etherman-os 2a3dbcaf46 fix(terminal): prevent corrupted session snapshots during init ...

The init snapshot dumped functions with a line-based filter:

    declare -f | grep -vE '^_[^_]'

That strips a function's *header* line (e.g. `_foo () `) but leaves the
orphaned `{ ... }` body behind, corrupting the snapshot that is sourced
before every command. Sourcing the torn snapshot runs leftover body code
and breaks subsequent commands (intermittent exit 127).

- Filter private (`_`-prefixed) functions by NAME via `declare -F` and
  dump only the wanted whole definitions, so a body is never torn. Guard
  against an empty name list (bare `declare -f` dumps everything).
- Treat a non-zero bootstrap exit code as snapshot-init failure, so
  execution safely falls back to login-shell-per-command mode.
- Add a regression test asserting snapshot_ready stays false when
  bootstrap exits non-zero.

Preserves the atomic-write ($BASHPID temp + mv -f) machinery from #38249.

2026-06-30 15:51:17 -07:00

..

__init__.py

…

conftest.py

…

test_accretion_caps.py

…

test_ansi_strip.py

…

test_approval_heartbeat.py

…

test_approval_interrupt.py

test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP

2026-06-21 13:33:48 -07:00

test_approval_plugin_hooks.py

…

test_approval.py

fix(security): harden heredoc approval, NFKC homograph fold, env-var filter

2026-06-30 02:59:46 -07:00

test_async_delegation.py

feat(delegation): background fan-out — parallel subagents, one consolidated return (#49734)

2026-06-20 11:27:12 -07:00

test_base_environment.py

fix(terminal): prevent corrupted session snapshots during init

2026-06-30 15:51:17 -07:00

test_blueprints.py

…

test_browser_camofox_auth.py

fix(browser): send Authorization header in Camofox HTTP calls when CAMOFOX_API_KEY is set

2026-06-29 01:26:24 -07:00

test_browser_camofox_ensure_tab.py

fix(tools): send listItemId instead of sessionKey in Camofox tab creation

2026-06-29 01:26:24 -07:00

test_browser_camofox_persistence.py

test(camofox): accept headers= kwarg in persistence test mocks

2026-06-29 01:26:24 -07:00

test_browser_camofox_state.py

…

test_browser_camofox_timeout.py

fix(tools): read browser.command_timeout in Camofox HTTP client

2026-06-29 01:26:24 -07:00

test_browser_camofox.py

fix(browser): force secret-pattern redaction on browser_type display

2026-06-25 22:02:22 -07:00

test_browser_cdp_override.py

fix(security): redact browser CDP endpoint logs

2026-06-29 04:25:26 -07:00

test_browser_cdp_tool.py

…

test_browser_chromium_autoinstall.py

feat(browser): auto-install Chromium binary on local cold-start failure

2026-06-28 12:25:15 -05:00

test_browser_chromium_check.py

fix(windows): cover remaining console-flash spawn legs (#54417)

2026-06-28 13:49:08 -07:00

test_browser_cleanup.py

…

test_browser_cloud_fallback.py

…

test_browser_cloud_provider_cache.py

…

test_browser_command_timeout_race.py

fix(browser_tool): resolve race in _get_command_timeout cache returning None (#14331)

2026-06-29 02:24:57 -07:00

test_browser_console.py

…

test_browser_content_none_guard.py

…

test_browser_eval_ssrf.py

fix(browser): close eval return-value SSRF bypass (sibling of #44731)

2026-06-28 02:42:01 -07:00

test_browser_eval_supervisor_path.py

…

test_browser_get_images_ssrf.py

fix(browser): extend private-network guard to browser_get_images

2026-06-28 14:25:10 -07:00

test_browser_hardening.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

test_browser_homebrew_paths.py

fix(windows): cover remaining console-flash spawn legs (#54417)

2026-06-28 13:49:08 -07:00

test_browser_hybrid_routing.py

…

test_browser_lightpanda.py

…

test_browser_open_timeout.py

test(browser): cover open timeout diagnostics and failed navigate title

2026-06-28 12:14:21 -05:00

test_browser_orphan_reaper.py

fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)

