teknium1 1393403dd7 fix(process_registry): strip bash startup noise until real output, not only from the first read ...

A tty-less `bash -lic` writes "cannot set terminal process group" and
"no job control in this shell" as two separate write() calls. The reader
cleaned shell noise from the FIRST chunk only, so whenever it woke between
the two writes (loaded CI runners) the second line landed in
output_buffer as the process's only "output".

Symptoms on main: tests/hermes_cli/test_process_dock.py painted
"last: bash: no job control..." instead of "starting" (3 main reds,
Sep 21-22) and tests/tools/test_process_registry_list_exit.py's probe
woke on that noise before the writer had printed, so the completion
event lacked "owner-output" (2 main FLAKY frames). The same leak reaches
users through process.list output_preview and the live-work dock.

Keep stripping leading noise from every chunk until the process has
produced non-blank output; after that, matching text is the process's
own. The list_exit probe now waits for the writer's marker rather than
for any bytes.

Live repro (stand-in shell reproducing bash's two writes with a 50 ms
gap, real spawn_local + select/read1 reader): base 10/10 buffers carry
"bash: no job control in this shell\n"; fixed 0/10.

2026-09-23 05:34:25 -07:00

..

bot_desktop

chore(bot-desktop): mark the X11 lock/socket paths for main's no-/tmp-literal guard

2026-09-19 23:13:10 -07:00

computer_use

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

connectors

feat: catalog marks onboarding plugins; catalog rows carry the app's presence

2026-09-23 09:26:07 +05:30

environments

fix(terminal): cache cleanup keeps the max_age_hours kwarg the housekeeping loop calls

2026-09-21 18:54:23 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

fix(approval): keep the git branch force-delete gate off the safe -d delete

2026-09-20 15:32:00 -07:00

approval_floors.py

…

approval_gateway_wait.py

…

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

fix(approval): warn on empty smart-approval guardian answers

2026-09-20 15:32:42 -07:00

approval.py

fix(approvals): route plugin asks through runs bridge

2026-09-19 23:41:45 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

fix(delegation): keep encoding= on the text=True line so the line-based footgun scanner sees it

2026-09-20 18:50:37 -07:00

async_delegation.py

feat(delegation): recovery event carries transcript tails and owner git state

2026-09-20 18:50:37 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

fix(gateway): a peer DM retries a transient turn failure once, like the other two lanes

2026-09-20 10:16:51 -07:00

bot_live_delivery.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_dm.py

fix(bot-mode): every transport into a live Bot Chat waits on the owner's receipt through one primitive

2026-09-20 13:54:22 -07:00

bot_mode_probe.py

docs(bot-mode): note that the capability epoch follows the skills walker's org gating

2026-09-22 15:55:09 +05:30

bot_relay.py

fix(bot-relay): re-offer only past the Desktop's deliver deadline, once per envelope, with a typed timeout after the waiter's budget

2026-09-20 11:51:14 -07:00

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

…

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

browser_tool_lightpanda_fallback.py

fix(bot-screen): only a real headed browser command auto-starts the screen; the env builder stays pure

2026-09-18 19:20:01 -07:00

browser_tool_origin.py

…

browser_tool_real_profile.py

fix(bot-screen): only a real headed browser command auto-starts the screen; the env builder stays pure

2026-09-18 19:20:01 -07:00

browser_tool_session.py

Merge origin/main: browser fence composed with the dispatch/retry split (#115184); server registration, i18n, contracts

2026-09-23 03:25:06 -07:00

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

Merge origin/main: browser env socket-safe TMPDIR composed with the Bot Desktop display

2026-09-19 22:51:13 -07:00

browser_use_cli.py

Merge origin/main: SDK export list (WORKSPACE_PAGE_HEADER_AREA beside the profile-group exports)

2026-09-18 14:09:20 -07:00

browser_vault_tool.py

fix(bot-desktop): re-admit secret writes after a prompt; recover pre-marker dock launchers

2026-09-18 14:06:15 -07:00

budget_config.py

…

checkpoint_manager_profile_rename.py

…

checkpoint_manager.py

fix(windows): delete read-only Git trees instead of failing with WinError 5

2026-09-21 08:58:37 -07:00

clarify_gateway.py

…

clarify_tool.py

…

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

feat: Hermes-owned scratch dir replaces the system temp dir for every process and child

2026-09-19 10:44:26 -07:00

code_execution_rpc.py

fix(code_execution): heartbeat is a background-only terminal modifier, blocked in the sandbox

