Skip to content

Hephaestus

v0.7.1 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

a2a agent agent-framework agent-os-desktop agent-skills agentic-ai
+13 more
agentic-workflow agentos agents agents-team agentshub ai-agents autonomous-agents llm llm-agents llm-tools mcp multi-agent-systems ochestration

Affected surfaces

auth rbac

Summary

AI summary

Adds A2A Agent Card import/export with redacted private fields.

Full changelog

A2A Agent Card boundary release.\n\n- Adds A2A Agent Card import/export: external cards import as pending alignment proposals, and exports use /.well-known/agent-card.json with private/local fields redacted.\n- Threads caller identity through CLI route --caller and MCP hephaestus_route caller_id/caller so agent-to-agent calls can be gated before route selection.\n- Hardens A2A input handling with structured malformed JSON errors, non-object rejection, and bounded skill-list processing.\n- Makes ao lint and ao diff fail non-zero on invalid graphs or drift.\n- Updates README and CHANGELOG, and keeps the broader ontology roadmap out of the release claim.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hephaestus

Get notified when new releases ship.

Sign up free

About Hephaestus

Open Agent OS for Claude Code, Codex, and Cursor with a meta-agent builder, A2A Hub routing, local ontology, and memory/security gates. Apache-2.0.

All releases →

Related context

Beta — feedback welcome: [email protected]