unsupportedpastels ce4de3cdc2 fix(tts): a command provider never receives the caller's output path ...

The text_to_speech tool lets the model choose output_path, and the command
provider substituted it into the operator's shell template. Quoting covers
the template's own quote context, but a template that re-parses its
placeholders (sh -c '... {output_path}', or backticks) hands the value to a
second shell parse, where $(...) and backticks in the path ran.

The command now writes a Hermes-named file in its temp directory, which is
moved to the requested path afterwards, so no caller-chosen text reaches the
shell in any template shape.

Reported-by: directorboint-arch

ce4de3cdc2 · 2026-11-15 06:58:39 -05:00

History

..

egress

…

features

fix(tts): a command provider never receives the caller's output path

2026-11-15 06:58:39 -05:00

messaging

fix(gateway): adapt salvaged inbound-auth fixes to current main

2026-11-14 17:16:33 +01:00

secrets

fix(tools): keep the vault token for the launch home's own credentialed children

2026-11-13 14:04:56 +01:00

skills

Merge pull request #155471 from NousResearch/sec3/143365-comfyui-token-env

2026-11-14 22:31:23 +01:00

_category_.json

…

bot-mode.md

docs(bot-mode): note that a bare peer name shadowing a local bot is refused

2026-11-14 15:40:13 +01:00

checkpoints-and-rollback.md

…

cli.md

…

configuration.md

feat(security): opt-in security.redact_phone_numbers keeps E.164 numbers in chat replies

2026-11-14 05:01:11 -08:00

configuring-models.md

…

desktop.md

…

docker.md

fix(state): a new store on a network filesystem starts in DELETE

2026-11-13 15:18:38 -08:00

git-worktrees.md

…

import-from-other-agents.md

…

local-models.md

…

managed-scope.md

docs(managed-scope): add the Home Manager launch routes for HERMES_MANAGED_DIR

2026-11-13 16:51:55 +01:00

multi-connection-desktop.md

…

multi-profile-gateways.md

docs(webhook): a rejected signature now gets 404, not 401

2026-11-14 17:16:35 +01:00

profile-distributions.md

docs(cron): pinned and local-time jobs in a shipped profile

2026-11-13 16:21:19 -08:00

profiles.md

fix(profiles): inherit an unpinned model without probing its catalog

2026-11-13 12:58:14 +05:30

remote-config.md

…

security.md

docs(security): list the google-workspace credential files as protected

2026-11-14 21:08:34 +01:00

session-storage-recovery.md

…

sessions.md

fix(session_search): keep cross-profile reads for the operator's own sessions

2026-11-13 19:14:58 +01:00

switching-to-source.md

…

tui.md

…

which-file-does-what.md

…

windows-native.md

docs(gateway): describe the XML-principal task registration

2026-11-14 12:51:57 +01:00

windows-wsl-quickstart.md

…