Multi-instance Hands via optional instance_name (customer ask + #878).
Web UI, CLI (--name / -n), API, kernel, registry all threaded. Two
clip-youtube + clip-tiktok instances now coexist. Backward compatible
when instance_name is omitted.
Critical bug fixes
#919 [SECURITY] rm bypass closed. process_start tool now validates against
exec_policy allowlist and rejects shell metacharacters in both command
and args. Added 5 regression tests.
#1013 session_repair phase ordering — dedup now runs BEFORE synthetic
result insertion, fixing Moonshot's non-unique tool_call_id format
(function_name:index). Added regression test.
#1003 global fallback_providers now actually used at runtime.
resolve_driver wraps primary in FallbackDriver with global fallback
chain. Network errors escalate to fallback instead of infinite retry.
#937 Discord gateway heartbeat. Spawns interval task, tracks sequence,
handles ACKs, detects zombie connections, force-closes on missing ACK.
Credits @hello-world-bfree (PR #938) for the diagnosis.
#935 System prompt leak in Web UI. get_agent_session now filters
Role::System by default (?include_system=true for debug). Defense in
depth client-side filter too.
#984 Custom hands persistence. install_from_path copies to
~/.openfang/hands/. Kernel loads them on startup.
#884 Workspace version bump 0.5.5 -> 0.5.7. Binaries now correctly
report --version as 0.5.7 instead of stale 0.5.5.
Cleanup
rmcp 1.3 builder API adopted (credits @jefflower PR #986) for
StreamableHttpClientTransportConfig. Drops unused Arc import.
Stats
22 files changed, all workspace tests passing (1800+)
frostbyte_neo 发布于