PeterandWuKongAI-CMU ee59ef1946 fix: reject read_file symlinks to blocking devices (#10133) ...

* fix: reject read_file symlinks to blocking devices

The read_file guard already refused direct device paths such as /dev/zero, but a workspace symlink resolving to one of those devices could still reach the shell-backed read path and hang on wc/head/sed. Keep the literal alias check and add a resolved-path pass so local symlinks to blocked device/fd endpoints are rejected before I/O.

Constraint: Preserve literal /dev/stdin handling before terminal-specific realpath resolution

Confidence: high

Scope-risk: narrow

Tested: pytest tests/tools/test_file_read_guards.py tests/tools/test_file_tools.py -q; python -m compileall tools/file_tools.py tests/tools/test_file_read_guards.py; git diff --check
Signed-off-by: WuKongAI-CMU <210765158+WuKongAI-CMU@users.noreply.github.com>

* Keep file guard tests off sensitive macOS temp paths

The branch now inherits a sensitive-path write guard from upstream main. On macOS, tempfile.mkdtemp() resolves under /private/var/folders, so the new write-path guard fired before the file read dedup assertions could exercise their intended behavior. The tests now create their scratch files inside the worktree temp checkout, outside those system-sensitive prefixes, without changing production behavior.

Constraint: Rebased branch must pass the expanded file read guard suite on macOS.

Rejected: Loosen the production sensitive-path prefix list | broader behavior change unrelated to this PR.

Confidence: high

Scope-risk: narrow

Tested: pytest tests/tools/test_file_read_guards.py -q

---------

Signed-off-by: WuKongAI-CMU <210765158+WuKongAI-CMU@users.noreply.github.com>
Co-authored-by: WuKongAI-CMU <210765158+WuKongAI-CMU@users.noreply.github.com>

2026-05-25 05:07:38 -07:00

..

__init__.py

…

conftest.py

test(tools): centralize disable_lazy_stt_install fixture in conftest

2026-05-22 03:33:01 -07:00

test_accretion_caps.py

fix(ci): recover 38 failing tests on main (#17642)

2026-04-29 20:05:32 -07:00

test_ansi_strip.py

fix: strip ANSI at the source — clean terminal output before it reaches the model

2026-03-23 07:43:12 -07:00

test_approval_heartbeat.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_approval_plugin_hooks.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_approval.py

fix(approval): pin 'silence is not consent' contract on timeout/deny (#24912) (#30879)

2026-05-23 02:59:13 -07:00

test_base_environment.py

fix(env): pass -- to cd for hyphen-prefixed workdirs

2026-05-04 04:45:03 -07:00

test_browser_camofox_persistence.py

feat(browser): support externally managed Camofox sessions

2026-05-12 15:14:49 -07:00

test_browser_camofox_state.py

feat(browser): support externally managed Camofox sessions

2026-05-12 15:14:49 -07:00

test_browser_camofox.py

fix(tests): resolve 17 persistent CI test failures (#15084)

2026-04-24 03:46:46 -07:00

test_browser_cdp_override.py

Support browser CDP URL from config

2026-04-17 16:05:04 -07:00

test_browser_cdp_tool.py

fix(tests): resolve 17 persistent CI test failures (#15084)

2026-04-24 03:46:46 -07:00

test_browser_chromium_check.py

fix(install): skip browser download when system chromium exists

2026-05-13 22:07:02 -07:00

test_browser_cleanup.py

fix(doctor): only check the active memory provider, not all providers unconditionally (#6285)

2026-04-08 13:44:58 -07:00

test_browser_cloud_fallback.py

fix(browser): runtime fallback to local Chromium when cloud provider fails

2026-04-16 04:19:34 -07:00

test_browser_cloud_provider_cache.py

fix(browser_tool): fall through to autodetect on config read failure

2026-05-09 13:35:39 -07:00

test_browser_console.py

fix(browser): honor auxiliary.vision.temperature for screenshot analysis\n\n- mirror the vision tool's config bridge in browser_vision

