cade-cli 0.11.0__tar.gz → 0.13.3__tar.gz

{cade_cli-0.11.0 → cade_cli-0.13.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cade-cli
-Version: 0.11.0
+Version: 0.13.3
 Summary: Cade - The CLI Agent from Arcade.dev
 Project-URL: Homepage, https://arcade.dev
 Project-URL: Documentation, https://docs.arcade.dev
@@ -43,10 +43,10 @@ Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Code Generators
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
-Requires-Dist: agent-library<1.0.0,>=0.12.0
+Requires-Dist: agent-library<1.0.0,>=0.13.1
 Requires-Dist: anthropic<1.0.0,>=0.34.0
 Requires-Dist: arcade-core<5.0.0,>=4.7.0
-Requires-Dist: arcade-mcp-server<2.0.0,>=1.21.0
+Requires-Dist: arcade-mcp-server<2.0.0,>=1.22.0
 Requires-Dist: arcade-tdk<4.0.0,>=3.8.0
 Requires-Dist: arcadepy<2.0.0,>=1.10.0
 Requires-Dist: authlib<2.0.0,>=1.6.0
@@ -58,15 +58,14 @@ Requires-Dist: keyring<26.0,>=24.0
 Requires-Dist: openai<2.0.0,>=1.0.0
 Requires-Dist: prompt-toolkit<4.0.0,>=3.0.52
 Requires-Dist: pydantic[email]<3.0.0,>=2.0.0
-Requires-Dist: pyperclip<2.0.0,>=1.8.0
 Requires-Dist: python-telegram-bot<22.0,>=21.0
-Requires-Dist: pyyaml<7.0.0,>=6.0
 Requires-Dist: rich<14.0.0,>=13.0.0
-Requires-Dist: sounddevice>=0.5.5
-Requires-Dist: tiktoken<1.0.0,>=0.11.0
 Requires-Dist: toml<1.0.0,>=0.10.0
 Requires-Dist: typer>0.10.0
 Requires-Dist: ulid==1.1
+Requires-Dist: websockets<16.0,>=14.0
+Provides-Extra: build
+Requires-Dist: pyinstaller<7.0.0,>=6.16.0; extra == 'build'
 Provides-Extra: dev
 Requires-Dist: mypy<2.0.0,>=1.10.0; extra == 'dev'
 Requires-Dist: pytest-asyncio<1.0.0,>=0.24.0; extra == 'dev'
@@ -83,7 +82,7 @@ Provides-Extra: voice
 Requires-Dist: mlx-audio<0.4.0,>=0.2.0; extra == 'voice'
 Requires-Dist: mlx-whisper>=0.1.0; extra == 'voice'
 Requires-Dist: numpy>=1.24.0; extra == 'voice'
-Requires-Dist: sounddevice>=0.4.0; extra == 'voice'
+Requires-Dist: sounddevice<1.0.0,>=0.5.5; extra == 'voice'
 Requires-Dist: webrtcvad>=2.0.10; extra == 'voice'
 Description-Content-Type: text/markdown
 
@@ -119,6 +118,8 @@ cade
 | pip | `pip install cade-cli` |
 | From source | `git clone https://github.com/arcadeai-labs/cade.git && cd cade && uv sync` |
 
+Homebrew installs from a private release feed. Export `HOMEBREW_GITHUB_API_TOKEN` (a token with read access to `arcadeai-labs/cade`) before running `brew install`.
+
 **Prerequisites:** Python 3.11+, an Arcade account ([arcade.dev](https://arcade.dev)) for cloud tools, and an LLM provider key (`OPENAI_API_KEY` or `ANTHROPIC_API_KEY`). Skip the Arcade account with `--local-only` or `CADE_LOCAL_ONLY=1`.
 
 ```bash
@@ -126,6 +127,9 @@ cade login          # Arcade Cloud OAuth (skip with --local-only)
 cade --version
 ```
 
+Full install and first-run docs: [`docs/install.md`](./docs/install.md) and
+[`docs/quickstart.md`](./docs/quickstart.md).
+
 ---
 
