Gille 819cc3cbe0 Merge pull request #132622 from NousResearch/fix/ssh-session-cwd-origin ...

fix(tui): keep resumed ssh sessions out of the Hermes host's directories (supersedes #132025)

2026-10-04 01:24:46 -06:00

..

bot_desktop

…

computer_use

fix(computer-use): skip driver self-windows in implicit capture

2026-10-02 20:30:25 -05:00

connectors

fix(skills): brace the remaining role-tag placeholders that reach the model

2026-10-04 11:56:08 +05:30

environments

fix: HASS_TOKEN stays out of child processes when the Home Assistant plugin is absent

2026-10-04 00:08:20 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

refactor: move Home Assistant out of core into the homeassistant catalog plugin

2026-10-04 00:08:20 -07:00

annotate_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_detection.py

fix(approval): give global-flag runs one parse in dangerous-command rules

2026-09-30 21:33:08 -04:00

approval_floors.py

…

approval_gateway_wait.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_human_wait.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_prompt.py

Revert "feat(approval): a turn can hold its approval prompts open until answered"

2026-10-01 13:23:12 -07:00

approval_smart.py

…

approval.py

Revert "chore: review follow-ups — stale timeout comments, softer docs claim, group-turn cap credits only user-blocked intervals"

2026-10-01 13:23:12 -07:00

arg_coercion.py

…

async_delegation_recovery_hints.py

fix(git): neutralize repository-named filters at the kanban, worktree-gc and recovery-hint calls

2026-10-02 01:24:41 +05:30

async_delegation.py

…

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

fix(bot-relay): classify the named-secret spelling of a scope refusal too

2026-10-01 16:18:46 +05:30

bot_live_delivery.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_dm.py

fix(bot-mode): bound the live DM wait and check the owner with the claim's own match

2026-09-30 10:00:37 -05:00

bot_mode_probe.py

…

bot_relay.py

test(bot-relay): pin that a home override beats the launch-home fallback

2026-10-01 16:18:46 +05:30

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

…

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

…

browser_tool_cdp.py

…

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): /browser connect and disconnect retarget browser_exec

2026-10-02 11:06:58 -05:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

fix(browser): bound real-profile resolver lock wait

2026-10-02 22:54:53 -05:00

browser_tool_session.py

fix(tools): preserve agent-browser session for CDP commands to resolve snapshot refs

2026-10-01 03:18:09 -05:00

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

fix(browser): bound real-profile resolver lock wait

2026-10-02 22:54:53 -05:00

browser_use_cli.py

fix(desktop,tui): /browser use [off] works outside the CLI

2026-10-02 11:24:58 -05:00

browser_vault_tool.py

…

budget_config.py

…

checkpoint_maintenance.py

…

checkpoint_manager_profile_rename.py

…

checkpoint_manager.py

fix(checkpoints): refuse an empty restore selection and delete read-only test repos

2026-09-29 14:12:41 -04:00

checkpoint_pruning.py

…

clarify_gateway.py

Revert "docs: approvals.timeout and agent.clarify_timeout are the messaging-platform deadlines"

2026-10-01 13:23:12 -07:00

clarify_tool.py

fix(tools): reject all-blank and over-limit clarify choices instead of dropping them silently

2026-09-29 19:44:05 -05:00

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

…

code_execution_rpc.py

…

code_execution_tool.py

…

code_kernel_remote.py

…

code_kernel.py

…

computer_use_tool.py

…

credential_files.py

refactor(gateway): name the media-cache max age and lstat cache files once

2026-10-02 01:18:03 +05:30

cronjob_job_args.py

fix(cron): name a malformed base_url as invalid; read custom providers via the public view

