shira-hermes

Archived

This repository has been archived on 2026-07-19. You can view files and clone it. You cannot open issues or pull requests or push a commit.

T

chaim e947bca655 fix: code audit — security, correctness, and robustness fixes

Security:
- Path traversal: validate user_id, case_id, skill_name against safe regex
- Input sanitization in memory.py and skills.py file path construction

Correctness:
- ISR timezone: replace hardcoded UTC+3 with ZoneInfo("Asia/Jerusalem") for DST
- save_rule: use EspoCrmApiError.status_code instead of fragile string matching
- Background tasks: store references to prevent GC before completion
- Lock race: use dict.setdefault() for atomic lock creation
- Version: health.py now matches main.py (0.2.0)
- Skill names: normalized to lowercase for dedup consistency

Build:
- Dockerfile: install from pyproject.toml instead of hardcoded pip list
- Remove unused mcp>=1.0.0 dependency from pyproject.toml

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 20:18:01 +00:00

api

fix: code audit — security, correctness, and robustness fixes

2026-04-13 20:18:01 +00:00

config

feat: add skills, memory, delegation and self-learning (Phase 3)

2026-04-13 19:33:57 +00:00

mcp_server

fix: code audit — security, correctness, and robustness fixes

2026-04-13 20:18:01 +00:00

.env.example

feat: add skills, memory, delegation and self-learning (Phase 3)