Teknium ad978ed962 feat(egress): iron-proxy credential-injection firewall for sandboxes ...

Rebuilds the iron-proxy egress feature cleanly onto current main. The
original feat/iron-proxy branch had diverged from main with an
unmergeable history (no usable merge-base after main history motion),
so the feature's content diff was re-applied onto a fresh main cut and
the three config/docs conflicts (commands.py status/egress, config.py
proxy vs computer_use, slash-commands.md) resolved keeping main's
content plus the egress additions.

Optional, off-by-default TLS-intercepting egress proxy for remote
terminal sandboxes. Sandboxes hold opaque proxy tokens; iron-proxy
swaps them for real provider API keys at the network boundary.

Includes the full review-cycle hardening:
- P0/P1/P2 rounds (GodsBoy, stephenschoettler, arshkumarsingh,
  annguyenNous, maxpetrusenko, sxuff findings)
- v0.39 schema realignment + Docker bridge-bind/listener-role fixes
- Docker UX/enforcement hardening

Salvaged security fixes folded in with credit:
- Three P0 gaps (version-probe env scrub, Bitwarden ImportError
  fail-closed, container-reuse egress-boundary) + Docker v29.5.3
  empty-label edge — kuangmi-bit (#48073)
- P1/P2 (fail-closed replace.require:true, NODE_OPTIONS CA-flag
  conflict, GPG checksum verify, threat-model wording) — Bartok9 (#48076)

Co-authored-by: kuangmi-bit <kuangmi@deeparchi.com>
Co-authored-by: Bartok9 <danielrpike9@gmail.com>

2026-06-26 01:11:38 -07:00

..

__init__.py

…

conftest.py

test(tools): centralize disable_lazy_stt_install fixture in conftest

2026-05-22 03:33:01 -07:00

test_accretion_caps.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_ansi_strip.py

…

test_approval_heartbeat.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_approval_interrupt.py

test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP

2026-06-21 13:33:48 -07:00

test_approval_plugin_hooks.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_approval.py

fix(approval): fold Windows absolute home paths in dangerous-command detection

2026-06-25 17:49:39 -07:00

test_async_delegation.py

feat(delegation): background fan-out — parallel subagents, one consolidated return (#49734)

2026-06-20 11:27:12 -07:00

test_base_environment.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_blueprints.py

refactor(cron): rebrand Cron Recipes -> Automation Blueprints

2026-06-11 10:49:47 -07:00

test_browser_camofox_persistence.py

feat(browser): support externally managed Camofox sessions

2026-05-12 15:14:49 -07:00

test_browser_camofox_state.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_browser_camofox.py

fix(browser): force secret-pattern redaction on browser_type display

2026-06-25 22:02:22 -07:00

test_browser_cdp_override.py

Support browser CDP URL from config

2026-04-17 16:05:04 -07:00

test_browser_cdp_tool.py

fix(tests): resolve 17 persistent CI test failures (#15084)

2026-04-24 03:46:46 -07:00

test_browser_chromium_check.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_browser_cleanup.py

…

test_browser_cloud_fallback.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_browser_cloud_provider_cache.py

fix(browser_tool): fall through to autodetect on config read failure

2026-05-09 13:35:39 -07:00

test_browser_console.py

refactor(vision): consolidate native fast-path gate into one shared helper

2026-05-29 03:58:56 -07:00

test_browser_content_none_guard.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_browser_eval_supervisor_path.py

fix(browser): recover from CDP DOM-node serialization crash in browser_console (#35385)

2026-05-30 07:31:25 -07:00

test_browser_hardening.py

fix(browser): validate agent-browser is runnable, not just present (#51740)

2026-06-24 00:14:49 -07:00

test_browser_homebrew_paths.py

fix(browser): validate agent-browser is runnable, not just present (#51740)

2026-06-24 00:14:49 -07:00

test_browser_hybrid_routing.py

feat(browser): auto-spawn local Chromium for LAN/localhost URLs in cloud mode (#16136)

