nanobot

mirror of https://github.com/HKUDS/nanobot.git synced 2026-04-08 20:23:41 +00:00

History

Ben Lenarts be6063a142 security: prevent exec tool from leaking process env vars to LLM

The exec tool previously passed the full parent process environment to
child processes, which meant LLM-generated commands could access secrets
stored in env vars (e.g. API keys from EnvironmentFile=).

Switch from subprocess_shell with inherited env to bash login shell
with a minimal environment (HOME, LANG, TERM only). The login shell
sources the user's profile for PATH setup, making the pathAppend
config option a fallback rather than the primary PATH mechanism.

2026-04-06 13:20:53 +08:00

agent

refactor(agent): streamline hook method calls and enhance error logging

2026-04-06 02:51:10 +08:00

channels

test: add regression tests for private DM thread session key derivation

2026-04-06 02:44:21 +08:00

cli

fix(cli): prevent spinner ANSI escape codes from being printed verbatim

2026-04-05 16:50:49 +08:00

command

refactor(memory): simplify Dream config naming and rename gitstore module