2026-04-20 00:32:09 -07:00

test_browser_content_none_guard.py

fix(browser): guard LLM response content against None in snapshot and vision (#3642)

2026-03-28 17:25:04 -07:00

test_browser_eval_supervisor_path.py

perf(browser): route browser_console eval through supervisor's persistent CDP WS (180x faster) (#23226)

2026-05-10 07:37:55 -07:00

test_browser_hardening.py

fix(browser): hardening — dead code, caching, scroll perf, security, thread safety

2026-04-10 13:05:44 -07:00

test_browser_homebrew_paths.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_browser_hybrid_routing.py

feat(browser): auto-spawn local Chromium for LAN/localhost URLs in cloud mode (#16136)

2026-04-26 09:57:58 -07:00

test_browser_lightpanda.py

fix(browser): tighten Lightpanda fallback edge cases

2026-05-06 03:41:21 -07:00

test_browser_orphan_reaper.py

fix(browser): use process-tree termination for daemon cleanup

2026-05-23 20:30:29 -07:00

test_browser_secret_exfil.py

fix(test): deflake two intermittent CI failures

2026-05-22 19:46:18 -07:00

test_browser_ssrf_local.py

fix(browser): enforce cloud-metadata SSRF floor in hybrid routing (#16234) (#21228)

2026-05-07 05:38:05 -07:00

test_browser_supervisor_healthcheck.py

test(browser_supervisor): cover cache-hit healthcheck on dead thread/loop

2026-04-30 20:33:33 -07:00

test_browser_supervisor.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_budget_config.py

test(tools): add unit tests for budget_config module

2026-04-11 02:58:48 -07:00

test_checkpoint_manager.py

fix(checkpoint): guard _touch_project against non-dict project metadata

2026-05-09 17:53:13 -07:00

test_clarify_gateway.py

fix(gateway): enable text-intercept for multi-choice clarify fallback (#25567)

2026-05-14 07:59:12 -07:00

test_clarify_tool.py

test(tools): add unit tests for clarify_tool.py

2026-02-27 03:29:26 -05:00

test_clipboard.py

fix(clipboard): reject non-png clipboard images when png normalization fails

2026-05-13 22:54:21 -07:00

test_code_execution_modes.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_code_execution_windows_env.py

execute_code: set PYTHONIOENCODING=utf-8 + PYTHONUTF8=1 in child env

2026-05-08 14:27:40 -07:00

test_code_execution.py

fix(windows): enable execute_code — stale AF_UNIX gate was blocking the tool

2026-05-08 14:27:40 -07:00

test_command_guards.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_computer_use_capture_routing.py

test(computer_use): end-to-end regression for capture routing (#24015)

2026-05-21 17:38:19 -07:00

test_computer_use_vision_routing.py

test(computer_use): cover capture vision-routing helper

2026-05-21 17:38:19 -07:00

test_computer_use.py

fix(computer-use): skip capture_after when action failed (ok=False)

2026-05-22 01:19:01 -07:00

test_config_null_guard.py

fix: guard config.get() against YAML null values to prevent AttributeError (#3377)

2026-03-27 04:03:00 -07:00

test_credential_files.py

fix: remove 115 verified dead code symbols across 46 production files

2026-04-10 03:44:43 -07:00

test_credential_pool_env_fallback.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_cron_approval_mode.py

fix(approval): cron jobs must not be treated as gateway context

2026-05-08 07:30:14 -07:00

test_cron_prompt_injection.py

…

test_cronjob_tools.py

fix(cron): allow emoji ZWJ sequences in prompts

2026-05-19 00:10:43 -07:00

test_cross_profile_guard.py

fix(profiles): cross-profile soft guard on file-write tools + system-prompt hint (#31290)

2026-05-24 00:38:17 -07:00

test_daytona_environment.py

fix(daytona): migrate legacy-sandbox lookup to cursor-based list() (#24587)

2026-05-12 16:31:46 -07:00

test_debug_helpers.py

fix(tests): isolate HERMES_HOME in tests and adjust log directory for debug session

