teknium1 fdd5995ecb fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope ...

`hermes serve` / the Desktop backend hosted many profile homes (session
profile_home, the `profile` RPC param, hosted rooms) but never called
agent.secret_scope.set_multiplex_active, so every unscoped get_secret read for
a secondary silently returned the LAUNCH profile's os.environ value, and
@_profile_scoped bound only HERMES_HOME: `config.get full` for profile B
expanded B's `${VAR}` refs to the default profile's plaintext credentials,
model.options listed the default's env-keyed providers, llm.oneshot billed the
default's auxiliary key.

- tui_gateway/launch_profile_policy.py (was launch_terminal_policy.py): the
  first time _profile_home registers a non-launch home the process freezes
  the launch env and flips get_secret to fail closed
  (activate_multi_profile_hosting); launch_secret_scope composes the launch
  profile's .env + external sources over that frozen env so systemd / op-run
  injection survives the flip while a secondary never sees it.
- model_switch._profile_runtime_scope_tokens is the ONE composer for
  home + secret + terminal scope: a named profile binds its own files; the
  launch profile binds its frozen-env scope once multiplexing is active and
  stays unscoped in a single-profile process (legacy os.environ precedence).
  _profile_scoped, _profile_scoped_rpc, _session_profile_runtime_scope,
  _bind_build_profile_scopes and _prepare_turn_input all go through it.
- Hosted-room / Group Chat turns for a DEFAULT-profile member in a
  `multiplex_profiles: true` gateway no longer die at agent build with
  UnscopedSecretError: `profile_home is None` was treated as "no scope"
  in _start_agent_build._build and _prepare_turn_input.
- llm.oneshot runs under the session's (or params.profile's) scope;
  _lap_builtin_rows / _overlay_has_creds / _provider_has_credentials read
  provider keys through _scoped_key_env instead of raw os.environ;
  methods_groups._profile_execution_policy resolves the hosted-room policy
  (which reads provider credentials) under the profile's full scope.

Live repro (real `hermes serve`, two homes, config.get {key: full, profile: b}):
base  a_ref: <A_VALUE>  b_ref: ${B_ONLY_TOKEN}  env_ref: <ENV_INJECTED>
head  a_ref: ${A_ONLY_TOKEN}  b_ref: <B_VALUE>  env_ref: ${ENV_INJECTED_TOKEN}
Control (one home, --single): launch config still resolves env_ref from os.environ.

2026-09-15 03:46:29 -07:00

..

computer_use

fix(computer-use): doctor diagnoses a denied cua-driver spawn instead of crashing

2026-09-14 17:34:31 -07:00

connectors

fix(connectors): manage_connections is absent for accounts the portal has not enabled (#111238)

2026-09-14 22:01:32 +00:00

environments

fix(env-loader): split source_supplied_names() out of secret_source_names()

2026-09-15 11:03:39 +05:30

neutts_samples

…

wakewords

…

__init__.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

AGENTS.md

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

annotate_preview_tool.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

ansi_strip.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

apply_layout_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

approval_context.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval_detection.py

fix(approval): judge shell quoting on the raw command, not the escape-stripped one

2026-09-14 09:19:25 -07:00

approval_floors.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

approval_gateway_wait.py

feat(tui_gateway): real JSON-RPC server→client requests replace the *.request / *.respond notification pair

2026-09-14 06:02:05 -07:00

approval_human_wait.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval_prompt.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval_smart.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

approval.py

feat(tui_gateway): real JSON-RPC server→client requests replace the *.request / *.respond notification pair

2026-09-14 06:02:05 -07:00

arg_coercion.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

async_delegation.py

refactor(sqlite): one open_db/transaction layer for every small store; plugin DBs use the WAL fallback

