Grayscale/nanobot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,018 Commits 2 Branches 1 Tag
b8333a2d7ee0bc001c6d48cb2b7567a7fefd52b4
Commit Graph
1018 Commits
Author SHA1 Message Date
Xubin Ren 4391bbf4da feat(tui): add agent interaction workflows 2026-08-17 20:56:10 +08:00
Xubin Ren 731b8fc2ed fix(models): synchronize canonical runtime selection 2026-08-16 11:50:56 +08:00
Xubin Ren 3dc38f6396 refactor(models): unify preset names 2026-08-16 11:50:56 +08:00
Xubin Ren 5e84055dbb fix(plugins): verify content at skill read boundary 2026-08-16 00:01:54 +08:00
yu-xin-c e99b1a11aa fix(plugins): revalidate cached skill roots 2026-08-16 00:01:54 +08:00
Xubin Ren 2f19068eb0 fix(session): clear file state at deletion boundary 2026-08-15 23:49:20 +08:00
yu-xin-c 42afebb0cb fix(agent): bound per-session file state 2026-08-15 23:49:20 +08:00
chengyongru e226242dfc fix(session): serialize canonical file access (#5383) 2026-08-14 10:32:17 +08:00
Bobby af582246f1 [Security] exec.allowPatterns shell-chain bypass allows unintended command execution 
Closes #5306
 2026-08-13 11:05:04 +08:00
yorkhellenandXubin Ren d3382d7e57 fix(exec): guard bare and named-user home paths 
Co-authored-by: Xubin Ren <52506698+Re-bin@users.noreply.github.com>
 2026-08-13 02:50:58 +09:00
Xubin Renandshixi-li 76f629e925 fix(web): keep credential URLs out of failure logs 
Co-authored-by: shixi-li <40780706+shixi-li@users.noreply.github.com>
 2026-08-13 02:26:22 +09:00
Xubin Ren 5f916bbd3a fix(web): keep credential redirects away from Jina 2026-08-13 02:26:22 +09:00
shixi-li 31a71d6cd5 fix(web): keep credential-bearing URLs away from the remote Jina reader 2026-08-13 02:26:22 +09:00
Xubin Renandsanthreal 01c7323d74 fix(exec): parse shell path boundaries safely 
Co-authored-by: santhreal <64453045+santhreal@users.noreply.github.com>
 2026-08-13 01:53:38 +09:00
Xubin Ren 001a7492c2 fix(exec): guard POSIX double-slash absolute paths 2026-08-13 01:53:38 +09:00
santhreal 6fc0807fbf fix(tools): handle redirection and grouping delimiters in ExecTool path guard 2026-08-13 01:53:38 +09:00
Xubin Renandlmzopq cd7480945b fix(session): preserve history across storage relocation 
Co-authored-by: lmzopq <1646888+lmzopq@users.noreply.github.com>
 2026-08-13 01:41:10 +09:00
chengyongru 19997d20bb refactor: move MCP lifecycle out of AgentLoop (#5343) 2026-08-12 17:51:04 +08:00
chengyongru a6193932a0 fix(exec): clean up failed job assignment 2026-08-12 14:37:27 +08:00
chengyongru bcf5d8a6ed fix(exec): retain process trees after root exit 2026-08-12 14:37:27 +08:00
yorkhellenandTRAE CLI d64b84604c fix(exec): terminate one-shot process trees on cleanup 
Run one-shot commands in their own process tree and terminate all
descendants after timeout, cancellation, or unexpected failures.

