Teknium 65117671e3 fix(gateway): apply platform-disabled skill gate to bundle invocations (#59156) ...

Skill bundles load their member skills via _load_skill_payload directly,
bypassing the scan-time disabled filter in get_skill_commands(). PR #58888
closed this gap for stacked slash-skill invocations, but /<bundle> dispatch
in the gateway had the same class of bypass: a skill an operator disabled
for a platform via skills.platform_disabled still got its full content
injected when referenced by a bundle.

build_bundle_invocation_message() now accepts a platform kwarg, filters
members against get_disabled_skill_names(platform=...), and reports skipped
skills in the bundle header. Gateway dispatch passes the event's platform
explicitly (env-var resolution can't be trusted in the multi-platform
gateway process, same reasoning as the #58888 gate).

2026-07-05 14:48:11 -07:00

..

lsp

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

pet

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

secret_sources

fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls

2026-06-08 22:46:57 -07:00

transports

feat(mcp): adopt mcp__server__tool naming convention

2026-07-05 13:40:21 -07:00

__init__.py

…

account_usage.py

feat(billing): /credits command — balance + portal top-up handoff (#44776)

2026-06-12 08:51:10 +00:00

agent_init.py

fix(copilot): set x-initiator per turn so user prompts bill as premium requests (salvage #4097) (#58544)

2026-07-05 00:44:15 -07:00

agent_runtime_helpers.py

Revert "Merge pull request #58698 from kshitijk4poor/feat/pre-tool-call-approve-escalation"

2026-07-06 02:36:52 +05:30

anthropic_adapter.py

fix: complete OAuth-UA salvage follow-up (stale comment + test keychain isolation)

2026-07-04 15:16:13 +05:30

async_utils.py

…

auxiliary_client.py

fix(agent): honor auxiliary.<task>.base_url/api_key when provider is passed explicitly

2026-07-05 14:41:43 -07:00

azure_identity_adapter.py

…

background_review.py

fix(review): isolate the background-review fork from the canonical session

2026-07-01 16:21:39 +05:30

bedrock_adapter.py

fix(bedrock): check boto3 version >= 1.34.59 before using converse_stream

2026-06-15 05:25:17 -07:00

billing_view.py

feat(billing): /billing terminal billing — interactive TUI + CLI client (#45449)

2026-06-19 01:53:32 +05:30

bounded_response.py

fix(agents): bound streaming error-response body reads

2026-07-05 14:00:20 -07:00

browser_provider.py

…

browser_registry.py

style: restore PEP8 blank-line separation after dead-code removal

2026-05-29 04:22:27 -07:00

chat_completion_helpers.py

fix(poolside): handle integer finish_reason and tool_call id

2026-07-04 15:44:50 -07:00

codex_responses_adapter.py

fix(codex): route commentary-phase preamble text to reasoning channel (fixes #41293)

2026-07-05 06:29:45 -07:00

codex_runtime.py

fix(codex): stream commentary deltas through the reasoning channel

2026-07-05 06:29:45 -07:00

coding_context.py

feat(agent): add configurable coding_instructions

2026-06-30 00:59:59 -05:00

context_breakdown.py

feat(desktop): add context usage breakdown popover

2026-06-29 09:18:10 -04:00

context_compressor.py

fix(compressor): keep a user turn when compression would drop the last one

2026-07-05 21:41:44 +05:30

context_engine.py

fix(context): clamp -1 post-compression sentinel in sibling status paths

2026-07-01 13:36:50 +05:30

context_references.py

fix(security): anchor @file context refs to canonical read deny-list

2026-07-01 02:43:49 -07:00

conversation_compression.py

refactor(compression): reuse _fresh_compaction_message_copy in user-turn guard

2026-07-04 21:04:27 +05:30

conversation_loop.py

chore(providers): remove dead cloudcode-pa quota-fallback branches (#51489)

2026-07-05 13:44:33 -07:00

copilot_acp_client.py

fix(agent): stream copilot ACP chat completions

2026-06-28 22:52:51 -07:00

credential_persistence.py

feat(auth): make xAI Grok OAuth device-code-only, drop loopback login

2026-07-02 13:17:41 -07:00

credential_pool.py

fix(auth): remove stale loopback_pkce reference in xAI quarantine removal list

2026-07-02 13:17:41 -07:00

credential_sources.py

feat(auth): make xAI Grok OAuth device-code-only, drop loopback login

2026-07-02 13:17:41 -07:00

credits_tracker.py

feat(billing): /credits command — balance + portal top-up handoff (#44776)

