otsune 3fccd698fd feat(kanban): attachment toolset + CLI to match the dashboard surface ... The kanban board has had full attachment storage and a dashboard HTTP API (upload/list/download/delete) since #35338, but there was no agent toolset tool and no `hermes kanban` CLI verb for attachments. Agents and scripts that don't go through the dashboard server (or can't touch the DB directly) had no way to create or read real attachments — only links in comments. Close that gap by mirroring the existing comment surface: - `kanban_db.store_attachment_bytes()` — one shared write path (validate name, enforce the 25 MB cap, write the blob under the per-task dir with collision-free naming, insert the metadata row, clean up an orphan blob if the insert fails). `_MAX_ATTACHMENT_BYTES`, `_safe_attachment_name`, and a new `_collision_free_path` move here so the dashboard, the tool, and the CLI all share one implementation and can't drift. - Tools (`tools/kanban_tools.py`): `kanban_attach` (inline base64), `kanban_attach_url` (server-side http/https fetch with the same cap), `kanban_attachments` (list). Write tools respect worker task-ownership; list is read-only. Registered in the `kanban` toolset. - CLI (`hermes_cli/kanban.py`): `attach <id> <path>`, `attachments <id>`, `attach-rm <attachment_id>`. - Dashboard `upload_task_attachment` now imports the shared helpers and uses `_collision_free_path` — behavior identical (still streams to disk with the cap, still 413 on overflow). - Docs (AGENTS.md, kanban-worker skill) and toolset membership updated. Tests: tool round-trip + oversize + bad base64 + ownership; attach_url against a local HTTP fixture incl. oversize-mid-stream and non-http scheme rejection; CLI attach/attachments/attach-rm; shared-helper unit tests; dashboard parity preserved. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-16 07:33:14 -07:00
..
__init__.py	…
conftest.py	…
conftest_dashboard_auth.py	…
test_active_sessions.py	…
test_anthropic_model_flow_stale_oauth.py	…
test_anthropic_oauth_flow.py	…
test_anthropic_oauth_routes_to_messages_api.py	…
test_anthropic_picker_curated.py	…
test_anthropic_provider_persistence.py	…
test_api_key_providers.py	fix(deepinfra): align refresh and TTS availability	2026-07-14 02:59:39 +05:30
test_apply_model_switch_result_context.py	…
test_apply_profile_override.py	…
test_arcee_provider.py	…
test_argparse_flag_propagation.py	fix(cli): preserve -t/-m/--provider/--tui/--dev before chat subcommand	2026-07-11 03:51:43 -07:00
test_at_context_completion_filter.py	…
test_atomic_json_write.py	…
test_atomic_yaml_write.py	…
test_auth_codex_provider.py	…
test_auth_codex_self_heal.py	…
test_auth_commands.py	…
test_auth_loopback_ssh_hint.py	…
test_auth_nous_provider.py	test(auth): pin runtime routing persistence on failure	2026-07-10 17:50:43 +05:30
test_auth_profile_fallback.py	fix(auth): key reentrancy by auth store path	2026-07-16 06:14:56 -07:00
test_auth_provider_gate.py	…
test_auth_qwen_provider.py	…
test_auth_ssl_macos.py	…
test_auth_toctou_file_modes.py	…
test_auth_usable_secret.py	…
test_auth_xai_oauth_provider.py	…
test_authenticated_providers_exhausted_pool.py	refactor(model): centralize picker credential availability	2026-07-12 02:59:14 -07:00
test_aux_config.py	…
test_azure_detect.py	fix(security): secure Azure catalog probes	2026-07-11 12:28:55 +05:30
test_azure_foundry_entra.py	…
test_backup.py	…
test_banner.py	…
test_banner_git_state.py	…
test_banner_pip_update.py	…
test_banner_skills.py	…
