Teknium e9f7d44f3f fix(vault): carry the unlock prompt onto tool worker threads; honour binary_path in install checks ...

Live Desktop repro: the fixture model called browser_vault_unlock and got
unlock_unavailable although the renderer was interactive. tool_executor runs
handlers on a propagated worker thread; thread_context only copied the
approval and sudo thread-local callbacks, so the unlock prompt registered by
_wire_callbacks was invisible there and can_prompt_here() said nobody could
answer. The callback table in thread_context now lists every per-thread
prompt (approval, sudo, vault unlock) so a new one cannot silently drop off
worker threads again. After the fix the same turn shows the masked card and
completes.

vault.sources / `hermes vault sources` report a manager as installed when
its configured binary_path exists, not only when it is on PATH.

2026-09-10 10:35:07 -07:00

..

computer_use

fix: trim computer use tool schema guidance

2026-09-08 17:03:01 -07:00

environments

test(tools): pin the Git Bash probe's detached stdin in the existing probe test

2026-09-08 02:26:39 +05:30

neutts_samples

…

tool_gateway

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

wakewords

…

__init__.py

…

AGENTS.md

feat(delegation): report a child's exited-but-unread notify processes to the parent

2026-09-07 12:50:29 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

fix(approvals): honor GNU env split escapes and argv0 operands

2026-09-07 14:30:41 -07:00

approval_floors.py

fix(approvals): match denied executable paths behind shell prefixes

2026-09-07 14:30:41 -07:00

approval_gateway_wait.py

…

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

…

approval.py

fix(approval): recover legacy list values without character grants

2026-09-07 08:13:38 -07:00

arg_coercion.py

…

async_delegation.py

fix: retain completions until explicit adapter admission

2026-09-07 14:16:57 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

…

bot_live_delivery.py

fix(bot-mode): carry the relay sender into a live Bot Chat turn

2026-09-10 10:27:07 -07:00

bot_mode_dm.py

fix(bot-mode): qualify the peer-dm author id with the sender's hostname

2026-09-10 10:27:07 -07:00

bot_mode_probe.py

fix: legacy Bot Mode section in SOUL.md no longer taxes every session or shadows the live roster

2026-09-06 13:08:31 -07:00

bot_relay.py

fix(gateway): refuse relay sender fields from a logged-in client and say what the author trusts

2026-09-10 10:27:07 -07:00

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

…

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): make the real-profile attach daemon reapable (#100855, salvage #103284)

2026-09-06 23:31:05 +05:30

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

fix(browser): make the real-profile attach daemon reapable (#100855, salvage #103284)

2026-09-06 23:31:05 +05:30

browser_tool_session.py

…

browser_tool_snapshot.py

fix(tools): truncation footers name the path the SANDBOX sees, not the host path (#72389, #81984, #77015)

2026-09-05 18:46:16 +05:30

browser_tool_vision.py

…

browser_tool.py

…

browser_use_cli.py

fix(tools): kill the browser_exec CLI tree on timeout on Windows too

2026-09-09 12:11:13 -07:00

browser_vault_tool.py

feat(vault): sign in with 1Password or Bitwarden logins, unlocked per session

2026-09-10 10:35:07 -07:00

budget_config.py

…

checkpoint_manager.py

fix: round-trip checkpoint path bytes without text translation

2026-09-07 06:00:46 -07:00

clarify_gateway.py

…

clarify_tool.py

…

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

fix: keep Kanban worker scope out of descendant processes

2026-09-07 07:10:28 -07:00

code_execution_rpc.py

…

code_execution_tool.py

fix(execute-code): teach the working helper import contract

2026-09-07 06:12:24 -07:00

code_kernel_remote.py

fix(code-execution): remote kernels are keyed by their sandbox tool set (#97263)

2026-09-05 18:46:53 +05:30

code_kernel.py

…

computer_use_tool.py

…

connections_tool.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

connector_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

credential_files.py

…

cronjob_job_args.py

fix(cron): make failed runs diagnosable without verbose delivery errors

2026-09-07 08:18:56 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix(cron): make user-written bare-platform home targets continuable

2026-09-10 15:32:47 +05:30

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

fix(agent): isolate periodic scheduler callbacks from blocking siblings (#102574)

