GoldenFishX
5f5c5faa25
fix(tts): require authentication for TTS endpoints ( #1101 )
...
Move TTS routes behind auth middleware and attach JWT to local
proxy requests from the frontend. Previously both /api/hermes/tts
and /api/tts/proxy/audio/speech were publicly accessible without
authentication, allowing unauthenticated callers to consume Edge
TTS resources through the server.
Changes:
- server: move ttsRoutes from public to protected route section
- client: auto-attach JWT when baseUrl is a local path (/...)
and no external API key is configured
- client: import getApiKey() instead of raw localStorage access
2026-05-28 21:46:31 +08:00
ekko
e89c192488
fix session bottom scroll alignment ( #1100 )
2026-05-28 21:12:01 +08:00
ekko
932c913d63
page history session messages ( #1099 )
2026-05-28 19:47:24 +08:00
ekko
9d2e82cd06
fix virtual message list scrolling ( #1089 )
...
Co-authored-by: Codex <codex@openai.com >
2026-05-28 15:22:18 +08:00
ekko
d610c3d1b9
fix preview runtime isolation and shutdown ( #1088 )
2026-05-28 13:50:52 +08:00
ekko
1734bac9b4
[codex] add version preview workflow ( #1086 )
...
* add version preview workflow
* fix sidebar group test
* fix legacy usage schema migration
2026-05-28 12:30:49 +08:00
ekko
a6b3bec29b
Add virtualized chat pagination ( #1080 )
2026-05-28 09:34:30 +08:00
ekko
6a9cb2450a
docs: update 0.6.3 changelog ( #1060 )
...
* update 0.6.3 changelog
* bump package version to 0.6.3
2026-05-27 12:21:37 +08:00
daqiege
1ec9568502
feat(dingtalk): add AI card template ID input ( #1056 )
...
Adds an input field for the DingTalk AI Card template ID under
Platform Settings, plus the matching DINGTALK_CARD_TEMPLATE_ID
env mapping so the value is persisted to the active profile and
forwarded to the hermes agent (which already supports AI Cards
via extra.card_template_id).
Closes #1035
2026-05-27 11:32:26 +08:00
GoldenFishX
6647dc9bc8
fix(auth): remove username leak from public /api/auth/status endpoint ( #1055 )
...
The authStatus() controller previously returned the first users
username to unauthenticated clients. The frontend never used this
value — `fetchAuthStatus()` in LoginView.vue discards the return
value entirely. Remove the field to prevent username enumeration.
Changes:
- server: drop `username` from authStatus response body
- server: remove unused `findFirstUser` import
- client: remove `username` from AuthStatus interface
2026-05-27 11:25:29 +08:00
ekko
07c4c1ddd5
fix provider base URL env handling ( #1054 )
2026-05-27 10:41:29 +08:00
ekko
a10e171082
Add history import controls ( #1053 )
2026-05-27 10:05:52 +08:00
ekko
42f7b64ffb
update changelog and context default ( #1045 )
2026-05-26 19:35:48 +08:00
ekko
82680f5c0b
fix clarify replay and compression timeout ( #1044 )
2026-05-26 19:15:22 +08:00
ekko
e926a8e2fb
fix chat queue promotion ( #1042 )
2026-05-26 17:39:38 +08:00
ekko
ad1cab277a
fix context token resume ( #1039 )
2026-05-26 16:32:07 +08:00
ekko
689237f0fd
fix job deliver target options ( #1026 )
2026-05-25 20:04:50 +08:00
ekko
badb17cf8e
[codex] integrate goal command workflow ( #1025 )
...
* feat: integrate goal command workflow
* fix: keep goal done visible
* fix: add goal done slash command
* fix: promote queued message on run start
2026-05-25 19:26:23 +08:00
ekko
0eab6a1125
Fix plan command support in web bridge ( #1018 )
...
* fix: support plan command in web bridge
* fix: preserve queued bridge messages
* fix: avoid duplicate queued plan messages
* fix: preserve plan command semantics
---------
Co-authored-by: Codex <codex@openai.com >
2026-05-25 15:48:17 +08:00
ekko
e1438490b8
docs: update changelog after 0.6.0 ( #1014 )
2026-05-25 13:06:06 +08:00
ekko
56c6cf3e2d
fix profile-aware session history actions ( #1011 )
2026-05-25 12:32:42 +08:00
ekko
9e35d81f48
fix mobile chat run reconnect ( #993 )
2026-05-25 11:08:54 +08:00
ekko
61b41512d4
[codex] increase login lock threshold ( #984 )
...
