Teknium faf71eb4c1 Inspired by Claude Code: file tools reject Windows NT-namespace paths (NTLM leak hardening) ...

Claude Code v2.1.234 (Aug 17, 2026) hardened its pre-approval file
accesses to reject Windows NT-namespace (\??\) paths against the NTLM
credential-leak vector. Port the same guard into Hermes file safety:

- agent/file_safety.py: is_nt_namespace_path() / get_nt_namespace_error()
  raw-string check (never resolves — resolving IS the leak trigger).
  Wired as the first check in get_read_block_error() and the write
  denial classifier.
- tools/file_tools.py: raw-string guard at read_file_tool entry and in
  _check_sensitive_path (covers write_file_tool + patch_tool), before
  the task-base join can anchor the prefix under a POSIX base dir.
- Blocks \??\, \\.\, \\?\UNC\, \\?\GLOBALROOT. Extended-length
  local drive paths (\\?\C:\...) and plain UNC shares stay allowed.
- tests/agent/test_nt_namespace_guard.py: 10 blocked forms, 11 allowed
  forms, no-resolve proof, tool-layer chokepoint coverage.
- docs: protected-paths table in user-guide/security.md

2026-09-15 04:17:31 -07:00

..

lsp

fix(lsp): look up nested single-root clients and version docs before didChange send

2026-09-12 05:09:11 -07:00

monitoring

refactor(redact): one secret-pattern source; a2a, gateway chat and monitoring egress scrub through redact_for_egress

2026-09-13 05:07:50 -07:00

pet

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

proxy_sources

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

secret_sources

chore(secrets): cover the spawn ledger and meet-node token in the private-writer invariant; drop unused import

2026-09-13 05:07:11 -07:00

transports

fix(codex): import kill_process_tree so the SIGTERM-timeout path actually kills

2026-09-15 03:51:44 -07:00

vault_backends

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

verify

refactor(verify): one honest return type for the compose live-state probe (str | None)

2026-09-06 20:50:02 +05:30

__init__.py

refactor(agent/runtime): deadline/file_safety/estop/lifecycle leaf modules — dedupe result plumbing, drop dead guard code

2026-09-02 13:29:48 -07:00

account_usage.py

simplify(compat): anthropic_adapter — drop 30 re-exports + 1 alias, repoint 22 caller files (32 sites), 38 test files (~125 sites)

2026-09-03 13:16:47 -07:00

acp_openai_bridge.py

refactor(agent/account_usage,anthropic_credentials,azure_identity_adapter,acp_openai_bridge): outcome table, env lookup helper, compact literals and docs

2026-09-02 18:56:06 -07:00

activity_tracking.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

agent_init.py

fix(skills): auto-load resolves once per agent and dedupes against -s

2026-09-15 03:34:20 -07:00

agent_runtime_helpers.py

refactor(agent): share the shutdown-only socket primitives with the pool sweep

2026-09-15 12:46:27 +05:30

AGENTS.md

refactor(agent): manual /compress runs through one core with --preview/--aggressive on every surface

2026-09-13 05:20:26 -07:00

anthropic_adapter.py

refactor(agent): one home for the stream parse-error markers

2026-09-14 20:01:19 +05:30

anthropic_credentials.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

anthropic_endpoints.py

fix(anthropic): DeepSeek thinking replay contract for third-party proxies

2026-09-06 05:37:03 -07:00

anthropic_message_convert.py

fix(anthropic): DeepSeek thinking replay contract for third-party proxies

2026-09-06 05:37:03 -07:00

api_error_summary.py

refactor(agent): one home for the stream parse-error markers

2026-09-14 20:01:19 +05:30

api_request_hooks.py

refactor(agent/api_request_hooks,activity_tracking): try/except-pass → suppress

2026-09-02 20:10:26 -07:00

async_utils.py

refactor(agent): hug/pack bracket spans in async_utils + aux_accounting, fix E305 blank lines

