briandevans 66356fe24b fix(backup): drop setuid/setgid from the mode restored onto imported files ...

``_extract_member_atomically`` carries the replaced file's permissions
across the publish so that routing through mkstemp does not change what
the caller would otherwise have produced. But ``_preserve_file_mode``
returns ``stat.S_IMODE``, which is all twelve bits, and this restore is
deliberate on both sides of the replace: the mode is fchmod'd onto the
temp before ``atomic_replace`` and re-applied afterwards because chown
clears the elevated bits. So a target sitting at 0o4755 comes out of
``hermes import`` still at 0o4755 — with contents supplied by the zip.

That is a regression introduced by the atomic rewrite rather than a
pre-existing one. The overwrite it replaced was an in-place
``open(target, "wb")``, and an in-place write by a process without
CAP_FSETID has the elevated bits stripped by the kernel, so the old path
left 0o4755 as 0o755.

The blast radius is not limited to Hermes' own state: the ``_external/``
branch of ``run_import`` publishes members anywhere under ``$HOME``, and
this is the path that documents ``sudo`` use so ownership survives a
restore. An archive that happens to contain a member matching some
existing privileged file would take over the identity that file runs as.

Mask the two bits off the preserved mode. The masking happens once,
before the temp file is chmod'd, so there is no transient elevation
either. The sticky bit is kept — it is inert on a regular file. The
ordinary permission bits are unaffected, so the Docker/NAS installs the
preservation exists for still get their broader modes back.

This is the one write path in the repo where the bytes are untrusted;
the ``utils`` writers that preserve the full mode re-serialize content
the process itself produced, and are correct as they stand.

2026-08-14 21:47:23 -07:00

..

dashboard_auth

feat(dashboard-auth): extend RFC 8252 native sign-in to password providers (system-browser autofill) (#75808)

2026-08-14 21:39:01 +00:00

data

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

observability

Merge updated client resource metrics into active-install metrics

2026-08-04 15:10:41 -07:00

proxy

rip out brew + pip/PyPI wheel support (#68217)

2026-07-22 16:51:01 -04:00

subcommands

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

web_routers

fix(desktop): surface compaction-archived messages in transcript reads (#80680)

2026-08-14 21:08:14 -07:00

__init__.py

chore: release v0.20.1 (2026.8.13)

2026-08-13 11:52:47 -07:00

_early_recovery.py

fix(update): test runs never mutate the live checkout — pytest-guard the marker and repair paths

2026-07-29 21:30:53 -07:00

_parser.py

feat: --resume latest keyword and --in DIR launch flag

2026-08-08 04:03:41 -07:00

_scan_venv_blockers.py

fix(update): don't truncate cmdlines in the venv-blocker scan — it broke the gateway exemption

2026-08-08 18:58:06 -07:00

_startup_fast.py

refactor: single chokepoint for the pre-import version fast path

2026-08-02 21:13:12 +05:30

_subprocess_compat.py

fix(hooks): kill the whole process tree when a shell hook times out

2026-08-12 19:44:04 -07:00

active_sessions.py

fix(sessions): claim the cap slot on first turn, not on open

2026-07-28 12:11:52 -05:00

agent_import.py

refactor(cli): review follow-ups for the config.yaml import guard

2026-08-02 14:55:32 +05:30

agent_plugins.py

feat(plugins): map portable Agent Plugins streamable-http entries into the native MCP runtime

2026-08-08 23:56:46 -07:00

approval_mode.py

feat(approvals): add cross-surface mode command

2026-07-26 21:13:03 -07:00

approval_transport.py

fix(plugins): harden approval transport boundaries

2026-08-12 16:26:55 -07:00

approvals_suggest.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

approvals_test.py

feat(cli): add hermes approvals test — dry-run approval verdict CLI

2026-08-07 08:57:39 -07:00

auth_commands.py

fix(auth): make xAI OAuth pools multi-account resilient

2026-07-17 11:37:25 +05:30

auth.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

azure_detect.py

fix(security): secure Azure catalog probes

2026-07-11 12:28:55 +05:30

backup.py

fix(backup): drop setuid/setgid from the mode restored onto imported files

2026-08-14 21:47:23 -07:00

bang_shell.py

feat(cli): ! shell mode — run a command without spending a model turn

2026-07-31 21:21:20 -07:00

banner.py

fix(update): count real behind commits in SSH fast path

2026-08-14 13:46:33 -07:00

blueprint_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

browser_connect.py

fix(windows): native Windows correctness for CLI, gateway status, banner, and WSL browser paths