2026-03-02 04:34:21 -08:00

test_delegate_composite_toolsets.py

fix(delegate): expand composite toolsets before intersection in delegate_task

2026-05-07 06:41:42 -07:00

test_delegate_subagent_timeout_diagnostic.py

feat(delegate): diagnostic dump when a subagent times out with 0 API calls (#15105)

2026-04-24 04:58:32 -07:00

test_delegate_toolset_scope.py

fix(security): restrict subagent toolsets to parent's enabled set (#3269)

2026-03-26 14:50:26 -07:00

test_delegate.py

test(delegation): add regression test for runtime missing 'provider' key

2026-05-17 11:40:05 -07:00

test_discord_tool.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_docker_environment.py

feat(docker): remove gosu from bundled image; s6-setuidgid handles privilege drop

2026-05-24 18:05:33 -07:00

test_docker_find.py

feat: entry-level Podman support — find_docker() + rootless entrypoint (#10066)

2026-04-14 21:20:37 -07:00

test_dockerfile_node_modules_perms.py

fix(docker): chown runtime node_modules trees to hermes user (#18800)

2026-05-07 06:17:49 -07:00

test_dockerfile_pid1_reaping.py

test(dockerfile): recognize s6-overlay/init as a valid PID-1; harden against historical-comment masquerade

2026-05-25 12:24:58 +10:00

test_env_passthrough.py

fix(env_passthrough): reject Hermes provider credentials from skill passthrough (#13523)

2026-04-21 06:14:25 -07:00

test_feishu_tools.py

feat: add Feishu document comment intelligent reply with 3-tier access control

2026-04-17 19:04:11 -07:00

test_file_operations_edge_cases.py

feat(file_tools): post-write delta lint on write_file + patch, add JSON/YAML/TOML/Python in-process linters (#20191)

2026-05-05 04:54:17 -07:00

test_file_operations.py

fix(security): restrict write access to Anthropic OAuth credential store

2026-05-24 17:47:24 -07:00

test_file_ops_cwd_tracking.py

fix(file-ops): follow terminal env's live cwd in _exec instead of init-time cached cwd (#11912)

2026-04-17 19:26:40 -07:00

test_file_read_guards.py

fix: reject read_file symlinks to blocking devices (#10133)

2026-05-25 05:07:38 -07:00

test_file_staleness.py

fix(file_tools): resolve bookkeeping paths against live terminal cwd

2026-04-23 15:11:52 -07:00

test_file_state_registry.py

feat(delegate): cross-agent file state coordination for concurrent subagents (#13718)

2026-04-21 16:41:26 -07:00

test_file_sync_back.py

fix: move pytest.importorskip below pytest import in skip-guarded tests

2026-05-09 11:12:03 -07:00

test_file_sync_perf.py

test: add reproducible perf benchmark for file sync overhead

2026-04-10 03:01:46 -07:00

test_file_sync.py

test(file_sync): add tests for bulk_upload_fn callback

2026-04-10 21:14:32 -07:00

test_file_tools_container_config.py

fix(docker): pass docker_mount_cwd_to_workspace and docker_forward_env to container_config in file_tools

2026-04-20 00:58:16 -07:00

test_file_tools_live.py

feat(environments): unified spawn-per-call execution layer

2026-04-08 17:23:15 -07:00

test_file_tools.py

fix(file_tools): reject '..' traversal in V4A patch headers

2026-05-25 01:55:59 -07:00

test_file_write_safety.py

fix(file_tools): block /private/etc writes on macOS symlink bypass

2026-04-13 05:15:05 -07:00

test_force_dangerous_override.py

fix(skills): honor policy table for dangerous verdicts

2026-03-14 11:27:02 -07:00

test_fuzzy_match.py

fix(patch): gate 'did you mean?' to no-match + extend to v4a/skill_manage

2026-04-21 02:03:46 -07:00

test_hardline_blocklist.py

fix(terminal): block sudo -S password guessing when SUDO_PASSWORD is not set

2026-05-11 06:56:30 -07:00

test_heartbeat_stale_thresholds.py

test: add unit tests for heartbeat stale threshold increase

2026-05-04 05:08:51 -07:00

test_hidden_dir_filter.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_homeassistant_tool.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_image_generation_env.py

feat(image-gen): actionable setup message when no FAL backend is reachable (#26222)