2026-09-02 21:38:20 -07:00

aux_accounting.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

auxiliary_client.py

fix(agent): cover the remaining refusal-only surfaces and fold the tests

2026-09-15 03:39:07 -07:00

auxiliary_health.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

auxiliary_wire.py

fix: sanitize resolved auxiliary chat requests before dispatch

2026-09-07 06:02:22 -07:00

azure_identity_adapter.py

fix(secret-scope): mem0, langfuse and azure credential readers stop swallowing UnscopedSecretError

2026-09-13 05:19:48 -07:00

backend_identity.py

fix(agent): preserve route URL path identity

2026-09-07 07:06:58 -07:00

background_review.py

fix(agent): same-model review fork keeps the parent's affinity header and Portal conversation root (#109964)

2026-09-14 06:55:54 -07:00

battery.py

refactor(agent/small-modules): compact battery, browser_registry/provider, command_token_source, bounded_response (554->438 LOC)

2026-09-02 18:18:18 -07:00

bedrock_adapter.py

fix(multiplex): build Bedrock and Entra credential clients from the routed profile

2026-09-12 01:35:05 -07:00

billing_links.py

refactor(agent/context_references,billing_*): unify path/binary checks and _parse_* helpers (1492->1118 LOC)

2026-09-02 18:49:57 -07:00

billing_usage.py

refactor(agent/context_references,billing_*): unify path/binary checks and _parse_* helpers (1492->1118 LOC)

2026-09-02 18:49:57 -07:00

billing_view.py

refactor(agent/context_references,billing_*): unify path/binary checks and _parse_* helpers (1492->1118 LOC)

2026-09-02 18:49:57 -07:00

bounded_response.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

browser_provider.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

browser_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

chat_completion_helpers_relay.py

fix(agent): preserve streamed refusals as text (port of anomalyco/opencode#43343)

2026-09-15 03:39:07 -07:00

chat_completion_helpers.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

chat_completion_nonstream.py

fix: wait sixty seconds before provider silence notices

2026-09-07 05:24:15 -07:00

chat_completion_stream_monitor.py

fix: wait sixty seconds before provider silence notices

2026-09-07 05:24:15 -07:00

client_lifecycle.py

fix: every Bedrock client rebuild lands on the startup wire (Claude SDK, Converse region, guardrails)

2026-09-10 18:08:16 -07:00

codex_headers.py

refactor(agent/codex*,bedrock_adapter): drop intra-function blank lines (AST-identical, -117 LOC)

2026-09-02 18:47:54 -07:00

codex_responses_adapter.py

fix(agent): preserve streamed refusals as text (port of anomalyco/opencode#43343)

2026-09-15 03:39:07 -07:00

codex_runtime.py

fix(agent): cover the remaining refusal-only surfaces and fold the tests

2026-09-15 03:39:07 -07:00

coding_context.py

perf(prefix-cache): pin session-start workspace snapshot across compaction rebuilds

2026-09-06 22:45:31 +05:30

command_token_source.py

fix(multiplex): children spawned for a served profile start from that profile's env

2026-09-15 03:47:15 -07:00

compaction_display.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

compression_facade.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

context_breakdown.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

context_compressor_summary.py

style: trim summary dispatch trailing whitespace

2026-09-07 05:59:08 -07:00

context_compressor.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

context_engine.py

feat(compression): provider-scoped model_thresholds keys ("<provider>:<substr>")

2026-09-11 02:07:48 -07:00

context_file_sources.py

fix(context): compute-host /context and session.context_breakdown carry the per-file manifest; report blocked files

2026-09-15 03:37:49 -07:00

context_references.py

refactor(context): fold simplify findings into oversized-file fallback

2026-09-05 16:44:23 +05:30

conversation_compression_manual.py

fix(agent): manual /compress "nothing to compress" gate stays gateway-only

2026-09-13 05:20:26 -07:00

conversation_compression.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

conversation_loop.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

copilot_acp_client.py

fix(copilot-acp): honor the fetch_models None-on-failure contract; bound the probe budget; refresh-proof the memo