2026-04-26 09:57:58 -07:00

test_browser_lightpanda.py

fix(browser): tighten Lightpanda fallback edge cases

2026-05-06 03:41:21 -07:00

test_browser_orphan_reaper.py

fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)

2026-06-21 15:23:47 -07:00

test_browser_secret_exfil.py

fix(tools): percent-encode non-ascii URL components

2026-06-07 11:42:26 -06:00

test_browser_ssrf_local.py

fix(browser): enable SSRF guard when terminal runs in container

2026-06-21 07:26:18 -07:00

test_browser_supervisor_healthcheck.py

test(browser_supervisor): cover cache-hit healthcheck on dead thread/loop

2026-04-30 20:33:33 -07:00

test_browser_supervisor.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_browser_type_redaction.py

fix(browser): force secret-pattern redaction on browser_type display

2026-06-25 22:02:22 -07:00

test_budget_config.py

fix(agent): scale tool-output budget to the model context window (#23767)

2026-06-21 17:46:38 +05:30

test_checkpoint_manager.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_clarify_gateway.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_clarify_tool.py

fix(clarify): unwrap dict choices at the source so every surface gets clean text

2026-06-19 06:31:08 -07:00

test_clipboard.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_code_execution_modes.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_code_execution_windows_env.py

fix(code-exec): restore approval context in execute_code RPC threads + guard entry

2026-05-29 03:44:49 -07:00

test_code_execution.py

fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection

2026-06-21 16:55:12 -07:00

test_command_guards.py

fix(approval): honor glob command allowlist entries (#43051)

2026-06-18 12:48:36 +10:00

test_computer_use_capture_routing.py

feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)

2026-06-22 06:42:30 -07:00

test_computer_use_vision_routing.py

fix(computer_use): honor custom vision routing

2026-06-07 02:09:20 -07:00

test_computer_use.py

Merge remote-tracking branch 'origin/main' into pr-50994

2026-06-22 18:48:07 -05:00

test_config_null_guard.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_container_cwd_sanitize.py

fix(terminal): sanitize host/relative cwd OVERRIDE before it reaches docker run -w (#50636)

2026-06-25 02:33:40 +00:00

test_credential_files.py

fix(slack): make video attachments available to agents (#45512)

2026-06-13 03:33:27 -07:00

test_credential_pool_env_fallback.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_cron_approval_mode.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_cron_prompt_injection.py

fix(security): align cron invisible-unicode set with install-time scanner

2026-06-26 01:11:11 -07:00

test_cronjob_run_immediate.py

fix(cron): execute job immediately on action='run'

2026-06-21 13:28:04 +05:30

test_cronjob_tools.py

fix(cron): tell the user TUI/CLI cron jobs are local-only at create time (#51683)

2026-06-23 23:27:48 -07:00

test_cross_profile_guard.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_daytona_environment.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_debug_helpers.py

…

test_delegate_composite_toolsets.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_delegate_subagent_timeout_diagnostic.py

feat(desktop): stream subagent activity into watch windows (#47060)

2026-06-16 14:30:11 -04:00

test_delegate_toolset_scope.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_delegate.py

Merge pull request #47959 from NousResearch/bb/pets-gen

2026-06-24 19:41:34 -05:00

test_discord_tool.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_docker_config_migrate.py

test(docker): assert boot migration keeps .env byte-identical across reboots

2026-06-24 15:23:23 +10:00

test_docker_environment.py

feat(egress): iron-proxy credential-injection firewall for sandboxes

2026-06-26 01:11:38 -07:00

test_docker_find.py

feat: entry-level Podman support — find_docker() + rootless entrypoint (#10066)

2026-04-14 21:20:37 -07:00

test_docker_orphan_reaper_integration.py

fix(docker): startup orphan reaper for crashed-process containers

2026-05-29 11:49:54 +10:00

test_dockerfile_immutable_install.py

fix(docker): redirect lazy installs to a durable target so opt-in backends work in the immutable image (#51136)

