agent-code 1.0.4__tar.gz → 1.0.5__tar.gz

agent_code-1.0.5/CHANGELOG.md

@@ -0,0 +1,69 @@
+# Changelog
+
+## [1.0.5] - 2026-10-09
+
+### Added
+- Global folder mode: `agent-code run --global` (or
+  `AGENT_CODE_GLOBAL=1`, or `"use_global_paths": true` in config)
+  uses ~/.agent-code for skills, workspace and chats instead of the
+  current working directory.
+- High-risk shell denylist — every command is now allowed except
+  shutdown / reboot / disk / bootloader / privilege-escalation /
+  account / destructive-delete patterns. Toggle strict mode with
+  `"permissive_shell": false` in agent_config.json.
+- Force stop: pressing Stop a second time abandons the running turn
+  and re-enables the UI immediately.
+- Paste guard: entry truncates pastes > 20 000 chars.
+- Log guard: lines > 4 000 chars are truncated; widget trimmed to
+  the last 2 500 lines so long sessions stay responsive.
+- LLM timeout: 120 s per request (was infinite).
+
+### Fixed
+- TodoList.write() rejected `todos=` because the signature only
+  accepted `items`. It now accepts `todos`, `items` and `tasks`
+  aliases, normalizes status synonyms (done → completed,
+  active → in_progress), and reports malformed items instead of
+  silently dropping them.
+- tool_shell_run: pipes, redirects, `&&` and `;` are now supported
+  in permissive mode.
+
+## [1.0.4] - 2026-10-09
+
+### Fixed
+- agent.py: make_client passed a callable where the OpenAI SDK
+  expected a string; multi-key rotation now works via a property
+  override on a subclass instead of a lambda.
+- agent.py: _safe_path used str.startswith() for the workspace jail,
+  which let a sibling directory named "workspace-foo" escape. Now
+  uses Path.relative_to().
+- agent.py: removed duplicate load_skills / discover_skills; the
+  loader is now imported from loader.py (single source of truth).
+- agent.py: removed the six browser_* tools from CORE_SCHEMAS and
+  all_callables — the browser skill owns them now.
+- agent.py: Skills dialog called self.app._save_disabled_skills(),
+  which did not exist. Added the method.
+- agent.py: todo_write schema now describes items (content + enum
+  status), so LLMs reliably produce valid input.
+- skill_manager.py: _do_request crashed on empty / 204 responses.
+- skill_manager.py: extract_zip_safe missed Windows-style ".."
+  entries and drive letters; now normalizes to PurePosixPath.
+- __init__.py: __version__ was stuck at 1.0.2 while pyproject was
+  at 1.0.3. Both are 1.0.5 now.
+- pyproject.toml: added data/site/*.html to package-data.
+- MANIFEST.in: include docs/ and CHANGELOG.md.
+
+### Improved
+- Todo list: header now shows "N/M complete" with a rule.
+- Agent log: boot banner lists keyboard shortcuts.
+- Keyboard shortcuts: Ctrl+L, Ctrl+Enter, Ctrl+S, Ctrl+E, Ctrl+K,
+  Ctrl+,, F1, Esc.
+- README: replaced the broken docs/skills.html link.
+
+## [1.0.3] - 2026-10-03
+
+### Added
+- skills/browser/ - DrissionPage wrapped as a proper skill folder.
+
+### Fixed
+- terminal.py API-key rotation and other small bugs.
+- Moved skills/loader.py -> loader.py for clean pip import.

{agent_code-1.0.4 → agent_code-1.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-code
-Version: 1.0.4
+Version: 1.0.5
 Summary: Local AI agent with headless browser, sandboxed shell, and plug-and-play skills
 Author: minecraftbefile-maker
 License-Expression: MIT

{agent_code-1.0.4 → agent_code-1.0.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-code"
-version = "1.0.4"
+version = "1.0.5"
 description = "Local AI agent with headless browser, sandboxed shell, and plug-and-play skills"
 readme = "README.md"
 requires-python = ">=3.10"

{agent_code-1.0.4 → agent_code-1.0.5}/src/agent_code/__init__.py

@@ -1,2 +1,2 @@
 """Agent + Skill Store — local AI agent with headless browser and skills."""
-__version__ = "1.0.4"
+__version__ = "1.0.5"