2026-09-13 19:30:48 +05:30

credential_persistence.py

refactor(agent/credential_pool): split refresh/seed god methods, unify sync + status helpers (-1107 LOC)

2026-09-02 18:57:14 -07:00

credential_pool_admin.py

feat: choose pooled credential priority from the CLI

2026-09-07 08:06:48 -07:00

credential_pool.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

credential_sources.py

fix(compat): pointers resolve to the object that MOVED, not a same-named stranger; stdin checker binds stdin= to the splatted definition

2026-09-03 22:00:01 -07:00

credits_tracker.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

curator_backup.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

curator.py

feat: curator prunes unused skills at 30 days (was 90), stale at 14

2026-09-12 05:56:15 -07:00

deadline.py

fix(process): stop late forks escaping deadline tree cleanup

2026-09-07 08:19:32 -07:00

delegation_context.py

fix(kanban): scope the delegated-child write fence to the lineage's board root

2026-09-15 03:45:41 -07:00

display.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

empty_response_guard.py

Merge origin/main (562ee8ab76): fold usage-less empty-response guard, unterminated tool-call strip, skills-first memory guidance into the simplified modules

2026-09-03 04:31:46 -07:00

error_classifier.py

fix(codex): scope encrypted-reasoning replay to the issuing model

2026-09-15 10:49:19 +05:30

error_surface.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

errors.py

refactor(agent/runtime): deadline/file_safety/estop/lifecycle leaf modules — dedupe result plumbing, drop dead guard code

2026-09-02 13:29:48 -07:00

estop.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

fallback_cooldown.py

refactor(agent): move the entitlement rejection marker into agent/fallback_cooldown

2026-09-09 11:29:56 -07:00

fast_mode.py

refactor(agent/gemini,acp,credits): compact wire adapters and credits parser (parity-verified)

2026-09-02 18:22:13 -07:00

file_safety.py

Inspired by Claude Code: file tools reject Windows NT-namespace paths (NTLM leak hardening)

2026-09-15 04:17:31 -07:00

gemini_native_adapter.py

docs(gemini): scope the base-URL normalization claim to the Google host and TTS

2026-09-15 03:54:01 -07:00

gemini_schema.py

feat(gemini): send full JSON Schema tool parameters via parametersJsonSchema

2026-09-14 06:44:54 -07:00

i18n.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

image_gen_provider.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

image_gen_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

image_routing.py

fix: failed probe credentials cannot fall through to configured auth

2026-09-07 08:08:04 -07:00

image_token_cost.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

inline_tool_executors.py

fix(session_search): forward after/before/exclude_session_ids through the inline executor

2026-09-15 03:58:05 -07:00

insights.py

fix(insights): count tool usage per session before merging the two sources

2026-09-12 08:23:13 -07:00

interrupt_compat.py

refactor(agent): compact conversation_loop docstrings/comments, unify partial-turn result shape, tidy empty_response_guard/interrupt_compat/iteration_budget

2026-09-02 18:53:53 -07:00

interrupt_control.py

fix(agent): a /steer row is human input for every user-turn predicate

2026-09-09 13:08:25 +05:30

interrupt_scope.py

fix(console): cancel/timeout interrupts the command's agent and waits for the worker

2026-09-09 10:58:16 -07:00

iteration_budget.py

fix: keep budget checkpoints out of cancelled tool results

2026-09-07 08:28:43 -07:00

jiter_preload.py

refactor(agent/gemini,acp,credits): compact wire adapters and credits parser (parity-verified)

2026-09-02 18:22:13 -07:00

kanban_stop.py

refactor(agent/image+safety): route vision probes/inline executors on data tables, dedupe path guards (-25% LOC)

