teknium1 a79d1d3a71 feat: one-shot runs drop the self-improvement footprint (no skill authoring, fewer process skills, delegation cap) ...

A finite `hermes chat -q` / `--oneshot` run has no later session in its HERMES_HOME
to learn for, yet it ran the full interactive self-improvement loop. Measured over
21 one-shot benchmark trajectories: 7 skills created and a bundled one patched
mid-task, 37 of ~215 tool calls on skill_view/skill_manage, skill text = 34% of all
tool-result bytes fed back into context, plus reviewer subagents spawned on the
agent's own diff (one task: 5 delegations, 62 subagent API calls, each re-paying a
cold system prompt).

Keyed on the existing HERMES_SINGLE_QUERY_SESSION marker (approval gate, delegation
dispatcher), so interactive and gateway sessions are byte-identical:

* agent/oneshot_footprint.py (new sibling): skill_manage is pruned from the tool
  set; the ## Skills block keeps the index + skill_view but drops the record/patch/
  offer-to-save coaching and the "load process skills for work you already know"
  push (SKILLS_GUIDANCE follows because it is gated on skill_manage).
* delegation.oneshot_max_children (default 2, 0 = unlimited): total children a
  one-shot run may spawn; past it delegate_task returns a tool error telling the
  model to finish inline.
* requesting-code-review skill: reviewer/fixer subagents (Steps 5 and 7) are
  interactive-only; one-shot applies the checklist inline.

Live: `hermes chat -q "list tools starting with skill_"` on the portal — base
"skill_manage, skill_view, skills_list", fix "skill_view, skills_list"; a real
AIAgent under a temp HERMES_HOME shows the interactive prompt unchanged (6643 chars
both) and the one-shot prompt without skill_manage / offer-to-save.

2026-09-19 09:21:18 -07:00

..

computer_use

fix(model): preserve unknown custom capabilities

2026-09-16 17:09:50 -07:00

connectors

fix(tools): tool_call rejections restate the single-entry shape and stop misdirecting deferred names

2026-09-18 09:24:54 -07:00

environments

docs(terminal): name the stdin=DEVNULL atom of the Git Bash probe (#73403)

2026-09-19 02:36:56 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

fix: /stop halts background subagents and returns their partial results as interrupted completions

2026-09-18 20:34:42 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

approval_detection.py

fix(approval): deobfuscate every command word in one detection variant (#113535)

2026-09-17 20:38:43 +05:30

approval_floors.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

approval_gateway_wait.py

fix(approval): withdraw the queue entry when no client can answer; commit choices under the lock

2026-09-17 09:04:38 -07:00

approval_human_wait.py

…

approval_prompt.py

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

approval_smart.py

…

approval.py

fix(approval): withdraw the queue entry when no client can answer; commit choices under the lock

2026-09-17 09:04:38 -07:00

arg_coercion.py

…

async_delegation.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

audio_container.py

…

binary_extensions.py

refactor(tools): one suffix helper for the binary-extension checks; drop the dead .db3 member

2026-09-17 21:17:26 +05:30

blueprints.py

…

bot_failure_reasons.py

fix: local delivery runner ships a typed reason for every failure

2026-09-18 10:44:29 -07:00

bot_live_delivery.py

fix(cron,tools): exact-id receipt reads fail closed on a non-dict JSON payload

2026-09-18 09:19:04 -07:00

bot_mode_dm.py

fix: local delivery runner ships a typed reason for every failure

2026-09-18 10:44:29 -07:00

bot_mode_probe.py

fix(bot-mode): a renamed primary signs with its friendly name; docs the message_agent target forms

2026-09-16 22:25:33 -07:00

bot_relay.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

browser_camofox_state.py

…

browser_camofox.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

browser_cdp_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(browser): gave-up supervisor unregisters itself; tests trimmed to two invariants

2026-09-18 10:28:40 -07:00

browser_tool_cdp.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

browser_tool_cloud.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

browser_tool_eval_policy.py

…

browser_tool_install.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

browser_tool_lifecycle.py

fix(browser): atexit hooks stay silent when the origin module is unimportable

2026-09-16 16:57:03 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

browser_tool_session.py

fix(browser): route any newline/% argument past a Windows .cmd shim losslessly

2026-09-18 10:29:47 -07:00

browser_tool_snapshot.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_tool_vision.py

feat(vision): vision.embed_target_bytes replaces the hardcoded 256 KB native embed budget