test_banner_skills_width.py	…
test_bedrock_model_picker.py	…
test_bedrock_region_scoped_picker.py	fix(bedrock): region-scoped model picker + geo-aware recommendations (#28156)	2026-07-15 09:59:38 -07:00
test_billing_cli.py	…
test_billing_portal_url.py	…
test_billing_scope_stepup.py	…
test_build_info.py	…
test_bundles.py	…
test_chat_skills_flag.py	…
test_claw.py	…
test_clear_stale_base_url.py	…
test_cli_active_session_limit.py	…
test_cli_output.py	…
test_cmd_update.py	fix(cli): don't run Windows npm on WSL update and stop reporting success on Node refresh failure	2026-07-16 04:24:23 -07:00
test_cmd_update_docker.py	…
test_coalesce_session_args.py	…
test_codex_cli_model_picker.py	test(codex-picker): raise max_models so count invariant survives catalog growth	2026-07-10 00:47:51 +05:30
test_codex_models.py	…
test_codex_runtime_plugin_migration.py	…
test_codex_runtime_switch.py	…
test_commands.py	feat(reasoning): add max and ultra effort levels (#62650)	2026-07-12 00:26:49 -07:00
test_completion.py	…
test_config.py	test(config): regression for merge_existing partial saves (#62723)	2026-07-15 04:26:20 -07:00
test_config_drift.py	…
test_config_env_expansion.py	fix(cli): ignore empty config sections	2026-07-09 18:23:18 -07:00
test_config_env_refs.py	…
test_config_validation.py	…
test_configured_builtin_models.py	fix(model): merge configured models into picker rows (#63055)	2026-07-12 03:05:12 -07:00
test_console_engine.py	…
test_container_aware_cli.py	…
test_container_boot.py	fix(container): keep named multiplex gateway slots down (#65368)	2026-07-16 14:30:05 +10:00
test_context_switch_guard.py	…
test_copilot_auth.py	…
test_copilot_catalog_oauth_fallback.py	…
test_copilot_context.py	…
test_copilot_in_model_list.py	…
test_copilot_token_exchange.py	…
test_cron.py	…
test_cron_dashboard_off_loop.py	test(dashboard): pin cron fire + blueprint handlers off the event loop	2026-07-09 14:30:16 +05:30
test_cron_fire_dashboard.py	…
test_cron_parser_builder.py	…
test_ctrlg_editor_submit.py	…
test_curator_archive_prune.py	…
test_curator_recent_run_notice.py	…
test_curator_run.py	…
test_curator_status.py	…
test_curator_usage.py	…
test_curses_arrow_keys.py	…
test_curses_color_compat.py	…
test_curses_ui_fuzzy_rank.py	…
test_curses_ui_search.py	…
test_custom_provider_context_length.py	…
test_custom_provider_extra_headers.py	test(models): patch the secured request seam	2026-07-11 12:28:55 +05:30
test_custom_provider_identity.py	…
test_custom_provider_model_switch.py	…
test_custom_provider_tls.py	…
test_dashboard_admin_endpoints.py	fix(dashboard): add HTTP MCP authentication (#65146)	2026-07-16 00:02:09 +05:30
test_dashboard_auth_401_reauth.py	fix(auth): preserve provider fallback during refresh	2026-07-14 07:02:05 -07:00
test_dashboard_auth_audit.py	…
test_dashboard_auth_cookies.py	fix(auth): preserve provider fallback during refresh	2026-07-14 07:02:05 -07:00
test_dashboard_auth_gate.py	…
test_dashboard_auth_middleware.py	…
test_dashboard_auth_password_login.py	…
test_dashboard_auth_plugin_hook.py	…
test_dashboard_auth_prefix.py	…
test_dashboard_auth_provider_base.py	…
test_dashboard_auth_status_endpoint.py	…
test_dashboard_auth_stub_provider.py	…
test_dashboard_auth_ws_auth.py	…
test_dashboard_auth_ws_tickets.py	…
test_dashboard_browser_safe_imports.py	…
test_dashboard_lifecycle_flags.py	…
test_dashboard_oauth_endpoints_server_gate.py	…
test_dashboard_profiles_nav_label.py	…
test_dashboard_register.py	…
test_dashboard_token_auth.py	…
test_dashboard_tui_backcompat.py	…