2026-09-02 18:58:42 -07:00

lazy_forward.py

refactor(agent/gemini,acp,credits): compact wire adapters and credits parser (parity-verified)

2026-09-02 18:22:13 -07:00

learn_prompt.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

learning_graph_render.py

fix(compat): pointers resolve to the object that MOVED, not a same-named stranger; stdin checker binds stdin= to the splatted definition

2026-09-03 22:00:01 -07:00

learning_graph.py

refactor(agent/learning_graph): expand one-line def

2026-09-02 19:22:42 -07:00

learning_mutations.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

lmstudio_reasoning.py

refactor(agent/gemini,acp,credits): compact wire adapters and credits parser (parity-verified)

2026-09-02 18:22:13 -07:00

manual_compression_feedback.py

refactor(agent): reflow prompt string literals to 110 cols (AST-identical, no joins across line breaks)

2026-09-02 18:29:05 -07:00

markdown_tables.py

refactor(agent): process_bootstrap/markdown_tables/onboarding pass-2 — inline _pad_to_width, fold proxy bypass and pool guard, pack signatures

2026-09-02 22:21:06 -07:00

memory_manager.py

refactor(memory-plugins): background threads inherit the profile context; JSON sidecar reads and the holographic config.yaml write use core primitives

2026-09-13 05:19:48 -07:00

memory_provider.py

fix(multiplex): background threads and teardown paths carry the turn's profile scope

2026-09-15 03:47:15 -07:00

message_content.py

refactor(agent): tighten memory/compaction/prompt-cache helpers (pass 1, corpus parity)

2026-09-02 18:28:38 -07:00

message_metadata.py

refactor(agent): tighten memory/compaction/prompt-cache helpers (pass 1, corpus parity)

2026-09-02 18:28:38 -07:00

message_sanitization.py

refactor(agent): one outbound-kwargs sanitizer seam for the main loop and the summary

2026-09-14 20:35:28 +05:30

micro_compaction.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

moa_loop.py

fix(auth): key sibling per-process credential memos by profile home under multiplex

2026-09-10 18:11:25 -07:00

moa_trace.py

refactor(agent): moa_loop guidance-input helper, explicit MoAClient delegation, blank squeeze

2026-09-02 19:10:21 -07:00

model_metadata.py

Port from cline/cline#12876: classify Anthropic output-cap errors

2026-09-15 03:54:58 -07:00

models_dev.py

fix(models): resolve routed OpenRouter ids in models.dev catalog lookups

2026-09-11 16:50:20 -07:00

moonshot_schema.py

refactor(agent): plugin_llm/nous_rate_guard/moonshot_schema/provider_* — unify atomic write, compact docstrings, collapse defensive layers

2026-09-02 18:33:06 -07:00

native_compaction.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

nous_rate_guard.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

nous_wire.py

feat(nous): anthropic_wire=auto decides a session's wire from its first response

2026-09-06 09:11:04 -07:00

onboarding.py

refactor(config): collapse thin _load_config copies onto the canonical readers

2026-09-13 05:09:06 -07:00

oneshot.py

refactor(agent): prompt_builder siblings — inline snapshot write, compact __all__/locals, tidy blank-line conventions

2026-09-02 19:05:15 -07:00

opencode_affinity.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

outbound_webhooks.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

periodic_scheduler.py

refactor(agent): one _requeue for the three heappush sites; timing test asserts ordering, not a 0.3 s bound

2026-09-09 12:17:57 +05:30

plan_prompt.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

plugin_llm.py

simplify(compat): hermes_cli.main — drop 198 re-exports/aliases (155 eager + 45 lazy PEP 562 + _warn_stale_dashboard_processes alias + _time/_self/_LAZY_* machinery), repoint 17 source callers + 91 test files

2026-09-03 15:07:39 -07:00

plugin_stream_hooks.py

refactor(agent): moa_loop guidance-input helper, explicit MoAClient delegation, blank squeeze