2026-09-13 05:08:29 -07:00

audio_container.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

binary_extensions.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

blueprints.py

refactor(tools): compact credential_files, blueprints, arg_coercion

2026-09-02 22:36:15 -07:00

bot_failure_reasons.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

bot_live_delivery.py

fix(cron): retain Bot Chat output while a CLI owner is open

2026-09-14 17:29:32 -07:00

bot_mode_dm.py

fix(tools): resolve hermes CLI beside the interpreter in bot_mode_dm deliveries

2026-09-14 17:04:56 -07:00

bot_mode_probe.py

fix(profiles): HERMES_HOME-blind path sites resolve through hermes_constants

2026-09-13 05:09:06 -07:00

bot_relay.py

fix(bot-mode): strip canonical session env names, keep HERMES_SESSION_* knobs

2026-09-14 21:18:47 +05:30

browser_camofox_state.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

browser_camofox.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

browser_cdp_tool.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_dialog_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

browser_extension_router.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

browser_lightpanda.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_supervisor_dialogs.py

refactor(tools): unify never-raise/liveness helpers and tighten supervisor frame/dialog paths

2026-09-02 22:47:50 -07:00

browser_supervisor_frames.py

refactor(tools): unify never-raise/liveness helpers and tighten supervisor frame/dialog paths

2026-09-02 22:47:50 -07:00

browser_supervisor.py

fix(vault): dogfood fixes — offer save-login on every backend, keep the model off passwords, bind to the login tab

2026-09-10 10:35:07 -07:00

browser_tool_cdp.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool_cloud.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

browser_tool_eval_policy.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool_install.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

browser_tool_lifecycle.py

fix(browser): suppress KeyboardInterrupt in atexit cleanup thread stop

2026-09-12 08:43:28 -07:00

browser_tool_lightpanda_fallback.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool_origin.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool_real_profile.py

fix(browser): make the real-profile attach daemon reapable (#100855, salvage #103284)

2026-09-06 23:31:05 +05:30

browser_tool_session.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool_snapshot.py

fix(vault): independent-review findings — vendor contracts, profile scope, transport, target binding

2026-09-10 10:35:07 -07:00

browser_tool_vision.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

browser_tool.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

browser_use_cli.py

fix(tools): browser_exec and computer_use caches are namespaced by the served profile

2026-09-13 14:41:26 -07:00

browser_vault_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

budget_config.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

checkpoint_manager.py

fix(security): re-resolve checkpoint/sticker-cache paths per call

2026-09-11 15:44:00 -07:00

clarify_gateway.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

clarify_tool.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

close_preview_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

close_terminal_tool.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

code_execution_env.py

fix(tools): honor multiplexed per-turn HERMES_HOME in execute_code child env

2026-09-14 16:13:51 -07:00

code_execution_rpc.py

refactor(tools): simplify RPC token branch and kernel stderr/buffer loops

2026-09-02 23:08:22 -07:00

code_execution_tool.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

code_kernel_remote.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

code_kernel.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

computer_use_tool.py

refactor(tools): trim small tool modules (docstrings, dead constant, prefix table)

2026-09-02 22:36:16 -07:00

credential_files.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

cronjob_job_args.py

fix(cron): make failed runs diagnosable without verbose delivery errors

2026-09-07 08:18:56 -07:00

cronjob_prompt_scan.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

cronjob_tools.py

chore(webhook): drop external-product attribution from code, tests and docs

2026-09-13 21:30:02 -07:00

daemon_pool.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

debug_helpers.py

refactor(tools): kanban _delegation_ctx/_own_task_env/_existing_task helpers, None-safe _fields; live-log _best_effort ctx manager; docstring compaction

2026-09-03 00:10:18 -07:00

delegate_tool_child_run.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

delegate_tool_config.py

refactor(delegation): resolve the child fallback chain through the canonical normalizer

2026-09-08 02:26:05 +05:30

delegate_tool_dispatch.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

delegate_tool_progress.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

delegate_tool_registry.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

delegate_tool_results.py

Merge pull request #103486 from NousResearch/fix/nested-delegate-deadline-and-summary-budget

2026-09-06 12:02:43 -07:00

delegate_tool_tasks.py

Port from RooCodeInc/Roomote#1796: per-task image forwarding on delegate_task

2026-09-13 21:05:42 -07:00

delegate_tool_toolsets.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

delegate_tool.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

delegation_live_log.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

delegation_output_schema.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

desktop_ui.py

refactor(tools): kanban _delegation_ctx/_own_task_env/_existing_task helpers, None-safe _fields; live-log _best_effort ctx manager; docstring compaction

