openhuman

openhuman copied to clipboard

feat: add config model pins for agents

1

## Summary - add `[orchestrator] model = ...` and `[teams.] lead_model/agent_model` config tables for agent model defaults - apply config-level pins in orchestrator session creation and delegated sub-agent model resolution...

honor2030

fix(security): prevent path traversal in agent definition prompt file loading

1

## Summary Fixes #1898 — path traversal vulnerability in agent definition prompt file loading. ## Problem Agent definition TOML files from `{workspace}/agents/` and `~/.openhuman/agents/` support `[system_prompt] file = "..."` which...

JasonOA888

feat: expose embedding provider model signatures

1

## Summary - add `EmbeddingProvider::model_id()` so each embedder can expose the configured embedding model - add a default `EmbeddingProvider::signature()` derived from provider, model, and dimensions - cover cloud, Ollama, OpenAI,...

honor2030

## Summary The functions `decrypt_optional_secret` and `encrypt_optional_secret` in `src/openhuman/config/schema/load.rs` are defined to encrypt/decrypt sensitive config fields (channel tokens, API keys), but are **never called** from any production code path. This...

JasonOA888

## Summary The RPC endpoint `openhuman.set_browser_allow_all` sets `OPENHUMAN_BROWSER_ALLOW_ALL=1` via `std::env::set_var`, globally disabling browser tool domain restrictions. This flag affects the entire process and can be called by any code path...

JasonOA888

## Summary Agent definition TOML files loaded from `{workspace}/agents/` and `~/.openhuman/agents/` support a `[system_prompt] file = "..."` field that reads prompt content from disk. The file path is joined with...

JasonOA888

ProgressIndicator missing accessibility attributes app/src/components/ProgressIndicator.tsx The step dots are rendered as plain elements with no ARIA roles. Screen readers can't tell users which step they're on. This is a clear...

srushti2115-tech

feat: allow inline model pinning for subagents

1

## Summary - add an optional `model` parameter to `spawn_subagent` and archetype delegation tools - thread that inline model override through `SubagentRunOptions` and `dispatch_subagent` - resolve the child run with...

honor2030

fix: surface expired Composio auth state

1

## Summary - add an explicit expired Composio auth state when backend/toolkit status reports expired auth - surface auth-expired copy and reconnect CTA across Skills catalog, onboarding Skills step, and...

honor2030

Feature Request : Per-agent quality scoring and hallucination rate tracking - continuous output scoring with trend history per agent

1

# Summary Add per-agent quality scoring and hallucination rate tracking so that every agent in the swarm accumulates a continuous, rolling performance record. Scores are computed from QC review loop...

githb-ac