2026-09-02 19:10:21 -07:00

portal_tags.py

refactor(agent): compact prompt_builder siblings — collapse guard ladders, inline single-use helpers, trim docstrings (emitted text byte-identical)

2026-09-02 18:22:01 -07:00

process_bootstrap.py

fix(agent): LLM traffic honours CIDR and wildcard NO_PROXY entries like the platform adapters do

2026-09-13 05:09:43 -07:00

prompt_builder.py

fix: restore TestBridgeDispatch, trim #39797 tests, drop dead execution_guidance_text param

2026-09-15 04:13:13 -07:00

prompt_cache_boundary.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

prompt_cache_scope.py

fix(agent): same-model review fork keeps the parent's affinity header and Portal conversation root (#109964)

2026-09-14 06:55:54 -07:00

prompt_caching.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

provider_base.py

refactor(agent): plugin_llm/nous_rate_guard/moonshot_schema/provider_* — unify atomic write, compact docstrings, collapse defensive layers

2026-09-02 18:33:06 -07:00

provider_media.py

feat(video): add OpenRouter Hailuo 3 Max provider

2026-09-12 13:44:52 -07:00

provider_projection.py

refactor(agent): pack multi-line calls/signatures in r3-06-C files (AST-identical)

2026-09-02 18:44:36 -07:00

provider_registry.py

refactor(agent): moa_loop guidance-input helper, explicit MoAClient delegation, blank squeeze

2026-09-02 19:10:21 -07:00

proxy_bypass.py

fix(agent): a malformed port in base_url no longer drops the keepalive transport

2026-09-13 05:09:43 -07:00

rate_limit_credits.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

rate_limit_tracker.py

refactor(agent/G_small): tighten provider ABC, ssl_guard, tracker formatting, summaries predicate

2026-09-02 19:18:18 -07:00

reactions.py

refactor(agent/G_small): second code pass — merged guards, table-driven compact display, joined wrapped calls

2026-09-02 18:51:24 -07:00

reasoning_effort.py

refactor(model-providers): thinking-toggle XOR effort translation lives in agent.reasoning_effort; opencode-free imports it instead of borrowing via sys.modules

2026-09-13 05:19:48 -07:00

reasoning_params.py

refactor(agent): drop the Optional import orphaned by the LM Studio helper removal

2026-09-14 20:35:28 +05:30

reasoning_summaries.py

fix(agent): streamed reasoning_details survive for replay continuity (port of earendil-works/pi#8605)

2026-09-13 21:27:35 -07:00

reasoning_timeouts.py

feat(models): DeepSeek V4.1 Flash on the Nous Portal and OpenRouter pickers

2026-09-10 09:22:31 -07:00

redact.py

fix(redact): repr pass leaves already-masked values alone

2026-09-13 21:30:40 -07:00

relay_llm.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

relay_runtime.py

feat(relay): migrate legacy HERMES_NEMO_RELAY_ATIF_*/ATOF_* vars into a validated relay-plugins.toml

2026-09-15 03:44:36 -07:00

relay_tools.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

repetition_guard.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

replay_cleanup.py

refactor(agent): fail loudly on a missing turn clock; single lowercase in is_dangerous_confirmation

2026-09-13 19:23:09 +05:30

retry_utils.py

fix(agent): explicit "retry after N s" wins over "resets in ..." in the shared reset table

2026-09-13 05:09:43 -07:00

review_engine.py

fix: make review workers recognizable in live subagent viewers

2026-09-08 04:38:47 -07:00

review_idle_queue.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

runtime_cwd.py

refactor(agent/G_small): tighten provider ABC, ssl_guard, tracker formatting, summaries predicate

2026-09-02 19:18:18 -07:00

search_policy.py

fix(search): prune heavy trees from zero-match probe

2026-09-03 04:56:59 +05:30

secret_scope.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

session_activity.py

refactor(gateway): iteration-progress formatter lives in agent/session_activity, tests trimmed to the invariant bar

