unsupportedpastels eb8d21f482 fix(approval): give global-flag runs one parse in dangerous-command rules ...

The terminal approval check runs right after the lifecycle guard, on the
tool thread with no deadline. Seven hermes/docker/podman rules used the same
ambiguous `-{1,2}\S+(?:[=\s]\S+)?` flag repetition as the lifecycle pattern,
so the reported rclone command (and any long flag run after hermes, docker,
docker compose or podman) still froze the gateway in
detect_dangerous_command() once the lifecycle scan returned (#129281).

Give each rule a linear global-flag fragment with one parse per flag. The
docker/podman rules keep taking a separate value only after exactly one
whitespace character, as before, so no approval decision changes: old and
new rules agree on every command of up to four tokens with single spaces
and up to three tokens with mixed spaces, double spaces and tabs.

Reported-by: starship-s

2026-09-30 21:33:08 -04:00

..

bot_desktop

fix(child-env): the bot desktop and gmail-triage scripts start from the scrubbed env

2026-09-29 02:06:58 +05:30

computer_use

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

connectors

feat(telemetry): record MCP server installs as extension-install events

2026-09-28 12:43:03 -07:00

environments

fix(cron): overlay the routed no_agent scope inside build_subprocess_env

2026-09-29 22:57:48 -04:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

…

annotate_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

ansi_strip.py

…

apply_layout_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

approval_context.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

approval_detection.py

fix(approval): give global-flag runs one parse in dangerous-command rules

2026-09-30 21:33:08 -04:00

approval_floors.py

…

approval_gateway_wait.py

…

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

…

approval.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

…

async_delegation.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

…

bot_live_delivery.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_dm.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_probe.py

fix(bot-chat): rebuild a stale Bot Chat's tools through the surface builder (#124211, salvage #124307)

2026-09-28 06:06:17 -07:00

bot_relay.py

test: restore five contracts the preservation review found uncovered

2026-09-29 15:58:55 +05:30

browser_camofox_state.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

…

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

…

browser_tool_session.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

browser_use_cli.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

browser_vault_tool.py

…

budget_config.py

…

checkpoint_maintenance.py

…

checkpoint_manager_profile_rename.py

…

checkpoint_manager.py

fix(checkpoints): refuse an empty restore selection and delete read-only test repos

2026-09-29 14:12:41 -04:00

checkpoint_pruning.py

…

clarify_gateway.py

Clarify: one question shape and one result shape on every surface (skip, cancel, timeout and undelivered are told apart) (#127760)

2026-09-29 18:33:44 +05:30

clarify_tool.py

fix(tools): reject all-blank and over-limit clarify choices instead of dropping them silently

2026-09-29 19:44:05 -05:00

close_preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

close_terminal_tool.py

…

code_execution_env.py

fix(execute-code): preserve PM runtime dependencies for own kernel

2026-09-28 06:42:00 -07:00

code_execution_rpc.py

fix(execute_code): report in-script tool errors the script ignored

2026-09-28 10:11:33 -07:00

code_execution_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

code_kernel_remote.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

code_kernel.py

fix(execute_code): report in-script tool errors the script ignored

2026-09-28 10:11:33 -07:00

computer_use_tool.py

…

credential_files.py

fix(tui_gateway): keep a container backend's terminal.cwd as the session workspace

2026-09-28 19:41:57 -04:00

cronjob_job_args.py

feat(cron): allow Python scripts to use an external interpreter

2026-09-28 02:32:05 +05:30

cronjob_prompt_scan.py

…

cronjob_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

…

delegate_tool_config.py

…

delegate_tool_dispatch.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

delegate_tool_progress.py

…

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delegation_live_log.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

delegation_output_schema.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

desktop_ui.py

…

discord_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

drive_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

env_passthrough.py

fix(child-env): openviking drops the profile overlay's bot tokens; unprovable manifests don't block spawns

2026-09-29 02:06:58 +05:30

env_probe.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

fal_common.py

…

feishu_doc_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

feishu_drive_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

fix(lsp): no automatic trust for scheduled work; lock-free trust lookups

2026-09-29 03:28:46 +05:30

file_operations_search.py

…

file_operations.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

…

file_tools_write_guards.py

…

file_tools.py

feat(telemetry): harness-accuracy shared metrics for the agent loop

2026-09-28 12:43:03 -07:00

focus_pane_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

fuzzy_match.py

Merge pull request #128011 from rroverin/fix/escape-drift-newline-doubling

2026-09-30 00:59:14 -04:00

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

…

image_generation_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

…

kanban_tools.py

…

kanban_toolset_context.py

…

lazy_deps.py

fix(deps): gate the runtime takeover on genuinely historical updater frames

2026-09-29 15:08:07 +05:30

managed_gateway_auth.py

…

managed_tool_gateway.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_liveness.py

…

mcp_oauth_device.py

…

mcp_oauth_manager.py

…

mcp_oauth_provider.py

…

mcp_oauth.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_schema_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

mcp_tool_agent.py

…

mcp_tool_common.py

revert: stop hoisting the MCP stdio command's directory to PATH[0]

