teknium1 e3507ef2ce feat(lazy_deps): install_specs takes constraints and dry_run ...

Plugin dependency installs need two things the shared installer ladder did not
expose: a constraints file (so a plugin can never move a core pin) and a dry run
(so a conflict can be detected before anything is written). Both are threaded
through _venv_pip_install; the durable-target path keeps its own core
constraints and a dry run skips syspath activation and bytecode warming.

2026-09-17 00:11:27 -07:00

..

computer_use

fix(model): preserve unknown custom capabilities

2026-09-16 17:09:50 -07:00

connectors

…

environments

fix(tools): honor false interrupt debug values

2026-09-16 17:21:14 -07:00

neutts_samples

…

wakewords

…

__init__.py

…

AGENTS.md

docs: profile-scope invariant in AGENTS.md — one process serves many profiles; out-of-turn code binds its scope

2026-09-15 10:59:22 -07:00

annotate_preview_tool.py

…

ansi_strip.py

…

apply_layout_tool.py

…

approval_context.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

approval_detection.py

fix: match find/read-tool dynamic words only as unquoted command arguments

2026-09-15 04:17:42 -07:00

approval_floors.py

…

approval_gateway_wait.py

feat(approval): prepare GUI terminal asks before ordered execution

2026-09-16 06:27:23 -05:00

approval_human_wait.py

…

approval_prompt.py

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

approval_smart.py

…

approval.py

fix(serve): expose turn_in_flight as an idle proof for pooled backends

2026-09-17 00:34:50 -05:00

arg_coercion.py

…

async_delegation.py

fix(serve): hold work admission through cooperative retirement

2026-09-17 00:34:50 -05:00

audio_container.py

…

binary_extensions.py

…

blueprints.py

…

bot_failure_reasons.py

fix(bot-mode): the DM delivery retry reads the stream the CLI writes and resumes the persisted row

2026-09-16 17:19:58 -07:00

bot_live_delivery.py

fix(bot-mode): unreadable-ticket skips warn once, tolerate bad UTF-8, keep the sequence mark

2026-09-16 16:55:05 -07:00

bot_mode_dm.py

fix(bot-mode): a renamed primary signs with its friendly name; docs the message_agent target forms

2026-09-16 22:25:33 -07:00

bot_mode_probe.py

fix(bot-mode): a renamed primary signs with its friendly name; docs the message_agent target forms

2026-09-16 22:25:33 -07:00

bot_relay.py

fix(bot-mode): the DM delivery retry reads the stream the CLI writes and resumes the persisted row

2026-09-16 17:19:58 -07:00

browser_camofox_state.py

…

browser_camofox.py

…

browser_cdp_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

browser_dialog_tool.py

…

browser_extension_router.py

…

browser_lightpanda.py

…

browser_supervisor_dialogs.py

…

browser_supervisor_frames.py

…

browser_supervisor.py

fix(browser): one loopback proxy-bypass helper covers child envs and in-process CDP dials

2026-09-15 06:16:38 -07:00

browser_tool_cdp.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

browser_tool_cloud.py

…

browser_tool_eval_policy.py

…

browser_tool_install.py

…

browser_tool_lifecycle.py

fix(browser): atexit hooks stay silent when the origin module is unimportable

2026-09-16 16:57:03 -07:00

browser_tool_lightpanda_fallback.py

…

browser_tool_origin.py

…

browser_tool_real_profile.py

fix: bypass the proxy on loopback HTTP CDP discovery and keep NO_PROXY=* intact

2026-09-15 06:16:38 -07:00

browser_tool_session.py

…

browser_tool_snapshot.py

…

browser_tool_vision.py

…

browser_tool.py

fix(url_safety): refuse fake-ip declarations that overlap reserved address classes

2026-09-16 17:12:11 -07:00

browser_use_cli.py

fix(tools): redact vault values from browser exec output

2026-09-16 17:57:22 -07:00

browser_vault_tool.py

fix(vault): bind manager logins to every saved web origin

2026-09-15 04:56:01 -07:00

budget_config.py

…

checkpoint_manager_profile_rename.py

fix(checkpoints): retry of a partial profile-rename rekey keeps checkpoints taken under the new name

2026-09-16 14:34:22 -07:00

checkpoint_manager.py

refactor(checkpoints): derive the agent-write ledger key in one place

2026-09-16 21:15:09 +05:30

clarify_gateway.py

…

clarify_tool.py

fix(clarify): batch result carries the surface's no-answer notice; trim tests

2026-09-16 17:47:50 -07:00

close_preview_tool.py

…

close_terminal_tool.py

…

code_execution_env.py

fix(tools): preserve Windows child local timezone

2026-09-16 17:14:28 -07:00

code_execution_rpc.py

…

code_execution_tool.py

fix(tools): bound execute_code's lifecycle probe and keep the terminal guard answerable to /stop

