Teknium 13eb190479 fix(tools): image-bearing tool results stay inside the turn budget; spills and refusals keep their content (review) ...

Greptile on b17398db089:
- `enforce_turn_budget` took `len(content)` of every tool message. An
  image-bearing result reaches it as a part list, so it counted parts,
  not characters: six 60K-char MCP results with screenshots totalled
  ~18 "chars" and nothing was spilled. Part lists now count their text
  characters and spill their largest text part (images stay inline).
- `_persist_multimodal_text_parts` spilled every text part under the same
  tool_call_id, so with a small `tool_budget.mcp_result_size_chars` the
  notes part overwrote the tool text's spill file. Each spilled part now
  gets its own id.
- When `vision.max_calls_per_image` refused every image, the refusal lines
  were appended after the handler's JSON closing brace. They now go into
  the envelope's `result`.

2026-10-06 22:54:13 -07:00

..

bot_desktop

…

computer_use

fix(mcp): skipped MCP images free their slot, embeds keep the configured budget; capture calls the gate directly (review)

2026-10-06 22:54:13 -07:00

connectors

fix(catalog): sessions off the desktop no longer see manage_catalog through tool_search (review)

2026-10-07 01:01:14 +05:30

environments

fix(bundle): packaged installs run their own hermes and name their own app (review)

2026-10-07 01:29:02 +05:30

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

fix(mcp): never attach an undecodable MCP image; registry-dispatch tests (review)

2026-10-06 22:54:13 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

approval_detection.py

feat(approvals): flag credential uploads and invisible Unicode in terminal commands

2026-10-06 14:22:13 -07:00

approval_floors.py

…

approval_gateway_wait.py

feat(plugins): on_human_input_request / on_human_input_resolved hooks

2026-10-05 01:15:16 -07:00

approval_human_wait.py

…

approval_prompt.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

approval_smart.py

…

approval.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

…

async_delegation.py

…

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

…

bot_live_delivery.py

…

bot_mode_dm.py

…

bot_mode_probe.py

…

bot_relay.py

…

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_capture.py

feat(browser): public captured CDP call seam for trusted plugins

2026-10-05 17:10:58 -07:00

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

feat(browser): public captured CDP call seam for trusted plugins

2026-10-05 17:10:58 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(processes): signal a process group only when the child leads it

2026-10-05 16:42:57 -05:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

…

browser_tool_session.py

…

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

…

browser_use_cli.py

…

browser_vault_tool.py

…

budget_config.py

…

checkpoint_maintenance.py

…

checkpoint_manager_profile_rename.py

…

checkpoint_manager.py

…

checkpoint_pruning.py

…

clarify_gateway.py

…

clarify_tool.py

feat(plugins): on_human_input_request / on_human_input_resolved hooks

2026-10-05 01:15:16 -07:00

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

…

code_execution_rpc.py

…

code_execution_tool.py

…

code_kernel_remote.py

…

code_kernel.py

…

computer_use_tool.py

…

credential_files.py

…

cronjob_job_args.py

…

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(tools): explicit empty toolset allowlist must fail closed, not open

2026-10-06 14:51:26 -04:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

fix(delegation): collect a child's real result in a grace window after the stale-heartbeat verdict

2026-10-05 16:40:38 -05:00

delegate_tool_config.py

…

delegate_tool_dispatch.py

…

delegate_tool_progress.py

…

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

fix(delegation): collect a child's real result in a grace window after the stale-heartbeat verdict

2026-10-05 16:40:38 -05:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(skills): make env_passthrough registrations visible across tool context snapshots

2026-10-05 16:46:53 -05:00

env_probe.py

…

fal_common.py

…

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

file_operations_lint.py

…

file_operations_search.py

…

file_operations.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

file_tools_write_guards.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

file_tools.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

focus_pane_tool.py

…

fuzzy_match.py

…

hook_output_spill.py

…

human_input_hooks.py

feat(plugins): on_human_input_request / on_human_input_resolved hooks

2026-10-05 01:15:16 -07:00

image_generation_catalog.py

…

image_generation_managed.py

…

image_generation_tool.py

…

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

feat(kanban): one workflow definition for columns, traits and transitions

2026-10-07 11:19:10 +05:30

kanban_tools.py

…

kanban_toolset_context.py

…

lazy_deps.py

…

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(web): restore free fast search for anonymous guest users

2026-10-04 00:10:54 +05:30

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_liveness.py

fix(platform): an unreadable GPU classifies as unknown, so requires.gpu fails open as documented