2026-09-03 00:10:18 -07:00

discord_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

drive_preview_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

env_passthrough.py

fix(env_passthrough): tolerate an unresolvable home when keying the allowlist cache

2026-09-11 15:29:15 -07:00

env_probe.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

fal_common.py

refactor(fal): render the managed billing message once in fal_common

2026-09-09 11:46:36 -07:00

feishu_doc_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

feishu_drive_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

feishu_lark.py

refactor(tools): group I — inline trivial HA wrappers, fold feishu _prepare into factory, docstring compaction

2026-09-02 22:48:08 -07:00

file_operations_common.py

Merge origin/main (561b053f79) into simp/forwardport: forward-port 220 main commits into the simplified tree

2026-09-03 03:31:03 -07:00

file_operations_lint.py

simplify(compat): tool_search/skills_sync_client — drop 22 re-exports, repoint 5 callers + 5 test files; drop stale re-export prose in web_tools_truncate/file_operations_lint

2026-09-03 13:33:47 -07:00

file_operations_search.py

fix(file-ops): reuse _kill_process_group_posix in the native rg runner

2026-09-07 00:28:46 +05:30

file_operations.py

fix(tools): stop read_file rendering a phantom empty line for newline-terminated files

2026-09-12 20:52:49 -07:00

file_state.py

simplify(compat): run_agent/model_tools/toolsets/acp/providers — drop 42 re-exports/aliases, repoint 15 callers + 99 test files

2026-09-03 13:28:22 -07:00

file_tools_paths.py

simplify(compat): doctor/status — drop 13 re-exports + the doctor_* globals() facade (97 names), repoint 6 callers / 13 tests

2026-09-03 13:10:52 -07:00

file_tools_read_tracking.py

simplify(compat): file_tools/send_message_tool/cronjob_tools/process_registry — drop 34 re-exports, repoint 5 callers + 27 test files

2026-09-03 13:30:27 -07:00

file_tools_write_guards.py

test(tools): trim the salvaged #110632 / #110307 tests to two invariants each

2026-09-14 16:13:51 -07:00

file_tools.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

focus_pane_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

fuzzy_match.py

fix(tools): make the empty/whitespace old_string rejection actionable

2026-09-12 21:55:07 -07:00

homeassistant_tool.py

simplify(compat): homeassistant_tool — drop 2 back-compat globals (_HASS_URL/_HASS_TOKEN), repoint 2 test files

2026-09-03 13:53:03 -07:00

hook_output_spill.py

refactor(tools): compact file_operations comments/docstrings, keep every WHY

2026-09-02 22:50:57 -07:00

image_generation_catalog.py

feat(image-gen): Kling Image v3 in the FAL catalog (t2i + singular-key i2i)

2026-09-13 21:03:11 -07:00

image_generation_tool.py

feat(image-gen): Kling Image v3 in the FAL catalog (t2i + singular-key i2i)

2026-09-13 21:03:11 -07:00

image_source.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

interpreter_shutdown.py

refactor(tools): compact kanban/delegation/interrupt/desktop tool modules; drop dead helpers

2026-09-02 22:06:11 -07:00

interrupt.py

fix: mid-turn user message no longer waits behind a foreground terminal command

2026-09-05 13:51:06 -07:00

kanban_tools_schemas.py

fix(kanban): stage review-bound handoff artifacts in request_review

2026-09-13 14:37:17 -07:00

kanban_tools.py

refactor(kanban): trim review-artifact salvage to metadata path, 2 invariant tests

2026-09-13 14:37:17 -07:00

kanban_toolset_context.py

fix(kanban): honor explicit platform tool opt-ins across configuration surfaces

2026-09-12 12:32:55 -07:00

lazy_deps.py

fix(google-chat): install optional deps into the sealed-image lazy target

2026-09-13 19:19:36 -07:00

managed_gateway_auth.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

managed_tool_gateway.py

feat(desktop): connector cards that wait for the sign-in, and a guided first launch that holds together (#108292)