2026-09-15 19:09:29 -07:00

code_kernel_remote.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

code_kernel.py

fix(execute_code): subagent kernels survive the LRU cap for the child's lifetime

2026-09-15 03:45:41 -07:00

computer_use_tool.py

…

credential_files.py

…

cronjob_job_args.py

fix(cron): validate script existence and fix profile-aware path in error messages

2026-09-15 04:13:47 -07:00

cronjob_prompt_scan.py

…

cronjob_tools.py

fix: keep api_server approval bridge and cron self-scheduling after presence strip

2026-09-15 03:56:17 -07:00

daemon_pool.py

fix(tools): support daemon pool workers on Python 3.14

2026-09-15 18:41:46 -07:00

debug_helpers.py

…

delegate_tool_child_run.py

fix(delegation): a stale verdict under a configured cap names the stale threshold, not the cap

2026-09-16 16:56:46 -07:00

delegate_tool_config.py

…

delegate_tool_dispatch.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

delegate_tool_progress.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

delegate_tool_registry.py

…

delegate_tool_results.py

…

delegate_tool_tasks.py

…

delegate_tool_toolsets.py

fix(delegate): composite parents can grant their included toolsets to children

2026-09-15 18:40:52 -07:00

delegate_tool.py

fix(delegation): a stale subagent ends the sync delegation wait instead of holding the turn forever

2026-09-16 16:56:46 -07:00

delegation_live_log.py

…

delegation_output_schema.py

fix(delegate_task): return a schema-invalid child's raw text instead of failing the task

2026-09-15 03:45:41 -07:00

desktop_ui.py

…

discord_tool.py

…

drive_preview_tool.py

…

env_passthrough.py

…

env_probe.py

…

fal_common.py

…

feishu_doc_tool.py

…

feishu_drive_tool.py

…

feishu_lark.py

…

file_operations_common.py

…

file_operations_lint.py

…

file_operations_search.py

…

file_operations.py

…

file_state.py

fix: paged, extracted and post-compaction reads count as a write_file baseline

2026-09-15 03:57:24 -07:00

file_tools_paths.py

…

file_tools_read_tracking.py

fix: paged, extracted and post-compaction reads count as a write_file baseline

2026-09-15 03:57:24 -07:00

file_tools_write_guards.py

fix(approval): undelivered or unanswered CLI approval prompts are not user denials

2026-09-15 21:46:37 -07:00

file_tools.py

fix(tools): search_files only defaults None/blank paths, not wrong-typed ones

2026-09-16 17:19:31 -07:00

focus_pane_tool.py

…

fuzzy_match.py

…

homeassistant_tool.py

fix(profiles): side-thread asyncio.run workers keep the caller's profile scope

2026-09-16 16:59:03 -07:00

hook_output_spill.py

…

image_generation_catalog.py

…

image_generation_managed.py

feat(image_gen): route the managed selection by model id across FAL, Krea and Portal

2026-09-16 16:42:47 -07:00

image_generation_tool.py

feat(image_gen): route the managed selection by model id across FAL, Krea and Portal

2026-09-16 16:42:47 -07:00

image_source.py

…

interpreter_shutdown.py

…

interrupt.py

fix(tools): honor false interrupt debug values

2026-09-16 17:21:14 -07:00

kanban_tools_schemas.py

…

kanban_tools.py

fix(kanban): delegate_task children never act on the parent's HERMES_KANBAN_TASK

2026-09-16 10:43:48 -07:00

kanban_toolset_context.py

…

lazy_deps.py

feat(lazy_deps): install_specs takes constraints and dry_run

2026-09-17 00:11:27 -07:00

managed_gateway_auth.py

…

managed_tool_gateway.py

fix(auth): named profiles no longer inherit the root profile's auth.json (#111724)

2026-09-16 14:34:59 -07:00

mcp_dashboard_oauth.py

refactor(tui_gateway): parse the loopback redirect with the shared helper

2026-09-15 13:00:12 +05:30

mcp_death_supervisor.py

…

mcp_oauth_device.py

fix: device OAuth login scans every advertised authorization server

2026-09-15 19:00:42 -07:00

mcp_oauth_manager.py

fix(mcp): refresh expired cold-loaded OAuth tokens

2026-09-15 04:54:30 -07:00

mcp_oauth_provider.py

fix(mcp): Figma OAuth login completes despite the omitted iss parameter

2026-09-15 09:29:00 -07:00

mcp_oauth.py

fix(mcp): treat a non-object client.json as corrupt instead of crashing auth init