2026-07-29 23:16:18 -07:00

build_info.py

…

bundles.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

callbacks.py

fix(approval): classify CLI/TUI approval timeouts separately from explicit denials

2026-08-02 20:21:59 -07:00

checkpoints.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

claw.py

fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)

2026-07-24 11:45:57 -07:00

cli_agent_setup_mixin.py

fix: compare base-URL hostnames, not substrings, in provider-identity checks

2026-08-14 20:47:13 -07:00

cli_billing_mixin.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

cli_commands_mixin.py

feat: /loop — recurring in-session wakeups (Claude Code parity)

2026-08-14 13:40:19 -07:00

cli_output.py

…

clipboard.py

fix(cli): stop hard-wrapping streamed paragraphs; prefer OSC 52 over SSH

2026-07-29 08:42:16 -07:00

codex_models.py

fix(codex): send ChatGPT-Account-Id on /models probes

2026-07-21 05:27:13 -07:00

codex_runtime_plugin_migration.py

…

codex_runtime_switch.py

refactor(codex-runtime): tidy reapply-migration control flow

2026-07-01 23:51:54 +05:30

colors.py

…

commands.py

feat: /loop — recurring in-session wakeups (Claude Code parity)

2026-08-14 13:40:19 -07:00

completion.py

fix: batch of small robustness/correctness fixes from @kyssta-exe

2026-06-01 19:51:03 -07:00

config_defaults.py

fix(gateway): give in-flight cron work its own drain floor

2026-08-14 21:47:16 -07:00

config_migrations.py

feat(delegation): raise subagent iteration cap default 50 -> 250 (+migration) (#86506)

2026-08-14 16:50:30 -07:00

config.py

fix(config): canonicalize legacy api_mode spellings instead of silently discarding them

2026-08-14 16:36:39 -07:00

console_engine.py

fix: Windows agent-loop papercuts — path splitting, hashing, autocomplete, screenshots, OS detection (#84419)

2026-08-12 01:45:18 -07:00

container_boot.py

fix(install): support non-pid-1 container entrypoints

2026-08-01 10:52:34 -07:00

context_switch_guard.py

fix(cli): honor custom_providers in preflight shrink warning

2026-07-22 21:17:21 -07:00

copilot_auth.py

test: harden cold-start regression tests + debug-log the env-var skip

2026-08-03 21:16:09 +05:30

credential_lifecycle.py

fix(credentials): unified provider key delete/update across .env, auth.json, config.yaml (#67213)

2026-07-19 03:02:21 -07:00

cron.py

fix(cron): make pause authoritative against half-paused records

2026-08-08 13:48:00 +05:30

curator.py

fix(curator): make the autonomous write policy consistent (#67140)

2026-07-25 19:27:17 -07:00

curses_ui.py

cleanup: remove references to simple-term-menu

2026-08-10 15:13:29 -04:00

dashboard_procs.py

fix(cli): stop hermes update from respawning orphan serve --port 0 (#78821)

2026-08-14 21:46:32 -07:00

dashboard_register.py

fix(cli): correct stale hermes auth login nous hints to hermes auth add nous (#53929)

2026-06-27 21:30:37 -07:00

debug.py

fix(debug): say where a client-side log lives instead of "(file not found)" (#78687)

2026-08-04 11:53:32 -06:00

default_soul.py

fix(soul): installers seed the real default persona, upgrade legacy empty templates (#52246)

