Teknium eab208db70 feat(hooks): spill oversized hook-injected context to disk (#20468) ... Port from openai/codex#21069 ("Spill large hook outputs from context"). Both shell hooks and Python plugins can return {"context": "..."} from pre_llm_call, which gets appended to the current turn's user message on every subsequent API call. A plugin that emits a large blob inflates every turn and blows out the prompt cache prefix. - tools/hook_output_spill.py: shared helper that writes oversized context to $HERMES_HOME/hook_outputs/<session_id>/<uuid>.txt and returns a head/tail preview plus the saved path. Never raises. - agent/turn_context.py: apply the cap at the pre_llm_call aggregation site (moved here from run_agent.py since the original PR), covering both Python plugins and shell hooks. - agent/shell_hooks.py: reserve output_spill as a sub-key under hooks: so the config block doesn't emit unknown-hook-event warnings. - Docs: document the cap + config in build-a-hermes-plugin.md. Config (behaviour-preserving when absent): hooks.output_spill: enabled/max_chars/preview_head/preview_tail/directory Tests: 14 unit tests; shell_hooks (56) and plugins (100) suites green. E2E validated with isolated HERMES_HOME (spill, passthrough, traversal sanitisation, reserved-key skip).		2026-07-05 13:51:26 -07:00
..
__init__.py	…
conftest.py	…
test_accretion_caps.py	…
test_ansi_strip.py	…
test_approval.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
test_approval_heartbeat.py	…
test_approval_interrupt.py	feat(approvals): /deny <reason> relays denial reason to the agent (port nanoclaw#2832) (#54518)	2026-07-05 02:22:08 -07:00
test_approval_plugin_hooks.py	…
test_async_delegation.py	feat(delegate): remove model-facing toolsets arg — subagents always inherit parent's (#56386)	2026-07-01 05:35:26 -07:00
test_base_environment.py	…
test_blueprints.py	…
test_browser_camofox.py	…
test_browser_camofox_auth.py	…
test_browser_camofox_ensure_tab.py	…
test_browser_camofox_persistence.py	…
test_browser_camofox_private_page_guard.py	fix(browser): block Camofox input on private pages	2026-07-03 03:27:47 -07:00
test_browser_camofox_state.py	…
test_browser_camofox_timeout.py	…
test_browser_cdp_override.py	security(browser): enforce cloud-metadata floor on all backends; CDP is non-local	2026-07-01 05:09:35 -07:00
test_browser_cdp_tool.py	fix(browser): apply private-page guard to browser_cdp frame_id routing	2026-07-03 03:27:47 -07:00
test_browser_chromium_autoinstall.py	…
test_browser_chromium_check.py	…
test_browser_cleanup.py	…
test_browser_cloud_fallback.py	…
test_browser_cloud_provider_cache.py	…
test_browser_command_timeout_race.py	…
test_browser_console.py	fix(browser): narrow credential-query denylist to unambiguous names	2026-07-01 05:04:41 -07:00
test_browser_console_ssrf.py	fix(browser): extend private-network guard to browser_console	2026-07-01 05:23:17 -07:00
test_browser_content_none_guard.py	…
test_browser_eval_ssrf.py	fix(browser): guard Camofox eval private pages	2026-07-02 13:10:30 +05:30
test_browser_eval_supervisor_path.py	…
test_browser_get_images_ssrf.py	…
test_browser_hardening.py	…
test_browser_homebrew_paths.py	…
test_browser_hybrid_routing.py	fix(browser): harden browser tool safety boundaries	2026-07-01 05:04:41 -07:00
test_browser_lightpanda.py	…
test_browser_open_timeout.py	…
test_browser_orphan_reaper.py	…
test_browser_private_page_action_guard.py	security(browser): re-check private-network guard after browser_back navigation	2026-07-01 20:01:55 +03:00
