odysseus

mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-07-09 12:07:18 +00:00

Files

T

Ashvin ba43c73d2a fix(agent): confine glob literal lookups to the search root (#5010 )

GlobTool resolves its search root through _resolve_search_root (which
confines it to the workspace or default allowlist), but the literal
fast-path joined the model-supplied pattern onto that root without
re-confining it. os.path.join lets an absolute pattern or one containing
../ escape the root, and normpath collapsed the .. segments, so glob
returned the absolute path of arbitrary host files once they existed --
an existence/path oracle that bypasses the confinement read_file,
write_file, grep, and ls all enforce.

Keep the literal lookup inside the root via a commonpath containment
check; an escaping literal falls through to the os.walk matcher, which
only ever yields paths under the root. Wildcard matching was already
confined.

2026-06-30 17:49:53 +01:00

__init__.py

fix(agent): execute fenced tool calls with inline args and route bare email tool names (#3681 )

2026-06-30 16:50:32 +01:00

admin_tools.py

fix(agent): execute fenced tool calls with inline args and route bare email tool names (#3681 )

2026-06-30 16:50:32 +01:00

bg_job_tools.py

feat(agent): add manage_bg_jobs tool to inspect and kill background bash jobs (#4577 )

2026-06-19 00:28:22 -07:00

document_tools.py

fix: improve uploaded document retrieval and deep research reuse (#4784 )