_timezone.py test(cron): add cross-timezone naive timestamp regression 2026-03-14 10:33:32 -07:00
test_tool_call_parsers.py fix: use non-greedy regex in DeepSeek V3 parser for multi-tool calls (#1300) 2026-03-14 06:19:28 -07:00
test_toolset_distributions.py
test_toolsets.py
test_trajectory_compressor.py fix: harden trajectory compressor summary content handling 2026-03-14 11:03:25 -07:00
test_worktree.py fix: prevent path traversal in .worktreeinclude file processing 2026-03-14 21:48:19 -07:00