teknium1 fbfccbb3ee fix(security): align cron invisible-unicode set with install-time scanner ... The cron runtime tripwire (_scan_cron_prompt) used a 10-char invisible-unicode set while the install-time scanner (threat_patterns.INVISIBLE_CHARS) flags 17. The cron-local set was missing U+2062-U+2064 (invisible math operators) and U+2066-U+2069 (directional isolates), so a directive obfuscated with one of those codepoints (e.g. "ig<U+2063>nore all previous instructions") slipped past the runtime cron gate while being caught at install time. Import the canonical set so the cron tripwire and install scanner can't drift apart again. Emoji-ZWJ protection (_zwj_has_emoji_neighbour) is unchanged. Fixes #35075 Co-authored-by: rlaope <piyrw9754@gmail.com>		2026-06-26 01:11:11 -07:00
..
__init__.py
conftest.py
test_accretion_caps.py
test_ansi_strip.py
test_approval.py	fix(approval): fold Windows absolute home paths in dangerous-command detection	2026-06-25 17:49:39 -07:00
test_approval_heartbeat.py
test_approval_interrupt.py	test(approval): regression for interrupt-unblocks-approval; AUTHOR_MAP	2026-06-21 13:33:48 -07:00
test_approval_plugin_hooks.py
test_async_delegation.py	feat(delegation): background fan-out — parallel subagents, one consolidated return (#49734)	2026-06-20 11:27:12 -07:00
test_base_environment.py
test_blueprints.py	refactor(cron): rebrand Cron Recipes -> Automation Blueprints	2026-06-11 10:49:47 -07:00
test_browser_camofox.py	fix(browser): force secret-pattern redaction on browser_type display	2026-06-25 22:02:22 -07:00
test_browser_camofox_persistence.py
test_browser_camofox_state.py
test_browser_cdp_override.py
test_browser_cdp_tool.py
test_browser_chromium_check.py
test_browser_cleanup.py
test_browser_cloud_fallback.py
test_browser_cloud_provider_cache.py
test_browser_console.py
test_browser_content_none_guard.py
test_browser_eval_supervisor_path.py	fix(browser): recover from CDP DOM-node serialization crash in browser_console (#35385)	2026-05-30 07:31:25 -07:00
test_browser_hardening.py	fix(browser): validate agent-browser is runnable, not just present (#51740)	2026-06-24 00:14:49 -07:00
test_browser_homebrew_paths.py	fix(browser): validate agent-browser is runnable, not just present (#51740)	2026-06-24 00:14:49 -07:00
test_browser_hybrid_routing.py
test_browser_lightpanda.py
test_browser_orphan_reaper.py	fix(browser): verify daemon identity before orphan reaper kills a PID (#14073)	2026-06-21 15:23:47 -07:00
test_browser_secret_exfil.py	fix(tools): percent-encode non-ascii URL components	2026-06-07 11:42:26 -06:00
test_browser_ssrf_local.py	fix(browser): enable SSRF guard when terminal runs in container	2026-06-21 07:26:18 -07:00
test_browser_supervisor.py
test_browser_supervisor_healthcheck.py
test_browser_type_redaction.py	fix(browser): force secret-pattern redaction on browser_type display	2026-06-25 22:02:22 -07:00
test_budget_config.py	fix(agent): scale tool-output budget to the model context window (#23767)	2026-06-21 17:46:38 +05:30
test_checkpoint_manager.py
test_clarify_gateway.py
test_clarify_tool.py	fix(clarify): unwrap dict choices at the source so every surface gets clean text	2026-06-19 06:31:08 -07:00
test_clipboard.py
test_code_execution.py	fix(security): quote HERMES_TIMEZONE in remote code execution to prevent shell injection	2026-06-21 16:55:12 -07:00
test_code_execution_modes.py
test_code_execution_windows_env.py
test_command_guards.py	fix(approval): honor glob command allowlist entries (#43051)	2026-06-18 12:48:36 +10:00
test_computer_use.py	Merge remote-tracking branch 'origin/main' into pr-50994	2026-06-22 18:48:07 -05:00