2026-06-25 09:20:13 +10:00

test_dockerfile_node_modules_perms.py

Harden hosted Docker install tree against self-modification (#47490)

2026-06-18 09:09:21 +10:00

test_dockerfile_pid1_reaping.py

fix(docker): pre-install matrix deps in Docker image (#30399) (#42413)

2026-06-10 19:23:06 +10:00

test_env_passthrough.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_env_probe.py

feat(prompt): universal task-completion guidance + local Python toolchain probe (#34340)

2026-05-28 22:26:09 -07:00

test_execute_code_approval_cluster.py

fix(approval): check is_approved in execute_code guard (#39275)

2026-06-04 19:40:30 -07:00

test_feishu_tools.py

feat: add Feishu document comment intelligent reply with 3-tier access control

2026-04-17 19:04:11 -07:00

test_file_operations_edge_cases.py

perf(read_file): compact line-number gutter — ~14% fewer tokens per read (#35368)

2026-05-30 07:01:22 -07:00

test_file_operations.py

feat(search_files): headroom compression evaluation report + lossless densification (#47866)

2026-06-17 13:45:25 -07:00

test_file_ops_cwd_tracking.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_file_read_guards.py

fix(file): anchor device symlink guard to task cwd

2026-06-21 12:16:10 -07:00

test_file_staleness.py

fix(file_tools): resolve bookkeeping paths against live terminal cwd

2026-04-23 15:11:52 -07:00

test_file_state_registry.py

feat(delegate): cross-agent file state coordination for concurrent subagents (#13718)

2026-04-21 16:41:26 -07:00

test_file_sync_back.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_file_sync_perf.py

…

test_file_sync.py

…

test_file_tools_container_config.py

fix(tools): respect session cwd in file tools

2026-06-15 14:00:42 +05:30

test_file_tools_cwd_resolution.py

fix(tools): isolate per-session worktree cwd

2026-06-25 16:40:27 -05:00

test_file_tools_live.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_file_tools_tilde_profile.py

fix(file_tools): resolve tilde using profile home for file operations (#48552)

2026-06-23 03:17:47 +05:30

test_file_tools.py

fix(file): reject read_file line-numbered writeback

2026-06-21 11:55:59 -07:00

test_file_write_safety.py

fix(file-tools): handle UTF-8 BOM in read_file / write_file / patch (#35278)

2026-05-30 06:25:50 -07:00

test_force_dangerous_override.py

…

test_fuzzy_match.py

fix(fuzzy-match): preserve boundary space after whitespace-normalized match

2026-06-26 01:55:27 +05:30

test_gateway_cwd_contract.py

test(tools): characterize tool-surface TERMINAL_CWD contract (#29265)

2026-06-01 16:55:04 -07:00

test_hardline_blocklist.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_heartbeat_stale_thresholds.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_hidden_dir_filter.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_homeassistant_tool.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_image_generation_artifacts.py

feat(image-gen): add image-to-image / editing to image_generate (#48705)

2026-06-18 22:13:07 -07:00

test_image_generation_env.py

feat(image-gen): actionable setup message when no FAL backend is reachable (#26222)

2026-05-15 01:33:13 -07:00

test_image_generation_image_to_image.py

fix(tools): never let a model whitelist strip the prompt / source images

2026-06-19 16:59:54 -07:00

test_image_generation_plugin_dispatch.py

fix(image-gen): force-refresh plugin providers in long-lived sessions

2026-04-23 03:01:18 -07:00

test_image_generation.py

krea

2026-06-25 12:38:33 -07:00

test_init_session_cwd_respect.py

fix(cli): respect terminal.cwd config in local terminal backend

2026-04-28 22:16:08 -07:00

test_interrupt.py

test(interrupt): assert no leaked tid instead of no-op block

2026-05-30 07:28:11 -07:00

test_kanban_redaction.py

fix(security): redact secrets in kanban tool payloads before persistence

2026-06-21 12:02:30 -07:00

test_kanban_tools.py

refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)