2026-06-12 08:51:10 +00:00

curator_backup.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

curator.py

fix(curator): never archive cron-referenced skills + floor use=0 pruning (#54443)

2026-06-28 15:10:21 -07:00

display.py

feat(display): friendly human-phrased tool labels for built-in tools (#55166)

2026-06-29 20:31:17 -07:00

error_classifier.py

feat(errors): fail fast on TLS certificate verification failures with fix hints (#57992)

2026-07-05 02:05:51 -07:00

errors.py

fix(agent,gateway,doctor): add SSL CA cert bundle fail-fast guard

2026-06-13 21:14:32 -07:00

file_safety.py

fix(image-gen): route local-input credential guard through one shared chokepoint + cover xai (#57698)

2026-07-03 18:47:53 +05:30

gemini_native_adapter.py

fix(agents): bound streaming error-response body reads

2026-07-05 14:00:20 -07:00

gemini_schema.py

…

i18n.py

fix(packaging): ship locales/ i18n catalogs in wheel, sdist, and Nix (#38383)

2026-06-03 12:00:27 -07:00

image_gen_provider.py

feat(image-gen): add image-to-image / editing to image_generate (#48705)

2026-06-18 22:13:07 -07:00

image_gen_registry.py

…

image_routing.py

Guard native image routing with file safety

2026-07-05 03:15:03 -07:00

insights.py

refactor(insights): drop dead pricing/duration wrappers, call usage_pricing directly (#40618)

2026-06-07 18:33:20 -07:00

iteration_budget.py

…

jiter_preload.py

…

learn_prompt.py

fix(learn): honor requirements mixed with sources in /learn requests (#55956)

2026-06-30 16:56:01 -07:00

learning_graph_render.py

fix: cover remaining GNU-only %-d strftime site in learning graph render

2026-07-05 00:59:35 -07:00

learning_graph.py

fix(learning_graph): guard non-dict metadata so /journey can't crash

2026-07-01 16:25:48 -05:00

learning_mutations.py

refactor(journey): route memory mutations through MemoryStore atomic I/O

2026-06-30 15:16:21 -05:00

lmstudio_reasoning.py

…

manual_compression_feedback.py

…

markdown_tables.py

…

memory_manager.py

fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)

2026-07-02 04:20:43 -07:00

memory_provider.py

fix(backup): capture memory-provider state stored outside HERMES_HOME (#50325)

2026-06-21 12:03:46 -07:00

message_content.py

fix(openviking): preserve structured sync attribution

2026-06-19 15:23:41 +08:00

message_sanitization.py

fix(agent): close tool-call sequence on all interrupt aborts, not just finalize_turn

2026-06-25 12:24:34 -05:00

moa_loop.py

fix(moa): apply prompt-caching decoration to the aggregator's one-shot synthesis call

2026-07-04 20:59:02 +05:30

moa_trace.py

fix(moa): capture streamed aggregator output into full-turn traces (#56312)

2026-07-01 04:07:46 -07:00

model_metadata.py

fix(agent): self-review follow-ups on vLLM local-context salvage

2026-07-03 03:36:22 +05:30

models_dev.py

…

moonshot_schema.py

fix(moonshot): handle union type arrays in tool schemas

2026-06-13 05:51:41 -07:00

nous_rate_guard.py

…

onboarding.py

fix(config): close unreadable-overwrite bug class at a single chokepoint

2026-07-05 23:00:34 +05:30

oneshot.py

feat(agent): one-shot LLM helper + llm.oneshot gateway RPC (#51261)

2026-06-23 08:01:50 +00:00

plugin_llm.py

…

portal_tags.py

…

process_bootstrap.py

fix(agent): apply pool-level keepalive to the process_bootstrap sibling builder

2026-07-05 03:14:55 -07:00

prompt_builder.py

fix(agent): limit .hermes.md parent walk to git repos only

2026-06-28 20:46:32 -07:00

prompt_caching.py

fix(prompt-caching): align _can_carry_marker with last-part-dict marking

2026-07-04 13:54:27 +05:30

rate_limit_tracker.py

…

reasoning_timeouts.py

fix(agent): detect thinking-timeout for reasoning models and surface actionable guidance instead of misleading file-write advice

