teknium1 86c5febdd1 fix(mcp): watchdog wrap after OSV preflight + forward SIGTERM to child group ...

Two fixes on top of the salvaged parent-death watchdog:
- Apply the watchdog wrap AFTER the OSV malware preflight so the check
  inspects the real npx/uvx package instead of the python wrapper
  (the wrap previously made the preflight a silent no-op for every
  stdio server).
- The real server runs in its own process group under the watchdog, so
  the graceful-shutdown killpg no longer reached it; the watchdog now
  forwards SIGTERM/SIGINT to the child's group, keeping wedged servers
  killable on clean shutdown.

2026-07-07 15:16:00 -07:00

..

computer_use

fix(computer-use): sanitize env on the 4 remaining cua-driver spawn sites (#59165)

2026-07-05 14:48:20 -07:00

environments

fix(tools): keep shell snapshots owner-only

2026-07-07 05:22:42 -07:00

neutts_samples

…

__init__.py

…

ansi_strip.py

…

approval.py

fix(approval): wire gateway notify round-trip into the plugin escalation gate

2026-07-07 15:14:30 -07:00

async_delegation.py

fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)

2026-07-02 04:20:43 -07:00

binary_extensions.py

…

blueprints.py

…

browser_camofox_state.py

…

browser_camofox.py

fix(browser): block Camofox input on private pages

2026-07-03 03:27:47 -07:00

browser_cdp_tool.py

fix(browser): apply private-page guard to browser_cdp frame_id routing

2026-07-03 03:27:47 -07:00

browser_dialog_tool.py

…

browser_supervisor.py

fix(browser): harden browser tool safety boundaries

2026-07-01 05:04:41 -07:00

browser_tool.py

fix(browser): guard Camofox eval private pages

2026-07-02 13:10:30 +05:30

budget_config.py

…

checkpoint_manager.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

clarify_gateway.py

fix: accept typed clarify choice replies

2026-06-28 04:13:19 -07:00

clarify_tool.py

…

close_terminal_tool.py

fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper

2026-07-02 03:00:59 -07:00

code_execution_tool.py

fix(interrupt): run user-approved commands from a clean interrupt slate

2026-07-06 04:58:42 -07:00

computer_use_tool.py

…

credential_files.py

fix(vision): unified image-source resolver + terminal-backend confinement

2026-07-04 15:30:50 -07:00

cronjob_tools.py

security(cron): block base_url overrides that exfiltrate provider credentials

2026-07-01 14:23:01 +05:30

daemon_pool.py

fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)

2026-07-02 04:20:43 -07:00

debug_helpers.py

…

delegate_tool.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

discord_tool.py

fix(discord): bound REST response reads

2026-07-07 02:40:04 -07:00

env_passthrough.py

fix(security): strip dynamic Hermes secrets from all subprocess spawn env

2026-07-01 14:37:22 +05:30

env_probe.py

perf: cut first-turn time-to-first-token by ~80% (all platforms) (#59332)

2026-07-05 21:37:33 -07:00

fal_common.py

…

feishu_doc_tool.py

…

feishu_drive_tool.py

…

file_operations.py

…

file_state.py

…

file_tools.py

fix: disclose mid-line clamp in truncation hint

2026-07-05 14:42:05 -07:00

fuzzy_match.py

fix(patch): preserve file Unicode when unicode_normalized strategy matches

2026-07-01 17:48:32 +05:30

homeassistant_tool.py

…

hook_output_spill.py

feat(hooks): spill oversized hook-injected context to disk (#20468)

2026-07-05 13:51:26 -07:00

image_generation_tool.py

…

image_source.py

security(vision): route local-file inputs through the shared credential-read guard

2026-07-05 00:47:54 -07:00

interrupt.py

fix(interrupt): run user-approved commands from a clean interrupt slate

2026-07-06 04:58:42 -07:00

kanban_tools.py

feat(kanban): route notifications via owning profile + wake creator agent

2026-07-02 00:05:48 +05:30

lazy_deps.py

feat(sessions): trace export + HF upload via 'sessions export --format trace' (#60507)

