Teknium da26ff986b fix(approval): detect recursive rm when flags follow operands ... Port from openai/codex#33464: GNU rm permutes options, so `rm build/ -rf`, `rm build/ -r -f`, and `rm build/ --recursive --force` are equivalent to the flags-first spellings — but every existing rm pattern required the flag group BEFORE the path, so these spellings ran with no approval prompt at all (proven live on main). The hardline floor was NOT affected: protected paths (/, system dirs, $HOME) match regardless of flag position because the hardline path matcher does not require flags. The gap was the approval-prompt layer for arbitrary paths. New DANGEROUS_PATTERNS entry with a tempered operand run: cannot cross command separators (; | & newline), quotes, or a bare -- end-of-options separator (after --, -rf is a literal filename). Flag token must be whitespace-anchored so the r inside long options like --registry does not count. 9 positive + 7 negative shapes in tests; approval cluster (868 tests) green.		2026-07-26 20:58:52 -07:00
..
acp	fix(acp): pin the session cwd for slash-command handlers too	2026-07-25 18:06:32 -07:00
acp_adapter	feat(surfaces): route busy-input corrections through active-turn redirect	2026-07-22 12:10:58 -05:00
agent	fix(errors): classify throttle messages before token-overflow patterns; add new overflow shapes	2026-07-26 20:58:48 -07:00
ci	fix(ci): report E2E evidence upload failures (#69901)	2026-07-23 05:45:17 +00:00
cli	feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator	2026-07-26 18:10:34 -07:00
computer_use	fix(computer_use): stop the cua-driver child on exit	2026-07-26 03:38:23 -05:00
conformance	feat(conformance): vector generator — native renderers as executable spec (#71666)	2026-07-26 16:52:25 +10:00
cron	fix(delegation): route delegated-child API calls inline to avoid nested-pool wedge (#60203)	2026-07-26 20:37:51 -07:00
dashboard	fix(dashboard): use loopback host for in-container WebSocket client (#58993) [salvage #59682] (#60092)	2026-07-07 18:33:28 +10:00
docker	fix(docker): ship a WAL-reset-safe SQLite runtime	2026-07-26 17:20:31 -07:00
e2e	fix(slack): handle leading-space text commands	2026-07-22 20:55:51 -07:00
fakes
fixtures/plugins/example-dashboard/dashboard
gateway	fix(api): redact subagent stream fields + forward child_session_id	2026-07-26 20:37:04 -07:00
hermes_cli	fix(sessions): preserve recently active sessions during pruning	2026-07-26 19:30:21 -07:00
hermes_state	fix(state): heal alternation at the ACP / CLI-resume / TUI-resume restore sites too	2026-07-17 06:53:38 -07:00
honcho_plugin	fix(honcho): default device-code poll interval to 5s when AS omits it	2026-07-24 07:53:12 -07:00
integration	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
manual	docs(cron): scope in_channel to channels; document DM continuation knob	2026-07-01 03:16:13 -07:00
openviking_plugin	fix(openviking): cool down failed refreshes and publish conn identity atomically	2026-07-24 13:00:53 +05:30
plugins	fix(deepseek): drop retired models from picker and provider defaults	2026-07-26 16:28:41 -07:00
providers	fix(openrouter): give auxiliary calls the sticky routing key	2026-07-25 22:46:35 -07:00
run_agent	test(delegate): model socket-abort interrupt for the inline child API path	2026-07-26 20:37:51 -07:00
scripts	fix(scripts): accept legacy consecutive-hyphen GitHub logins in add_contributor	2026-07-24 22:40:15 -07:00
secret_sources	feat(secrets): orchestrator-level preserve_existing + profile aliasing (#69058)	2026-07-22 03:20:45 -07:00
skills	fix(skills): read OOXML parts as bytes and form JSON as UTF-8 in office skill scripts	2026-07-24 17:10:39 -07:00
state	fix(compression): recover rotated session lineage	2026-07-24 16:00:34 -07:00