2026-05-15 01:33:13 -07:00

test_image_generation_plugin_dispatch.py

fix(image-gen): force-refresh plugin providers in long-lived sessions

2026-04-23 03:01:18 -07:00

test_image_generation.py

feat(image-gen): add GPT Image 2 to FAL catalog (#13677)

2026-04-21 13:35:31 -07:00

test_init_session_cwd_respect.py

fix(cli): respect terminal.cwd config in local terminal backend

2026-04-28 22:16:08 -07:00

test_interrupt.py

fix: resolve remaining 4 CI test failures (#9543)

2026-04-14 02:18:38 -07:00

test_kanban_codex_lane_skill.py

docs: add kanban codex lane skill

2026-05-18 21:01:14 -07:00

test_kanban_tools.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_lazy_deps.py

fix(update): refresh lazy-installed backends on hermes update (#25766)

2026-05-14 08:03:40 -07:00

test_llm_content_none_guard.py

feat(session_search): single-shape tool with discovery, scroll, browse — no LLM (#27590)

2026-05-17 23:28:45 -07:00

test_local_background_child_hang.py

fix(environments): use incremental UTF-8 decoder in select-based drain

2026-04-19 11:27:50 -07:00

test_local_env_blocklist.py

feat: add Vercel Sandbox backend

2026-04-29 07:22:33 -07:00

test_local_env_cwd_recovery.py

fix(local): test root as ancestor candidate; use real pipe for fake stdout

2026-05-04 15:31:47 -07:00

test_local_env_windows_msys.py

fix(windows): stop spamming cwd-missing + tirith-spawn warnings on every terminal call

2026-05-15 16:25:31 -07:00

test_local_interrupt_cleanup.py

fix(tests): align CI tests with recent security hardening (#31470)

2026-05-24 06:54:16 -07:00

test_local_shell_init.py

fix(terminal): auto-source ~/.profile and ~/.bash_profile so n/nvm PATH survives (#14534)

2026-04-23 05:15:37 -07:00

test_local_tempdir.py

fix(termux): honor temp dirs for local temp artifacts

2026-04-09 16:24:53 -07:00

test_managed_browserbase_and_modal.py

fix(browser): self-review pass — dead-import, log levels, future-proofing

2026-05-17 04:04:15 -07:00

test_managed_media_gateways.py

feat: ungate Tool Gateway — subscription-based access with per-tool opt-in

2026-04-16 12:36:49 -07:00

test_managed_modal_environment.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_managed_tool_gateway.py

feat: ungate Tool Gateway — subscription-based access with per-tool opt-in

2026-04-16 12:36:49 -07:00

test_mcp_cancelled_error_propagation.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_mcp_circuit_breaker.py

test(mcp): add failing tests for circuit-breaker recovery

2026-04-21 05:19:03 -07:00

test_mcp_dynamic_discovery.py

fix(ci): recover 38 failing tests on main (#17642)

2026-04-29 20:05:32 -07:00

test_mcp_empty_error_message.py

fix(mcp): include exception type in error messages when str(exc) is empty

2026-05-07 06:33:57 -07:00

test_mcp_image_content.py

fix(mcp): surface image tool results as MEDIA tags instead of dropping them (#21328)

2026-05-07 07:14:16 -07:00

test_mcp_invalid_url.py

fix(mcp): validate remote URLs up-front with a clear error (#27105)

2026-05-16 13:06:56 -07:00

test_mcp_oauth_bidirectional.py

fix(mcp-oauth): bidirectional auth_flow bridge + absolute expires_at (salvage #12025) (#12717)

