0xbyt4 127a4e512b security: redact secrets from auxiliary and vision LLM responses ... LLM responses from browser snapshot extraction and vision analysis could echo back secrets that appeared on screen or in page content. Input redaction alone is insufficient — the LLM may reproduce secrets it read from screenshots (which cannot be text-redacted). Now redact outputs from: - _extract_relevant_content (auxiliary LLM response) - browser_vision (vision LLM response) - camofox_vision (vision LLM response)		2026-04-01 12:03:56 -07:00
..
browser_providers	feat(browser): multi-provider cloud browser support + Browser Use integration	2026-03-17 00:16:34 -07:00
environments	feat: mount skills directory into all remote backends with live sync (#3890)	2026-03-30 02:45:41 -07:00
neutts_samples	refactor(tts): replace NeuTTS optional skill with built-in provider + setup flow	2026-03-17 02:33:12 -07:00
__init__.py	chore: remove all remaining mini-swe-agent references	2026-03-24 08:19:23 -07:00
ansi_strip.py	fix: strip ANSI at the source — clean terminal output before it reaches the model	2026-03-23 07:43:12 -07:00
approval.py	feat(approvals): make dangerous command approval timeout configurable (#3886)	2026-03-30 00:02:02 -07:00
browser_camofox.py	security: redact secrets from auxiliary and vision LLM responses	2026-04-01 12:03:56 -07:00
browser_camofox_state.py	feat(browser): add persistent Camofox sessions and VNC URL discovery (salvage #4400) (#4419)	2026-04-01 04:18:50 -07:00
browser_tool.py	security: redact secrets from auxiliary and vision LLM responses	2026-04-01 12:03:56 -07:00
checkpoint_manager.py	chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)	2026-03-25 19:47:58 -07:00
clarify_tool.py	chore: remove ~100 unused imports across 55 files (#3016)	2026-03-25 15:02:03 -07:00
code_execution_tool.py	fix(security): redact secrets from execute_code sandbox output	2026-03-31 18:52:11 -07:00
credential_files.py	fix: apply same path traversal checks to config-based credential files	2026-03-31 12:16:37 -07:00
cronjob_tools.py	feat(gateway): add WeCom (Enterprise WeChat) platform support (#3847)	2026-03-29 21:29:13 -07:00
debug_helpers.py	refactor: consolidate debug logging across tools with shared DebugSession class	2026-02-21 03:53:24 -08:00
delegate_tool.py	fix: report subagent status as completed when summary exists (#3829)	2026-03-29 18:21:36 -07:00
env_passthrough.py	feat: env var passthrough for skills and user config (#2807)	2026-03-24 08:19:34 -07:00
file_operations.py	fix(security): protect .docker, .azure, and .config/gh from read and write	2026-03-31 12:47:10 -07:00
file_tools.py	fix(file_tools): refresh staleness timestamp after writes (#4390)	2026-04-01 00:50:08 -07:00
fuzzy_match.py	chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)	2026-03-25 19:47:58 -07:00
homeassistant_tool.py	feat(tools): centralize tool emoji metadata in registry + skin integration	2026-03-15 20:21:21 -07:00
honcho_tools.py	fix(banner): show honcho tools as available when configured (#3810)	2026-03-29 15:55:05 -07:00
image_generation_tool.py	chore: remove ~100 unused imports across 55 files (#3016)	2026-03-25 15:02:03 -07:00
interrupt.py	feat: enhance interrupt handling and container resource configuration	2026-02-23 02:11:33 -08:00
mcp_oauth.py	chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)	2026-03-25 19:47:58 -07:00
mcp_tool.py	feat(mcp): dynamic tool discovery via notifications/tools/list_changed (#3812)	2026-03-29 15:52:54 -07:00
memory_tool.py	fix: cap percentage displays at 100% in stats, gateway, and memory tool (#3599)	2026-03-28 14:55:18 -07:00
mixture_of_agents_tool.py	fix: guard aux LLM calls against None content + reasoning fallback + retry (salvage #3389) (#3449)	2026-03-27 15:28:19 -07:00
neutts_synth.py	fix(tts): document NeuTTS provider and align install guidance (#1903)	2026-03-18 02:55:30 -07:00
openrouter_client.py	refactor: route ad-hoc LLM consumers through centralized provider router	2026-03-11 20:02:36 -07:00
patch_parser.py	fix: handle addition-only hunks in V4A patch parser (#3325)	2026-03-26 19:38:04 -07:00
process_registry.py	chore: remove ~100 unused imports across 55 files (#3016)	2026-03-25 15:02:03 -07:00
registry.py	feat(mcp): dynamic tool discovery via notifications/tools/list_changed (#3812)	2026-03-29 15:52:54 -07:00
rl_training_tool.py	chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)	2026-03-25 19:47:58 -07:00
send_message_tool.py	feat(gateway): add WeCom (Enterprise WeChat) platform support (#3847)	2026-03-29 21:29:13 -07:00
session_search_tool.py	fix: session_search fallback preview on summarization failure (salvage #3413) (#3478)	2026-03-27 21:27:51 -07:00
skill_manager_tool.py	feat(skills): size limits for agent writes + fuzzy matching for patch (#4414)	2026-04-01 04:19:19 -07:00
skills_guard.py	fix: guard aux LLM calls against None content + reasoning fallback + retry (salvage #3389) (#3449)	2026-03-27 15:28:19 -07:00
skills_hub.py	feat(skills): size limits for agent writes + fuzzy matching for patch (#4414)	2026-04-01 04:19:19 -07:00
skills_sync.py	refactor: consolidate get_hermes_home() and parse_reasoning_effort() (#3062)	2026-03-25 15:54:28 -07:00
skills_tool.py	feat(skills): support external skill directories via config (#3678)	2026-03-29 00:33:30 -07:00
terminal_tool.py	fix: make display_hermes_home imports lazy to prevent ImportError during hermes update (#3776)	2026-03-29 15:15:17 -07:00
tirith_security.py	chore: fix 154 f-strings, simplify getattr/URL patterns, remove dead code (#3119)	2026-03-25 19:47:58 -07:00
todo_tool.py	feat(tools): centralize tool emoji metadata in registry + skin integration	2026-03-15 20:21:21 -07:00
transcription_tools.py	add .aac audio file format support to transcription tool (#3865)	2026-03-29 21:27:03 -07:00
tts_tool.py	fix: make display_hermes_home imports lazy to prevent ImportError during hermes update (#3776)	2026-03-29 15:15:17 -07:00
url_safety.py	fix(security): add SSRF protection to vision_tools and web_tools (hardened)	2026-03-23 15:40:42 -07:00
vision_tools.py	fix: background task media delivery + vision download timeout (#3919)	2026-03-30 02:59:39 -07:00
voice_mode.py	fix: allow voice mode in WSL when PulseAudio bridge is configured	2026-03-31 12:13:33 -07:00
web_tools.py	security: block secret exfiltration via browser URLs and auxiliary LLM calls	2026-04-01 12:03:56 -07:00
website_policy.py	refactor: consolidate get_hermes_home() and parse_reasoning_effort() (#3062)	2026-03-25 15:54:28 -07:00