2026-09-17 09:02:55 -07:00

browser_tool.py

fix(browser): preserve image eval payload on Windows

2026-09-18 10:29:47 -07:00

browser_use_cli.py

feat(vision): vision.embed_target_bytes replaces the hardcoded 256 KB native embed budget

2026-09-17 09:02:55 -07:00

browser_vault_tool.py

fix(vault): bind manager logins to every saved web origin

2026-09-15 04:56:01 -07:00

budget_config.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

checkpoint_manager_profile_rename.py

fix(checkpoints): retry of a partial profile-rename rekey keeps checkpoints taken under the new name

2026-09-16 14:34:22 -07:00

checkpoint_manager.py

fix(checkpoints): drop the defence layers around the never-raising backend predicate

2026-09-18 10:38:08 -07:00

clarify_gateway.py

…

clarify_tool.py

fix(clarify): batch result carries the surface's no-answer notice; trim tests

2026-09-16 17:47:50 -07:00

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

fix(cron): no_agent scripts get the owning profile's declared secret, never the launch profile's

2026-09-18 10:04:57 -07:00

code_execution_rpc.py

…

code_execution_tool.py

fix(tools): execute_code shares the interpreter-kill rejection text; collapse redundant supervisor branch

2026-09-18 12:49:13 -07:00

code_kernel_remote.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

code_kernel.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

computer_use_tool.py

…

credential_files.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

cronjob_job_args.py

fix(cron): validate script existence and fix profile-aware path in error messages

2026-09-15 04:13:47 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(cron): reap stale executions before the one-shot early return

2026-09-18 11:07:56 -07:00

daemon_pool.py

fix(tools): support daemon pool workers on Python 3.14

2026-09-15 18:41:46 -07:00

debug_helpers.py

…

delegate_tool_child_run.py

fix: /stop halts background subagents and returns their partial results as interrupted completions

2026-09-18 20:34:42 -07:00

delegate_tool_config.py

feat: one-shot runs drop the self-improvement footprint (no skill authoring, fewer process skills, delegation cap)

2026-09-19 09:21:18 -07:00

delegate_tool_dispatch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

delegate_tool_progress.py

fix(delegation): avoid duplicating child goals in system prompts

2026-09-18 09:52:36 -07:00

delegate_tool_registry.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

delegate_tool_results.py

Merge pull request #103486 from NousResearch/fix/nested-delegate-deadline-and-summary-budget

2026-09-06 12:02:43 -07:00

delegate_tool_tasks.py

Port from RooCodeInc/Roomote#1796: per-task image forwarding on delegate_task

2026-09-13 21:05:42 -07:00

delegate_tool_toolsets.py

fix(delegate): composite parents can grant their included toolsets to children

2026-09-15 18:40:52 -07:00

delegate_tool.py

feat: one-shot runs drop the self-improvement footprint (no skill authoring, fewer process skills, delegation cap)

2026-09-19 09:21:18 -07:00

delegation_live_log.py

…

delegation_output_schema.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(cron): no_agent scripts get the owning profile's declared secret, never the launch profile's

2026-09-18 10:04:57 -07:00

env_probe.py

…

fal_common.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

file_operations_lint.py

fix(lsp): treat a deleted process cwd as no anchor so write diagnostics never fail a landed write

2026-09-19 01:32:28 -07:00

file_operations_search.py

refactor(tools): one find clause for the hidden-dir prune

2026-09-19 01:46:29 +05:30

file_operations.py

fix(tools): surface a bad working directory on every file-tool read path (#98723)

2026-09-18 09:54:45 -07:00

file_state.py

fix(file_state): drop the module-level forget_task wrapper

2026-09-18 10:10:40 -07:00

file_tools_paths.py

fix(checkpoints): do not feed container paths into host checkpoint storage

2026-09-18 10:38:08 -07:00

file_tools_read_tracking.py

fix: paged, extracted and post-compaction reads count as a write_file baseline

2026-09-15 03:57:24 -07:00

file_tools_write_guards.py

test(tools): overwriting the database file itself is still refused as binary

2026-09-17 21:17:26 +05:30

file_tools.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

focus_pane_tool.py

…

fuzzy_match.py

fix(tools): make the empty/whitespace old_string rejection actionable

2026-09-12 21:55:07 -07:00

homeassistant_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

hook_output_spill.py

…

image_generation_catalog.py

feat(image-gen): Kling Image v3 in the FAL catalog (t2i + singular-key i2i)

