Teknium da26ff986b fix(approval): detect recursive rm when flags follow operands ... Port from openai/codex#33464: GNU rm permutes options, so `rm build/ -rf`, `rm build/ -r -f`, and `rm build/ --recursive --force` are equivalent to the flags-first spellings — but every existing rm pattern required the flag group BEFORE the path, so these spellings ran with no approval prompt at all (proven live on main). The hardline floor was NOT affected: protected paths (/, system dirs, $HOME) match regardless of flag position because the hardline path matcher does not require flags. The gap was the approval-prompt layer for arbitrary paths. New DANGEROUS_PATTERNS entry with a tempered operand run: cannot cross command separators (; | & newline), quotes, or a bare -- end-of-options separator (after --, -rf is a literal filename). Flag token must be whitespace-anchored so the r inside long options like --registry does not count. 9 positive + 7 negative shapes in tests; approval cluster (868 tests) green.		2026-07-26 20:58:52 -07:00
..
computer_use	fix(update): never blind-reinstall cua-driver during hermes update	2026-07-26 13:47:35 -07:00
environments	fix(environments): exclude multiline session env from terminal snapshots	2026-07-26 19:30:02 -07:00
neutts_samples	…
__init__.py	…
ansi_strip.py	fix(cli): sanitize terminal escapes when replaying stored history (/resume recap, /status recap)	2026-07-17 04:53:38 -07:00
approval.py	fix(approval): detect recursive rm when flags follow operands	2026-07-26 20:58:52 -07:00
async_delegation.py	feat(delegation): structured stall metadata + live per-child status in /agents	2026-07-26 17:13:52 -07:00
binary_extensions.py	…
blueprints.py	fix: widen UTF-8 BOM tolerance to all sibling frontmatter parsers	2026-07-17 04:52:02 -07:00
browser_camofox.py	…
browser_camofox_state.py	…
browser_cdp_tool.py	…
browser_dialog_tool.py	…
browser_supervisor.py	…
browser_tool.py	fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)	2026-07-24 11:45:57 -07:00
budget_config.py	…
checkpoint_manager.py	feat(diff): cross-surface /diff with staged/all/session modes	2026-07-26 18:28:20 -07:00
clarify_gateway.py	feat(clarify): extend multi-select to gateway text fallback and TUI bridge	2026-07-26 17:46:55 -07:00
clarify_tool.py	fix(clarify): route multi_select through current dispatch paths and harden callback detection	2026-07-26 17:46:55 -07:00
close_terminal_tool.py	…
code_execution_tool.py	fix(kanban): harden delegated-child mutation boundary	2026-07-23 07:33:36 -07:00
computer_use_tool.py	…
credential_files.py	fix(credentials): hoist read-guard import, fail closed loudly (#67665)	2026-07-20 09:21:08 -07:00
cronjob_tools.py	fix(cron): reconcile external provider after a claimed direct run (#70479)	2026-07-24 13:37:04 +10:00
daemon_pool.py	…
debug_helpers.py	…
delegate_tool.py	fix(delegation): route delegated-child API calls inline to avoid nested-pool wedge (#60203)	2026-07-26 20:37:51 -07:00
delegation_live_log.py	fix(delegation): redact credentials in live subagent transcripts	2026-07-20 06:50:31 -07:00
desktop_ui.py	feat(desktop): agent can focus panes + shared desktop-UI event bridge	2026-07-22 12:13:01 -05:00
discord_tool.py	…
env_passthrough.py	…
env_probe.py	fix(windows): re-fit env_probe console suppression to the temp-file _run + add no-window tests (#67690 follow-up)	2026-07-23 18:20:24 -07:00
fal_common.py	…
feishu_doc_tool.py	…
feishu_drive_tool.py	…
file_operations.py	fix(file-safety): distinguish safe-root write denial from credential blocks	2026-07-14 17:09:40 +05:30
file_state.py	…
file_tools.py	refactor(terminal,file-tools): delete legacy env-side cwd tracking (step 4)	2026-07-16 00:18:38 -07:00
focus_pane_tool.py	feat(desktop): agent can focus panes + shared desktop-UI event bridge	2026-07-22 12:13:01 -05:00
fuzzy_match.py	fix(tools): normalize Unicode space family and minus sign in patch fuzzy matching	2026-07-26 20:58:43 -07:00
homeassistant_tool.py	…
hook_output_spill.py	…
image_generation_tool.py	fix(deepinfra): harden multimodal provider routing	2026-07-14 02:59:39 +05:30
image_source.py	…
interrupt.py	…
kanban_tools.py	fix: scope kanban auto-subscriptions to active profile	2026-07-26 16:27:52 -07:00
lazy_deps.py	fix(update): refresh cve dependency pins	2026-07-26 19:29:07 -07:00
