Ben Barclay 9884b4faad fix(cron/chronos): cache PyJWKClient across fires to stop JWKS fetch storm (#64641) ... The inbound cron-fire verifier constructed a fresh PyJWKClient on every fire, discarding the client's key cache and forcing a synchronous JWKS HTTP GET to the portal on each fire. Under a burst of concurrent fires (a hosted instance with several cron jobs firing in the same window) this fanned out into N simultaneous JWKS fetches that the portal rate-limited (HTTP 403 -> verification fails -> agent 401), or that blocked the event loop long enough that the fire webhook could not return its 202 before the relay's 30s timeout (observed in prod as relay 504s concentrated on high-job-count instances). Cache one PyJWKClient per JWKS URL at module scope (double-checked lock) so the signing keys are reused across fires; NAS keys rotate rarely, so the steady state is zero JWKS fetches per fire. Regression test proves 5 fires -> 1 client construction (was 5).		2026-07-15 09:27:35 +10:00
..
acp	fix(approval): scope smart deny owner overrides to one operation	2026-07-13 04:31:55 -07:00
acp_adapter
agent	feat(auxiliary): per-task reasoning_effort for auxiliary models (#64597)	2026-07-14 14:07:43 -07:00
ci	fix(ci): classify should default to no MCP	2026-06-23 10:32:27 -07:00
cli	test(cli): cover noted multimodal persistence handoff	2026-07-14 03:32:46 +05:30
computer_use	fix(computer-use): sanitize env on the 4 remaining cua-driver spawn sites (#59165)	2026-07-05 14:48:20 -07:00
cron	feat(config): support per-model reasoning_effort overrides	2026-07-14 11:46:40 -07:00
dashboard	fix(dashboard): use loopback host for in-container WebSocket client (#58993) [salvage #59682] (#60092)	2026-07-07 18:33:28 +10:00
docker	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
e2e	test(e2e): stub reset-notice session info to deflake test_new_resets_session (#60175)	2026-07-07 04:28:12 -07:00
fakes	fix: streaming tool call parsing, error handling, and fake HA state mutation	2026-03-14 14:27:20 +03:00
fixtures/plugins/example-dashboard/dashboard
gateway	fix(slack): gate feedback buttons behind rich_blocks as documented	2026-07-14 13:58:36 -07:00
hermes_cli	fix(slack): complete agent view workspace routing	2026-07-14 13:58:36 -07:00
hermes_state	feat(sessions): full prune-filter set + --redact on sessions export	2026-07-07 12:36:41 -07:00
honcho_plugin	feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)	2026-06-22 19:16:47 -05:00
integration	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
manual	docs(cron): scope in_channel to channels; document DM continuation knob	2026-07-01 03:16:13 -07:00
openviking_plugin	feat(openviking): add full recall prefetch policy	2026-06-24 18:53:49 +05:30
plugins	fix(cron/chronos): cache PyJWKClient across fires to stop JWKS fetch storm (#64641)	2026-07-15 09:27:35 +10:00
providers	feat(reasoning): add max and ultra effort levels (#62650)	2026-07-12 00:26:49 -07:00
run_agent	perf(agent): segment mixed tool batches to recover lost concurrency (#64460)	2026-07-14 11:53:05 -07:00
scripts	revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)	2026-06-27 15:59:00 -07:00
secret_sources	feat(secrets): adapt 1Password onto the SecretSource interface	2026-07-06 04:58:07 -07:00
skills	blocked-tail pass: blind opt-out default, email fallback, peopleconnect delete-wipes-suppression	2026-07-03 15:21:04 -04:00
stress	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
tools	fix(mcp): use real wire name in ResourceLink marker + surface resource text in isError path	2026-07-14 13:59:38 -07:00
tui_gateway	feat(config): support per-model reasoning_effort overrides	2026-07-14 11:46:40 -07:00
website	feat(skills): fix browse cap, add source links + copy buttons + category cleanup (#37143)	2026-06-01 19:52:28 -07:00
__init__.py	A bit of restructuring for simplicity and organization	2025-10-01 23:29:25 +00:00
conftest.py	test: deflake CI and dev-machine flaky tests in bulk (11 tests, 10 files) (#61816)	2026-07-09 20:03:11 -07:00
run_interrupt_test.py	fix: thread safety for concurrent subagent delegation (#1672)	2026-03-17 02:53:33 -07:00
