All pull requests

Pull requests

• Security: Fix 5 Critical/High Vulnerabilities (SSRF, Timing Attacks, Header Injection) with PoC

  core
  #4902·Sunil56224972 opened Sep 28, 2026·

  ·

• fix(api): 404 recall of a bank deleted by another process within the cache TTL

  core
  #4899·cdbartholomew opened Sep 28, 2026Contributor·

  ·

• refactor: replace eval with safe Docker argument handling

  core
  #4898·AbirHasan2003 opened Sep 28, 2026·

  ·

• fix(consolidation): preserve tag edits made after recall

  core
  #4897·r266-tech opened Sep 28, 2026Contributor·

  ·

• docs: add requesty to the README gateway list

  core
  #4896·Thibaultjaigu opened Sep 28, 2026Contributor·

  ·

• perf(consolidation): pick each round fairly across scope groups

  core
  #4895·nicoloboschi opened Sep 28, 2026Collaborator·

  ·
  1

• feat(mental-models): per-model refresh budget, and refresh stops inheriting reflect defaults

  core
  #4894·nicoloboschi opened Sep 28, 2026Collaborator·

  ·
  1

• fix(mental-models): escalate wedged delta refreshes to full regeneration

  core
  #4888·lakshya-dhariwal opened Sep 28, 2026·

  ·
  1

• docs(hermes): refresh setup instructions for the plugin catalog

  coreintegration
  #4882·benfrank241 opened Sep 28, 2026Member·

  ·

• Add blog post: How to Migrate Your Hindsight Memory in Hermes

  core
  #4879·benfrank241 opened Sep 28, 2026Member·

  ·

• fix(reflect): expand answer aliases to real memory ids

  core
  #4878·samthakur587 opened Sep 28, 2026·

  ·
  1

• fix(retain): cancel synchronous retain on client disconnect

  core
  #4877·STiFLeR7 opened Sep 28, 2026·

  ·
  1

• Feature/member1 data

  core
  #4873·RohithReddy57 opened Sep 28, 2026·

  ·

• fix(coding-agents): drop duplicate markdown copy in getPage response

  integration:coding-agents
  #4872·JoAdo07 opened Sep 28, 2026·

  ·
  1

• fix(mcp): say what recall's max_tokens counts, and return compact JSON

  core
  #4870·JayOfTheKeyboard opened Sep 28, 2026·

  ·

• chore(api): update example in the hindsight-api readme

  core
  #4869·JayaKrishnaNamburu opened Sep 28, 2026·

  ·

• feat(i18n): add Indonesian (id) locale

  core
  #4862·fazelllyyy opened Sep 28, 2026·

  ·

• feat(coding-agents): make auto-inject budget configurable via injectTimeoutMs (#4843)

  integration:coding-agents
  #4855·Yi-111-a opened Sep 28, 2026Contributor·

  ·
  1

• fix(coding-agents): make auto-inject timeout configurable

  integration:coding-agents
  #4854·azhsmesos opened Sep 28, 2026·

  ·
  1

• fix(coding-agents): make automatic injection timeout configurable

  integration:coding-agents
  #4853·Sealdot opened Sep 28, 2026·

  ·
  1

• feat(consolidation): fair group selection for the consolidation fetch…

  core
  #4852·Ravandevil25 opened Sep 28, 2026·

  ·

• fix(coding-agents/pi): inject into systemPromptOptions.sections to preserve other extensions (#4841)

  integration:coding-agents
  #4851·Yi-111-a opened Sep 28, 2026Contributor·

  ·
  1

• fix(coding-agents): preserve Pi prompt sections during recall

  integration:coding-agents
  #4849·r266-tech opened Sep 28, 2026Contributor·

  ·
  1

• fix(hermes): recognize shared observation scope keyword in settings (#4845)

  integration:hermes
  #4848·Yi-111-a opened Sep 28, 2026Contributor·

  ·
  1

• fix(hermes): forward shared observation scopes

  integration:hermes
  #4847·Sealdot opened Sep 28, 2026·

  ·
  1