managed_tool_gateway.py	fix(windows): sweep remaining bare read_text/write_text sites + linter rule	2026-07-24 17:10:39 -07:00
mcp_dashboard_oauth.py	fix(mcp): preserve live OAuth state during reauth	2026-07-17 04:50:47 -07:00
mcp_oauth.py	fix(mcp): preserve live OAuth state during reauth	2026-07-17 04:50:47 -07:00
mcp_oauth_manager.py	fix(mcp): preserve live OAuth state during reauth	2026-07-17 04:50:47 -07:00
mcp_stdio_watchdog.py	fix(mcp): use direct parent identity in stdio watchdog	2026-07-18 04:15:13 -07:00
mcp_tool.py	feat(mcp): fnmatch glob support in tools.include/exclude filters	2026-07-26 08:26:09 -07:00
memory_tool.py	fix(memory): close second-read drift race and treat invalid UTF-8 as unreadable	2026-07-24 15:58:01 -07:00
microsoft_graph_auth.py	…
microsoft_graph_client.py	…
neutts_synth.py	…
open_preview_tool.py	feat(desktop): agent can focus panes + shared desktop-UI event bridge	2026-07-22 12:13:01 -05:00
openrouter_client.py	…
osv_check.py	…
patch_parser.py	fix(patch): ignore inert context-only hunks (#63678)	2026-07-13 02:42:18 -07:00
path_security.py	…
process_registry.py	fix(process_registry): reader loop no longer hangs when an orphaned grandchild holds the stdout pipe	2026-07-24 15:59:02 -07:00
project_tools.py	…
read_extract.py	…
read_terminal_tool.py	…
registry.py	perf(tools): text prefilter before AST parse in tool discovery	2026-07-13 18:14:15 -04:00
schema_sanitizer.py	fix(tools): rename provider-illegal property keys in tool schemas, reverse-map at dispatch	2026-07-26 08:26:09 -07:00
send_message_tool.py	fix(gateway,tools): add missing .3gp and .webm to video extension sets	2026-07-26 12:52:31 -07:00
session_search_tool.py	fix(session-search): allow scrolling compacted lineage history	2026-07-26 16:18:31 -07:00
skill_manager_tool.py	fix(skills): fail closed on unknown curator ownership	2026-07-25 20:15:37 -07:00
skill_provenance.py	…
skill_usage.py	fix(curator): make the autonomous write policy consistent (#67140)	2026-07-25 19:27:17 -07:00
skills_ast_audit.py	…
skills_guard.py	fix(skills): bind bundles to exact files and origins	2026-07-12 02:59:27 -07:00
skills_hub.py	fix(skills): never change a skill's source registry on update	2026-07-26 19:29:56 -07:00
skills_sync.py	feat(curator): surface unmanaged skills and add `curator adopt`	2026-07-25 18:10:24 -07:00
skills_tool.py	fix(skills): scope 60-char description enforcement to the create path	2026-07-24 07:54:21 -07:00
slash_confirm.py	…
terminal_tool.py	fix(kanban): keep delegated results in worker turn	2026-07-23 08:33:55 -07:00
thread_context.py	…
threat_patterns.py	…
tirith_security.py	fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)	2026-07-24 11:45:57 -07:00
todo_tool.py	fix(compression): preserve synthetic user provenance	2026-07-22 06:56:53 -07:00
tool_backend_helpers.py	…
tool_output_limits.py	…
tool_result_storage.py	…
tool_search.py	feat(tools): tier-2 server-summary hint + per-server listing degradation; 5% default budget	2026-07-26 08:26:09 -07:00
transcription_tools.py	fix(tools): utf-8 decode for STT/TTS command-provider popen_kwargs	2026-07-24 15:47:12 -07:00
tts_streaming.py	feat(voice): speech-interrupted latch in the TTS streaming core	2026-07-22 17:53:06 -05:00
tts_tool.py	fix(tools): utf-8 decode for STT/TTS command-provider popen_kwargs	2026-07-24 15:47:12 -07:00
url_safety.py	fix(url_safety): harden proxy DNS delegation — literal IPs stay fail-closed + regression tests	2026-07-24 10:37:29 -07:00
video_generation_tool.py	feat(providers): Support DeepInfra as an LLM provider	2026-07-14 02:59:39 +05:30
vision_tools.py	fix(security): pin DNS resolutions for SSRF-safe fetches	2026-07-23 11:44:43 -07:00
voice_mode.py	fix: add explicit UTF-8 encoding to all subprocess text=True calls (#53428)	2026-07-24 11:45:57 -07:00
web_tools.py	fix: add encoding="utf-8" to Path.write_text() calls (P1)	2026-07-24 17:10:39 -07:00
website_policy.py	…
working_diff.py	feat(diff): cross-surface /diff with staged/all/session modes	2026-07-26 18:28:20 -07:00
write_approval.py	…
x_search_tool.py	docs(xai): clarify x_search vs xurl routing without schema cross-refs	2026-07-23 21:06:47 -07:00
xai_http.py	fix: add UTF-8 encoding to read_text/write_text in tools/ and agent/	2026-07-24 17:10:39 -07:00
xai_video_tools.py	…
yuanbao_tools.py	…