Victor Kyriazakos 6e76c2698c feat(cron): config-gated agent scheduling in cron context ... Cron-spawned agents have the cronjob toolset unconditionally denied, so scheduled agents cannot create, tune, or remove jobs even when an operator wants exactly that (reconciler-style jobs that manage a team's cron table, follow-up one-shots scheduled from within scheduled work). The denial is loop-prevention policy, not a security boundary: an agent with the terminal toolset can already shell out to the CLI, so the workaround exists but skips every limit and accounting layer. Add cron.allow_agent_scheduling (config.yaml, default false — byte-exact current behavior). When enabled, only 'cronjob' leaves the cron-context denylist; 'messaging' and 'clarify' remain denied as interactivity constraints, and the user-level agent.disabled_toolsets layering is unchanged, so a user denylist entry still beats the gate. The cronjob tool description now states the real policy and the quota bounds instead of a blanket prohibition.		2026-08-13 09:42:39 -07:00
..
dashboard_auth	fix(plugins): isolate ownership by profile	2026-08-12 19:13:32 -07:00
data	feat(plugins): community plugin index + hermes plugins search (#64181)	2026-08-12 18:52:08 -07:00
observability	…
proxy	…
subcommands	feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)	2026-08-12 19:56:44 -07:00
web_routers	feat(computer-use): provision cua-driver at install time and on toolset enable	2026-08-13 02:44:48 -07:00
__init__.py	…
_early_recovery.py	…
_parser.py	…
_scan_venv_blockers.py	…
_startup_fast.py	…
_subprocess_compat.py	fix(hooks): kill the whole process tree when a shell hook times out	2026-08-12 19:44:04 -07:00
active_sessions.py	…
agent_import.py	…
agent_plugins.py	…
approval_mode.py	…
approval_transport.py	fix(plugins): harden approval transport boundaries	2026-08-12 16:26:55 -07:00
approvals_suggest.py	…
approvals_test.py	…
auth.py	fix(auth): tolerate legacy Codex suppression data	2026-08-12 23:47:38 -07:00
auth_commands.py	…
azure_detect.py	…
backup.py	feat: auto-install gateway service during setup and import	2026-08-12 16:59:37 -07:00
bang_shell.py	…
banner.py	…
blueprint_cmd.py	…
browser_connect.py	…
build_info.py	…
bundles.py	…
callbacks.py	…
checkpoints.py	…
claw.py	…
cli_agent_setup_mixin.py	…
cli_billing_mixin.py	…
cli_commands_mixin.py	…
cli_output.py	…
clipboard.py	…
codex_models.py	…
codex_runtime_plugin_migration.py	…
codex_runtime_switch.py	…
colors.py	…
commands.py	Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"	2026-08-12 21:50:35 -07:00
completion.py	…
config.py	feat(cron): surface model drift impact in Desktop	2026-08-12 23:47:22 -07:00
config_defaults.py	feat(cron): config-gated agent scheduling in cron context	2026-08-13 09:42:39 -07:00
config_migrations.py	…
console_engine.py	fix: Windows agent-loop papercuts — path splitting, hashing, autocomplete, screenshots, OS detection (#84419)	2026-08-12 01:45:18 -07:00
container_boot.py	…
context_switch_guard.py	…
copilot_auth.py	…
credential_lifecycle.py	…
cron.py	…
curator.py	…
curses_ui.py	…
dashboard_procs.py	…
dashboard_register.py	…
debug.py	…
default_soul.py	…
dep_ensure.py	fix(cli): teach doctor --live and dep_ensure the npx agent-browser cascade	2026-08-13 02:38:28 -07:00
diagnostics_upload.py	…
dingtalk_auth.py	…
doctor.py	fix(browser): pin npx agent-browser resolution and share a sentinel constant	2026-08-13 02:38:28 -07:00
doctor_live.py	fix(cli): apply Termux carve-out to doctor --live's npx browser probe	2026-08-13 02:38:28 -07:00
dump.py	…
env_loader.py	fix(plugins): isolate ownership by profile	2026-08-12 19:13:32 -07:00
fallback_cmd.py	…
fallback_config.py	…
focus_view.py	…
gateway.py	feat: auto-install gateway service during setup and import	2026-08-12 16:59:37 -07:00
gateway_enroll.py	…
gateway_windows.py	…
goals.py	…
gui_uninstall.py	…
heartbeat.py	…
hooks.py	feat(plugins): add pre_transcription hook and STT prompt threading	2026-08-12 19:01:30 -07:00
init_command.py	…
input_sanitize.py	…
inventory.py	…
journey.py	…
kanban.py	fix(kanban): query show graph before closing database	2026-08-12 13:20:38 +05:30
kanban_db.py	feat(plugins): kanban worker-lifecycle, task-mutation, and dispatch-tick observers	2026-08-13 09:35:52 -07:00