 ## Quick start
@@ -133,11 +137,11 @@ cade --version
 ```bash
 cade                                       # interactive chat
 cade -m "What changed in HEAD?"            # single message, then exit
-cat error.log | cade -m "What went wrong?" # pipe input
+cade -m "What went wrong?" < error.log     # prompt + file/stdin
 cade -r                                    # resume the most recent thread
 cade resume "auth-rewrite"                 # resume a thread by name
 cade --persona reviewer                    # use a saved persona's system prompt
-cade --voice                               # speak / hear (voice mode)
+cade --voice                               # speak / hear (requires cade-cli[voice])
 ```
 
 ### Top-level options
@@ -145,9 +149,9 @@ cade --voice                               # speak / hear (voice mode)
 | Flag | Description |
 |---|---|
 | `-r`, `--resume` | Resume most recent thread |
-| `-m`, `--message` | Single-message mode (reads stdin if no arg) |
+| `-m`, `--message` | Single-message mode; piped stdin is appended to the prompt |
 | `-P`, `--persona` | Use a saved persona |
-| `-V`, `--voice` | Voice mode |
+| `-V`, `--voice` | Voice mode; install `cade-cli[voice]` first |
 | `-v`, `--verbose` | Debug logging |
 | `--version` | Print version |
 
@@ -172,7 +176,7 @@ cade --voice                               # speak / hear (voice mode)
 
 Tools come from three sources and are addressed uniformly by their registered name:
 
-- **`Local_*`** — built-in: filesystem (`ReadFile`, `WriteFile`, `Edit`, `ListFiles`), shell (`Bash` — async with progress reporting), `Search`, `Git`, `Task*`, `Channel`, `AskUserQuestion`, `RetrieveToolResult`, `ToolSchema`, `Sleep`, `PinContext`, `PushNotification`.
+- **`Local_*`** — built-in: filesystem (`ReadFile`, `WriteFile`, `Edit`, `ListFiles`), shell (`Bash`), `Search`, `Git`, `Task*`, `AskUserQuestion`, `RetrieveToolResult`, `ToolSchema`, `PinContext`, `PushNotification`, `WebFetch`, and `WebSearch`.
 - **`Memory_*`** — agent-library backed, per-persona indexed knowledge store.
 - **Arcade Cloud + user MCP servers** — anything you register.
 
@@ -215,7 +219,7 @@ Memory is persona-scoped — each persona has its own `~/.cade/data/contexts/<co
 
 ## Headless daemon: `cade serve`
 
-Run Cade as a long-lived daemon that replies over messaging platforms (Telegram supported today; the adapter protocol is generic). Each chat gets its own persistent thread — persona, memory, and tools carry across messages.
+Run Cade as a long-lived daemon that replies through adapters. Telegram is supported for personal bot workflows, and Desktop exposes a local WebSocket for native clients. Each conversation gets its own persistent thread — persona, memory, and tools carry across messages.
 
 ```bash
 cade serve init                          # wizard: bot token, allowed senders
@@ -226,9 +230,9 @@ cade serve status / stop                 # health, uptime; SIGTERM running daemo
 
 Config lives at `~/.cade/config/contexts/<context>.toml [serve]`. Edit and `kill -HUP $(cat ~/.cade/run/serve.pid)` to reload without restart.
 
-**Security defaults are fail-closed:** `allowed_senders = []` blocks everyone; tools are default-deny against `[tools].allow` (globs / regex / pipe lists supported); `deny` always wins.
+**Security defaults are fail-closed:** `allowed_senders = []` blocks everyone; tools are default-deny against `[serve.tools].allow` (globs / regex / pipe lists supported); `deny` always wins.
 
-The MCP transport is fully bidirectional, so tools running inside the daemon can elicit structured input (rendered as Telegram inline keyboards), stream live progress (rendered as edited placeholder messages), and emit logs that flow into the daemon log. See [`docs/mcp.md`](./docs/mcp.md) for the protocol details, [`docs/configuration.md`](./docs/configuration.md) for the full daemon config reference.
+The MCP transport is fully bidirectional, so tools running inside the daemon can elicit structured input, stream live progress, and emit logs through whichever adapter is active. See [`docs/adapters/`](./docs/adapters/) for adapter details, [`docs/mcp.md`](./docs/mcp.md) for protocol details, and [`docs/configuration.md`](./docs/configuration.md) for the full daemon config reference.
 
 ---
 
@@ -252,17 +256,18 @@ See [`docs/channels.md`](./docs/channels.md) for the channels protocol; hooks an
 Cade works with any OpenAI-compatible endpoint. Three ways to wire one in (CLI flag → env → config, first match wins):
 