2026-04-19 16:31:07 -07:00

test_mcp_oauth_cold_load_expiry.py

fix(mcp-oauth): bidirectional auth_flow bridge + absolute expires_at (salvage #12025) (#12717)

2026-04-19 16:31:07 -07:00

test_mcp_oauth_integration.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_oauth_manager.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_oauth_metadata.py

fix(mcp-oauth): persist OAuth server metadata across process restarts (#21226)

2026-05-07 05:35:33 -07:00

test_mcp_oauth.py

fix(mcp-oauth): print SSH tunnel hint in _redirect_handler

2026-05-17 02:29:37 -07:00

test_mcp_probe.py

fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)

2026-05-15 14:00:01 -07:00

test_mcp_reconnect_signal.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_sse_transport.py

fix(mcp): forward OAuth auth and bump sse_read_timeout on SSE transport (#21323)

2026-05-07 07:08:04 -07:00

test_mcp_stability.py

fix(mcp): use module-level time so test patches do not race background sleepers

2026-05-17 13:33:26 -07:00

test_mcp_structured_content.py

fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)

2026-05-15 14:00:01 -07:00

test_mcp_tool_401_handling.py

fix(mcp): consolidate OAuth handling, pick up external token refreshes (#11383)

2026-04-16 21:57:10 -07:00

test_mcp_tool_issue_948.py

fix: remove stale test skips, fix regex backtracking, file search bug, and test flakiness

2026-04-04 10:18:57 -07:00

test_mcp_tool_session_expired.py

fix(mcp): retry stale pipe transport failures

2026-05-07 06:32:45 -07:00

test_mcp_tool.py

fix(mcp): raise ImportError instead of NameError when stdio SDK missing (#31450)

2026-05-24 04:44:59 -07:00

test_mcp_utility_capability_gating.py

fix(mcp): gate utility stubs on server-advertised capabilities (#21347)

2026-05-07 07:39:50 -07:00

test_memory_tool_import_fallback.py

fix(tools): keep memory tool available when fcntl is unavailable

2026-04-14 10:18:05 -07:00

test_memory_tool_schema.py

fix(memory): remove dead allOf schema block at the source

2026-05-07 07:03:21 -07:00

test_memory_tool.py

fix(security): expand memory content scanning patterns to parity with skills guard (#9151)

2026-05-25 01:51:53 -07:00

test_microsoft_graph_auth.py

test(msgraph): cover concurrent token cache reuse

2026-05-08 09:27:26 -07:00

test_microsoft_graph_client.py

fix(msgraph): stream download_to_file body instead of buffering

2026-05-08 09:27:26 -07:00

test_mixture_of_agents_tool.py

chore(release): map devorun author + convert MoA defaults test to invariant

2026-04-23 15:14:11 -07:00

test_modal_bulk_upload.py

perf(ssh,modal): bulk file sync via tar pipe and tar/base64 archive (#8014)

2026-04-12 06:18:05 +05:30

test_modal_sandbox_fixes.py

feat: add Vercel Sandbox backend

2026-04-29 07:22:33 -07:00

test_modal_snapshot_isolation.py

fix(tests): update mocks for file sync changes

2026-04-10 03:01:46 -07:00

test_notify_on_complete.py

fix(terminal): warn at call time when background=true runs silently (#31289)

2026-05-23 21:02:14 -07:00

test_osv_check.py

feat: OSV malware check for MCP extension packages (#5305)

2026-04-05 12:46:07 -07:00

test_parse_env_var.py

guard terminal_tool import-time env parsing

2026-04-22 14:45:50 -07:00

test_patch_parser.py

fix(lint): skip per-file shell linter when LSP will handle the file (#29054)

2026-05-20 01:46:40 -05:00

test_pr_6656_regressions.py

fix(skills): make content_hash filename-sensitive too (symmetric with bundle_content_hash)

2026-05-22 19:59:24 -07:00

test_process_registry.py

fix(process_registry): use taskkill /T /F for tree-kill on Windows

2026-05-23 20:30:29 -07:00

test_read_loop_detection.py

refactor: remove dead code — 1,784 lines across 77 files (#9180)

