Ben 2f0f03c40d fix(docker): cleanup_vm() default honors persist mode (don't kill container on session close) ... Commit 4 made cleanup_vm() default to force_remove=True, which was wrong: cleanup_vm() is called from AIAgent.close() (TUI session close at tui_gateway/server.py:2991, gateway session teardown at gateway/run.py:3569) and from per-turn cleanup (agent/chat_completion_helpers.py:1517). All three are session-lifecycle events that should honor persist mode, not explicit user-initiated teardown. Ben reported the symptom: container shared between multiple TUI sessions (good) but killed as soon as any session closed (bad). With force_remove=True as the default, every `session.close` JSON-RPC tore down the container. The fix is to flip cleanup_vm()'s force_remove default back to False. The kwarg still exists for future explicit-teardown paths (`/reset`-style flows, "destroy my sandbox" commands) that haven't been wired up yet. Two new unit tests pin the behavior: * `test_cleanup_vm_default_honors_persist_mode` — asserts `cleanup_vm(task_id)` does neither docker stop nor docker rm on a persist-mode container (the regression Ben caught). * `test_cleanup_vm_force_remove_tears_down_persist_container` — asserts the kwarg still flows through the runtime-signature-inspection plumbing to the backend's cleanup(). E2E verified against real Docker (in addition to all 17 existing checks): ✓ Default cleanup_vm() leaves persist-mode container running ✓ cleanup_vm(force_remove=True) removed the container Refs #20561		2026-05-29 11:49:54 +10:00
..
computer_use	fix(computer-use): skip capture_after when action failed (ok=False)	2026-05-22 01:19:01 -07:00
environments	fix(docker): persist-mode cleanup is no-op; add force_remove kwarg (#20561)	2026-05-29 11:49:54 +10:00
neutts_samples
__init__.py
ansi_strip.py
approval.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
binary_extensions.py
browser_camofox.py	feat: auto-launch Chromium-family browser for CDP	2026-05-19 22:34:05 -07:00
browser_camofox_state.py
browser_cdp_tool.py	feat: auto-launch Chromium-family browser for CDP	2026-05-19 22:34:05 -07:00
browser_dialog_tool.py	feat: auto-launch Chromium-family browser for CDP	2026-05-19 22:34:05 -07:00
browser_supervisor.py
browser_tool.py	fix(vision): route auxiliary.vision.provider=openai to api.openai.com, skip text-only main (#31452)	2026-05-24 15:01:28 -07:00
budget_config.py
checkpoint_manager.py
clarify_gateway.py
clarify_tool.py
code_execution_tool.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
computer_use_tool.py
credential_files.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
cronjob_tools.py	fix(cron): clarify schedule is required for create in tool schema	2026-05-26 14:09:37 -07:00
debug_helpers.py
delegate_tool.py
discord_tool.py
env_passthrough.py	harden(env_passthrough): apply GHSA-rhgp-j443-p4rf filter to config.yaml path (#27794)	2026-05-25 03:35:23 -07:00
fal_common.py	refactor(image_gen): port FAL backend to plugins/image_gen/fal	2026-05-22 04:10:45 -07:00
feishu_doc_tool.py
feishu_drive_tool.py
file_operations.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
file_state.py
file_tools.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
fuzzy_match.py	fix(patch): widen new_string \t/\r unescape to all match strategies (#33733)	2026-05-28 03:27:20 -07:00
homeassistant_tool.py
image_generation_tool.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
interrupt.py
kanban_tools.py
lazy_deps.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
managed_tool_gateway.py
mcp_oauth.py	feat(mcp-oauth): accept 'skip' at paste prompt to bypass auth without disabling server (#32069)	2026-05-25 05:37:30 -07:00
mcp_oauth_manager.py
mcp_tool.py	fix(mcp): resolve bare npx/npm/node against /usr/local/bin	2026-05-29 10:05:42 +10:00
memory_tool.py	feat(security): promptware defense — shared threat patterns + memory load-time scan + tool-result delimiters (#32269)	2026-05-25 14:52:24 -07:00
microsoft_graph_auth.py
microsoft_graph_client.py
mixture_of_agents_tool.py
neutts_synth.py
openrouter_client.py
osv_check.py
patch_parser.py	fix(lint): skip per-file shell linter when LSP will handle the file (#29054)	2026-05-20 01:46:40 -05:00
path_security.py
process_registry.py	feat(cli): show live background terminal-process count in status bar (#32061)	2026-05-25 05:35:02 -07:00
registry.py
schema_sanitizer.py
send_message_tool.py	fix(gateway): default media-delivery validation to denylist-only, restore .md delivery (#34022)	2026-05-28 11:32:36 -07:00
session_search_tool.py
skill_manager_tool.py	fix(profiles): cross-profile soft guard on file-write tools + system-prompt hint (#31290)	2026-05-24 00:38:17 -07:00
skill_provenance.py
skill_usage.py	fix(skills): prune dependency/venv dirs from all skill scanners (#30042)	2026-05-21 14:18:02 -07:00
skills_ast_audit.py	refactor(skills): slim AST diagnostic to single entry point	2026-05-23 17:47:26 -07:00
skills_guard.py	Harden Skills Guard multi-word prompt patterns (#26852)	2026-05-25 01:51:27 -07:00
skills_hub.py	fix(skills): pull full skills.sh catalog via sitemap (858 → 19,932) (#34025)	2026-05-28 11:28:12 -07:00
skills_sync.py	fix(skills): atomic lock write + drop dead _validate_category_name	2026-05-27 13:39:58 -07:00
skills_tool.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
slash_confirm.py
terminal_tool.py	fix(docker): cleanup_vm() default honors persist mode (don't kill container on session close)	2026-05-29 11:49:54 +10:00
threat_patterns.py	feat(security): promptware defense — shared threat patterns + memory load-time scan + tool-result delimiters (#32269)	2026-05-25 14:52:24 -07:00
tirith_security.py	fix(tirith): reject non-regular tar members during auto-install process	2026-05-28 02:49:26 -07:00
todo_tool.py
tool_backend_helpers.py	fix(auth): refresh Nous entitlement in tool menus	2026-05-28 00:19:31 -07:00
tool_output_limits.py
tool_result_storage.py
transcription_tools.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
tts_tool.py	feat(auth) normalise the way in which we check whether a user has free/paid access to nous portal so we can expose behaviour and error messages accordingly.	2026-05-28 00:19:31 -07:00
url_safety.py
video_generation_tool.py
vision_tools.py	fix(vision): route auxiliary.vision.provider=openai to api.openai.com, skip text-only main (#31452)	2026-05-24 15:01:28 -07:00
voice_mode.py	docs(voice): use uv pip install faster-whisper in STT install hints (#29800)	2026-05-28 16:23:14 +10:00
web_tools.py	chore(web): remove web_crawl tool + provider crawl plumbing (#33824)	2026-05-28 04:52:42 -07:00
website_policy.py	chore(web): remove web_crawl tool + provider crawl plumbing (#33824)	2026-05-28 04:52:42 -07:00
x_search_tool.py	fix(x_search): surface degraded results + validate dates	2026-05-21 02:38:45 +05:30
xai_http.py	feat(web): add xAI Web Search provider plugin	2026-05-19 19:27:34 -07:00
yuanbao_tools.py	Fix unsafe gateway media path delivery	2026-05-23 01:40:35 -07:00