stress	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
tools	fix(approval): detect recursive rm when flags follow operands	2026-07-26 20:58:52 -07:00
tui_gateway	fix(kanban): snap notify-sub cursor to current MAX(task_events.id) at creation	2026-07-26 16:14:15 -07:00
website
__init__.py
conftest.py	fix(kanban): preserve telegram dm topic metadata	2026-07-26 16:01:32 -07:00
run_interrupt_test.py
test_account_usage.py
test_atomic_replace_symlinks.py	fix(config): preserve owner on atomic writes (#56644)	2026-07-03 14:27:34 +10:00
test_background_review_list_shapes.py	fix(background-review): guard summarize against list-shaped tool responses (#59437)	2026-07-06 03:28:30 -07:00
test_background_review_session_isolation.py	test(review): add integration guards for the two isolation wirings (review)	2026-07-01 16:21:39 +05:30
test_base_url_hostname.py
test_batch_runner_checkpoint.py
test_bitwarden_secrets.py	fix(secrets): unify encrypted-cache fallback with the merged stale-cache path	2026-07-22 04:40:07 -07:00
test_cli_file_drop.py
test_cli_manual_compress.py	test(cli): prove /compress type-ahead queue-drain; map contributor email	2026-07-23 07:24:46 -07:00
test_cli_skin_integration.py
test_code_skew.py
test_command_secret_source.py	feat(secrets): rework command source as a registered SecretSource — no provider selector	2026-07-22 04:39:28 -07:00
test_conftest_wal_gate.py	fix(tests): gate WAL-dependent tests on the linked SQLite's real capability	2026-07-25 07:17:52 -07:00
test_copilot_initiator.py	fix(copilot): set x-initiator per turn so user prompts bill as premium requests (salvage #4097) (#58544)	2026-07-05 00:44:15 -07:00
test_credential_file_permissions.py	harden(slack): CDN-allowlist inbound file URLs, DNS-pin token downloads, widen token-file perms warning	2026-07-23 11:44:43 -07:00
test_ctx_halving_fix.py	chore: restore test_ctx_halving_fix.py to main	2026-07-14 03:58:54 +05:30
test_delegate_cascade_49148.py
test_dispatch_session_id.py
test_empty_model_fallback.py	feat(models): catalog-labeled silent default — GLM-5.2 marked "default": true in the model catalog	2026-07-15 00:10:31 -07:00
test_empty_session_hygiene.py
test_env_loader_applied_homes.py	fix(secrets): mark _APPLIED_HOMES only after a real fetch attempt (#40597) (#69056)	2026-07-22 03:20:25 -07:00
test_env_loader_op_bootstrap.py	fix(secrets): make 1Password bootstrap token reliable outside systemd	2026-07-06 04:58:07 -07:00
test_env_loader_secret_sources.py	test(secrets): match real ApplyReport shape in isolation test	2026-07-22 04:39:17 -07:00
test_evidence_store.py
test_fast_safe_load.py
test_fts_cjk_bigram.py	test(state): cover pure-Latin embedded-in-CJK recovery via the cjk index	2026-07-22 10:35:04 -07:00
test_gateway_streaming_nested_config.py	fix(gateway): normalize YAML boolean streaming mode and keep enabled a mode-only alias	2026-07-20 05:39:09 -07:00
test_get_tool_definitions_cache_isolation.py
test_hermes_bootstrap.py	test(install): add UTF-8 regression guard for skills_sync child path	2026-07-24 17:10:39 -07:00
test_hermes_constants.py	fix(dashboard): keep custom themes visible after embedded chat starts (#60601)	2026-07-18 00:34:54 -04:00
test_hermes_home_profile_warning.py
test_hermes_logging.py	fix(logging): drive rotating file handlers through an async QueueListener	2026-07-05 11:44:53 +05:30
test_hermes_state.py	fix(sessions): preserve recently active sessions during pruning	2026-07-26 19:30:21 -07:00
test_hermes_state_compression_locks.py	fix(compression-lock): reclaim crashed holders instead of stranding the lease	2026-07-25 22:47:07 -07:00
test_hermes_state_wal_fallback.py	fix(state): make the byte-probe guard atomic, path-correct, and fail-closed	2026-07-25 21:44:43 -07:00
test_honcho_client_concurrency.py