test_account_usage.py	feat(account-usage): add per-provider account limits module	2026-04-21 01:56:35 -07:00
test_assistant_ui_tap_compat.py	test(deps): guard @assistant-ui cluster on one tap version	2026-06-15 11:55:02 -04:00
test_atomic_replace_symlinks.py	fix(config): preserve owner on atomic writes (#56644)	2026-07-03 14:27:34 +10:00
test_background_review_list_shapes.py	fix(background-review): guard summarize against list-shaped tool responses (#59437)	2026-07-06 03:28:30 -07:00
test_background_review_session_isolation.py	test(review): add integration guards for the two isolation wirings (review)	2026-07-01 16:21:39 +05:30
test_base_url_hostname.py	security(runtime_provider): close OLLAMA_API_KEY substring-leak sweep miss (#13522)	2026-04-21 06:06:16 -07:00
test_batch_runner_checkpoint.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_bitwarden_secrets.py	feat(secrets): pluggable SecretSource interface + multi-source orchestrator	2026-07-06 04:58:07 -07:00
test_cli_file_drop.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_cli_manual_compress.py	fix(tests): catch up six stale tests after compression/aux/kanban changes (#28465)	2026-05-18 21:43:59 -07:00
test_cli_skin_integration.py	fix(ci): stabilize main test suite regressions (#17660)	2026-04-29 23:18:55 -07:00
test_code_skew.py	fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError	2026-06-24 04:16:54 +05:30
test_copilot_initiator.py	fix(copilot): set x-initiator per turn so user prompts bill as premium requests (salvage #4097) (#58544)	2026-07-05 00:44:15 -07:00
test_ctx_halving_fix.py	chore: restore test_ctx_halving_fix.py to main	2026-07-14 03:58:54 +05:30
test_dashboard_sidecar_close_on_disconnect.py	fix(dashboard): hide sidecar sessions from history (#49269)	2026-06-19 18:06:38 -04:00
test_delegate_cascade_49148.py	fix(agent): stop delegate cascade from deleting the parent session	2026-06-21 12:09:16 -07:00
test_desktop_electron_pin.py	feat(desktop): ts-ify everything	2026-07-08 16:24:16 -07:00
test_desktop_mac_entitlements.py
test_dispatch_session_id.py	fix(dispatch): forward session_id into registry.dispatch (#28479)	2026-06-14 00:27:59 -04:00
test_empty_model_fallback.py	test(models): guard Nous silent default against expensive-flagship escalation	2026-06-05 02:54:34 -07:00
test_empty_session_hygiene.py	fix: in-memory transcript blocks empty-session prune	2026-06-10 17:37:34 -07:00
test_env_loader_op_bootstrap.py	fix(secrets): make 1Password bootstrap token reliable outside systemd	2026-07-06 04:58:07 -07:00
test_env_loader_secret_sources.py	feat(secrets): adapt 1Password onto the SecretSource interface	2026-07-06 04:58:07 -07:00
test_evidence_store.py
test_fast_safe_load.py	perf(startup): parse config + plugin manifests with libyaml CSafeLoader (#54486)	2026-06-28 15:38:39 -07:00
test_gateway_streaming_nested_config.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_get_tool_definitions_cache_isolation.py	fix(gateway): close residual memory-leak sites under heavy scheduled workload	2026-06-08 06:32:42 -07:00
test_hermes_bootstrap.py	revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)	2026-06-27 15:59:00 -07:00
test_hermes_constants.py	refactor(reasoning): unify per-model reasoning resolution behind a single chokepoint	2026-07-14 11:46:40 -07:00
test_hermes_home_profile_warning.py
test_hermes_logging.py	fix(logging): drive rotating file handlers through an async QueueListener	2026-07-05 11:44:53 +05:30
test_hermes_state.py	test(gateway): cover ws_orphan_reap session recovery (#63207)	2026-07-14 16:58:47 +05:30
test_hermes_state_compression_locks.py	fix(compression): prevent session-id fork from concurrent compressions (#34351)	2026-05-28 21:40:39 -07:00
test_hermes_state_wal_fallback.py	fix(kanban): skip redundant WAL pragma on already-WAL connections	2026-05-27 14:31:55 -07:00
test_honcho_client_concurrency.py	fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)	2026-06-08 09:35:22 -07:00
test_honcho_client_config.py
test_honcho_session_context.py	fix(honcho): align user context peer perspective	2026-05-27 10:49:33 -07:00
