Teknium c61b2e0af7 feat(skills): refuse skill_manage writes on pinned skills (#17562) ... Extend curator's pin flag from 'skip auto-transitions' to 'no agent edits at all'. All five skill_manage mutation actions (edit, patch, delete, write_file, remove_file) now refuse pinned skills with a message pointing the user at `hermes curator unpin <name>`. Motivation: pin used to only stop the curator's own maintenance pass from touching a skill. Nothing prevented the main agent from editing or deleting a pinned skill via skill_manage in-session. This gives users a hard fence against unwanted agent edits — same semantics as curator pinning, extended to the write tool. Create is unaffected (you can't pin a name that doesn't exist yet, and name collisions already error out). Broken sidecars fail open rather than lock the agent out. The schema description advertises the new refusal so models know not to route around it with rename/recreate tricks.		2026-04-29 10:28:25 -07:00
..
browser_providers
environments	fix: address self-review findings for Vercel Sandbox salvage	2026-04-29 07:22:33 -07:00
neutts_samples
__init__.py
ansi_strip.py
approval.py	feat: add Vercel Sandbox backend	2026-04-29 07:22:33 -07:00
binary_extensions.py
browser_camofox_state.py
browser_camofox.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
browser_cdp_tool.py	chore: remove unused imports and dead locals (ruff F401, F841) (#17010)	2026-04-28 06:46:45 -07:00
browser_dialog_tool.py
browser_supervisor.py	chore: remove unused imports and dead locals (ruff F401, F841) (#17010)	2026-04-28 06:46:45 -07:00
browser_tool.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
budget_config.py
checkpoint_manager.py	feat(checkpoints): auto-prune orphan and stale shadow repos at startup (#16303)	2026-04-26 19:05:52 -07:00
clarify_tool.py
code_execution_tool.py	feat: add Vercel Sandbox backend	2026-04-29 07:22:33 -07:00
credential_files.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
cronjob_tools.py	fix(cron): accept list-form deliver values so deliver=['telegram'] works (#17456)	2026-04-29 06:35:34 -07:00
debug_helpers.py
delegate_tool.py	chore: remove unused imports and dead locals (ruff F401, F841) (#17010)	2026-04-28 06:46:45 -07:00
discord_tool.py	fix(discord_tool): coerce limit parameter to int before min() call	2026-04-26 20:48:38 -07:00
env_passthrough.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
feishu_doc_tool.py
feishu_drive_tool.py
file_operations.py	chore: remove unused imports and dead locals (ruff F401, F841) (#17010)	2026-04-28 06:46:45 -07:00
file_state.py
file_tools.py	feat: add Vercel Sandbox backend	2026-04-29 07:22:33 -07:00
fuzzy_match.py
homeassistant_tool.py
image_generation_tool.py
interrupt.py
managed_tool_gateway.py
mcp_oauth_manager.py
mcp_oauth.py
mcp_tool.py	refactor(schema): consolidate nullable-union stripping in schema_sanitizer	2026-04-28 04:58:03 -07:00
memory_tool.py	refactor: consolidate symlink-safe atomic replace into shared helper	2026-04-28 04:58:22 -07:00
mixture_of_agents_tool.py
neutts_synth.py
openrouter_client.py
osv_check.py
patch_parser.py
path_security.py
process_registry.py	fix(process): reconcile session.exited against real child exit in poll/wait (#17430)	2026-04-29 04:59:21 -07:00
registry.py	perf(tools): memoize get_tool_definitions + TTL-cache check_fn results (#17098)	2026-04-28 18:20:17 -07:00
rl_training_tool.py
schema_sanitizer.py	refactor(schema): consolidate nullable-union stripping in schema_sanitizer	2026-04-28 04:58:03 -07:00
send_message_tool.py	feat(yuanbao): wire native text + media delivery into send_message	2026-04-29 04:56:18 -07:00
session_search_tool.py	fix(session-search): exclude current lineage root deterministically in recent mode	2026-04-26 19:03:17 -07:00
skill_manager_tool.py	feat(skills): refuse skill_manage writes on pinned skills (#17562)	2026-04-29 10:28:25 -07:00
skill_usage.py	fix(curator): defense-in-depth gates against bundled/hub skills	2026-04-28 22:33:33 -07:00
skills_guard.py
skills_hub.py	feat(skills): install skills from a direct HTTP(S) URL (#16323)	2026-04-26 20:57:10 -07:00
skills_sync.py	refactor: consolidate symlink-safe atomic replace into shared helper	2026-04-28 04:58:22 -07:00
skills_tool.py	feat: add Vercel Sandbox backend	2026-04-29 07:22:33 -07:00
terminal_tool.py	feat: add Vercel Sandbox backend	2026-04-29 07:22:33 -07:00
tirith_security.py
todo_tool.py
tool_backend_helpers.py	fix(cli): coerce use_gateway config flags in tool routing	2026-04-26 19:02:55 -07:00
tool_output_limits.py
tool_result_storage.py
transcription_tools.py	fix(stt): resolve API keys from ~/.hermes/.env via get_env_value (#17140)	2026-04-29 06:25:20 -07:00
tts_tool.py	fix(tts): tolerate missing hermes_cli.config in tts_tool import	2026-04-29 06:25:20 -07:00
url_safety.py
vision_tools.py	refactor(config): add cfg_get() helper; migrate 20 nested-get call sites (#17304)	2026-04-28 23:17:39 -07:00
voice_mode.py
web_tools.py	perf(tools): memoize get_tool_definitions + TTL-cache check_fn results (#17098)	2026-04-28 18:20:17 -07:00
website_policy.py
xai_http.py
yuanbao_tools.py	chore: remove unused imports and dead locals (ruff F401, F841) (#17010)	2026-04-28 06:46:45 -07:00