teknium1 1c21a50254 fix(lsp): cap the workspace-root cache and the eventlog announce buckets (#62950) ...

Both are process-lifetime per-path structures with the same growth shape as the caches
this PR already bounds: _workspace_cache only cleared on service shutdown, the
(server_id, file_path) dedup bucket never. Each resets past a fixed cap (512); for the
stat cache that costs a few re-stats, for the dedup bucket one re-fired INFO line per
key, and a single clear() keeps the lock-free stat cache thread-safe.

2026-09-19 01:55:38 -07:00

..

lsp

fix(lsp): cap the workspace-root cache and the eventlog announce buckets (#62950)

2026-09-19 01:55:38 -07:00

monitoring

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

pet

fix(security): route remote-party-supplied URL fetches through the SSRF guard

2026-09-18 10:22:14 -07:00

proxy_sources

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

secret_sources

fix(utils): atomic writers refuse to resurrect a deleted named profile home

2026-09-16 00:32:15 -07:00

transports

fix(agent): alias Perplexity-reserved Responses tools

2026-09-18 09:54:13 -07:00

vault_backends

fix: skip Bitwarden URIs marked match=Never when collecting fill origins

2026-09-15 04:56:01 -07:00

verify

…

__init__.py

…

account_usage.py

fix(usage): preserve routed profile context in Nous account fetches

2026-09-16 11:06:06 -07:00

acp_openai_bridge.py

…

activity_tracking.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

agent_init.py

fix(agent_init): judge the served window only for local endpoints; clamp after the floor as before

2026-09-19 11:44:15 +05:30

agent_runtime_helpers.py

docs(agent): the finish explainer's terminal set is a sibling heuristic, not the same one

2026-09-19 12:12:04 +05:30

AGENTS.md

fix(compression): repeated summary stall escalates to the deterministic fallback summary

2026-09-17 08:59:50 -07:00

anthropic_adapter.py

refactor(anthropic): quote characters only mark an identifier from the left

2026-09-19 01:44:10 +05:30

anthropic_credentials.py

fix(anthropic): mirror only the Keychain item that held the spent pair; parse both security attribute encodings

2026-09-19 11:25:23 +05:30

anthropic_endpoints.py

…

anthropic_message_convert.py

fix(anthropic): merged user turns keep each turn as its own text block

2026-09-17 08:46:05 -07:00

api_error_summary.py

refactor(agent): one home for the stream parse-error markers

2026-09-14 20:01:19 +05:30

api_request_hooks.py

…

async_utils.py

…

aux_accounting.py

…

auxiliary_async_rebuild.py

fix(aux): keep key_cmd bearer and extra_headers on async aux calls to named custom providers

2026-09-17 08:53:15 -07:00

auxiliary_client.py

fix(auth): missing-credential hints name the real env var or the OAuth login (#114405, #78996)

2026-09-18 11:11:44 -07:00

auxiliary_fallback_recovery.py

fix(aux): fallback ladder route carries the client base_url; test builds the route by name

2026-09-17 08:45:46 -07:00

auxiliary_health.py

fix(aux): quarantine a transient fallback-candidate failure for seconds, not the payment hold

2026-09-17 09:07:51 -07:00

auxiliary_structured_output.py

fix(aux): scope the response_format rejection memo to the model and to capability errors

2026-09-17 09:11:38 -07:00

auxiliary_unavailable.py

fix(auth): missing-credential hints name the real env var or the OAuth login (#114405, #78996)

2026-09-18 11:11:44 -07:00

auxiliary_wire.py

…

azure_identity_adapter.py

fix(secret-scope): mem0, langfuse and azure credential readers stop swallowing UnscopedSecretError

2026-09-13 05:19:48 -07:00

backend_identity.py

…

background_review.py

fix(review): derive the default input budget from the fork's resolved context window

2026-09-18 19:18:57 -07:00

battery.py

…

bedrock_adapter.py

fix(bedrock): resolve application-inference-profile ARNs before the prompt-cache allowlist match

2026-09-18 15:15:02 -07:00

billing_links.py

…

billing_usage.py

fix(usage): preserve routed profile context in Nous account fetches

2026-09-16 11:06:06 -07:00

billing_view.py

…

bounded_response.py

…

browser_provider.py

…

browser_registry.py

…

chat_completion_helpers_relay.py

fix(agent): preserve streamed refusals as text (port of anomalyco/opencode#43343)