test_computer_use_capture_routing.py	feat(computer_use): cross-platform cua-driver (macOS/Windows/Linux)	2026-06-22 06:42:30 -07:00
test_computer_use_vision_routing.py	fix(computer_use): honor custom vision routing	2026-06-07 02:09:20 -07:00
test_config_null_guard.py
test_container_cwd_sanitize.py	fix(terminal): sanitize host/relative cwd OVERRIDE before it reaches docker run -w (#50636)	2026-06-25 02:33:40 +00:00
test_credential_files.py	fix(slack): make video attachments available to agents (#45512)	2026-06-13 03:33:27 -07:00
test_credential_pool_env_fallback.py
test_cron_approval_mode.py
test_cron_prompt_injection.py	fix(security): align cron invisible-unicode set with install-time scanner	2026-06-26 01:11:11 -07:00
test_cronjob_run_immediate.py	fix(cron): execute job immediately on action='run'	2026-06-21 13:28:04 +05:30
test_cronjob_tools.py	fix(cron): tell the user TUI/CLI cron jobs are local-only at create time (#51683)	2026-06-23 23:27:48 -07:00
test_cross_profile_guard.py
test_daytona_environment.py
test_debug_helpers.py
test_delegate.py	Merge pull request #47959 from NousResearch/bb/pets-gen	2026-06-24 19:41:34 -05:00
test_delegate_composite_toolsets.py
test_delegate_subagent_timeout_diagnostic.py	feat(desktop): stream subagent activity into watch windows (#47060)	2026-06-16 14:30:11 -04:00
test_delegate_toolset_scope.py
test_discord_tool.py
test_docker_config_migrate.py	test(docker): assert boot migration keeps .env byte-identical across reboots	2026-06-24 15:23:23 +10:00
test_docker_environment.py	test: update docker preflight assertion for stdin=DEVNULL kwarg	2026-06-08 22:46:57 -07:00
test_docker_find.py
test_docker_orphan_reaper_integration.py
test_dockerfile_immutable_install.py	fix(docker): redirect lazy installs to a durable target so opt-in backends work in the immutable image (#51136)	2026-06-25 09:20:13 +10:00
test_dockerfile_node_modules_perms.py	Harden hosted Docker install tree against self-modification (#47490)	2026-06-18 09:09:21 +10:00
test_dockerfile_pid1_reaping.py	fix(docker): pre-install matrix deps in Docker image (#30399) (#42413)	2026-06-10 19:23:06 +10:00
test_env_passthrough.py
test_env_probe.py
test_execute_code_approval_cluster.py	fix(approval): check is_approved in execute_code guard (#39275)	2026-06-04 19:40:30 -07:00
test_feishu_tools.py
test_file_operations.py	feat(search_files): headroom compression evaluation report + lossless densification (#47866)	2026-06-17 13:45:25 -07:00
test_file_operations_edge_cases.py	perf(read_file): compact line-number gutter — ~14% fewer tokens per read (#35368)	2026-05-30 07:01:22 -07:00
test_file_ops_cwd_tracking.py
test_file_read_guards.py	fix(file): anchor device symlink guard to task cwd	2026-06-21 12:16:10 -07:00
test_file_staleness.py
test_file_state_registry.py
test_file_sync.py
test_file_sync_back.py
test_file_sync_perf.py
test_file_tools.py	fix(file): reject read_file line-numbered writeback	2026-06-21 11:55:59 -07:00
test_file_tools_container_config.py	fix(tools): respect session cwd in file tools	2026-06-15 14:00:42 +05:30
test_file_tools_cwd_resolution.py	fix(tools): isolate per-session worktree cwd	2026-06-25 16:40:27 -05:00
test_file_tools_live.py
test_file_tools_tilde_profile.py	fix(file_tools): resolve tilde using profile home for file operations (#48552)	2026-06-23 03:17:47 +05:30
test_file_write_safety.py	fix(file-tools): handle UTF-8 BOM in read_file / write_file / patch (#35278)	2026-05-30 06:25:50 -07:00
test_force_dangerous_override.py
test_fuzzy_match.py	fix(fuzzy-match): preserve boundary space after whitespace-normalized match	2026-06-26 01:55:27 +05:30
