Teknium 25c590ccd0 fix(skills): refuse SKILLS_DIR root in rmtree guard, not just outside-tree ...

The salvaged guard allowed _rmtree_writable(SKILLS_DIR) itself. No call
site ever passes the root — every site passes a skill subdir or its .bak
sibling — so allowing the root only preserves the #48200 footgun (a dest
that collapses to the root wipes every installed skill). Require a strict
strict-child relationship and update the test that documented the
nonexistent 'full reset' capability.

2026-06-18 08:53:35 -07:00

..

acp

feat(gateway): inject stable human-readable message timestamps

2026-06-16 15:49:59 -07:00

acp_adapter

…

agent

fix(xai): scope native web_search to swap-only + reconcile composer ctx to 200k

2026-06-17 17:33:32 -07:00

cli

fix(cli): preserve renderer state on resize

2026-06-13 05:40:18 -07:00

cron

fix: complete cron jobs lock salvage

2026-06-15 06:29:00 -07:00

docker

Harden hosted Docker install tree against self-modification (#47490)

2026-06-18 09:09:21 +10:00

e2e

fix(gateway): include replied-to media attachments (#46107)

2026-06-14 04:51:50 -07:00

fakes

…

fixtures/plugins/example-dashboard/dashboard

…

gateway

feat(relay): managed-boot self-provision client (Phase 3, gateway side) (#48242)

2026-06-18 15:25:29 +10:00

hermes_cli

fix(skills): rmtree scope guard + default pre_update_backup to true (#48200)

2026-06-18 08:53:35 -07:00

hermes_state

fix(sessions): archive compressed conversation lineages

2026-06-11 12:31:10 +05:30

honcho_plugin

chore(honcho): replace example Telegram UID with placeholder

2026-06-11 15:06:07 -04:00

integration

…

openviking_plugin

Merge remote-tracking branch 'upstream/main' into salvage-47662

2026-06-17 23:59:24 +05:30

plugins

test(langfuse): pin exact surviving key in turn-isolation test

2026-06-18 13:00:01 +05:30

providers

fix(models): pass model.base_url to fetch_models in /model picker

2026-06-16 13:09:40 -07:00

run_agent

Merge upstream/main into OpenViking setup-UX (salvage #32445)

2026-06-18 11:28:51 +05:30

scripts

fix(skills-hub): stop shipping a degenerate index when GitHub taps collapse (#42347)

2026-06-08 15:21:28 -07:00

skills

…

stress

…

tools

fix(skills): refuse SKILLS_DIR root in rmtree guard, not just outside-tree

2026-06-18 08:53:35 -07:00

tui_gateway

feat(desktop): stream subagent activity into watch windows (#47060)

2026-06-16 14:30:11 -04:00

website

…

__init__.py

…

conftest.py

fix(tests): guard against real 'hermes update' subprocess spawns in conftest

2026-06-12 13:42:42 -04:00

run_interrupt_test.py

…

test_account_usage.py

…

test_assistant_ui_tap_compat.py

test(deps): guard @assistant-ui cluster on one tap version

2026-06-15 11:55:02 -04:00

test_atomic_replace_symlinks.py

fix(utils): copy fallback for atomic replace across devices (#43852)

2026-06-13 14:50:05 -07:00

test_base_url_hostname.py

…

test_batch_runner_checkpoint.py

…

test_bitwarden_secrets.py

fix(bitwarden): prevent zip-slip path traversal when extracting bws binary (#40569)

2026-06-06 18:33:44 -07:00

test_cli_file_drop.py

…

test_cli_manual_compress.py

…

test_cli_skin_integration.py

…

test_ctx_halving_fix.py

…

test_dashboard_sidecar_close_on_disconnect.py

fix(dashboard): scope chat sidebar model card to selected profile (#46665)

2026-06-15 12:50:19 -04:00

test_desktop_electron_pin.py

fix(desktop): resolve electronDist dynamically + self-heal blocked installs (supersedes #48081/#48082) (#48091)

2026-06-17 18:48:35 -05:00

test_desktop_mac_entitlements.py

…

test_dispatch_session_id.py

fix(dispatch): forward session_id into registry.dispatch (#28479)

2026-06-14 00:27:59 -04:00

test_docker_home_override_scripts.py

Repair cron ownership on container restart (#41976)

2026-06-10 15:32:34 +10:00

test_docker_stage2_browser_discovery.py

…

test_dockerfile_tini_compat_shim.py

…

test_empty_model_fallback.py

…

test_empty_session_hygiene.py

fix: in-memory transcript blocks empty-session prune

2026-06-10 17:37:34 -07:00

test_env_loader_secret_sources.py

…

test_evidence_store.py

…

test_gateway_streaming_nested_config.py

…

test_get_tool_definitions_cache_isolation.py

fix(gateway): close residual memory-leak sites under heavy scheduled workload

2026-06-08 06:32:42 -07:00

test_hermes_bootstrap.py

…

test_hermes_constants.py

fix(cli): detect containerd/CRI cgroup-v2 containers in is_container() (#47131)

2026-06-17 12:11:31 +10:00

test_hermes_home_profile_warning.py

…

test_hermes_logging.py

fix(logging): alias RotatingFileHandler to concurrent-log-handler (salvage #44921) (#46794)