test_dashboard_unified_launch.py	…
test_dashboard_web_dist_validation.py	fix: write expanded HERMES_WEB_DIST back for web_server's raw read	2026-07-09 14:48:50 +05:30
test_debug.py	…
test_default_interface_resolution.py	fix(kanban): no-TTY gate in _wants_tui_early — the actual worker-crash fix	2026-07-09 16:13:59 -05:00
test_dep_ensure.py	…
test_deprecated_cwd_warning.py	…
test_destructive_slash_confirm_gate.py	…
test_detect_api_mode_for_url.py	…
test_determine_api_mode_hostname.py	…
test_diagnostics_upload.py	…
test_dingtalk_auth.py	…
test_discord_skill_clamp_warning.py	…
test_doctor.py	test: deflake CI and dev-machine flaky tests in bulk (11 tests, 10 files) (#61816)	2026-07-09 20:03:11 -07:00
test_doctor_command_install.py	…
test_doctor_dedicated_provider_skip.py	…
test_dump_env_visibility.py	…
test_dump_git_commit.py	…
test_dump_terminal_backend.py	…
test_ensure_hermes_home_uid_34107.py	…
test_ensure_utf8_locale.py	…
test_env_custom_keys.py	…
test_env_export_prefix.py	…
test_env_load_cache.py	…
test_env_loader.py	…
test_env_sanitize_on_load.py	…
test_fallback_cmd.py	…
test_fallback_config.py	fix(auth): honor per-entry key_env when resolving fallback providers	2026-07-16 07:19:36 -07:00
test_fireworks_provider.py	fix(providers): align Fireworks integration with project policy	2026-07-11 05:43:35 -07:00
test_gateway.py	…
test_gateway_external_supervisor.py	fix(gateway): preserve external supervisor ownership	2026-07-16 05:08:56 -07:00
test_gateway_linger.py	…
test_gateway_platform_gating.py	…
test_gateway_proc_fallback.py	…
test_gateway_restart_loop.py	…
test_gateway_runtime_health.py	…
test_gateway_s6_dispatch.py	…
test_gateway_service.py	fix(gateway): stop systemd retries on fatal config	2026-07-16 01:19:29 -07:00
test_gateway_service_paths.py	…
test_gateway_windows.py	…
test_gateway_wsl.py	…
test_gemini_free_tier_setup_block.py	…
test_gemini_provider.py	…
test_gmi_provider.py	…
test_goals.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
test_gpt56_registration.py	feat(openai): complete gpt-5.6 E2E — codex catalog + 272K compaction auto-raise	2026-07-10 00:47:51 +05:30
test_graphical_browser_detection.py	…
test_gui_command.py	…
test_gui_uninstall.py	…
test_hooks_cli.py	…
test_ignore_user_config_flags.py	test: deflake CI and dev-machine flaky tests in bulk (11 tests, 10 files) (#61816)	2026-07-09 20:03:11 -07:00
test_image_gen_picker.py	…
test_input_sanitize.py	test(input): preservation regressions and prompt.submit boundary (#62557)	2026-07-15 07:39:42 -07:00
test_install_cua_driver.py	…
test_inventory.py	fix(model): keep configured provider authoritative	2026-07-11 05:43:07 -07:00
test_inventory_pricing.py	…
test_journey_render.py	…
test_kanban_block_kinds.py	…
test_kanban_blocked_sticky.py	…
test_kanban_boards.py	…
test_kanban_cli.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
test_kanban_cli_dispatch_passthrough.py	…
test_kanban_core_functionality.py	feat(kanban): attachment toolset + CLI to match the dashboard surface	2026-07-16 07:33:14 -07:00
test_kanban_db.py	fix(kanban): harden durable artifact handoff	2026-07-12 23:09:41 -07:00
test_kanban_db_init.py	…
test_kanban_decompose.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
test_kanban_decompose_db.py	…
test_kanban_default_assignee.py	…
test_kanban_diagnostics.py	fix(kanban): clear failure/crash diagnostics while a retry is in flight	2026-07-09 16:13:59 -05:00
test_kanban_dispatch_lock.py	…
test_kanban_goal_mode.py	…
test_kanban_init_lock_bounded.py	…
