v2.0.5

Release v2.0.5: Voice Integration, Skill Marketplace, and Security Hardening

Welcome to the v2.0.5 release of Open-Mythos-2. This milestone represents a major evolution of the platform, introducing native local voice capabilities, an AI-powered skill system, a community marketplace, an official Android app, and critical security hardening.

Here is everything new in this release.

---

## Key Highlights

### 1. Local Voice Mode (Whisper & Speech Synthesis)
You can now speak directly to the terminal oracle.
- **Local Transcription:** Integrated whisper.cpp using the Vulkan backend for local, GPU-accelerated transcription on modern hardware (fully optimized for AMD RDNA/ROCm).
- **Speech Output:** Adds vocal response synthesis ("human talking") with toggleable male/female voice profiles.
- **Push-to-Talk:** Activate using /voice on in chat and trigger recording with the v key.

### 2. Skill System & Community Marketplace
We have added an extensible skill architecture supporting pre-installed, community-submitted, and AI-generated skills:
- **Pre-installed Skills:** Ship with the oracle for instant utilities: summarize, code_explain, translate, brainstorm, and quick_ref (cheatsheets for Git, Python, and Regex).
- **Interactive Commands:** Use /skill list, /skill run <name>, /skill install <name>, and /skill search <query>.
- **AI-Powered Skill Creation:** Use /skill create <description> to have the local AI generate, write, and install a custom private Python skill for you on the fly.
- **Marketplace Index:** Browse or submit community contributions in the centralized marketplace index.

### 3. Kotlin Android Application
A companion Android application code has been added, allowing you to access Open-Mythos-2 features on the go:
- Implements Chat Screens, Model Selection, Prompt Formatting, and Settings.
- Responsive, native Android design with code block rendering, quick actions, and status monitoring.

### 4. Terminal UI Enhancements & "Moon Thinking"
- **Claude Code-style UI:** Modern terminal coloring and UI themes have been added to the CLI.
- **Moon Rotation Thinking:** Adds an interactive moon phases animation to the CLI thinking state. Press m while the oracle is thinking to cycle to Moon Thinking mode!
- **Muted Outputs:** Answers outside of thinking blocks are styled in grey70 to separate them cleanly from bright yellow reasoning steps.

### 5. Apache License 2.0
We have officially changed the project's license to Apache License 2.0, encouraging open collaboration and commercial/enterprise safety.

---

## Security Hardening

Security is a first-class citizen in Open-Mythos-2. This release brings critical fixes for static and AI-driven scans:
- **Safe Import Execution:** Replaced unsafe dynamic python __import__ execution with safe static imports and importlib module loading to block dynamic code injection vectors.
- **Strict Path Traversal Guards:** Added robust validation in patch execution (apply_patches_from_response()) and CLI tools. Using is_relative_to() instead of .startswith() ensures that AI-generated patches or commands (/export, /dump, /markdown) cannot escape the project sandbox.
- **Race Condition Prevention:** Replaced insecure standard temporary file naming (mktemp) with secure NamedTemporaryFile in voice processing to eliminate TOCTOU (Time-of-Check to Time-of-Use) race conditions.
- **Security Auditing:** Integrated a comprehensive local security/network scanner module capable of auditing ports, services, and local APIs.

---

## Infrastructure & Tooling

- **Faster Docker Builds:** Optimized the multi-stage Docker build to source prebuilt llama-cpp-python CPU wheels. Build times are reduced from 15 or more minutes of compile time to less than 2 minutes.
- **Docker Port Forwarding:** Changed internal Docker environment defaults to bind MYTHOS_HOST=0.0.0.0, ensuring local Gradio web servers are accessible outside the container.
- **Gradio Bug Fixes:** Resolved standard import errors and missing modules (import os) that caused immediate startup crashes on the web UI.

---

## Installation & Upgrading

To upgrade your local installation, pull the latest changes and run setup:

```bash
git pull origin main
# Re-run platform setup to update dependencies
bash setup.sh       # Linux
./setup-macos.sh    # macOS
.\setup-windows.ps1 # Windows

Thank you to all community contributors who helped build, scan, and test this release!

---

###  Associated File Links:
* **Release Config:** pyproject.toml | package.json
* **Security Patch Files:** chat_fix.py | voice.py
* **Terminal Display Logic:** terminal_ui.py
* **Docker Setup:** Dockerfile

### Summary of Work:
- Removed all emojis from the draft headers and text contents.
- Substituted em-dashes with alternative punctuation (like colons, semicolons, commas, or standard hyphens).
- Maintained exact technical content and referenced all relevant file links.

Fix security bugs and dockerfile

We fixed issue #4
#11
#3
And are thinking to fix #12 .

v0.3.0.0: Revert "Add mythos downgrade."

Best release ever.