test_honcho_startup_fail_open.py
test_install_diverged_update.py	test(installer): cover diverged managed-clone recovery in install scripts	2026-06-30 20:11:01 +07:00
test_install_lockfile_churn.py	fix(install): discard managed lockfile churn before stashing	2026-06-25 23:49:11 -07:00
test_install_no_initial_commit.py	fix(install): move broken checkout aside instead of deleting it	2026-06-08 02:18:21 -07:00
test_install_ps1_native_stderr_eap.py	fix(install): fail fast when uv venv genuinely fails under relaxed EAP	2026-06-18 22:11:35 +05:30
test_install_ps1_node_path_for_npm.py	test(installer): guard Ensure-NodeExeOnPath wiring in install.ps1	2026-07-07 21:17:34 +07:00
test_install_ps1_python_fallback_venv.py	test(installer): lock Python-fallback propagation into the venv stage (#50769)	2026-06-23 21:33:08 -07:00
test_install_ps1_uv_powershell_host.py	test(install): lock uv installer to a resolved PowerShell host	2026-06-18 16:26:34 +07:00
test_install_ps1_web_server_syntax_probe.py	fix(install): guard Windows desktop installs against broken web_server	2026-07-05 19:35:30 -07:00
test_install_sh_browser_install.py	test(install): track run_with_timeout extraction after #39219 refactor (#54185)	2026-06-28 03:58:01 -07:00
test_install_sh_install_method_stamp.py	fix(update): scope install-method stamp to the code tree, not $HERMES_HOME (#48188)	2026-06-18 14:14:41 +10:00
test_install_sh_node_global_prefix.py	fix(hermes): heal broken managed Node tree instead of PATH fallback	2026-06-26 20:10:20 +05:30
test_install_sh_pythonpath_sanitization.py	fix: harden install.sh against inherited Python env leakage	2026-05-06 04:02:02 -07:00
test_install_sh_root_fhs_uv_python_path.py
test_install_sh_setup_wizard_tty_probe.py
test_install_sh_symlink_stomp.py
test_install_sh_termux_network_prereqs.py	fix: strengthen termux install network prerequisites	2026-05-07 13:04:08 -07:00
test_install_unmerged_index.py	fix(install): discard managed lockfile churn before stashing	2026-06-25 23:49:11 -07:00
test_ipv4_preference.py
test_lazy_session_regressions.py	fix(gateway): surface retry hint instead of silently dropping turn after /stop (#31884)	2026-06-24 23:51:31 +05:30
test_lint_config.py
test_live_system_guard_self_test.py
test_mcp_serve.py	refactor: consolidate gateway session metadata into state.db (#58899)	2026-07-05 14:01:03 -07:00
test_mini_swe_runner.py	fix(kimi): omit temperature entirely for Kimi/Moonshot models (#13157)	2026-04-20 12:23:05 -07:00
test_minimax_model_validation.py
test_minimax_oauth.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_minisweagent_path.py	chore: remove all remaining mini-swe-agent references	2026-03-24 08:19:23 -07:00
test_model_forces_max_completion_tokens.py	fix(params): send max_completion_tokens for newer OpenAI families on custom endpoints	2026-06-09 23:22:10 -07:00
test_model_picker_scroll.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_model_tools.py	fix(toolsets): preserve core tools when a posture toolset is in disabled_toolsets (#57315)	2026-07-05 14:51:49 -07:00
test_model_tools_async_bridge.py	fix(web): run URL SSRF checks off the event loop in async paths	2026-06-04 18:04:47 -07:00
test_ollama_num_ctx.py	test(vision): cover Ollama /api/show vision capability routing (#54511)	2026-06-28 22:52:59 -07:00
test_onepassword_secrets.py	feat(secrets): add 1Password (op://) secret source	2026-07-06 04:58:07 -07:00
test_output_cap_parsing.py	fix(context): parse vLLM's token-based output-cap error format	2026-07-01 03:17:48 -07:00
test_package_json_lazy_deps.py
test_packaging_metadata.py	security(deps): enforce aiohttp CVE floor on all lazy messaging paths + coverage guard	2026-07-01 02:51:45 -07:00
test_plugin_skills.py
test_plugin_utils.py	fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)	2026-06-08 09:35:22 -07:00
test_process_loop_event_loop_warning.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_profile_isolation_runtime.py	test(profile): two-profile regression suite + preserve skills_hub monkeypatch seam	2026-06-30 15:30:06 -07:00
