Michel Belleau c1c9ab534c fix(discord): strip RTP padding before DAVE/Opus decode (#11267) ... The Discord voice receive path skipped RFC 3550 §5.1 padding handling, passing padding-contaminated payloads into DAVE E2EE decrypt and Opus decode. Symptoms in live VC sessions: deaf inbound speech, intermittent empty STT results, "corrupted stream" decode errors — especially on the first reply after join. When the P bit is set in the RTP header, the last payload byte holds the count of trailing padding bytes (including itself) that must be removed. Receive pipeline now follows the spec order: 1. RTP header parse 2. NaCl transport decrypt (aead_xchacha20_poly1305_rtpsize) 3. strip encrypted RTP extension data from start 4. strip RTP padding from end if P bit set ← was missing 5. DAVE inner media decrypt 6. Opus decode Drops malformed packets where pad_len is 0 or exceeds payload length. Adds 7 integration tests covering valid padded packets, the X+P combined case, padding under DAVE passthrough, and three malformed-padding paths. Closes #11267 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-04-16 16:50:15 -07:00
..
acp	fix(acp): declare session load and resume capabilities in initialize response (#6985)	2026-04-10 03:45:36 -07:00
agent	feat(gemini): add Google Gemini CLI OAuth provider via Cloud Code Assist (free + paid tiers) (#11270)	2026-04-16 16:49:00 -07:00
cli	fix(cli): stop approval panel from clipping approve/deny off-screen (#11260)	2026-04-16 16:36:07 -07:00
cron	fix(cron): treat empty agent response as error in last_status (fixes #8585)	2026-04-16 06:49:57 -07:00
e2e	refactor: extract shared helpers to deduplicate repeated code patterns (#7917)	2026-04-11 13:59:52 -07:00
environments/benchmarks	fix(security): consolidated security hardening — SSRF, timing attack, tar traversal, credential leakage (#5944)	2026-04-07 17:28:37 -07:00
fakes	fix: streaming tool call parsing, error handling, and fake HA state mutation	2026-03-14 14:27:20 +03:00
gateway	fix(gateway): let /queue bypass active-session guard	2026-04-16 16:36:40 -07:00
hermes_cli	fix(models): add glm-5.1 to opencode-go catalogs	2026-04-16 16:49:22 -07:00
honcho_plugin	fix(honcho): strip whitespace from conclusion and delete_id inputs	2026-04-16 09:50:10 -07:00
integration	fix(discord): strip RTP padding before DAVE/Opus decode (#11267)	2026-04-16 16:50:15 -07:00
plugins	feat: sort tool search results by score and add corresponding unit test	2026-04-14 10:49:35 -07:00
run_agent	test: regression guards for the keepalive/transport bug class (#10933) (#11266)	2026-04-16 16:36:33 -07:00
skills	fix(google-workspace): normalize authorized user token writes	2026-04-16 04:22:16 -07:00
tools	fix(checkpoints): isolate shadow git repo from user's global config (#11261)	2026-04-16 16:06:49 -07:00
__init__.py	A bit of restructuring for simplicity and organization	2025-10-01 23:29:25 +00:00
conftest.py	fix(tests): fix several failing/flaky tests on main (#6777)	2026-04-09 13:17:06 -07:00
run_interrupt_test.py	fix: thread safety for concurrent subagent delegation (#1672)	2026-03-17 02:53:33 -07:00
test_batch_runner_checkpoint.py	fix: sanitize chat payloads and provider precedence	2026-03-13 23:59:12 -07:00
test_cli_file_drop.py	fix(gateway): reject file paths in get_command() + file-drop tests (#7356)	2026-04-10 13:06:02 -07:00
test_cli_skin_integration.py	fix: CLI/UX batch — ChatConsole errors, curses scroll, skin-aware banner, git state banner (#5974)	2026-04-07 17:59:42 -07:00
test_ctx_halving_fix.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_empty_model_fallback.py	fix: fall back to provider's default model when model config is empty (#8303)	2026-04-12 03:53:30 -07:00
test_evidence_store.py	feat: add OSS Security Forensics skill (Skills Hub) (#1482)	2026-03-15 21:59:53 -07:00
test_hermes_constants.py	fix(gateway): harden Docker/container gateway pathway	2026-04-12 16:36:11 -07:00
test_hermes_logging.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_hermes_state.py	fix(state): orphan children instead of cascade-deleting in prune/delete (#6513)	2026-04-09 02:41:56 -07:00
test_honcho_client_config.py	feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)	2026-04-02 15:33:51 -07:00
test_ipv4_preference.py	feat: add network.force_ipv4 config to fix IPv6 timeout issues (#8196)	2026-04-11 23:12:11 -07:00
test_mcp_serve.py	feat: add MCP server mode — hermes mcp serve (#3795)	2026-03-29 15:47:19 -07:00
test_minisweagent_path.py	chore: remove all remaining mini-swe-agent references	2026-03-24 08:19:23 -07:00
test_model_picker_scroll.py	fix: CLI/UX batch — ChatConsole errors, curses scroll, skin-aware banner, git state banner (#5974)	2026-04-07 17:59:42 -07:00
test_model_tools.py	feat(plugins): let pre_tool_call hooks block tool execution	2026-04-13 22:01:49 -07:00
test_model_tools_async_bridge.py	fix: use per-thread persistent event loops in worker threads	2026-03-20 15:41:06 -04:00
test_ollama_num_ctx.py	fix: provider/model resolution — salvage 4 PRs + MiniMax aux URL fix (#5983)	2026-04-07 22:23:28 -07:00
test_packaging_metadata.py	chore: prepare Hermes for Homebrew packaging (#4099)	2026-03-30 17:34:43 -07:00
test_plugin_skills.py	feat(plugins): namespaced skill registration for plugin skill bundles	2026-04-14 10:42:58 -07:00
test_project_metadata.py	refactor(matrix): swap matrix-nio for mautrix-python dependency	2026-04-10 21:15:59 -07:00
test_retry_utils.py	feat(agent): add jittered retry backoff	2026-04-08 00:41:36 -07:00
test_sql_injection.py	fix(security): eliminate SQL string formatting in execute() calls	2026-03-19 15:16:35 +01:00
test_subprocess_home_isolation.py	fix: per-profile subprocess HOME isolation (#4426) (#7357)	2026-04-10 13:37:45 -07:00
test_timezone.py	fix: remove 115 verified dead code symbols across 46 production files	2026-04-10 03:44:43 -07:00
test_toolset_distributions.py	test: add unit tests for 8 modules (batch 2)	2026-02-26 13:54:20 +03:00
test_toolsets.py	fix(mcp): make server aliases explicit	2026-04-14 17:19:20 -07:00
test_trajectory_compressor.py	fix: load credentials from HERMES_HOME .env in trajectory_compressor	2026-04-14 10:24:19 -07:00
test_trajectory_compressor_async.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_utils_truthy_values.py	Gate tool-gateway behind an env var, so it's not in users' faces until we're ready. Even if users enable it, it'll be blocked server-side for now, until we unlock for non-admin users on tool-gateway.	2026-03-30 13:28:10 +09:00