2026-04-13 16:32:04 -07:00

test_registry.py

test(ci): stabilize shared optional dependency baselines

2026-05-13 17:32:22 -07:00

test_resolve_path.py

fix(file_tools): resolve bookkeeping paths against live terminal cwd

2026-04-23 15:11:52 -07:00

test_schema_sanitizer.py

fix(xai-responses): strip enum values containing '/' from tool schemas

2026-05-18 10:37:35 -07:00

test_search_hidden_dirs.py

fix: exclude hidden directories from find/grep search backends (#1558)

2026-03-17 02:02:57 -07:00

test_send_message_missing_platforms.py

refactor(gateway): migrate Mattermost adapter to bundled plugin

2026-05-24 18:05:33 -07:00

test_send_message_telegram_proxy.py

test+release: align send_message mocks for MessageEntity import; map @fonhal

2026-05-18 22:19:50 -07:00

test_send_message_tool.py

Fix unsafe gateway media path delivery

2026-05-23 01:40:35 -07:00

test_session_search.py

feat(session_search): single-shape tool with discovery, scroll, browse — no LLM (#27590)

2026-05-17 23:28:45 -07:00

test_shared_container_task_id.py

feat(terminal): collapse subagent task_ids to shared container (#16177)

2026-04-26 11:55:02 -07:00

test_signal_media.py

feat(send_message): add media delivery support for Signal

2026-04-20 13:24:15 -07:00

test_singularity_preflight.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_skill_env_passthrough.py

fix: remove 115 verified dead code symbols across 46 production files

2026-04-10 03:44:43 -07:00

test_skill_improvements.py

feat(skills): size limits for agent writes + fuzzy matching for patch (#4414)

2026-04-01 04:19:19 -07:00

test_skill_manager_tool.py

chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)

2026-05-17 02:29:41 -07:00

test_skill_provenance.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_skill_size_limits.py

feat(skills): size limits for agent writes + fuzzy matching for patch (#4414)

2026-04-01 04:19:19 -07:00

test_skill_usage.py

fix(skills): lock usage telemetry updates

2026-05-07 06:13:37 -07:00

test_skill_view_path_check.py

refactor: use Path.is_relative_to() for skill_view boundary check

2026-03-04 05:30:43 -08:00

test_skill_view_traversal.py

fix(security): block path traversal in skill_view file_path (fixes #220)

2026-03-02 02:00:09 -08:00

test_skills_ast_audit.py

refactor(skills): slim AST diagnostic to single entry point

2026-05-23 17:47:26 -07:00

test_skills_guard.py

Harden Skills Guard multi-word prompt patterns (#26852)

2026-05-25 01:51:27 -07:00

test_skills_hub_browse_sh.py

fix(browse-sh): fetch SKILL.md via /api/skills/{slug}+skillMdUrl

2026-05-19 14:17:38 -07:00

test_skills_hub_clawhub.py

fix(skills-hub): cover remaining SSRF fetch paths after #10029

2026-05-09 17:52:12 -07:00

test_skills_hub.py

fix(skills-hub): deduplicate search results by identifier, not name

2026-05-20 15:04:01 -07:00

test_skills_sync.py

feat(skills_sync): surface collision with reset-hint

2026-04-23 05:09:08 -07:00

test_skills_tool.py

fix(skills): prune dependency/venv dirs from all skill scanners (#30042)

2026-05-21 14:18:02 -07:00

test_slash_confirm.py

feat(gateway,cli): confirm /reload-mcp to warn about prompt cache invalidation

2026-04-29 21:56:47 -07:00

test_spotify_client.py

refactor(spotify): convert to built-in bundled plugin under plugins/spotify (#15174)

