0xbyt4 e6f66bc0f0 fix(security): cover Move and no-space headers in patch_tool sensitive path check ... patch_tool extracts V4A patch paths so _check_sensitive_path can refuse writes to /etc/*, /boot/*, etc. before they reach the low-level file ops. The extraction regex had two gaps: 1. `*** Move File: src -> dst` was never extracted (regex only matched Update/Add/Delete), so a Move targeting /etc/crontab skipped the pre-check and fell back on the narrower file_operations deny list. 2. The regex required `\\s+` after `***` but patch_parser uses `\\s*`, so `***Update File: /etc/hosts` (no space) parsed + applied while skipping the check. Loosen the leading whitespace to \\s* and add a Move regex that checks both endpoints. Move endpoints also run through the same '..' traversal rejection as the other V4A headers (closes the sibling gap on current main, which gained that traversal guard after this PR was opened).		2026-06-30 02:50:24 -07:00
..
computer_use	revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)	2026-06-27 15:59:00 -07:00
environments	fix(desktop): tree-kill Windows terminal descendants	2026-06-30 04:23:27 -05:00
neutts_samples
__init__.py	Merge branch 'main' into rewbs/tool-use-charge-to-subscription	2026-03-31 08:48:54 +09:00
ansi_strip.py
approval.py	fix(approval): catch hermes gateway stop/restart behind a profile flag (#55515)	2026-06-30 02:48:30 -07:00
async_delegation.py	feat(delegation): background fan-out — parallel subagents, one consolidated return (#49734)	2026-06-20 11:27:12 -07:00
binary_extensions.py	fix(tools): address PR review — remove _extract_raw_output, BudgetConfig everywhere, read_file hardening	2026-04-08 02:24:32 -07:00
blueprints.py	refactor(cron): rebrand Cron Recipes -> Automation Blueprints	2026-06-11 10:49:47 -07:00
browser_camofox.py	fix(camofox): auto-recover from stale tab 404 on navigate	2026-06-29 01:26:24 -07:00
browser_camofox_state.py	feat(browser): add persistent Camofox sessions and VNC URL discovery (salvage #4400) (#4419)	2026-04-01 04:18:50 -07:00
browser_cdp_tool.py	fix(deps): declare websockets as core dep + relax dev setuptools pin (salvage #45486, #44693) (#46744)	2026-06-15 12:44:44 -04:00
browser_dialog_tool.py	feat: auto-launch Chromium-family browser for CDP	2026-05-19 22:34:05 -07:00
browser_supervisor.py	fix(browser): recover from CDP DOM-node serialization crash in browser_console (#35385)	2026-05-30 07:31:25 -07:00
browser_tool.py	fix(security): redact browser CDP endpoint logs	2026-06-29 04:25:26 -07:00
budget_config.py	fix(agent): scale tool-output budget to the model context window (#23767)	2026-06-21 17:46:38 +05:30
checkpoint_manager.py	refactor(windows): unify windowless spawn form across the touched sites	2026-06-28 17:44:47 -05:00
clarify_gateway.py	fix: accept typed clarify choice replies	2026-06-28 04:13:19 -07:00
clarify_tool.py	fix(clarify): docstring — put options in choices[] only, never enumerate in question text	2026-06-19 07:34:02 -07:00
close_terminal_tool.py	feat(desktop): live agent terminals + agent-driven tab close	2026-06-28 21:15:14 -05:00
code_execution_tool.py	feat(web_extract): truncate-and-store instead of LLM summarization (#54843)	2026-06-29 10:00:49 -07:00
computer_use_tool.py	feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)	2026-06-22 06:42:30 -07:00
credential_files.py	feat(web_extract): truncate-and-store instead of LLM summarization (#54843)	2026-06-29 10:00:49 -07:00
cronjob_tools.py	fix(security): align cron invisible-unicode set with install-time scanner	2026-06-26 01:11:11 -07:00
debug_helpers.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
