sprmn24 7fee1f61eb fix(memory): eliminate TOCTOU race in Windows file lock creation ... On Windows (msvcrt path), _file_lock() first checked if the lock file existed and wrote it with write_text(), then opened it with open('r+'). Between these two calls, another process could delete the file causing open('r+') to raise FileNotFoundError — uncaught, leaving memory writes to proceed without holding the lock, risking data corruption. Replace the three-line sequence with a single open('a+', ...) call which atomically creates the file if missing or opens it if it exists, closing the TOCTOU window entirely. The existing fd.seek(0) before msvcrt.locking() is preserved and sufficient for correct lock byte positioning. Root cause: TOCTOU between lock_path.write_text() and open('r+') Impact: concurrent memory writes on Windows could corrupt MEMORY.md		2026-05-15 15:28:18 -07:00
..
browser_providers	fix(tools): wrap browser provider network calls with error handling	2026-05-15 01:53:06 -07:00
computer_use	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
environments	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
neutts_samples	refactor(tts): replace NeuTTS optional skill with built-in provider + setup flow	2026-03-17 02:33:12 -07:00
__init__.py	Merge branch 'main' into rewbs/tool-use-charge-to-subscription	2026-03-31 08:48:54 +09:00
ansi_strip.py	fix: strip ANSI at the source — clean terminal output before it reaches the model	2026-03-23 07:43:12 -07:00
approval.py	fix(env-flags): widen truthy-only session env checks to sibling sites	2026-05-15 12:35:07 -07:00
binary_extensions.py	fix(tools): address PR review — remove _extract_raw_output, BudgetConfig everywhere, read_file hardening	2026-04-08 02:24:32 -07:00
browser_camofox.py	feat(browser): support externally managed Camofox sessions	2026-05-12 15:14:49 -07:00
browser_camofox_state.py	feat(browser): add persistent Camofox sessions and VNC URL discovery (salvage #4400) (#4419)	2026-04-01 04:18:50 -07:00
browser_cdp_tool.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
browser_dialog_tool.py	feat(browser): CDP supervisor — dialog detection + response + cross-origin iframe eval (#14540)	2026-04-23 22:23:37 -07:00
browser_supervisor.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
browser_tool.py	feat: wire ensure_dependency into TUI and browser tool call sites	2026-05-15 14:45:43 -07:00
budget_config.py	chore: remove Atropos RL environments and tinker-atropos integration (#26106)	2026-05-15 10:36:38 +05:30
checkpoint_manager.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
clarify_gateway.py	feat(gateway): wire clarify tool with inline keyboard buttons on Telegram (#24199)	2026-05-12 16:33:33 -07:00
clarify_tool.py	refactor: add tool_error/tool_result helpers + read_raw_config, migrate 129 callsites	2026-04-07 13:36:38 -07:00
code_execution_tool.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
computer_use_tool.py	feat(computer-use): cua-driver backend, universal any-model schema	2026-05-08 11:07:38 -07:00
credential_files.py	fix(gateway): translate inbound document host paths to container paths for Docker backend	2026-05-07 05:02:26 -07:00
cronjob_tools.py	fix(env-flags): widen truthy-only session env checks to sibling sites	2026-05-15 12:35:07 -07:00
debug_helpers.py	refactor: codebase-wide lint cleanup — unused imports, dead code, and inefficient patterns (#5821)	2026-04-07 10:25:31 -07:00
delegate_tool.py	fix(delegate): guard heartbeat join against unstarted thread	2026-05-15 15:09:55 -07:00
discord_tool.py	feat: add Discord message deletion action	2026-05-07 05:11:09 -07:00
env_passthrough.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
feishu_doc_tool.py	perf(cli): cut ~19s from 'hermes' cold start (skills cache + lazy Feishu + no Nous HTTP) (#22138)	2026-05-08 16:39:32 -07:00
feishu_drive_tool.py	perf(cli): cut ~19s from 'hermes' cold start (skills cache + lazy Feishu + no Nous HTTP) (#22138)	2026-05-08 16:39:32 -07:00
file_operations.py	fix(lsp): shift baseline diagnostics into post-edit coordinates (#25978)	2026-05-14 15:56:07 -07:00
file_state.py	feat(delegate): cross-agent file state coordination for concurrent subagents (#13718)	2026-04-21 16:41:26 -07:00
file_tools.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
fuzzy_match.py	chore: ruff auto-fixes — collapsible-else-if, if-stmt-min-max, dict.fromkeys (#23926)	2026-05-11 11:03:29 -07:00
homeassistant_tool.py	fix: clean up description escaping, add string-data tests	2026-04-13 04:45:07 -07:00
image_generation_tool.py	feat(image-gen): actionable setup message when no FAL backend is reachable (#26222)	2026-05-15 01:33:13 -07:00
interrupt.py	fix(interrupt): propagate to concurrent-tool workers + opt-in debug trace (#11907)	2026-04-17 20:39:25 -07:00
