Teknium ef71f2cad8 fix(approval): widen webhook exclusion to all unattended platforms, deny by default ...

Builds on liuhao1024's webhook exclusion (#37317): instead of falling
through to auto-approve, unattended programmatic platforms (webhook,
msgraph_webhook, api_server) now resolve approval decisions instantly
via approvals.unattended_mode (default deny), mirroring cron_mode.

- _UNATTENDED_APPROVAL_PLATFORMS set + _is_unattended_platform_approval_context()
- approvals.unattended_mode config key (deny | approve), default deny
- Deny branches in _run_approval_gate, check_all_command_guards (with
  tirith parity), and check_execute_code_guard (#87509 sibling site)
- Docs: security.md; config_defaults.py comment + default

Fixes #37284. Also fixes the api_server half of #87509.

2026-08-30 07:04:16 -07:00

..

egress

…

features

refactor(skills): merge-reconciler -> optional-skills as agent-merge-conflict-arbiter (#98519)

2026-08-30 04:49:34 -07:00

messaging

feat(telegram): inline command picker — search every command and skill, no menu cap

2026-08-29 20:57:55 -07:00

secrets

docs: accuracy sweep + coverage for 2 months of shipped features

2026-07-29 08:48:05 -07:00

skills

refactor(skills): shipped-set slim — 15 to optional, github 6-way merge, pdf absorbs OCR, channel-gated teams pipeline (index −26%) (#98539)

2026-08-30 04:53:39 -07:00

_category_.json

…

bot-mode.md

feat(bots): typed failure reasons reach the sending agent on A2A calls (#93091)

2026-08-23 20:07:21 -07:00

checkpoints-and-rollback.md

Inspired by Copilot CLI: /rollback keeps user hand-edits by default

2026-08-16 22:08:47 -07:00

cli.md

feat: /btw now answers side questions with conversation context; /background renamed to /bg

2026-08-29 07:25:17 -07:00

configuration.md

feat(delegation): honor delegation.request_overrides on all three resolution branches with explicit-over-runtime merge precedence

2026-08-29 19:13:23 -07:00

configuring-models.md

fix(gateway): propagate trusted proxy capabilities

2026-08-30 05:16:10 -07:00

desktop.md

feat(macos): one-switch Full Disk Access guidance in doctor and setup

2026-08-26 06:26:07 -07:00

docker.md

fix(dashboard): trust configured reverse proxies (#94126)

2026-08-27 10:35:22 -07:00

git-worktrees.md

Inspired by Copilot CLI: /worktree — create isolated git worktrees mid-session

2026-08-16 22:09:53 -07:00

import-from-other-agents.md

…

managed-scope.md

…

multi-connection-desktop.md

feat(desktop): fleet profile rail — every registered gateway's agents on one strip

2026-08-26 08:39:45 -07:00

multi-profile-gateways.md

docs: add Connecting Desktop to Many Hermes Instances guide

2026-08-15 04:16:31 -07:00

profile-distributions.md

docs: present /export and /import as the second way to share a profile

2026-08-12 12:57:18 -05:00

profiles.md

feat(profiles): rename any agent — the default profile gets a display name (#45624)

2026-08-18 02:27:18 -07:00

security.md

fix(approval): widen webhook exclusion to all unattended platforms, deny by default

2026-08-30 07:04:16 -07:00

sessions.md

fix(cli): slow /handoff transfers no longer misreported as "gateway not running"

2026-08-29 18:08:55 -07:00

tui.md

feat: /btw now answers side questions with conversation context; /background renamed to /bg

2026-08-29 07:25:17 -07:00

which-file-does-what.md

docs: add 'Which File Does What?' - one-page map of SOUL/USER/MEMORY/AGENTS

2026-08-05 21:33:44 +05:30

windows-native.md

fix(windows): stage hermes launchers in the managed binary dir, not the git checkout

2026-08-22 13:38:56 -04:00

windows-wsl-quickstart.md

…