delegate_tool.py	fix: drop isinstance(str) guard so client.base_url fallback works with httpx.URL	2026-06-27 03:59:36 +05:30
discord_tool.py	feat: add Discord message deletion action	2026-05-07 05:11:09 -07:00
env_passthrough.py	fix(env-passthrough): fail closed when provider blocklist import fails	2026-06-28 02:05:43 -07:00
env_probe.py	fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls	2026-06-08 22:46:57 -07:00
fal_common.py	refactor(image_gen): port FAL backend to plugins/image_gen/fal	2026-05-22 04:10:45 -07:00
feishu_doc_tool.py	perf(cli): cut ~19s from 'hermes' cold start (skills cache + lazy Feishu + no Nous HTTP) (#22138)	2026-05-08 16:39:32 -07:00
feishu_drive_tool.py	perf(cli): cut ~19s from 'hermes' cold start (skills cache + lazy Feishu + no Nous HTTP) (#22138)	2026-05-08 16:39:32 -07:00
file_operations.py	fix: warn on line-oriented newline search patterns	2026-06-20 23:23:47 -07:00
file_state.py	feat(delegate): cross-agent file state coordination for concurrent subagents (#13718)	2026-04-21 16:41:26 -07:00
file_tools.py	fix(security): cover Move and no-space headers in patch_tool sensitive path check	2026-06-30 02:50:24 -07:00
fuzzy_match.py	fix(fuzzy-match): preserve boundary space after whitespace-normalized match	2026-06-26 01:55:27 +05:30
homeassistant_tool.py	fix: clean up description escaping, add string-data tests	2026-04-13 04:45:07 -07:00
image_generation_tool.py	krea	2026-06-25 12:38:33 -07:00
interrupt.py	fix(interrupt): propagate to concurrent-tool workers + opt-in debug trace (#11907)	2026-04-17 20:39:25 -07:00
kanban_tools.py	fix(kanban): make goal_mode judge gate truly fail-open	2026-06-29 22:20:19 -07:00
lazy_deps.py	fix(memory): lazy-install supermemory + mem0 SDKs like honcho/hindsight	2026-06-29 00:25:36 -07:00
managed_tool_gateway.py	fix(managed-gateway): keep tool availability scans off the Nous token-refresh path	2026-05-30 07:58:08 -07:00
mcp_oauth.py	fix(mcp): suppress interactive OAuth stdin prompts during background discovery (#35927)	2026-06-27 04:59:23 +05:30
mcp_oauth_manager.py	fix(mcp): auto-recover from invalid_client on stale OAuth client registration	2026-06-26 00:35:27 -07:00
mcp_tool.py	fix(mcp): skip preflight content-type probe for OAuth servers	2026-06-28 04:47:39 -07:00
memory_tool.py	fix(memory): skip drift guard for add (append-only) action (#42874)	2026-06-25 00:51:12 +05:30
microsoft_graph_auth.py	feat(msgraph): add auth and client foundation	2026-05-08 09:27:26 -07:00
microsoft_graph_client.py	fix(msgraph): stream download_to_file body instead of buffering	2026-05-08 09:27:26 -07:00
neutts_synth.py
openrouter_client.py
osv_check.py	fix(osv_check): honor npx --package/-p install target when parsing package arg (#40567)	2026-06-06 18:30:39 -07:00
patch_parser.py	fix(lint): skip per-file shell linter when LSP will handle the file (#29054)	2026-05-20 01:46:40 -05:00
path_security.py	refactor: extract shared helpers to deduplicate repeated code patterns (#7917)	2026-04-11 13:59:52 -07:00
process_registry.py	fix(desktop): tree-kill Windows terminal descendants	2026-06-30 04:23:27 -05:00
project_tools.py	feat(tools): add project workspace tools	2026-06-25 16:40:27 -05:00
read_extract.py	feat(read): extract notebook and office documents (#37082)	2026-06-13 14:42:51 -07:00
read_terminal_tool.py	feat(desktop): resizable VS Code-themed terminal pane + palette polish (#42521)	2026-06-09 23:15:20 -05:00
registry.py	fix(tools): suppress transient check_fn flakes so subagents keep file/terminal tools	2026-06-27 19:29:00 -07:00
schema_sanitizer.py	fix(tools): strip default from $ref nodes in tool schemas	2026-06-12 00:30:51 -05:00