{agent_code-1.0.4 → agent_code-1.0.5}/src/agent_code/agent.py

@@ -233,6 +233,11 @@ MAX_TURNS = 40
 SHELL_TIMEOUT = 60
 MAX_READ_LINES = 2000
 MAX_SUBAGENT_TURNS = 12
+MAX_INPUT_CHARS = 20000
+MAX_LOG_LINE_CHARS = 4000
+MAX_LOG_LINES = 2500
+MAX_USER_MESSAGE_CHARS = 100000
+LLM_TIMEOUT = 120
 
 PERMISSION_READONLY = "readonly"
 PERMISSION_ASK      = "ask"
@@ -346,24 +351,59 @@ class TodoList:
         except Exception:
             pass
 
-    def write(self, items):
+    _STATUS_ALIASES = {
+        "pending": "pending", "todo": "pending", "open": "pending",
+        "in_progress": "in_progress", "active": "in_progress",
+        "working": "in_progress", "started": "in_progress", "doing": "in_progress",
+        "completed": "completed", "complete": "completed", "done": "completed",
+        "finished": "completed", "closed": "completed",
+    }
+
+    def write(self, todos=None, items=None, tasks=None, **_ignored):
+        # The schema advertises `todos`, but models sometimes send `items`
+        # or `tasks`. Accept all three; any other kwargs are ignored.
+        raw = todos if todos is not None else (
+            items if items is not None else tasks)
+
+        if raw is None:
+            return "ERROR: missing required field 'todos' (list of {content, status})"
+        if isinstance(raw, dict):
+            raw = [raw]
+        if not isinstance(raw, list):
+            return (f"ERROR: 'todos' must be a list of "
+                    f"{{content, status}} objects, got {type(raw).__name__}")
+
         clean = []
-        for x in items or []:
+        skipped = []
+        for x in raw:
             if not isinstance(x, dict):
+                skipped.append(repr(x)[:60])
                 continue
-            content = str(x.get("content", "")).strip()
-            status = str(x.get("status", "pending")).lower()
-            if status not in ("pending", "in_progress", "completed"):
-                status = "pending"
+            content = str(
+                x.get("content") or x.get("task") or x.get("text") or ""
+            ).strip()
+            raw_status = str(x.get("status", "pending")).lower().strip()
+            status = self._STATUS_ALIASES.get(raw_status, "pending")
             if content:
                 clean.append({"content": content, "status": status})
+            else:
+                skipped.append(repr(x)[:60])
+
+        if not clean:
+            return ("ERROR: no valid items. Each item needs a 'content' "
+                    "string and a 'status' of pending/in_progress/completed.")
+
+        # Only one item may be in_progress
         ip = [i for i, x in enumerate(clean) if x["status"] == "in_progress"]
-        if len(ip) > 1:
-            for i in ip[1:]:
-                clean[i]["status"] = "pending"
+        for i in ip[1:]:
+            clean[i]["status"] = "pending"
+
         self.items = clean
         self._save()
-        return self.render()
+        out = self.render()
+        if skipped:
+            out += f"\n(skipped {len(skipped)} malformed item(s))"
+        return out
 
     def render(self):
         if not self.items:
@@ -595,19 +635,49 @@ def tool_grep_files(pattern: str, path: str = ".", glob: str = "",
 # Shell
 # ===========================================================================
 