test_gateway_cwd_contract.py	test(tools): characterize tool-surface TERMINAL_CWD contract (#29265)	2026-06-01 16:55:04 -07:00
test_hardline_blocklist.py
test_heartbeat_stale_thresholds.py
test_hidden_dir_filter.py
test_homeassistant_tool.py
test_image_generation.py	krea	2026-06-25 12:38:33 -07:00
test_image_generation_artifacts.py	feat(image-gen): add image-to-image / editing to image_generate (#48705)	2026-06-18 22:13:07 -07:00
test_image_generation_env.py
test_image_generation_image_to_image.py	fix(tools): never let a model whitelist strip the prompt / source images	2026-06-19 16:59:54 -07:00
test_image_generation_plugin_dispatch.py
test_init_session_cwd_respect.py
test_interrupt.py	test(interrupt): assert no leaked tid instead of no-op block	2026-05-30 07:28:11 -07:00
test_kanban_redaction.py	fix(security): redact secrets in kanban tool payloads before persistence	2026-06-21 12:02:30 -07:00
test_kanban_tools.py	refactor(kanban): fold worker/orchestrator skills into injected guidance (#50473)	2026-06-21 17:06:48 -07:00
test_lazy_deps.py
test_lazy_deps_durable_target.py	test(lazy-deps): make durable-target tests network-free	2026-06-25 09:20:13 +10:00
test_line_ending_preservation.py
test_llm_content_none_guard.py	feat(moa): expose MoA presets as selectable virtual models (#46081)	2026-06-25 13:52:06 -07:00
test_local_background_child_hang.py
test_local_env_blocklist.py	fix(terminal): make hermes install dir reachable in subshell PATH (#50534)	2026-06-21 20:00:06 -07:00
test_local_env_cwd_recovery.py
test_local_env_windows_msys.py
test_local_interrupt_cleanup.py
test_local_shell_init.py	fix(coding): teach agents terminal env state persists	2026-06-11 19:50:08 -05:00
test_local_tempdir.py
test_managed_browserbase_and_modal.py	test(approval): regression for shell-escape denylist bypass (#36846, #36847)	2026-06-07 03:57:21 -07:00
test_managed_media_gateways.py
test_managed_modal_environment.py
test_managed_tool_gateway.py	fix(managed-gateway): keep tool availability scans off the Nous token-refresh path	2026-05-30 07:58:08 -07:00
test_mcp_cancelled_error_propagation.py
test_mcp_capability_gating.py	test(mcp): cover 'unknown method' ping keepalive fallback (#50028)	2026-06-21 16:02:56 +05:30
test_mcp_circuit_breaker.py
test_mcp_client_cert.py
test_mcp_dynamic_discovery.py
test_mcp_elicitation.py	feat(tools): MCP elicitation handler with gateway-aware approval routing	2026-06-19 11:46:25 -07:00
test_mcp_empty_error_message.py
test_mcp_image_content.py
test_mcp_invalid_url.py
test_mcp_loop_profile_override.py	fix(mcp): propagate HERMES_HOME override onto the MCP event loop (#44220)	2026-06-11 04:37:01 -07:00
test_mcp_oauth.py	fix(mcp): auto-recover from invalid_client on stale OAuth client registration	2026-06-26 00:35:27 -07:00
test_mcp_oauth_bidirectional.py
test_mcp_oauth_cold_load_expiry.py
test_mcp_oauth_integration.py	fix(mcp): fail fast for noninteractive oauth without tokens	2026-06-15 04:22:07 -07:00
test_mcp_oauth_manager.py	test(mcp): make invalid_client tests interactive under hermetic env	2026-06-26 00:35:27 -07:00
test_mcp_oauth_metadata.py
test_mcp_preflight_content_type.py	fix(mcp): make non-MCP HTTP endpoint fast-fail robust and non-retryable	2026-06-01 19:49:50 -07:00
test_mcp_probe.py	fix(mcp): preserve loop during probes	2026-06-14 02:09:45 -07:00
test_mcp_reconnect_signal.py
test_mcp_sse_transport.py
test_mcp_stability.py	fix(mcp): skip killpg when child shares gateway's process group (#47134)	2026-06-24 00:52:18 +05:30
test_mcp_structured_content.py
test_mcp_tool.py	refactor: remove agent-callable send_message tool (#47856)	2026-06-17 07:11:23 -07:00