2026-06-21 15:23:47 -07:00

test_browser_secret_exfil.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_browser_snapshot_ssrf.py

fix(browser): allow local sidecar sessions to bypass SSRF guard

2026-06-28 02:42:01 -07:00

test_browser_ssrf_local.py

fix(browser): enable SSRF guard when terminal runs in container

2026-06-21 07:26:18 -07:00

test_browser_supervisor_healthcheck.py

…

test_browser_supervisor.py

…

test_browser_type_redaction.py

fix(browser): force secret-pattern redaction on browser_type display

2026-06-25 22:02:22 -07:00

test_budget_config.py

fix(agent): scale tool-output budget to the model context window (#23767)

2026-06-21 17:46:38 +05:30

test_checkpoint_manager.py

…

test_clarify_gateway.py

fix: accept typed clarify choice replies

2026-06-28 04:13:19 -07:00

test_clarify_tool.py

…

test_clipboard.py

…

test_code_execution_modes.py

…

test_code_execution_windows_env.py

…

test_code_execution.py

fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection

2026-06-21 16:55:12 -07:00

test_command_guards.py

…

test_computer_use_capture_routing.py

feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)

2026-06-22 06:42:30 -07:00

test_computer_use_vision_routing.py

…

test_computer_use.py

Merge remote-tracking branch 'origin/main' into pr-50994

2026-06-22 18:48:07 -05:00

test_config_null_guard.py

…

test_container_cwd_sanitize.py

fix(file-tools): sanitize host/relative cwd override before it reaches container sandbox (#54447) (#54616)

2026-06-29 15:32:20 +10:00

test_credential_files.py

fix(hermes-home): only honour legacy dir layout when it has content

2026-06-27 04:57:15 +05:30

test_credential_pool_env_fallback.py

fix(credentials): prefer ~/.hermes/.env over stale os.environ on key rotation (#55528)

2026-06-30 09:49:52 +00:00

test_cron_approval_mode.py

…

test_cron_prompt_injection.py

fix(security): align cron invisible-unicode set with install-time scanner

2026-06-26 01:11:11 -07:00

test_cronjob_run_immediate.py

fix(cron): execute job immediately on action='run'

2026-06-21 13:28:04 +05:30

test_cronjob_tools.py

fix(cron): tell the user TUI/CLI cron jobs are local-only at create time (#51683)

2026-06-23 23:27:48 -07:00

test_cross_profile_guard.py

…

test_daytona_environment.py

fix(daytona): quote single-upload mkdir parent path (#54440)

2026-06-28 14:33:03 -07:00

test_debug_helpers.py

…

test_delegate_composite_toolsets.py

…

test_delegate_subagent_timeout_diagnostic.py

…

test_delegate_summary_budget.py

fix(delegation): budget subagent summaries against parent context headroom

2026-06-30 03:07:40 -07:00

test_delegate_toolset_scope.py

fix(delegate): route subagent progress lines through _safe_print for ACP stdio

2026-06-30 03:16:22 -07:00

test_delegate.py

fix(tools): prune acp_command from delegate_task schema when no ACP CLI is on PATH

2026-06-30 03:41:46 -07:00

test_discord_tool.py

…

test_docker_cgroup_limits.py

fix(docker): gate resource limit flags on cgroup controller availability (#54516)

2026-06-29 11:01:08 +10:00

test_docker_config_migrate.py

test(docker): assert boot migration keeps .env byte-identical across reboots

2026-06-24 15:23:23 +10:00

test_docker_environment.py

fix(docker): gate resource limit flags on cgroup controller availability (#54516)

2026-06-29 11:01:08 +10:00

test_docker_find.py

…

test_docker_orphan_reaper_integration.py

…

test_dockerfile_immutable_install.py

refactor(ci): faster docker builds via --link and chmod removal

2026-06-26 19:15:18 -07:00

test_dockerfile_node_modules_perms.py

…

test_dockerfile_pid1_reaping.py

…

test_env_passthrough.py

fix(env-passthrough): fail closed when provider blocklist import fails

2026-06-28 02:05:43 -07:00

test_env_probe.py

…

test_execute_code_approval_cluster.py

…

test_feishu_tools.py

…

test_file_operations_edge_cases.py

…

test_file_operations.py

…

test_file_ops_cwd_tracking.py

…

test_file_read_guards.py

fix(file): anchor device symlink guard to task cwd

2026-06-21 12:16:10 -07:00

test_file_staleness.py

…

test_file_state_registry.py

…

test_file_sync_back.py

…

test_file_sync_perf.py

…

test_file_sync.py

…

test_file_tools_container_config.py

…

test_file_tools_cwd_resolution.py

fix(file-ops): keep worktree isolation when restoring preserved cwd (#26211)