2026-06-21 17:06:48 -07:00

test_lazy_deps_durable_target.py

test(lazy-deps): make durable-target tests network-free

2026-06-25 09:20:13 +10:00

test_lazy_deps.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_line_ending_preservation.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_llm_content_none_guard.py

feat(moa): expose MoA presets as selectable virtual models (#46081)

2026-06-25 13:52:06 -07:00

test_local_background_child_hang.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_local_env_blocklist.py

fix(terminal): make hermes install dir reachable in subshell PATH (#50534)

2026-06-21 20:00:06 -07:00

test_local_env_cwd_recovery.py

fix(local): test root as ancestor candidate; use real pipe for fake stdout

2026-05-04 15:31:47 -07:00

test_local_env_windows_msys.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_local_interrupt_cleanup.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_local_shell_init.py

fix(coding): teach agents terminal env state persists

2026-06-11 19:50:08 -05:00

test_local_tempdir.py

…

test_managed_browserbase_and_modal.py

test(approval): regression for shell-escape denylist bypass (#36846, #36847)

2026-06-07 03:57:21 -07:00

test_managed_media_gateways.py

test(video_gen): cover gateway decision matrix gaps and 4xx error path

2026-05-29 22:26:24 +05:30

test_managed_modal_environment.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_managed_tool_gateway.py

fix(managed-gateway): keep tool availability scans off the Nous token-refresh path

2026-05-30 07:58:08 -07:00

test_mcp_cancelled_error_propagation.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_mcp_capability_gating.py

test(mcp): cover 'unknown method' ping keepalive fallback (#50028)

2026-06-21 16:02:56 +05:30

test_mcp_circuit_breaker.py

test(mcp): add failing tests for circuit-breaker recovery

2026-04-21 05:19:03 -07:00

test_mcp_client_cert.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_mcp_dynamic_discovery.py

fix(ci): recover 38 failing tests on main (#17642)

2026-04-29 20:05:32 -07:00

test_mcp_elicitation.py

feat(tools): MCP elicitation handler with gateway-aware approval routing

2026-06-19 11:46:25 -07:00

test_mcp_empty_error_message.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_mcp_image_content.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_mcp_invalid_url.py

fix(mcp): validate remote URLs up-front with a clear error (#27105)

2026-05-16 13:06:56 -07:00

test_mcp_loop_profile_override.py

fix(mcp): propagate HERMES_HOME override onto the MCP event loop (#44220)

2026-06-11 04:37:01 -07:00

test_mcp_oauth_bidirectional.py

fix(mcp-oauth): bidirectional auth_flow bridge + absolute expires_at (salvage #12025) (#12717)

2026-04-19 16:31:07 -07:00

test_mcp_oauth_cold_load_expiry.py

fix(mcp-oauth): bidirectional auth_flow bridge + absolute expires_at (salvage #12025) (#12717)

2026-04-19 16:31:07 -07:00

test_mcp_oauth_integration.py

fix(mcp): fail fast for noninteractive oauth without tokens

2026-06-15 04:22:07 -07:00

test_mcp_oauth_manager.py

test(mcp): make invalid_client tests interactive under hermetic env

2026-06-26 00:35:27 -07:00

test_mcp_oauth_metadata.py

fix(mcp-oauth): persist OAuth server metadata across process restarts (#21226)

2026-05-07 05:35:33 -07:00

test_mcp_oauth.py

fix(mcp): auto-recover from invalid_client on stale OAuth client registration

2026-06-26 00:35:27 -07:00

test_mcp_preflight_content_type.py

fix(mcp): make non-MCP HTTP endpoint fast-fail robust and non-retryable

2026-06-01 19:49:50 -07:00

test_mcp_probe.py

fix(mcp): preserve loop during probes

2026-06-14 02:09:45 -07:00

test_mcp_reconnect_signal.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_sse_transport.py

fix(mcp): forward OAuth auth and bump sse_read_timeout on SSE transport (#21323)

