kshitijk4poor 9a7b54accf feat(skills): oversized-body lint rule, surfaced on the SKILL.md patch that crosses it ...

skill_view loads SKILL.md whole and the content then rides in context for
every later call of the session, so body size is paid per turn. The only
size signal was the 100k hard cap in skill_manage, and agent-authored skills
grew by small patches until they sat right under it (31 of 432 local skills
over 40k chars, 7 at 100-115k; skill_view results averaging 32k chars).

- skill_linter: advisory `oversized-body` past _BODY_SOFT_BUDGET_CHARS (24k,
  ~3x the ~200-line standard; bundled skills average ~20k) naming the size,
  the token estimate and the references/ split.
- skill_manage patch: attach lint findings the write INTRODUCED (diff of
  rules before/after), so the crossing patch reports it once and a clean
  patch on an already-large skill stays quiet. Create keeps reporting all.
- curator prompt: a body over the budget is itself a consolidation target.
- docs: skills.md linter paragraph.

2026-09-22 12:52:49 +05:30

..

computer_use

fix(computer-use): doctor names the stale TCC row on the health_report path too

2026-09-21 16:21:00 +05:30

connectors

fix(mcp): connector-card install keeps .env secrets-only too

2026-09-21 08:59:03 -07:00

environments

fix(terminal): cache cleanup keeps the max_age_hours kwarg the housekeeping loop calls

2026-09-21 18:54:23 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

fix(approval): keep the git branch force-delete gate off the safe -d delete

2026-09-20 15:32:00 -07:00

approval_floors.py

…

approval_gateway_wait.py

fix(approval): withdraw the queue entry when no client can answer; commit choices under the lock

2026-09-17 09:04:38 -07:00

approval_human_wait.py

…

approval_prompt.py

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

approval_smart.py

fix(approval): warn on empty smart-approval guardian answers

2026-09-20 15:32:42 -07:00

approval.py

fix(approvals): route plugin asks through runs bridge

2026-09-19 23:41:45 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

fix(delegation): keep encoding= on the text=True line so the line-based footgun scanner sees it

2026-09-20 18:50:37 -07:00

async_delegation.py

feat(delegation): recovery event carries transcript tails and owner git state

2026-09-20 18:50:37 -07:00

audio_container.py

…

binary_extensions.py

refactor(tools): one suffix helper for the binary-extension checks; drop the dead .db3 member

2026-09-17 21:17:26 +05:30

blueprints.py

…

bot_failure_reasons.py

fix(gateway): a peer DM retries a transient turn failure once, like the other two lanes

2026-09-20 10:16:51 -07:00

bot_live_delivery.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_dm.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_probe.py

fix(profiles): hoist the profile-id grammar into hermes_constants.PROFILE_ID_RE

2026-09-20 17:00:11 -07:00

bot_relay.py

fix(bot-relay): re-offer only past the Desktop's deliver deadline, once per envelope, with a typed timeout after the waiter's budget

2026-09-20 11:51:14 -07:00

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(browser): gave-up supervisor unregisters itself; tests trimmed to two invariants

2026-09-18 10:28:40 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): orphan reaper binds only on the full socket-dir path, never its basename

2026-09-20 18:25:21 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

…

browser_tool_session.py

fix(browser): recycle a poisoned local session after a protocol-level agent-browser failure

2026-09-20 12:47:50 -07:00

browser_tool_snapshot.py

…

browser_tool_vision.py

feat(vision): vision.embed_target_bytes replaces the hardcoded 256 KB native embed budget

2026-09-17 09:02:55 -07:00

browser_tool.py

fix: sockets keep a short temp root; lint skips git-ignored artifacts; test runner scratch leaves /tmp

2026-09-19 10:44:26 -07:00

browser_use_cli.py

feat(vision): vision.embed_target_bytes replaces the hardcoded 256 KB native embed budget

2026-09-17 09:02:55 -07:00

browser_vault_tool.py

…

budget_config.py

…

checkpoint_manager_profile_rename.py

fix(checkpoints): retry of a partial profile-rename rekey keeps checkpoints taken under the new name

