Allegro cb0cf51adf security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL) ...

- Replace pickle with JSON + HMAC-SHA256 state serialization
- Add constant-time signature verification
- Implement replay attack protection with nonce expiration
- Add comprehensive security test suite (54 tests)
- Harden token storage with integrity verification

Resolves: V-006 (CVSS 8.8)

2026-03-31 00:37:14 +00:00

..

evolution

feat: implement Phase 3 - Domain Distiller

2026-03-30 22:59:57 +00:00

__init__.py

Refactor Terminal and AIAgent cleanup

2026-02-21 22:31:43 -08:00

anthropic_adapter.py

fix(anthropic): use model-native output limits instead of hardcoded 16K (#3426)

2026-03-27 13:02:52 -07:00

auxiliary_client.py

fix: add INFO-level logging for auxiliary provider resolution (#3866)

2026-03-29 21:29:00 -07:00

context_compressor.py

fix: cap percentage displays at 100% in stats, gateway, and memory tool (#3599)

2026-03-28 14:55:18 -07:00

context_references.py

fix: add timeout to subprocess calls in context_references (#3469)

2026-03-27 17:51:14 -07:00

copilot_acp_client.py

fix(acp): preserve leading whitespace in streaming chunks

2026-03-20 09:38:13 -07:00

display.py

feat(display): configurable tool preview length -- show full paths by default (#3841)

2026-03-29 18:02:42 -07:00

gemini_adapter.py

feat: add native Gemini 3 series adapter

2026-03-30 22:16:18 +00:00

insights.py

chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)

2026-03-25 19:47:58 -07:00

knowledge_ingester.py

feat: enhance Knowledge Ingester with symbolic extraction

2026-03-30 22:28:59 +00:00

meta_reasoning.py

feat: add Meta-Reasoning Layer

2026-03-30 22:16:19 +00:00

model_metadata.py

fix(agent): support full context length resolution for direct Gemini API endpoints (#3876)

2026-03-29 21:56:07 -07:00

models_dev.py

fix: write models.dev disk cache atomically (#3588)

2026-03-28 14:20:30 -07:00

prompt_builder.py

feat(skills): support external skill directories via config (#3678)

2026-03-29 00:33:30 -07:00

prompt_caching.py

fix(prompt-caching): skip top-level cache_control on role:tool for OpenRouter

2026-03-21 16:54:43 -07:00

redact.py

fix(security): extend secret redaction to ElevenLabs, Tavily and Exa API keys (#3920)

2026-03-30 08:13:01 -07:00

skill_commands.py

security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL)

2026-03-31 00:37:14 +00:00

skill_security.py

security: Fix V-006 MCP OAuth Deserialization (CVSS 8.8 CRITICAL)

2026-03-31 00:37:14 +00:00

skill_utils.py

feat(skills): support external skill directories via config (#3678)

2026-03-29 00:33:30 -07:00

smart_model_routing.py

feat: integrate GitHub Copilot providers across Hermes

2026-03-17 23:40:22 -07:00

symbolic_memory.py

feat: add Sovereign Intersymbolic Memory Layer

2026-03-30 22:28:57 +00:00

title_generator.py

feat(agent): configurable timeouts for auxiliary LLM calls via config.yaml (#3597)

2026-03-28 14:35:28 -07:00

trajectory.py

Refactor Terminal and AIAgent cleanup

2026-02-21 22:31:43 -08:00

usage_pricing.py

fix: status bar shows 26K instead of 260K for token counts with trailing zeros (#3024)

2026-03-25 12:45:58 -07:00