teknium1 fbfccbb3ee fix(security): align cron invisible-unicode set with install-time scanner ... The cron runtime tripwire (_scan_cron_prompt) used a 10-char invisible-unicode set while the install-time scanner (threat_patterns.INVISIBLE_CHARS) flags 17. The cron-local set was missing U+2062-U+2064 (invisible math operators) and U+2066-U+2069 (directional isolates), so a directive obfuscated with one of those codepoints (e.g. "ig<U+2063>nore all previous instructions") slipped past the runtime cron gate while being caught at install time. Import the canonical set so the cron tripwire and install scanner can't drift apart again. Emoji-ZWJ protection (_zwj_has_emoji_neighbour) is unchanged. Fixes #35075 Co-authored-by: rlaope <piyrw9754@gmail.com>		2026-06-26 01:11:11 -07:00
..
acp
acp_adapter
agent	Merge pull request #52412 from GodsBoy/fix/verify-on-stop-messaging-surface-leak	2026-06-26 02:30:08 -05:00
ci	fix(ci): classify should default to no MCP	2026-06-23 10:32:27 -07:00
cli	feat(cli): note background delegate_task dispatch in _on_tool_complete	2026-06-25 19:57:58 -05:00
computer_use
cron	fix(cron): add default retention to per-run job output (#52383) (#52646)	2026-06-25 16:00:13 -07:00
docker
e2e
fakes
fixtures/plugins/example-dashboard/dashboard
gateway	fix(whatsapp_cloud): resolve reply-to text so the agent sees reply context (#52957)	2026-06-26 01:05:05 -07:00
hermes_cli	Split dashboard PTY reconnect tests	2026-06-26 01:06:02 -07:00
hermes_state	fix(state): exclude delegate/branch/tool children from resume walk + reconcile salvaged fixes	2026-06-25 16:29:09 -07:00
honcho_plugin	feat(memory): Honcho OAuth connect — desktop and CLI flows + token refresh (#44335)	2026-06-22 19:16:47 -05:00
integration
openviking_plugin	feat(openviking): add full recall prefetch policy	2026-06-24 18:53:49 +05:30
plugins	feat(dashboard-auth): drain shared-bearer-secret provider plugin	2026-06-26 00:47:19 -07:00
providers
run_agent	Merge pull request #52854 from NousResearch/bb/fix-interrupt-partial-reply	2026-06-26 00:04:37 -05:00
scripts
skills	feat(skills): add cloudflare-temporary-deploy optional skill (#50849)	2026-06-22 12:14:30 -07:00
stress
tools	fix(security): align cron invisible-unicode set with install-time scanner	2026-06-26 01:11:11 -07:00
tui_gateway	feat(gateway): build authoritative project tree	2026-06-25 16:40:27 -05:00
website
__init__.py
conftest.py
run_interrupt_test.py
test_account_usage.py
test_assistant_ui_tap_compat.py
test_atomic_replace_symlinks.py
test_base_url_hostname.py
test_batch_runner_checkpoint.py
test_bitwarden_secrets.py
test_cli_file_drop.py
test_cli_manual_compress.py
test_cli_skin_integration.py
test_code_skew.py	fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError	2026-06-24 04:16:54 +05:30
test_ctx_halving_fix.py
test_dashboard_sidecar_close_on_disconnect.py
test_delegate_cascade_49148.py
test_desktop_electron_pin.py
test_desktop_mac_entitlements.py
test_dispatch_session_id.py
test_docker_home_override_scripts.py	fix(docker): skip symlinked stage2 chown targets (#52789)	2026-06-26 12:09:52 +10:00
test_docker_stage2_browser_discovery.py
test_docker_webui_install_surface.py
test_dockerfile_tini_compat_shim.py
test_empty_model_fallback.py
test_empty_session_hygiene.py
test_env_loader_secret_sources.py
test_evidence_store.py
test_gateway_streaming_nested_config.py
test_get_tool_definitions_cache_isolation.py
test_hermes_bootstrap.py	fix(tui): stop a cwd package named utils/proxy/ui from crashing the gateway child (#51693)	2026-06-23 23:29:45 -07:00