2026-09-15 03:39:07 -07:00

chat_completion_helpers.py

fix: MoA aggregator merges adjacent same-role messages only for destinations that reject them

2026-09-18 20:56:35 -07:00

chat_completion_nonstream.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

chat_completion_stream_monitor.py

…

client_lifecycle.py

fix(file-state): close() releases file state for every task id the agent ran; drop the writer TTL knob

2026-09-18 10:10:40 -07:00

codex_headers.py

…

codex_responses_adapter.py

fix(responses): avoid invented empty assistant turns before tool replay

2026-09-16 14:23:20 -07:00

codex_runtime.py

test(codex): trim exit-status replay coverage to two invariants

2026-09-18 09:34:10 -07:00

coding_context.py

…

command_token_source.py

fix(multiplex): children spawned for a served profile start from that profile's env

2026-09-15 03:47:15 -07:00

compaction_display.py

…

compression_facade.py

fix(compression): a timed-out preflight compaction sends a fitting request and prune-commits an over-window one

2026-09-18 10:36:11 -07:00

context_breakdown.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

context_compressor_summary.py

fix(compression): a timed-out preflight compaction sends a fitting request and prune-commits an over-window one

2026-09-18 10:36:11 -07:00

context_compressor.py

fix(agent): re-prompt once when a turn that did tool work ends on a collapsed fragment

2026-09-19 12:12:04 +05:30

context_engine.py

feat(compression): provider-scoped model_thresholds keys ("<provider>:<substr>")

2026-09-11 02:07:48 -07:00

context_file_sources.py

fix(prompt_builder): load the user's own SOUL.md on a scanner hit instead of blocking it

2026-09-16 17:17:47 -07:00

context_references.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

conversation_compression_manual.py

fix(agent): manual /compress "nothing to compress" gate stays gateway-only

2026-09-13 05:20:26 -07:00

conversation_compression.py

fix(compression): scope the checkpoint remediation to capability refusals; trim tests

2026-09-18 13:58:52 -07:00

conversation_loop.py

fix(agent): re-prompt once when a turn that did tool work ends on a collapsed fragment

2026-09-19 12:12:04 +05:30

copilot_acp_client.py

fix(acp): give each CopilotACPClient session its own process slot

2026-09-18 09:33:38 -07:00

credential_persistence.py

…

credential_pool_admin.py

fix(agent): scope Anthropic 429 cooldowns to model

2026-09-16 17:16:06 -07:00

credential_pool_model_cooldowns.py

fix(anthropic): model-scoped 429 cooldowns live in a pool sibling; restore path no longer NameErrors

2026-09-16 17:16:06 -07:00

credential_pool.py

fix(anthropic): mirror only the Keychain item that held the spent pair; parse both security attribute encodings

2026-09-19 11:25:23 +05:30

credential_sources.py

feat(auth): opt out of borrowing Codex CLI / Claude Code logins (auth.adopt_external_logins)

2026-09-18 20:55:24 -07:00

credits_tracker.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

curator_backup.py

fix: validate the skill name before opening its lock; key lock files on a digest

2026-09-15 19:03:33 -07:00

curator.py

fix(skills): keep absorbed_into in the delete shape; decide every patch shape miss pre-effect

2026-09-17 08:47:01 -07:00

deadline.py

…

delegation_context.py

fix: kanban guidance and stop nudge resolve worker identity through one helper

2026-09-16 17:48:48 -07:00

display.py

fix(guardrails): mark every file-tool loop refusal and exempt it on the live failure seam

2026-09-18 10:03:04 -07:00

empty_response_guard.py

…

error_classifier.py

fix: MoA aggregator merges adjacent same-role messages only for destinations that reject them

2026-09-18 20:56:35 -07:00

error_surface.py

fix(nous): classify the desktop's escaped-exception card with the request credential

2026-09-17 12:28:25 +05:30

errors.py

…

estop.py

…

fallback_cooldown.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

fast_mode.py

…

file_safety.py

fix: drop no-op suppress around named-home expanduser in _guard_homes

2026-09-18 10:08:58 -07:00

gemini_native_adapter.py

fix(gemini): route Vertex AI express keys (AQ.) to aiplatform instead of 403ing on AI Studio