2026-06-24 18:56:26 -07:00

dep_ensure.py

fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade

2026-08-13 02:38:28 -07:00

diagnostics_upload.py

feat(debug): drop dead confirm step from --nous upload (stateless NAS)

2026-06-30 17:29:23 -07:00

dingtalk_auth.py

refactor(setup): route dependency installs through the canonical uv→pip→ensurepip ladder

2026-07-07 04:09:35 -07:00

doctor_live.py

fix(cli): apply Termux carve-out to doctor --live's npx browser probe

2026-08-13 02:38:28 -07:00

doctor.py

fix(browser): pin npx agent-browser resolution and share a sentinel constant

2026-08-13 02:38:28 -07:00

dump.py

feat(gateway): session activity watchdog, stall notify, compress timeout (#72424)

2026-08-02 16:16:36 -07:00

env_loader.py

fix(plugins): isolate ownership by profile

2026-08-12 19:13:32 -07:00

fallback_cmd.py

refactor(fallback): single owner for backend identity and failure-scoped skips

2026-07-26 23:41:54 -07:00

fallback_config.py

fix(auth): resolve fallback api keys through secret_scope, not raw env

2026-07-31 22:35:26 -07:00

focus_view.py

feat(cli): /focus — reduced-output view with hidden-line recovery and status indicator

2026-07-26 18:10:34 -07:00

gateway_enroll.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

gateway_windows.py

fix(update): migrate legacy pythonw Windows gateway launchers to the hidden-console design

2026-07-26 17:50:54 -07:00

gateway.py

fix(gateway): generalize supervised-gateway exemption in orphan reaper to all platforms

2026-08-14 21:44:28 -07:00

goals.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

gui_uninstall.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

heartbeat.py

feat: /heartbeat — recurring session re-entry prompt fired when idle

2026-08-05 22:32:55 -07:00

hooks.py

feat(langfuse): widen tracing to errors, sessions, subagents, and MoA fan-out

2026-08-13 23:10:16 +05:30

init_command.py

feat(cli): /init — generate or update AGENTS.md from a project scan

2026-07-26 17:46:29 -07:00

input_sanitize.py

fix(input): strip bracketed-paste leaks before prompt persistence (#62557)

2026-07-15 07:39:42 -07:00

inventory.py

feat(picker): derive a newest-per-lab featured shortlist from models.dev

2026-07-28 03:52:33 -05:00

journey.py

fix(cli): render /journey color instead of leaking raw ANSI

2026-07-01 16:25:48 -05:00

kanban_db.py

feat(kanban): GC stale done-task notify subscriptions

2026-08-13 12:21:04 -07:00

kanban_decompose.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_diagnostics.py

fix: complete kanban review lifecycle

2026-08-10 12:43:46 -07:00

kanban_specify.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

kanban_swarm.py

fix(kanban): make write_txn nesting explicit opt-in

2026-08-10 12:43:46 -07:00

kanban.py

feat(kanban): explicit notify/wake delivery modes with faithful wake session routing

2026-08-13 10:47:40 -07:00

lifecycle.py

Reapply "feat(observability): integrate NeMo Relay runtime and shared metrics"

2026-07-27 21:10:51 -07:00

linux_desktop_entry.py

feat(desktop): register a Linux launcher entry for hermes desktop

2026-08-05 11:47:05 -04:00

logs.py

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

loops.py

feat: /loop — recurring in-session wakeups (Claude Code parity)

2026-08-14 13:40:19 -07:00

main.py

fix(cli): stop hermes update from respawning orphan serve --port 0 (#78821)

2026-08-14 21:46:32 -07:00

managed_scope.py

fix(managed-scope): honor managed scope in all standalone config loaders

2026-06-19 07:46:33 -07:00

managed_uv.py

fix(update): survive a hermes_constants cached from before the update

2026-08-01 23:06:47 -05:00

mcp_catalog.py

fix(catalog): validate http+api_key manifests declare the header's env key

2026-08-03 22:55:36 +05:30

mcp_config.py

fix(mcp): make Figma remote OAuth work via DCR allowlist defaults

2026-07-28 00:53:16 -05:00

mcp_picker.py

…

mcp_security.py

fix(security): close hermes-0day MCP-persistence attack surface

2026-06-21 19:05:27 -07:00

mcp_startup.py

fix(review): harden portable plugin boundaries

2026-08-07 09:44:21 -07:00

mem_trim.py

fix(mem): 5s force floor so delegate-batch closes don't stack trims

2026-08-02 22:44:38 +05:30

memory_oauth.py

feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)