2026-09-21 15:02:49 -07:00

code_execution_tool.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

code_kernel_remote.py

…

code_kernel.py

fix(tools): share the idle-expiry criteria between acquire and the reaper; plain once-latch

2026-09-20 15:49:52 -07:00

computer_use_tool.py

…

credential_files.py

…

cronjob_job_args.py

fix(cron): bound the Slack thread-origin horizon so an expired one-shot fails closed

2026-09-20 15:54:45 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(cron): release a profile's in-flight claim under the key it registered with

2026-09-21 02:52:15 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

feat(delegate): warn the child at 80% of its inactivity window before abandoning it

2026-09-20 15:50:20 -07:00

delegate_tool_config.py

fix(delegate): key a named custom child's credential pool by its inherited identity

2026-09-21 01:16:30 -07:00

delegate_tool_dispatch.py

fix(delegation): retain recovery transcript locators

2026-09-20 09:52:22 -07:00

delegate_tool_progress.py

fix(delegation): make remaining-depth guidance unambiguous

2026-09-19 23:57:59 -07:00

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(security): match credential env names case-insensitively

2026-09-20 12:53:47 -07:00

env_probe.py

…

fal_common.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_operations_lint.py

fix(lsp): treat a deleted process cwd as no anchor so write diagnostics never fail a landed write

2026-09-19 01:32:28 -07:00

file_operations_search.py

fix(tools): grep fallback follows a symlinked search root on the content lane

2026-09-20 10:44:16 -07:00

file_operations.py

fix: preserve known file baselines across partial rereads

2026-09-21 18:39:24 -07:00

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

file_tools_write_guards.py

…

file_tools.py

fix: bind baseline reads to the task local path

2026-09-21 18:39:24 -07:00

focus_pane_tool.py

…

fuzzy_match.py

…

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

…

image_generation_tool.py

fix(image_gen): a gateway 429 is reported as a rate limit and retried once, not as a missing model

2026-09-21 10:40:03 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

kanban_tools.py

fix(kanban): CLI and kanban_complete tool report an empty-completion refusal

2026-09-20 19:03:47 -07:00

kanban_toolset_context.py

…

lazy_deps.py

chore(memory): remove the bundled hindsight provider (moved to the plugin catalog)

2026-09-23 01:16:41 -07:00

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(auth): named profiles read the root auth.json again (revert #111724)

2026-09-21 09:55:40 -07:00

mcp_dashboard_oauth.py

feat(connectors): one backend-owned connection operation, with a setup card on Desktop, TUI and CLI (#111008)

2026-09-21 10:04:32 +05:30

mcp_death_supervisor.py

…

mcp_liveness.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

mcp_oauth_device.py

fix(mcp): ask Google-hosted OAuth for offline access and normalize the device-flow issuer check

2026-09-20 18:22:18 -07:00

mcp_oauth_manager.py

fix(mcp): OAuth discovery/registration carry a User-Agent; cancelled login frees its callback port

2026-09-18 12:47:49 -07:00

mcp_oauth_provider.py

fix(mcp-oauth): classify discovery URLs by path

2026-09-20 19:02:21 -07:00

mcp_oauth.py

fix(mcp): OAuth login waits for oauth.timeout and a probe timeout names itself

2026-09-20 12:40:36 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

mcp_tool_common.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_tool_config.py

fix(mcp): keep the new resolver lines formatter-stable

2026-09-20 15:34:58 -07:00

mcp_tool_content.py

…

mcp_tool_discovery.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_tool_errors.py

fix(mcp): redirect header stripper builds httpx.AsyncClient at call time so proxy mounts stay observable

2026-09-20 10:07:26 -07:00

mcp_tool_handlers.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

mcp_tool_health.py

…

mcp_tool_lifecycle.py

fix(mcp): divide the shutdown budget across profile passes and stop poisoning the teardown context

2026-09-21 02:58:40 -07:00

mcp_tool_loop.py

…

mcp_tool_registration.py

fix: installing or connecting one MCP server no longer strips other servers' tools from the profile

2026-09-23 11:45:12 +05:30

mcp_tool_sampling.py

…

mcp_tool_schema.py

fix(mcp): keep required-only constraint fragments in tool schemas

2026-09-21 13:14:22 -07:00

mcp_tool_scope.py

…

mcp_tool_server_run.py

fix(mcp): one reader for mcp_servers.<name>.enabled (#119567)