2026-09-09 12:17:57 +05:30

delegate_tool_config.py

refactor(delegation): resolve the child fallback chain through the canonical normalizer

2026-09-08 02:26:05 +05:30

delegate_tool_dispatch.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegate_tool_progress.py

fix(delegation): number delegation batches per conversation, not per process

2026-09-06 05:03:20 -07:00

delegate_tool_registry.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

delegate_tool_results.py

Merge pull request #103486 from NousResearch/fix/nested-delegate-deadline-and-summary-budget

2026-09-06 12:02:43 -07:00

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

…

env_probe.py

…

fal_common.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

…

file_operations_search.py

fix(file-ops): reuse _kill_process_group_posix in the native rg runner

2026-09-07 00:28:46 +05:30

file_operations.py

refactor(file-ops): drop the _native_rg_enabled alias, build the files-lane rg command once

2026-09-07 00:28:46 +05:30

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

…

file_tools_write_guards.py

…

file_tools.py

Merge pull request #103551 from NousResearch/fix/tool-output-caps

2026-09-06 12:05:53 -07:00

focus_pane_tool.py

…

fuzzy_match.py

…

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

feat: add FAL GPT Image 2.5 generation and editing selections

2026-09-08 14:57:15 -07:00

image_generation_tool.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

fix: mid-turn user message no longer waits behind a foreground terminal command

2026-09-05 13:51:06 -07:00

kanban_tools_schemas.py

fix(kanban): enforce declared PR acceptance at completion boundary

2026-09-07 04:46:54 -07:00

kanban_tools.py

fix(kanban): an explicit scratch workspace never inherits the board's project

2026-09-09 12:18:58 -07:00

lazy_deps.py

fix(deps): sync LAZY_DEPS platform.discord brotlicffi pin to 1.2.0.2

2026-09-07 06:35:14 -07:00

managed_gateway_auth.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

managed_tool_gateway.py

…

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: restore prior device OAuth state if persistence fails

2026-09-07 08:22:35 -07:00

mcp_oauth_manager.py

…

mcp_oauth_provider.py

fix(mcp-oauth): keep refresh_token when a refresh response omits it (#62333)

2026-09-08 17:44:51 -07:00

mcp_oauth.py

fix: ignore malformed MCP OAuth metadata caches

2026-09-07 08:22:35 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

mcp_tool_common.py

…

mcp_tool_config.py

fix: keep Kanban worker scope out of descendant processes

2026-09-07 07:10:28 -07:00

mcp_tool_content.py

…

mcp_tool_discovery.py

fix(mcp): a profile only adopts a shared connection whose credentials match its own config

2026-09-09 12:20:21 +05:30

mcp_tool_errors.py

refactor(mcp): keep the passive status RPC, drop the SDK contract and reason codes

2026-09-06 13:18:19 -07:00

mcp_tool_handlers.py

fix(mcp): classify an SDK-first transport close after dispatch as an ambiguous stdio death

2026-09-09 11:27:29 -07:00

mcp_tool_health.py

fix(gateway): register shared MCP tools per profile

2026-09-09 12:20:21 +05:30

mcp_tool_lifecycle.py

fix(gateway): preserve shared MCP visibility across profile reloads

2026-09-09 12:20:21 +05:30

mcp_tool_loop.py

…

mcp_tool_registration.py

fix(mcp): a profile only adopts a shared connection whose credentials match its own config

2026-09-09 12:20:21 +05:30

mcp_tool_sampling.py

refactor: sms AIOHTTP_AVAILABLE flag; ElicitationHandler call_context defaults to a no-op thunk; drop stale TYPE_CHECKING/type-ignore in two tests

2026-09-07 22:47:33 +05:30

mcp_tool_schema.py

…

mcp_tool_server_run.py

fix(gateway): register shared MCP tools per profile

2026-09-09 12:20:21 +05:30

mcp_tool_transport.py

…

mcp_tool.py

fix(gateway): preserve shared MCP visibility across profile reloads

2026-09-09 12:20:21 +05:30

memory_tool_store.py

refactor(memory): derive the store label from _path_for, trim the guard comment

2026-09-06 14:53:13 +05:30

memory_tool.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

fix: resolve the 33 F821 undefined names outside tui_gateway / feishu / godmode

2026-09-07 22:47:33 +05:30

path_security.py

…

plugin_guard.py

…

preview_tool.py

…

process_registry_checkpoint.py

refactor(tools): extract process checkpoint persistence

2026-09-07 08:25:33 -07:00

process_registry_notifications.py

feat(delegation): report a child's exited-but-unread notify processes to the parent