2026-09-16 16:50:27 -07:00

mcp_schema_cache.py

…

mcp_tool_agent.py

…

mcp_tool_common.py

…

mcp_tool_config.py

fix(mcp): resolve managed Windows Node launchers (npx.cmd/npm.cmd) for stdio MCP servers

2026-09-15 19:04:29 -07:00

mcp_tool_content.py

…

mcp_tool_discovery.py

fix(mcp): count an adopted shared connection as live in the config reconcile

2026-09-16 17:01:11 -07:00

mcp_tool_errors.py

fix(mcp): count SSE events across boundaries split between chunks

2026-09-16 16:52:05 -07:00

mcp_tool_handlers.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

mcp_tool_health.py

…

mcp_tool_lifecycle.py

refactor(mcp): name the wildcard once in shutdown_mcp_servers

2026-09-16 21:15:37 +05:30

mcp_tool_loop.py

…

mcp_tool_registration.py

…

mcp_tool_sampling.py

…

mcp_tool_schema.py

fix(mcp): repair schema-map keywords per-entry in _repair_object_shape

2026-09-15 04:55:14 -07:00

mcp_tool_scope.py

…

mcp_tool_server_run.py

…

mcp_tool_transport.py

fix: cap, loopback-bypass and share the MCP proxy mounts

2026-09-15 19:05:57 -07:00

mcp_tool.py

fix: key the check_fn cache by the same served-profile predicate as the MCP registry scope

2026-09-15 04:56:40 -07:00

memory_tool_store.py

fix(utils): atomic writers refuse to resurrect a deleted named profile home

2026-09-16 00:32:15 -07:00

memory_tool.py

…

microsoft_graph_auth.py

…

microsoft_graph_client.py

…

neutts_synth.py

…

open_preview_tool.py

…

openrouter_client.py

…

osv_check.py

…

patch_parser.py

…

path_security.py

…

plugin_guard.py

fix: cap only generic sample tokens, one step, last; bump plugin-guard to v4

2026-09-16 17:01:30 -07:00

preview_tool.py

…

process_registry_checkpoint.py

…

process_registry_notifications.py

…

process_registry_results.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

process_registry.py

fix(tools): persist the kill outcome when the reader thread finalises first

2026-09-15 18:38:44 -07:00

project_tools.py

…

pty_query_responder.py

…

react_to_message_tool.py

…

read_extract.py

…

read_preview_tool.py

…

read_terminal_tool.py

…

read_window_tool.py

…

registry.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

schema_sanitizer.py

fix(tools): keep an empty required: [] in sanitized tool schemas

2026-09-15 18:39:09 -07:00

self_repo_guard.py

fix(tools): heredoc-pipe guard sees through fd redirects around the pipe

2026-09-16 17:55:07 -07:00

send_message_senders.py

…

send_message_targets.py

…

send_message_tool.py

…

session_search_tool.py

fix(session_search): forward after/before/exclude_session_ids through the inline executor

2026-09-15 03:58:05 -07:00

shell_heredoc.py

…

skill_ledger.py

fix: validate the skill name before opening its lock; key lock files on a digest

2026-09-15 19:03:33 -07:00

skill_linter.py

…

skill_manager_batch.py

fix(skills): route the skill_manage lock through the existing skill_usage lock helper

2026-09-15 19:03:33 -07:00

skill_manager_guards.py

…

skill_manager_tool.py

fix: no misplaced-text hint for actions without a text slot; lead patch hint with targeted form

2026-09-16 17:14:59 -07:00

skill_provenance.py

…

skill_usage.py

fix(skills): route the skill_manage lock through the existing skill_usage lock helper

2026-09-15 19:03:33 -07:00

skillevaluator_scan.py

…

skills_ast_audit.py

…

skills_guard.py

fix: recognise fences opened inside list items and blockquotes

2026-09-15 19:01:39 -07:00

skills_hub_clawhub.py

…

skills_hub_github.py

refactor(skills): skip wrong-provider taps and give the provider-filter idiom one owner

2026-09-15 14:15:59 +05:30

skills_hub_install.py

…

skills_hub_models.py

…

skills_hub_official.py

fix(skills): give the provider cut one owner inside the parallel walker

2026-09-15 14:15:59 +05:30

skills_hub_search.py

fix: bound the index-miss fallback and skip it under provider filters and index timeouts