-ALLOWED_CMDS = {
-    "ls", "pwd", "cd", "cat", "head", "tail", "grep", "find", "wc", "echo",
-    "date", "whoami", "git", "python", "python3", "pip", "pip3", "node", "npm",
-    "curl", "wget", "sed", "awk", "sort", "uniq", "diff", "tree", "dir",
-    "type", "where", "mkdir", "copy", "move", "touch",
-}
-BLOCKED_PATTERNS = [
-    r"rm\s+-rf\s+/", r":\(\)\s*\{", r"mkfs\.", r"dd\s+if=",
-    r">\s*/dev/sd", r"format\s+[a-z]:", r"del\s+/[sq]", r"rd\s+/s",
-    r"shutdown", r"reboot", r"reg\s+delete", r"regedit",
-    r"net\s+user\s+.*\s+/add", r"runas",
+# In permissive mode (default) every command is allowed EXCEPT patterns that
+# can brick the machine, escalate privileges, or delete the OS. Toggle with
+#   { "permissive_shell": false }   in agent_config.json
+DEFAULT_PERMISSIVE_SHELL = True
+
+HIGH_RISK_PATTERNS = [
+    # Shutdown / reboot / power
+    r"\bshutdown\b", r"\breboot\b", r"\bhalt\b", r"\bpoweroff\b",
+    r"\binit\s+0\b", r"\bStop-Computer\b", r"\bRestart-Computer\b",
+    # Disk / partition / bootloader
+    r"\bmkfs(\.\w+)?\b", r"\bformat\s+[a-zA-Z]:", r"\bdiskpart\b",
+    r"\bfdisk\b", r"\bparted\b", r"\bdd\s+.*of\s*=\s*/dev/",
+    r"\bbootsect\b", r"\bbcdedit\b", r"\bdiskutil\s+eraseDisk\b",
+    # Windows registry / services / scheduler
+    r"\breg\s+delete\b", r"\bregedit\b", r"\bsc\s+delete\b",
+    r"\bschtasks\s+/(create|delete|change)\b",
+    r"\bwmic\s+.*\s+delete\b",
+    # Privilege escalation
+    r"\brunas\b", r"\bsudo\b", r"\bdoas\b", r"\bpkexec\b", r"\bgsudo\b",
+    # User / account manipulation
+    r"\bnet\s+user\s+.*\s+/add\b", r"\bnet\s+localgroup\b",
+    r"\buseradd\b", r"\buserdel\b", r"\badduser\b", r"\bdeluser\b",
+    r"\bchpasswd\b",
+    # System permission changes
+    r"\bchmod\s+(--?[A-Za-z]+\s+)*[-=]?[0-7]*777\s+/(?:\s|$)",
+    r"\bchown\s+.*\s+/(?:\s|$)",
+    r"\bicacls\s+.*\s+/grant\b", r"\btakeown\b",
+    # Destructive deletes on absolute paths
+    r"\brm\s+-[rRf]*[rRf][rRf]*\s+/",
+    r"\brm\s+-[rRf]+\s+~(?:\s|$|/)",
+    r"\bRemove-Item\b.*-Recurse.*-Force.*[a-zA-Z]:[\\/]*\s*$",
+    # Device writes
+    r">\s*/dev/(sd|hd|nvme|disk)",
+    # Fork bombs
+    r":\(\)\s*\{",
+    # PATH hijack
+    r"\b(export|setx)\s+PATH\s*=",
 ]
 
+# Backwards-compat aliases
+BLOCKED_PATTERNS = HIGH_RISK_PATTERNS
+ALLOWED_CMDS = set()
+
 
 def _arg_safe(arg: str) -> bool:
     if arg.startswith(("http://", "https://")):
@@ -625,39 +695,69 @@ def _arg_safe(arg: str) -> bool:
     return True
 
 
-def tool_shell_run(command: str, cwd: str = ".") -> str:
-    for pat in BLOCKED_PATTERNS:
+def tool_shell_run(command: str, cwd: str = ".", permissive: bool = None) -> str:
+    """Run a shell command. CWD is always jailed to the workspace.
+
+    permissive=True  — denylist only (default). Any command except high-risk.
+    permissive=False — the legacy allowlist + no-metacharacters mode.
+    """
+    if permissive is None:
+        try:
+            permissive = bool(
+                load_agent_config().get("permissive_shell",
+                                        DEFAULT_PERMISSIVE_SHELL))
+        except Exception:
+            permissive = DEFAULT_PERMISSIVE_SHELL
+
+    if not command or not command.strip():
+        return "BLOCKED: empty command"
+
+    # High-risk patterns are ALWAYS blocked, in both modes.
+    for pat in HIGH_RISK_PATTERNS:
         if re.search(pat, command, re.IGNORECASE):
-            return f"BLOCKED: pattern {pat}"
-    if re.search(r"[|&;<>`$]", command):
-        return ("BLOCKED: shell metacharacters not allowed.")
-    try:
-        parts = shlex.split(command, posix=False)
-    except ValueError as e:
-        return f"BLOCKED: parse error {e}"
-    if not parts:
-        return "BLOCKED: empty"
-    base = os.path.basename(parts[0].strip('"')).lower()
-    if base not in ALLOWED_CMDS:
-        return f"BLOCKED: '{base}' not allowed"
-    for arg in parts[1:]:
-        if not _arg_safe(arg):
-            return f"BLOCKED: arg escapes workspace: {arg}"
+            return f"BLOCKED: high-risk pattern: {pat}"
+
+    if not permissive:
+        # Legacy strict path
+        if re.search(r"[|&;<>`$]", command):
+            return "BLOCKED: shell metacharacters not allowed in strict mode"
+        try:
+            parts = shlex.split(command, posix=False)
+        except ValueError as e:
+            return f"BLOCKED: parse error {e}"
+        if not parts:
+            return "BLOCKED: empty"
+        base = os.path.basename(parts[0].strip('"')).lower()
+        if base not in ALLOWED_CMDS:
+            return f"BLOCKED: '{base}' not in allowlist (strict mode)"
+        for arg in parts[1:]:
+            if not _arg_safe(arg):
+                return f"BLOCKED: arg escapes workspace: {arg}"
+
     try:
         run_cwd = _safe_path(cwd) if cwd else WORKSPACE
     except ValueError as e:
         return f"BLOCKED: cwd: {e}"
+
     try:
-        r = subprocess.run(
-            parts, capture_output=True, text=True,
-            encoding="utf-8", errors="replace",
-            timeout=SHELL_TIMEOUT, cwd=str(run_cwd), shell=False)
+        if permissive:
+            # Real shell: pipes, redirects, &&, ; all work.
+            r = subprocess.run(
+                command, capture_output=True, text=True,
+                encoding="utf-8", errors="replace",
+                timeout=SHELL_TIMEOUT, cwd=str(run_cwd), shell=True)
+        else:
+            parts = shlex.split(command, posix=False)
+            r = subprocess.run(
+                parts, capture_output=True, text=True,
+                encoding="utf-8", errors="replace",
+                timeout=SHELL_TIMEOUT, cwd=str(run_cwd), shell=False)
         out = ((r.stdout or "") + (r.stderr or "")).strip()
         return out[:8000] or "(no output)"
     except subprocess.TimeoutExpired:
         return f"ERROR: timeout {SHELL_TIMEOUT}s"
     except FileNotFoundError:
-        return f"ERROR: command not found: {base}"
+        return "ERROR: command not found"
     except Exception as e:
         return f"ERROR: {e}"
 