2026-09-12 10:00:06 +05:30

mcp_dashboard_oauth.py

refactor(tui_gateway): parse the loopback redirect with the shared helper

2026-09-15 13:00:12 +05:30

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: restore prior device OAuth state if persistence fails

2026-09-07 08:22:35 -07:00

mcp_oauth_manager.py

feat(mcp): bind stored OAuth refresh tokens to their issuer

2026-09-13 20:43:33 -07:00

mcp_oauth_provider.py

test(mcp-oauth): bind the 400-recovery path to issuer binding, guard live-TTL on an empty context

2026-09-15 10:50:13 +05:30

mcp_oauth.py

fix(mcp-oauth): keep the refresh-fence sidecar when removing token state

2026-09-15 10:50:13 +05:30

mcp_schema_cache.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

mcp_tool_agent.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

mcp_tool_common.py

refactor(tools): MCP registration/common/handlers comprehension and predicate collapses

2026-09-02 23:56:55 -07:00

mcp_tool_config.py

fix(multiplex): a served profile's turn sees its own cwd, approvals, redaction and tool policy

2026-09-11 19:39:12 -07:00

mcp_tool_content.py

refactor(tools): terminal, execute_code, MCP and the bounded collector truncate through one head/tail helper

2026-09-13 05:09:43 -07:00

mcp_tool_discovery.py

fix(mcp): supports_parallel_tool_calls is per profile, not per server name

2026-09-13 15:41:01 -07:00

mcp_tool_errors.py

fix(mcp): cap HTTP/SSE response bodies before SDK parse

2026-09-13 20:45:25 -07:00

mcp_tool_handlers.py

fix: keep the write-side outcome-uncertain verdict when no server can reconnect

2026-09-15 03:45:29 -07:00

mcp_tool_health.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_lifecycle.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_loop.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

mcp_tool_registration.py

fix(mcp): an adopting profile keeps its own trust policy for a shared MCP connection

2026-09-13 15:41:01 -07:00

mcp_tool_sampling.py

refactor: sms AIOHTTP_AVAILABLE flag; ElicitationHandler call_context defaults to a no-op thunk; drop stale TYPE_CHECKING/type-ignore in two tests

2026-09-07 22:47:33 +05:30

mcp_tool_schema.py

fix(mcp): clamp generated MCP tool names to 64 chars

2026-09-13 20:44:29 -07:00

mcp_tool_scope.py

fix(mcp): same-named MCP servers with different credentials connect per profile; owner /reload-mcp keeps adopters' tools

2026-09-11 15:27:23 -07:00

mcp_tool_server_run.py

fix(mcp): unattended paths never open browser OAuth; gateway follows mcp_servers edits

2026-09-13 06:29:12 -07:00

mcp_tool_transport.py

fix(mcp): cap HTTP/SSE response bodies before SDK parse

2026-09-13 20:45:25 -07:00

mcp_tool.py

fix(mcp): supports_parallel_tool_calls is per profile, not per server name

2026-09-13 15:41:01 -07:00

memory_tool_store.py

fix(memory): secure built-in memory lock files

2026-09-12 20:43:42 -07:00

memory_tool.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

microsoft_graph_auth.py

refactor(tools): wave-2 compaction of memory/session_search/graph/notification modules

2026-09-03 01:43:42 -07:00

microsoft_graph_client.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

neutts_synth.py

refactor(tools): group H pass 4 — shared _joined tail for stdlib extractors, v3 mime fold, blank squeeze

2026-09-02 22:59:19 -07:00

open_preview_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

openrouter_client.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

osv_check.py

Port from aaif-goose/goose#11466: recognize Windows package-runner shims in OSV malware preflight

2026-09-13 20:46:22 -07:00

patch_parser.py

fix(tools): reject V4A Add File onto an existing path

2026-09-12 21:13:40 -07:00

path_security.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

plugin_guard.py

chore(scanners): bump skills-guard to v4 and plugin-guard to v3

2026-09-14 16:12:07 -07:00

preview_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

process_registry_checkpoint.py

fix(multiplex): cron, kanban, /loop and completion paths for a served profile match its standalone gateway

