0xbyt4 e6f66bc0f0 fix(security): cover Move and no-space headers in patch_tool sensitive path check ... patch_tool extracts V4A patch paths so _check_sensitive_path can refuse writes to /etc/*, /boot/*, etc. before they reach the low-level file ops. The extraction regex had two gaps: 1. `*** Move File: src -> dst` was never extracted (regex only matched Update/Add/Delete), so a Move targeting /etc/crontab skipped the pre-check and fell back on the narrower file_operations deny list. 2. The regex required `\\s+` after `***` but patch_parser uses `\\s*`, so `***Update File: /etc/hosts` (no space) parsed + applied while skipping the check. Loosen the leading whitespace to \\s* and add a Move regex that checks both endpoints. Move endpoints also run through the same '..' traversal rejection as the other V4A headers (closes the sibling gap on current main, which gained that traversal guard after this PR was opened).		2026-06-30 02:50:24 -07:00
..
computer_use	revert(windows): roll back terminal-popup PRs #53791 #53810 #53829 (#53853)	2026-06-27 15:59:00 -07:00
environments	fix(desktop): tree-kill Windows terminal descendants	2026-06-30 04:23:27 -05:00
neutts_samples
__init__.py
ansi_strip.py
approval.py	fix(approval): catch hermes gateway stop/restart behind a profile flag (#55515)	2026-06-30 02:48:30 -07:00
async_delegation.py
binary_extensions.py
blueprints.py
browser_camofox.py	fix(camofox): auto-recover from stale tab 404 on navigate	2026-06-29 01:26:24 -07:00
browser_camofox_state.py
browser_cdp_tool.py
browser_dialog_tool.py
browser_supervisor.py
browser_tool.py	fix(security): redact browser CDP endpoint logs	2026-06-29 04:25:26 -07:00
budget_config.py
checkpoint_manager.py	refactor(windows): unify windowless spawn form across the touched sites	2026-06-28 17:44:47 -05:00
clarify_gateway.py	fix: accept typed clarify choice replies	2026-06-28 04:13:19 -07:00
clarify_tool.py
close_terminal_tool.py	feat(desktop): live agent terminals + agent-driven tab close	2026-06-28 21:15:14 -05:00
code_execution_tool.py	feat(web_extract): truncate-and-store instead of LLM summarization (#54843)	2026-06-29 10:00:49 -07:00
computer_use_tool.py
credential_files.py	feat(web_extract): truncate-and-store instead of LLM summarization (#54843)	2026-06-29 10:00:49 -07:00
cronjob_tools.py	fix(security): align cron invisible-unicode set with install-time scanner	2026-06-26 01:11:11 -07:00
debug_helpers.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
delegate_tool.py	fix: drop isinstance(str) guard so client.base_url fallback works with httpx.URL	2026-06-27 03:59:36 +05:30
discord_tool.py
env_passthrough.py	fix(env-passthrough): fail closed when provider blocklist import fails	2026-06-28 02:05:43 -07:00
env_probe.py
fal_common.py
feishu_doc_tool.py
feishu_drive_tool.py
file_operations.py
file_state.py
file_tools.py	fix(security): cover Move and no-space headers in patch_tool sensitive path check	2026-06-30 02:50:24 -07:00
fuzzy_match.py	fix(fuzzy-match): preserve boundary space after whitespace-normalized match	2026-06-26 01:55:27 +05:30
homeassistant_tool.py
image_generation_tool.py	krea	2026-06-25 12:38:33 -07:00
interrupt.py
kanban_tools.py	fix(kanban): make goal_mode judge gate truly fail-open	2026-06-29 22:20:19 -07:00
lazy_deps.py	fix(memory): lazy-install supermemory + mem0 SDKs like honcho/hindsight	2026-06-29 00:25:36 -07:00
managed_tool_gateway.py
mcp_oauth.py	fix(mcp): suppress interactive OAuth stdin prompts during background discovery (#35927)	2026-06-27 04:59:23 +05:30
mcp_oauth_manager.py	fix(mcp): auto-recover from invalid_client on stale OAuth client registration	2026-06-26 00:35:27 -07:00
mcp_tool.py	fix(mcp): skip preflight content-type probe for OAuth servers	2026-06-28 04:47:39 -07:00
memory_tool.py	fix(memory): skip drift guard for add (append-only) action (#42874)	2026-06-25 00:51:12 +05:30
microsoft_graph_auth.py
microsoft_graph_client.py
neutts_synth.py
openrouter_client.py
osv_check.py
patch_parser.py
path_security.py
process_registry.py	fix(desktop): tree-kill Windows terminal descendants	2026-06-30 04:23:27 -05:00
project_tools.py	feat(tools): add project workspace tools	2026-06-25 16:40:27 -05:00
read_extract.py
read_terminal_tool.py
registry.py	fix(tools): suppress transient check_fn flakes so subagents keep file/terminal tools	2026-06-27 19:29:00 -07:00
schema_sanitizer.py
send_message_tool.py	test+harden: modernize salvaged Matrix path for current plugin layout	2026-06-28 12:48:08 +05:30
session_search_tool.py	fix(session_search): demote cron below interactive sessions in discover ranking (#53597)	2026-06-27 04:41:22 -07:00
skill_manager_tool.py	fix(curator): fail closed on unverified skill deletes during consolidation (#53935)	2026-06-27 20:45:57 -07:00
skill_provenance.py
skill_usage.py	fix(curator): protect external skills from background curation	2026-06-25 22:03:02 -07:00
skills_ast_audit.py
skills_guard.py
skills_hub.py	fix(skills): replace string prefix check with strict path containment	2026-06-28 21:14:01 -07:00
skills_sync.py	fix(skills): skip shadowing when external_dirs provides the skill	2026-06-27 21:07:53 -07:00
skills_tool.py	fix(config): strip export prefix in .env parsers across three modules	2026-06-28 18:53:00 -07:00
slash_confirm.py
terminal_tool.py	fix(terminal): require approval for host-bound Docker commands (#54483)	2026-06-29 11:35:41 +10:00
thread_context.py
threat_patterns.py	fix(security): stop blocking AGENTS.md/SOUL.md that name an agent 'Praxis' (#52925)	2026-06-26 00:36:01 -07:00
tirith_security.py	fix(security): add circuit breaker for tirith crashes to prevent agent hangs (#41400)	2026-06-26 15:26:08 +05:30
todo_tool.py	fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)	2026-06-25 23:42:42 +05:30
tool_backend_helpers.py
tool_output_limits.py
tool_result_storage.py
tool_search.py
transcription_tools.py	fix(windows): hide remaining backend console-flash legs missed on main	2026-06-28 10:19:21 -05:00
tts_tool.py	fix(windows): hide remaining backend console-flash legs missed on main	2026-06-28 10:19:21 -05:00
url_safety.py
video_generation_tool.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
vision_tools.py	fix(vision): narrow the fan-out cap to the CPU encode burst only	2026-06-29 01:27:10 -07:00
voice_mode.py
web_tools.py	fix(web_extract): bound stored full-text size + give concrete read_file offset	2026-06-30 00:19:49 -07:00
website_policy.py
write_approval.py
x_search_tool.py
xai_http.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
xai_video_tools.py	feat(xai): Imagine public-URL storage, chaining & video edit/extend	2026-06-29 21:11:58 -07:00
yuanbao_tools.py