2026-09-16 14:34:22 -07:00

checkpoint_manager.py

fix(windows): delete read-only Git trees instead of failing with WinError 5

2026-09-21 08:58:37 -07:00

clarify_gateway.py

…

clarify_tool.py

fix(clarify): batch result carries the surface's no-answer notice; trim tests

2026-09-16 17:47:50 -07:00

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

feat: Hermes-owned scratch dir replaces the system temp dir for every process and child

2026-09-19 10:44:26 -07:00

code_execution_rpc.py

fix(code_execution): heartbeat is a background-only terminal modifier, blocked in the sandbox

2026-09-21 15:02:49 -07:00

code_execution_tool.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

code_kernel_remote.py

…

code_kernel.py

fix(tools): share the idle-expiry criteria between acquire and the reaper; plain once-latch

2026-09-20 15:49:52 -07:00

computer_use_tool.py

…

credential_files.py

…

cronjob_job_args.py

fix(cron): bound the Slack thread-origin horizon so an expired one-shot fails closed

2026-09-20 15:54:45 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(cron): release a profile's in-flight claim under the key it registered with

2026-09-21 02:52:15 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

feat(delegate): warn the child at 80% of its inactivity window before abandoning it

2026-09-20 15:50:20 -07:00

delegate_tool_config.py

fix(delegate): key a named custom child's credential pool by its inherited identity

2026-09-21 01:16:30 -07:00

delegate_tool_dispatch.py

fix(delegation): retain recovery transcript locators

2026-09-20 09:52:22 -07:00

delegate_tool_progress.py

fix(delegation): make remaining-depth guidance unambiguous

2026-09-19 23:57:59 -07:00

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

fix(delegate): key a named custom child's credential pool by its inherited identity

2026-09-21 01:16:30 -07:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(security): match credential env names case-insensitively

2026-09-20 12:53:47 -07:00

env_probe.py

…

fal_common.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_operations_lint.py

fix(lsp): treat a deleted process cwd as no anchor so write diagnostics never fail a landed write

2026-09-19 01:32:28 -07:00

file_operations_search.py

fix(tools): grep fallback follows a symlinked search root on the content lane

2026-09-20 10:44:16 -07:00

file_operations.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_state.py

fix(file_state): drop the module-level forget_task wrapper

2026-09-18 10:10:40 -07:00

file_tools_paths.py

fix(checkpoints): do not feed container paths into host checkpoint storage

2026-09-18 10:38:08 -07:00

file_tools_read_tracking.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

file_tools_write_guards.py

test(tools): overwriting the database file itself is still refused as binary

2026-09-17 21:17:26 +05:30

file_tools.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

focus_pane_tool.py

…

fuzzy_match.py

…

homeassistant_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

feat(image_gen): route the managed selection by model id across FAL, Krea and Portal

2026-09-16 16:42:47 -07:00

image_generation_tool.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

fix(tools): honor false interrupt debug values

2026-09-16 17:21:14 -07:00

kanban_tools_schemas.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

kanban_tools.py

fix(kanban): CLI and kanban_complete tool report an empty-completion refusal

2026-09-20 19:03:47 -07:00

kanban_toolset_context.py

…

lazy_deps.py

fix(plugins): LAZY_DEPS mirror plugin.yaml ranges; manifest parser names list-typed files and reads hooks:

2026-09-21 23:26:19 -07:00

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

mcp_dashboard_oauth.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix(mcp): ask Google-hosted OAuth for offline access and normalize the device-flow issuer check

2026-09-20 18:22:18 -07:00

mcp_oauth_manager.py

fix(mcp): OAuth discovery/registration carry a User-Agent; cancelled login frees its callback port

2026-09-18 12:47:49 -07:00

mcp_oauth_provider.py

fix(mcp-oauth): classify discovery URLs by path

2026-09-20 19:02:21 -07:00

mcp_oauth.py

fix(mcp): OAuth login waits for oauth.timeout and a probe timeout names itself

2026-09-20 12:40:36 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

…

mcp_tool_common.py

fix(mcp): error sanitizer redacts dotted/dashed sk- keys

2026-09-18 09:58:12 -07:00

mcp_tool_config.py

fix(mcp): keep the new resolver lines formatter-stable

2026-09-20 15:34:58 -07:00

mcp_tool_content.py

…

mcp_tool_discovery.py

feat(mcp): make the discovery connect cap configurable (mcp.discovery_concurrency, default 4, 0 = unlimited)