2026-09-11 19:58:07 -07:00

process_registry_notifications.py

feat: background-process completions paint a compact title, not the raw notification wall

2026-09-13 14:35:32 -07:00

process_registry_results.py

fix: long-lived processes stop minting duplicate state.db writer handles

2026-09-14 08:10:36 -07:00

process_registry.py

fix(tools): one-shot linger waits for a completion that is mid-publish

2026-09-14 20:44:56 -07:00

project_tools.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

pty_query_responder.py

Port from openai/codex#41436: answer blocking terminal queries in background PTY sessions

2026-09-12 22:09:19 -07:00

react_to_message_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

read_extract.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

read_preview_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

read_terminal_tool.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

read_window_tool.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

registry.py

fix(tools): uncached check_fn probes classify UnscopedSecretError from the live scope

2026-09-14 16:13:51 -07:00

schema_sanitizer.py

fix(schemas): preserve required intent without invalid boolean flags

2026-09-07 08:14:51 -07:00

self_repo_guard.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

send_message_senders.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

send_message_targets.py

refactor(tools): send_message wave-2 cut — table-driven telegram media, shared platform-module guard, flattened slack/target resolution, compact docs

2026-09-03 01:36:04 -07:00

send_message_tool.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

session_search_tool.py

fix(session_search): a bare session id never reads another profile's state.db

2026-09-11 06:24:11 -07:00

shell_heredoc.py

refactor(tools): wave-2 group M — read_extract/patch_parser/shell_heredoc/self_repo_guard/schema_sanitizer -12% LOC (68% code)

2026-09-03 01:41:16 -07:00

skill_ledger.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

skill_linter.py

fix(skills): self-improvement writes lessons, not incident logs

2026-09-04 08:15:22 -07:00

skill_manager_batch.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

skill_manager_guards.py

simplify(compat): tool_search/skills_sync_client — drop 22 re-exports, repoint 5 callers + 5 test files; drop stale re-export prose in web_tools_truncate/file_operations_lint

2026-09-03 13:33:47 -07:00

skill_manager_tool.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

skill_provenance.py

fix(review): keep /refine under the background_review origin; attendedness is its own flag

2026-09-09 12:19:13 +05:30

skill_usage.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skillevaluator_scan.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

skills_ast_audit.py

refactor(tools): skills group pass 2c — walrus/guard folds in skill_usage and skills_guard, ast_audit suppress(), skillevaluator/provenance header compaction, docstring tightening

2026-09-03 00:55:09 -07:00

skills_guard.py

fix(skills-guard): socat only flags a reverse shell when an address spec follows

2026-09-14 21:55:24 -07:00

skills_hub_clawhub.py

fix(skills_hub): clawhub 429 keeps a zero Retry-After as zero

2026-09-13 05:09:43 -07:00

skills_hub_github.py

refactor(skills): skip wrong-provider taps and give the provider-filter idiom one owner

2026-09-15 14:15:59 +05:30

skills_hub_install.py

fix: limit skill update change to unusable local installs

2026-09-07 05:59:43 -07:00

skills_hub_models.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_hub_official.py

fix(skills): give the provider cut one owner inside the parallel walker

2026-09-15 14:15:59 +05:30

skills_hub_search.py

fix(skills): give the provider cut one owner inside the parallel walker

2026-09-15 14:15:59 +05:30

skills_hub_skillssh.py

refactor(skills_hub): per-module compaction pass — dedupe builders, collapse defensive layers, tighten docstrings

2026-09-02 21:42:18 -07:00

skills_hub_sources.py

refactor(skills_hub): per-module compaction pass — dedupe builders, collapse defensive layers, tighten docstrings

2026-09-02 21:42:18 -07:00

skills_hub.py

fix(skills): bound streamed ClawHub ZIP downloads (#57571)

