Teknium 9d08c95464 fix(tools): dedup eviction task_id + workdir cwd leak ... Two independent HIGH-severity correctness bugs found in a core-tools audit, each reproduced live against current main: 1. Read-dedup was never evicted after a write on non-default tasks. _invalidate_dedup_for_path looked up the read-tracker under the correct task_id but resolved the path with _resolve_path(filepath) — which DEFAULTS task_id='default'. The dedup cache is keyed by the task-resolved absolute path, so for any task whose workspace cwd differs from the process cwd (every -w worktree / Desktop / ACP session using relative paths) the computed key never matched and the stale entry was never removed. A read_file after a write_file/patch could then return the OLD content stub when mtime coincided. Fix: pass task_id through. 2. A per-command workdir override permanently hijacked the session cwd. The post-command dual-write unconditionally recorded env.cwd (stamped to the transient workdir) into the durable session-cwd store, so every later command that omitted workdir inherited the one-off directory — contradicting the documented 'Working directory for this command' contract. Fix: skip the session-cwd record when workdir was explicitly supplied. Both verified with sabotage-checked regression tests (fail without the fix).		2026-08-01 15:38:57 -07:00
..
computer_use	fix(computer_use): resolve gateway session-key namespace in permission-mode lookup	2026-07-29 12:19:37 -07:00
environments	feat(terminal): raise Docker sandbox /dev/shm to 1g by default (configurable)	2026-07-31 21:31:51 -07:00
neutts_samples	…
wakewords	…
__init__.py	…
ansi_strip.py	…
approval.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
async_delegation.py	fix(state): restore async_delegation.py symbols, keep only journal_mode routing	2026-07-29 18:13:09 -07:00
audio_container.py	…
binary_extensions.py	…
blueprints.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
browser_camofox.py	…
browser_camofox_state.py	…
browser_cdp_tool.py	…
browser_dialog_tool.py	…
browser_supervisor.py	perf(imports): lazy-load heavy SDKs off the cold-start waterfall	2026-07-29 10:54:04 -07:00
browser_tool.py	perf: lazy mcp SDK import + tool-discovery mtime cache + browser_tool import diet	2026-07-29 10:02:03 -07:00
budget_config.py	…
checkpoint_manager.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
clarify_gateway.py	…
clarify_tool.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
close_terminal_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
code_execution_tool.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
computer_use_tool.py	feat(computer_use): align cua-driver 0.10 permission modes	2026-07-29 12:19:37 -07:00
credential_files.py	fix(vision): make desktop image uploads reachable from profile Docker sandboxes (#69575) (#75671)	2026-07-31 17:43:37 -04:00
cronjob_tools.py	fix(cron): close GitHub auth-header exemption abuse in prompt scanner	2026-07-31 22:33:00 -07:00
daemon_pool.py	…
debug_helpers.py	…
delegate_tool.py	fix(delegation): prevent child HERMES_SESSION_ID leak into parent process env	2026-07-31 22:32:55 -07:00
delegation_live_log.py	…
desktop_ui.py	…
discord_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
env_passthrough.py	…
env_probe.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
fal_common.py	…
feishu_doc_tool.py	…
feishu_drive_tool.py	…
file_operations.py	fix(file_ops): harden new-file umask chmod for portability	2026-07-31 14:22:38 +05:30
file_state.py	…
file_tools.py	fix(tools): dedup eviction task_id + workdir cwd leak	2026-08-01 15:38:57 -07:00
flux3_video_tool.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
focus_pane_tool.py	…
fuzzy_match.py	…
homeassistant_tool.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
hook_output_spill.py	fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)	2026-07-29 09:33:48 -07:00
image_generation_tool.py	…
image_source.py	fix(vision): make desktop image uploads reachable from profile Docker sandboxes (#69575) (#75671)	2026-07-31 17:43:37 -04:00
interrupt.py	…
kanban_tools.py	feat(kanban): talk to a running worker without a restart	2026-07-30 07:18:08 -05:00
lazy_deps.py	fix(deps): repair Google transitive security floors (#72108)	2026-07-31 23:18:38 -07:00