2026-05-07 07:08:04 -07:00

test_mcp_stability.py

fix(mcp): skip killpg when child shares gateway's process group (#47134)

2026-06-24 00:52:18 +05:30

test_mcp_structured_content.py

fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)

2026-05-15 14:00:01 -07:00

test_mcp_tool_401_handling.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_tool_issue_948.py

fix(mcp): run OSV malware preflight off the event loop with a bounded timeout (#29184)

2026-06-25 23:30:41 +05:30

test_mcp_tool_session_expired.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_mcp_tool.py

refactor: remove agent-callable send_message tool (#47856)

2026-06-17 07:11:23 -07:00

test_mcp_utility_capability_gating.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_memory_tool_import_fallback.py

fix(tools): keep memory tool available when fcntl is unavailable

2026-04-14 10:18:05 -07:00

test_memory_tool_schema.py

feat(memory): batch operations for single-turn memory updates (#48507)

2026-06-18 10:19:33 -07:00

test_memory_tool.py

fix(memory): skip drift guard for add (append-only) action (#42874)

2026-06-25 00:51:12 +05:30

test_microsoft_graph_auth.py

test(msgraph): cover concurrent token cache reuse

2026-05-08 09:27:26 -07:00

test_microsoft_graph_client.py

fix(msgraph): stream download_to_file body instead of buffering

2026-05-08 09:27:26 -07:00

test_modal_bulk_upload.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_modal_sandbox_fixes.py

fix(terminal): sanitize host/relative cwd OVERRIDE before it reaches docker run -w (#50636)

2026-06-25 02:33:40 +00:00

test_modal_snapshot_isolation.py

…

test_notify_on_complete.py

fix(process): keep CLI drain dedup after poll goes read-only (#10156)

2026-06-21 11:11:23 -07:00

test_osv_check.py

fix(osv_check): honor npx --package/-p install target when parsing package arg (#40567)

2026-06-06 18:30:39 -07:00

test_parse_env_var.py

guard terminal_tool import-time env parsing

2026-04-22 14:45:50 -07:00

test_patch_failure_tracking.py

feat(patch): indentation preservation, CRLF preservation, per-file failure escalation (#507) (#32273)

2026-05-25 15:18:45 -07:00

test_patch_parser.py

fix(lint): skip per-file shell linter when LSP will handle the file (#29054)

2026-05-20 01:46:40 -05:00

test_pr_6656_regressions.py

test(skills): widen assertion in PR#6656 regression to accept new validator msg

2026-05-25 06:13:36 -07:00

test_process_registry.py

test(windows): align gateway restart CI coverage

2026-06-25 14:42:38 -07:00

test_read_extract.py

feat(read): extract notebook and office documents (#37082)

2026-06-13 14:42:51 -07:00

test_read_loop_detection.py

feat(search_files): headroom compression evaluation report + lossless densification (#47866)

2026-06-17 13:45:25 -07:00

test_refresh_agent_mcp_tools.py

fix(mcp): address adversarial review round 2 (stale-publish race, parity holes)

2026-06-19 11:57:43 -07:00

test_registry.py

test(ci): stabilize shared optional dependency baselines

2026-05-13 17:32:22 -07:00

test_resolve_path.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_schema_sanitizer.py

fix(tools): strip default from $ref nodes in tool schemas

2026-06-12 00:30:51 -05:00

test_search_budget_truncation.py

fix(search): keep partial results on search timeout (#36142)

2026-06-13 14:35:21 -07:00

test_search_error_guard.py

fix: warn on line-oriented newline search patterns

2026-06-20 23:23:47 -07:00

test_search_hidden_dirs.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_send_message_missing_platforms.py

refactor(gateway): migrate slack/dingtalk/whatsapp/matrix/feishu/telegram/wecom/email/sms adapters to bundled plugins