2026-09-21 01:44:16 -07:00

mcp_tool_errors.py

fix(mcp): redirect header stripper builds httpx.AsyncClient at call time so proxy mounts stay observable

2026-09-20 10:07:26 -07:00

mcp_tool_handlers.py

fix(mcp): dual-emit check is per text block; an over-cap structuredContent never doubles the flood cap

2026-09-19 23:47:17 -07:00

mcp_tool_health.py

fix(mcp): skip dynamic tool refresh when the server session is already gone (#109824)

2026-09-17 19:06:29 -04:00

mcp_tool_lifecycle.py

fix(mcp): divide the shutdown budget across profile passes and stop poisoning the teardown context

2026-09-21 02:58:40 -07:00

mcp_tool_loop.py

…

mcp_tool_registration.py

…

mcp_tool_sampling.py

…

mcp_tool_schema.py

fix(mcp): keep required-only constraint fragments in tool schemas

2026-09-21 13:14:22 -07:00

mcp_tool_scope.py

…

mcp_tool_server_run.py

fix(mcp): enforce strict_redirect_headers on redirects and the preflight probe (#115155)

2026-09-20 10:07:26 -07:00

mcp_tool_transport.py

fix(mcp): redirect header stripper builds httpx.AsyncClient at call time so proxy mounts stay observable

2026-09-20 10:07:26 -07:00

mcp_tool.py

fix(mcp): cap discovery pass timeout and derive lock waiter budget from it

2026-09-21 01:44:16 -07:00

memory_tool_store.py

fix(memory): key replaced_entries by 1-based op position; tidy review nits

2026-09-21 14:26:37 +05:30

memory_tool.py

fix(memory): surface the overwritten entry on the /memory approve surface too

2026-09-21 14:26:37 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

fix(tts): reject MEDIA directives and control chars in output_path

2026-09-20 10:57:35 -07:00

plugin_guard_context.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

plugin_guard.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_notifications.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

process_registry_results.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

process_registry.py

fix: keep _redact_process_result's one-arg signature; hook task_id is the process owner's

2026-09-21 23:56:25 -07:00

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix: dispatch only the context kwargs a tool handler declares

2026-09-21 23:38:16 -07:00

schema_sanitizer.py

fix(tools): coerce a missing required to [] and pin the MCP normalizer entry (#56123)

2026-09-19 10:16:59 -07:00

self_repo_guard.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

send_message_senders.py

fix(telegram): attach real video geometry and a thumbnail so large uploads aren't square

2026-09-20 11:20:26 -07:00

send_message_targets.py

…

send_message_tool.py

fix(messaging): hermes send reports dropped MEDIA attachments instead of success:true

2026-09-20 11:12:48 -07:00

session_search_tool.py

fix(session_search): cap title-match discovery entries like FTS hits

2026-09-18 10:30:57 -07:00

shell_heredoc.py

fix(tools): classify prefixed heredoc consumers

2026-09-18 09:35:16 -07:00

skill_ledger.py

fix(curator): tarball skips regeneratable dirs; ledger --compact garbage-collects blobs

2026-09-19 09:20:54 -07:00

skill_linter.py

feat(skills): oversized-body lint rule, surfaced on the SKILL.md patch that crosses it

2026-09-22 12:52:49 +05:30

skill_manager_batch.py

fix(skill_manage): batch success rows carry the linter findings and org-sharing note

2026-09-22 12:52:49 +05:30

skill_manager_guards.py

…

skill_manager_tool.py

feat(skills): oversized-body lint rule, surfaced on the SKILL.md patch that crosses it

2026-09-22 12:52:49 +05:30

skill_provenance.py

…

skill_usage.py

fix(curator): never-used built-ins get their inactivity clock anchored at first curator sight

2026-09-19 09:20:54 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(skills): share the credential-file alternation and pin plugin admission for py_read_secrets_file

2026-09-20 16:21:37 -07:00

skills_hub_clawhub.py

fix(skills): retry a failed skills.sh sitemap shard; never cache a partial catalog

2026-09-18 12:51:49 -07:00

skills_hub_github.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_install.py

fix(skills): write quarantined text members verbatim, without newline translation

2026-09-20 16:00:26 -07:00

skills_hub_models.py

fix(skills): a SKILL.md link above the skill directory no longer makes the skill uninstallable

