teknium1 735831f776 fix(mcp): reconcile chore lives in run_profile_reconcile; prune lazy + mid-connect servers ...

The MCP config reconciler was appended to the gateway/run.py facade; it moves to
gateway/run_profile_reconcile.py, which already owns post-boot MCP discovery, and
run.py keeps only the chore-table entry.

reconcile_mcp_servers_with_config() also drops a schema-cache (lazy) registration
whose entry is gone (its cached tools would otherwise stay callable and spawn the
server on first use) and reports a dropped server still mid-connect as "pending";
the chore retries on the next tick without waiting for another config edit.

test_cron_delivery_housekeeping neutralizes the chore: it pins the exact
scope/drain sequence of the housekeeping loop and the new chore enters each
profile's scope once per tick.

2026-09-13 06:29:12 -07:00

..

computer_use

fix(computer_use): approval goes through the shared gate; no callback now fails closed

2026-09-13 05:21:02 -07:00

environments

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

neutts_samples

…

tool_gateway

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958)

2026-09-11 15:45:43 +05:30

wakewords

…

__init__.py

…

AGENTS.md

feat(delegation): report a child's exited-but-unread notify processes to the parent

2026-09-07 12:50:29 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

feat(approval): flag cloud metadata-endpoint (IMDS) credential fetches for approval

2026-09-12 21:12:18 -07:00

approval_floors.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

approval_gateway_wait.py

…

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

…

approval.py

fix(tools): reload permanent allowlist by replacement

2026-09-12 22:03:19 -07:00

arg_coercion.py

…

async_delegation.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

…

bot_live_delivery.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

bot_mode_dm.py

fix(profiles): HERMES_HOME-blind path sites resolve through hermes_constants

2026-09-13 05:09:06 -07:00

bot_mode_probe.py

fix(profiles): HERMES_HOME-blind path sites resolve through hermes_constants

2026-09-13 05:09:06 -07:00

bot_relay.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

browser_camofox_state.py

…

browser_camofox.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

browser_cdp_tool.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(vault): dogfood fixes — offer save-login on every backend, keep the model off passwords, bind to the login tab

2026-09-10 10:35:07 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): suppress KeyboardInterrupt in atexit cleanup thread stop

2026-09-12 08:43:28 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

…

browser_tool_session.py

…

browser_tool_snapshot.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_tool_vision.py

…

browser_tool.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

browser_use_cli.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

browser_vault_tool.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

budget_config.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

checkpoint_manager.py

fix(security): re-resolve checkpoint/sticker-cache paths per call

2026-09-11 15:44:00 -07:00

clarify_gateway.py

…

clarify_tool.py

…

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

code_execution_rpc.py

…

code_execution_tool.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

code_kernel_remote.py

…

code_kernel.py

fix: adapt execute_code cell authority to the widened prompt-callback table

2026-09-10 10:35:07 -07:00

computer_use_tool.py

…

connections_tool.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

connector_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

credential_files.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

cronjob_job_args.py

fix(cron): make failed runs diagnosable without verbose delivery errors

2026-09-07 08:18:56 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

feat(cron): add resnap action to adopt the current global inference default

2026-09-12 20:57:21 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

fix(agent): isolate periodic scheduler callbacks from blocking siblings (#102574)

2026-09-09 12:17:57 +05:30

delegate_tool_config.py

refactor(delegation): resolve the child fallback chain through the canonical normalizer

2026-09-08 02:26:05 +05:30

delegate_tool_dispatch.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegate_tool_progress.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

delegate_tool_registry.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

delegate_tool.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(env_passthrough): tolerate an unresolvable home when keying the allowlist cache

2026-09-11 15:29:15 -07:00

env_probe.py

…

fal_common.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

…

file_operations_search.py

…

file_operations.py

fix(tools): stop read_file rendering a phantom empty line for newline-terminated files

2026-09-12 20:52:49 -07:00

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

…

file_tools_write_guards.py

fix(file-safety): bind the write-guard resolver fallback to the active profile

2026-09-11 15:29:15 -07:00

file_tools.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

focus_pane_tool.py

…

fuzzy_match.py

fix(tools): make the empty/whitespace old_string rejection actionable

2026-09-12 21:55:07 -07:00

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

feat(image_gen): add Meta Muse Image ($0.01/img) to the FAL catalog

2026-09-12 22:18:06 -07:00

image_generation_tool.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

image_source.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

…

kanban_tools.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

kanban_toolset_context.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

lazy_deps.py

chore(deps): mirror slack-sdk 3.44.1 pin in tools/lazy_deps.py

2026-09-12 08:12:38 -07:00

managed_gateway_auth.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

managed_tool_gateway.py

feat(desktop): connector cards that wait for the sign-in, and a guided first launch that holds together (#108292)

2026-09-12 10:00:06 +05:30

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: restore prior device OAuth state if persistence fails

2026-09-07 08:22:35 -07:00

mcp_oauth_manager.py

…

mcp_oauth_provider.py

fix(mcp-oauth): keep refresh_token when a refresh response omits it (#62333)

2026-09-08 17:44:51 -07:00

mcp_oauth.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

mcp_tool_common.py

…

mcp_tool_config.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

mcp_tool_content.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

mcp_tool_discovery.py

fix(mcp): reconcile chore lives in run_profile_reconcile; prune lazy + mid-connect servers

2026-09-13 06:29:12 -07:00

mcp_tool_errors.py

fix(mcp): widen the SSE fallback trigger and harden its guards (salvage #53764)