2026-06-27 19:29:06 -07:00

test_file_tools_live.py

…

test_file_tools_tilde_profile.py

fix(file_tools): resolve tilde using profile home for file operations (#48552)

2026-06-23 03:17:47 +05:30

test_file_tools.py

fix(security): cover Move and no-space headers in patch_tool sensitive path check

2026-06-30 02:50:24 -07:00

test_file_write_safety.py

fix: use os.pathsep, add tests, update tips for multi-root support

2026-06-27 04:01:12 +05:30

test_find_shell.py

fix(terminal): prefer $SHELL over bash for background process spawning (#42203)

2026-06-26 20:45:32 +05:30

test_force_dangerous_override.py

…

test_fuzzy_match.py

fix(fuzzy-match): preserve boundary space after whitespace-normalized match

2026-06-26 01:55:27 +05:30

test_gateway_cwd_contract.py

…

test_hardline_blocklist.py

…

test_heartbeat_stale_thresholds.py

…

test_hermes_subprocess_env.py

fix(security): centralize credential-safe subprocess env (#29157)

2026-06-27 20:45:31 -07:00

test_hidden_dir_filter.py

…

test_homeassistant_tool.py

…

test_image_generation_artifacts.py

…

test_image_generation_env.py

…

test_image_generation_image_to_image.py

…

test_image_generation_plugin_dispatch.py

…

test_image_generation.py

krea

2026-06-25 12:38:33 -07:00

test_init_session_cwd_respect.py

…

test_interrupt.py

…

test_kanban_redaction.py

fix(security): redact secrets in kanban tool payloads before persistence

2026-06-21 12:02:30 -07:00

test_kanban_tools.py

fix(kanban): restrict goal_mode kanban_block to genuine external blockers

2026-06-30 14:29:42 -07:00

test_lazy_deps_durable_target.py

test(lazy-deps): make durable-target tests network-free

2026-06-25 09:20:13 +10:00

test_lazy_deps.py

…

test_line_ending_preservation.py

…

test_llm_content_none_guard.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

test_local_background_child_hang.py

…

test_local_env_blocklist.py

fix(terminal): strip VIRTUAL_ENV/CONDA_PREFIX from terminal subprocess env

2026-06-28 01:04:20 +05:30

test_local_env_cwd_recovery.py

…

test_local_env_windows_msys.py

…

test_local_interrupt_cleanup.py

fix(desktop): tree-kill Windows terminal descendants

2026-06-30 04:23:27 -05:00

test_local_shell_init.py

…

test_local_tempdir.py

…

test_managed_browserbase_and_modal.py

…

test_managed_media_gateways.py

…

test_managed_modal_environment.py

…

test_managed_tool_gateway.py

…

test_mcp_cancelled_error_propagation.py

…

test_mcp_capability_gating.py

test(mcp): cover 'unknown method' ping keepalive fallback (#50028)

2026-06-21 16:02:56 +05:30

test_mcp_circuit_breaker.py

fix(mcp): never permanently wedge the circuit breaker on a dead transport (#53599)

2026-06-27 04:39:54 -07:00

test_mcp_client_cert.py

…

test_mcp_dynamic_discovery.py

…

test_mcp_elicitation.py

…

test_mcp_empty_error_message.py

…

test_mcp_image_content.py

…

test_mcp_invalid_url.py

…

test_mcp_loop_profile_override.py

…

test_mcp_oauth_bidirectional.py

…

test_mcp_oauth_cold_load_expiry.py

…

test_mcp_oauth_integration.py

…

test_mcp_oauth_manager.py

test(mcp): make invalid_client tests interactive under hermetic env

2026-06-26 00:35:27 -07:00

test_mcp_oauth_metadata.py

…

test_mcp_oauth.py

fix(mcp): suppress interactive OAuth stdin prompts during background discovery (#35927)