2026-04-24 07:06:11 -07:00

test_ssh_bulk_upload.py

fix(ssh): keep bulk sync extraction scoped to .hermes

2026-05-21 19:17:51 -07:00

test_ssh_environment.py

fix(tools): keep SSH ControlMaster socket path under macOS 104-byte limit

2026-04-20 03:07:32 -07:00

test_symlink_prefix_confusion.py

fix: use is_relative_to() for symlink boundary check in skills_guard

2026-03-04 17:23:23 +03:00

test_sync_back_backends.py

fix: harden sync_back — PID-suffix temp path, size cap, lifecycle guards

2026-04-16 19:39:21 -07:00

test_terminal_compound_background.py

fix(terminal): rewrite A && B & to A && { B & } to prevent subshell leak

2026-04-19 16:53:11 -07:00

test_terminal_config_env_sync.py

fix(terminal): bridge docker_env config to TERMINAL_DOCKER_ENV

2026-05-09 17:53:35 -07:00

test_terminal_exit_semantics.py

feat: add exit code context for common CLI tools in terminal results (#5144)

2026-04-04 16:57:24 -07:00

test_terminal_foreground_timeout_cap.py

terminal: steer long-lived server commands to background mode

2026-04-19 16:47:20 -07:00

test_terminal_none_command_guard.py

fix(terminal): guard invalid command values

2026-04-08 21:37:51 -07:00

test_terminal_output_transform_hook.py

test: stop testing mutable data — convert change-detectors to invariants (#13363)

2026-04-20 23:20:33 -07:00

test_terminal_requirements.py

feat: add Vercel Sandbox backend

2026-04-29 07:22:33 -07:00

test_terminal_task_cwd.py

fix(acp): honor task cwd for foreground terminal commands

2026-05-09 14:46:34 -07:00

test_terminal_timeout_output.py

fix(terminal): preserve partial output when command times out (#3868)

2026-03-29 21:51:44 -07:00

test_terminal_tool_pty_fallback.py

feat: add tested Termux install path and EOF-aware gh auth

2026-04-09 16:24:53 -07:00

test_terminal_tool_requirements.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_terminal_tool.py

fix(terminal): skip sudo prompt when local NOPASSWD sudo works

2026-04-30 20:38:09 -07:00

test_threaded_process_handle.py

feat(environments): unified spawn-per-call execution layer

2026-04-08 17:23:15 -07:00

test_tirith_security.py

test: keep tirith checks hermetic

2026-05-23 02:20:14 -07:00

test_todo_tool.py

fix(tools): enforce ID uniqueness in TODO store during replace operations

2026-04-11 16:22:50 -07:00

test_tool_backend_helpers.py

fix(cli): coerce use_gateway config flags in tool routing

2026-04-26 19:02:55 -07:00

test_tool_output_limits.py

feat(skills): add design-md skill for Google's DESIGN.md spec (#14876)

2026-04-23 21:51:19 -07:00

test_tool_result_storage.py

fix(tool-result-storage): persist via stdin to bypass 128 KB exec-arg cap (#22913)

2026-05-09 18:44:58 -07:00

test_transcription_command_providers.py

feat(stt): add stt.providers.<name> command-provider registry

2026-05-25 01:41:19 -07:00

test_transcription_dotenv_fallback.py

test(tools): centralize disable_lazy_stt_install fixture in conftest

2026-05-22 03:33:01 -07:00

test_transcription_plugin_dispatch.py

feat(stt): add register_transcription_provider() plugin hook

2026-05-25 01:41:19 -07:00

test_transcription_tools.py

test(tools): centralize disable_lazy_stt_install fixture in conftest

2026-05-22 03:33:01 -07:00

test_transcription.py

test(tools): centralize disable_lazy_stt_install fixture in conftest

2026-05-22 03:33:01 -07:00

test_tts_command_providers.py

feat(tts): add Piper as a native local TTS provider (closes #8508) (#17885)

2026-04-30 02:53:20 -07:00

test_tts_dotenv_fallback.py

fix(xai-http): preserve ~/.hermes/.env fallback and XAI_STT_BASE_URL precedence

2026-05-15 12:11:32 -07:00

test_tts_gemini.py

feat(tts): add Google Gemini TTS provider (#11229)