test_browser_secret_exfil.py	fix(browser): narrow credential-query denylist to unambiguous names	2026-07-01 05:04:41 -07:00
test_browser_snapshot_ssrf.py	…
test_browser_ssrf_local.py	…
test_browser_supervisor.py	…
test_browser_supervisor_healthcheck.py	…
test_browser_type_redaction.py	…
test_budget_config.py	…
test_checkpoint_manager.py	…
test_clarify_gateway.py	…
test_clarify_tool.py	…
test_clipboard.py	…
test_code_execution.py	fix(code-exec): bind execute_code tool socket to a per-session RPC token	2026-07-01 04:08:37 -07:00
test_code_execution_modes.py	…
test_code_execution_windows_env.py	…
test_command_guards.py	…
test_computer_use.py	fix(computer_use): parse (label) and = "value" AX element label forms	2026-07-05 05:36:31 -07:00
test_computer_use_capture_routing.py	…
test_computer_use_null_pid_windows.py	Fix computer-use crash on X11 windows with null PID	2026-07-04 02:37:33 -07:00
test_computer_use_vision_routing.py	…
test_config_null_guard.py	…
test_container_cwd_sanitize.py	…
test_credential_files.py	…
test_credential_pool_env_fallback.py	…
test_cron_approval_mode.py	…
test_cron_prompt_injection.py	…
test_cronjob_run_immediate.py	…
test_cronjob_tools.py	…
test_cross_profile_guard.py	…
test_daemon_pool.py	fix(cli): reliable interrupts, bounded exit, and exit feedback (#57000)	2026-07-02 04:20:43 -07:00
test_daytona_environment.py	…
test_debug_helpers.py	…
test_delegate.py	fix(security): remove model-controlled delegate ACP transport	2026-07-03 03:27:47 -07:00
test_delegate_composite_toolsets.py	…
test_delegate_subagent_timeout_diagnostic.py	…
test_delegate_summary_budget.py	…
test_delegate_toolset_scope.py	…
test_discord_tool.py	…
test_docker_cgroup_limits.py	…
test_docker_config_migrate.py	…
test_docker_environment.py	Revert "Merge pull request #30179 from NousResearch/feat/iron-proxy"	2026-07-04 13:38:59 -07:00
test_docker_find.py	…
test_docker_orphan_reaper_integration.py	…
test_dockerfile_immutable_install.py	…
test_dockerfile_node_modules_perms.py	…
test_dockerfile_pid1_reaping.py	…
test_env_passthrough.py	…
test_env_probe.py	…
test_execute_code_approval_cluster.py	…
test_feishu_tools.py	…
test_file_operations.py	…
test_file_operations_edge_cases.py	…
test_file_ops_cwd_tracking.py	…
test_file_read_guards.py	fix(security): block /proc/*/auxv and /proc/*/pagemap read leaks	2026-07-01 02:44:53 -07:00
test_file_staleness.py	…
test_file_state_registry.py	…
test_file_sync.py	…
test_file_sync_back.py	…
test_file_sync_perf.py	…
test_file_tools.py	…
test_file_tools_container_config.py	…
test_file_tools_cwd_resolution.py	fix(file-tools): preserve container paths for docker file ops (#56637)	2026-07-03 14:18:20 +10:00
test_file_tools_live.py	…
test_file_tools_tilde_profile.py	…
test_file_write_safety.py	…
test_find_shell.py	…
test_force_dangerous_override.py	…
test_fuzzy_match.py	fix(patch): preserve file Unicode when unicode_normalized strategy matches	2026-07-01 17:48:32 +05:30
test_gateway_cwd_contract.py	…
test_gnu_long_option_abbreviation_bypass.py	…
test_hardline_blocklist.py	fix(approval): require exact ./.. segments in the root-collapse hardline token (#56179)	2026-07-05 02:24:00 -07:00
test_heartbeat_stale_thresholds.py	…
test_hermes_subprocess_env.py	…
test_hidden_dir_filter.py	…
test_homeassistant_tool.py	…
test_hook_output_spill.py	feat(hooks): spill oversized hook-injected context to disk (#20468)	2026-07-05 13:51:26 -07:00
test_image_generation.py	…
test_image_generation_artifacts.py	…
test_image_generation_env.py	…
test_image_generation_image_to_image.py	…
test_image_generation_plugin_dispatch.py	…