2026-10-03 16:31:09 +05:30

cronjob_prompt_scan.py

…

cronjob_tools.py

refactor(cron): import Future at module level in cronjob_tools

2026-10-04 01:52:54 +05:30

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

…

delegate_tool_config.py

fix(delegate): preserve inherited fixed child credentials

2026-10-02 20:24:30 -05:00

delegate_tool_dispatch.py

fix(delegation): surface the skipped home pin and prune the pinned root

2026-10-02 21:49:36 -05:00

delegate_tool_progress.py

…

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

…

delegate_tool.py

fix(delegation): type-validate the parent db_path before pinning the live home

2026-10-02 21:49:36 -05:00

delegation_live_log.py

fix(delegation): surface the skipped home pin and prune the pinned root

2026-10-02 21:49:36 -05:00

delegation_output_schema.py

…

desktop_ui.py

fix(desktop): route message.reaction events by session id, not window id

2026-10-01 01:53:55 -05:00

discord_tool.py

…

drive_preview_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

env_passthrough.py

…

env_probe.py

…

fal_common.py

…

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

fix(file-ops): refuse JSON NaN/Infinity only when the write introduces it

2026-10-02 01:15:39 +05:30

file_operations_search.py

fix(tools): keep the find lane's depth-0 match; exclude the root by identity

2026-10-02 21:47:39 -05:00

file_operations.py

refactor(tools): pass the Unicode edit plan explicitly; tighten JSON constant scan

2026-10-02 01:15:39 +05:30

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

…

file_tools_write_guards.py

…

file_tools.py

…

focus_pane_tool.py

…

fuzzy_match.py

refactor(tools): pass the Unicode edit plan explicitly; tighten JSON constant scan

2026-10-02 01:15:39 +05:30

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

refactor(image_gen): managed_route() owns stored-value normalisation; unreadable Krea refs return an error

2026-10-01 16:22:28 +05:30

image_generation_tool.py

refactor(image_gen): managed_route() owns stored-value normalisation; unreadable Krea refs return an error

2026-10-01 16:22:28 +05:30

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

…

kanban_tools_schemas.py

fix(kanban): point bare kanban_show/comment calls at kanban_list outside a worker

2026-10-02 18:41:16 -05:00

kanban_tools.py

fix(kanban): bind auto-subscriptions to the live session after a compaction fork

2026-10-02 20:24:01 -05:00

kanban_toolset_context.py

…

lazy_deps.py

…

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(web): restore free fast search for anonymous guest users

2026-10-04 00:10:54 +05:30

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_liveness.py

fix(platform): an unreadable GPU classifies as unknown, so requires.gpu fails open as documented

2026-10-03 10:26:12 -07:00

mcp_oauth_device.py

…

mcp_oauth_manager.py

…

mcp_oauth_provider.py

…

mcp_oauth.py

…

mcp_schema_cache.py

…

mcp_tool_agent.py

…

mcp_tool_common.py

…

mcp_tool_config.py

…

mcp_tool_content.py

…

mcp_tool_discovery.py

…

mcp_tool_errors.py

…

mcp_tool_handlers.py

…

mcp_tool_health.py

…

mcp_tool_lifecycle.py

fix(mcp): SIGKILL a dead MCP server's descendants that ignored SIGTERM

2026-10-03 09:38:33 -07:00

mcp_tool_loop.py

…

mcp_tool_node_abi.py

…

mcp_tool_registration.py

…

mcp_tool_sampling.py

…

mcp_tool_schema.py

…

mcp_tool_scope.py

…

mcp_tool_server_run.py

…

mcp_tool_transport.py

fix(mcp): re-validate PGID ownership before killing orphaned process groups

2026-10-02 20:29:17 -05:00

mcp_tool.py

…

memory_tool_store.py

…

memory_tool.py

fix: guard memory tool against missing action and operations (#64291)

2026-10-02 20:24:20 -05:00

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

…

plugin_guard_context.py

fix(plugin-guard): Google installed-app OAuth client secrets no longer hard-block a plugin install

2026-10-03 09:43:03 -07:00

plugin_guard.py

fix(plugin-guard): Google installed-app OAuth client secrets no longer hard-block a plugin install

2026-10-03 09:43:03 -07:00

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_notifications.py

…

process_registry_results.py

…

process_registry.py

fix(process_registry): stop systemd-run expanding scoped commands (#132385)

2026-10-04 11:02:21 +05:30

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

…

read_preview_tool.py

fix(tools): word the read_preview hint so the Windows footgun lint doesn't read it as open()

2026-09-29 12:25:29 -05:00

read_terminal_tool.py

fix(tools): split the merged preview/terminal bridge timeout errors into the two cases they conflate

2026-09-29 12:25:29 -05:00

read_window_tool.py

…

registry.py

…

schema_sanitizer.py

…

self_repo_guard.py

…

send_message_senders.py

…

send_message_targets.py

fix: send_message to a Home Assistant target names the install command while its plugin is absent