2026-06-22 19:16:47 -05:00

memory_setup.py

feat(hindsight): memory provider improvements — recall_sync, retain_source, setup templates, memory indicators, error hints

2026-08-13 23:15:25 +05:30

middleware.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

migrate.py

…

moa_cmd.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

moa_config.py

Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"

2026-08-12 21:50:35 -07:00

model_catalog.py

perf(model-picker): serve stale model caches instantly, refresh in background

2026-08-01 14:52:18 -07:00

model_cost_guard.py

fix(cli): guard expensive startup model overrides

2026-08-14 01:31:31 -07:00

model_data_policy_guard.py

feat(models): warn on data-training tiers at model selection

2026-08-14 01:06:13 -07:00

model_normalize.py

fix(models): a model id missing its vendor prefix says so instead of 404ing (#78856)

2026-08-04 19:35:57 +00:00

model_search.py

fix(picker): fold live bare k3 wire id into curated kimi-k3 row

2026-07-26 21:22:40 -07:00

model_selection_guards.py

feat(models): unify selection-time guards into one registry across all surfaces

2026-08-14 01:06:13 -07:00

model_setup_flows.py

fix(models): refresh xAI picker via models.dev; pin grok-4.6

2026-08-13 22:09:50 -07:00

model_switch.py

fix(models): ETag conditional GET, no-network hot-path invariant, mirror URL override for models.dev catalog

2026-08-14 03:31:22 +05:30

models.py

fix: compare base-URL hostnames, not substrings, in provider-identity checks

2026-08-14 20:47:13 -07:00

nous_account.py

fix: show explicit member spend cap message instead of 'no credits'

2026-08-07 19:47:40 +05:30

nous_auth_keepalive.py

fix Nous auth refresh for idle agents

2026-06-21 22:43:48 -07:00

nous_billing.py

refactor: single shared Retry-After parser

2026-07-29 10:13:50 -07:00

nous_subscription.py

fix(cli): restore managed-node-path and PATHEXT-aware fallback rungs

2026-08-13 02:38:28 -07:00

npm_engine.py

fix(win): never rewrite the in-use managed Node tree (#80926)

2026-08-14 21:35:30 -07:00

onepassword_secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

oneshot.py

fix(cli): scrub lone surrogates before oneshot stdout write

2026-08-08 12:31:19 -07:00

pairing.py

fix(pairing): keep GUI approvals off the code brute-force lockout

2026-07-29 17:51:40 -05:00

partial_compress.py

feat(commands): /compact alias + --preview/--dry-run flags for /compress (#3243 salvage)

2026-07-02 05:10:31 -07:00

personality.py

fix(personality): single-owner personality state + one-time reset migration

2026-08-09 10:33:58 -07:00

pets.py

feat(pets): generation RPCs, non-blocking gallery + gateway plumbing

2026-06-24 13:48:38 -05:00

platform_actions.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

platforms.py

…

plugin_capabilities.py

feat(plugins): capability-gated ctx.platform_actions facade (#64176)

2026-08-12 20:10:51 -07:00

plugin_dev.py

feat(plugins): manifest v2 — schema version, api_version, inter-plugin deps, pip-dependency declaration seam, config schema (#64165)

2026-08-12 18:39:22 -07:00

plugin_index.py

feat(plugins): community plugin index + hermes plugins search (#64181)

2026-08-12 18:52:08 -07:00

plugin_packs.py

feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)

