chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

The seventeen remaining literals are container-side paths, AF_UNIX socket-path-limit
candidates on darwin, detection needles, guard regexes and guidance text that tells the
model to avoid /tmp. Each carries an inline `no-tmp: ok — <why>` so the reason lives
next to the line; the baseline keeps only a fenced tree listing where a marker would render.
This commit is contained in:
teknium1
2026-09-19 01:45:46 -07:00
committed by Teknium
parent d51f9c8464
commit 4586cde64d
17 changed files with 21 additions and 104 deletions

View File

@@ -204,93 +204,8 @@ def scan(paths=None, root: Path | None = None) -> dict[str, list[tuple[int, str]
# Files that carried literal /tmp paths when this check landed, with their hit counts.
# Burn-down list: fix or mark, then delete the entry. Regenerate with --print-baseline.
_BASELINE: dict[str, int] = {
"CONTRIBUTING.md": 1,
"apps/desktop/README.md": 1,
"apps/desktop/scripts/perf/README.md": 2,
"apps/desktop/scripts/profile-typing-lag.md": 4,
"gateway/control_socket.py": 1,
"hermes_cli/codex_runtime_plugin_migration.py": 1,
"hermes_cli/gateway.py": 1,
"hermes_constants.py": 1,
"mini_swe_runner.py": 1,
"plugins/disk-cleanup/README.md": 2,
"plugins/disk-cleanup/__init__.py": 1,
"plugins/platforms/line/adapter.py": 1,
"scripts/generate_conformance_vectors.py": 1,
"tools/browser_tool.py": 1,
"tools/code_kernel.py": 1,
"tools/environments/base.py": 1,
"tools/environments/daytona.py": 1,
"tools/environments/docker.py": 1,
"tools/environments/local.py": 3,
"tools/environments/vercel_sandbox.py": 1,
"tools/self_repo_guard.py": 2,
"tools/skills_guard.py": 2,
"website/docs/developer-guide/egress-internals.md": 2,
"website/docs/developer-guide/gateway-monitoring.md": 3,
"website/docs/developer-guide/image-gen-provider-plugin.md": 1,
"website/docs/developer-guide/middleware.md": 2,
"website/docs/developer-guide/model-provider-plugin.md": 1,
"website/docs/developer-guide/session-storage.md": 1,
"website/docs/getting-started/nix-setup.md": 2,
"website/docs/guides/delegation-patterns.md": 2,
"website/docs/guides/local-ollama-setup.md": 2,
"website/docs/guides/pipe-script-output.md": 1,
"website/docs/reference/cli-commands.md": 9,
"website/docs/reference/faq.md": 1,
"website/docs/user-guide/bot-mode.md": 3,
"website/docs/user-guide/configuration.md": 3,
"website/docs/user-guide/desktop.md": 1,
"website/docs/user-guide/docker.md": 2,
"website/docs/user-guide/features/built-in-plugins.md": 2,
"website/docs/user-guide/features/codex-app-server-runtime.md": 1,
"website/docs/user-guide/features/context-files.md": 1,
"website/docs/user-guide/features/cron.md": 2,
"website/docs/user-guide/features/deliverable-mode.md": 4,
"website/docs/user-guide/features/document-extraction.md": 1,
"website/docs/user-guide/features/goals.md": 11,
"website/docs/user-guide/features/mcp.md": 1,
"website/docs/user-guide/features/skills.md": 1,
"website/docs/user-guide/messaging/slack.md": 1,
"website/docs/user-guide/security.md": 2,
"website/docs/user-guide/skills/bundled/apple/apple-findmy.md": 6,
"website/docs/user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-claude-code.md": 3,
"website/docs/user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-codex.md": 6,
"website/docs/user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-opencode.md": 2,
"website/docs/user-guide/skills/bundled/creative/creative-ascii-art.md": 2,