2026-09-16 17:43:11 -07:00

skills_hub_skillssh.py

…

skills_hub_sources.py

…

skills_hub.py

…

skills_sync_bundled_ops.py

…

skills_sync_client_org.py

…

skills_sync_client_wire.py

…

skills_sync_client.py

…

skills_sync_optional.py

…

skills_sync.py

fix(profiles): sweep the remaining pre-write mkdirs under the deleted-profile guard

2026-09-16 00:32:15 -07:00

skills_tool_dedup.py

fix: pruned skill_view/read_file results reload after a proactive prune

2026-09-16 17:23:44 -07:00

skills_tool_plugin.py

…

skills_tool_setup.py

fix(skills): honor profile-scoped readiness secrets

2026-09-15 18:33:15 -07:00

skills_tool.py

fix: collapse same-root duplicate skills only when provably the same skill

2026-09-16 17:05:08 -07:00

slash_confirm.py

…

spill_safety.py

…

subagent_worktree.py

…

terminal_hints.py

…

terminal_scope.py

fix(tui_gateway): serve fails closed when hosting a second profile home; profile RPCs bind the full runtime scope

2026-09-15 03:46:29 -07:00

terminal_tool_backends.py

fix: drop env_type from the builders' signature comment

2026-09-16 17:56:08 -07:00

terminal_tool_background.py

fix(gateway): background completions reach the chat while the launching turn is still running

2026-09-15 18:58:30 -07:00

terminal_tool_config.py

…

terminal_tool_guards.py

…

terminal_tool_lifecycle.py

…

terminal_tool_result.py

fix(plugins): only mark a timed-out hook worker abandoned while it still holds its token

2026-09-15 10:48:49 +05:30

terminal_tool_sudo.py

fix(gateway): include command context in sudo password requests

2026-09-15 02:22:22 -05:00

terminal_tool.py

feat(approval): prepare GUI terminal asks before ordered execution

2026-09-16 06:27:23 -05:00

thread_context.py

…

threat_patterns.py

…

tip_tool.py

…

tirith_security.py

…

todo_tool.py

…

tool_backend_helpers.py

…

tool_output_limits.py

…

tool_output_truncate.py

…

tool_result_storage.py

test: fold host spillover verification into the size-probe invariant

2026-09-15 03:41:43 -07:00

tool_search_catalog.py

…

tool_search_validation.py

…

tool_search.py

…

tour_tool.py

…

transcription_audio.py

…

transcription_cloud.py

…

transcription_command.py

…

transcription_common.py

fix(stt): preserve subprocess error details

2026-09-16 17:21:37 -07:00

transcription_local.py

fix(stt): treat a partial whisper cache as a cache miss

2026-09-15 05:36:37 -07:00

transcription_tools.py

fix(stt): consume lazy whisper segments inside the CUDA→CPU retry guard

2026-09-15 18:25:17 -07:00

tts_command_provider.py

…

tts_streaming.py

Port from cline/cline#13329: normalize host-root Gemini base URLs to /v1beta

2026-09-15 03:54:01 -07:00

tts_text_normalize.py

…

tts_tool_delivery.py

…

tts_tool_lifecycle.py

…

tts_tool_local.py

…

tts_tool_openai.py

…

tts_tool_plugins.py

…

tts_tool_providers.py

Port from cline/cline#13329: normalize host-root Gemini base URLs to /v1beta

2026-09-15 03:54:01 -07:00

tts_tool_speaker.py

…

tts_tool.py

…

url_safety.py

fix(url_safety): refuse fake-ip declarations that overlap reserved address classes

2026-09-16 17:12:11 -07:00

video_generation_tool.py

…

vision_tools_image_prep.py

…

vision_tools.py

fix(vision): honor routed tool message veto

2026-09-15 04:48:20 -07:00

voice_client_config.py

…

voice_live.py

…

voice_mode_transcript.py

…

voice_mode.py

…

wake_word_engines.py

…

wake_word.py

…

web_result_cache.py

…

web_tools_extract.py

fix(web): key extract cache on metadata.sourceURL too, pin redirect case

2026-09-15 18:42:38 -07:00

web_tools_rescue.py

fix(web): rescue eligibility asks the provider whether the ring was walked

2026-09-15 18:43:05 -07:00

web_tools_truncate.py

…

web_tools.py

fix(web): per-capability backend key no longer reroutes the other capability

2026-09-16 17:43:40 -07:00

website_policy.py

…

working_diff.py

…

write_approval.py

fix(ux): plain-language, actionable user-facing messages (core)

2026-09-15 04:12:13 -07:00

x_search_tool.py

…

xai_http.py

…

xai_video_tools.py

…

yuanbao_tools.py

…