2026-10-03 10:26:12 -07:00

mcp_oauth_device.py

…

mcp_oauth_manager.py

…

mcp_oauth_provider.py

…

mcp_oauth.py

…

mcp_schema_cache.py

…

mcp_tool_agent.py

fix(catalog): sessions off the desktop no longer see manage_catalog through tool_search (review)

2026-10-07 01:01:14 +05:30

mcp_tool_common.py

…

mcp_tool_config.py

fix(mcp): drive user-hit candidates from the child env's PATHEXT

2026-10-04 12:42:25 -05:00

mcp_tool_content.py

fix(tools): image-bearing tool results stay inside the turn budget; spills and refusals keep their content (review)

2026-10-06 22:54:13 -07:00

mcp_tool_discovery.py

fix(mcp): keep a bare stdio command on the user's PATH semantics

2026-10-04 12:42:25 -05:00

mcp_tool_errors.py

…

mcp_tool_handlers.py

fix(mcp): MCP images honour vision.max_calls_per_image and prep on the vision pool (review)

2026-10-06 22:54:13 -07:00

mcp_tool_health.py

…

mcp_tool_lifecycle.py

…

mcp_tool_loop.py

…

mcp_tool_node_abi.py

…

mcp_tool_registration.py

fix(mcp): a vision model sees MCP ImageContent instead of only its MEDIA: path

2026-10-06 22:54:13 -07:00

mcp_tool_sampling.py

fix(mcp): make sampling.tools capability opt-in via expose_client_tools

2026-10-05 16:47:32 -05:00

mcp_tool_schema.py

…

mcp_tool_scope.py

…

mcp_tool_server_run.py

…

mcp_tool_transport.py

…

mcp_tool.py

…

memory_tool_store.py

feat(telemetry): memory and compression rows say why they failed or were skipped

2026-10-05 22:07:41 -07:00

memory_tool.py

feat(telemetry): memory and compression rows say why they failed or were skipped

2026-10-05 22:07:41 -07:00

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

fix(tools): a task's own patch keeps its full-file write baseline

2026-10-06 15:39:24 +00:00

path_security.py

…

plugin_guard_context.py

…

plugin_guard.py

…

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_env_log.py

fix(process): a kill's result stands on every backend, and a failed scope stop never counts as stopped (#133648)

2026-10-06 00:00:57 -04:00

process_registry_notifications.py

…

process_registry_results.py

…

process_registry_termination.py

fix(process): a completion is published once, by its owner, with its final output

2026-10-05 14:35:39 -04:00

process_registry.py

fix(lint): stdin guard catches calls whose arguments start on the next line (review)

2026-10-07 01:03:03 +05:30

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

fix(lint): stdin guard catches calls whose arguments start on the next line (review)

2026-10-07 01:03:03 +05:30

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

…

schema_sanitizer.py

…

self_repo_guard.py

fix(lint): stdin guard catches calls whose arguments start on the next line (review)

2026-10-07 01:03:03 +05:30

send_message_senders.py

fix(qqbot): degrade media send failure to text + warning instead of dropping it

2026-10-05 18:39:43 -05:00

send_message_targets.py

fix: send_message to a Home Assistant target names the install command while its plugin is absent

2026-10-04 00:08:20 -07:00

send_message_tool.py

feat(qqbot): add support for proactive media delivery via send_message

2026-10-05 18:39:43 -05:00

session_search_tool.py

…

shell_heredoc.py

…

skill_ledger.py

…

skill_linter.py

…

skill_manager_batch.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skill_manager_guards.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skill_manager_tool.py

fix(skills): resolve the frontmatter name _find_skill ignores

2026-10-06 12:00:47 -04:00

skill_provenance.py

…

skill_usage.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

…

skills_hub_clawhub.py

…

skills_hub_github.py

fix(skills): one install name per skills.sh skill; never swap a gone GitHub path for another skill

2026-10-05 15:56:28 -07:00

skills_hub_install.py

…

skills_hub_models.py

…

skills_hub_official.py

fix(skills): one install name per skills.sh skill; never swap a gone GitHub path for another skill

2026-10-05 15:56:28 -07:00

skills_hub_search.py

…

skills_hub_skillssh.py

fix(skills): one install name per skills.sh skill; never swap a gone GitHub path for another skill

2026-10-05 15:56:28 -07:00

skills_hub_sources.py

…

skills_hub.py

…

skills_sync_bundled_ops.py

fix(skills): built-in restore stays in the skills tree, marks the skill active, and names a hub install that shadows it