test_mcp_tool_401_handling.py
test_mcp_tool_issue_948.py	fix(mcp): run OSV malware preflight off the event loop with a bounded timeout (#29184)	2026-06-25 23:30:41 +05:30
test_mcp_tool_session_expired.py
test_mcp_utility_capability_gating.py
test_memory_tool.py	fix(memory): skip drift guard for add (append-only) action (#42874)	2026-06-25 00:51:12 +05:30
test_memory_tool_import_fallback.py
test_memory_tool_schema.py	feat(memory): batch operations for single-turn memory updates (#48507)	2026-06-18 10:19:33 -07:00
test_microsoft_graph_auth.py
test_microsoft_graph_client.py
test_modal_bulk_upload.py
test_modal_sandbox_fixes.py	fix(terminal): sanitize host/relative cwd OVERRIDE before it reaches docker run -w (#50636)	2026-06-25 02:33:40 +00:00
test_modal_snapshot_isolation.py
test_notify_on_complete.py	fix(process): keep CLI drain dedup after poll goes read-only (#10156)	2026-06-21 11:11:23 -07:00
test_osv_check.py	fix(osv_check): honor npx --package/-p install target when parsing package arg (#40567)	2026-06-06 18:30:39 -07:00
test_parse_env_var.py
test_patch_failure_tracking.py
test_patch_parser.py
test_pr_6656_regressions.py
test_process_registry.py	test(windows): align gateway restart CI coverage	2026-06-25 14:42:38 -07:00
test_read_extract.py	feat(read): extract notebook and office documents (#37082)	2026-06-13 14:42:51 -07:00
test_read_loop_detection.py	feat(search_files): headroom compression evaluation report + lossless densification (#47866)	2026-06-17 13:45:25 -07:00
test_refresh_agent_mcp_tools.py	fix(mcp): address adversarial review round 2 (stale-publish race, parity holes)	2026-06-19 11:57:43 -07:00
test_registry.py
test_resolve_path.py
test_schema_sanitizer.py	fix(tools): strip default from $ref nodes in tool schemas	2026-06-12 00:30:51 -05:00
test_search_budget_truncation.py	fix(search): keep partial results on search timeout (#36142)	2026-06-13 14:35:21 -07:00
test_search_error_guard.py	fix: warn on line-oriented newline search patterns	2026-06-20 23:23:47 -07:00
test_search_hidden_dirs.py
test_send_message_missing_platforms.py	refactor(gateway): migrate slack/dingtalk/whatsapp/matrix/feishu/telegram/wecom/email/sms adapters to bundled plugins	2026-06-20 10:26:45 -07:00
test_send_message_react.py	feat(messaging): expose action='unreact' in send_message + react dispatch tests	2026-06-12 01:07:38 -07:00
test_send_message_target_parse.py	fix: harden WhatsApp target alias salvage	2026-06-15 05:51:47 -07:00
test_send_message_telegram_proxy.py
test_send_message_tool.py	fix(telegram): preserve Bot API update queue on watcher reconnect	2026-06-25 21:29:57 -07:00
test_session_search.py	fix(tools): let session_search match session titles	2026-06-26 01:12:26 +05:30
test_shared_container_task_id.py	fix(terminal): collapse CWD-only overrides to shared container	2026-06-07 23:04:54 -07:00
test_signal_media.py	refactor(gateway): migrate slack/dingtalk/whatsapp/matrix/feishu/telegram/wecom/email/sms adapters to bundled plugins	2026-06-20 10:26:45 -07:00
test_singularity_preflight.py
test_skill_env_passthrough.py
test_skill_improvements.py
test_skill_manager_tool.py	fix(curator): protect external skills from background curation	2026-06-25 22:03:02 -07:00
test_skill_provenance.py
test_skill_size_limits.py
test_skill_usage.py	fix(curator): protect external skills from background curation	2026-06-25 22:03:02 -07:00
test_skill_view_path_check.py
test_skill_view_traversal.py	fix(skills): block path traversal via skill_view name argument (#40566)	2026-06-06 18:29:52 -07:00
test_skills_ast_audit.py
