LHMQ878andXubin Ren a0e60116a3 fix(cli): stop leaking API keys to CLI app subprocesses ...

Installed CLI apps were started with os.environ.copy(), so provider keys
from the parent process were visible to untrusted binaries. Use a minimal
allowlist env matching the shell tool.

Fixes #4783

2026-08-12 02:57:48 +09:00

..

agent

fix(tools): reject non-finite number parameters

2026-08-12 02:25:20 +09:00

api

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

apps

fix(cli): stop leaking API keys to CLI app subprocesses

2026-08-12 02:57:48 +09:00

audio

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

bus

fix(webui): complete temporary chat mode

2026-08-08 23:20:59 +08:00

channels

fix(matrix): isolate thread sessions

2026-08-12 02:15:17 +09:00

cli

fix(webui): surface MCP runtime connection failures (#5331)

2026-08-11 23:52:02 +08:00

command

fix(commands): reject invalid slash commands

2026-08-04 17:11:44 +08:00

config

feat(mcp): add browser OAuth for remote servers (#5316)

2026-08-10 23:44:37 +08:00

cron

refactor: remove verified dead code

2026-08-08 21:10:34 +08:00

gateway

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

pairing

fix(pairing): keep approvals across transient store read failures

2026-07-30 19:02:37 +08:00

providers

fix(providers): stop writing API keys into process os.environ

2026-08-12 02:35:40 +09:00

sdk

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

security

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

session

fix(webui): complete temporary chat mode

2026-08-08 23:20:59 +08:00

skills

fix(skills): make PNG weather example Windows-safe

2026-08-12 02:48:03 +09:00

templates

fix(agent): apply execution policy to existing workspaces

2026-07-24 19:25:52 +08:00

triggers

refactor: remove verified dead code

2026-08-08 21:10:34 +08:00

utils

refactor: remove verified dead code

2026-08-08 21:10:34 +08:00

web

feat(webui): add guided setup flows

2026-07-13 13:11:46 +08:00

webui

fix(webui): surface MCP runtime connection failures (#5331)

2026-08-11 23:52:02 +08:00

__init__.py

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

__main__.py

🐈nanobot: hello world!

2026-02-01 07:36:42 +00:00

config_base.py

Break tool config schema import cycle

2026-06-13 21:59:07 +08:00

nanobot.py

feat(config): add actionable startup diagnostics and WebUI recovery (#5110)

2026-07-28 18:52:05 +08:00

optional_features.py

fix(plugins): use uv when pip is unavailable

2026-08-03 15:42:26 +08:00

process_runtime.py

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00

runtime_context.py

refactor: enforce BasedPyright strict type checking (#5158)

2026-07-29 21:37:11 +08:00