2026-06-27 04:59:23 +05:30

test_mcp_preflight_content_type.py

fix(mcp): skip preflight content-type probe for OAuth servers

2026-06-28 04:47:39 -07:00

test_mcp_probe.py

…

test_mcp_reconnect_signal.py

…

test_mcp_sse_transport.py

…

test_mcp_stability.py

fix(mcp): skip killpg when child shares gateway's process group (#47134)

2026-06-24 00:52:18 +05:30

test_mcp_structured_content.py

…

test_mcp_tool_401_handling.py

…

test_mcp_tool_issue_948.py

fix(mcp): run OSV malware preflight off the event loop with a bounded timeout (#29184)

2026-06-25 23:30:41 +05:30

test_mcp_tool_session_expired.py

…

test_mcp_tool.py

…

test_mcp_utility_capability_gating.py

…

test_memory_tool_import_fallback.py

…

test_memory_tool_schema.py

…

test_memory_tool.py

fix(memory): degrade gracefully after repeated at-capacity consolidation failures (#42405)

2026-06-30 20:01:16 +05:30

test_microsoft_graph_auth.py

…

test_microsoft_graph_client.py

…

test_modal_bulk_upload.py

…

test_modal_sandbox_fixes.py

fix(terminal): require approval for host-bound Docker commands (#54483)

2026-06-29 11:35:41 +10:00

test_modal_snapshot_isolation.py

…

test_notify_on_complete.py

fix(process): keep CLI drain dedup after poll goes read-only (#10156)

2026-06-21 11:11:23 -07:00

test_osv_check.py

…

test_parse_env_var.py

…

test_patch_failure_tracking.py

…

test_patch_parser.py

…

test_pr_6656_regressions.py

…

test_process_registry.py

fix(desktop): tree-kill Windows terminal descendants

2026-06-30 04:23:27 -05:00

test_read_extract.py

…

test_read_loop_detection.py

…

test_refresh_agent_mcp_tools.py

…

test_registry.py

test(registry): cover mixed terminal toolset doctor false negative

2026-06-30 17:47:37 +05:30

test_resolve_path.py

…

test_schema_sanitizer.py

…

test_search_budget_truncation.py

…

test_search_error_guard.py

fix: warn on line-oriented newline search patterns

2026-06-20 23:23:47 -07:00

test_search_hidden_dirs.py

…

test_send_message_missing_platforms.py

…

test_send_message_react.py

…

test_send_message_target_parse.py

…

test_send_message_telegram_proxy.py

…

test_send_message_tool.py

fix(telegram): chunk formatted messages with UTF-16 length accounting

2026-06-30 03:51:08 -07:00

test_session_search.py

fix(session_search): demote cron below interactive sessions in discover ranking (#53597)

2026-06-27 04:41:22 -07:00

test_shared_container_task_id.py

…

test_signal_media.py

…

test_singularity_preflight.py

…

test_skill_env_passthrough.py

…

test_skill_improvements.py

…

test_skill_manager_tool.py

fix(skills): require review forks to read before writing skills

2026-06-30 15:49:36 -07:00

test_skill_provenance.py

…

test_skill_size_limits.py

…

test_skill_usage.py

fix(curator): protect external skills from background curation

2026-06-25 22:03:02 -07:00

test_skill_view_path_check.py

…

test_skill_view_traversal.py

…

test_skills_ast_audit.py

…

test_skills_guard.py

…

test_skills_hub_browse_sh.py

…

test_skills_hub_clawhub.py

…

test_skills_hub.py

fix(skills): replace string prefix check with strict path containment

2026-06-28 21:14:01 -07:00

test_skills_list_modified_diff.py

…

test_skills_sync.py

fix(skills): skip shadowing when external_dirs provides the skill

2026-06-27 21:07:53 -07:00

test_skills_tool.py

…

test_slash_confirm.py

…

test_smart_approval_injection.py

fix(security): harden smart approval guard against prompt injection

2026-06-21 16:39:48 -07:00

test_spotify_client.py

docs(spotify): document 6-month re-auth cycle and add client-level invalid_grant test

2026-06-20 23:23:47 -07:00

test_ssh_bulk_upload.py

…

test_ssh_environment.py

…

test_stage2_hook_seed_one_symlinks.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_stage2_hook_symlink_chown.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_subprocess_stdin_guard.py

…

test_symlink_prefix_confusion.py

…

test_sync_back_backends.py

…

test_terminal_compound_background.py

…

test_terminal_config_env_sync.py

fix(terminal): bridge docker_extra_args to TERMINAL_DOCKER_EXTRA_ARGS in CLI + gateway (#50631)