test_skills_guard.py	fix(skills-guard): stop flagging benign skill content + honor skill ignore files (#36231)	2026-06-01 01:58:48 -07:00
test_skills_hub.py	fix(skills): honour overall_timeout and bound ClawHub catalog walk	2026-06-09 23:22:54 -07:00
test_skills_hub_browse_sh.py
test_skills_hub_clawhub.py	fix(skills): let ClawHub index build walk past the 12s browse budget (#44500)	2026-06-11 18:03:11 -04:00
test_skills_list_modified_diff.py	test(skills): cover list-modified + diff for bundled skills	2026-06-18 12:26:20 +05:30
test_skills_sync.py	fix(skills): refuse SKILLS_DIR root in rmtree guard, not just outside-tree	2026-06-18 08:53:35 -07:00
test_skills_tool.py	fix(skills): ignore support docs in skill discovery	2026-06-16 13:08:34 -07:00
test_slash_confirm.py
test_smart_approval_injection.py	fix(security): harden smart approval guard against prompt injection	2026-06-21 16:39:48 -07:00
test_spotify_client.py	docs(spotify): document 6-month re-auth cycle and add client-level invalid_grant test	2026-06-20 23:23:47 -07:00
test_ssh_bulk_upload.py	fix(ssh): handle WinError 1314 symlink failure with shutil.copy2 fallback	2026-06-04 18:06:21 -07:00
test_ssh_environment.py
test_stage2_hook_gateway_bootstrap_state.py	fix(docker): skip symlinked stage2 chown targets (#52789)	2026-06-26 12:09:52 +10:00
test_stage2_hook_immutable_install.py	Harden hosted Docker install tree against self-modification (#47490)	2026-06-18 09:09:21 +10:00
test_stage2_hook_install_method_stamp.py	fix(update): scope install-method stamp to the code tree, not $HERMES_HOME (#48188)	2026-06-18 14:14:41 +10:00
test_stage2_hook_log_dir_seed.py	fix(s6): make profile gateway log parent writable (#46291)	2026-06-15 13:47:05 +10:00
test_stage2_hook_puid_pgid.py	fix(docker): run config migrations during container boot (salvage #35508) (#36627)	2026-06-04 11:11:27 +10:00
test_stage2_hook_seed_one_symlinks.py	fix(docker): skip symlinked stage2 chown targets (#52789)	2026-06-26 12:09:52 +10:00
test_stage2_hook_symlink_chown.py	fix(docker): skip symlinked stage2 chown targets (#52789)	2026-06-26 12:09:52 +10:00
test_stage2_hook_toplevel_chown.py	fix(docker): skip symlinked stage2 chown targets (#52789)	2026-06-26 12:09:52 +10:00
test_stage2_hook_unraid_uid.py	fix(docker): accept Unraid uid mappings (#38098)	2026-06-04 12:38:24 +10:00
test_stage2_hook_user_flag_guard.py	fix(docker): reject unsupported --user <arbitrary-uid> start with clear guidance (#38579)	2026-06-04 10:51:51 +10:00
test_subprocess_stdin_guard.py	test: guard OAuth setup-token stays interactive + marker exemption	2026-06-08 22:46:57 -07:00
test_symlink_prefix_confusion.py
test_sync_back_backends.py
test_terminal_compound_background.py
test_terminal_config_env_sync.py	fix(terminal): bridge docker_extra_args to TERMINAL_DOCKER_EXTRA_ARGS in CLI + gateway (#50631)	2026-06-22 15:41:23 +10:00
test_terminal_exit_semantics.py
test_terminal_foreground_timeout_cap.py
test_terminal_none_command_guard.py
test_terminal_output_transform_hook.py
test_terminal_requirements.py
test_terminal_task_cwd.py	fix(tools): isolate per-session worktree cwd	2026-06-25 16:40:27 -05:00
test_terminal_timeout_output.py
test_terminal_tool.py	test(terminal): cover sudo cache invalidation and multi-invocation piping	2026-06-25 23:08:48 +05:30
test_terminal_tool_pty_fallback.py
test_terminal_tool_requirements.py
test_threaded_process_handle.py
test_threat_patterns.py	fix(security): stop blocking AGENTS.md/SOUL.md that name an agent 'Praxis' (#52925)	2026-06-26 00:36:01 -07:00
test_tirith_security.py	fix(tools): catch mkdtemp OSError in tirith install to prevent unbounded retry and temp-dir leak (#51826)	2026-06-25 02:13:56 +05:30