@@ -1614,6 +1714,8 @@ class App:
         self.entry = ttk.Entry(inner, font=("Segoe UI", 11))
         self.entry.pack(side="left", fill="x", expand=True, ipady=3)
         self.entry.bind("<Return>", lambda e: self.on_send())
+        self.entry.bind("<<Paste>>", self._on_paste)
+        self.entry.bind("<Control-v>", self._on_paste)
 
         self.send_btn = ttk.Button(inner, text="Send  ➤",
                                    style="Send.TButton",
@@ -1656,6 +1758,25 @@ class App:
         self._bind_shortcuts()
         self.root.protocol("WM_DELETE_WINDOW", self._on_close)
 
+    # ---- input guard ----
+
+    def _on_paste(self, event=None):
+        """Truncate huge pastes so the entry never freezes the UI."""
+        try:
+            text = self.root.clipboard_get()
+        except Exception:
+            return "break"
+        if not isinstance(text, str):
+            return "break"
+        if len(text) > MAX_INPUT_CHARS:
+            text = text[:MAX_INPUT_CHARS]
+            self.log_line(
+                f"[input] paste truncated to {MAX_INPUT_CHARS:,} chars",
+                "dim")
+        self.entry.delete(0, "end")
+        self.entry.insert(0, text)
+        return "break"
+
     # ---- shortcuts ----
 
     def _bind_shortcuts(self):
@@ -1822,7 +1943,7 @@ class App:
                 resp = self.client.chat.completions.create(
                     model=self.model, messages=sub_messages,
                     tools=self.all_schemas, tool_choice="auto",
-                    temperature=0.2)
+                    temperature=0.2, timeout=LLM_TIMEOUT)
             except Exception as e:
                 return f"SUBAGENT ERROR: {e}"
 
@@ -2048,7 +2169,7 @@ class App:
     def _set_running(self, running):
         if running:
             self.send_btn.configure(state="disabled")
-            self.stop_btn.configure(state="normal")
+            self.stop_btn.configure(state="normal", text="Stop")
             self.continue_btn.configure(state="disabled")
             self.clear_btn.configure(state="disabled")
             self.status_lbl.configure(text="running…")
@@ -2061,9 +2182,20 @@ class App:
             self._update_header()
 
     def _on_stop(self):
+        if self._stop_event.is_set():
+            # Second press within the same turn: force-detach the worker.
+            self.log_line("[stop] force — abandoning current turn", "error")
+            self._worker = None
+            self._stopped_last = True
+            self._stop_event.clear()
+            self._set_running(False)
+            return
         self._stop_event.set()
-        self.log_line("[stop] requested", "error")
-        self.stop_btn.configure(state="disabled")
+        self.log_line("[stop] requested — press Stop again to force", "error")
+        try:
+            self.stop_btn.configure(text="Force stop")
+        except Exception:
+            pass
 