2026-06-20 10:26:45 -07:00

test_send_message_react.py

feat(messaging): expose action='unreact' in send_message + react dispatch tests

2026-06-12 01:07:38 -07:00

test_send_message_target_parse.py

fix: harden WhatsApp target alias salvage

2026-06-15 05:51:47 -07:00

test_send_message_telegram_proxy.py

test+release: align send_message mocks for MessageEntity import; map @fonhal

2026-05-18 22:19:50 -07:00

test_send_message_tool.py

fix(telegram): preserve Bot API update queue on watcher reconnect

2026-06-25 21:29:57 -07:00

test_session_search.py

fix(tools): let session_search match session titles

2026-06-26 01:12:26 +05:30

test_shared_container_task_id.py

fix(terminal): collapse CWD-only overrides to shared container

2026-06-07 23:04:54 -07:00

test_signal_media.py

refactor(gateway): migrate slack/dingtalk/whatsapp/matrix/feishu/telegram/wecom/email/sms adapters to bundled plugins

2026-06-20 10:26:45 -07:00

test_singularity_preflight.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_skill_env_passthrough.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_skill_improvements.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_skill_manager_tool.py

fix(curator): protect external skills from background curation

2026-06-25 22:03:02 -07:00

test_skill_provenance.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_skill_size_limits.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_skill_usage.py

fix(curator): protect external skills from background curation

2026-06-25 22:03:02 -07:00

test_skill_view_path_check.py

…

test_skill_view_traversal.py

fix(skills): block path traversal via skill_view name argument (#40566)

2026-06-06 18:29:52 -07:00

test_skills_ast_audit.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_skills_guard.py

fix(skills-guard): stop flagging benign skill content + honor skill ignore files (#36231)

2026-06-01 01:58:48 -07:00

test_skills_hub_browse_sh.py

fix(browse-sh): fetch SKILL.md via /api/skills/{slug}+skillMdUrl

2026-05-19 14:17:38 -07:00

test_skills_hub_clawhub.py

fix(skills): let ClawHub index build walk past the 12s browse budget (#44500)

2026-06-11 18:03:11 -04:00

test_skills_hub.py

fix(skills): honour overall_timeout and bound ClawHub catalog walk

2026-06-09 23:22:54 -07:00

test_skills_list_modified_diff.py

test(skills): cover list-modified + diff for bundled skills

2026-06-18 12:26:20 +05:30

test_skills_sync.py

fix(skills): refuse SKILLS_DIR root in rmtree guard, not just outside-tree

2026-06-18 08:53:35 -07:00

test_skills_tool.py

fix(skills): ignore support docs in skill discovery

2026-06-16 13:08:34 -07:00

test_slash_confirm.py

feat(gateway,cli): confirm /reload-mcp to warn about prompt cache invalidation

2026-04-29 21:56:47 -07:00

test_smart_approval_injection.py

fix(security): harden smart approval guard against prompt injection

2026-06-21 16:39:48 -07:00

test_spotify_client.py

docs(spotify): document 6-month re-auth cycle and add client-level invalid_grant test

2026-06-20 23:23:47 -07:00

test_ssh_bulk_upload.py

fix(ssh): handle WinError 1314 symlink failure with shutil.copy2 fallback

2026-06-04 18:06:21 -07:00

test_ssh_environment.py

fix(tools): keep SSH ControlMaster socket path under macOS 104-byte limit

2026-04-20 03:07:32 -07:00

test_stage2_hook_gateway_bootstrap_state.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_stage2_hook_immutable_install.py

Harden hosted Docker install tree against self-modification (#47490)

2026-06-18 09:09:21 +10:00

test_stage2_hook_install_method_stamp.py

fix(update): scope install-method stamp to the code tree, not $HERMES_HOME (#48188)

2026-06-18 14:14:41 +10:00

test_stage2_hook_log_dir_seed.py

fix(s6): make profile gateway log parent writable (#46291)

2026-06-15 13:47:05 +10:00

test_stage2_hook_puid_pgid.py

fix(docker): run config migrations during container boot (salvage #35508) (#36627)

