teknium1 e609efb06a fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection ...

Under gateway.multiplex_profiles a profile whose mcp_servers entry has the
same route and credentials as another profile's live connection adopts that
connection instead of opening its own. _same_server_route() compares only
the connection identity, so a `trust: untrusted` profile adopted a
`trust: full` profile's connection; _trust_gate_check() then resolved the
OWNER's connection key, read `full`, and let the untrusted profile run
write-capable tools without the approval prompt its config demands
(review of #108352, finding A; regression from ceaf622c6d, where the
name-keyed ledger let the last registrant's trust win instead).

`trust` is the consuming profile's policy, not a property of the
connection: _server_trust_levels is now keyed by the calling profile's own
key (recorded at its own registration and at adoption, dropped when its
overlay is removed), while readOnlyHint stays under the connection key
because it describes the server's tools. Sharing the connection is still
allowed — only the gate is per profile.

2026-09-13 15:41:01 -07:00

..

computer_use

fix(tools): browser_exec and computer_use caches are namespaced by the served profile

2026-09-13 14:41:26 -07:00

environments

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

neutts_samples

…

tool_gateway

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958)

2026-09-11 15:45:43 +05:30

wakewords

…

__init__.py

…

AGENTS.md

feat(delegation): report a child's exited-but-unread notify processes to the parent

2026-09-07 12:50:29 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

…

approval_detection.py

feat(approval): flag cloud metadata-endpoint (IMDS) credential fetches for approval

2026-09-12 21:12:18 -07:00

approval_floors.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

approval_gateway_wait.py

…

approval_human_wait.py

…

approval_prompt.py

…

approval_smart.py

…

approval.py

fix(tools): reload permanent allowlist by replacement

2026-09-12 22:03:19 -07:00

arg_coercion.py

…

async_delegation.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

…

bot_live_delivery.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

bot_mode_dm.py

fix(profiles): HERMES_HOME-blind path sites resolve through hermes_constants

2026-09-13 05:09:06 -07:00

bot_mode_probe.py

fix(profiles): HERMES_HOME-blind path sites resolve through hermes_constants

2026-09-13 05:09:06 -07:00

bot_relay.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

browser_camofox_state.py

…

browser_camofox.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

browser_cdp_tool.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(vault): dogfood fixes — offer save-login on every backend, keep the model off passwords, bind to the login tab

2026-09-10 10:35:07 -07:00

browser_tool_cdp.py

…

browser_tool_cloud.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

browser_tool_eval_policy.py

…

browser_tool_install.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

browser_tool_lifecycle.py

fix(browser): suppress KeyboardInterrupt in atexit cleanup thread stop

2026-09-12 08:43:28 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

fix(browser): make the real-profile attach daemon reapable (#100855, salvage #103284)

2026-09-06 23:31:05 +05:30

browser_tool_session.py

…

browser_tool_snapshot.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_tool_vision.py

…

browser_tool.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

browser_use_cli.py

fix(tools): browser_exec and computer_use caches are namespaced by the served profile

2026-09-13 14:41:26 -07:00

browser_vault_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

budget_config.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

checkpoint_manager.py

fix(security): re-resolve checkpoint/sticker-cache paths per call

2026-09-11 15:44:00 -07:00

clarify_gateway.py

…

clarify_tool.py

…

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

code_execution_rpc.py

…

code_execution_tool.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

code_kernel_remote.py

fix(code-execution): remote kernels are keyed by their sandbox tool set (#97263)

2026-09-05 18:46:53 +05:30

code_kernel.py

fix: adapt execute_code cell authority to the widened prompt-callback table

2026-09-10 10:35:07 -07:00

computer_use_tool.py

…

connections_tool.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

connector_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

credential_files.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

cronjob_job_args.py

fix(cron): make failed runs diagnosable without verbose delivery errors

2026-09-07 08:18:56 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

feat(cron): add resnap action to adopt the current global inference default

2026-09-12 20:57:21 -07:00

daemon_pool.py

…

debug_helpers.py

…

delegate_tool_child_run.py

fix(agent): isolate periodic scheduler callbacks from blocking siblings (#102574)

2026-09-09 12:17:57 +05:30

delegate_tool_config.py

refactor(delegation): resolve the child fallback chain through the canonical normalizer

2026-09-08 02:26:05 +05:30

delegate_tool_dispatch.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegate_tool_progress.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

delegate_tool_registry.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

delegate_tool_results.py

Merge pull request #103486 from NousResearch/fix/nested-delegate-deadline-and-summary-budget