 ```bash
-# CLI flag
-cade chat --endpoint http://localhost:11434/v1 --model llama3
+# CLI flag for Ollama. Use a model from `ollama list`.
+cade chat -L --endpoint http://localhost:11434 --model qwen3:4b
 
-# Environment
-export OPENAI_BASE_URL="http://localhost:11434/v1"
-export OPENAI_API_KEY="ollama"   # any non-empty value
-cade chat --model llama3
+# Environment for one-shot mode
+cade context create local-qwen --model qwen3:4b
+cade context use local-qwen
+export OLLAMA_BASE_URL="http://localhost:11434"
+CADE_LOCAL_ONLY=1 cade -m "hello from a local model"
 
 # Config — ~/.cade/config/cade.toml
 [model_settings]
-host = "http://localhost:11434/v1"
+host = "http://localhost:8000/v1"
 api_key = "ollama"
 ```
 
@@ -303,14 +308,15 @@ Full layout, env vars, and TOML schema in [`docs/configuration.md`](./docs/confi
 ```bash
 git clone https://github.com/arcadeai-labs/cade.git
 cd cade
-uv sync --all-extras --dev
-pytest                # full suite
-ruff check src/ tests/ && ruff format src/ tests/
+uv sync --extra dev
+uv run pytest
+uv run ruff check src/ tests/
 ```
 
 Style: Python 3.11+ with modern type hints (`dict`, `list`, `| None`); ruff for lint + format; pytest with `asyncio_mode = "auto"`. Public functions and classes get docstrings.
 
-PRs welcome — open an issue first for anything substantial.
+Build/release docs live in [`docs/development.md`](./docs/development.md). PRs
+welcome — open an issue first for anything substantial.
 
 ---
 
@@ -318,7 +324,7 @@ PRs welcome — open an issue first for anything substantial.
 
 - [arcade.dev](https://arcade.dev) — product
 - [docs.arcade.dev](https://docs.arcade.dev) — API and tool catalog
-- [`docs/`](./docs/) — `mcp.md` (tool protocol), `configuration.md`, `channels.md`, `install.md`
+- [`docs/`](./docs/) — quickstart, examples, install, config, MCP, channels, voice, development, and adapters
 - [Issues](https://github.com/arcadeai-labs/cade/issues) · [Releases](https://github.com/arcadeai-labs/cade/releases)
 
 ## License

{cade_cli-0.11.0 → cade_cli-0.13.3}/README.md

@@ -30,6 +30,8 @@ cade
 | pip | `pip install cade-cli` |
 | From source | `git clone https://github.com/arcadeai-labs/cade.git && cd cade && uv sync` |
 
+Homebrew installs from a private release feed. Export `HOMEBREW_GITHUB_API_TOKEN` (a token with read access to `arcadeai-labs/cade`) before running `brew install`.
+
 **Prerequisites:** Python 3.11+, an Arcade account ([arcade.dev](https://arcade.dev)) for cloud tools, and an LLM provider key (`OPENAI_API_KEY` or `ANTHROPIC_API_KEY`). Skip the Arcade account with `--local-only` or `CADE_LOCAL_ONLY=1`.
 
