mirror/nanobot
1
0
Fork 0
mirror of https://github.com/HKUDS/nanobot.git synced 2026-09-04 02:01:48 +03:00
Code Issues Packages Projects Releases Wiki Activity
4,280 Commits 44 Branches 19 Tags
b909793784ab8920262f8c67c6b80163b3933f65
Commit Graph
260 Commits
Author SHA1 Message Date
Pengyi PengandXubin Ren b909793784 fix(agent): observe session reply timeout task failures 2026-09-03 17:45:13 +08:00
Wu ShuwenGitHubchengyongru
 		feb33e1f99 docs(tools): clarify edit_file selector exclusivity (#5598) 
* docs(tools): clarify edit selector exclusivity

* docs(tools): streamline edit_file guidance

---------

Co-authored-by: chengyongru <chengyongru.ai@gmail.com>
 2026-08-31 14:28:41 +08:00
chengyongruandGitHub 6cd7063682 refactor(agent): defer transcript assembly to runner (#5608) 
* refactor(agent): defer transcript assembly to runner

Keep persisted history and the fresh turn as explicit inputs until the Runner assembles the provider transcript. Preserve ContextBuilder and direct AgentRunner compatibility while making the save boundary structural.

Refs NAN-81.

* fix(providers): preserve mixed adjacent user content
 2026-08-31 00:06:15 +08:00
yu-xin-candXubin Ren 2c55934198 fix(agent): bound session message rate-limit state 2026-08-30 16:46:36 +08:00
chengyongruandGitHub 39de4594d7 refactor(agent): decouple loop from message tool state (#5559) 
* refactor(agent): decouple loop from message tool state

* refactor(agent): scope message delivery tracking per run

* refactor(agent): clarify message delivery scope name
 2026-08-27 17:23:16 +08:00
chengyongruandchengyongru d6c112ab74 refactor(agent): load MyTool through tool loader 2026-08-27 14:05:21 +08:00
chengyongruandGitHub 4f6c0aedfa refactor(agent): make run usage explicit (#5546) 
* refactor(agent): make run usage explicit

* fix(api): capture usage per run
 2026-08-26 15:18:53 +08:00
chengyongruandchengyongru 649e3958c5 fix(tools): bound find_files scans 2026-08-25 18:40:49 +08:00
chengyongruandGitHub 4b2965c8f3 feat: add demand-driven document retrieval (#5525) 2026-08-25 15:34:48 +08:00
chengyongruandGitHub 5cf78540a4 fix(agent): wait for exec sessions without polling (#5526) 2026-08-25 14:46:02 +08:00
chengyongruandchengyongru 89c94d8744 test(exec): remove Windows process timing races 2026-08-25 00:53:54 +08:00
chengyongruandchengyongru 09d3bd76c9 fix(exec): disable command guard in full access 2026-08-24 11:44:00 +08:00
chengyongruandchengyongru d7b3abe589 test(exec): wait deterministically for truncation output 2026-08-19 01:34:48 +08:00
chengyongruandchengyongru 9e046815bc fix(webui): assign readable session handles 2026-08-19 01:15:56 +08:00
chengyongruandchengyongru 251a1ccd40 refactor: simplify cross-session messaging 2026-08-19 01:15:56 +08:00
chengyongruandchengyongru 0e184965e8 feat(webui): add lightweight session messaging via mentions 2026-08-19 01:15:56 +08:00
Xubin Ren 314f5dcf0b test(ci): isolate Windows process checks 2026-08-17 20:56:10 +08:00
Xubin Ren 8eb2742c9b test(ci): stabilize cross-platform agent checks 2026-08-17 20:56:10 +08:00
yu-xin-candXubin Ren 42afebb0cb fix(agent): bound per-session file state 2026-08-15 23:49:20 +08:00
Bobbyandchengyongru af582246f1 [Security] exec.allowPatterns shell-chain bypass allows unintended command execution 
Closes #5306
 2026-08-13 11:05:04 +08:00
yorkhellenandXubin Ren d3382d7e57 fix(exec): guard bare and named-user home paths 
Co-authored-by: Xubin Ren <52506698+Re-bin@users.noreply.github.com>
 2026-08-13 02:50:58 +09:00
Xubin Renandshixi-li 76f629e925 fix(web): keep credential URLs out of failure logs 
Co-authored-by: shixi-li <40780706+shixi-li@users.noreply.github.com>
 2026-08-13 02:26:22 +09:00
Xubin Ren 5f916bbd3a fix(web): keep credential redirects away from Jina 2026-08-13 02:26:22 +09:00
shixi-liandXubin Ren 31a71d6cd5 fix(web): keep credential-bearing URLs away from the remote Jina reader 2026-08-13 02:26:22 +09:00
Xubin Renandsanthreal 01c7323d74 fix(exec): parse shell path boundaries safely 
Co-authored-by: santhreal <64453045+santhreal@users.noreply.github.com>
 2026-08-13 01:53:38 +09:00
Xubin Ren 001a7492c2 fix(exec): guard POSIX double-slash absolute paths 2026-08-13 01:53:38 +09:00
santhrealandXubin Ren 6fc0807fbf fix(tools): handle redirection and grouping delimiters in ExecTool path guard 2026-08-13 01:53:38 +09:00
chengyongruandGitHub 19997d20bb refactor: move MCP lifecycle out of AgentLoop (#5343) 2026-08-12 17:51:04 +08:00
chengyongruandchengyongru 1656664a47 test(exec): isolate Windows platform mock 2026-08-12 14:37:27 +08:00
chengyongruandchengyongru a6193932a0 fix(exec): clean up failed job assignment 2026-08-12 14:37:27 +08:00
chengyongruandchengyongru bcf5d8a6ed fix(exec): retain process trees after root exit 2026-08-12 14:37:27 +08:00
yorkhellenchengyongruTRAE CLI
 		d64b84604c fix(exec): terminate one-shot process trees on cleanup 
Run one-shot commands in their own process tree and terminate all
descendants after timeout, cancellation, or unexpected failures.