2026-09-06 12:02:43 -07:00

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

delegate_tool.py

fix: join delegated work before finite chat exits

2026-09-10 05:02:41 -07:00

delegation_live_log.py

…

delegation_output_schema.py

…

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

fix(env_passthrough): tolerate an unresolvable home when keying the allowlist cache

2026-09-11 15:29:15 -07:00

env_probe.py

…

fal_common.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

…

file_operations_search.py

fix(file-ops): reuse _kill_process_group_posix in the native rg runner

2026-09-07 00:28:46 +05:30

file_operations.py

fix(tools): stop read_file rendering a phantom empty line for newline-terminated files

2026-09-12 20:52:49 -07:00

file_state.py

…

file_tools_paths.py

…

file_tools_read_tracking.py

…

file_tools_write_guards.py

fix(file-safety): bind the write-guard resolver fallback to the active profile

2026-09-11 15:29:15 -07:00

file_tools.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

focus_pane_tool.py

…

fuzzy_match.py

fix(tools): make the empty/whitespace old_string rejection actionable

2026-09-12 21:55:07 -07:00

homeassistant_tool.py

…

hook_output_spill.py

…

image_generation_catalog.py

feat(image_gen): add Meta Muse Image ($0.01/img) to the FAL catalog

2026-09-12 22:18:06 -07:00

image_generation_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

image_source.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

interpreter_shutdown.py

…

interrupt.py

fix: mid-turn user message no longer waits behind a foreground terminal command

2026-09-05 13:51:06 -07:00

kanban_tools_schemas.py

fix(kanban): stage review-bound handoff artifacts in request_review

2026-09-13 14:37:17 -07:00

kanban_tools.py

refactor(kanban): trim review-artifact salvage to metadata path, 2 invariant tests

2026-09-13 14:37:17 -07:00

kanban_toolset_context.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

lazy_deps.py

chore(deps): mirror slack-sdk 3.44.1 pin in tools/lazy_deps.py

2026-09-12 08:12:38 -07:00

managed_gateway_auth.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

managed_tool_gateway.py

feat(desktop): connector cards that wait for the sign-in, and a guided first launch that holds together (#108292)

2026-09-12 10:00:06 +05:30

mcp_dashboard_oauth.py

…

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: restore prior device OAuth state if persistence fails

2026-09-07 08:22:35 -07:00

mcp_oauth_manager.py

…

mcp_oauth_provider.py

fix(mcp-oauth): keep refresh_token when a refresh response omits it (#62333)

2026-09-08 17:44:51 -07:00

mcp_oauth.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

mcp_tool_common.py

…

mcp_tool_config.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

mcp_tool_content.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

mcp_tool_discovery.py

fix(mcp): reconcile chore lives in run_profile_reconcile; prune lazy + mid-connect servers

2026-09-13 06:29:12 -07:00

mcp_tool_errors.py

fix(mcp): widen the SSE fallback trigger and harden its guards (salvage #53764)

2026-09-12 21:05:29 -07:00

mcp_tool_handlers.py

fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection

2026-09-13 15:41:01 -07:00

mcp_tool_health.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_lifecycle.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_loop.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

mcp_tool_registration.py

fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection

2026-09-13 15:41:01 -07:00

mcp_tool_sampling.py

refactor: sms AIOHTTP_AVAILABLE flag; ElicitationHandler call_context defaults to a no-op thunk; drop stale TYPE_CHECKING/type-ignore in two tests

2026-09-07 22:47:33 +05:30

mcp_tool_schema.py

…

mcp_tool_scope.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_server_run.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_transport.py

fix(mcp): widen the SSE fallback trigger and harden its guards (salvage #53764)

2026-09-12 21:05:29 -07:00

mcp_tool.py

fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection

2026-09-13 15:41:01 -07:00

memory_tool_store.py

fix(memory): secure built-in memory lock files

2026-09-12 20:43:42 -07:00

memory_tool.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

fix(tools): reject V4A Add File onto an existing path

2026-09-12 21:13:40 -07:00

path_security.py

…

plugin_guard.py

fix: scan plugin test trees again, cap their criticals at caution

2026-09-13 14:43:04 -07:00

preview_tool.py

…

process_registry_checkpoint.py

fix(multiplex): cron, kanban, /loop and completion paths for a served profile match its standalone gateway

2026-09-11 19:58:07 -07:00

process_registry_notifications.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

process_registry_results.py

fix(tools): always redact durable process receipts

2026-09-07 08:25:33 -07:00

process_registry.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

project_tools.py

…

pty_query_responder.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

react_to_message_tool.py

…

read_extract.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix(tools): log the traceback when a check_fn raises on the cached path