2026-09-18 09:28:39 -07:00

gemini_schema.py

feat(gemini): send full JSON Schema tool parameters via parametersJsonSchema

2026-09-14 06:44:54 -07:00

i18n.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

image_eviction_policy.py

fix(agent): quantize eviction by the fit window so heavy tool results hold the frontier

2026-09-17 13:52:36 +05:30

image_gen_provider.py

…

image_gen_registry.py

…

image_routing.py

fix(model): preserve unknown custom capabilities

2026-09-16 17:09:50 -07:00

image_token_cost.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

inline_tool_executors.py

fix(session_search): forward after/before/exclude_session_ids through the inline executor

2026-09-15 03:58:05 -07:00

insights.py

fix(insights): count tool usage per session before merging the two sources

2026-09-12 08:23:13 -07:00

interrupt_compat.py

…

interrupt_control.py

fix(agent): clear_interrupt drops an unconsumed steer only on hard cancel

2026-09-18 13:01:12 -04:00

interrupt_scope.py

fix: attribute gateway lifecycle stops to their system issuer, not the user

2026-09-16 17:48:17 -07:00

iteration_budget.py

fix: keep budget checkpoints out of cancelled tool results

2026-09-07 08:28:43 -07:00

jiter_preload.py

…

kanban_stop.py

fix(kanban): stop-guard nudge names every worker exit; sync terminal-tool copies

2026-09-18 09:21:42 -07:00

lazy_forward.py

…

learn_prompt.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

learning_graph_render.py

…

learning_graph.py

fix: validate the skill name before opening its lock; key lock files on a digest

2026-09-15 19:03:33 -07:00

learning_mutations.py

…

lmstudio_reasoning.py

…

manual_compression_feedback.py

…

markdown_tables.py

…

memory_manager.py

refactor(memory-plugins): background threads inherit the profile context; JSON sidecar reads and the holographic config.yaml write use core primitives

2026-09-13 05:19:48 -07:00

memory_provider.py

fix(multiplex): background threads and teardown paths carry the turn's profile scope

2026-09-15 03:47:15 -07:00

message_content.py

…

message_metadata.py

…

message_sanitization.py

refactor(agent): one outbound-kwargs sanitizer seam for the main loop and the summary

2026-09-14 20:35:28 +05:30

micro_compaction.py

…

moa_alternation.py

fix: MoA aggregator merges adjacent same-role messages only for destinations that reject them

2026-09-18 20:56:35 -07:00

moa_loop.py

fix: MoA aggregator merges adjacent same-role messages only for destinations that reject them

2026-09-18 20:56:35 -07:00

moa_trace.py

…

model_metadata.py

docs(bedrock): specify persisted URL for cache invalidation

2026-09-17 18:36:10 -07:00

models_dev.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

moonshot_schema.py

…

native_compaction.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

notification_presentation.py

refactor(notifications): one notice classification, one config read, one diagnostic-metadata helper

2026-09-18 01:43:35 +05:30

nous_rate_guard.py

fix(nous): keep anonymous errors exclusive to anonymous users

2026-09-17 12:28:25 +05:30

nous_wire.py

…

onboarding.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

oneshot.py

…

opencode_affinity.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

outbound_webhooks.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

periodic_scheduler.py

fix(agent): preserve periodic callback context

2026-09-16 11:06:06 -07:00

plan_prompt.py

…

plugin_llm.py

…

plugin_stream_hooks.py

fix(plugins): stream observer hooks and event subscribers fail-report once, not per event

2026-09-17 09:03:29 -07:00

portal_tags.py

…

process_bootstrap.py

fix(bootstrap): race IPv6/IPv4 for every sync connect from the process bootstrap, not per client

2026-09-18 09:56:28 -07:00

prompt_builder.py

fix(prompt_builder): keep blocking a distribution-owned SOUL.md on a scanner hit

2026-09-16 17:17:47 -07:00

prompt_cache_boundary.py

…

prompt_cache_scope.py

fix(agent): same-model review fork keeps the parent's affinity header and Portal conversation root (#109964)

