Eugeniusz Gilewski 64dd865912 fix(deps): repair Google transitive security floors (#72108) ... Google API and authentication packages permit vulnerable httplib2 and pyasn1 transitives, while the Workspace and Google Chat runtime installers previously treated any importable version as sufficient. Existing environments could therefore remain vulnerable after the project dependency pins were repaired. Carry the fixed versions through the Google and Vertex extras, lazy feature requirements, lockfile, and both runtime installers. Route the documented Google Chat installation path through its maintained secure requirements instead of an unconstrained direct pip command. Detect stale distributions, install only unsatisfied requirements, and verify the result before continuing. Behavioral tests cover those repair invariants without freezing manifests, lockfiles, or complete package sets. Related #72108 Extracted from #72840 Co-authored-by: Teknium <127238744+teknium1@users.noreply.github.com>		2026-07-31 23:18:38 -07:00
..
computer_use	fix(computer_use): resolve gateway session-key namespace in permission-mode lookup	2026-07-29 12:19:37 -07:00
environments	feat(terminal): raise Docker sandbox /dev/shm to 1g by default (configurable)	2026-07-31 21:31:51 -07:00
neutts_samples	…
wakewords	…
__init__.py	…
ansi_strip.py	…
approval.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
async_delegation.py	fix(state): restore async_delegation.py symbols, keep only journal_mode routing	2026-07-29 18:13:09 -07:00
audio_container.py	…
binary_extensions.py	…
blueprints.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
browser_camofox.py	…
browser_camofox_state.py	…
browser_cdp_tool.py	…
browser_dialog_tool.py	…
browser_supervisor.py	perf(imports): lazy-load heavy SDKs off the cold-start waterfall	2026-07-29 10:54:04 -07:00
browser_tool.py	perf: lazy mcp SDK import + tool-discovery mtime cache + browser_tool import diet	2026-07-29 10:02:03 -07:00
budget_config.py	…
checkpoint_manager.py	refactor: single build_subprocess_env() factory for all child-process spawns (profile + secret-scrub single owner)	2026-07-29 10:14:11 -07:00
clarify_gateway.py	…
clarify_tool.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
close_terminal_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
code_execution_tool.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
computer_use_tool.py	feat(computer_use): align cua-driver 0.10 permission modes	2026-07-29 12:19:37 -07:00
credential_files.py	fix(vision): make desktop image uploads reachable from profile Docker sandboxes (#69575) (#75671)	2026-07-31 17:43:37 -04:00
cronjob_tools.py	fix(cron): close GitHub auth-header exemption abuse in prompt scanner	2026-07-31 22:33:00 -07:00
daemon_pool.py	…
debug_helpers.py	…
delegate_tool.py	fix(delegation): prevent child HERMES_SESSION_ID leak into parent process env	2026-07-31 22:32:55 -07:00
delegation_live_log.py	…
desktop_ui.py	…
discord_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
env_passthrough.py	…
env_probe.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
fal_common.py	…
feishu_doc_tool.py	…
feishu_drive_tool.py	…
file_operations.py	fix(file_ops): harden new-file umask chmod for portability	2026-07-31 14:22:38 +05:30
file_state.py	…
file_tools.py	modernize re-added Vercel integrations: SDK 0.7.2, telemetry off, sibling-site wiring	2026-07-29 19:48:37 -07:00
flux3_video_tool.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
focus_pane_tool.py	…
fuzzy_match.py	…
homeassistant_tool.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
hook_output_spill.py	fix: route stray HERMES_HOME hardcodes through get_hermes_home() (profile + native-Windows safety)	2026-07-29 09:33:48 -07:00
image_generation_tool.py	…
image_source.py	fix(vision): make desktop image uploads reachable from profile Docker sandboxes (#69575) (#75671)	2026-07-31 17:43:37 -04:00
interrupt.py	…
kanban_tools.py	feat(kanban): talk to a running worker without a restart	2026-07-30 07:18:08 -05:00
