teknium1 0d27d2ed14 fix(vision): bound the sandbox exec-read at the ingest cap ... The container exec-read piped the whole file through base64 with no size guard — the 50MB cap was only enforced host-side AFTER the full payload had already streamed into host memory. A prompt-injected read of a huge container file (or /dev/zero) could balloon the gateway process. head -c (cap+1) bounds the read inside the sandbox; the +1 byte lets the host distinguish at-cap from over-cap and reject with SourceTooLarge. Input redirect replaces 'base64 --' (no argv exposure at all for leading-dash paths). Docker integration tests re-verified live.		2026-07-04 15:30:50 -07:00
..
computer_use	Fix computer-use crash on X11 windows with null PID	2026-07-04 02:37:33 -07:00
environments	Revert "Merge pull request #30179 from NousResearch/feat/iron-proxy"	2026-07-04 13:38:59 -07:00
neutts_samples
__init__.py
ansi_strip.py
approval.py	refactor(approval): extract is_approval_bypass_active(); use frozen-env bypass in codex routing	2026-07-01 22:58:37 +05:30
async_delegation.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
binary_extensions.py
blueprints.py
browser_camofox.py	fix(browser): block Camofox input on private pages	2026-07-03 03:27:47 -07:00
browser_camofox_state.py
browser_cdp_tool.py	fix(browser): apply private-page guard to browser_cdp frame_id routing	2026-07-03 03:27:47 -07:00
browser_dialog_tool.py
browser_supervisor.py	fix(browser): harden browser tool safety boundaries	2026-07-01 05:04:41 -07:00
browser_tool.py	fix(browser): guard Camofox eval private pages	2026-07-02 13:10:30 +05:30
budget_config.py	fix(agent): scale tool-output budget to the model context window (#23767)	2026-06-21 17:46:38 +05:30
checkpoint_manager.py	refactor(windows): unify windowless spawn form across the touched sites	2026-06-28 17:44:47 -05:00
clarify_gateway.py	fix: accept typed clarify choice replies	2026-06-28 04:13:19 -07:00
clarify_tool.py	fix(clarify): docstring — put options in choices[] only, never enumerate in question text	2026-06-19 07:34:02 -07:00
close_terminal_tool.py	fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper	2026-07-02 03:00:59 -07:00
code_execution_tool.py	fix(code-exec): bind execute_code tool socket to a per-session RPC token	2026-07-01 04:08:37 -07:00
computer_use_tool.py	feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)	2026-06-22 06:42:30 -07:00
credential_files.py	fix(vision): unified image-source resolver + terminal-backend confinement	2026-07-04 15:30:50 -07:00
cronjob_tools.py	security(cron): block base_url overrides that exfiltrate provider credentials	2026-07-01 14:23:01 +05:30
daemon_pool.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
debug_helpers.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
delegate_tool.py	fix(security): remove model-controlled delegate ACP transport	2026-07-03 03:27:47 -07:00
discord_tool.py
env_passthrough.py	fix(security): strip dynamic Hermes secrets from all subprocess spawn env	2026-07-01 14:37:22 +05:30
env_probe.py
fal_common.py
feishu_doc_tool.py
feishu_drive_tool.py
file_operations.py	fix: warn on line-oriented newline search patterns	2026-06-20 23:23:47 -07:00
file_state.py
file_tools.py	fix(file-tools): preserve container paths for docker file ops (#56637)	2026-07-03 14:18:20 +10:00
fuzzy_match.py	fix(patch): preserve file Unicode when unicode_normalized strategy matches	2026-07-01 17:48:32 +05:30
homeassistant_tool.py
image_generation_tool.py	krea	2026-06-25 12:38:33 -07:00
image_source.py	fix(vision): bound the sandbox exec-read at the ingest cap	2026-07-04 15:30:50 -07:00
interrupt.py