kanban_tools.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
lazy_deps.py	fix(deps): pin brotlicffi so aiohttp can decode Discord's Brotli attachments	2026-05-14 22:36:46 -07:00
managed_tool_gateway.py	fix(tools): add debug logging for token refresh and tighten domain check	2026-04-02 12:40:03 +11:00
mcp_oauth.py	fix(mcp-oauth): persist OAuth server metadata across process restarts (#21226)	2026-05-07 05:35:33 -07:00
mcp_oauth_manager.py	fix(mcp-oauth): persist OAuth server metadata across process restarts (#21226)	2026-05-07 05:35:33 -07:00
mcp_tool.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
memory_tool.py	fix(memory): eliminate TOCTOU race in Windows file lock creation	2026-05-15 15:28:18 -07:00
microsoft_graph_auth.py	feat(msgraph): add auth and client foundation	2026-05-08 09:27:26 -07:00
microsoft_graph_client.py	fix(msgraph): stream download_to_file body instead of buffering	2026-05-08 09:27:26 -07:00
mixture_of_agents_tool.py	chore: ruff auto-fix C401, C416, C408, PLR1722 (#23940)	2026-05-11 11:20:58 -07:00
neutts_synth.py	fix(tts): document NeuTTS provider and align install guidance (#1903)	2026-03-18 02:55:30 -07:00
openrouter_client.py	refactor: route ad-hoc LLM consumers through centralized provider router	2026-03-11 20:02:36 -07:00
osv_check.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
patch_parser.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
path_security.py	refactor: extract shared helpers to deduplicate repeated code patterns (#7917)	2026-04-11 13:59:52 -07:00
process_registry.py	fix(tui): autonomous background process completion notifications (#26071) (#26327)	2026-05-15 19:31:00 +05:30
registry.py	feat(delegate): show user's actual concurrency / spawn-depth limits in tool description (#22694)	2026-05-09 11:07:53 -07:00
schema_sanitizer.py	fix: strip Codex-hostile top-level schema combinators	2026-05-07 07:03:21 -07:00
send_message_tool.py	fix(tools): forward thread_id via metadata in _send_via_adapter live path	2026-05-12 18:48:44 -07:00
session_search_tool.py	fix: make session search initialize session db	2026-05-09 14:36:58 -07:00
skill_manager_tool.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
skill_provenance.py	fix(curator): only mark agent-created for background-review sediment (#19621)	2026-05-04 02:42:16 -07:00
skill_usage.py	feat(cross-platform): psutil for PID/process management + Windows footgun checker	2026-05-08 14:27:40 -07:00
skills_guard.py	feat(skills-hub): add huggingface/skills as trusted default tap (#2549)	2026-05-15 01:25:33 -07:00
skills_hub.py	feat(skills-hub): add huggingface/skills as trusted default tap (#2549)	2026-05-15 01:25:33 -07:00
skills_sync.py	chore: ruff auto-fix C401, C416, C408, PLR1722 (#23940)	2026-05-11 11:20:58 -07:00
skills_tool.py	fix(env-flags): widen truthy-only session env checks to sibling sites	2026-05-15 12:35:07 -07:00
slash_confirm.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
terminal_tool.py	fix(env-flags): widen truthy-only session env checks to sibling sites	2026-05-15 12:35:07 -07:00
tirith_security.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
todo_tool.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00
tool_backend_helpers.py	fix(cli): coerce use_gateway config flags in tool routing	2026-04-26 19:02:55 -07:00
tool_output_limits.py	feat(skills): add design-md skill for Google's DESIGN.md spec (#14876)	2026-04-23 21:51:19 -07:00
tool_result_storage.py	fix(tool-result-storage): persist via stdin to bypass 128 KB exec-arg cap (#22913)	2026-05-09 18:44:58 -07:00
transcription_tools.py	fix(xai-http): preserve ~/.hermes/.env fallback and XAI_STT_BASE_URL precedence	2026-05-15 12:11:32 -07:00
tts_tool.py	feat(xai-oauth): add xAI Grok OAuth (SuperGrok Subscription) provider	2026-05-15 12:11:32 -07:00
url_safety.py	fix(url-safety): allow only http and https schemes	2026-05-15 01:52:48 -07:00
video_generation_tool.py	feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)	2026-05-13 16:39:41 -07:00
vision_tools.py	chore: ruff auto-fix C401, C416, C408, PLR1722 (#23940)	2026-05-11 11:20:58 -07:00
voice_mode.py	fix(voice_mode): detect audio in WSL when sd.query_devices() returns empty list but PULSE_SERVER is set	2026-05-12 18:43:50 -07:00
web_tools.py	fix(tools): add return_exceptions to asyncio.gather in web_tools	2026-05-15 01:50:41 -07:00
website_policy.py	refactor: codebase-wide lint cleanup — unused imports, dead code, and inefficient patterns (#5821)	2026-04-07 10:25:31 -07:00
xai_http.py	fix(xai-http): preserve ~/.hermes/.env fallback and XAI_STT_BASE_URL precedence	2026-05-15 12:11:32 -07:00
yuanbao_tools.py	chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)	2026-05-11 11:13:25 -07:00