     def _on_continue(self):
         if self._worker and self._worker.is_alive():
@@ -2116,6 +2248,8 @@ class App:
         try:
             while True:
                 text, tag = self._log_q.get_nowait()
+                if isinstance(text, str) and len(text) > MAX_LOG_LINE_CHARS:
+                    text = text[:MAX_LOG_LINE_CHARS] + " …(truncated)"
                 self.log.configure(state="normal")
                 if tag == "agent_md":
                     self.log.insert("end", "AGENT ▸ ", "agent")
@@ -2129,6 +2263,17 @@ class App:
                 self.log.configure(state="disabled")
         except queue.Empty:
             pass
+
+        # Trim the widget so the UI never lags on very long sessions.
+        try:
+            total = int(self.log.index("end-1c").split(".")[0])
+            if total > MAX_LOG_LINES:
+                self.log.configure(state="normal")
+                self.log.delete("1.0", f"{total - MAX_LOG_LINES}.0")
+                self.log.configure(state="disabled")
+        except Exception:
+            pass
+
         self.root.after(60, self._poll_log)
 
     # ---- input ----
@@ -2223,6 +2368,11 @@ class App:
 
     def _agent_loop(self, task):
         if task is not None:
+            if len(task) > MAX_USER_MESSAGE_CHARS:
+                self.log_line(
+                    f"[input] user message truncated to "
+                    f"{MAX_USER_MESSAGE_CHARS:,} chars", "dim")
+                task = task[:MAX_USER_MESSAGE_CHARS]
             self.messages.append({"role": "user", "content": task})
             if len(self.messages) > 60:
                 self.messages = [self.messages[0]] + self.messages[-50:]
@@ -2238,7 +2388,7 @@ class App:
                 resp = self.client.chat.completions.create(
                     model=self.model, messages=self.messages,
                     tools=self.all_schemas, tool_choice="auto",
-                    temperature=0.2)
+                    temperature=0.2, timeout=LLM_TIMEOUT)
             except Exception as e:
                 self.log_line(f"LLM ERROR: {e}", "error")
                 return

{agent_code-1.0.4 → agent_code-1.0.5}/src/agent_code/cli.py

@@ -1,5 +1,7 @@
-"""CLI entry point. Subcommands: run, manage, serve, skills."""
-import sys, argparse
+"""CLI entry point. Subcommands: run, manage, serve, skills."""
+import os
+import sys
+import argparse
 from . import __version__
 
 def main(argv=None):
@@ -10,8 +12,15 @@ def main(argv=None):
                     version=f"agent-code {__version__}")
     sub = ap.add_subparsers(dest="cmd")
 
-    sub.add_parser("run", help="run the agent (default)").set_defaults(func=_run)
-    sub.add_parser("manage", help="skill manager GUI").set_defaults(func=_manage)
+    p = sub.add_parser("run", help="run the agent (default)")
+    p.add_argument("--global", dest="global_paths", action="store_true",
+                   help="use ~/.agent-code for skills, workspace and chats")
+    p.set_defaults(func=_run)
+
+    p = sub.add_parser("manage", help="skill manager GUI")
+    p.add_argument("--global", dest="global_paths", action="store_true",
+                   help="install skills into ~/.agent-code/skills")
+    p.set_defaults(func=_manage)
 
     p = sub.add_parser("serve", help="serve the landing page")
     p.add_argument("--host", default=None)
@@ -29,10 +38,14 @@ def main(argv=None):
     return args.func(args)
 
 def _run(args):
+    if getattr(args, "global_paths", False):
+        os.environ["AGENT_CODE_GLOBAL"] = "1"
     from .agent import main as m
     m(); return 0
 
 def _manage(args):
+    if getattr(args, "global_paths", False):
+        os.environ["AGENT_CODE_GLOBAL"] = "1"
     from .skill_manager import main as m
     m(); return 0
 
@@ -66,4 +79,4 @@ def _skills(args):
     return 0
 
 if __name__ == "__main__":
-    sys.exit(main())
+    sys.exit(main())

{agent_code-1.0.4 → agent_code-1.0.5}/src/agent_code/paths.py

@@ -1,5 +1,7 @@
-"""Path resolution for pip-installed use."""
-import os, shutil
+"""Path resolution for pip-installed use."""
+import os
+import json
+import shutil
 from pathlib import Path
 