test_kanban_lifecycle_hooks.py	…
test_kanban_notify.py	…
test_kanban_per_profile_cap.py	…
test_kanban_project_link.py	…
test_kanban_promote.py	…
test_kanban_reclaim_claim_lock_guard.py	…
test_kanban_specify.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
test_kanban_specify_db.py	…
test_kanban_swarm.py	…
test_kanban_worker_image_extraction.py	…
test_kanban_worker_spawn_toolsets.py	fix(cli): preserve -t/-m/--provider/--tui/--dev before chat subcommand	2026-07-11 03:51:43 -07:00
test_kanban_worker_terminal_cwd.py	…
test_kanban_write_txn_busy_retry.py	…
test_launcher.py	…
test_list_picker_providers.py	…
test_logs.py	…
test_main_model_custom_provider_normalization.py	fix(web): preserve declared providers in model writes (#63058)	2026-07-12 03:08:08 -07:00
test_managed_installs.py	…
test_managed_scope.py	…
test_managed_scope_cli_config.py	…
test_managed_scope_config.py	…
test_managed_scope_env.py	…
test_managed_scope_loaders.py	…
test_managed_scope_overlay.py	…
test_managed_scope_regression.py	…
test_managed_scope_surfacing.py	…
test_managed_scope_writeguard.py	…
test_managed_uv.py	…
test_mcp_add_command_dest.py	…
test_mcp_catalog.py	feat(mcp): enforce exact version pins across the whole MCP catalog	2026-07-15 04:56:25 -07:00
test_mcp_config.py	fix(dashboard): add HTTP MCP authentication (#65146)	2026-07-16 00:02:09 +05:30
test_mcp_reload_confirm_gate.py	…
test_mcp_security.py	…
test_mcp_startup.py	…
test_mcp_tools_config.py	…
test_memory_providers.py	…
test_memory_reset.py	…
test_memory_setup.py	…
test_memory_setup_provider_arg.py	…
test_migrate_xai.py	…
test_moa_config.py	fix(moa): route per-slot reasoning effort through the canonical parser	2026-07-16 06:14:58 -07:00
test_model_catalog.py	feat(models): catalog-labeled silent default — GLM-5.2 marked "default": true in the model catalog	2026-07-15 00:10:31 -07:00
test_model_cost_guard.py	…
test_model_normalize.py	…
test_model_picker_expensive_confirm.py	…
test_model_picker_viewport.py	…
test_model_provider_persistence.py	…
test_model_switch_configured_provider_routing.py	…
test_model_switch_context_display.py	…
test_model_switch_copilot_api_mode.py	…
test_model_switch_custom_providers.py	test(model): isolate custom provider discovery	2026-07-10 13:10:30 +05:30
test_model_switch_filter_unresolved.py	refactor(model): gate picker rows by runtime capability	2026-07-12 03:04:07 -07:00
test_model_switch_opencode_anthropic.py	…
test_model_switch_persist_default.py	…
test_model_switch_variant_tags.py	…
test_model_validation.py	fix(tests): patch catalog urlopen wrapper in gemini probe tests (#64318)	2026-07-14 03:11:19 -07:00
test_models.py	feat(models): catalog-labeled silent default — GLM-5.2 marked "default": true in the model catalog	2026-07-15 00:10:31 -07:00
test_models_dev_preferred_merge.py	…
test_non_ascii_credential.py	…
test_nous_account.py	…
test_nous_auth_keepalive.py	…
test_nous_auth_status_cache.py	…
test_nous_hermes_non_agentic.py	…
test_nous_inference_url_validation.py	…
test_nous_portal_staging_allowlist.py	…
test_nous_session_validity.py	…
test_nous_subscription.py	…
test_ollama_cloud_auth.py	…
test_ollama_cloud_provider.py	…
test_oneshot_usage_file.py	…
test_openai_codex_model_validation_fallback.py	…
test_openai_picker_curated.py	…
test_opencode_go_flat_namespace.py	…
test_opencode_go_in_model_list.py	…
test_opencode_go_validation_fallback.py	…
test_opencode_zen_model_limit.py	…
test_overlay_slug_resolution.py	…
test_path_completion.py	…
test_pet_toggle.py	…
test_picker_prewarm.py	…