2026-10-04 00:08:20 -07:00

send_message_tool.py

fix: send_message to a Home Assistant target names the install command while its plugin is absent

2026-10-04 00:08:20 -07:00

session_search_tool.py

…

shell_heredoc.py

…

skill_ledger.py

…

skill_linter.py

…

skill_manager_batch.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skill_manager_guards.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skill_manager_tool.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skill_provenance.py

…

skill_usage.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(plugin-guard): false-positive round 3 from the 2026-10-01 catalog sweep

2026-10-01 22:05:55 -07:00

skills_hub_clawhub.py

…

skills_hub_github.py

…

skills_hub_install.py

…

skills_hub_models.py

…

skills_hub_official.py

…

skills_hub_search.py

…

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

…

skills_sync_bundled_ops.py

…

skills_sync_optional.py

…

skills_sync.py

…

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

refactor: remove Skill Sync (hermes sync) and the org skill mirror from core

2026-10-03 23:05:48 -07:00

slash_confirm.py

…

spill_safety.py

…

stt_lease.py

fix(desktop): carry STT warm-up readiness into transcription and enforce lease ownership

2026-09-30 15:16:40 -05:00

subagent_worktree.py

fix(git): neutralize repository-named filters in subagent finalization, worktree reclaim and hermes -w

2026-10-02 01:24:41 +05:30

terminal_hints.py

…

terminal_scope.py

…

terminal_tool_backends.py

…

terminal_tool_background.py

…

terminal_tool_config.py

…

terminal_tool_guards.py

…

terminal_tool_lifecycle.py

…

terminal_tool_macos_open.py

fix(terminal): report the open outcome from the final observed frontmost state

2026-10-02 22:42:55 -05:00

terminal_tool_result.py

…

terminal_tool_sudo.py

…

terminal_tool.py

fix(tools): coerce restored SSH session working directories

2026-10-03 16:30:40 +02:00

thread_context.py

…

threat_patterns.py

…

tip_tool.py

…

tirith_security.py

fix(security): the first tirith scan no longer waits on its download (#128150)

2026-09-29 17:29:05 +00:00

todo_tool.py

…

tool_backend_helpers.py

refactor(web): drop the gate's leftovers and keep the tier rules tested

2026-10-04 00:10:54 +05:30

tool_labels.py

…

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

…

tool_search_catalog.py

…

tool_search_validation.py

fix(skills): brace the remaining role-tag placeholders that reach the model

2026-10-04 11:56:08 +05:30

tool_search.py

fix(agent): execute local tool batches through per-tool pipeline

2026-10-01 23:50:31 -07:00

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

…

transcription_command.py

…

transcription_common.py

…

transcription_local.py

…

transcription_tools.py

fix(desktop): pin each voice operation to one owner and fence stale STT continuations

2026-09-30 15:16:40 -05:00

tts_command_provider.py

fix(tts): hide the console window on Windows command-provider spawns

2026-10-02 18:35:34 -05:00

tts_streaming.py

…

tts_text_normalize.py

fix(tts): silence identifier-dense tokens in both speech normalizers

2026-09-30 23:02:33 -05:00

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

…

tts_tool_speaker.py

…

tts_tool.py

…

url_safety.py

…

video_generation_tool.py

…

vision_tools_history_budget.py

…

vision_tools_image_prep.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

vision_tools.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

voice_client_config.py

fix(desktop): client-direct STT hallucination filter and voice.barge_in pref (#126708)

2026-09-29 18:19:39 -05:00

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

fix(voice): honor configured silence_threshold and stop gating streaming TTS on sounddevice

2026-10-02 18:35:45 -05:00

wake_word_engines.py

…

wake_word.py

fix(wake): keep the halt hook armed on the recovered capture

2026-09-29 19:14:28 -05:00

web_result_cache.py

…

web_tools_extract.py

…

web_tools_rescue.py

fix(web): serve free managed fast search to every Nous identity

2026-10-01 23:55:54 +05:30

web_tools_truncate.py

…

web_tools.py

fix(web): serve free managed fast search to every Nous identity

2026-10-01 23:55:54 +05:30

website_policy.py

…

working_diff.py

…

write_approval.py

fix(skills): preview a staged patch through the approval matcher

2026-09-30 23:05:43 -05:00

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

…

yuanbao_tools.py

…