2026-09-13 21:03:11 -07:00

image_generation_managed.py

feat(image_gen): route the managed selection by model id across FAL, Krea and Portal

2026-09-16 16:42:47 -07:00

image_generation_tool.py

feat(image_gen): route the managed selection by model id across FAL, Krea and Portal

2026-09-16 16:42:47 -07:00

image_source.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

interpreter_shutdown.py

…

interrupt.py

fix(tools): honor false interrupt debug values

2026-09-16 17:21:14 -07:00

kanban_tools_schemas.py

fix(kanban): preserve owned dependency handoffs

2026-09-18 09:29:44 -07:00

kanban_tools.py

fix(kanban): warn once when an inherited delegation fence rejects the worker's auto-heartbeat

2026-09-18 12:46:28 -07:00

kanban_toolset_context.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

lazy_deps.py

feat(lazy_deps): install_specs takes constraints and dry_run

2026-09-17 00:11:27 -07:00

managed_gateway_auth.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

managed_tool_gateway.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

mcp_dashboard_oauth.py

fix(mcp): dashboard OAuth failures keep their first cause on every surface

2026-09-18 09:20:07 -07:00

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: device OAuth login scans every advertised authorization server

2026-09-15 19:00:42 -07:00

mcp_oauth_manager.py

fix(mcp): OAuth discovery/registration carry a User-Agent; cancelled login frees its callback port

2026-09-18 12:47:49 -07:00

mcp_oauth_provider.py

fix(mcp): pin the pre-flight discovery User-Agent in a test; drop the unfailing version import guard

2026-09-18 12:47:49 -07:00

mcp_oauth.py

fix(mcp): OAuth discovery/registration carry a User-Agent; cancelled login frees its callback port

2026-09-18 12:47:49 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

mcp_tool_common.py

fix(mcp): error sanitizer redacts dotted/dashed sk- keys

2026-09-18 09:58:12 -07:00

mcp_tool_config.py

fix(mcp): resolve managed Windows Node launchers (npx.cmd/npm.cmd) for stdio MCP servers

2026-09-15 19:04:29 -07:00

mcp_tool_content.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

mcp_tool_discovery.py

fix(mcp): _connect_server installs the owner scope inside the try so a failed install releases the claim

2026-09-18 10:25:46 -07:00

mcp_tool_errors.py

fix(mcp): complete the handshake when a stateless server names a modern protocolVersion and lacks server/discover

2026-09-18 12:48:42 -07:00

mcp_tool_handlers.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

mcp_tool_health.py

fix(mcp): skip dynamic tool refresh when the server session is already gone (#109824)

2026-09-17 19:06:29 -04:00

mcp_tool_lifecycle.py

refactor(mcp): name the wildcard once in shutdown_mcp_servers

2026-09-16 21:15:37 +05:30

mcp_tool_loop.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

mcp_tool_registration.py

fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection

2026-09-13 15:41:01 -07:00

mcp_tool_sampling.py

refactor: sms AIOHTTP_AVAILABLE flag; ElicitationHandler call_context defaults to a no-op thunk; drop stale TYPE_CHECKING/type-ignore in two tests

2026-09-07 22:47:33 +05:30

mcp_tool_schema.py

fix(mcp): repair schema-map keywords per-entry in _repair_object_shape

2026-09-15 04:55:14 -07:00

mcp_tool_scope.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_server_run.py

fix(mcp): log the dead-child reconnect; test file named by behaviour

2026-09-19 16:20:19 +05:30

mcp_tool_transport.py

fix(mcp): complete the handshake when a stateless server names a modern protocolVersion and lacks server/discover

2026-09-18 12:48:42 -07:00

mcp_tool.py

fix(mcp): name the HTTP status, URL and body behind "Server returned an error response"

2026-09-18 12:48:42 -07:00

memory_tool_store.py

fix(utils): atomic writers refuse to resurrect a deleted named profile home

2026-09-16 00:32:15 -07:00

memory_tool.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

Port from aaif-goose/goose#11466: recognize Windows package-runner shims in OSV malware preflight

2026-09-13 20:46:22 -07:00

patch_parser.py

fix(tools): reject V4A Add File onto an existing path

2026-09-12 21:13:40 -07:00

path_security.py

…

plugin_guard_context.py

fix(plugins): install scanner scores inert context as context, not as plugin behaviour