test_hermes_constants.py	fix(browser): validate agent-browser is runnable, not just present (#51740)	2026-06-24 00:14:49 -07:00
test_hermes_home_profile_warning.py
test_hermes_logging.py
test_hermes_state.py	Merge pull request #49037 from NousResearch/bb/projects-paradigm	2026-06-25 17:49:05 -05:00
test_hermes_state_compression_locks.py
test_hermes_state_wal_fallback.py
test_honcho_client_concurrency.py
test_honcho_client_config.py
test_honcho_session_context.py
test_honcho_startup_fail_open.py
test_install_lockfile_churn.py	fix(install): discard managed lockfile churn before stashing	2026-06-25 23:49:11 -07:00
test_install_no_initial_commit.py
test_install_ps1_native_stderr_eap.py
test_install_ps1_python_fallback_venv.py	test(installer): lock Python-fallback propagation into the venv stage (#50769)	2026-06-23 21:33:08 -07:00
test_install_ps1_uv_powershell_host.py
test_install_sh_browser_install.py	test(install): assert no system-browser auto-detect + snap override repair	2026-06-23 10:38:15 -07:00
test_install_sh_install_method_stamp.py
test_install_sh_node_global_prefix.py
test_install_sh_pythonpath_sanitization.py
test_install_sh_root_fhs_uv_python_path.py
test_install_sh_setup_wizard_tty_probe.py
test_install_sh_symlink_stomp.py
test_install_sh_termux_network_prereqs.py
test_install_unmerged_index.py	fix(install): discard managed lockfile churn before stashing	2026-06-25 23:49:11 -07:00
test_ipv4_preference.py
test_lazy_session_regressions.py	fix(gateway): surface retry hint instead of silently dropping turn after /stop (#31884)	2026-06-24 23:51:31 +05:30
test_lint_config.py
test_live_system_guard_self_test.py
test_mcp_serve.py
test_mini_swe_runner.py
test_minimax_model_validation.py
test_minimax_oauth.py
test_minisweagent_path.py
test_model_forces_max_completion_tokens.py
test_model_picker_scroll.py
test_model_tools.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
test_model_tools_async_bridge.py
test_ollama_num_ctx.py
test_output_cap_parsing.py
test_package_json_lazy_deps.py
test_packaging_metadata.py
test_plugin_skills.py
test_plugin_utils.py
test_process_loop_event_loop_warning.py
test_project_metadata.py
test_retry_utils.py	fix: handle named custom providers and Z.AI overload retries	2026-06-25 00:17:17 -07:00
test_run_tests_parallel.py
test_sanitize_tool_error.py
test_slash_worker_watchdog.py
test_sql_injection.py
test_stale_utils_module_import.py	fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError	2026-06-24 04:16:54 +05:30
test_state_db_malformed_repair.py	fix(state): detect and repair FTS write corruption that silently drops gateway history (#52798)	2026-06-25 21:18:41 -07:00
test_subprocess_home_isolation.py
test_termux_all_extra_compat.py
test_timezone.py
test_toolset_distributions.py
test_toolsets.py
test_trajectory_compressor.py
test_trajectory_compressor_async.py
test_transform_llm_output_hook.py
test_transform_tool_result_hook.py
test_tui_gateway_queue_on_busy.py	fix(tui_gateway): queue mid-turn prompts instead of dropping them on a busy retry	2026-06-25 12:29:49 -05:00
test_tui_gateway_server.py	fix(tui): make stop interrupt queued desktop turns	2026-06-26 00:31:06 -05:00
test_tui_gateway_ws.py
test_tui_mcp_late_refresh.py
test_utils_truthy_values.py
test_web_server.py	fix(dashboard): serve uvicorn on SelectorEventLoop on Windows (#50641) (#51717)	2026-06-23 23:43:24 -07:00
test_wheel_locales_e2e.py
test_yaml_indent_consistency_31999.py	fix(utils): unify YAML list indent across all config writers (#31999)	2026-06-25 23:27:44 +05:30
test_yuanbao_integration.py
test_yuanbao_markdown.py
test_yuanbao_pipeline.py
test_yuanbao_proto.py
test_yuanbao_shutdown.py