test_todo_tool.py	hardening(todo): bound TodoStore item content length and count	2026-06-07 18:06:27 -07:00
test_todo_tool_type_coercion.py	fix(tools): defensive type coercion in todo_tool for malformed LLM input (#14185)	2026-06-25 23:42:42 +05:30
test_tool_backend_helpers.py
test_tool_output_limits.py	fix(gateway): detach pending_watchers batch + normalize LRU caches + align test fixtures + AUTHOR_MAP	2026-05-31 00:50:19 -07:00
test_tool_result_storage.py
test_tool_search.py	test: restore unrelated trailing newlines in cwd/tool-search tests	2026-06-03 06:36:46 -07:00
test_transcription.py
test_transcription_command_providers.py
test_transcription_dotenv_fallback.py	Add Hermes desktop app (#20059)	2026-05-31 17:46:56 -05:00
test_transcription_plugin_dispatch.py
test_transcription_tools.py	Add Hermes desktop app (#20059)	2026-05-31 17:46:56 -05:00
test_tts_command_providers.py
test_tts_dotenv_fallback.py
test_tts_gemini.py	feat(tts): add Gemini audio tag rewrite	2026-06-10 02:57:39 -07:00
test_tts_kittentts.py
test_tts_max_text_length.py	test: port voice-reply suffix assertions, fix change-detector cap test, add AUTHOR_MAP entry	2026-06-10 02:57:39 -07:00
test_tts_mistral.py
test_tts_opus_routing.py
test_tts_path_traversal.py
test_tts_piper.py	feat(tts): expose speaker_id on built-in Piper provider	2026-06-19 07:04:58 -07:00
test_tts_plugin_dispatch.py
test_tts_speed.py
test_tts_xai_speech_tags.py	feat(tts): add xAI TTS speed and optimize_streaming_latency config knobs	2026-06-19 07:26:56 -07:00
test_url_safety.py	test(url-safety): cover IPv6 scope-ID strip + fail-closed in URL guards	2026-06-21 13:56:35 -07:00
test_video_analyze.py
test_video_generation_dispatch.py
test_video_generation_dynamic_schema.py
test_video_generation_tool_surface_matrix.py	fix(xai): route video models by modality	2026-06-01 19:00:30 -07:00
test_vision_native_fast_path.py	fix(vision): cap embedded image size before it wedges a session (#35732)	2026-05-31 00:12:09 -07:00
test_vision_tools.py	fix(web): run URL SSRF checks off the event loop in async paths	2026-06-04 18:04:47 -07:00
test_voice_cli_integration.py
test_voice_mode.py	fix(voice): allow /voice over SSH when a sound server is reachable (#35719)	2026-05-31 00:11:52 -07:00
test_watch_patterns.py
test_web_providers.py	revert(web): remove keyless Parallel search fallback (#46350)	2026-06-14 16:47:57 -07:00
test_web_providers_brave_free.py	fix(test): patch async_is_safe_url in web-provider SSRF mocks	2026-06-04 18:04:47 -07:00
test_web_providers_ddgs.py	fix(ddgs): bound DuckDuckGo search with a wall-clock timeout (#36776)	2026-06-25 01:45:06 +05:30
test_web_providers_searxng.py	revert(web): remove keyless Parallel search fallback (#46350)	2026-06-14 16:47:57 -07:00
test_web_providers_xai.py
test_web_tools_config.py	revert(web): remove keyless Parallel search fallback (#46350)	2026-06-14 16:47:57 -07:00
test_web_tools_tavily.py
test_website_policy.py	fix(web): run URL SSRF checks off the event loop in async paths	2026-06-04 18:04:47 -07:00
test_windows_compat.py
test_windows_native_support.py	test(windows): align gateway restart CI coverage	2026-06-25 14:42:38 -07:00
test_write_approval.py	fix(memory): honor configured char limits in the no-agent on-disk store	2026-06-23 03:10:53 +05:30
test_write_deny.py	fix(file-safety): relax user-write deny policy (#45947)	2026-06-14 02:07:32 -07:00
test_x_search_tool.py
test_yolo_mode.py
test_zombie_process_cleanup.py	fix(session): finalize owned SQLite session rows on AIAgent.close()	2026-06-21 11:35:09 -07:00