test_honcho_client_config.py	feat(honcho): make latency-adding paths configurable	2026-07-16 12:48:48 -07:00
test_honcho_session_context.py
test_honcho_startup_fail_open.py	fix(ci): make tests, workflows, and attribution reliable under load (#66373)	2026-07-17 20:55:24 +00:00
test_install_autostash_conflict_recovery.py	test: add happy-path + no-markers coverage for autostash recovery	2026-07-18 19:18:03 +05:30
test_install_diverged_update.py
test_install_lockfile_churn.py
test_install_macos_launcher.py	fix(install): avoid realpath-dependent uv launcher on macOS	2026-07-26 19:30:32 -07:00
test_install_no_initial_commit.py
test_install_ps1_ascii_only.py	fix(install): keep install.ps1 pure ASCII so Windows PowerShell 5.1 doesn't misparse it	2026-07-18 18:40:59 -04:00
test_install_ps1_native_stderr_eap.py
test_install_ps1_node_path_for_npm.py	test(installer): guard Ensure-NodeExeOnPath wiring in install.ps1	2026-07-07 21:17:34 +07:00
test_install_ps1_python_fallback_venv.py
test_install_ps1_uv_powershell_host.py
test_install_ps1_web_server_syntax_probe.py	fix(install): guard Windows desktop installs against broken web_server	2026-07-05 19:35:30 -07:00
test_install_sh_bootstrap_marker.py	fix(install): stamp the bootstrap-complete marker from install.sh too	2026-07-26 16:06:50 -05:00
test_install_sh_browser_install.py
test_install_sh_install_method_stamp.py
test_install_sh_node_global_prefix.py
test_install_sh_pythonpath_sanitization.py
test_install_sh_root_fhs_uv_python_path.py
test_install_sh_setup_wizard_tty_probe.py
test_install_sh_symlink_stomp.py
test_install_sh_termux_network_prereqs.py
test_install_unmerged_index.py
test_ipv4_preference.py
test_iron_proxy.py	Reapply "Merge pull request #30179 from NousResearch/feat/iron-proxy"	2026-07-24 09:49:00 -07:00
test_iron_proxy_cli.py	Reapply "Merge pull request #30179 from NousResearch/feat/iron-proxy"	2026-07-24 09:49:00 -07:00
test_iron_proxy_e2e.py	Reapply "Merge pull request #30179 from NousResearch/feat/iron-proxy"	2026-07-24 09:49:00 -07:00
test_lazy_session_regressions.py	fix(desktop): persist @image: refs instead of the vision-enrichment text	2026-07-24 21:20:52 -05:00
test_lint_config.py
test_live_system_guard_self_test.py	fix(tests): make the live-system-guard canary fail closed	2026-07-21 12:15:46 +05:30
test_mcp_serve.py	refactor: consolidate gateway session metadata into state.db (#58899)	2026-07-05 14:01:03 -07:00
test_mini_swe_runner.py
test_minimax_model_validation.py
test_minimax_oauth.py
test_minisweagent_path.py
test_model_forces_max_completion_tokens.py
test_model_picker_scroll.py
test_model_tools.py	fix(toolsets): preserve core tools when a posture toolset is in disabled_toolsets (#57315)	2026-07-05 14:51:49 -07:00
test_model_tools_async_bridge.py
test_ollama_num_ctx.py
test_onepassword_secrets.py	fix(secrets): pass OP_LOAD_DESKTOP_APP_SETTINGS through to the op child env	2026-07-22 03:19:32 -07:00
test_output_cap_parsing.py	fix(context): parse vLLM's token-based output-cap error format	2026-07-01 03:17:48 -07:00
test_packaging_build_guard.py	rip out brew + pip/PyPI wheel support (#68217)	2026-07-22 16:51:01 -04:00
test_packaging_metadata.py	fix(deps): move CVE pins to current fixed versions so update stops downgrading patched envs	2026-07-26 19:29:07 -07:00
test_plugin_skills.py
test_plugin_utils.py
test_process_loop_event_loop_warning.py
test_profile_isolation_runtime.py
test_project_metadata.py	test(deps): class invariant — every shared LAZY_DEPS exact pin must match uv.lock	2026-07-26 19:28:55 -07:00
test_pty_keepalive_ws.py	fix(dashboard): scope chat attach tokens by session (#60745)	2026-07-16 19:48:47 -04:00
test_pty_session.py	feat(pty): periodic reaper wired into dashboard lifespan	2026-07-07 15:15:37 -07:00
