LIC99 dda3268d09 fix(approvals): warn and default to manual on unknown approvals.mode ...

_normalize_approval_mode() previously accepted any string, so an unknown
value like 'auto' fell through every downstream mode check (off/smart) and
silently behaved like manual with no signal. Validate against the known
modes (manual/smart/off), emit a warning for anything else, and default to
manual to match the config default and the rest of the function.

Bug 1 from the original PR (/approve & /deny bypassing the running-agent
guard) already landed on main independently, so only the mode-validation
fix is salvaged here.

Fixes #4261

Co-authored-by: Hermes Agent <agent@nousresearch.com>

2026-06-28 19:04:18 -07:00

..

computer_use

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

environments

fix(docker): gate resource limit flags on cgroup controller availability (#54516)

2026-06-29 11:01:08 +10:00

neutts_samples

…

__init__.py

…

ansi_strip.py

…

approval.py

fix(approvals): warn and default to manual on unknown approvals.mode

2026-06-28 19:04:18 -07:00

async_delegation.py

feat(delegation): background fan-out — parallel subagents, one consolidated return (#49734)

2026-06-20 11:27:12 -07:00

binary_extensions.py

…

blueprints.py

refactor(cron): rebrand Cron Recipes -> Automation Blueprints

2026-06-11 10:49:47 -07:00

browser_camofox_state.py

…

browser_camofox.py

fix(browser): force secret-pattern redaction on browser_type display

2026-06-25 22:02:22 -07:00

browser_cdp_tool.py

fix(deps): declare websockets as core dep + relax dev setuptools pin (salvage #45486, #44693) (#46744)

2026-06-15 12:44:44 -04:00

browser_dialog_tool.py

…

browser_supervisor.py

…

browser_tool.py

fix(browser): extend private-network guard to browser_get_images

2026-06-28 14:25:10 -07:00

budget_config.py

fix(agent): scale tool-output budget to the model context window (#23767)

2026-06-21 17:46:38 +05:30

checkpoint_manager.py

refactor(windows): unify windowless spawn form across the touched sites

2026-06-28 17:44:47 -05:00

clarify_gateway.py

fix: accept typed clarify choice replies

2026-06-28 04:13:19 -07:00

clarify_tool.py

fix(clarify): docstring — put options in choices[] only, never enumerate in question text

2026-06-19 07:34:02 -07:00

code_execution_tool.py

fix(terminal): require approval for host-bound Docker commands (#54483)

2026-06-29 11:35:41 +10:00

computer_use_tool.py

feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)

2026-06-22 06:42:30 -07:00

credential_files.py

fix(slack): make video attachments available to agents (#45512)

2026-06-13 03:33:27 -07:00

cronjob_tools.py

fix(security): align cron invisible-unicode set with install-time scanner

2026-06-26 01:11:11 -07:00

debug_helpers.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

delegate_tool.py

fix: drop isinstance(str) guard so client.base_url fallback works with httpx.URL

2026-06-27 03:59:36 +05:30

discord_tool.py

…

env_passthrough.py

fix(env-passthrough): fail closed when provider blocklist import fails

2026-06-28 02:05:43 -07:00

env_probe.py

…

fal_common.py

…

feishu_doc_tool.py

…

feishu_drive_tool.py

…

file_operations.py

fix: warn on line-oriented newline search patterns

2026-06-20 23:23:47 -07:00

file_state.py

…

file_tools.py

fix(redact): non-reusable sentinel for prefix secrets in file reads (#35519)

2026-06-28 04:13:20 -07:00

fuzzy_match.py

fix(fuzzy-match): preserve boundary space after whitespace-normalized match

2026-06-26 01:55:27 +05:30

homeassistant_tool.py

…

image_generation_tool.py

krea

2026-06-25 12:38:33 -07:00

interrupt.py

…

kanban_tools.py

feat(kanban): typed block reasons + unblock-loop breaker (#52848)

2026-06-25 21:46:58 -07:00

lazy_deps.py

fix(security): centralize credential-safe subprocess env (#29157)