2026-09-06 05:35:12 -07:00

session_persistence.py

refactor(agent): one durable-row rule for the flush and the sidecar stamp; trim tests

2026-09-09 10:32:01 +05:30

shell_hooks.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

side_question.py

refactor(agent/side_question,review_*,thinking_timeout_guidance): flatten call sites, drop section banners

2026-09-02 19:19:44 -07:00

skill_bundles.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

skill_commands.py

fix(skills): auto-load resolves under the agent's own home and skips internal forks

2026-09-15 03:34:20 -07:00

skill_preprocessing.py

fix: keep Kanban worker scope out of descendant processes

2026-09-07 07:10:28 -07:00

skill_utils.py

fix(skills): literal HOME replacement; ~/$VAR still expands the variable

2026-09-12 08:25:59 -07:00

ssl_guard.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

ssl_verify.py

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

status_output.py

review-fix(comments): restore lost rationale in the 7 files the sweep had to skip (docstring/comment-only)

2026-09-03 10:40:25 -07:00

stream_delivery.py

review-fix(locks): restore BASE fail-loud lock-slot reads and _is_openai_client_closed truth table

2026-09-03 12:29:52 -07:00

stream_diag.py

simplify(compat): tools/mcp_tool — repoint 20 non-test callers to the defining mcp_tool_* siblings

2026-09-03 13:29:35 -07:00

stream_single_writer.py

refactor(agent/thread_scoped_output,stream_diag,stream_single_writer): shared fence-call helper, compact installs

2026-09-02 19:42:28 -07:00

subagent_lifecycle.py

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

subdirectory_hints.py

fix(agent): navigation targets only from a cd that starts a shell segment

2026-09-12 08:34:07 -07:00

subscription_view.py

refactor(agent/tool_guardrails,subscription_view): flatten no-progress block check and payload mapping

2026-09-02 19:36:47 -07:00

surface_switch.py

simplify(agent): surface switch — reuse flatten_message_text / agent_tool_names / one runtime-boundary split

2026-09-09 10:31:26 +05:30

system_prompt.py

fix: restore TestBridgeDispatch, trim #39797 tests, drop dead execution_guidance_text param

2026-09-15 04:13:13 -07:00

terminal_env_provider.py

simplify(compat): code_execution_tool/environments.local — drop 36 re-exports, repoint 5 callers + 14 test files

2026-09-03 13:24:04 -07:00

terminal_env_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

think_scrubber.py

refactor(display): one think-tag list; ACP tool titles derive from agent/display previews

2026-09-13 05:20:26 -07:00

thinking_timeout_guidance.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

thread_scoped_output.py

refactor(agent/thread_scoped_output,stream_diag,stream_single_writer): shared fence-call helper, compact installs

2026-09-02 19:42:28 -07:00

title_generator.py

fix(multiplex): background threads and teardown paths carry the turn's profile scope

2026-09-15 03:47:15 -07:00

tool_dispatch_helpers.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_executor.py

Desktop connect runs on the connection operation: one card, no link to the model, no renderer polling (NS-868) (#110574)

2026-09-15 00:41:14 +05:30

tool_guardrails.py

fix(guardrails): catch repeating multi-call cycles in the stall guard

2026-09-12 21:07:46 -07:00

tool_result_classification.py

…

trace_upload.py

refactor(state): fold the speculative-open retry into acquire's loop; keep real inode-swap tests

2026-09-06 22:56:51 +05:30

trajectory.py

fix(agent): keep trajectory serialization inside the best-effort handler

2026-09-12 08:25:14 -07:00

transcript_repair.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

transcription_provider.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

transcription_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

tts_provider.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

tts_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

turn_api_call.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_api_error.py

fix(agent): a no-fallback verdict wins over the local-ValueError fallback allowance