2026-06-04 11:11:27 +10:00

test_stage2_hook_seed_one_symlinks.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_stage2_hook_symlink_chown.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_stage2_hook_toplevel_chown.py

fix(docker): skip symlinked stage2 chown targets (#52789)

2026-06-26 12:09:52 +10:00

test_stage2_hook_unraid_uid.py

fix(docker): accept Unraid uid mappings (#38098)

2026-06-04 12:38:24 +10:00

test_stage2_hook_user_flag_guard.py

fix(docker): reject unsupported --user <arbitrary-uid> start with clear guidance (#38579)

2026-06-04 10:51:51 +10:00

test_subprocess_stdin_guard.py

test: guard OAuth setup-token stays interactive + marker exemption

2026-06-08 22:46:57 -07:00

test_symlink_prefix_confusion.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_sync_back_backends.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_terminal_compound_background.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_terminal_config_env_sync.py

fix(terminal): bridge docker_extra_args to TERMINAL_DOCKER_EXTRA_ARGS in CLI + gateway (#50631)

2026-06-22 15:41:23 +10:00

test_terminal_exit_semantics.py

…

test_terminal_foreground_timeout_cap.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_terminal_none_command_guard.py

…

test_terminal_output_transform_hook.py

test: stop testing mutable data — convert change-detectors to invariants (#13363)

2026-04-20 23:20:33 -07:00

test_terminal_requirements.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_terminal_task_cwd.py

fix(tools): isolate per-session worktree cwd

2026-06-25 16:40:27 -05:00

test_terminal_timeout_output.py

…

test_terminal_tool_pty_fallback.py

…

test_terminal_tool_requirements.py

remove Vercel AI Gateway and Vercel Sandbox (#33067)

2026-05-27 00:43:32 -07:00

test_terminal_tool.py

test(terminal): cover sudo cache invalidation and multi-invocation piping

2026-06-25 23:08:48 +05:30

test_threaded_process_handle.py

…

test_threat_patterns.py

fix(security): stop blocking AGENTS.md/SOUL.md that name an agent 'Praxis' (#52925)

2026-06-26 00:36:01 -07:00

test_tirith_security.py

fix(tools): catch mkdtemp OSError in tirith install to prevent unbounded retry and temp-dir leak (#51826)

2026-06-25 02:13:56 +05:30

test_todo_tool_type_coercion.py

fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)

2026-06-25 23:42:42 +05:30

test_todo_tool.py

hardening(todo): bound TodoStore item content length and count

2026-06-07 18:06:27 -07:00

test_tool_backend_helpers.py

fix(tools): guard Path.home() against PermissionError in has_direct_modal_credentials (#33528)

2026-05-29 13:35:39 +10:00

test_tool_output_limits.py

fix(gateway): detach pending_watchers batch + normalize LRU caches + align test fixtures + AUTHOR_MAP

2026-05-31 00:50:19 -07:00

test_tool_result_storage.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_tool_search.py

test: restore unrelated trailing newlines in cwd/tool-search tests

2026-06-03 06:36:46 -07:00

test_transcription_command_providers.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_transcription_dotenv_fallback.py

Add Hermes desktop app (#20059)

2026-05-31 17:46:56 -05:00

test_transcription_plugin_dispatch.py

feat(stt): add register_transcription_provider() plugin hook

2026-05-25 01:41:19 -07:00

test_transcription_tools.py

Add Hermes desktop app (#20059)

2026-05-31 17:46:56 -05:00

test_transcription.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_tts_command_providers.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_tts_dotenv_fallback.py

fix(xai-http): preserve ~/.hermes/.env fallback and XAI_STT_BASE_URL precedence

2026-05-15 12:11:32 -07:00

test_tts_gemini.py

feat(tts): add Gemini audio tag rewrite

2026-06-10 02:57:39 -07:00

test_tts_kittentts.py

test(ci): stabilize shared optional dependency baselines

2026-05-13 17:32:22 -07:00

test_tts_max_text_length.py

test: port voice-reply suffix assertions, fix change-detector cap test, add AUTHOR_MAP entry