send_message_tool.py	test+harden: modernize salvaged Matrix path for current plugin layout	2026-06-28 12:48:08 +05:30
session_search_tool.py	fix(session_search): demote cron below interactive sessions in discover ranking (#53597)	2026-06-27 04:41:22 -07:00
skill_manager_tool.py	fix(curator): fail closed on unverified skill deletes during consolidation (#53935)	2026-06-27 20:45:57 -07:00
skill_provenance.py	fix(curator): only mark agent-created for background-review sediment (#19621)	2026-05-04 02:42:16 -07:00
skill_usage.py	fix(curator): protect external skills from background curation	2026-06-25 22:03:02 -07:00
skills_ast_audit.py	refactor(skills): slim AST diagnostic to single entry point	2026-05-23 17:47:26 -07:00
skills_guard.py	fix(skills-guard): stop flagging benign skill content + honor skill ignore files (#36231)	2026-06-01 01:58:48 -07:00
skills_hub.py	fix(skills): replace string prefix check with strict path containment	2026-06-28 21:14:01 -07:00
skills_sync.py	fix(skills): skip shadowing when external_dirs provides the skill	2026-06-27 21:07:53 -07:00
skills_tool.py	fix(config): strip export prefix in .env parsers across three modules	2026-06-28 18:53:00 -07:00
slash_confirm.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
terminal_tool.py	fix(terminal): require approval for host-bound Docker commands (#54483)	2026-06-29 11:35:41 +10:00
thread_context.py	fix(code-exec): propagate agent-turn context into tool worker threads	2026-05-29 03:44:49 -07:00
threat_patterns.py	fix(security): stop blocking AGENTS.md/SOUL.md that name an agent 'Praxis' (#52925)	2026-06-26 00:36:01 -07:00
tirith_security.py	fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)	2026-06-26 15:26:08 +05:30
todo_tool.py	fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)	2026-06-25 23:42:42 +05:30
tool_backend_helpers.py	feat(tools): surface the free tool pool in entitlement + setup (#36153)	2026-06-01 06:32:48 +05:30
tool_output_limits.py	fix: tool_output_limits re-reads config on every call (no caching)	2026-05-31 00:50:19 -07:00
tool_result_storage.py	fix(tool-result-storage): persist via stdin to bypass 128 KB exec-arg cap (#22913)	2026-05-09 18:44:58 -07:00
tool_search.py	fix(tool-search): scope bridge catalog + dispatch to the session's toolsets	2026-05-29 02:04:12 -07:00
transcription_tools.py	fix(windows): hide remaining backend console-flash legs missed on main	2026-06-28 10:19:21 -05:00
tts_tool.py	fix(windows): hide remaining backend console-flash legs missed on main	2026-06-28 10:19:21 -05:00
url_safety.py	fix(security): handle IPv6 scope IDs in URL safety checks to prevent bypass	2026-06-21 13:56:35 -07:00
video_generation_tool.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
vision_tools.py	fix(vision): narrow the fan-out cap to the CPU encode burst only	2026-06-29 01:27:10 -07:00
voice_mode.py	fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls	2026-06-08 22:46:57 -07:00
web_tools.py	fix(web_extract): bound stored full-text size + give concrete read_file offset	2026-06-30 00:19:49 -07:00
website_policy.py	chore(web): remove web_crawl tool + provider crawl plumbing (#33824)	2026-05-28 04:52:42 -07:00
write_approval.py	fix(memory,skills): repair write-approval inline prompt, gateway staging, and gateway /skills review (#43452)	2026-06-10 02:57:15 -07:00
x_search_tool.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
xai_http.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
xai_video_tools.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
yuanbao_tools.py	Fix unsafe gateway media path delivery	2026-05-23 01:40:35 -07:00