test_image_source.py	fix(vision): bound the sandbox exec-read at the ingest cap	2026-07-04 15:30:50 -07:00
test_init_session_cwd_respect.py	…
test_interrupt.py	…
test_kanban_redaction.py	…
test_kanban_tools.py	…
test_lazy_deps.py	fix(update): skip unsupported Matrix refresh on Windows	2026-07-04 13:40:59 -07:00
test_lazy_deps_durable_target.py	…
test_line_ending_preservation.py	…
test_llm_content_none_guard.py	…
test_local_background_child_hang.py	…
test_local_env_blocklist.py	fix(terminal): stop stripping CLAUDE_CODE_OAUTH_TOKEN from spawned subprocesses (#56935)	2026-07-02 02:13:30 -07:00
test_local_env_cwd_recovery.py	…
test_local_env_session_leak.py	fix(tools): close the same session leak on the hermes_subprocess_env spawn surface (review)	2026-07-01 15:42:19 +05:30
test_local_env_windows_msys.py	fix(terminal): also set MSYS2_ARG_CONV_EXCL for MSYS2/Cygwin bash fallback	2026-07-02 11:48:03 -07:00
test_local_interrupt_cleanup.py	…
test_local_shell_init.py	…
test_local_tempdir.py	…
test_managed_browserbase_and_modal.py	…
test_managed_media_gateways.py	fix(tts): coerce direct-only OpenAI model on the managed audio gateway	2026-07-03 05:30:16 -05:00
test_managed_modal_environment.py	…
test_managed_tool_gateway.py	…
test_mcp_cancelled_error_propagation.py	…
test_mcp_capability_gating.py	…
test_mcp_circuit_breaker.py	…
test_mcp_client_cert.py	…
test_mcp_dynamic_discovery.py	feat(mcp): adopt mcp__server__tool naming convention	2026-07-05 13:40:21 -07:00
test_mcp_elicitation.py	…
test_mcp_empty_error_message.py	…
test_mcp_image_content.py	…
test_mcp_invalid_url.py	…
test_mcp_loop_profile_override.py	…
test_mcp_oauth.py	refactor(mcp): DRY the non-interactive OAuth guard + positive-control test	2026-07-04 14:10:33 +05:30
test_mcp_oauth_bidirectional.py	…
test_mcp_oauth_cold_load_expiry.py	…
test_mcp_oauth_integration.py	…
test_mcp_oauth_manager.py	…
test_mcp_oauth_metadata.py	…
test_mcp_preflight_content_type.py	…
test_mcp_probe.py	…
test_mcp_reconnect_signal.py	…
test_mcp_server_log_notifications.py	feat(mcp): surface MCP server log notifications in agent.log (#57416)	2026-07-05 02:06:39 -07:00
test_mcp_sse_transport.py	…
test_mcp_stability.py	…
test_mcp_structured_content.py	…
test_mcp_tool.py	feat(mcp): adopt mcp__server__tool naming convention	2026-07-05 13:40:21 -07:00
test_mcp_tool_401_handling.py	…
test_mcp_tool_issue_948.py	…
test_mcp_tool_session_expired.py	…
test_mcp_utility_capability_gating.py	…
test_memory_tool.py	…
test_memory_tool_import_fallback.py	…
test_memory_tool_schema.py	…
test_microsoft_graph_auth.py	…
test_microsoft_graph_client.py	…
test_modal_bulk_upload.py	…
test_modal_sandbox_fixes.py	…
test_modal_snapshot_isolation.py	…
test_notify_on_complete.py	…
test_osv_check.py	…
test_parse_env_var.py	…
test_patch_failure_tracking.py	…
test_patch_parser.py	…
test_pr_6656_regressions.py	…
test_process_registry.py	…
test_read_extract.py	…
test_read_loop_detection.py	…
test_refresh_agent_mcp_tools.py	…
test_registry.py	fix(security): use caller package root for deregister opt-in policy lookup	2026-07-01 15:37:58 +05:30
test_request_tool_approval.py	feat(plugins): pre_tool_call approve action escalates to human gate	2026-07-05 12:48:11 +05:30
test_resolve_path.py	…
test_schema_sanitizer.py	…
test_search_budget_truncation.py	…
test_search_error_guard.py	…
test_search_hidden_dirs.py	…
test_send_message_missing_platforms.py	…
test_send_message_react.py	…
test_send_message_target_parse.py	…
test_send_message_telegram_proxy.py	…
test_send_message_tool.py	…
test_session_search.py	…
test_shared_container_task_id.py	…