2026-04-16 14:23:16 -07:00

test_tts_kittentts.py

test(ci): stabilize shared optional dependency baselines

2026-05-13 17:32:22 -07:00

test_tts_max_text_length.py

fix(tts): use per-provider input-character caps instead of global 4000 (#13743)

2026-04-21 17:49:39 -07:00

test_tts_mistral.py

fix(deps): unbreak [all] install — drop mistralai while PyPI quarantined (#24205)

2026-05-11 23:02:15 -07:00

test_tts_opus_routing.py

fix(tts): keep native audio outside Telegram voice delivery

2026-05-18 22:29:45 -07:00

test_tts_piper.py

feat(tts): add Piper as a native local TTS provider (closes #8508) (#17885)

2026-04-30 02:53:20 -07:00

test_tts_plugin_dispatch.py

feat(tts): add register_tts_provider() plugin hook (closes #30398)

2026-05-24 18:04:54 -07:00

test_tts_speed.py

fix(tts): align MiniMax TTS defaults with current API and add GroupId support

2026-05-13 22:04:28 -07:00

test_tts_xai_speech_tags.py

Add opt-in xAI TTS speech tag pauses

2026-05-20 09:22:28 -07:00

test_url_safety.py

fix(url_safety): block IPv4-mapped IPv6 addresses to prevent SSRF bypass

2026-05-18 10:51:15 -07:00

test_vercel_sandbox_environment.py

test: remove 50 stale/broken tests to unblock CI (#22098)

2026-05-08 14:55:40 -07:00

test_video_analyze.py

feat: add video_analyze tool for native video understanding (#19301)

2026-05-04 00:04:36 +05:30

test_video_generation_dispatch.py

feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)

2026-05-13 16:39:41 -07:00

test_video_generation_dynamic_schema.py

feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)

2026-05-13 16:39:41 -07:00

test_video_generation_tool_surface_matrix.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_vision_native_fast_path.py

fix(dashboard): UI polish — modals, layout, consistency, test fixes

2026-05-12 13:59:22 -04:00

test_vision_tools.py

test: cover vision config temperature wiring\n\n- add regression tests for auxiliary.vision.temperature and timeout\n- add bugkill3r to AUTHOR_MAP for the salvaged commit

2026-04-20 00:32:09 -07:00

test_voice_cli_integration.py

fix(voice): chunk oversized CLI recordings

2026-05-21 14:17:39 -07:00

test_voice_mode.py

test: keep tirith checks hermetic

2026-05-23 02:20:14 -07:00

test_watch_patterns.py

fix(terminal): three-layer defense against watch_patterns notification spam (#15642)

2026-04-25 06:41:58 -07:00

test_web_providers_brave_free.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_web_providers_ddgs.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_web_providers_searxng.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_web_providers_xai.py

feat(web): add xAI Web Search provider plugin

2026-05-19 19:27:34 -07:00

test_web_providers.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_web_tools_config.py

refactor(web): dispatch all three tools through web_search_registry

2026-05-13 22:31:28 -07:00

test_web_tools_tavily.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_website_policy.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_windows_compat.py

fix: guard POSIX-only process functions for Windows compatibility

2026-03-01 01:54:27 +03:00

test_windows_native_support.py

feat(security): supply-chain advisory checker + lazy-install framework + tiered install fallback (#24220)

2026-05-12 01:02:25 -07:00

test_write_deny.py

test: use subprocesses for each test file (#29016)

2026-05-21 16:40:04 +05:30

test_x_search_tool.py

fix(x_search): surface degraded results + validate dates

2026-05-21 02:38:45 +05:30

test_yolo_mode.py

fix(approval): harden YOLO bypass, LLM parsing, auto-approve audit, pipe pattern (#23835)

2026-05-25 03:35:33 -07:00

test_zombie_process_cleanup.py

ci(tests): add pytest-timeout 60s hard cap to break suite-teardown deadlock (#28861)

2026-05-19 17:27:24 -07:00