test_pin_kanban_board_env.py	…
test_pip_install_detection.py	…
test_placeholder_usage.py	…
test_plugin_auxiliary_tasks.py	…
test_plugin_cli_registration.py	…
test_plugin_runtime_disable_gate.py	…
test_plugin_scanner_recursion.py	…
test_plugins.py	…
test_plugins_cmd.py	…
test_plugins_cmd_category_discovery.py	…
test_plugins_cmd_enable_disable_nested.py	…
test_plugins_cmd_list.py	…
test_plugins_transcription_registration.py	…
test_plugins_tts_registration.py	…
test_post_setup_gating.py	…
test_profile_describer.py	fix(auxiliary): route direct-create aux callers through call_llm (#65029)	2026-07-15 07:39:17 -07:00
test_profile_distribution.py	…
test_profile_export_credentials.py	…
test_profiles.py	…
test_profiles_s6_hooks.py	…
test_project_plugin_rce_bypass.py	…
test_projects_cli.py	…
test_projects_db.py	…
test_prompt_api_key.py	…
test_prompt_compose_command.py	…
test_prompt_size.py	…
test_provider_catalog.py	…
test_provider_config_validation.py	…
test_provider_groups.py	…
test_provider_live_curated_merge.py	…
test_provider_parity.py	…
test_provider_precedence.py	…
test_proxy.py	…
test_psutil_android_extract.py	…
test_pty_bridge.py	…
test_quarantine_forensic_logging.py	…
test_reasoning_effort_menu.py	…
test_reasoning_full_command.py	…
test_redact_config_bridge.py	…
test_regression_16767.py	…
test_relaunch.py	…
test_resolve_last_session.py	…
test_resolve_provider_openrouter_pool.py	…
test_run_with_idle_timeout.py	…
test_runtime_provider_resolution.py	fix(model): keep configured provider authoritative	2026-07-11 05:43:07 -07:00
test_safe_mode.py	…
test_secret_prompt.py	…
test_secrets_bitwarden_non_tty.py	…
test_security_advisories.py	…
test_security_audit.py	…
test_security_audit_startup.py	…
test_send_cmd.py	…
test_serve_command.py	…
test_service_manager.py	…
test_session_browse.py	…
test_session_export.py	fix(session-export): escape html tool call names	2026-07-09 19:54:02 -07:00
test_session_export_html.py	fix(export): escape tool-call name in HTML session export	2026-07-09 16:46:07 -07:00
test_session_export_html_escape.py	fix(cli): normalize role into a single CSS token for the message class	2026-07-09 19:54:02 -07:00
test_session_export_md.py	…
test_session_filters.py	…
test_session_handoff.py	…
test_session_listing.py	…
test_session_recap.py	…
test_sessions_delete.py	…
test_sessions_export_md_cli.py	…
test_set_config_value.py	feat(config): add get and unset commands	2026-07-16 05:44:43 -07:00
test_setup.py	…
test_setup_agent_settings.py	…
test_setup_blank_slate.py	…
test_setup_hermes_script.py	…
test_setup_irc.py	test: deflake CI and dev-machine flaky tests in bulk (11 tests, 10 files) (#61816)	2026-07-09 20:03:11 -07:00
test_setup_matrix_e2ee.py	…
test_setup_menu_curses_migration.py	…
test_setup_model_provider.py	…
test_setup_noninteractive.py	…
test_setup_ollama_cloud_force_refresh.py	…
test_setup_openclaw_migration.py	…
test_setup_prompt_menus.py	…
test_setup_reconfigure.py	…
test_signal_handler_kanban_worker.py	…
test_skills_config.py	fix(cli): normalize malformed skills config in get_disabled_skills (#61797)	2026-07-09 19:57:54 -07:00
test_skills_hub.py	…
test_skills_install_flags.py	…
test_skills_skip_confirm.py	…
test_skills_subparser.py	…
test_skin_engine.py	…
test_slack_cli.py	fix(slack): complete agent view workspace routing	2026-07-14 13:58:36 -07:00
test_spotify_auth.py	…
test_startup_plugin_gating.py	…
test_status.py	…
test_status_model_provider.py	…
test_status_provider_label.py	…