2026-06-17 15:39:04 -05:00

test_hermes_state_compression_locks.py

…

test_hermes_state_wal_fallback.py

…

test_hermes_state.py

feat(gateway): inject stable human-readable message timestamps

2026-06-16 15:49:59 -07:00

test_honcho_client_concurrency.py

fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)

2026-06-08 09:35:22 -07:00

test_honcho_client_config.py

…

test_honcho_session_context.py

…

test_honcho_startup_fail_open.py

…

test_install_no_initial_commit.py

fix(install): move broken checkout aside instead of deleting it

2026-06-08 02:18:21 -07:00

test_install_ps1_uv_powershell_host.py

test(install): lock uv installer to a resolved PowerShell host

2026-06-18 16:26:34 +07:00

test_install_sh_browser_install.py

…

test_install_sh_install_method_stamp.py

fix(update): scope install-method stamp to the code tree, not $HERMES_HOME (#48188)

2026-06-18 14:14:41 +10:00

test_install_sh_node_global_prefix.py

fix(install): repair existing managed-Node global prefix on re-run

2026-06-14 17:34:11 +07:00

test_install_sh_pythonpath_sanitization.py

…

test_install_sh_root_fhs_uv_python_path.py

…

test_install_sh_setup_wizard_tty_probe.py

…

test_install_sh_symlink_stomp.py

…

test_install_sh_termux_network_prereqs.py

…

test_install_unmerged_index.py

test(installer): regression for unmerged-index update failure

2026-06-13 05:19:44 -07:00

test_ipv4_preference.py

…

test_lazy_session_regressions.py

…

test_lint_config.py

…

test_live_system_guard_self_test.py

…

test_mcp_serve.py

…

test_mini_swe_runner.py

…

test_minimax_model_validation.py

…

test_minimax_oauth.py

…

test_minisweagent_path.py

…

test_model_forces_max_completion_tokens.py

fix(params): send max_completion_tokens for newer OpenAI families on custom endpoints

2026-06-09 23:22:10 -07:00

test_model_picker_scroll.py

…

test_model_tools_async_bridge.py

…

test_model_tools.py

…

test_ollama_num_ctx.py

…

test_output_cap_parsing.py

test(agent): cover char-based output-cap overflow parsing (#42741)

2026-06-09 03:17:12 -07:00

test_package_json_lazy_deps.py

…

test_packaging_metadata.py

fix(packaging): ship optional-mcps catalog in wheel and sdist (#39859)

2026-06-09 14:03:20 -04:00

test_plugin_skills.py

…

test_plugin_utils.py

fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)

2026-06-08 09:35:22 -07:00

test_process_loop_event_loop_warning.py

…

test_project_metadata.py

fix(deps): align anthropic extra pin with lazy pin + guard whole pin surface (#42335)

2026-06-08 12:11:54 -07:00

test_retry_utils.py

…

test_run_tests_parallel.py

fix(ci): remove pytest-timeout, use per-file timeout only

2026-06-12 13:42:42 -04:00

test_sanitize_tool_error.py

…

test_slash_worker_watchdog.py

feat(slash-worker): self-terminate on parent death via create_time watchdog

2026-06-08 07:03:12 -07:00

test_sql_injection.py

…

test_state_db_malformed_repair.py

fix(state.db): recover from malformed sqlite_master so hidden sessions reappear (#43149)

2026-06-09 18:49:08 -05:00

test_subprocess_home_isolation.py

fix: make profile subprocess HOME policy explicit

2026-06-14 03:20:21 -07:00

test_termux_all_extra_compat.py

…

test_timezone.py

…

test_toolset_distributions.py

…

test_toolsets.py

…

test_trajectory_compressor_async.py

…

test_trajectory_compressor.py

fix(research): keep tool_call/tool_response pairs intact when compressing trajectories

2026-06-07 05:01:27 -07:00

test_transform_llm_output_hook.py

…

test_transform_tool_result_hook.py

…

test_tui_gateway_server.py

fix(desktop): persist /title set before the first message instead of queuing (#47987)

2026-06-17 16:46:21 -04:00

test_tui_gateway_ws.py

feat(desktop): composer status stack, live subagent windows, editable prompts (#44630)

2026-06-12 08:30:06 -05:00

test_tui_mcp_late_refresh.py

fix(tui): refresh tool snapshot when MCP discovery lands after agent build (#48403)

2026-06-18 05:41:23 -07:00

test_utils_truthy_values.py

…

test_web_server.py

refactor(desktop): use port 0 for ephemeral port discovery instead of PortPool reservation

2026-06-12 14:02:19 -04:00

test_wheel_locales_e2e.py

…

test_yuanbao_integration.py

…

test_yuanbao_markdown.py

…

test_yuanbao_pipeline.py

feat(Yuanbao): support wechat forward msg (#43508)

2026-06-12 02:06:47 -07:00

test_yuanbao_proto.py

…

test_yuanbao_shutdown.py

fix(yuanbao): bound ws.close() so an idle server can't stall shutdown ~5s (#40607)

2026-06-07 17:49:38 -07:00