managed_tool_gateway.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
mcp_dashboard_oauth.py	…
mcp_oauth.py	perf: lazy mcp SDK import + tool-discovery mtime cache + browser_tool import diet	2026-07-29 10:02:03 -07:00
mcp_oauth_manager.py	…
mcp_stdio_watchdog.py	…
mcp_tool.py	fix(mcp): guard against duplicate spawns and stale connecting entries (#58862)	2026-08-01 11:35:59 +05:30
memory_tool.py	refactor: extract atomic_write_text to utils.py; fix write-failure error handling	2026-07-29 16:49:07 +05:30
microsoft_graph_auth.py	…
microsoft_graph_client.py	refactor: single shared Retry-After parser	2026-07-29 10:13:50 -07:00
neutts_synth.py	fix(voice): reconcile NeuTTS backbone/codec GPU device strings	2026-07-28 14:07:21 -07:00
open_preview_tool.py	…
openrouter_client.py	…
osv_check.py	fix(security): cache OSV malware preflight verdicts and stop double component discovery (#75485)	2026-08-01 10:47:20 -07:00
patch_parser.py	fix(patch): anchor V4A Begin/End Patch markers to full lines	2026-08-01 14:31:48 -07:00
path_security.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
process_registry.py	fix(process): decode background process output with incremental UTF-8 decoders	2026-07-31 21:21:13 -07:00
project_tools.py	…
react_to_message_tool.py	feat(desktop): reactions are opt-in under Settings → Appearance, off by default	2026-07-30 00:08:28 -05:00
read_extract.py	…
read_terminal_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
registry.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
schema_sanitizer.py	fix(schema): preserve dependentRequired property names	2026-07-28 14:37:19 -07:00
send_message_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
session_search_tool.py	fix(sessions): keep kanban worker runs out of the session lists	2026-07-31 13:53:04 -05:00
skill_manager_tool.py	Merge origin/main into feat/hsp-sync-client	2026-07-29 13:01:36 -07:00
skill_provenance.py	…
skill_usage.py	Merge origin/main into feat/hsp-sync-client	2026-07-29 13:01:36 -07:00
skills_ast_audit.py	…
skills_guard.py	fix(security): extend secret redaction to GitLab token families	2026-07-31 21:31:10 -07:00
skills_hub.py	fix(skills-hub): include owner in ClawHub source URLs and add retry on 429 (#51236)	2026-07-31 22:33:11 -07:00
skills_sync.py	…
skills_sync_client.py	fix(sync): read org state from the org endpoints, not the personal ones (#75237)	2026-07-30 22:31:42 -07:00
skills_tool.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
slash_confirm.py	…
terminal_tool.py	fix(tools): dedup eviction task_id + workdir cwd leak	2026-08-01 15:38:57 -07:00
thread_context.py	…
threat_patterns.py	…
tirith_security.py	…
todo_tool.py	…
tool_backend_helpers.py	fix(voice): single scoped resolver — STT/TTS keys fall back to the credential pool	2026-07-28 11:53:09 -07:00
tool_output_limits.py	…
tool_result_storage.py	…
tool_search.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
transcription_tools.py	fix(stt): kill faster-whisper silence hallucinations at the source	2026-07-29 00:01:33 -07:00
tts_streaming.py	fix(tts): route streaming-provider secrets through resolve_provider_secret; bound per-sentence stream bodies at 16 MiB	2026-07-28 22:31:40 -07:00
tts_text_normalize.py	fix(tts): unify TTS text preprocessing behind one shared cleaner	2026-07-28 11:55:01 -07:00
tts_tool.py	feat(voice): calm ambient "thinking" sound while the agent works in voice chat	2026-07-29 08:24:00 -07:00
url_safety.py	fix: scope private URL policy per profile	2026-07-28 14:17:45 -07:00
video_generation_tool.py	…
vision_tools.py	perf(imports): lazy-load heavy SDKs off the cold-start waterfall	2026-07-29 10:54:04 -07:00
voice_mode.py	fix(voice): full-duplex agent-turn listener — interrupt by voice during generation AND playback	2026-07-29 10:08:53 -07:00
wake_word.py	fix(wake): route desktop control and select input devices	2026-07-29 14:04:21 -06:00
web_tools.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
website_policy.py	…
working_diff.py	…
write_approval.py	…
x_search_tool.py	…
xai_http.py	fix(voice): single scoped resolver — STT/TTS keys fall back to the credential pool	2026-07-28 11:53:09 -07:00
xai_video_tools.py	…
yuanbao_tools.py	…