Co-authored-by: TRAE CLI <noreply@bytedance.com>
 2026-08-12 14:37:27 +08:00
Wesley ZhangandXubin Ren 99e07e138e fix(tools): reject non-finite number parameters 2026-08-12 02:25:20 +09:00
chengyongruandGitHub d45c893f68 fix(webui): surface MCP runtime connection failures (#5331) 2026-08-11 23:52:02 +08:00
chengyongruandGitHub 8e77f3f8a4 feat(mcp): add browser OAuth for remote servers (#5316) 2026-08-10 23:44:37 +08:00
chengyongruandchengyongru b3b0517611 fix(files): reject no-op edits 2026-08-10 21:39:00 +08:00
chengyongruandchengyongru e620944150 fix(mcp): clean up failed HTTP connections 2026-08-10 13:15:04 +08:00
chengyongruandchengyongru 113e8d67ad refactor: remove verified dead code 2026-08-08 21:10:34 +08:00
chengyongruandGitHub ff6deda178 fix: modernize dependency recovery guidance (#5282) 2026-08-07 13:58:13 +08:00
chengyongruandGitHub 6e9ae5bd05 refactor(session): remove request-scoped access grants (#5238) 2026-08-05 10:18:46 +08:00
Xubin Ren 62d34b5eb7 refactor(session): tighten cross-session access 2026-08-04 12:14:51 +08:00
KDBandXubin Ren b1030ab131 fix(exec): preserve wait targets across response truncation 2026-08-01 19:40:36 +08:00
yu-xin-candXubin Ren 5e67fbf93e fix(exec): bound buffered session output 2026-07-30 19:44:09 +08:00
ZhouandGitHub 5a28a6165c fix(shell): preserve UTF-8 native input on PowerShell 5 (#5160) 
Windows PowerShell 5.1 defaults $OutputEncoding to US-ASCII, corrupting non-ASCII strings piped to native commands. Set it from the console encoding only on legacy versions so PowerShell 7 keeps its defaults.
 2026-07-29 21:47:01 +08:00
chengyongruandGitHub 757ad9c764 refactor: enforce BasedPyright strict type checking (#5158) 2026-07-29 21:37:11 +08:00
chengyongruandGitHub 393d429e0a fix(ci): stabilize and speed up CI (#5145) 2026-07-28 22:55:59 +08:00
chengyongruandGitHub 12f828ea3d fix(agent): read document attachments on demand (#5122) 2026-07-28 13:33:06 +08:00
chengyongruandGitHub ef9e687f19 refactor(core): remove redundant runtime scaffolding (#5127) 2026-07-28 11:07:58 +08:00
chengyongruandchengyongru 39348dfafe refactor(agent): remove dead lifecycle scaffolding 2026-07-27 12:00:06 +08:00
Xubin Ren c1899e2cb4 fix(mcp): decode URI-encoded schema refs 2026-07-27 01:14:41 +08:00