2026-09-07 12:50:29 -07:00

process_registry_results.py

fix(tools): always redact durable process receipts

2026-09-07 08:25:33 -07:00

process_registry.py

test(process-registry): exercise the portable probe payload

2026-09-09 10:56:37 +05:30

project_tools.py

…

react_to_message_tool.py

…

read_extract.py

…

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

…

schema_sanitizer.py

fix(schemas): preserve required intent without invalid boolean flags

2026-09-07 08:14:51 -07:00

self_repo_guard.py

…

send_message_senders.py

…

send_message_targets.py

…

send_message_tool.py

fix(relay): authorize send_message targets and surface egress declines (P5) (#99220)

2026-09-08 17:51:35 +10:00

session_search_tool.py

fix(sessions): a stale explicit-close stamp no longer makes a session permanently uncompressible

2026-09-10 03:04:51 -07:00

setup_mcp_tool.py

…

shell_heredoc.py

…

skill_ledger.py

…

skill_linter.py

…

skill_manager_batch.py

…

skill_manager_guards.py

…

skill_manager_tool.py

…

skill_provenance.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

skill_usage.py

…

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

…

skills_hub_clawhub.py

fix: accept the live ClawHub version-list response shape

2026-09-07 07:05:59 -07:00

skills_hub_github.py

…

skills_hub_install.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skills_hub_models.py

…

skills_hub_official.py

…

skills_hub_search.py

…

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

…

skills_sync_bundled_ops.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

…

skills_sync_optional.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

…

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

…

terminal_tool_backends.py

fix(ssh): isolate prompt backend probes from file sync

2026-09-06 13:32:51 +05:30

terminal_tool_background.py

feat(delegation): subagents hand background processes to the parent; leftovers are named, not trusted

2026-09-07 12:50:29 -07:00

terminal_tool_config.py

fix(terminal): every Windows drive letter is a host cwd, not just C: (#60962)

2026-09-05 19:01:22 +05:30

terminal_tool_guards.py

fix: explain the launchctl registration restriction without inventing KeepAlive

2026-09-07 06:05:51 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

…

terminal_tool_sudo.py

fix(terminal): show sudo password prompts for paths and env prefixes

2026-09-07 07:09:30 -07:00

terminal_tool.py

Merge pull request #103529 from NousResearch/fix/terminal-auto-background

2026-09-06 12:06:04 -07:00

thread_context.py

fix(vault): carry the unlock prompt onto tool worker threads; honour binary_path in install checks

2026-09-10 10:35:07 -07:00

threat_patterns.py

fix(threats): keep unrelated role prose in context files

2026-09-07 08:09:20 -07:00

tip_tool.py

…

tirith_security.py

…

todo_tool.py

…

tool_backend_helpers.py

…

tool_output_limits.py

…

tool_result_storage.py

…

tool_search_catalog.py

fix(tool-search): a query no tool answers returns nothing, not five tools sharing one word (#106676)

2026-09-10 02:21:15 +05:30

tool_search_validation.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

…

transcription_command.py

…

transcription_common.py

…

transcription_local.py

…

transcription_tools.py

…

tts_command_provider.py

…

tts_streaming.py

…

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

…

tts_tool_speaker.py

…

tts_tool.py

…

url_safety.py

…

video_generation_tool.py

…

vision_tools_image_prep.py

…

vision_tools.py

…

voice_client_config.py

…

voice_mode_transcript.py

…

voice_mode.py

…

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

…

web_tools_truncate.py

fix(tools): truncation footers name the path the SANDBOX sees, not the host path (#72389, #81984, #77015)

2026-09-05 18:46:16 +05:30

web_tools.py

…

website_policy.py

…

working_diff.py

…

write_approval.py

…

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

…

yuanbao_tools.py

…