lazy_deps.py	fix(deps): repair Google transitive security floors (#72108)	2026-07-31 23:18:38 -07:00
managed_tool_gateway.py	Portal free user vision fix + flux3 polling improvements (#75448)	2026-07-31 10:17:55 -04:00
mcp_dashboard_oauth.py	…
mcp_oauth.py	perf: lazy mcp SDK import + tool-discovery mtime cache + browser_tool import diet	2026-07-29 10:02:03 -07:00
mcp_oauth_manager.py	…
mcp_stdio_watchdog.py	…
mcp_tool.py	fix(mcp): guard against duplicate spawns and stale connecting entries (#58862)	2026-08-01 11:35:59 +05:30
memory_tool.py	refactor: extract atomic_write_text to utils.py; fix write-failure error handling	2026-07-29 16:49:07 +05:30
microsoft_graph_auth.py	…
microsoft_graph_client.py	refactor: single shared Retry-After parser	2026-07-29 10:13:50 -07:00
neutts_synth.py	fix(voice): reconcile NeuTTS backbone/codec GPU device strings	2026-07-28 14:07:21 -07:00
open_preview_tool.py	…
openrouter_client.py	…
osv_check.py	…
patch_parser.py	…
path_security.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
process_registry.py	fix(process): decode background process output with incremental UTF-8 decoders	2026-07-31 21:21:13 -07:00
project_tools.py	…
react_to_message_tool.py	feat(desktop): reactions are opt-in under Settings → Appearance, off by default	2026-07-30 00:08:28 -05:00
read_extract.py	…
read_terminal_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
registry.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
schema_sanitizer.py	fix(schema): preserve dependentRequired property names	2026-07-28 14:37:19 -07:00
send_message_tool.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
session_search_tool.py	fix(sessions): keep kanban worker runs out of the session lists	2026-07-31 13:53:04 -05:00
skill_manager_tool.py	Merge origin/main into feat/hsp-sync-client	2026-07-29 13:01:36 -07:00
skill_provenance.py	…
skill_usage.py	Merge origin/main into feat/hsp-sync-client	2026-07-29 13:01:36 -07:00
skills_ast_audit.py	…
skills_guard.py	fix(security): extend secret redaction to GitLab token families	2026-07-31 21:31:10 -07:00
skills_hub.py	fix(skills-hub): include owner in ClawHub source URLs and add retry on 429 (#51236)	2026-07-31 22:33:11 -07:00
skills_sync.py	…
skills_sync_client.py	fix(sync): read org state from the org endpoints, not the personal ones (#75237)	2026-07-30 22:31:42 -07:00
skills_tool.py	Revert "remove Vercel AI Gateway and Vercel Sandbox (#33067)"	2026-07-29 19:48:37 -07:00
slash_confirm.py	…
terminal_tool.py	feat(terminal): raise Docker sandbox /dev/shm to 1g by default (configurable)	2026-07-31 21:31:51 -07:00
thread_context.py	…
threat_patterns.py	…
tirith_security.py	…
todo_tool.py	…
tool_backend_helpers.py	…
tool_output_limits.py	…
tool_result_storage.py	…
tool_search.py	refactor: migrate hand-rolled error envelopes to shared tool_error()	2026-07-29 10:14:00 -07:00
transcription_tools.py	fix(stt): kill faster-whisper silence hallucinations at the source	2026-07-29 00:01:33 -07:00
tts_streaming.py	fix(tts): route streaming-provider secrets through resolve_provider_secret; bound per-sentence stream bodies at 16 MiB	2026-07-28 22:31:40 -07:00
tts_text_normalize.py	fix(tts): unify TTS text preprocessing behind one shared cleaner	2026-07-28 11:55:01 -07:00
tts_tool.py	feat(voice): calm ambient "thinking" sound while the agent works in voice chat	2026-07-29 08:24:00 -07:00
url_safety.py	fix: scope private URL policy per profile	2026-07-28 14:17:45 -07:00
video_generation_tool.py	…
vision_tools.py	perf(imports): lazy-load heavy SDKs off the cold-start waterfall	2026-07-29 10:54:04 -07:00
voice_mode.py	fix(voice): full-duplex agent-turn listener — interrupt by voice during generation AND playback	2026-07-29 10:08:53 -07:00
wake_word.py	fix(wake): route desktop control and select input devices	2026-07-29 14:04:21 -06:00
web_tools.py	chore: remove unused imports and dead locals (ruff F401/F841 sweep)	2026-07-29 11:53:39 -07:00
website_policy.py	…
working_diff.py	…
write_approval.py	…
x_search_tool.py	…
xai_http.py	…
xai_video_tools.py	…
yuanbao_tools.py	…