entropidelic 989b950fbc fix(security): enforce API_SERVER_KEY for non-loopback binding ... Add is_network_accessible() helper using Python's ipaddress module to robustly classify bind addresses (IPv4/IPv6 loopback, wildcards, mapped addresses, hostname resolution with DNS-failure-fails-closed). The API server connect() now refuses to start when the bind address is network-accessible and no API_SERVER_KEY is set, preventing RCE from other machines on the network. Co-authored-by: entropidelic <entropidelic@users.noreply.github.com>		2026-04-10 16:51:44 -07:00
..
acp	fix(acp): declare session load and resume capabilities in initialize response (#6985)	2026-04-10 03:45:36 -07:00
agent	test: remove dead TestResolveForcedProvider tests (function doesn't exist on main)	2026-04-10 16:47:44 -07:00
cli	fix(cli): make /status show gateway-style session status	2026-04-10 05:19:26 -07:00
cron	feat(cron): support Discord thread_id in deliver targets	2026-04-10 03:20:05 -07:00
e2e	fix(gateway): handle provider command without config	2026-04-10 05:54:56 -07:00
environments/benchmarks
fakes
gateway	fix(security): enforce API_SERVER_KEY for non-loopback binding	2026-04-10 16:51:44 -07:00
hermes_cli	fix: resolve overlay provider slug mismatch in /model picker (#7373)	2026-04-10 14:46:57 -07:00
honcho_plugin
integration
plugins	feat(hindsight): feature parity, setup wizard, and config improvements	2026-04-08 23:54:15 -07:00
run_agent	fix: guard api_kwargs in except handler to prevent UnboundLocalError (#7376)	2026-04-10 15:12:00 -07:00
skills	fix: update tests for gws migration	2026-04-09 14:28:35 -07:00
tools	fix(patch): harden V4A patch parser and fuzzy match — 9 correctness bugs	2026-04-10 16:47:44 -07:00
__init__.py
conftest.py	fix(tests): fix several failing/flaky tests on main (#6777)	2026-04-09 13:17:06 -07:00
run_interrupt_test.py
test_batch_runner_checkpoint.py
test_cli_file_drop.py	fix(gateway): reject file paths in get_command() + file-drop tests (#7356)	2026-04-10 13:06:02 -07:00
test_cli_skin_integration.py
test_ctx_halving_fix.py	fix(compaction): don't halve context_length on output-cap-too-large errors	2026-04-09 11:27:41 -07:00
test_evidence_store.py
test_hermes_constants.py	fix: profile paths broken in Docker — profiles go to /root/.hermes instead of mounted volume (#7170)	2026-04-10 05:53:10 -07:00
test_hermes_logging.py	feat(nix): shared-state permission model for interactive CLI users (#6796)	2026-04-10 03:48:42 +05:30
test_hermes_state.py	fix(state): orphan children instead of cascade-deleting in prune/delete (#6513)	2026-04-09 02:41:56 -07:00
test_honcho_client_config.py
test_mcp_serve.py
test_minisweagent_path.py
test_model_picker_scroll.py
test_model_tools_async_bridge.py
test_model_tools.py
test_ollama_num_ctx.py
test_packaging_metadata.py
test_project_metadata.py
test_retry_utils.py
test_sql_injection.py
test_subprocess_home_isolation.py	fix: per-profile subprocess HOME isolation (#4426) (#7357)	2026-04-10 13:37:45 -07:00
test_timezone.py	fix: remove 115 verified dead code symbols across 46 production files	2026-04-10 03:44:43 -07:00
test_toolset_distributions.py
test_toolsets.py
test_trajectory_compressor_async.py
test_trajectory_compressor.py
test_utils_truthy_values.py