 ```bash
@@ -37,6 +39,9 @@ cade login          # Arcade Cloud OAuth (skip with --local-only)
 cade --version
 ```
 
+Full install and first-run docs: [`docs/install.md`](./docs/install.md) and
+[`docs/quickstart.md`](./docs/quickstart.md).
+
 ---
 
 ## Quick start
@@ -44,11 +49,11 @@ cade --version
 ```bash
 cade                                       # interactive chat
 cade -m "What changed in HEAD?"            # single message, then exit
-cat error.log | cade -m "What went wrong?" # pipe input
+cade -m "What went wrong?" < error.log     # prompt + file/stdin
 cade -r                                    # resume the most recent thread
 cade resume "auth-rewrite"                 # resume a thread by name
 cade --persona reviewer                    # use a saved persona's system prompt
-cade --voice                               # speak / hear (voice mode)
+cade --voice                               # speak / hear (requires cade-cli[voice])
 ```
 
 ### Top-level options
@@ -56,9 +61,9 @@ cade --voice                               # speak / hear (voice mode)
 | Flag | Description |
 |---|---|
 | `-r`, `--resume` | Resume most recent thread |
-| `-m`, `--message` | Single-message mode (reads stdin if no arg) |
+| `-m`, `--message` | Single-message mode; piped stdin is appended to the prompt |
 | `-P`, `--persona` | Use a saved persona |
-| `-V`, `--voice` | Voice mode |
+| `-V`, `--voice` | Voice mode; install `cade-cli[voice]` first |
 | `-v`, `--verbose` | Debug logging |
 | `--version` | Print version |
 
@@ -83,7 +88,7 @@ cade --voice                               # speak / hear (voice mode)
 
 Tools come from three sources and are addressed uniformly by their registered name:
 
-- **`Local_*`** — built-in: filesystem (`ReadFile`, `WriteFile`, `Edit`, `ListFiles`), shell (`Bash` — async with progress reporting), `Search`, `Git`, `Task*`, `Channel`, `AskUserQuestion`, `RetrieveToolResult`, `ToolSchema`, `Sleep`, `PinContext`, `PushNotification`.
+- **`Local_*`** — built-in: filesystem (`ReadFile`, `WriteFile`, `Edit`, `ListFiles`), shell (`Bash`), `Search`, `Git`, `Task*`, `AskUserQuestion`, `RetrieveToolResult`, `ToolSchema`, `PinContext`, `PushNotification`, `WebFetch`, and `WebSearch`.
 - **`Memory_*`** — agent-library backed, per-persona indexed knowledge store.
 - **Arcade Cloud + user MCP servers** — anything you register.
 
@@ -126,7 +131,7 @@ Memory is persona-scoped — each persona has its own `~/.cade/data/contexts/<co
 
 ## Headless daemon: `cade serve`
 
-Run Cade as a long-lived daemon that replies over messaging platforms (Telegram supported today; the adapter protocol is generic). Each chat gets its own persistent thread — persona, memory, and tools carry across messages.
+Run Cade as a long-lived daemon that replies through adapters. Telegram is supported for personal bot workflows, and Desktop exposes a local WebSocket for native clients. Each conversation gets its own persistent thread — persona, memory, and tools carry across messages.
 
 ```bash
 cade serve init                          # wizard: bot token, allowed senders
@@ -137,9 +142,9 @@ cade serve status / stop                 # health, uptime; SIGTERM running daemo
 
 Config lives at `~/.cade/config/contexts/<context>.toml [serve]`. Edit and `kill -HUP $(cat ~/.cade/run/serve.pid)` to reload without restart.
 
-**Security defaults are fail-closed:** `allowed_senders = []` blocks everyone; tools are default-deny against `[tools].allow` (globs / regex / pipe lists supported); `deny` always wins.
+**Security defaults are fail-closed:** `allowed_senders = []` blocks everyone; tools are default-deny against `[serve.tools].allow` (globs / regex / pipe lists supported); `deny` always wins.
 
-The MCP transport is fully bidirectional, so tools running inside the daemon can elicit structured input (rendered as Telegram inline keyboards), stream live progress (rendered as edited placeholder messages), and emit logs that flow into the daemon log. See [`docs/mcp.md`](./docs/mcp.md) for the protocol details, [`docs/configuration.md`](./docs/configuration.md) for the full daemon config reference.
+The MCP transport is fully bidirectional, so tools running inside the daemon can elicit structured input, stream live progress, and emit logs through whichever adapter is active. See [`docs/adapters/`](./docs/adapters/) for adapter details, [`docs/mcp.md`](./docs/mcp.md) for protocol details, and [`docs/configuration.md`](./docs/configuration.md) for the full daemon config reference.
 
