Eugeniusz Gilewski b76acacbb9 fix(tools): execute local STT templates without a shell ... HERMES_LOCAL_STT_COMMAND rendered quoted placeholders into a user-configured template and passed the result to shell=True. Shell metacharacters in the template therefore remained executable syntax even though the placeholder values themselves were quoted. Tokenize the rendered template and invoke it as an argv list while preserving the existing timeout, closed stdin, and Windows creation flags. Lock the invocation contract with metacharacter regression coverage and document explicit shell wrapping for trusted templates that need it. Salvages #32694 Co-authored-by: Ernest Hysa <takis312@hotmail.com>		2026-07-28 18:12:26 -07:00
..
_category_.json
acp.md	docs(acp): verify Buzz relay-bridge docs against buzz source, cross-link modes, add zh-Hans	2026-07-28 17:57:37 -07:00
api-server.md	docs(delegation,api): document stall detection, timeout metadata, /agents live status, runs-stream subagent lifecycle	2026-07-27 11:33:53 -07:00
batch-processing.md	feat(reasoning): add max and ultra effort levels (#62650)	2026-07-12 00:26:49 -07:00
browser.md	fix: widen headed-mode gate to config, add browser.headed default, tests, docs	2026-07-18 10:07:46 -07:00
built-in-plugins.md	docs: Plugins subcategory under Extending + secret-source plugin guide + 1Password sidebar fix (#59613)	2026-07-06 12:11:31 -07:00
code-execution.md	fix: drain thread no longer crashes on fd-less stdout streams (#34789)	2026-05-29 12:16:57 -07:00
codex-app-server-runtime.md	docs(codex): document live app-server display; AUTHOR_MAP entries	2026-07-17 13:44:12 -07:00
computer-use.md	fix(skills): move computer-use skill into the autonomous-ai-agents category	2026-07-23 21:06:39 -07:00
context-files.md	feat(prompt): make context-file truncation limit configurable	2026-06-16 11:28:35 -07:00
context-references.md
credential-pools.md	docs: warn that mid-session model switches break prompt caching (#58747)	2026-07-05 04:34:05 -07:00
cron.md	feat(cron): user-owned model pins + cron.model fleet default	2026-07-28 11:52:47 -07:00
curator.md	fix(curator): make the autonomous write policy consistent (#67140)	2026-07-25 19:27:17 -07:00
delegation.md	docs(delegation,api): document stall detection, timeout metadata, /agents live status, runs-stream subagent lifecycle	2026-07-27 11:33:53 -07:00
deliverable-mode.md	feat(skills): bundle docx, xlsx, and pdf office skills; refresh powerpoint (#68595)	2026-07-21 05:39:23 -07:00
extending-the-dashboard.md	docs(desktop): document the desktop plugin SDK (@hermes/plugin-sdk) (#67301)	2026-07-19 04:02:17 +00:00
fallback-providers.md	fix(compression): give fallback candidates their own timeout budget + escalate repeat-timeout cooldowns (#65143)	2026-07-15 12:28:09 -07:00
goals.md	feat(goals): completion contracts for /goal — evidence-based judging (#50501)	2026-06-22 12:20:09 -07:00
honcho.md	docs(honcho): clarify pinUserPeer pins only non-agent users	2026-06-15 21:34:09 +00:00
hooks.md	feat(delegate): expose redacted child tool history	2026-07-26 20:36:47 -07:00
image-generation.md	fix(image-gen): stop reporting the Codex tool_choice 400 as an account limit	2026-07-25 16:41:57 -07:00
kanban-tutorial.md
kanban-worker-lanes.md	refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)	2026-06-21 17:06:48 -07:00
kanban.md	docs(kanban): explain why an unblocked task can later land in triage	2026-07-17 15:47:39 -07:00
lsp.md	fix(lsp): never report stale diagnostics — wait for fresh post-edit data	2026-07-20 13:43:36 -04:00
mcp.md	fix(mcp): make Figma remote OAuth work via DCR allowlist defaults	2026-07-28 00:53:16 -05:00
memory-providers.md	feat(honcho): add OAuth device-code login (RFC 8628) for headless environments	2026-07-24 07:53:12 -07:00
memory.md	feat(background-review): aux-model selector for the self-improvement review (#49252)	2026-06-22 14:54:53 -07:00
mixture-of-agents.md	feat(moa): default advisor fanout to user_turn — the cheapest cadence	2026-07-23 21:07:18 -07:00
overview.md	fix(wake-word): enforce single-owner lifecycle	2026-07-28 07:58:01 -07:00
personality.md
pets.md	refactor(skills): restructure hermes-agent into a hub + absorb themes, desktop-plugins, tui-widgets, petdex	2026-07-23 19:46:02 -07:00
plugins.md	docs: Plugins subcategory under Extending + secret-source plugin guide + 1Password sidebar fix (#59613)	2026-07-06 12:11:31 -07:00
provider-routing.md	fix(routing): preserve profile and delegation parity	2026-07-10 13:10:45 +05:30
skills.md	fix(skills): bind bundles to exact files and origins	2026-07-12 02:59:27 -07:00
skins.md
spotify.md	docs(spotify): document 6-month re-auth cycle and add client-level invalid_grant test	2026-06-20 23:23:47 -07:00
subscription-proxy.md
tool-gateway.md
tool-search.md	feat(tools): tier-2 server-summary hint + per-server listing degradation; 5% default budget	2026-07-26 08:26:09 -07:00
tools.md	docs: reconcile docs with code across last 3 releases (#54254)	2026-06-28 12:47:50 -07:00
tts.md	fix(tools): execute local STT templates without a shell	2026-07-28 18:12:26 -07:00
vision.md
voice-mode.md	Merge remote-tracking branch 'origin/main' into wake-toggle-config	2026-07-28 12:37:35 -07:00
wake-word.md	feat(desktop): end a hands-free voice conversation by saying "stop"	2026-07-28 10:03:11 -07:00
web-dashboard.md	rip out brew + pip/PyPI wheel support (#68217)	2026-07-22 16:51:01 -04:00
web-search.md	docs: fix 25 documentation/code inconsistencies (audit round 3)	2026-07-16 04:47:40 -07:00
x-search.md	docs(xai): clarify x_search vs xurl routing without schema cross-refs	2026-07-23 21:06:47 -07:00