2026-06-27 20:45:31 -07:00

managed_tool_gateway.py

…

mcp_oauth_manager.py

fix(mcp): auto-recover from invalid_client on stale OAuth client registration

2026-06-26 00:35:27 -07:00

mcp_oauth.py

fix(mcp): suppress interactive OAuth stdin prompts during background discovery (#35927)

2026-06-27 04:59:23 +05:30

mcp_tool.py

fix(mcp): skip preflight content-type probe for OAuth servers

2026-06-28 04:47:39 -07:00

memory_tool.py

fix(memory): skip drift guard for add (append-only) action (#42874)

2026-06-25 00:51:12 +05:30

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

…

process_registry.py

fix(security): redact secrets in background process + foreground env-dump output (#43025) (#54149)

2026-06-28 02:44:21 -07:00

project_tools.py

feat(tools): add project workspace tools

2026-06-25 16:40:27 -05:00

read_extract.py

feat(read): extract notebook and office documents (#37082)

2026-06-13 14:42:51 -07:00

read_terminal_tool.py

…

registry.py

fix(tools): suppress transient check_fn flakes so subagents keep file/terminal tools

2026-06-27 19:29:00 -07:00

schema_sanitizer.py

fix(tools): strip default from $ref nodes in tool schemas

2026-06-12 00:30:51 -05:00

send_message_tool.py

test+harden: modernize salvaged Matrix path for current plugin layout

2026-06-28 12:48:08 +05:30

session_search_tool.py

fix(session_search): demote cron below interactive sessions in discover ranking (#53597)

2026-06-27 04:41:22 -07:00

skill_manager_tool.py

fix(curator): fail closed on unverified skill deletes during consolidation (#53935)

2026-06-27 20:45:57 -07:00

skill_provenance.py

…

skill_usage.py

fix(curator): protect external skills from background curation

2026-06-25 22:03:02 -07:00

skills_ast_audit.py

…

skills_guard.py

…

skills_hub.py

refactor(windows): unify windowless spawn form across the touched sites

2026-06-28 17:44:47 -05:00

skills_sync.py

fix(skills): skip shadowing when external_dirs provides the skill

2026-06-27 21:07:53 -07:00

skills_tool.py

fix(config): strip export prefix in .env parsers across three modules

2026-06-28 18:53:00 -07:00

slash_confirm.py

…

terminal_tool.py

fix(terminal): require approval for host-bound Docker commands (#54483)

2026-06-29 11:35:41 +10:00

thread_context.py

…

threat_patterns.py

fix(security): stop blocking AGENTS.md/SOUL.md that name an agent 'Praxis' (#52925)

2026-06-26 00:36:01 -07:00

tirith_security.py

fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)

2026-06-26 15:26:08 +05:30

todo_tool.py

fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)

2026-06-25 23:42:42 +05:30

tool_backend_helpers.py

…

tool_output_limits.py

…

tool_result_storage.py

…

tool_search.py

…

transcription_tools.py

fix(windows): hide remaining backend console-flash legs missed on main

2026-06-28 10:19:21 -05:00

tts_tool.py

fix(windows): hide remaining backend console-flash legs missed on main

2026-06-28 10:19:21 -05:00

url_safety.py

fix(security): handle IPv6 scope IDs in URL safety checks to prevent bypass

2026-06-21 13:56:35 -07:00

video_generation_tool.py

fix(image/video gen): make schema delivery instruction platform-neutral (#51031)

2026-06-22 13:40:42 -07:00

vision_tools.py

…

voice_mode.py

…

web_tools.py

revert(web): remove keyless Parallel search fallback (#46350)

2026-06-14 16:47:57 -07:00

website_policy.py

…

write_approval.py

fix(memory,skills): repair write-approval inline prompt, gateway staging, and gateway /skills review (#43452)

2026-06-10 02:57:15 -07:00

x_search_tool.py

…

xai_http.py

…

yuanbao_tools.py

…