 ---
 
@@ -163,17 +168,18 @@ See [`docs/channels.md`](./docs/channels.md) for the channels protocol; hooks an
 Cade works with any OpenAI-compatible endpoint. Three ways to wire one in (CLI flag → env → config, first match wins):
 
 ```bash
-# CLI flag
-cade chat --endpoint http://localhost:11434/v1 --model llama3
+# CLI flag for Ollama. Use a model from `ollama list`.
+cade chat -L --endpoint http://localhost:11434 --model qwen3:4b
 
-# Environment
-export OPENAI_BASE_URL="http://localhost:11434/v1"
-export OPENAI_API_KEY="ollama"   # any non-empty value
-cade chat --model llama3
+# Environment for one-shot mode
+cade context create local-qwen --model qwen3:4b
+cade context use local-qwen
+export OLLAMA_BASE_URL="http://localhost:11434"
+CADE_LOCAL_ONLY=1 cade -m "hello from a local model"
 
 # Config — ~/.cade/config/cade.toml
 [model_settings]
-host = "http://localhost:11434/v1"
+host = "http://localhost:8000/v1"
 api_key = "ollama"
 ```
 
@@ -214,14 +220,15 @@ Full layout, env vars, and TOML schema in [`docs/configuration.md`](./docs/confi
 ```bash
 git clone https://github.com/arcadeai-labs/cade.git
 cd cade
-uv sync --all-extras --dev
-pytest                # full suite
-ruff check src/ tests/ && ruff format src/ tests/
+uv sync --extra dev
+uv run pytest
+uv run ruff check src/ tests/
 ```
 
 Style: Python 3.11+ with modern type hints (`dict`, `list`, `| None`); ruff for lint + format; pytest with `asyncio_mode = "auto"`. Public functions and classes get docstrings.
 
-PRs welcome — open an issue first for anything substantial.
+Build/release docs live in [`docs/development.md`](./docs/development.md). PRs
+welcome — open an issue first for anything substantial.
 
 ---
 
@@ -229,7 +236,7 @@ PRs welcome — open an issue first for anything substantial.
 
 - [arcade.dev](https://arcade.dev) — product
 - [docs.arcade.dev](https://docs.arcade.dev) — API and tool catalog
-- [`docs/`](./docs/) — `mcp.md` (tool protocol), `configuration.md`, `channels.md`, `install.md`
+- [`docs/`](./docs/) — quickstart, examples, install, config, MCP, channels, voice, development, and adapters
 - [Issues](https://github.com/arcadeai-labs/cade/issues) · [Releases](https://github.com/arcadeai-labs/cade/releases)
 
 ## License

{cade_cli-0.11.0 → cade_cli-0.13.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "cade-cli"
-version = "0.11.0"
+version = "0.13.3"
 description = "Cade - The CLI Agent from Arcade.dev"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -27,26 +27,23 @@ dependencies = [
     "typer>0.10.0",
     "pydantic[email]>=2.0.0,<3.0.0",
     "toml>=0.10.0,<1.0.0",
-    "pyyaml>=6.0,<7.0.0",
     "openai>=1.0.0,<2.0.0",
     "anthropic>=0.34.0,<1.0.0",
     "ulid==1.1",
     "arcade-tdk>=3.8.0,<4.0.0",
-    "arcade-mcp-server>=1.21.0,<2.0.0",
+    "arcade-mcp-server>=1.22.0,<2.0.0",
     "arcade-core>=4.7.0,<5.0.0",
     "arcadepy>=1.10.0,<2.0.0",
     "authlib>=1.6.0,<2.0.0",
-    "pyperclip>=1.8.0,<2.0.0",
     "prompt-toolkit>=3.0.52,<4.0.0",
-    "tiktoken>=0.11.0,<1.0.0",
     "httpx>=0.27.0,<1.0.0",
     "filelock>=3.0.0,<4.0.0",
-    "agent-library>=0.12.0,<1.0.0",
-    "sounddevice>=0.5.5",
+    "agent-library>=0.13.1,<1.0.0",
     "croniter>=2.0.0,<4.0.0",
     "python-telegram-bot>=21.0,<22.0",
     "keyring>=24.0,<26.0",
     "html2text>=2024.2.26",
+    "websockets>=14.0,<16.0",
 ]
 
