Teknium 23526148d1 fix(terminal): bridge terminal.backend config in serve/desktop processes lacking a launcher env bridge ... terminal_tool reads all settings from TERMINAL_* env vars, bridged from config.yaml by the CLI, gateway, and TUI-PTY launchers. Processes that skip every launcher bridge — hermes serve / the Desktop app backend's in-process agents, the desktop cron ticker — saw an unset TERMINAL_ENV and silently ran every command on the host even when config.yaml selects terminal.backend: docker. A user who configured Docker isolation got unsandboxed host execution with no warning. Two layers: - _ensure_terminal_env_bridged() in _get_env_config(): when TERMINAL_ENV is unset, backfill TERMINAL_* from config.yaml via apply_terminal_config_to_env(override=False). Explicit env always wins (honor explicit choice; only fix the accidental fallback). One-shot, fail-open to the historical local default. - cmd_dashboard/serve: run the same bridge at startup so every consumer in the backend process (in-process agents, desktop cron ticker, tui_gateway cwd resolution) sees the bridged env directly. Fixes #63141, #54449, #61115, #65696.		2026-07-16 08:55:10 -07:00
..
computer_use	fix(computer-use): target Linux app windows reliably (#63725)	2026-07-16 00:34:20 +05:30
environments	fix(terminal): stop writing the cwd temp file entirely	2026-07-16 01:28:24 -07:00
neutts_samples	…
__init__.py	…
ansi_strip.py	…
approval.py	fix(approval): scope smart deny owner overrides to one operation	2026-07-13 04:31:55 -07:00
async_delegation.py	fix(delegation): fail closed on restored completions + stamp CLI dispatch identity	2026-07-14 22:14:10 -07:00
binary_extensions.py	…
blueprints.py	…
browser_camofox.py	…
browser_camofox_state.py	…
browser_cdp_tool.py	…
browser_dialog_tool.py	…
browser_supervisor.py	…
browser_tool.py	…
budget_config.py	…
checkpoint_manager.py	…
clarify_gateway.py	…
clarify_tool.py	…
close_terminal_tool.py	…
code_execution_tool.py	fix(security): widen non-ASCII compare_digest crash fix to all sibling sites	2026-07-16 07:22:24 -07:00
computer_use_tool.py	…
credential_files.py	…
cronjob_tools.py	fix(cron): stop the ticker from stalling forever on a wedged jobs lock (#60703) (#60855)	2026-07-08 05:13:18 -07:00
daemon_pool.py	…
debug_helpers.py	…
delegate_tool.py	refactor(file-tools): resolve paths against per-session cwd records (step 2)	2026-07-16 00:18:38 -07:00
discord_tool.py	fix(discord): bound REST response reads	2026-07-07 02:40:04 -07:00
env_passthrough.py	…
env_probe.py	perf: cut first-turn time-to-first-token by ~80% (all platforms) (#59332)	2026-07-05 21:37:33 -07:00
fal_common.py	…
feishu_doc_tool.py	…
feishu_drive_tool.py	…
file_operations.py	fix(file-safety): distinguish safe-root write denial from credential blocks	2026-07-14 17:09:40 +05:30
file_state.py	…
file_tools.py	refactor(terminal,file-tools): delete legacy env-side cwd tracking (step 4)	2026-07-16 00:18:38 -07:00
fuzzy_match.py	…
homeassistant_tool.py	…
hook_output_spill.py	…
image_generation_tool.py	fix(deepinfra): harden multimodal provider routing	2026-07-14 02:59:39 +05:30
image_source.py	…
interrupt.py	fix(interrupt): run user-approved commands from a clean interrupt slate	2026-07-06 04:58:42 -07:00
kanban_tools.py	fix(kanban): guard kanban_attach_url against SSRF via tools.url_safety	2026-07-16 07:33:14 -07:00
lazy_deps.py	chore(slack): bump slack-bolt to 1.29.0 and slack-sdk to 3.43.0	2026-07-14 13:58:36 -07:00
managed_tool_gateway.py	…
mcp_oauth.py	fix(mcp): reuse cached oauth redirect port	2026-07-16 07:56:46 -07:00
mcp_oauth_manager.py	fix(mcp): reuse cached oauth redirect port	2026-07-16 07:56:46 -07:00
mcp_stdio_watchdog.py	fix(mcp): guard POSIX-only kill primitives in stdio watchdog for the Windows footgun linter	2026-07-07 15:16:00 -07:00
mcp_tool.py	fix(mcp): use real wire name in ResourceLink marker + surface resource text in isError path	2026-07-14 13:59:38 -07:00
memory_tool.py	fix: default memory null target to memory store (#46356)	2026-07-07 02:10:43 -07:00
microsoft_graph_auth.py	…
microsoft_graph_client.py	…
neutts_synth.py	…
openrouter_client.py	…
osv_check.py	…
patch_parser.py	fix(patch): ignore inert context-only hunks (#63678)	2026-07-13 02:42:18 -07:00
path_security.py	…
process_registry.py	fix(tui): route post-turn completions by owner	2026-07-15 23:51:43 -07:00
project_tools.py	…
read_extract.py	…
read_terminal_tool.py	…
registry.py	perf(tools): text prefilter before AST parse in tool discovery	2026-07-13 18:14:15 -04:00
schema_sanitizer.py	fix(schema): preserve multi-type arrays as anyOf instead of dropping branches	2026-07-07 02:52:17 -07:00
send_message_tool.py	fix(gateway/platforms): migrate all Weixin fallbacks to get_secret() for consistent profile-scoped resolution	2026-07-16 05:39:58 -07:00
session_search_tool.py	…
skill_manager_tool.py	fix(skills): widen call-time skills-dir resolution to skill_manager_tool	2026-07-07 05:14:00 -07:00
skill_provenance.py	…
skill_usage.py	…
skills_ast_audit.py	…
skills_guard.py	fix(skills): bind bundles to exact files and origins	2026-07-12 02:59:27 -07:00
skills_hub.py	fix(skills): bind bundles to exact files and origins	2026-07-12 02:59:27 -07:00
skills_sync.py	…
skills_tool.py	fix: return per-call copies from the skill-discovery cache	2026-07-09 15:38:14 +05:30
slash_confirm.py	…
terminal_tool.py	fix(terminal): bridge terminal.backend config in serve/desktop processes lacking a launcher env bridge	2026-07-16 08:55:10 -07:00
thread_context.py	…
threat_patterns.py	…
tirith_security.py	…
todo_tool.py	…
tool_backend_helpers.py	…
tool_output_limits.py	…
tool_result_storage.py	…
tool_search.py	…
transcription_tools.py	fix(deepinfra): harden multimodal provider routing	2026-07-14 02:59:39 +05:30
tts_tool.py	fix(gemini): restrict TTS client context to official host	2026-07-13 22:26:19 -07:00
url_safety.py	fix: repair URL authority whitespace before web fetches (#46363)	2026-07-07 02:39:36 -07:00
video_generation_tool.py	feat(providers): Support DeepInfra as an LLM provider	2026-07-14 02:59:39 +05:30
vision_tools.py	…
voice_mode.py	…
web_tools.py	fix(web): handle short extract provider results	2026-07-10 19:14:06 +05:30
website_policy.py	…
write_approval.py	…
x_search_tool.py	…
xai_http.py	…
xai_video_tools.py	…
yuanbao_tools.py	…