test_project_metadata.py	fix(nemo-relay): align dynamic plugin configuration	2026-07-13 17:01:08 -06:00
test_pty_keepalive_ws.py	feat(chat): reattach /api/pty sessions via ?attach= token	2026-07-07 15:15:37 -07:00
test_pty_session.py	feat(pty): periodic reaper wired into dashboard lifespan	2026-07-07 15:15:37 -07:00
test_retry_utils.py	refactor(retry): single-source Z.AI overload short-attempts + drop change-detector assert	2026-07-07 11:57:01 +05:30
test_run_tests_parallel.py	fix(tests): bare pytest flags pass through run_tests.sh without a '--' separator (#54008)	2026-06-27 22:43:26 -07:00
test_sanitize_tool_error.py	security: sanitize tool error strings before injecting into model context (#26823)	2026-05-16 00:57:39 -07:00
test_session_workspace_binding.py	feat(sessions): workspace_key grouping helper + tests	2026-07-12 05:07:52 -04:00
test_setup_temporary_outputs.py	refactor(ci): rewrite docker tests to check built container	2026-06-26 19:15:18 -07:00
test_slash_worker_watchdog.py
test_sql_injection.py	fix(security): eliminate SQL string formatting in execute() calls	2026-03-19 15:16:35 +01:00
test_stale_utils_module_import.py	fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError	2026-06-24 04:16:54 +05:30
test_state_db_malformed_repair.py	fix(state): detect and repair FTS write corruption that silently drops gateway history (#52798)	2026-06-25 21:18:41 -07:00
test_subprocess_home_isolation.py	fix: make profile subprocess HOME policy explicit	2026-06-14 03:20:21 -07:00
test_telegram_polling_progress_ptb.py	chore(release): map arnispiekus in AUTHOR_MAP	2026-07-14 17:46:21 +05:30
test_termux_all_extra_compat.py	fix: add termux-all install profile and safe fallbacks	2026-05-07 13:04:08 -07:00
test_timezone.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_toolset_distributions.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_toolsets.py	feat(mcp): adopt mcp__server__tool naming convention	2026-07-05 13:40:21 -07:00
test_trajectory_compressor.py	fix(research): keep tool_call/tool_response pairs intact when compressing trajectories	2026-06-07 05:01:27 -07:00
test_trajectory_compressor_async.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
test_transform_llm_output_hook.py	test+docs: cover transform_llm_output hook + release author map	2026-05-07 05:46:05 -07:00
test_transform_tool_result_hook.py	test: stub has_hook in transform_tool_result hook tests	2026-06-03 06:36:46 -07:00
test_tui_gateway_loop_noise.py	fix(tui_gateway): suppress WS peer-hangup teardown error flood (#50005) (#54126)	2026-06-28 02:35:01 -07:00
test_tui_gateway_queue_on_busy.py	fix(tui_gateway): queue mid-turn prompts instead of dropping them on a busy retry	2026-06-25 12:29:49 -05:00
test_tui_gateway_server.py	test: update stale _load_reasoning_config mocks for new model parameter	2026-07-14 11:46:40 -07:00
test_tui_gateway_ws.py	fix(tui): start MCP discovery for websocket sessions	2026-06-28 04:14:12 -07:00
test_tui_mcp_late_refresh.py	fix(tui): refresh tool snapshot when MCP discovery lands after agent build (#48403)	2026-06-18 05:41:23 -07:00
test_utils_truthy_values.py	Gate tool-gateway behind an env var, so it's not in users' faces until we're ready. Even if users enable it, it'll be blocked server-side for now, until we unlock for non-admin users on tool-gateway.	2026-03-30 13:28:10 +09:00
test_web_server.py	fix(dashboard): disable ws keepalive ping on loopback to survive event-loop stalls	2026-07-03 03:33:22 +05:30
test_wheel_locales_e2e.py
test_windows_subprocess_no_window_flags.py	test: make windows no-window-flag assertions immune to update-check daemon	2026-06-30 01:35:55 -05:00
test_yaml_indent_consistency_31999.py	fix(utils): unify YAML list indent across all config writers (#31999)	2026-06-25 23:27:44 +05:30
test_yuanbao_integration.py
test_yuanbao_markdown.py
test_yuanbao_pipeline.py	perf(yuanbao): bounded-concurrency inbound media resolve	2026-07-08 08:05:45 -07:00
test_yuanbao_proto.py
test_yuanbao_reconnect_set_active.py	fix(yuanbao): restore active singleton after WS reconnect	2026-07-05 00:41:34 -07:00
test_yuanbao_shutdown.py