Co-authored-by: TRAE CLI <noreply@bytedance.com>
 2026-08-12 14:37:27 +08:00
Wesley Zhang 99e07e138e fix(tools): reject non-finite number parameters 2026-08-12 02:25:20 +09:00
chengyongru d45c893f68 fix(webui): surface MCP runtime connection failures (#5331) 2026-08-11 23:52:02 +08:00
Xubin Ren 247c474e64 perf(plugins): cache verified skill roots 2026-08-11 20:16:24 +09:00
Xubin Ren a2979c3a4b fix(plugins): harden activation boundaries 2026-08-11 20:16:24 +09:00
Xubin Ren d5e0df6963 feat(plugins): integrate portable Agent Plugins 2026-08-11 20:16:24 +09:00
chengyongru 8e77f3f8a4 feat(mcp): add browser OAuth for remote servers (#5316) 2026-08-10 23:44:37 +08:00
chengyongru b3b0517611 fix(files): reject no-op edits 2026-08-10 21:39:00 +08:00
chengyongru 85a452e5c7 refactor(agent): replace reflective runtime state access (#5319) 2026-08-10 16:44:26 +08:00
chengyongru e620944150 fix(mcp): clean up failed HTTP connections 2026-08-10 13:15:04 +08:00
chengyongru 55ecda275d test: strengthen user-path coverage and CI gates (#5308) 2026-08-09 21:37:06 +08:00
Xubin Ren c410ea444c fix(agent): stop session-owned exec processes 2026-08-08 23:20:59 +08:00
chengyongru a5bc3bfbb9 fix(webui): complete temporary chat mode 2026-08-08 23:20:59 +08:00
Xubin Ren c9a6145878 feat(webui): add temporary chat mode 2026-08-08 23:20:59 +08:00
chengyongru 113e8d67ad refactor: remove verified dead code 2026-08-08 21:10:34 +08:00
chengyongru ff6deda178 fix: modernize dependency recovery guidance (#5282) 2026-08-07 13:58:13 +08:00
chengyongru 2c7943a133 fix(memory): archive short idle sessions for Dream 2026-08-07 11:45:49 +08:00
chengyongru 6e9ae5bd05 refactor(session): remove request-scoped access grants (#5238) 2026-08-05 10:18:46 +08:00
Xubin Ren d99f589a59 refactor(session): clarify reference boundaries 2026-08-04 12:14:51 +08:00
Xubin Ren d8aeb0eb2c refactor(session): simplify cross-session flow 2026-08-04 12:14:51 +08:00
Xubin Ren 62d34b5eb7 refactor(session): tighten cross-session access 2026-08-04 12:14:51 +08:00
Xubin Ren f15ea84dd1 fix(session): enforce trusted read scope 2026-08-04 12:14:51 +08:00
Xubin Ren 4c07c40b34 feat(session): link agent references 2026-08-04 12:14:51 +08:00
Xubin Ren 5dd3dc5450 fix(session): harden cross-session references 2026-08-04 12:14:51 +08:00
Xubin Ren 9b25da7b92 feat(session): add cross-session references 2026-08-04 12:14:51 +08:00
Xubin Ren 39e1533c3b fix(gateway): make resource teardown cancellation-safe 2026-08-03 16:00:39 +08:00
santhreal 4c387f6633 fix(memory): handle non-string timestamp and missing role in raw_archive 2026-08-01 20:14:28 +08:00
KDB b1030ab131 fix(exec): preserve wait targets across response truncation 2026-08-01 19:40:36 +08:00
KDB 39bb20c76b fix(session): tolerate malformed persisted session summary 
AutoCompact.prepare_session runs on the turn hot path
(AgentLoop._compact_session) and read the persisted _last_summary metadata
with an unguarded meta['text'] and datetime.fromisoformat(meta['last_active']).
A _last_summary dict that was hand-edited or written by another version
(missing text/last_active, or a non-ISO last_active) raised KeyError/ValueError
out of the turn.

Sibling readers already tolerate the same data: estimate_session_prompt_tokens
uses .get('text') and _archive parses inside try/except. Mirror that tolerance:
skip when text is unusable, and fall back to the session's own updated_at (the
value the writer persists) when last_active is missing or unparseable, so the
archived summary is preserved instead of crashing the turn.
 2026-08-01 19:29:16 +08:00
chengyongru 6a1a45d07a feat: preserve Responses reasoning state and compact context (#5172) 2026-07-30 22:39:43 +08:00