2026-09-20 12:03:43 -07:00

skills_hub_official.py

…

skills_hub_search.py

fix: bound the index-miss fallback and skip it under provider filters and index timeouts

2026-09-16 17:43:11 -07:00

skills_hub_skillssh.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_sources.py

…

skills_hub.py

fix(skills-hub): keep the gzip-only Accept-Encoding pin on sitemap fetches

2026-09-18 10:22:14 -07:00

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

…

skills_sync_optional.py

…

skills_sync.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

skills_tool_dedup.py

fix: pruned skill_view/read_file results reload after a proactive prune

2026-09-16 17:23:44 -07:00

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

fix(tools): read_file's dedup stub skips the review fork too

2026-09-19 00:33:58 +05:30

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

fix(lsp): release language servers on every in-process workspace removal; pin the call sites

2026-09-19 01:29:03 -07:00

terminal_hints.py

…

terminal_scope.py

…

terminal_tool_backends.py

fix(tools): sanitize cwd overrides written into live container envs

2026-09-18 09:54:45 -07:00

terminal_tool_background.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

terminal_tool_config.py

…

terminal_tool_guards.py

fix(tools): execute_code shares the interpreter-kill rejection text; collapse redundant supervisor branch

2026-09-18 12:49:13 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

…

terminal_tool_sudo.py

…

terminal_tool.py

chore(terminal): diet the heartbeat schema description

2026-09-21 15:02:49 -07:00

thread_context.py

…

threat_patterns.py

fix(skills): an env-var NAME constant is not an embedded credential

2026-09-20 11:30:03 -07:00

tip_tool.py

…

tirith_security.py

fix(tirith): half-open the circuit breaker instead of latching it open

2026-09-18 09:59:54 -07:00

todo_tool.py

…

tool_backend_helpers.py

fix(auth): a removed env:XAI_API_KEY no longer overrides xai-oauth for x_search

2026-09-20 10:17:04 -07:00

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

tool_search_catalog.py

…

tool_search_validation.py

fix(tools): tool_call bridge treats blank arguments as no arguments

2026-09-19 10:03:11 -07:00

tool_search.py

fix(tools): warn once when tools.tool_search.defer is a scalar, then use the curated default

2026-09-19 23:51:25 -07:00

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_command.py

…

transcription_common.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_local.py

…

transcription_tools.py

…

tts_command_provider.py

…

tts_streaming.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

fix: forward tts.openai.consent_attestation to every OpenAI-compatible TTS request

2026-09-19 10:10:29 -07:00

tts_tool_plugins.py

…

tts_tool_providers.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_tool_speaker.py

fix(tts): drop the empty mkstemp placeholder when the provider wrote elsewhere

2026-09-20 10:25:30 -07:00

tts_tool.py

fix: quoted MEDIA payloads in tts output_path are rejected too (review follow-up)

2026-09-20 10:57:35 -07:00

url_safety.py

fix(url_safety): classify the IPv4-translated wrapper by its embedded IPv4

2026-09-20 15:28:59 -07:00

video_generation_tool.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

vision_tools_history_budget.py

fix: vision_analyze does not re-embed an image already attached natively to the current turn

2026-09-19 09:52:18 -07:00

vision_tools_image_prep.py

fix(vision): accept the image/jpg alias and give the Anthropic converter the same unsupported-subtype downgrade

2026-09-19 09:56:12 -07:00

vision_tools.py

fix(vision): computer_use capture and vision_analyze share one native-vision gate

2026-09-20 10:16:27 -07:00

voice_client_config.py

chore: merge origin/main (resolve apps/desktop/src/lib/voice-client-direct.ts, hermes_cli/config_defaults.py, tools/voice_client_config.py, website/docs/user-guide/features/tts.md)

2026-09-19 10:54:38 -07:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

wake_word_engines.py

…

wake_word.py

fix(voice): wake-word pause/stop no longer hangs on a wedged microphone stream

2026-09-20 18:26:41 -07:00

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

web_tools.py

fix: web gate follows the dispatcher when the web-xai plugin resolves xai (review follow-up)

2026-09-20 10:14:37 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

fix(tools,tui_gateway,cli,plugins): parseable non-dict JSON no longer crashes the remaining file scans

2026-09-18 09:19:04 -07:00

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

yuanbao_tools.py

…