Teknium f289aae1f5 Port from aaif-goose/goose#11466: recognize Windows package-runner shims in OSV malware preflight ...

uvx.exe (uv's actual Windows shim) and pipx.exe bypassed the MCP OSV
malware check entirely, and backslash-qualified commands only resolved
when running under ntpath. Basename now splits on both separators;
matching stays exact (npx.cmd / uvx.exe / uvx.cmd / pipx.exe) so
lookalikes like npx.exe or npx.cmd.bak remain fail-open.

2026-09-13 20:46:22 -07:00

..

acp_adapter

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

agent

fix: grep/awk/sed gate on file operands only; strip $HOME prefixes

2026-09-13 14:47:12 -07:00

ci

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

computer_use

…

conformance

…

cron

fix(cron): return a strictly-later next run when the base sits in the DST fall-back hour

2026-09-13 16:46:45 -07:00

dashboard

…

desktop

…

docker

…

e2e

…

evals

…

fakes

…

fixtures

…

gateway

fix(google-chat): let ensure_deps_fn surface the lazy-install reason

2026-09-13 19:19:36 -07:00

hermes_cli

Inspired by Factory Droid: /queue prompts are now listable, editable, and reorderable before they run

2026-09-13 20:41:41 -07:00

hermes_state

fix: status falls back to the live agent before the first host frame; recent route ties break deterministically

2026-09-13 14:45:41 -07:00

honcho_plugin

perf(honcho): peers map scans the profile directory once, not once per account row

2026-09-13 19:05:39 +05:30

install

…

integration

…

manual

…

monitoring

docs: fold the root docs/ tree into the Docusaurus site and delete it

2026-09-13 06:06:46 -07:00

openviking_plugin

…

perf_guards

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

plugins

fix(telegram): ignored_threads and mention_patterns read scoped env → own YAML like every sibling

2026-09-13 15:39:11 -07:00

providers

fix(models): memoize the Copilot ACP session probe; source it from the provider profile

2026-09-13 19:17:06 +05:30

scripts

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

secret_sources

…

security

…

skills

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

tools

Port from aaif-goose/goose#11466: recognize Windows package-runner shims in OSV malware preflight

2026-09-13 20:46:22 -07:00

tui_gateway

fix(gateway): validate a secondary's Docker MEDIA paths under its own profile scope

2026-09-13 19:18:26 -07:00

verify

…

website

chore: drop the vendor reference from the parity test docstring

2026-09-13 20:40:45 -07:00

__init__.py

…

conftest.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

install_ps1_fake_uv.py

…

run_interrupt_test.py

…

test_atomic_json_writers_unified.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

test_atomic_replace_symlinks.py

…

test_atomic_write_text_metadata.py

…

test_base_url_hostname.py

…

test_batch_runner_checkpoint.py

…

test_batch_runner_discard_resume.py

…

test_batch_runner_durability.py

…

test_batch_runner_exit_code.py

…

test_credential_file_permissions.py

…

test_dispatch_session_id.py

…

test_display_hermes_home.py

…

test_engines_satisfiable.py

…

test_fast_safe_load.py

…

test_get_tool_definitions_cache_isolation.py

…

test_hermes_bootstrap.py

…

test_hermes_constants.py

…

test_hermes_home_key_cache.py

…

test_hermes_home_profile_warning.py

…

test_hermes_logging.py

…

test_ipv4_preference.py

…

test_live_system_guard_self_test.py

…

test_live_system_guard.py

…

test_log_isolation.py

…

test_managed_runtime_resolution.py

test: exempt evals/ from the managed-runtime which() guard; make the OS-marker lister tolerate vanishing dirs

2026-09-13 06:06:46 -07:00

test_mcp_serve.py

…

test_mini_swe_runner.py

…

test_model_forces_max_completion_tokens.py

…

test_model_tools_async_bridge.py

…

test_no_shadowed_test_definitions.py

…

test_os_marker_gating.py

…

test_packaging_build_guard.py

…

test_packaging_metadata.py

…

test_packaging_py_modules.py

…

test_project_metadata.py

test(google-chat): pin hosted install wiring and document the lazy target

2026-09-13 19:19:36 -07:00

test_sanitize_tool_error.py

…

test_stale_utils_module_import.py

…

test_termux_all_extra_compat.py

…

test_tests_tree_layout.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_trajectory_compressor_async.py

…

test_trajectory_compressor.py

…

test_utils_atomic_roundtrip_yaml_save.py

…

test_utils_truthy_values.py

…

test_windows_subprocess_no_window_flags.py

…

test_yaml_indent_consistency.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00