"website/docs/user-guide/skills/bundled/creative/creative-pretext.md": 1,
"website/docs/user-guide/skills/bundled/github/github-github-pr-workflow.md": 2,
"website/docs/user-guide/skills/bundled/github/github-github-repo-management.md": 2,
"website/docs/user-guide/skills/bundled/productivity/productivity-ocr-and-documents.md": 1,
"website/docs/user-guide/skills/bundled/research/research-blocked-page-recovery.md": 1,
"website/docs/user-guide/skills/bundled/smart-home/smart-home-openhue.md": 2,
"website/docs/user-guide/skills/bundled/software-development/software-development-hermes-agent-skill-authoring.md": 1,
"website/docs/user-guide/skills/bundled/software-development/software-development-inspecting-hermes-desktop-dom.md": 2,
"website/docs/user-guide/skills/bundled/software-development/software-development-node-inspect-debugger.md": 7,
"website/docs/user-guide/skills/bundled/software-development/software-development-python-debugpy.md": 1,
"website/docs/user-guide/skills/bundled/web/web-blocked-page-recovery.md": 1,
"website/docs/user-guide/skills/optional/autonomous-ai-agents/autonomous-ai-agents-blackbox.md": 2,
"website/docs/user-guide/skills/optional/autonomous-ai-agents/autonomous-ai-agents-dynamic-workflow.md": 2,
"website/docs/user-guide/skills/optional/autonomous-ai-agents/autonomous-ai-agents-grok.md": 7,
"website/docs/user-guide/skills/optional/autonomous-ai-agents/autonomous-ai-agents-openhands.md": 1,
"website/docs/user-guide/skills/optional/creative/creative-ascii-art.md": 2,
"website/docs/user-guide/skills/optional/creative/creative-meme-generation.md": 9,
"website/docs/user-guide/skills/optional/creative/creative-pixel-art.md": 3,
"website/docs/user-guide/skills/optional/creative/creative-pretext.md": 1,
"website/docs/user-guide/skills/optional/data-science/data-science-jupyter-notebook.md": 1,
"website/docs/user-guide/skills/optional/devops/devops-pinggy-tunnel.md": 25,
"website/docs/user-guide/skills/optional/gaming/gaming-pokemon-player.md": 1,
"website/docs/user-guide/skills/optional/mcp/mcp-mcp-oauth-remote-gateway.md": 2,
"website/docs/user-guide/skills/optional/payments/payments-stripe-link-cli.md": 2,
"website/docs/user-guide/skills/optional/research/research-bioinformatics.md": 4,
"website/docs/user-guide/skills/optional/research/research-darwinian-evolver.md": 5,
"website/docs/user-guide/skills/optional/research/research-parallel-cli.md": 2,
"website/docs/user-guide/skills/optional/research/research-qmd.md": 2,
"website/docs/user-guide/skills/optional/smart-home/smart-home-openhue.md": 2,
"website/docs/user-guide/skills/optional/software-development/software-development-pr-lens.md": 1,
"website/docs/user-guide/skills/optional/web-development/web-development-har-derived-api-client.md": 2,
"website/docs/user-guide/skills/optional/yuanbao/yuanbao-yuanbao.md": 1,
"website/docs/user-guide/windows-wsl-quickstart.md": 1,
# a tree listing inside a fenced code block; an inline marker would render on the page
"website/docs/getting-started/nix-setup.md": 1,
}

View File

@@ -111,7 +111,7 @@ SCAR: List[tuple] = [
]
ADVERSARIAL: List[tuple] = [
("media-tag", "Here you go\nMEDIA:/tmp/output.png\ndone"),
("media-tag", "Here you go\nMEDIA:/tmp/output.png\ndone"), # no-tmp: ok — fixture string parsed by MEDIA-tag conformance vectors
("unclosed-fence", "```python\nprint('never closed')"),
("pathological-nesting", "**bold *italic ~~struck `code` struck~~ italic* bold**"),
("placeholder-injection", "sneaky \x00PH0\x00 token and \x00SL1\x00 too"),