2026-09-12 21:50:30 -07:00

skills_sync_bundled_ops.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync_client_org.py

refactor(tools): org client walrus guards; _mirror_root handles org-level root

2026-09-03 00:05:14 -07:00

skills_sync_client_wire.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

skills_sync_client.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

skills_sync_optional.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_sync.py

fix(skills): exclude generated runtime caches from bundled ownership hashes

2026-09-06 07:17:03 -07:00

skills_tool_dedup.py

refactor(tools): fold single-use readiness helpers, compact module docstrings, wrap long lines

2026-09-03 01:09:55 -07:00

skills_tool_plugin.py

simplify(compat): skills_sync/skill_manager/kanban/computer_use — drop 37 re-exports/aliases, repoint 8 callers + 9 test files

2026-09-03 13:27:01 -07:00

skills_tool_setup.py

refactor(tools): fold single-use readiness helpers, compact module docstrings, wrap long lines

2026-09-03 01:09:55 -07:00

skills_tool.py

refactor(env): agent.secret_scope.load_env_file is the only .env tokenizer; six hand parsers collapse onto it

2026-09-13 05:07:50 -07:00

slash_confirm.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

spill_safety.py

refactor(tools): group H — _registry_toolset helper unifies deferral/source lookups, partial() config loaders, Counter/dict-comprehension folds, legacy-config path collapse

2026-09-03 01:09:12 -07:00

subagent_worktree.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

terminal_hints.py

refactor(tools): fold thread_context callback pairs, resolve_repo_root guard, final compaction (group I: 885->662 LOC)

2026-09-02 22:37:39 -07:00

terminal_scope.py

fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope

2026-09-15 03:46:29 -07:00

terminal_tool_backends.py

fix(ssh): isolate prompt backend probes from file sync

2026-09-06 13:32:51 +05:30

terminal_tool_background.py

feat(delegation): subagents hand background processes to the parent; leftovers are named, not trusted

2026-09-07 12:50:29 -07:00

terminal_tool_config.py

fix(terminal): every Windows drive letter is a host cwd, not just C: (#60962)

2026-09-05 19:01:22 +05:30

terminal_tool_guards.py

fix: explain the launchctl registration restriction without inventing KeepAlive

2026-09-07 06:05:51 -07:00

terminal_tool_lifecycle.py

simplify(compat): code_execution_tool/environments.local — drop 36 re-exports, repoint 5 callers + 14 test files

2026-09-03 13:24:04 -07:00

terminal_tool_result.py

fix(plugins): only mark a timed-out hook worker abandoned while it still holds its token

2026-09-15 10:48:49 +05:30

terminal_tool_sudo.py

fix(gateway): include command context in sudo password requests

2026-09-15 02:22:22 -05:00

terminal_tool.py

fix(tools): never ambient-bridge TERMINAL_* under a profile home override

2026-09-11 15:29:15 -07:00

thread_context.py

feat(vault): two-factor codes — automatic from a saved authenticator key, otherwise asked for in the user's UI

2026-09-10 11:48:01 -07:00

threat_patterns.py

fix(threat-scanner): gate ssh_access on every mutating verb, not just copy verbs

2026-09-14 16:16:08 -07:00

tip_tool.py

refactor(tools): group H — BM25 loop fold, catalog/selection/limits micro-collapses, sync-manager walrus

2026-09-03 01:13:51 -07:00

tirith_security.py

fix(multiplex): key tool-side and agent-side memos by profile home

2026-09-12 01:35:05 -07:00

todo_tool.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

tool_backend_helpers.py

fix(multiplex): tool and memory-provider env reads stay inside the routed profile

2026-09-11 15:26:46 -07:00

tool_output_limits.py

fix(tools): profile-scoped checkpoint/snapshot paths, tool caches, TZ and schema paths under multiplex

2026-09-11 15:44:00 -07:00

tool_output_truncate.py

refactor(agent): one Retry-After parser and one reset-grammar table feed every retry wait

2026-09-13 05:09:43 -07:00

tool_result_storage.py

test: fold host spillover verification into the size-probe invariant

2026-09-15 03:41:43 -07:00

tool_search_catalog.py

feat(tool_search): long hunts for nonexistent tools now return no results instead of incidental matches