2026-09-19 03:20:05 -07:00

plugin_guard.py

fix(plugins): install scanner scores inert context as context, not as plugin behaviour

2026-09-19 03:20:05 -07:00

preview_tool.py

…

process_registry_checkpoint.py

fix(multiplex): cron, kanban, /loop and completion paths for a served profile match its standalone gateway

2026-09-11 19:58:07 -07:00

process_registry_notifications.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

process_registry_results.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

process_registry.py

fix(cron): lifecycle guard blocks kills aimed at the gateway's own interpreter image

2026-09-18 12:49:13 -07:00

project_tools.py

…

pty_query_responder.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

react_to_message_tool.py

…

read_extract.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix(tools): core-tool drop warns only after the probe had admitted it

2026-09-17 08:53:48 -07:00

schema_sanitizer.py

fix(tools): keep an empty required: [] in sanitized tool schemas

2026-09-15 18:39:09 -07:00

self_repo_guard.py

fix(tools): heredoc-pipe guard sees through fd redirects around the pipe

2026-09-16 17:55:07 -07:00

send_message_senders.py

refactor(send): route WhatsApp mentions through the existing standalone chunker

2026-09-19 00:24:50 +05:30

send_message_targets.py

…

send_message_tool.py

refactor(send): route WhatsApp mentions through the existing standalone chunker

2026-09-19 00:24:50 +05:30

session_search_tool.py

fix(session_search): cap title-match discovery entries like FTS hits

2026-09-18 10:30:57 -07:00

shell_heredoc.py

fix(tools): classify prefixed heredoc consumers

2026-09-18 09:35:16 -07:00

skill_ledger.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

skill_linter.py

…

skill_manager_batch.py

fix(skills): keep absorbed_into in the delete shape; decide every patch shape miss pre-effect

2026-09-17 08:47:01 -07:00

skill_manager_guards.py

…

skill_manager_tool.py

fix(skills): keep absorbed_into in the delete shape; decide every patch shape miss pre-effect

2026-09-17 08:47:01 -07:00

skill_provenance.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

skill_usage.py

fix(curator): never-used built-ins get their inactivity clock anchored at first curator sight

2026-09-19 09:20:54 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix: recognise fences opened inside list items and blockquotes

2026-09-15 19:01:39 -07:00

skills_hub_clawhub.py

fix(skills): retry a failed skills.sh sitemap shard; never cache a partial catalog

2026-09-18 12:51:49 -07:00

skills_hub_github.py

refactor(skills): skip wrong-provider taps and give the provider-filter idiom one owner

2026-09-15 14:15:59 +05:30

skills_hub_install.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skills_hub_models.py

fix(skills): retry a failed skills.sh sitemap shard; never cache a partial catalog

2026-09-18 12:51:49 -07:00

skills_hub_official.py

fix(skills): give the provider cut one owner inside the parallel walker

2026-09-15 14:15:59 +05:30

skills_hub_search.py

fix: bound the index-miss fallback and skip it under provider filters and index timeouts

2026-09-16 17:43:11 -07:00

skills_hub_skillssh.py

test(skills): seam the sitemap-shard retry test on the hub guarded GET

2026-09-18 12:51:49 -07:00

skills_hub_sources.py

…

skills_hub.py

fix(skills-hub): keep the gzip-only Accept-Encoding pin on sitemap fetches

2026-09-18 10:22:14 -07:00

skills_sync_bundled_ops.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync_client_org.py

…

skills_sync_client_wire.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_sync_client.py

…

skills_sync_optional.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

skills_tool_dedup.py

fix: pruned skill_view/read_file results reload after a proactive prune

2026-09-16 17:23:44 -07:00

skills_tool_plugin.py

…

skills_tool_setup.py

fix(skills): honor profile-scoped readiness secrets

2026-09-15 18:33:15 -07:00

skills_tool.py

fix(tools): read_file's dedup stub skips the review fork too

2026-09-19 00:33:58 +05:30

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

fix(lsp): release language servers on every in-process workspace removal; pin the call sites

2026-09-19 01:29:03 -07:00

terminal_hints.py

…

terminal_scope.py

fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope

2026-09-15 03:46:29 -07:00

terminal_tool_backends.py

fix(tools): sanitize cwd overrides written into live container envs

2026-09-18 09:54:45 -07:00

terminal_tool_background.py

fix(gateway): background completions reach the chat while the launching turn is still running