2026-09-22 22:00:24 +00:00

mcp_tool_transport.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

mcp_tool.py

fix(mcp): cap discovery pass timeout and derive lock waiter budget from it

2026-09-21 01:44:16 -07:00

memory_tool_store.py

fix(memory): forward committed entry identity to providers

2026-09-23 01:06:32 -07:00

memory_tool.py

fix(memory): surface the overwritten entry on the /memory approve surface too

2026-09-21 14:26:37 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

fix(tts): reject MEDIA directives and control chars in output_path

2026-09-20 10:57:35 -07:00

plugin_guard_context.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

plugin_guard.py

fix(plugin-guard): v8 — four intake false-positive classes step down where inert

2026-09-20 11:49:00 -07:00

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_notifications.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

process_registry_results.py

…

process_registry.py

fix(process_registry): strip bash startup noise until real output, not only from the first read

2026-09-23 05:34:25 -07:00

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

docs(prompts): model-facing tool descriptions stop suggesting /tmp

2026-09-19 10:44:26 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix: dispatch only the context kwargs a tool handler declares

2026-09-21 23:38:16 -07:00

schema_sanitizer.py

fix(tools): coerce a missing required to [] and pin the MCP normalizer entry (#56123)

2026-09-19 10:16:59 -07:00

self_repo_guard.py

chore: mark the deliberate /tmp literals and shrink the lint baseline to one code block

2026-09-19 10:44:26 -07:00

send_message_senders.py

fix(telegram): attach real video geometry and a thumbnail so large uploads aren't square

2026-09-20 11:20:26 -07:00

send_message_targets.py

…

send_message_tool.py

fix(messaging): hermes send reports dropped MEDIA attachments instead of success:true

2026-09-20 11:12:48 -07:00

session_search_tool.py

…

shell_heredoc.py

…

skill_ledger.py

fix(skill_ledger): blob GC keeps unreferenced blobs younger than an hour

2026-09-22 16:16:30 +05:30

skill_linter.py

feat(skills): oversized-body lint rule, surfaced on the SKILL.md patch that crosses it

2026-09-22 12:52:49 +05:30

skill_manager_batch.py

fix(skill_manage): batch success rows carry the linter findings and org-sharing note

2026-09-22 12:52:49 +05:30

skill_manager_guards.py

…

skill_manager_tool.py

feat(skills): oversized-body lint rule, surfaced on the SKILL.md patch that crosses it

2026-09-22 12:52:49 +05:30

skill_provenance.py

…

skill_usage.py

fix(curator): never-used built-ins get their inactivity clock anchored at first curator sight

2026-09-19 09:20:54 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(skills): share the credential-file alternation and pin plugin admission for py_read_secrets_file

2026-09-20 16:21:37 -07:00

skills_hub_clawhub.py

fix(skills): route the ClawHub owner lookup through the hub connection pool

2026-09-22 15:59:17 +05:30

skills_hub_github.py

fix(skills): reuse HTTP connections during inspect

2026-09-22 15:59:17 +05:30

skills_hub_install.py

fix(skills): write quarantined text members verbatim, without newline translation

2026-09-20 16:00:26 -07:00

skills_hub_models.py

fix(skills): reuse HTTP connections during inspect

2026-09-22 15:59:17 +05:30

skills_hub_official.py

…

skills_hub_search.py

fix(skills): hoist the hub import out of the index retry loop

2026-09-22 15:59:17 +05:30

skills_hub_skillssh.py

fix(tools): resolve skills.sh skills whose SKILL.md sits at the repo root

2026-09-20 12:58:32 -07:00

skills_hub_sources.py

…

skills_hub.py

refactor(skills): read the hub client ContextVar through skills_hub_http_session only

2026-09-22 15:59:17 +05:30

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

…

skills_sync_optional.py

…

skills_sync.py

…

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

hermes_platform.resolver: locate/inspect/probe tiers, AppResolver, gh lookup migrated (NS-921) (#118065)

2026-09-22 17:08:30 +05:30

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

fix(lsp): release language servers on every in-process workspace removal; pin the call sites

2026-09-19 01:29:03 -07:00

terminal_hints.py

…

terminal_scope.py

perf(gateway): enter each profile scope once per heartbeat-restore scan; signature-cache profile config.yaml parses