test_retry_utils.py	refactor(retry): single-source Z.AI overload short-attempts + drop change-detector assert	2026-07-07 11:57:01 +05:30
test_run_tests_parallel.py	fix(tests): a run that collects nothing can no longer look green	2026-07-25 07:09:22 -07:00
test_sanitize_tool_error.py
test_search_slow_query_log.py	feat(state): messages_fts_cjk — CJK-bigram index on the v23 external-content layout	2026-07-22 07:56:47 -07:00
test_session_skill_previews.py	fix(sessions): keep the skill body out of session previews	2026-07-26 02:58:20 -05:00
test_session_workspace_binding.py	feat(sessions): workspace_key grouping helper + tests	2026-07-12 05:07:52 -04:00
test_slack_thread_require_mention.py	Add Slack thread mention gating	2026-07-22 21:14:44 -07:00
test_slash_worker_watchdog.py	test(tui): keep watchdog checks behavior-focused	2026-07-18 04:15:13 -07:00
test_sql_injection.py
test_sqlite_lock_safe_inspection.py	fix(state): make the byte-probe guard atomic, path-correct, and fail-closed	2026-07-25 21:44:43 -07:00
test_sqlite_wal_reset_gate.py	fix(state): make the byte-probe guard atomic, path-correct, and fail-closed	2026-07-25 21:44:43 -07:00
test_stale_utils_module_import.py
test_state_db_malformed_repair.py	perf(state): external-content FTS + tool-row-free trigram index (schema v23) (#65798)	2026-07-22 04:42:50 -07:00
test_subprocess_home_isolation.py
test_telegram_polling_progress_ptb.py	test(telegram): gate slots premise assert on runtimes without instance __dict__	2026-07-14 21:25:44 -07:00
test_termux_all_extra_compat.py
test_timezone.py
test_tini_shim.py	test(docker): cover tini -g legacy entrypoint boot path	2026-07-18 01:11:03 -07:00
test_toolset_distributions.py
test_toolsets.py	docs(xai): clarify x_search vs xurl routing without schema cross-refs	2026-07-23 21:06:47 -07:00
test_trajectory_compressor.py	fix(compaction): skip compression when it can't reduce tokens	2026-07-23 16:21:03 -07:00
test_trajectory_compressor_async.py
test_transform_llm_output_hook.py
test_transform_tool_result_hook.py
test_tui_entry_mcp_owner.py	fix(tui): gate the shared-owner MCP discovery wait on the stdio TUI flag	2026-07-21 12:43:27 -07:00
test_tui_gateway_loop_noise.py
test_tui_gateway_queue_on_busy.py	fix(tui_gateway): keep the original prompt when a redirect corrects a turn	2026-07-26 19:43:23 -05:00
test_tui_gateway_server.py	Merge pull request #72339 from NousResearch/bb/redirect-user-row	2026-07-26 20:09:46 -05:00
test_tui_gateway_ws.py	fix(mcp): propagate profile HERMES_HOME override into shared discovery owner; restore stdio startup + WSTransport tests	2026-07-26 14:14:03 -07:00
test_tui_mcp_late_refresh.py
test_utils_truthy_values.py
test_wal_checkpoint_strategy.py	fix(state): use PASSIVE checkpoint for periodic WAL flush to prevent B-tree corruption	2026-07-15 04:55:46 -07:00
test_web_server.py	feat(serve): add secure Desktop SSH bootstrap contract	2026-07-16 14:43:14 +02:00
test_web_server_sessiondb_eventloop.py	Merge pull request #65893 from NousResearch/bb/salvage-63082-sessiondb-offload	2026-07-16 15:23:32 -04:00
test_windows_subprocess_no_window_flags.py	fix(cron): respect the platform-conditional decode design in _run_job_script + taskkill kwarg snapshot	2026-07-24 11:45:57 -07:00
test_yaml_indent_consistency_31999.py
test_yuanbao_integration.py
test_yuanbao_markdown.py
test_yuanbao_pipeline.py	perf(yuanbao): bounded-concurrency inbound media resolve	2026-07-08 08:05:45 -07:00
test_yuanbao_proto.py
test_yuanbao_reconnect_set_active.py	fix(yuanbao): restore active singleton after WS reconnect	2026-07-05 00:41:34 -07:00
test_yuanbao_shutdown.py
test_zeroed_state_db.py	fix(state): quarantine lock fails closed when unacquireable (#68805)	2026-07-24 23:06:05 -07:00