test_shell_bypass_denylist.py	…
test_signal_media.py	…
test_singularity_preflight.py	…
test_skill_env_passthrough.py	…
test_skill_improvements.py	…
test_skill_manager_tool.py	…
test_skill_provenance.py	…
test_skill_size_limits.py	…
test_skill_usage.py	…
test_skill_view_path_check.py	…
test_skill_view_traversal.py	…
test_skills_ast_audit.py	…
test_skills_guard.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
test_skills_hub.py	…
test_skills_hub_browse_sh.py	…
test_skills_hub_clawhub.py	…
test_skills_list_modified_diff.py	…
test_skills_sync.py	…
test_skills_tool.py	…
test_slash_confirm.py	…
test_smart_approval_injection.py	…
test_spotify_client.py	…
test_ssh_bulk_upload.py	…
test_ssh_environment.py	…
test_stage2_hook_seed_one_symlinks.py	…
test_stage2_hook_symlink_chown.py	…
test_subprocess_stdin_guard.py	…
test_symlink_prefix_confusion.py	…
test_sync_back_backends.py	…
test_terminal_compound_background.py	…
test_terminal_config_env_sync.py	…
test_terminal_exit_semantics.py	…
test_terminal_foreground_timeout_cap.py	…
test_terminal_none_command_guard.py	…
test_terminal_output_transform_hook.py	…
test_terminal_requirements.py	…
test_terminal_task_cwd.py	…
test_terminal_timeout_output.py	…
test_terminal_tool.py	fix(ssh): preserve remote tilde cwd	2026-07-04 14:17:11 +05:30
test_terminal_tool_pty_fallback.py	…
test_terminal_tool_requirements.py	…
test_threaded_process_handle.py	…
test_threat_patterns.py	…
test_tirith_security.py	…
test_todo_tool.py	…
test_todo_tool_type_coercion.py	…
test_tool_backend_helpers.py	…
test_tool_output_limits.py	…
test_tool_result_storage.py	…
test_tool_search.py	…
test_transcription.py	…
test_transcription_command_providers.py	…
test_transcription_dotenv_fallback.py	…
test_transcription_plugin_dispatch.py	…
test_transcription_tools.py	…
test_tts_command_providers.py	…
test_tts_dotenv_fallback.py	…
test_tts_gemini.py	…
test_tts_kittentts.py	…
test_tts_max_text_length.py	…
test_tts_mistral.py	…
test_tts_opus_routing.py	…
test_tts_path_traversal.py	…
test_tts_piper.py	…
test_tts_plugin_dispatch.py	…
test_tts_speed.py	fix(tts): coerce direct-only OpenAI model on the managed audio gateway	2026-07-03 05:30:16 -05:00
test_tts_xai_speech_tags.py	…
test_url_safety.py	…
test_video_analyze.py	security(vision): route local-file inputs through the shared credential-read guard	2026-07-05 00:47:54 -07:00
test_video_generation_dispatch.py	…
test_video_generation_dynamic_schema.py	…
test_video_generation_tool_surface_matrix.py	…
test_vision_native_fast_path.py	fix(vision): address review — restore bare relative paths, remove dead code, async I/O	2026-07-04 15:30:50 -07:00
test_vision_tools.py	security(vision): route local-file inputs through the shared credential-read guard	2026-07-05 00:47:54 -07:00
test_voice_cli_integration.py	fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)	2026-07-05 13:42:46 -07:00
test_voice_mode.py	…
test_watch_patterns.py	…
test_web_extract_robustness.py	…
test_web_providers.py	…
test_web_providers_brave_free.py	…
test_web_providers_ddgs.py	…
test_web_providers_searxng.py	…
test_web_providers_xai.py	…
test_web_tools_config.py	test(web_tools): regression for plugin-registered provider availability	2026-07-03 20:14:27 +05:30
test_web_tools_tavily.py	…
test_web_tools_truncate.py	…
test_website_policy.py	…
test_whatsapp_send_message_media.py	…
test_windows_compat.py	…
test_windows_native_support.py	…
test_write_approval.py	…
test_write_deny.py	…
test_x_search_tool.py	…
test_xai_http_storage.py	…
test_yolo_mode.py	…
test_zombie_process_cleanup.py	…