2026-09-12 08:27:11 -07:00

turn_api_request.py

refactor(agent): one outbound-kwargs sanitizer seam for the main loop and the summary

2026-09-14 20:35:28 +05:30

turn_author.py

feat(agent): a2a_key names a bot author's turns

2026-09-10 10:45:57 -07:00

turn_context_compaction.py

refactor(compression): every compaction gate asks real usage first; rough estimates only decide whether to wait

2026-09-06 13:21:17 -07:00

turn_context.py

refactor(agent): fail loudly on a missing turn clock; single lowercase in is_dangerous_confirmation

2026-09-13 19:23:09 +05:30

turn_empty_response.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_explainers.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_facade_lease.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_facade.py

feat(relay): pass API request metadata to Relay tracking

2026-09-10 13:23:24 -07:00

turn_failure_copy.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_final_response.py

fix(agent): persist promoted clean-stop reasoning; pin the length negative

2026-09-13 14:46:42 -07:00

turn_finalizer.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_iteration_prep.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_liveness.py

fix(agent): isolate periodic scheduler callbacks from blocking siblings (#102574)

2026-09-09 12:17:57 +05:30

turn_loop_errors.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_overflow.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_preflight_gate.py

refactor(compression): every compaction gate asks real usage first; rough estimates only decide whether to wait

2026-09-06 13:21:17 -07:00

turn_preflight.py

refactor(compression): every compaction gate asks real usage first; rough estimates only decide whether to wait

2026-09-06 13:21:17 -07:00

turn_recovery.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_request_assembly.py

fix: remove dedicated user-facing output cap controls

2026-09-07 06:15:43 -07:00

turn_response_check.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_response_intake.py

refactor(agent/turn): lift hook-firing, MoA context/prepare, empty-retry and terminal-empty phases into helpers

2026-09-02 18:40:01 -07:00

turn_retry_state.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

turn_stop_gates.py

refactor(agent/turn_finalizer,turn_stop_gates): session counter keys table, tighten nudge counters

2026-09-02 19:30:27 -07:00

turn_summary.py

refactor(agent/turn): comment/docstring pass — keep WHYs, drop narrative and restated code

2026-09-02 19:26:50 -07:00

turn_tool_round.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

turn_tool_validation.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_truncation.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

turn_usage.py

feat(compression): per-image token cost learned from the provider's own usage (#70328, supersedes #70463)

2026-09-06 14:19:42 -07:00

usage_anchor.py

feat(compression): usage anchor survives DB reloads and process restarts (salvage #99585)

2026-09-06 13:21:17 -07:00

usage_pricing.py

fix(deepseek): deepseek-flash is the canonical Flash id; retired names fold onto it

2026-09-10 02:44:26 -07:00

vault_login_classifier.py

fix(vault): 2FA review follow-ups — per-digit fill only for an unmistakable maxlength=1 widget; honour otpauth digits/period/algorithm

2026-09-10 11:48:01 -07:00

vault_store.py

refactor(secrets): every private-credential file is written by utils.atomic_json_write(mode=0o600)

2026-09-13 05:07:11 -07:00

verification_evidence.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

verification_stop.py

refactor(agent/verification_evidence): set-based operator attribution, comprehension-built segments, predicate folds

2026-09-02 19:19:54 -07:00

verify_hooks.py

refactor(agent/misc-g6): dedupe qwen prep, image-part checks, pricing normalizers; tighten provider ABC/registry modules

2026-09-02 18:29:10 -07:00

vertex_adapter.py

refactor(agent/transports): lift codex _reasoning_fields, cc _normalize_tool_call/_attr_or_model_extra, unify approval routing; trim module docstrings

2026-09-02 19:07:07 -07:00

video_gen_provider.py

feat(video): add OpenRouter Hailuo 3 Max provider

2026-09-12 13:44:52 -07:00

video_gen_registry.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

vision_message_prep.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

web_search_provider.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

web_search_registry.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00