2026-08-12 19:56:44 -07:00

plugins_cmd.py

fix(plugins): report entrypoint capabilities in CLI

2026-08-13 13:38:58 -07:00

plugins.py

fix(plugins): discover entrypoint capabilities

2026-08-13 13:38:58 -07:00

portal_cli.py

fix(auth): use refresh-free Nous status snapshot on read-only display paths

2026-07-28 22:42:19 -07:00

profile_describer.py

fix(auxiliary): route direct-create aux callers through call_llm (#65029)

2026-07-15 07:39:17 -07:00

profile_distribution.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

profiles.py

feat(gateway): allow selective multiplex profile serving

2026-08-10 22:48:24 -07:00

projects_cmd.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

projects_db.py

feat(desktop): configure repository discovery (supersedes #67630) (#68642)

2026-07-21 10:09:31 -04:00

prompt_size.py

fix(prompt_size): search volatile tier for skills block after the stable->volatile move

2026-08-03 23:23:39 +05:30

prompt_stash.py

feat(cli): complete the Ctrl+S prompt stash — keybinding, state machine, tests

2026-07-31 21:21:16 -07:00

provider_catalog.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

providers.py

feat: rename Codex OAuth provider label to "ChatGPT or Codex Subscription"

2026-08-13 03:06:08 -07:00

proxy_cli.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

psutil_android.py

…

pt_input_extras.py

fix(cli): route Cmd+Backspace and Cmd+ForwardDelete to the kill bindings

2026-07-30 03:39:26 -05:00

pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

pty_session.py

fix(dashboard): redraw TUI after PTY reattach

2026-08-14 13:51:26 -07:00

relaunch.py

revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)

2026-06-27 15:59:00 -07:00

resource_limits.py

fix(gateway): persist RLIMIT_NOFILE floor into the generated launchd plist

2026-08-10 17:02:56 -07:00

route_identity.py

refactor: fold simplify-code review findings

2026-07-29 17:13:48 +05:30

runtime_provider.py

fix: compare base-URL hostnames, not substrings, in provider-identity checks

2026-08-14 20:47:13 -07:00

secret_prompt.py

feat(memory): improve OpenViking setup UX

2026-06-17 01:04:26 +08:00

secrets_cli.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

security_advisories.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

security_audit_startup.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

security_audit.py

fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)

2026-08-01 10:47:20 -07:00

send_cmd.py

fix(cli): apply BOM-safe .env decoding to hermes send's private loader

2026-08-08 12:32:23 -07:00

service_manager.py

fix(gateway): don't restart supervised services on clean exit

2026-08-14 21:07:21 -07:00

session_export_html.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

session_export_md.py

feat(sessions): full prune-filter set + --redact on sessions export

2026-07-07 12:36:41 -07:00

session_export.py

feat: add prompt-only session export

2026-07-07 13:29:58 -07:00

session_filters.py

fix(sessions): preserve recently active sessions during pruning

2026-07-26 19:30:21 -07:00

session_listing.py

fix(gateway): scope session lists before limiting

2026-07-31 22:36:55 -07:00

session_lost_and_found.py

fix(sessions): probe sqlite3 CLI for .recover capability, not just PATH presence

2026-08-12 19:43:47 -07:00

session_recap.py

fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)

2026-07-17 04:53:38 -07:00

session_recovery.py

fix(sessions): recover budget exhaustion + lost_and_found last-resort lane

2026-08-12 19:43:47 -07:00

sessions_cmd.py

fix: close leaked SessionDB connections on /insights and sessions-repair exception paths (#83226)

2026-08-14 21:41:26 -07:00

setup_hidden_env.py

fix(setup): stop asking about self-configuring platform knobs

2026-07-26 08:43:24 -07:00

setup_whatsapp_cloud.py

fix(whatsapp-cloud): review follow-ups for #43921

2026-06-11 07:51:01 -07:00

setup.py

feat: auto-install gateway service during setup and import

2026-08-12 16:59:37 -07:00

sizefmt.py

refactor: fold simplify findings — 6th copy in update_cmd, drop dead wrapper + speculative kwarg, behavior-contract tests

