chengyongru d3689d143c fix(agent): prevent safety guard false positives and streamed message drop ...

Three independent fixes for issues exposed by PR #3493:

1. shell.py: allow /dev/* paths in workspace guard
   Commands like `rm file.txt 2>/dev/null` were blocked because
   _extract_absolute_paths captured /dev/null as a path outside
   the workspace. Allow /dev like media_path is already allowed.

2. shell.py: remove | from home_paths regex prefix
   Loki query operator `|~` was misinterpreted as pipe + home
   directory, causing false workspace violation errors.

3. loop.py: change _streamed from blacklist to whitelist
   stop_reason "tool_error" was not in the exclusion set
   {"ask_user", "error"}, so _streamed=True was set on fatal
   errors. channel manager then skipped channel.send() because
   it assumed the content was already streamed — but it never
   was. Whitelist to only {"stop", "end_turn", "max_tokens"}.

Also fixes a pre-existing Windows bug in _spawn where
create_subprocess_exec + list2cmdline breaks commands with
paths containing spaces (e.g. D:\Program Files\python.exe).

Closes: #3599, #3605

2026-05-04 01:25:52 +08:00

..

agent

fix(runner): soft workspace boundary + per-target throttle (#3493 #3599 #3605)

2026-05-04 01:18:39 +08:00

channels

test(webui): cover turn-end streaming regressions

2026-05-03 22:28:40 +08:00

cli

test(cli): cover retry-wait interactive routing

2026-05-03 22:59:08 +08:00

command

fix(commands): intercept non-priority commands during active turn

2026-04-21 21:50:37 +08:00

config

refactor(config): resolve env vars via in-place Pydantic walk

2026-04-22 22:31:40 +08:00

cron

fix(cron): clean persistence lint issues

2026-05-04 00:16:39 +08:00

heartbeat

fix(heartbeat): prevent internal reasoning leaks and finalization fallback in delivery

2026-04-27 18:14:13 +08:00

providers

fix(provider): correct LongCat OpenAI base URL

2026-05-02 01:52:04 +08:00

security

fix(security): add ssrfWhitelist config to unblock Tailscale/CGNAT (#2669)

2026-04-04 19:43:18 +08:00

session

fix: handle Windows PermissionError on directory fsync

2026-04-22 13:19:53 +08:00

tools

fix(agent): prevent safety guard false positives and streamed message drop

2026-05-04 01:25:52 +08:00

utils

fix(runner): soft workspace boundary + per-target throttle (#3493 #3599 #3605)

2026-05-04 01:18:39 +08:00

test_api_attachment.py

fix: two bugs in document extraction pipeline

2026-04-14 13:15:04 +00:00

test_api_stream.py

Fix API stream lifecycle for tool-backed requests

2026-05-01 19:42:52 +08:00

test_build_status.py

fix(status): correct context percentage calculation and sync consolidator

2026-04-16 20:30:39 +08:00

test_context_documents.py

fix: two bugs in document extraction pipeline

2026-04-14 13:15:04 +00:00

test_docker.sh

docs: add core agent line count script and update README with real-time stats

2026-02-06 07:28:39 +00:00

test_document_parsing.py

fix(utils): recurse into PPTX groups and tables when extracting text (#3250)

2026-04-18 12:30:42 +08:00

test_msteams.py

test(msteams): align stale-ref test with sidecar metadata

2026-04-27 07:30:17 +00:00

test_nanobot_facade.py

fix(sdk): route github copilot through oauth provider

2026-04-02 03:46:40 +08:00

test_openai_api.py

feat(api): add SSE streaming for /v1/chat/completions Wire up the existing on_stream/on_stream_end callbacks from process_direct() to emit OpenAI-compatible SSE chunks when stream=true. Non-streaming path is untouched.

2026-04-17 01:54:49 +08:00

test_package_version.py

fix(version): fall back to pyproject in source checkouts

2026-04-08 23:47:36 +08:00

test_tool_contextvars.py

test(tools): accept spawn origin message context

2026-05-01 20:09:59 +08:00

test_truncate_text_shadowing.py

fix(agent): avoid truncate_text name shadowing

2026-04-10 17:36:31 +08:00