5 commits

Author	SHA1	Message	Date
kshitijk4poor	7e3acd02d9	fix(memory-setup): sanitize .env values in the core writer too ... Widens the salvaged .env injection fix (#50315) to the sibling site it missed: hermes_cli/memory_setup.py::_write_env_vars is the near-identical core writer the openviking plugin's copy was forked from, is fed directly by interactive _prompt() (pasted API keys), and is reused by other memory plugins (e.g. supermemory imports it). A pasted secret with an embedded CR/LF injected an arbitrary extra KEY=VALUE line on the next read. Same _env_line_safe() treatment as the plugin writer (strip every str.splitlines() separator + NUL), matching config.save_env_value's existing newline strip. Mutation-checked: reverting the sanitizer makes the new regression tests fail.	2026-07-24 13:00:53 +05:30
Hao Zhe	2c2ca0443b	feat(memory): improve OpenViking setup UX	2026-06-17 01:04:26 +08:00
Hao Zhe	a893d77d8d	fix(memory): separate setup option descriptions	2026-06-17 01:02:39 +08:00
Hao Zhe	7f76cf7195	fix(memory): smooth setup transition after provider selection	2026-06-17 01:02:39 +08:00
Hao Zhe	2dace37f6b	feat(memory): improve OpenViking setup UX ... Support linking, copying, and creating ovcli.conf during OpenViking memory setup. Make setup cancellation write nothing and cover OpenViking/Hindsight picker cancellation paths.	2026-06-17 01:02:38 +08:00