kanban_decompose.py	…
kanban_diagnostics.py	…
kanban_specify.py	…
kanban_swarm.py	…
lifecycle.py	…
linux_desktop_entry.py	…
logs.py	…
main.py	fix(cli): align _build_web_ui's npm closure with hermes update's (ui-tui + web + --include-workspace-root)	2026-08-13 02:38:28 -07:00
managed_scope.py	…
managed_uv.py	…
mcp_catalog.py	…
mcp_config.py	…
mcp_picker.py	…
mcp_security.py	…
mcp_startup.py	…
mem_trim.py	…
memory_oauth.py	…
memory_setup.py	…
middleware.py	…
migrate.py	…
moa_cmd.py	Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"	2026-08-12 21:50:35 -07:00
moa_config.py	Revert "Inspired by Perplexity Computer: Model Council mode for Mixture of Agents"	2026-08-12 21:50:35 -07:00
model_catalog.py	…
model_cost_guard.py	…
model_normalize.py	…
model_search.py	…
model_setup_flows.py	…
model_switch.py	…
models.py	feat: rename Codex OAuth provider label to "ChatGPT or Codex Subscription"	2026-08-13 03:06:08 -07:00
nous_account.py	…
nous_auth_keepalive.py	…
nous_billing.py	…
nous_subscription.py	fix(cli): restore managed-node-path and PATHEXT-aware fallback rungs	2026-08-13 02:38:28 -07:00
npm_engine.py	…
onepassword_secrets_cli.py	…
oneshot.py	…
pairing.py	…
partial_compress.py	…
personality.py	…
pets.py	…
platform_actions.py	feat(plugins): capability-gated ctx.platform_actions facade (#64176)	2026-08-12 20:10:51 -07:00
platforms.py	…
plugin_capabilities.py	feat(plugins): capability-gated ctx.platform_actions facade (#64176)	2026-08-12 20:10:51 -07:00
plugin_dev.py	feat(plugins): manifest v2 — schema version, api_version, inter-plugin deps, pip-dependency declaration seam, config schema (#64165)	2026-08-12 18:39:22 -07:00
plugin_index.py	feat(plugins): community plugin index + hermes plugins search (#64181)	2026-08-12 18:52:08 -07:00
plugin_packs.py	feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)	2026-08-12 19:56:44 -07:00
plugins.py	feat(plugins): rename hook to transform_api_error_classification per #64231 verdict	2026-08-13 09:36:02 -07:00
plugins_cmd.py	feat(plugins): plugin packs — declarative, shareable plugin sets (#64166)	2026-08-12 19:56:44 -07:00
portal_cli.py	…
profile_describer.py	…
profile_distribution.py	…
profiles.py	…
projects_cmd.py	…
projects_db.py	…
prompt_size.py	…
prompt_stash.py	…
provider_catalog.py	…
providers.py	feat: rename Codex OAuth provider label to "ChatGPT or Codex Subscription"	2026-08-13 03:06:08 -07:00
proxy_cli.py	…
psutil_android.py	…
pt_input_extras.py	…
pty_bridge.py	…
pty_session.py	…
relaunch.py	…
resource_limits.py	…
route_identity.py	…
runtime_provider.py	…
secret_prompt.py	…
secrets_cli.py	…
security_advisories.py	…
security_audit.py	…
security_audit_startup.py	…
send_cmd.py	…
service_manager.py	…
session_export.py	…
session_export_html.py	…
session_export_md.py	…
session_filters.py	…
session_listing.py	…
session_lost_and_found.py	fix(sessions): probe sqlite3 CLI for .recover capability, not just PATH presence	2026-08-12 19:43:47 -07:00
session_recap.py	…
session_recovery.py	fix(sessions): recover budget exhaustion + lost_and_found last-resort lane	2026-08-12 19:43:47 -07:00
sessions_cmd.py	fix(sessions): recover budget exhaustion + lost_and_found last-resort lane	2026-08-12 19:43:47 -07:00
setup.py	feat: auto-install gateway service during setup and import	2026-08-12 16:59:37 -07:00
setup_hidden_env.py	…
setup_whatsapp_cloud.py	…
sizefmt.py	…
skills_config.py	…
skills_hub.py	…
skin_cmd.py	…
skin_engine.py	…
slack_cli.py	…
slash_exec.py	…
sqlite_runtime.py	…
sqlite_safe_read.py	…
sqlite_util.py	…
status.py	…
stdio.py	…
suggestions_cmd.py	…
telegram_managed_bot.py	…
timefmt.py	…
timeouts.py	…
tips.py	…
tools_config.py	fix(browser): harden npx agent-browser resolution	2026-08-13 02:38:28 -07:00
toolset_validation.py	…
uninstall.py	…
update_cmd.py	fix(cli): protect root devDependencies from hermes update's scoped npm ci	2026-08-13 02:38:28 -07:00
update_lock.py	…
urllib_security.py	…
vercel_auth.py	…
verify_cmd.py	…
voice.py	…
web_deps.py	…
web_git.py	…
web_models.py	…
web_server.py	feat: rename Codex OAuth provider label to "ChatGPT or Codex Subscription"	2026-08-13 03:06:08 -07:00
webhook.py	…
win_pty_bridge.py	…
windows_ssh_runtime.py	…
write_approval_commands.py	…
xai_retirement.py	…