 [project.urls]
@@ -69,10 +66,13 @@ dev = [
     "pytest-cov>=4.0.0,<5.0.0",
     "mypy>=1.10.0,<2.0.0",
 ]
+build = [
+    "pyinstaller>=6.16.0,<7.0.0",
+]
 voice = [
     "mlx-audio>=0.2.0,<0.4.0",
     "mlx-whisper>=0.1.0",
-    "sounddevice>=0.4.0",
+    "sounddevice>=0.5.5,<1.0.0",
     "numpy>=1.24.0",
     "webrtcvad>=2.0.10",
 ]
@@ -100,6 +100,9 @@ packages = ["src/cadecoder", "src/cade_mcp_local"]
 testpaths = ["tests"]
 asyncio_mode = "auto"
 asyncio_default_fixture_loop_scope = "function"
+markers = [
+    "integration: tests that cross process or network boundaries without external services",
+]
 
 [tool.ruff]
 line-length = 100

cade_cli-0.13.3/src/cade_mcp_local/config.py

@@ -0,0 +1,116 @@
+"""Runtime configuration for the local MCP server.
+
+Configuration is resolved lazily at runtime, not at import time.
+This allows proper testing and correct behavior when installed as a package.
+"""
+
+import os
+import pathlib
+from functools import lru_cache
+
+# Environment variable that disables filesystem path confinement. When set to a
+# truthy value, filesystem tools may read/write paths outside the project root.
+#
+# This is intentionally a single on/off switch for now. A future iteration may
+# replace it with a richer policy (e.g. an explicit list of additional allowed
+# roots); keep `path_restrictions_enabled()` as the single read point so callers
+# don't need to change when that happens.
+PATH_RESTRICTIONS_ENV: str = "CADE_DISABLE_PATH_RESTRICTIONS"
+
+_TRUTHY_VALUES: frozenset[str] = frozenset({"1", "true", "yes", "on"})
+
+
+def path_restrictions_enabled() -> bool:
+    """Return whether filesystem tools must stay within the project root.
+
+    Restrictions are ON by default. They are lifted only when the
+    ``CADE_DISABLE_PATH_RESTRICTIONS`` environment variable is set to a truthy
+    value (``1``, ``true``, ``yes``, or ``on``, case-insensitive).
+
+    Returns:
+        True when path confinement should be enforced, False when tools may
+        access any path on the filesystem.
+
+    Examples:
+        >>> import os
+        >>> os.environ.pop("CADE_DISABLE_PATH_RESTRICTIONS", None)
+        >>> path_restrictions_enabled()
+        True
+        >>> os.environ["CADE_DISABLE_PATH_RESTRICTIONS"] = "1"
+        >>> path_restrictions_enabled()
+        False
+    """
+    raw = os.environ.get(PATH_RESTRICTIONS_ENV, "").strip().lower()
+    return raw not in _TRUTHY_VALUES
+
+
+def disable_path_restrictions() -> None:
+    """Lift filesystem path confinement for this process and its children.
+
+    Sets ``CADE_DISABLE_PATH_RESTRICTIONS`` in the environment so that child
+    processes (notably the local-tools MCP subprocess, which inherits
+    ``os.environ``) and the serve sandbox hook all observe the override.
+
+    This is the single supported way to flip the toggle on from code, keeping
+    the environment-variable name encapsulated in this module.
+    """
+    os.environ[PATH_RESTRICTIONS_ENV] = "1"
+
+
+@lru_cache(maxsize=1)
+def get_project_root() -> pathlib.Path:
+    """Get the project root directory.
+
+    Resolution order:
+    1. CADE_PROJECT_ROOT environment variable (set by parent process)
+    2. Current working directory
+
+    This is cached for performance but can be reset with reset_config().
+
+    Returns:
+        Resolved path to the project root directory.
+    """
+    if root := os.environ.get("CADE_PROJECT_ROOT"):
+        return pathlib.Path(root).resolve()
+    return pathlib.Path.cwd().resolve()
+
+
+def reset_config() -> None:
+    """Clear cached configuration.
+
+    Call this when:
+    - The working directory has changed
+    - CADE_PROJECT_ROOT environment variable has changed
+    - During testing to ensure isolation
+    """
+    get_project_root.cache_clear()
+
+
+# Default ignore patterns for file listings and searches
+DEFAULT_IGNORE_PATTERNS: list[str] = [
+    ".git",
+    "__pycache__",
+    "node_modules",
+    ".venv",
+    "venv",
+    ".mypy_cache",
+    ".pytest_cache",
+    "*.pyc",
+    ".DS_Store",
+    "*.egg-info",
+    "dist",
+    "build",
+    ".tox",
+    ".coverage",
+    "htmlcov",
+    ".idea",
+    ".vscode",
+    ".cursor",
+    ".claude",
+]
+
+# File operation limits
+MAX_LIST_DEPTH: int = 10
+MAX_LIST_RESULTS: int = 1000
+MAX_PREVIEW_BYTES: int = 100_000
+DEFAULT_TIMEOUT: int = 60