2026-10-05 16:00:48 -07:00

skills_sync_optional.py

…

skills_sync.py

…

skills_tool_dedup.py

…

skills_tool_plugin.py

fix(skills): expose plugin skills to interactive commands

2026-10-05 00:23:05 -07:00

skills_tool_setup.py

…

skills_tool.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

slash_confirm.py

…

spill_safety.py

…

stt_lease.py

…

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

…

terminal_tool_backends.py

…

terminal_tool_background.py

…

terminal_tool_config.py

…

terminal_tool_guards.py

…

terminal_tool_lifecycle.py

…

terminal_tool_macos_open.py

…

terminal_tool_result.py

fix(terminal): hermes chat -q never waits on a sudo prompt nobody answers

2026-10-05 20:08:11 +05:30

terminal_tool_sudo.py

fix(terminal): hermes chat -q never waits on a sudo prompt nobody answers

2026-10-05 20:08:11 +05:30

terminal_tool.py

refactor(security): remove the bundled tirith scanner from core

2026-10-06 14:22:13 -07:00

thread_context.py

…

threat_patterns.py

…

tip_tool.py

…

todo_tool.py

fix(todo): reject empty content instead of substituting '(no description)' (#44496)

2026-10-06 09:53:34 -04:00

tool_backend_helpers.py

fix(web): pick own key or Nous Tool Gateway per web capability in Desktop

2026-10-06 02:53:56 -07:00

tool_labels.py

…

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

fix(tools): image-bearing tool results stay inside the turn budget; spills and refusals keep their content (review)

2026-10-06 22:54:13 -07:00

tool_search_catalog.py

…

tool_search_validation.py

fix(skills): brace the remaining role-tag placeholders that reach the model

2026-10-04 11:56:08 +05:30

tool_search.py

feat(desktop): every desktop chat can install catalog plugins; tools gated by session platform

2026-10-07 01:01:14 +05:30

tour_presets.py

fix(tour): built-in tour no longer opens over a chat the user switched to (review)

2026-10-07 01:02:34 +05:30

tour_tool.py

fix(tour): gui_tour rejects preset with steps, and the docs describe the built-in tour (review)

2026-10-07 01:02:34 +05:30

transcription_audio.py

…

transcription_chunking.py

refactor(stt): clear code-health blockers on the salvaged xAI pin

2026-10-06 12:08:49 -07:00

transcription_cloud.py

fix(stt): every model picker lists the runtime catalog; Mistral STT is selectable again

2026-10-06 12:08:49 -07:00

transcription_command.py

fix(stt): opt-in 16 kHz mono normalization for command STT providers

2026-10-05 16:40:15 -05:00

transcription_common.py

fix(stt): local turbo model is selectable in every STT picker (#79629)

2026-10-06 22:01:38 -07:00

transcription_local.py

fix(stt): local turbo model is selectable in every STT picker (#79629)

2026-10-06 22:01:38 -07:00

transcription_streaming.py

feat(stt): live transcription while you speak on CLI, TUI and Desktop (stt.streaming)

2026-10-06 12:50:31 -07:00

transcription_tools.py

refactor(stt): clear code-health blockers on the salvaged xAI pin

2026-10-06 12:08:49 -07:00

transcription_whisper_cpp.py

refactor(stt): look up whisper.cpp through pm directly

2026-10-05 12:37:46 -04:00

tts_command_provider.py

…

tts_streaming.py

fix(tts): validate a plugin's stream rate once; keep nous off plugin routing

2026-10-06 00:52:41 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

fix(tts): validate a plugin's stream rate once; keep nous off plugin routing

2026-10-06 00:52:41 -07:00

tts_tool_providers.py

…

tts_tool_speaker.py

…

tts_tool.py

fix(tts): make tts.provider the authoritative backend selector

2026-10-05 16:42:22 -05:00

url_safety.py

…

video_generation_tool.py

…

vision_tools_history_budget.py

…

vision_tools_image_prep.py

…

vision_tools.py

fix(vision): computer_use captures honour image_input_mode and catalog text-only models

2026-10-06 22:54:13 -07:00

voice_client_config.py

feat(stt): live transcription while you speak on CLI, TUI and Desktop (stt.streaming)

2026-10-06 12:50:31 -07:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

feat(stt): live transcription while you speak on CLI, TUI and Desktop (stt.streaming)

2026-10-06 12:50:31 -07:00

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

…

web_tools.py

fix(web): pick own key or Nous Tool Gateway per web capability in Desktop

2026-10-06 02:53:56 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

refactor(approval): one "no user can answer" helper for every CLI-callback prompt

2026-10-05 20:08:11 +05:30

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

…

yuanbao_tools.py

…