2026-06-10 02:57:39 -07:00

test_tts_mistral.py

fix(stt,tts): restore mistralai — 2.4.8 is clean, ban lifted (#34841)

2026-05-29 13:24:12 -07:00

test_tts_opus_routing.py

fix(tts): keep native audio outside Telegram voice delivery

2026-05-18 22:29:45 -07:00

test_tts_path_traversal.py

fix(tts): reject '..' traversal in output_path

2026-05-25 05:15:55 -07:00

test_tts_piper.py

feat(tts): expose speaker_id on built-in Piper provider

2026-06-19 07:04:58 -07:00

test_tts_plugin_dispatch.py

feat(tts): add register_tts_provider() plugin hook (closes #30398)

2026-05-24 18:04:54 -07:00

test_tts_speed.py

fix(tts): align MiniMax TTS defaults with current API and add GroupId support

2026-05-13 22:04:28 -07:00

test_tts_xai_speech_tags.py

feat(tts): add xAI TTS speed and optimize_streaming_latency config knobs

2026-06-19 07:26:56 -07:00

test_url_safety.py

test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards

2026-06-21 13:56:35 -07:00

test_video_analyze.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_video_generation_dispatch.py

feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)

2026-05-13 16:39:41 -07:00

test_video_generation_dynamic_schema.py

feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)

2026-05-13 16:39:41 -07:00

test_video_generation_tool_surface_matrix.py

fix(xai): route video models by modality

2026-06-01 19:00:30 -07:00

test_vision_native_fast_path.py

fix(vision): cap embedded image size before it wedges a session (#35732)

2026-05-31 00:12:09 -07:00

test_vision_tools.py

fix(web): run URL SSRF checks off the event loop in async paths

2026-06-04 18:04:47 -07:00

test_voice_cli_integration.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_voice_mode.py

fix(voice): allow /voice over SSH when a sound server is reachable (#35719)

2026-05-31 00:11:52 -07:00

test_watch_patterns.py

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

test_web_providers_brave_free.py

fix(test): patch async_is_safe_url in web-provider SSRF mocks

2026-06-04 18:04:47 -07:00

test_web_providers_ddgs.py

fix(ddgs): bound DuckDuckGo search with a wall-clock timeout (#36776)

2026-06-25 01:45:06 +05:30

test_web_providers_searxng.py

revert(web): remove keyless Parallel search fallback (#46350)

2026-06-14 16:47:57 -07:00

test_web_providers_xai.py

chore(web): remove web_crawl tool + provider crawl plumbing (#33824)

2026-05-28 04:52:42 -07:00

test_web_providers.py

revert(web): remove keyless Parallel search fallback (#46350)

2026-06-14 16:47:57 -07:00

test_web_tools_config.py

revert(web): remove keyless Parallel search fallback (#46350)

2026-06-14 16:47:57 -07:00

test_web_tools_tavily.py

chore(web): remove web_crawl tool + provider crawl plumbing (#33824)

2026-05-28 04:52:42 -07:00

test_website_policy.py

fix(web): run URL SSRF checks off the event loop in async paths

2026-06-04 18:04:47 -07:00

test_windows_compat.py

…

test_windows_native_support.py

test(windows): align gateway restart CI coverage

2026-06-25 14:42:38 -07:00

test_write_approval.py

fix(memory): honor configured char limits in the no-agent on-disk store

2026-06-23 03:10:53 +05:30

test_write_deny.py

fix(file-safety): relax user-write deny policy (#45947)

2026-06-14 02:07:32 -07:00

test_x_search_tool.py

fix(x_search): surface degraded results + validate dates

2026-05-21 02:38:45 +05:30

test_yolo_mode.py

fix(approval): harden YOLO bypass, LLM parsing, auto-approve audit, pipe pattern (#23835)

2026-05-25 03:35:33 -07:00

test_zombie_process_cleanup.py

fix(session): finalize owned SQLite session rows on AIAgent.close()

2026-06-21 11:35:09 -07:00