2026-09-13 21:04:08 -07:00

tool_search_validation.py

Connector tools (Gmail, Linear, Notion, ...) are searchable and callable through tool_search for signed-in Nous users (#106842)

2026-09-10 02:21:16 +05:30

tool_search.py

Connector code lives in one package, tools/connectors/ (move only; NS-868 prep) (#110368)

2026-09-15 00:41:13 +05:30

tour_tool.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

transcription_audio.py

simplify(compat): tools/transcription_tools — drop 47 re-exports/aliases, repoint 4 callers + 9 test files

2026-09-03 13:17:25 -07:00

transcription_cloud.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

transcription_command.py

refactor(agent): /context breakdown and native-compaction retention use the canonical token estimator

2026-09-13 05:09:43 -07:00

transcription_common.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

transcription_local.py

simplify(compat): tools/transcription_tools — drop 47 re-exports/aliases, repoint 4 callers + 9 test files

2026-09-03 13:17:25 -07:00

transcription_tools.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_command_provider.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

tts_streaming.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_text_normalize.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

tts_tool_delivery.py

refactor(gateway): every Ogg/Opus voice transcode routes through base.transcode_to_ogg_opus

2026-09-13 05:32:38 -07:00

tts_tool_lifecycle.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

tts_tool_local.py

refactor(tools): iter-sentinel drain, fold ogg repair guard, speaker init tuple, PEP8 blank fix

2026-09-03 01:17:43 -07:00

tts_tool_openai.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

tts_tool_plugins.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

tts_tool_providers.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

tts_tool_speaker.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

tts_tool.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

url_safety.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

video_generation_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

vision_tools_image_prep.py

feat(vision): decode HEIF/HEIC/AVIF images (iPhone photos)

2026-09-13 09:18:54 -07:00

vision_tools.py

fix(vision): advertise vision_analyze/browser_vision when the main model sees natively

2026-09-13 14:46:38 -07:00

voice_client_config.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

voice_live.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

voice_mode_transcript.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

voice_mode.py

fix(voice): retry a timed-out audio input stream start once

2026-09-13 14:39:29 -07:00

wake_word_engines.py

simplify(compat): tools/wake_word — drop 5 re-exports, repoint 1 test

2026-09-03 13:24:36 -07:00

wake_word.py

simplify(compat): tools/wake_word — drop 5 re-exports, repoint 1 test

2026-09-03 13:24:36 -07:00

web_result_cache.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

web_tools_extract.py

fix(web): cap web_extract provider dispatch with a wall-clock timeout (salvage #57180)

2026-09-12 21:30:38 -07:00

web_tools_rescue.py

simplify(compat): web_tools — drop 35 re-exports/aliases, repoint 2 callers + 6 test files

2026-09-03 13:08:53 -07:00

web_tools_truncate.py

fix(tools): truncation footers name the path the SANDBOX sees, not the host path (#72389, #81984, #77015)

2026-09-05 18:46:16 +05:30

web_tools.py

feat(web): Perplexity Search API as a web_search + web_extract backend

2026-09-04 07:17:00 -07:00

website_policy.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

working_diff.py

refactor(tools): lift engine ensure/sub-section boilerplate into _Engine.__init__/_build, contextlib.suppress for swallow-only try/except, collapse yuanbao _err into _YbError, fold pending-dir helpers

2026-09-03 00:10:38 -07:00

write_approval.py

refactor(persistence): 24 hand-rolled atomic JSON/text writers go through utils.atomic_json_write / atomic_write_text

2026-09-13 05:07:11 -07:00

x_search_tool.py

fix(tools): stop check_fns swallowing resolver crashes into "returned False"

2026-09-13 12:35:36 -07:00

xai_http.py

refactor(secrets): drop scope-aware env shims; runtime_provider and the voice/xai tools read the canonical getters

2026-09-13 05:07:50 -07:00

xai_video_tools.py

refactor(tools): inline single-use helpers in write_approval, web_result_cache, xai_video_tools

2026-09-03 00:27:38 -07:00

yuanbao_tools.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00