{cade_cli-0.11.0 → cade_cli-0.13.3}/src/cade_mcp_local/server.py

@@ -13,8 +13,12 @@ os.environ.setdefault("LOGURU_LEVEL", "WARNING")
 
 from arcade_mcp_server import MCPApp
 
-from cade_mcp_local.resources import register_resources
-from cade_mcp_local.tools import (
+from cadecoder.core.frozen import patch_frozen_return_detection
+
+patch_frozen_return_detection()
+
+from cade_mcp_local.resources import register_resources  # noqa: E402
+from cade_mcp_local.tools import (  # noqa: E402
     ask_user_question_tool,
     bash_tool,
     edit_tool,
@@ -69,7 +73,7 @@ def create_app() -> MCPApp:
         name="Local",
         transport="stdio",
         instructions=SERVER_INSTRUCTIONS,
-        log_level="info",
+        log_level="INFO",
     )
 
     # Filesystem tools

{cade_cli-0.11.0 → cade_cli-0.13.3}/src/cade_mcp_local/tools/filesystem.py

@@ -19,6 +19,7 @@ from cade_mcp_local.config import (
     MAX_LIST_RESULTS,
     MAX_PREVIEW_BYTES,
     get_project_root,
+    path_restrictions_enabled,
 )
 from cade_mcp_local.errors import (
     FileOperationError,
@@ -47,22 +48,25 @@ def _read_text_file(file_path: pathlib.Path) -> str:
 
 
 def _write_text_file(file_path: pathlib.Path, content: str) -> None:
-    """Write text content to a file, ensuring it's within project root."""
-    project_root = get_project_root()
+    """Write text content to a file, ensuring it's within project root.
+
+    Confinement to the project root is skipped when path restrictions are
+    disabled (see `path_restrictions_enabled`).
+    """
     resolved = file_path.resolve()
-    resolved_root = project_root.resolve()
 
-    # Security check: must be within project root
-    # Use string prefix check as fallback for symlink/worktree edge cases
-    try:
-        resolved.relative_to(resolved_root)
-    except ValueError:
-        # Fallback: compare resolved string paths
-        if not str(resolved).startswith(str(resolved_root) + "/"):
-            raise PathSecurityError(
-                str(file_path),
-                f"outside project root (resolved={resolved}, root={resolved_root})",
-            )
+    if path_restrictions_enabled():
+        resolved_root = get_project_root().resolve()
+        # Security check: must be within project root.
+        # Use string prefix check as fallback for symlink/worktree edge cases.
+        try:
+            resolved.relative_to(resolved_root)
+        except ValueError:
+            if not str(resolved).startswith(str(resolved_root) + "/"):
+                raise PathSecurityError(
+                    str(file_path),
+                    f"outside project root (resolved={resolved}, root={resolved_root})",
+                )
 
     # Create parent directories if needed
     resolved.parent.mkdir(parents=True, exist_ok=True)

{cade_cli-0.11.0 → cade_cli-0.13.3}/src/cade_mcp_local/utils.py

@@ -3,7 +3,11 @@
 import fnmatch
 import pathlib
 
-from cade_mcp_local.config import DEFAULT_IGNORE_PATTERNS, get_project_root
+from cade_mcp_local.config import (
+    DEFAULT_IGNORE_PATTERNS,
+    get_project_root,
+    path_restrictions_enabled,
+)
 
 
 def resolve_path(
@@ -46,7 +50,7 @@ def resolve_path(
     else:
         resolved = (base_dir / path).resolve()
 
-    if confine_to_root:
+    if confine_to_root and path_restrictions_enabled():
         root = get_project_root().resolve()
         try:
             resolved.relative_to(root)