2026-09-28 02:03:42 +05:30

mcp_tool_config.py

fix(logs): hermes logs --since/--level handle unstamped lines and MCP output

2026-09-28 19:02:20 +05:30

mcp_tool_content.py

…

mcp_tool_discovery.py

fix(review): MCP owner rebuild keeps the launch profile's env-only credentials (#119092 review)

2026-09-28 05:24:26 -07:00

mcp_tool_errors.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool_handlers.py

…

mcp_tool_health.py

…

mcp_tool_lifecycle.py

…

mcp_tool_loop.py

…

mcp_tool_node_abi.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool_registration.py

…

mcp_tool_sampling.py

…

mcp_tool_schema.py

…

mcp_tool_scope.py

…

mcp_tool_server_run.py

fix(mcp): remote headers render under the owner's fresh secret scope at connect and every reconnect (#119092, salvage #119097)

2026-09-28 05:24:26 -07:00

mcp_tool_transport.py

fix(mcp): name the rebuild when a stdio server's native addon was built for another Node

2026-09-27 21:30:10 -07:00

mcp_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

memory_tool_store.py

…

memory_tool.py

feat(telemetry): wire memory, curator, delegation and backend call sites

2026-09-28 12:43:03 -07:00

microsoft_graph_auth.py

…

microsoft_graph_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

neutts_synth.py

…

open_preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

openrouter_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

osv_check.py

…

patch_parser.py

…

path_security.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

plugin_guard_context.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

plugin_guard.py

feat(i18n): pluggable, layered language packs across core, Desktop and TUI (#126296)

2026-09-28 14:16:18 -07:00

preview_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

process_registry_checkpoint.py

…

process_registry_notifications.py

…

process_registry_results.py

…

process_registry.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

read_extract.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

read_preview_tool.py

fix(tools): word the read_preview hint so the Windows footgun lint doesn't read it as open()

2026-09-29 12:25:29 -05:00

read_terminal_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

read_window_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

registry.py

…

schema_sanitizer.py

…

self_repo_guard.py

…

send_message_senders.py

…

send_message_targets.py

…

send_message_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

session_search_tool.py

…

shell_heredoc.py

…

skill_ledger.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_linter.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_manager_batch.py

…

skill_manager_guards.py

…

skill_manager_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skill_provenance.py

…

skill_usage.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skillevaluator_scan.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_ast_audit.py

…

skills_guard.py

fix(skills-guard): detect bare-~ destructive rm and inline-shell auto-exec DSL

2026-09-29 20:57:45 -05:00

skills_hub_clawhub.py

…

skills_hub_github.py

…

skills_hub_install.py

feat(telemetry): v5 signals — tool_unavailable, provider_setup, feature_adoption, feature_disabled

2026-09-28 12:43:03 -07:00

skills_hub_models.py

…

skills_hub_official.py

…

skills_hub_search.py

…

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_sync_optional.py

…

skills_sync.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

slash_confirm.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

spill_safety.py

…

stt_lease.py

fix(desktop): carry STT warm-up readiness into transcription and enforce lease ownership

2026-09-30 15:16:40 -05:00

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

terminal_tool_backends.py

feat(vercel): fresh sandboxes use a managed image (universal:latest); runtime presets deprecated, migration 49 (#126741)

2026-09-28 12:33:01 -07:00

terminal_tool_background.py

…

terminal_tool_config.py

…

terminal_tool_guards.py

…

terminal_tool_lifecycle.py

…

terminal_tool_result.py

…

terminal_tool_sudo.py

…

terminal_tool.py

fix(telemetry): terminal.outcome=timeout comes only from Hermes' deadline

2026-09-28 12:43:03 -07:00

thread_context.py

…

threat_patterns.py

…

tip_tool.py

…

tirith_security.py

fix(security): the first tirith scan no longer waits on its download (#128150)

2026-09-29 17:29:05 +00:00

todo_tool.py

Inline agent tools get the shared argument repair (clarify, todo, memory, session_search) (#127781)

2026-09-29 22:07:30 +05:30

tool_backend_helpers.py

…

tool_labels.py

…

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

tool_search_catalog.py

…

tool_search_validation.py

…

tool_search.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

…

transcription_command.py

…

transcription_common.py

…

transcription_local.py

…

transcription_tools.py

fix(desktop): pin each voice operation to one owner and fence stale STT continuations

2026-09-30 15:16:40 -05:00

tts_command_provider.py

fix(tts): resolve command-provider env_passthrough through the profile secret scope

2026-09-28 12:23:25 -07:00

tts_streaming.py

…

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

fix(review): run TTS warm/release command hooks under the caller's secret scope (#120481)

2026-09-28 12:23:25 -07:00

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

…

tts_tool_speaker.py

…

tts_tool.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

url_safety.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

video_generation_tool.py

…

vision_tools_history_budget.py

…

vision_tools_image_prep.py

…

vision_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

voice_client_config.py

fix(desktop): client-direct STT hallucination filter and voice.barge_in pref (#126708)

2026-09-29 18:19:39 -05:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

wake_word_engines.py

…

wake_word.py

fix(wake): keep the halt hook armed on the recovered capture

2026-09-29 19:14:28 -05:00

web_result_cache.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

…

web_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

website_policy.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

working_diff.py

…

write_approval.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

…

yuanbao_tools.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00