2026-08-08 15:10:35 +05:30

skills_config.py

fix(cli): normalize malformed skills config in get_disabled_skills (#61797)

2026-07-09 19:57:54 -07:00

skills_hub.py

refactor: share category detection and prune vendored SKILL.md hits

2026-08-02 13:31:16 +05:30

skin_cmd.py

refactor: trim verbose comments + drop redundant default_flow_style kwarg

2026-08-05 11:59:33 +05:30

skin_engine.py

feat(themes): dedicated code-syntax palette keys

2026-07-21 21:00:43 -05:00

slack_cli.py

fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)

2026-07-29 09:33:48 -07:00

slash_exec.py

refactor: registry-owned execute() on CommandDef — informational commands unified (thin slice)

2026-07-29 12:11:24 -07:00

sqlite_runtime.py

fix(runtime): repair vulnerable managed SQLite builds (E-949)

2026-07-24 16:00:03 -07:00

sqlite_safe_read.py

fix(cli): untrack sqlite connections only after close succeeds

2026-07-31 23:18:12 -07:00

sqlite_util.py

feat(projects): add per-profile project store

2026-06-25 16:40:26 -05:00

status.py

feat(cli): global emergency stop — hermes pause / hermes resume

2026-08-07 08:58:14 -07:00

stdio.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

suggestions_cmd.py

refactor(cron): polish registration partial-failure surfaces

2026-08-07 17:45:06 +05:30

telegram_managed_bot.py

Add CLI Telegram QR onboarding

2026-06-05 03:20:10 -07:00

timefmt.py

chore: round-2 review nits (re-review #9)

2026-08-02 16:16:36 -07:00

timeouts.py

…

tips.py

feat(gateway): concise background process notifications by default

2026-08-14 00:26:11 -07:00

tools_config.py

fix(browser): managed-first browser-use CLI resolution

2026-08-14 13:51:07 -07:00

toolset_validation.py

chore: remove unused imports and dead locals (ruff F401/F841 sweep)

2026-07-29 11:53:39 -07:00

uninstall.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30

update_cmd.py

fix(update): stop reporting bogus 'Found 9980 new commit(s)' on shallow installs

2026-08-14 13:36:42 -07:00

update_lock.py

fix(update): make the ancestor-PID lock handoff cross-platform via psutil

2026-07-31 22:28:46 -07:00

urllib_security.py

fix(models): trust certifi for credentialed catalogs (E-1002)

2026-08-14 16:43:37 -07:00

vercel_auth.py

Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"

2026-07-29 19:48:37 -07:00

verify_cmd.py

Integrate verify subsystem with the existing verification stack

2026-08-07 10:11:05 -07:00

voice.py

fix(tts): split long speech by provider and platform limits

2026-08-08 22:54:20 +05:30

web_deps.py

refactor(web): extract sessions/mcp/skills/tools routes to APIRouter modules (wave 2; route-table equality verified)

2026-07-29 16:21:54 -07:00

web_git.py

feat(desktop): resolve a session's pull request

2026-08-09 06:21:04 -05:00

web_models.py

feat(desktop): resolve a session's pull request

2026-08-09 06:21:04 -05:00

web_server.py

fix(sessions): run state.db schema migration eagerly at backend startup and stop swallowing locked ALTERs

2026-08-14 21:36:29 -07:00

webhook.py

fix: repair sweep fallout — duplicate encoding kwargs, non-subprocess call sites, kwarg-snapshot tests

2026-07-24 11:45:57 -07:00

win_pty_bridge.py

refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)

2026-07-29 10:14:11 -07:00

windows_ssh_runtime.py

fix(desktop): keep Windows SSH runtime at machine root

2026-08-01 14:30:16 -07:00

write_approval_commands.py

refactor(memory,skills): replace tri-state write_mode with boolean write_approval (default off) (#43354)

2026-06-09 23:21:14 -07:00

xai_retirement.py

refactor(utils): move mode+owner preservation into atomic_write_text

2026-08-06 05:00:17 +05:30