2026-09-12 21:05:29 -07:00

mcp_tool_handlers.py

fix(mcp): breaker opened by tool errors says "rejected", not "unreachable"

2026-09-12 09:05:56 -07:00

mcp_tool_health.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_lifecycle.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_loop.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

mcp_tool_registration.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_sampling.py

refactor: sms AIOHTTP_AVAILABLE flag; ElicitationHandler call_context defaults to a no-op thunk; drop stale TYPE_CHECKING/type-ignore in two tests

2026-09-07 22:47:33 +05:30

mcp_tool_schema.py

…

mcp_tool_scope.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_server_run.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_transport.py

fix(mcp): widen the SSE fallback trigger and harden its guards (salvage #53764)

2026-09-12 21:05:29 -07:00

mcp_tool.py

fix(mcp): widen the SSE fallback trigger and harden its guards (salvage #53764)

2026-09-12 21:05:29 -07:00

memory_tool_store.py

fix(memory): secure built-in memory lock files

2026-09-12 20:43:42 -07:00

memory_tool.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

fix(tools): reject V4A Add File onto an existing path

2026-09-12 21:13:40 -07:00

path_security.py

…

plugin_guard.py

…

preview_tool.py

…

process_registry_checkpoint.py

fix(multiplex): cron, kanban, /loop and completion paths for a served profile match its standalone gateway

2026-09-11 19:58:07 -07:00

process_registry_notifications.py

feat(delegation): report a child's exited-but-unread notify processes to the parent

2026-09-07 12:50:29 -07:00

process_registry_results.py

fix(tools): always redact durable process receipts

2026-09-07 08:25:33 -07:00

process_registry.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

project_tools.py

…

pty_query_responder.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

react_to_message_tool.py

…

read_extract.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix(tools): reject malformed tool parameter schemas at registration

2026-09-12 22:11:56 -07:00

schema_sanitizer.py

fix(schemas): preserve required intent without invalid boolean flags

2026-09-07 08:14:51 -07:00

self_repo_guard.py

…

send_message_senders.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

send_message_targets.py

…

send_message_tool.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

session_search_tool.py

fix(session_search): a bare session id never reads another profile's state.db

2026-09-11 06:24:11 -07:00

setup_mcp_tool.py

…

shell_heredoc.py

…

skill_ledger.py

…

skill_linter.py

…

skill_manager_batch.py

…

skill_manager_guards.py

…

skill_manager_tool.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

skill_provenance.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

skill_usage.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(skills_guard): dns_exfil no longer fires on the English noun "host" in prose

2026-09-12 05:09:26 -07:00

skills_hub_clawhub.py

fix(skills_hub): clawhub 429 keeps a zero Retry-After as zero

2026-09-13 05:09:43 -07:00

skills_hub_github.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

skills_hub_install.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skills_hub_models.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_hub_official.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_hub_search.py

…

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

fix(skills): bound streamed ClawHub ZIP downloads (#57571)

2026-09-12 21:50:30 -07:00

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_sync_client.py

…

skills_sync_optional.py

…

skills_sync.py

…

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

terminal_tool_backends.py

…

terminal_tool_background.py

feat(delegation): subagents hand background processes to the parent; leftovers are named, not trusted

2026-09-07 12:50:29 -07:00

terminal_tool_config.py

…

terminal_tool_guards.py

fix: explain the launchctl registration restriction without inventing KeepAlive

2026-09-07 06:05:51 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

terminal_tool_sudo.py

refactor(terminal): probe NOPASSWD only when a prompt would fire; drop the host-only probe

2026-09-11 11:19:53 +05:30

terminal_tool.py

fix(tools): never ambient-bridge TERMINAL_* under a profile home override

2026-09-11 15:29:15 -07:00

thread_context.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

threat_patterns.py

fix(threats): keep unrelated role prose in context files

2026-09-07 08:09:20 -07:00

tip_tool.py

…

tirith_security.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

todo_tool.py

…

tool_backend_helpers.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

tool_output_limits.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

tool_output_truncate.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

tool_result_storage.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

tool_search_catalog.py

fix(tool-search): a query no tool answers returns nothing, not five tools sharing one word (#106676)

2026-09-10 02:21:15 +05:30

tool_search_validation.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tour_tool.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

transcription_audio.py

…

transcription_cloud.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

transcription_command.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

transcription_common.py

…

transcription_local.py

…

transcription_tools.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_command_provider.py

…

tts_streaming.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

refactor(gateway): every Ogg/Opus voice transcode routes through base.transcode_to_ogg_opus

2026-09-13 05:32:38 -07:00

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_tool_speaker.py

…

tts_tool.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

url_safety.py

…

video_generation_tool.py

feat(video): OpenRouter backend covers every model on the live video catalog

2026-09-12 13:44:52 -07:00

vision_tools_image_prep.py

…

vision_tools.py

…

voice_client_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

voice_live.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

voice_mode_transcript.py

…

voice_mode.py

…

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

web_tools_extract.py

fix(web): cap web_extract provider dispatch with a wall-clock timeout (salvage #57180)

2026-09-12 21:30:38 -07:00

web_tools_rescue.py

…

web_tools_truncate.py

…

web_tools.py

…

website_policy.py

…

working_diff.py

…

write_approval.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

x_search_tool.py

…

xai_http.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

xai_video_tools.py

…

yuanbao_tools.py

…