2026-06-22 15:41:23 +10:00

test_terminal_exit_semantics.py

…

test_terminal_foreground_timeout_cap.py

…

test_terminal_none_command_guard.py

…

test_terminal_output_transform_hook.py

fix(redact): stop DB-connstr redaction from corrupting code output (#33801) (#54061)

2026-06-28 01:15:39 -07:00

test_terminal_requirements.py

…

test_terminal_task_cwd.py

fix(terminal): require approval for host-bound Docker commands (#54483)

2026-06-29 11:35:41 +10:00

test_terminal_timeout_output.py

…

test_terminal_tool_pty_fallback.py

…

test_terminal_tool_requirements.py

fix(tools): suppress transient check_fn flakes so subagents keep file/terminal tools

2026-06-27 19:29:00 -07:00

test_terminal_tool.py

test(terminal): cover sudo cache invalidation and multi-invocation piping

2026-06-25 23:08:48 +05:30

test_threaded_process_handle.py

…

test_threat_patterns.py

fix(security): harden heredoc approval, NFKC homograph fold, env-var filter

2026-06-30 02:59:46 -07:00

test_tirith_security.py

fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)

2026-06-26 15:26:08 +05:30

test_todo_tool_type_coercion.py

fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)

2026-06-25 23:42:42 +05:30

test_todo_tool.py

…

test_tool_backend_helpers.py

…

test_tool_output_limits.py

…

test_tool_result_storage.py

…

test_tool_search.py

…

test_transcription_command_providers.py

…

test_transcription_dotenv_fallback.py

…

test_transcription_plugin_dispatch.py

…

test_transcription_tools.py

…

test_transcription.py

…

test_tts_command_providers.py

…

test_tts_dotenv_fallback.py

…

test_tts_gemini.py

…

test_tts_kittentts.py

…

test_tts_max_text_length.py

…

test_tts_mistral.py

…

test_tts_opus_routing.py

…

test_tts_path_traversal.py

…

test_tts_piper.py

…

test_tts_plugin_dispatch.py

…

test_tts_speed.py

…

test_tts_xai_speech_tags.py

…

test_url_safety.py

test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards

2026-06-21 13:56:35 -07:00

test_video_analyze.py

…

test_video_generation_dispatch.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

test_video_generation_dynamic_schema.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

test_video_generation_tool_surface_matrix.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

test_vision_native_fast_path.py

…

test_vision_tools.py

fix(vision): narrow the fan-out cap to the CPU encode burst only

2026-06-29 01:27:10 -07:00

test_voice_cli_integration.py

…

test_voice_mode.py

…

test_watch_patterns.py

…

test_web_extract_robustness.py

fix(web_extract): bound stored full-text size + give concrete read_file offset

2026-06-30 00:19:49 -07:00

test_web_providers_brave_free.py

…

test_web_providers_ddgs.py

fix(ddgs): bound DuckDuckGo search with a wall-clock timeout (#36776)

2026-06-25 01:45:06 +05:30

test_web_providers_searxng.py

…

test_web_providers_xai.py

…

test_web_providers.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_web_tools_config.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_web_tools_tavily.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_web_tools_truncate.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_website_policy.py

feat(web_extract): truncate-and-store instead of LLM summarization (#54843)

2026-06-29 10:00:49 -07:00

test_whatsapp_send_message_media.py

feat(send_message): native WhatsApp media delivery via Baileys bridge (#53598)

2026-06-27 04:40:05 -07:00

test_windows_compat.py

fix(tools): use start_new_session instead of preexec_fn to prevent SIGSEGV in multi-threaded processes

2026-06-27 03:08:41 +05:30

test_windows_native_support.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

test_write_approval.py

fix(memory): honor configured char limits in the no-agent on-disk store

2026-06-23 03:10:53 +05:30

test_write_deny.py

…

test_x_search_tool.py

…

test_xai_http_storage.py

feat(xai): Imagine public-URL storage, chaining & video edit/extend

2026-06-29 21:11:58 -07:00

test_yolo_mode.py

…

test_zombie_process_cleanup.py

fix(session): finalize owned SQLite session rows on AIAgent.close()

2026-06-21 11:35:09 -07:00