2026-09-15 18:58:30 -07:00

terminal_tool_config.py

fix(terminal): every Windows drive letter is a host cwd, not just C: (#60962)

2026-09-05 19:01:22 +05:30

terminal_tool_guards.py

fix(tools): execute_code shares the interpreter-kill rejection text; collapse redundant supervisor branch

2026-09-18 12:49:13 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

fix(plugins): only mark a timed-out hook worker abandoned while it still holds its token

2026-09-15 10:48:49 +05:30

terminal_tool_sudo.py

fix(gateway): include command context in sudo password requests

2026-09-15 02:22:22 -05:00

terminal_tool.py

fix(tools): sanitize cwd overrides written into live container envs

2026-09-18 09:54:45 -07:00

thread_context.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

threat_patterns.py

fix(threat-scanner): gate ssh_access on every mutating verb, not just copy verbs

2026-09-14 16:16:08 -07:00

tip_tool.py

…

tirith_security.py

fix(tirith): half-open the circuit breaker instead of latching it open

2026-09-18 09:59:54 -07:00

todo_tool.py

…

tool_backend_helpers.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

tool_output_limits.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

tool_output_truncate.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

tool_result_storage.py

test: fold host spillover verification into the size-probe invariant

2026-09-15 03:41:43 -07:00

tool_search_catalog.py

feat(tool_search): long hunts for nonexistent tools now return no results instead of incidental matches

2026-09-13 21:04:08 -07:00

tool_search_validation.py

fix(tool_search): cover the dispatcher's local-entry guard directly; reuse _core_tool_names

2026-09-18 09:24:54 -07:00

tool_search.py

fix(tools): tool_call rejections restate the single-entry shape and stop misdirecting deferred names

2026-09-18 09:24:54 -07:00

tour_tool.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

transcription_audio.py

…

transcription_cloud.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

transcription_command.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

transcription_common.py

fix(stt): preserve subprocess error details

2026-09-16 17:21:37 -07:00

transcription_local.py

fix(stt): treat a partial whisper cache as a cache miss

2026-09-15 05:36:37 -07:00

transcription_tools.py

fix(stt): consume lazy whisper segments inside the CUDA→CPU retry guard

2026-09-15 18:25:17 -07:00

tts_command_provider.py

…

tts_streaming.py

fix(tts): prefer explicit XAI_API_KEY over subscription OAuth in streaming TTS

2026-09-18 09:47:06 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

refactor(gateway): every Ogg/Opus voice transcode routes through base.transcode_to_ogg_opus

2026-09-13 05:32:38 -07:00

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

fix(gemini): route Vertex AI express keys (AQ.) to aiplatform instead of 403ing on AI Studio

2026-09-18 09:28:39 -07:00

tts_tool_speaker.py

…

tts_tool.py

fix(tts): xAI TTS availability probe prefers XAI_API_KEY like the synthesis paths

2026-09-18 09:47:06 -07:00

url_safety.py

fix(url_safety): refuse fake-ip declarations that overlap reserved address classes

2026-09-16 17:12:11 -07:00

video_generation_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

vision_tools_history_budget.py

fix(vision): reserve the per-image embed slot atomically

2026-09-17 09:02:55 -07:00

vision_tools_image_prep.py

feat(vision): decode HEIF/HEIC/AVIF images (iPhone photos)

2026-09-13 09:18:54 -07:00

vision_tools.py

fix(vision): reserve the per-image embed slot atomically

2026-09-17 09:02:55 -07:00

voice_client_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

voice_live.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

voice_mode_transcript.py

…

voice_mode.py

fix(voice): retry a timed-out audio input stream start once

2026-09-13 14:39:29 -07:00

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

web_tools_extract.py

fix(web): key extract cache on metadata.sourceURL too, pin redirect case

2026-09-15 18:42:38 -07:00

web_tools_rescue.py

fix(web): rescue eligibility asks the provider whether the ring was walked

2026-09-15 18:43:05 -07:00

web_tools_truncate.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

web_tools.py

fix(web): per-capability backend key no longer reroutes the other capability

2026-09-16 17:43:40 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

x_search_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

xai_http.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

xai_video_tools.py

…

yuanbao_tools.py

…