kanban_tools.py	feat(kanban): route notifications via owning profile + wake creator agent	2026-07-02 00:05:48 +05:30
lazy_deps.py	fix(update): skip unsupported Matrix refresh on Windows	2026-07-04 13:40:59 -07:00
managed_tool_gateway.py
mcp_oauth.py	refactor(mcp): DRY the non-interactive OAuth guard + positive-control test	2026-07-04 14:10:33 +05:30
mcp_oauth_manager.py	fix(mcp-oauth): anchor 401 handler task to prevent GC mid-flight	2026-06-30 16:56:15 -07:00
mcp_tool.py	feat(mcp): first-class MCP tab — catalog, GUI auth/probe/logs, per-tool gating	2026-07-03 05:08:28 -05:00
memory_tool.py	fix(memory): degrade gracefully after repeated at-capacity consolidation failures (#42405)	2026-06-30 20:01:16 +05:30
microsoft_graph_auth.py
microsoft_graph_client.py
neutts_synth.py
openrouter_client.py
osv_check.py
patch_parser.py
path_security.py
process_registry.py	fix(desktop): tree-kill Windows terminal descendants	2026-06-30 04:23:27 -05:00
project_tools.py	feat(tools): add project workspace tools	2026-06-25 16:40:27 -05:00
read_extract.py
read_terminal_tool.py	fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper	2026-07-02 03:00:59 -07:00
registry.py	fix(security): use caller package root for deregister opt-in policy lookup	2026-07-01 15:37:58 +05:30
schema_sanitizer.py
send_message_tool.py	fix(matrix): route text-only send_message through adapter for E2EE support	2026-07-01 00:12:11 -07:00
session_search_tool.py	fix(session_search): demote cron below interactive sessions in discover ranking (#53597)	2026-06-27 04:41:22 -07:00
skill_manager_tool.py	fix(skills): require review forks to read before writing skills	2026-06-30 15:49:36 -07:00
skill_provenance.py
skill_usage.py	fix(curator): protect external skills from background curation	2026-06-25 22:03:02 -07:00
skills_ast_audit.py
skills_guard.py
skills_hub.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
skills_sync.py	fix(skills): skip shadowing when external_dirs provides the skill	2026-06-27 21:07:53 -07:00
skills_tool.py	fix(skills): require review forks to read before writing skills	2026-06-30 15:49:36 -07:00
slash_confirm.py
terminal_tool.py	refactor(ssh): extract shared _is_ssh_remote_tilde_cwd predicate	2026-07-04 14:17:11 +05:30
thread_context.py
threat_patterns.py	fix: bound threat-pattern/FTS5 regex input and cover V4A Move-File edits	2026-07-01 01:05:28 -07:00
tirith_security.py	fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)	2026-06-26 15:26:08 +05:30
todo_tool.py	fix(agent): restrict todo hydration to paired assistant todo calls	2026-07-01 01:02:17 -07:00
tool_backend_helpers.py
tool_output_limits.py
tool_result_storage.py	fix: keep persisted tool results inside their storage directory	2026-06-30 16:39:41 -07:00
tool_search.py
transcription_tools.py	fix(windows): hide remaining backend console-flash legs missed on main	2026-06-28 10:19:21 -05:00
tts_tool.py	fix(tts): coerce direct-only OpenAI model on the managed audio gateway	2026-07-03 05:30:16 -05:00
url_safety.py	fix(browser): narrow credential-query denylist to unambiguous names	2026-07-01 05:04:41 -07:00
video_generation_tool.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
vision_tools.py	fix(vision): stdin=DEVNULL on rasterizer subprocess (stdin guard)	2026-07-04 15:30:50 -07:00
voice_mode.py
web_tools.py	refactor(web_tools): single registry authority for custom-provider availability	2026-07-03 20:14:27 +05:30
website_policy.py
write_approval.py
x_search_tool.py
xai_http.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
xai_video_tools.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
yuanbao_tools.py