* increase login ip lock threshold
* show login lock recovery commands
2026-05-24 22:36:21 +08:00
ekko
4176923bac
support external skill sources ( #981 )
2026-05-24 19:47:52 +08:00
ekko
6763721545
fix session links profile filtering ( #979 )
2026-05-24 19:30:32 +08:00
Maxim Kirilyuk
acdf18793c
feat: make navigation use native links ( #973 )
2026-05-24 19:13:42 +08:00
ekko
e743c81ad3
[codex] add clarify support with response path tests ( #972 )
...
* feat: 新增 clarify(澄清/确认)交互支持
* test clarify response bridge path
---------
Co-authored-by: GoldenFish123321 <golden_fish@foxmail.com >
2026-05-24 18:09:39 +08:00
ekko
a7f0a92fe6
fix session profile listing and cli sqlite warning ( #971 )
2026-05-24 17:54:17 +08:00
ekko
f61a1d9454
[codex] fix auth startup and profile model defaults ( #966 )
...
* docs release 0.6.0 changelog
* fix auth startup and profile model defaults
2026-05-24 14:00:31 +08:00
ekko
634a622934
[codex] fix media skill profile auth and run events ( #965 )
...
* fix media skill profile auth and run events
* test bridge run profile context
2026-05-24 12:52:14 +08:00
ekko
df41d6b051
[codex] Fix profile-aware session deep links ( #962 )
...
* feat: add session deep links for chats
* feat: add deep links for history and group chat
* Fix profile-aware session deep links
---------
Co-authored-by: Maxim Kirilyuk <werserk@inbox.ru >
2026-05-24 10:55:55 +08:00
Maxim Kirilyuk
070de2499e
feat(chat): render fenced latex math blocks
2026-05-24 10:19:08 +08:00
Maxim Kirilyuk
3b1beb634b
fix: use explicit katex engine for markdown math
2026-05-24 10:19:08 +08:00
Maxim Kirilyuk
981e2a1ad4
[verified] feat: render latex in chat markdown
2026-05-24 10:19:08 +08:00
ekko
f4c70bd849
Initialize profile scoped views before loading
2026-05-24 10:11:03 +08:00
ekko
f8a1b2f6ae
Add default credential reset safeguards
2026-05-24 10:11:03 +08:00
ekko
9708a6a521
Scope files jobs and plugins to request profile
2026-05-24 10:11:03 +08:00
ekko
289a958684
Scope skills and memory to request profile
2026-05-24 10:11:03 +08:00
Codex
771d122f44
Restore synced queued message UI
2026-05-24 10:11:03 +08:00
ekko
5bdaa0987a
Fix mobile tool preview overflow
2026-05-24 10:11:03 +08:00
Codex
238dbb507e
Fix peer chat queue sync
2026-05-24 10:11:03 +08:00
Codex
7b05731d44
Refine user profile access and chat sync
2026-05-24 10:11:03 +08:00
ekko
3f6a25d8f1
Add user-scoped Hermes profile access
2026-05-24 10:11:03 +08:00
ekko
f5846521e0
Add 0.5.35 changelog
2026-05-23 10:47:30 +08:00
ekko
4092962db3
fix performance monitor worker blocking
2026-05-23 09:53:04 +08:00
ekko
c184519c5d
add bridge performance monitoring
2026-05-23 09:09:54 +08:00
ekko
4223014e0c
polish file preview drawer
2026-05-22 19:11:04 +08:00
w770583069
bf74745b83
feat: add inline file preview for text-based files
...
- Add fetchFileText() to download API
- Add preview modal to MarkdownRenderer for .txt/.md/.json/.csv etc.
- File card: click card body → preview, click download button → download
2026-05-22 19:11:04 +08:00
ekko
92670e97ee
Add Windows Kanban upgrade changelog note ( #930 )
2026-05-22 12:03:43 +08:00
ekko
f0817003b2
Update changelog for 0.5.34 ( #929 )
2026-05-22 11:12:21 +08:00