 PACKAGE_ROOT   = Path(__file__).parent.resolve()
@@ -21,7 +23,33 @@ def user_config_dir() -> Path:
 def user_config_file() -> Path:
     return user_config_dir() / "agent_config.json"
 
-def project_dir() -> Path:            return Path.cwd()
+def global_data_dir() -> Path:
+    p = Path.home() / ".agent-code"
+    p.mkdir(parents=True, exist_ok=True)
+    return p
+
+
+def _cfg() -> dict:
+    p = user_config_file()
+    if p.exists():
+        try:
+            return json.loads(p.read_text(encoding="utf-8"))
+        except Exception:
+            return {}
+    return {}
+
+
+def use_global_paths() -> bool:
+    env = os.environ.get("AGENT_CODE_GLOBAL")
+    if env is not None:
+        return env.strip().lower() in ("1", "true", "yes", "on")
+    return bool(_cfg().get("use_global_paths"))
+
+
+def project_dir() -> Path:
+    if use_global_paths():
+        return global_data_dir()
+    return Path.cwd()
 def project_workspace_dir() -> Path:
     p = project_dir() / "workspace"; p.mkdir(parents=True, exist_ok=True); return p
 def project_skills_dir() -> Path:
@@ -51,4 +79,4 @@ def install_bundled_skills(overwrite: bool = False) -> list:
     return written
 
 def bundled_site_dir() -> Path:
-    return BUNDLED_SITE
+    return BUNDLED_SITE

{agent_code-1.0.4 → agent_code-1.0.5}/src/agent_code.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-code
-Version: 1.0.4
+Version: 1.0.5
 Summary: Local AI agent with headless browser, sandboxed shell, and plug-and-play skills
 Author: minecraftbefile-maker
 License-Expression: MIT

agent_code-1.0.4/CHANGELOG.md

@@ -1,52 +0,0 @@
-# Changelog
-
-## [1.0.4] - 2026-10-09
-
-### Fixed
-- agent.py: make_client passed a callable where the OpenAI SDK
-  expected a string; multi-key rotation now works via a property
-  override on a subclass instead of a lambda.
-- agent.py: _safe_path used str.startswith() for the workspace jail,
-  which let a sibling directory named "workspace-foo" escape. Now
-  uses Path.relative_to().
-- agent.py: removed duplicate load_skills / discover_skills; the
-  loader is now imported from loader.py (single source of truth).
-- agent.py: removed the six browser_* tools from CORE_SCHEMAS and
-  all_callables — the browser skill owns them now, matching the
-  1.0.3 CHANGELOG.
-- agent.py: Skills dialog called self.app._save_disabled_skills(),
-  which did not exist. Added the method.
-- agent.py: todo_write schema now describes items (content + enum
-  status), so LLMs reliably produce valid input.
-- skill_manager.py: _do_request crashed on empty / 204 responses
-  (e.g. DELETE /skills/{name}); now returns {}.
-- skill_manager.py: extract_zip_safe missed Windows-style ".."
-  entries and drive letters; now normalizes to PurePosixPath.
-- __init__.py: __version__ was stuck at 1.0.2 while pyproject was
-  at 1.0.3. Both are 1.0.4 now.
-- pyproject.toml: added data/site/*.html to package-data.
-- MANIFEST.in: include docs/ and CHANGELOG.md.
-
-### Improved
-- Todo list: header now shows "N/M complete" with a rule.
-- Agent log: boot banner lists keyboard shortcuts.
-- Keyboard shortcuts: Ctrl+L (clear), Ctrl+Enter (send),
-  Ctrl+S (save), Ctrl+E (export), Ctrl+K (skills),
-  Ctrl+, (settings), F1 (help), Esc (stop running loop).
-- README: replaced the broken docs/skills.html link with a
-  pointer to the loader module.
-
-## [1.0.3] - 2026-10-03
-
-### Added
-- skills/browser/ - DrissionPage wrapped as a proper skill folder.
-  Six tools: browser_navigate, browser_snapshot, browser_click,
-  browser_type, browser_links, browser_scroll, plus /browser-close.
-
-### Fixed
-- terminal.py API-key rotation crashed after 1000 x len(KEYS) requests.
-- terminal.py passed a callable where the OpenAI SDK expects a string.
-- terminal.py /reset printed "memory cleared" but kept no memory.
-- terminal.py shell_run prompted even in readonly mode.
-- terminal.py stray import in the module body.
-- Moved skills/loader.py -> loader.py for clean pip import.