2026-09-14 06:55:54 -07:00

prompt_caching.py

…

provider_base.py

…

provider_media.py

fix(video-gen): trust the operator-configured origin on the first download hop

2026-09-18 10:22:14 -07:00

provider_projection.py

…

provider_registry.py

…

proxy_bypass.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

rate_limit_credits.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

rate_limit_tracker.py

…

reactions.py

…

reasoning_effort.py

feat(providers): remove the keyless opencode-free tier

2026-09-18 15:40:37 +05:30

reasoning_params.py

refactor(agent): drop the Optional import orphaned by the LM Studio helper removal

2026-09-14 20:35:28 +05:30

reasoning_summaries.py

fix(agent): streamed reasoning_details survive for replay continuity (port of earendil-works/pi#8605)

2026-09-13 21:27:35 -07:00

reasoning_timeouts.py

feat(models): DeepSeek V4.1 Flash on the Nous Portal and OpenRouter pickers

2026-09-10 09:22:31 -07:00

redact.py

fix(redact): dotted sk- body cannot span "..", so display masks survive a second pass; Zhipu matcher is 32-hex.16+alnum

2026-09-18 09:58:12 -07:00

relay_llm.py

fix(agent): refusal handler reports Anthropic stop_details instead of "(no text)"

2026-09-18 09:52:36 -07:00

relay_runtime.py

feat(relay): migrate legacy HERMES_NEMO_RELAY_ATIF_*/ATOF_* vars into a validated relay-plugins.toml

2026-09-15 03:44:36 -07:00

relay_tools.py

…

repetition_guard.py

fix: only drop an interrupted partial for the runaway repetition shape

2026-09-16 17:10:13 -07:00

replay_cleanup.py

refactor(agent): fail loudly on a missing turn clock; single lowercase in is_dangerous_confirmation

2026-09-13 19:23:09 +05:30

retry_utils.py

fix(agent): explicit "retry after N s" wins over "resets in ..." in the shared reset table

2026-09-13 05:09:43 -07:00

review_engine.py

fix: make review workers recognizable in live subagent viewers

2026-09-08 04:38:47 -07:00

review_idle_queue.py

…

runtime_cwd.py

fix(tui): project-local skills register and dispatch for the session's repo

2026-09-18 10:22:47 -07:00

sdk_transform_bypass.py

fix(agent): keep moved chat fields as slot placeholders so the wire body is byte-identical; one shared escape hatch

2026-09-15 19:23:53 -07:00

search_policy.py

…

secret_scope.py

refactor(secret_scope): key the .env memo on utils.file_signature

2026-09-17 20:56:27 +05:30

session_activity.py

…

session_persistence.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

shell_hooks.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

side_question.py

…

skill_bundles.py

…

skill_commands.py

fix(skills): built-in name collisions show a note in /skills, /help skills and the palette

2026-09-18 12:51:22 -07:00

skill_preprocessing.py

…

skill_utils.py

fix(skills): resolve project roots from session cwd

2026-09-18 10:22:47 -07:00

ssl_guard.py

…

ssl_verify.py

…

status_output.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

stream_delivery.py

…

stream_diag.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

stream_single_writer.py

…

subagent_lifecycle.py

…

subdirectory_hints.py

fix(agent): suppress subdirectory hint truncation warning

2026-09-15 18:19:26 -07:00

subscription_view.py

…

surface_switch.py

simplify(agent): surface switch — reuse flatten_message_text / agent_tool_names / one runtime-boundary split

2026-09-09 10:31:26 +05:30

system_prompt.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

terminal_approval_batch.py

fix(approval): prepare batches for desktop session sources

2026-09-16 06:27:23 -05:00

terminal_env_provider.py

…

terminal_env_registry.py

…

think_scrubber.py

refactor(display): one think-tag list; ACP tool titles derive from agent/display previews

2026-09-13 05:20:26 -07:00

thinking_timeout_guidance.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

thread_scoped_output.py

…

title_generator.py

fix(agent): a paste-only opener's expansion footer must not demote the title preview

2026-09-18 10:56:00 -07:00

tool_dispatch_helpers.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_executor.py

fix(checkpoints): refuse host rollback and session diff from container sessions on the gateway too

2026-09-18 10:38:08 -07:00

tool_guardrails.py

fix(guardrails): mark every file-tool loop refusal and exempt it on the live failure seam

2026-09-18 10:03:04 -07:00

tool_result_classification.py

fix(guardrails): mark every file-tool loop refusal and exempt it on the live failure seam