2026-09-13 12:35:36 -07:00

schema_sanitizer.py

fix(schemas): preserve required intent without invalid boolean flags

2026-09-07 08:14:51 -07:00

self_repo_guard.py

…

send_message_senders.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

send_message_targets.py

…

send_message_tool.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

session_search_tool.py

fix(session_search): a bare session id never reads another profile's state.db

2026-09-11 06:24:11 -07:00

setup_mcp_tool.py

…

shell_heredoc.py

…

skill_ledger.py

…

skill_linter.py

…

skill_manager_batch.py

…

skill_manager_guards.py

…

skill_manager_tool.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

skill_provenance.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

skill_usage.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix(skills_guard): dns_exfil no longer fires on the English noun "host" in prose

2026-09-12 05:09:26 -07:00

skills_hub_clawhub.py

fix(skills_hub): clawhub 429 keeps a zero Retry-After as zero

2026-09-13 05:09:43 -07:00

skills_hub_github.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

skills_hub_install.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skills_hub_models.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_hub_official.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_hub_search.py

…

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

fix(skills): bound streamed ClawHub ZIP downloads (#57571)

2026-09-12 21:50:30 -07:00

skills_sync_bundled_ops.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync_client_org.py

…

skills_sync_client_wire.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_sync_client.py

…

skills_sync_optional.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_tool_dedup.py

…

skills_tool_plugin.py

…

skills_tool_setup.py

…

skills_tool.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

fix(tui-gateway): launch-profile turns keep their env-only terminal policy once multiplexing is active

2026-09-13 14:31:21 -07:00

terminal_tool_backends.py

fix(ssh): isolate prompt backend probes from file sync

2026-09-06 13:32:51 +05:30

terminal_tool_background.py

feat(delegation): subagents hand background processes to the parent; leftovers are named, not trusted

2026-09-07 12:50:29 -07:00

terminal_tool_config.py

fix(terminal): every Windows drive letter is a host cwd, not just C: (#60962)

2026-09-05 19:01:22 +05:30

terminal_tool_guards.py

fix: explain the launchctl registration restriction without inventing KeepAlive

2026-09-07 06:05:51 -07:00

terminal_tool_lifecycle.py

…

terminal_tool_result.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

terminal_tool_sudo.py

refactor(terminal): probe NOPASSWD only when a prompt would fire; drop the host-only probe

2026-09-11 11:19:53 +05:30

terminal_tool.py

fix(tools): never ambient-bridge TERMINAL_* under a profile home override

2026-09-11 15:29:15 -07:00

thread_context.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

threat_patterns.py

fix(threats): keep unrelated role prose in context files

2026-09-07 08:09:20 -07:00

tip_tool.py

…

tirith_security.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

todo_tool.py

…

tool_backend_helpers.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

tool_output_limits.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

tool_output_truncate.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

tool_result_storage.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

tool_search_catalog.py

fix(tool-search): a query no tool answers returns nothing, not five tools sharing one word (#106676)

2026-09-10 02:21:15 +05:30

tool_search_validation.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_search.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tour_tool.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

transcription_audio.py

…

transcription_cloud.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

transcription_command.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

transcription_common.py

…

transcription_local.py

…

transcription_tools.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_command_provider.py

…

tts_streaming.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

refactor(gateway): every Ogg/Opus voice transcode routes through base.transcode_to_ogg_opus

2026-09-13 05:32:38 -07:00

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_tool_speaker.py

…

tts_tool.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

url_safety.py

…

video_generation_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

vision_tools_image_prep.py

feat(vision): decode HEIF/HEIC/AVIF images (iPhone photos)

2026-09-13 09:18:54 -07:00

vision_tools.py

fix(vision): advertise vision_analyze/browser_vision when the main model sees natively

2026-09-13 14:46:38 -07:00

voice_client_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

voice_live.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

voice_mode_transcript.py

…

voice_mode.py

fix(voice): retry a timed-out audio input stream start once

2026-09-13 14:39:29 -07:00

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

web_tools_extract.py

fix(web): cap web_extract provider dispatch with a wall-clock timeout (salvage #57180)

2026-09-12 21:30:38 -07:00

web_tools_rescue.py

…

web_tools_truncate.py

fix(tools): truncation footers name the path the SANDBOX sees, not the host path (#72389, #81984, #77015)

2026-09-05 18:46:16 +05:30

web_tools.py

…

website_policy.py

…

working_diff.py

…

write_approval.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

x_search_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

xai_http.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

xai_video_tools.py

…

yuanbao_tools.py

…