2026-06-25 19:00:48 -07:00

redact.py

fix(redact): skip env-lookup exception for JSON/YAML config field redaction

2026-07-05 13:58:19 -07:00

replay_cleanup.py

fix(tui): sanitize replay history on WebUI/TUI session resume (#29086) (#53939)

2026-06-27 20:56:49 -07:00

retry_utils.py

fix: handle named custom providers and Z.AI overload retries

2026-06-25 00:17:17 -07:00

runtime_cwd.py

fix(desktop): stabilize project folder sessions (#37586)

2026-06-02 20:23:09 +00:00

secret_scope.py

feat(gateway): multiplex phase 2 — fail-closed profile credential isolation (Workstream A)

2026-06-19 07:34:15 -07:00

shell_hooks.py

feat(hooks): spill oversized hook-injected context to disk (#20468)

2026-07-05 13:51:26 -07:00

skill_bundles.py

fix(gateway): apply platform-disabled skill gate to bundle invocations (#59156)

2026-07-05 14:48:11 -07:00

skill_commands.py

feat(skills): stacked slash-skill invocations — /skill-a /skill-b do XYZ (#57987)

2026-07-05 02:20:01 -07:00

skill_preprocessing.py

fix(windows): hide console-window flash on backend git/gh/wmic/bash subprocess spawns

2026-06-28 05:28:45 -07:00

skill_utils.py

fix(curator): protect external skills from background curation

2026-06-25 22:03:02 -07:00

ssl_guard.py

fix(ssl): align guard docs and escape hatch

2026-06-13 21:14:32 -07:00

ssl_verify.py

fix(agent): honor custom CA certs on aux client + harden TLS resolution

2026-07-02 04:51:56 +05:30

stream_diag.py

…

subdirectory_hints.py

fix(subdirectory_hints): catch RuntimeError from Path.expanduser()

2026-07-01 04:55:15 -07:00

system_prompt.py

feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)

2026-06-22 06:42:30 -07:00

think_scrubber.py

…

thinking_timeout_guidance.py

fix(agent): detect thinking-timeout for reasoning models and surface actionable guidance instead of misleading file-write advice

2026-06-25 19:00:48 -07:00

thread_scoped_output.py

fix(bg-review): scope stdout/stderr silencing to the worker thread (#55966)

2026-06-30 17:28:33 -07:00

title_generator.py

fix(title_generator): strip think blocks from LLM output before extracting title

2026-07-01 04:18:48 -07:00

tool_dispatch_helpers.py

fix(agent): wrap list-type untrusted content in untrusted_tool_result

2026-07-01 02:44:09 -07:00

tool_executor.py

Revert "Merge pull request #58698 from kshitijk4poor/feat/pre-tool-call-approve-escalation"

2026-07-06 02:36:52 +05:30

tool_guardrails.py

…

tool_result_classification.py

…

trajectory.py

…

transcription_provider.py

…

transcription_registry.py

…

tts_provider.py

…

tts_registry.py

…

turn_context.py

feat(hooks): spill oversized hook-injected context to disk (#20468)

2026-07-05 13:51:26 -07:00

turn_finalizer.py

fix(agent): persist recovered final responses

2026-07-01 03:34:49 -07:00

turn_retry_state.py

feat(vertex): add Google Vertex AI provider for Gemini (OAuth2)

2026-07-01 05:25:33 -07:00

usage_pricing.py

fix(usage): capture reasoning_tokens from completion_tokens_details on chat_completions (#57340)

2026-07-02 13:52:42 -07:00

verification_evidence.py

feat(agent): recognize focused ad-hoc verification scripts

2026-06-24 23:03:45 -05:00

verification_stop.py

feat(agent): restore surface-aware "auto" default for verify_on_stop

2026-06-30 01:43:08 -05:00

verify_hooks.py

feat(agent): add pre_verify hook and verify-on-stop coding guidance

2026-06-30 00:59:29 -05:00

vertex_adapter.py

security(vertex): route credential/project/region resolution through the profile secret scope

2026-07-02 06:07:56 +05:30

video_gen_provider.py

…

video_gen_registry.py

…

web_search_provider.py

…

web_search_registry.py

…