test_subcommands_batch.py	feat(config): add get and unset commands	2026-07-16 05:44:43 -07:00
test_subcommands_followup.py	…
test_subcommands_profile_gateway.py	fix(gateway): preserve external supervisor ownership	2026-07-16 05:08:56 -07:00
test_subparser_routing_fallback.py	…
test_subprocess_timeouts.py	…
test_suppress_eio_on_interrupt.py	…
test_system_stats_platform.py	…
test_systemd_optional_directives.py	fix(gateway): stop systemd retries on fatal config	2026-07-16 01:19:29 -07:00
test_teams_pipeline_plugin_cli.py	…
test_telegram_managed_bot.py	…
test_tencent_tokenhub_provider.py	…
test_terminal_menu_fallbacks.py	…
test_timeouts.py	…
test_timestamps_command.py	…
test_tips.py	…
test_tool_token_estimation.py	…
test_tools_config.py	…
test_tools_disable_enable.py	fix(tools): don't report platform-restricted toolsets as enabled	2026-07-16 01:17:11 -07:00
test_toolset_validation.py	…
test_tts_picker.py	…
test_tui_bundled.py	…
test_tui_heap_sizing.py	…
test_tui_mouse_residue_suppression.py	…
test_tui_npm_install.py	…
test_tui_resume_flow.py	…
test_uninstall_dry_run.py	…
test_uninstall_node_symlinks.py	…
test_update_autostash.py	…
test_update_check.py	…
test_update_concurrent_quarantine.py	…
test_update_config_clears_custom_fields.py	…
test_update_hangup_protection.py	…
test_update_interrupted_recovery.py	…
test_update_modified_notice.py	…
test_update_post_pull_syntax_guard.py	…
test_update_stale_dashboard.py	…
test_update_venv_health.py	…
test_update_yes_flag.py	…
test_update_zip_atomic_replace.py	…
test_update_zip_symlink_reject.py	…
test_upstage_provider.py	fix(upstage): collapse unknown future efforts to high; behavior-contract tests	2026-07-15 00:09:24 +05:30
test_urllib_security.py	fix(security): order sanitizer after installed hooks	2026-07-11 12:28:55 +05:30
test_user_providers_model_switch.py	…
test_uv_tool_update.py	…
test_verify_console_scripts.py	…
test_verify_core_dependencies.py	…
test_vertex_provider.py	…
test_video_gen_picker.py	…
test_voice_wrapper.py	…
test_web_oauth_dispatch.py	…
test_web_server.py	test(dashboard): cover theme bootstrap CSS render + _serve_index injection	2026-07-16 07:28:22 -07:00
test_web_server_boot_handshake.py	…
test_web_server_console_ws.py	…
test_web_server_cron_profiles.py	fix(cron): scope profile runtime during webhook fire	2026-07-10 11:43:09 +05:30
test_web_server_files.py	…
test_web_server_fs.py	…
test_web_server_gateway_topology.py	…
test_web_server_git.py	…
test_web_server_host_header.py	…
test_web_server_messaging_profiles.py	test: valid-shape Telegram token in port-binding guard fixture	2026-07-16 07:17:55 -07:00
test_web_server_oauth_write.py	…
test_web_server_profile_unification.py	fix(dashboard): add HTTP MCP authentication (#65146)	2026-07-16 00:02:09 +05:30
test_web_server_pty_import.py	…
test_web_server_pty_reconnect.py	…
test_web_server_session_search.py	…
test_web_server_skill_editor.py	…
test_web_server_skills_profiles.py	…
test_web_ui_build.py	…
test_webhook_cli.py	fix(webhook): make dual-stack bind exclusive	2026-07-16 12:36:51 +05:30
test_whatsapp_cloud_setup.py	…
test_whatsapp_onboarding.py	…
test_whatsapp_setup_ordering.py	…
test_win_pty_bridge.py	…
test_windows_native_docs.py	…
test_xai_curated_models.py	…
test_xai_model_flow.py	…
test_xai_oauth_profile_auth.py	…
test_xai_oauth_refresh.py	…
test_xai_oauth_writethrough.py	…
test_xai_provider_labels.py	…
test_xai_retirement.py	…
test_xiaomi_provider.py	…
test_yolo_startup_order.py	fix(cli): set HERMES_YOLO_MODE before plugin discovery at startup	2026-07-09 16:58:37 -07:00