2026-09-18 10:03:04 -07:00

trace_upload.py

…

trajectory.py

fix(agent): keep trajectory serialization inside the best-effort handler

2026-09-12 08:25:14 -07:00

transcript_repair.py

…

transcription_provider.py

…

transcription_registry.py

…

tts_provider.py

…

tts_registry.py

…

turn_api_call.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_api_error.py

fix(agent): recognise reversed "reasoning_effort 'none' unsupported" on every surface (#114460)

2026-09-18 10:21:05 -07:00

turn_api_request.py

refactor(agent): one outbound-kwargs sanitizer seam for the main loop and the summary

2026-09-14 20:35:28 +05:30

turn_author.py

feat(agent): a2a_key names a bot author's turns

2026-09-10 10:45:57 -07:00

turn_context_compaction.py

…

turn_context.py

fix(desktop): use generated paste previews for titles

2026-09-18 10:56:00 -07:00

turn_empty_response.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_explainers.py

fix(checkpoints): drop the defence layers around the never-raising backend predicate

2026-09-18 10:38:08 -07:00

turn_facade_lease.py

fix(agent): system watchdog interrupts are attributed to their issuer, not the user

2026-09-16 17:48:17 -07:00

turn_facade.py

refactor: carry the unadmitted user message from the lease sibling, not the facade

2026-09-15 04:18:34 -07:00

turn_failure_copy.py

fix(agent): terminal copy for the new role_alternation failure reason

2026-09-18 20:56:35 -07:00

turn_final_response.py

fix(agent): judge "wrong script" against the user's own message; one continuation kind per stop

2026-09-19 12:12:04 +05:30

turn_finalizer.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_iteration_prep.py

fix(kanban): sync terminal-knowledge copies that kanban_request_review callers hit

2026-09-18 09:21:42 -07:00

turn_liveness.py

fix(agent): isolate periodic scheduler callbacks from blocking siblings (#102574)

2026-09-09 12:17:57 +05:30

turn_loop_errors.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_overflow.py

fix(agent): a server context rejection the transcript cannot explain is no longer "conversation too long"

2026-09-18 19:18:57 -07:00

turn_preflight_gate.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_preflight.py

fix(compression): probe aux feasibility before the first compaction; clear stale clamp notice on un-clamp

2026-09-18 09:49:14 -07:00

turn_recovery.py

fix(agent): recognise reversed "reasoning_effort 'none' unsupported" on every surface (#114460)

2026-09-18 10:21:05 -07:00

turn_request_assembly.py

…

turn_response_check.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_response_intake.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_retry_state.py

feat(free-tier): ruled behaviour for every welcome-api failure, with friendly copy and a fault-injecting rehearsal server

2026-09-15 20:44:42 +05:30

turn_stop_gates.py

fix(kanban): stop-guard nudge names every worker exit; sync terminal-tool copies

2026-09-18 09:21:42 -07:00

turn_summary.py

…

turn_tool_round.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_tool_validation.py

feat(notifications): opt-in suppression of user-channel warning notifications

2026-09-18 01:43:35 +05:30

turn_truncation.py

fix(agent): refusal handler reports Anthropic stop_details instead of "(no text)"

2026-09-18 09:52:36 -07:00

turn_usage.py

fix(bedrock): restore Grok context with provider-confirmed cache provenance

2026-09-17 18:36:10 -07:00

usage_anchor.py

…

usage_pricing.py

fix(deepseek): deepseek-flash is the canonical Flash id; retired names fold onto it

2026-09-10 02:44:26 -07:00

vault_login_classifier.py

fix(vault): 2FA review follow-ups — per-digit fill only for an unmistakable maxlength=1 widget; honour otpauth digits/period/algorithm

2026-09-10 11:48:01 -07:00

vault_store.py

fix(vault): bind manager logins to every saved web origin

2026-09-15 04:56:01 -07:00

verification_evidence.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

verification_stop.py

…

verify_hooks.py

…

vertex_adapter.py

…

video_gen_provider.py

fix(video-gen): trust the operator-configured origin on the first download hop

2026-09-18 10:22:14 -07:00

video_gen_registry.py

…

vision_message_prep.py

fix(vision): honor routed tool message veto

2026-09-15 04:48:20 -07:00

web_search_provider.py

…

web_search_registry.py

…