2026-07-07 15:12:49 -07:00

managed_tool_gateway.py

…

mcp_oauth_manager.py

fix(mcp-oauth): anchor 401 handler task to prevent GC mid-flight

2026-06-30 16:56:15 -07:00

mcp_oauth.py

refactor(mcp): DRY the non-interactive OAuth guard + positive-control test

2026-07-04 14:10:33 +05:30

mcp_stdio_watchdog.py

fix(mcp): watchdog wrap after OSV preflight + forward SIGTERM to child group

2026-07-07 15:16:00 -07:00

mcp_tool.py

fix(mcp): watchdog wrap after OSV preflight + forward SIGTERM to child group

2026-07-07 15:16:00 -07:00

memory_tool.py

fix: default memory null target to memory store (#46356)

2026-07-07 02:10:43 -07:00

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

…

process_registry.py

fix(desktop): tree-kill Windows terminal descendants

2026-06-30 04:23:27 -05:00

project_tools.py

…

read_extract.py

…

read_terminal_tool.py

fix(config): accept 'on' as truthy for env flags via shared env_var_enabled helper

2026-07-02 03:00:59 -07:00

registry.py

fix(security): use caller package root for deregister opt-in policy lookup

2026-07-01 15:37:58 +05:30

schema_sanitizer.py

fix(schema): preserve multi-type arrays as anyOf instead of dropping branches

2026-07-07 02:52:17 -07:00

send_message_tool.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

session_search_tool.py

fix(session_search): demote cron below interactive sessions in discover ranking (#53597)

2026-06-27 04:41:22 -07:00

skill_manager_tool.py

fix(skills): widen call-time skills-dir resolution to skill_manager_tool

2026-07-07 05:14:00 -07:00

skill_provenance.py

…

skill_usage.py

…

skills_ast_audit.py

…

skills_guard.py

…

skills_hub.py

fix(skills): don't request Brotli for the centralized skills index

2026-07-05 22:21:05 -07:00

skills_sync.py

fix(skills): skip shadowing when external_dirs provides the skill

2026-06-27 21:07:53 -07:00

skills_tool.py

fix(skills): resolve skills dir from active profile

2026-07-07 05:14:00 -07:00

slash_confirm.py

…

terminal_tool.py

fix(interrupt): run user-approved commands from a clean interrupt slate

2026-07-06 04:58:42 -07:00

thread_context.py

…

threat_patterns.py

fix: bound threat-pattern/FTS5 regex input and cover V4A Move-File edits

2026-07-01 01:05:28 -07:00

tirith_security.py

fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)

2026-06-26 15:26:08 +05:30

todo_tool.py

fix(agent): restrict todo hydration to paired assistant todo calls

2026-07-01 01:02:17 -07:00

tool_backend_helpers.py

…

tool_output_limits.py

…

tool_result_storage.py

fix: keep persisted tool results inside their storage directory

2026-06-30 16:39:41 -07:00

tool_search.py

…

transcription_tools.py

fix(windows): hide remaining backend console-flash legs missed on main

2026-06-28 10:19:21 -05:00

tts_tool.py

fix(tts): coerce direct-only OpenAI model on the managed audio gateway

2026-07-03 05:30:16 -05:00

url_safety.py

fix: repair URL authority whitespace before web fetches (#46363)

2026-07-07 02:39:36 -07:00

video_generation_tool.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

vision_tools.py

security(vision): route local-file inputs through the shared credential-read guard

2026-07-05 00:47:54 -07:00

voice_mode.py

…

web_tools.py

fix(web): correct 'disabled plugin' diagnosis for web backends (#59573)

2026-07-06 04:38:17 -07:00

website_policy.py

fix(website-policy): key blocklist cache on the real default config path

2026-07-04 15:08:49 -07:00

write_approval.py

…

x_search_tool.py

…

xai_http.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

xai_video_tools.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

yuanbao_tools.py

…