2026-09-22 16:15:34 +05:30

terminal_tool_backends.py

…

terminal_tool_background.py

feat(terminal): heartbeat notifications for long background processes

2026-09-21 15:02:49 -07:00

terminal_tool_config.py

…

terminal_tool_guards.py

fix(tools): execute_code shares the interpreter-kill rejection text; collapse redundant supervisor branch

2026-09-18 12:49:13 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

…

terminal_tool_sudo.py

…

terminal_tool.py

chore(terminal): diet the heartbeat schema description

2026-09-21 15:02:49 -07:00

thread_context.py

…

threat_patterns.py

fix(skills): an env-var NAME constant is not an embedded credential

2026-09-20 11:30:03 -07:00

tip_tool.py

…

tirith_security.py

…

todo_tool.py

…

tool_backend_helpers.py

fix(auth): a removed env:XAI_API_KEY no longer overrides xai-oauth for x_search

2026-09-20 10:17:04 -07:00

tool_labels.py

feat(connectors): the backend API for the desktop Connectors page; connect an app without a chat session (#115191)

2026-09-22 13:57:51 +05:30

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

refactor: resolve runtime temp paths via tempfile/TMPDIR instead of literal /tmp

2026-09-19 10:44:26 -07:00

tool_search_catalog.py

Application-backed MCP servers: live endpoint per attempt, tools follow app liveness, errors and the tool catalog say why (NS-943) (#119050)

2026-09-22 17:54:42 +05:30

tool_search_validation.py

fix(tools): tool_call bridge treats blank arguments as no arguments

2026-09-19 10:03:11 -07:00

tool_search.py

fix: tool_search tells the model to send keyword queries, not questions

2026-09-23 11:54:30 +05:30

tour_tool.py

…

transcription_audio.py

fix(stt): isolate CAF conversions from source recordings

2026-09-22 13:40:29 +05:30

transcription_cloud.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_command.py

…

transcription_common.py

fix(qqbot): test the STT timeout at the HTTP call-site; share the 60s default and number parsing

2026-09-19 10:12:15 -07:00

transcription_local.py

…

transcription_tools.py

fix(stt): tolerate CAF work-dir cleanup errors

2026-09-22 13:40:29 +05:30

tts_command_provider.py

…

tts_streaming.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

fix: forward tts.openai.consent_attestation to every OpenAI-compatible TTS request

2026-09-19 10:10:29 -07:00

tts_tool_plugins.py

…

tts_tool_providers.py

fix(gemini): stop rerouting AQ. keys off the default Studio surface

2026-09-20 10:50:27 -07:00

tts_tool_speaker.py

fix(tts): drop the empty mkstemp placeholder when the provider wrote elsewhere

2026-09-20 10:25:30 -07:00

tts_tool.py

fix: quoted MEDIA payloads in tts output_path are rejected too (review follow-up)

2026-09-20 10:57:35 -07:00

url_safety.py

fix(url_safety): classify the IPv4-translated wrapper by its embedded IPv4

2026-09-20 15:28:59 -07:00

video_generation_tool.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

vision_tools_history_budget.py

fix: vision_analyze does not re-embed an image already attached natively to the current turn

2026-09-19 09:52:18 -07:00

vision_tools_image_prep.py

fix(vision): accept the image/jpg alias and give the Anthropic converter the same unsupported-subtype downgrade

2026-09-19 09:56:12 -07:00

vision_tools.py

fix(vision): computer_use capture and vision_analyze share one native-vision gate

2026-09-20 10:16:27 -07:00

voice_client_config.py

chore: merge origin/main (resolve apps/desktop/src/lib/voice-client-direct.ts, hermes_cli/config_defaults.py, tools/voice_client_config.py, website/docs/user-guide/features/tts.md)

2026-09-19 10:54:38 -07:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

refactor(voice): WSL detection through hermes_platform.host.runtime.is_wsl

2026-09-22 01:13:23 -07:00

wake_word_engines.py

…

wake_word.py

fix(voice): wake-word pause/stop no longer hangs on a wedged microphone stream

2026-09-20 18:26:41 -07:00

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

feat(tools): read_file renders SQLite schemas and flags merge conflicts; web_extract refuses binary payloads

2026-09-19 03:07:47 -07:00

web_tools.py

fix: web gate follows the dispatcher when the web-xai plugin resolves xai (review follow-up)

2026-09-20 10:14:37 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

…

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

fix: video generation tools no longer let the agent pick the model

2026-09-19 12:22:44 -07:00

yuanbao_tools.py

…