utim-cli 1.46.32__tar.gz → 1.46.34__tar.gz

{utim_cli-1.46.32 → utim_cli-1.46.34}/CHANGELOG.md

@@ -2,7 +2,28 @@
 
 All notable changes to the UTIM CLI Agent will be documented in this file.
 
-## [1.46.32] - 2026-07-11
+## [1.46.34] - 2026-07-11
+
+### Added
+- **Expanded Rotating Tips System**: Expanded the CLI helper system with 18 pre-written tips covering shortcut keybinds, proxy configuration, model switching, and chat management. Updated rotation logic to advance the tip every 3 requests rather than on every turn to prevent rapid text cycling.
+- **Strict Disabled Tools Directives**: Rewrote system prompt directives to inject a hard "zero tools available" warning when all tools are turned off, prompting the agent to correctly answer "I currently don't have any tools".
+
+### Fixed
+- **Silent Tool Call Blocking**: Fixed tool execution dispatch to silently deny disabled tools to the user (instead of displaying console warning panels) while quietly returning a reject instruction to the model.
+- **Zero-Bypass MCP Execution Guard**: Extended the orchestrator's disabled tools validator to cover MCP sessions and custom tool routes before any early return execution paths can be taken.
+
+## [1.46.33] - 2026-07-11
+
+### Added
+- **Global User-Agent Shielding**: Upgraded request session patches to inject browser-like User-Agents (`Chrome/120.0.0.0`) on all outbound HTTP calls, bypassing proxy and WAF rate-limiting.
+- **Added /sslverify command**: Integrated a local slash command `/sslverify` to toggle SSL verification directly from the CLI input prompt without needing to edit config files manually.
+
+### Fixed
+- **BYOK & Custom Model Wizard Input Lag**: Fixed a bug where prompt inputs (e.g. entering provider number or API key) were buffered/hidden during the wizard flows. Decoupled input prompt streams in `_safe_prompt` by writing directly to `sys.__stdout__` and reading from `sys.__stdin__` to bypass `prompt_toolkit` interceptors.
+- **Improved API Auth Error Feedback**: Added specialized HTTPError handlers in the BYOK model discovery flow to catch 401 (Unauthorized) and 403 (Forbidden) response codes and print clear, actionable explanations instead of generic request tracebacks.
+- **Website GitHub Link Removal**: Removed GitHub project URLs, core repository connection cards, and community links from the landing pages and pricing documents.
+
+## [1.46.31] - 2026-07-11
 
 ### Added
 - **Dynamic Console Glyph Fallbacks**: Detected legacy Windows terminals (where `WT_SESSION` is not set) and automatically fell back to standard ASCII symbols (`>` and `->`) instead of unicode characters (`❯`, `▶`, and `➔`) to prevent `⍰` or empty box rendering issues.
@@ -13,9 +34,6 @@ All notable changes to the UTIM CLI Agent will be documented in this file.
 - **Global Config Null-Safety Improvements**: Fixed multiple potential crashes across the tools dialog, share manager, and usage dashboard when keys like `disabled_tools`, `mcpServers`, `role`, or `user_plan` are missing or set to `null` in config files.
 - **Server Upload Limit & Connection Resets**: Increased the `/shares/upload` workspace file sharing size limit from 4MB to 25MB on the server. Added stream consumption middleware handlers to prevent connection termination resets and `SSLEOFError` crashes on the client during larger uploads.
 - **Modern prompt_toolkit Style Crash**: Fixed a crash (`ValueError: Wrong color format 'dim'`) on lists with scrolling indicators (like the model dialog or history dialog) when run on newer versions of `prompt_toolkit` (3.0.40+) by correcting the shorthand styling `'dim fg:#f9e2af'` to `'class:dim fg:#f9e2af'`.
-- **User-Agent Shielding & HTTP 429 Proxy Blocks**: Patched the global requests Session initializer to spoof a standard browser User-Agent, preventing corporate firewalls/proxies from blocking or rate-limiting requests. Added HTML-stripping parser helpers to the orchestrator to extract and display readable error details directly inside the offline connection panels if a proxy returns an HTTP 429.
-- **Added /sslverify command**: Integrated a local slash command `/sslverify` to toggle SSL verification directly from the CLI input prompt without needing to edit config files manually.
-- **Automated SSL Verification Fallback**: Implemented an automated, silent self-healing retry mechanism inside the requests wrapper. If UTIM encounters an SSL validation failure (commonly caused by decrypting proxies/firewalls in corporate or local networks), it automatically suppresses warnings, updates the config file to persist `"verify_ssl": false`, and retries the connection silently in the background with SSL verification disabled, preventing any service interruption without displaying warning messages to the user.
 
 ## [1.46.29] - 2026-07-11
 

{utim_cli-1.46.32/utim_cli.egg-info → utim_cli-1.46.34}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: utim-cli
-Version: 1.46.32
+Version: 1.46.34
 Summary: UTIM – Universal Terminal Intelligence Manager. A powerful agentic AI coding assistant for your terminal.
 License: MIT
 Project-URL: Homepage, https://utim.dev

{utim_cli-1.46.32 → utim_cli-1.46.34}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "utim-cli"
-version = "1.46.32"
+version = "1.46.34"
 description = "UTIM – Universal Terminal Intelligence Manager. A powerful agentic AI coding assistant for your terminal."
 readme = "README.md"
 requires-python = ">=3.9"

{utim_cli-1.46.32 → utim_cli-1.46.34}/utim_cli/__init__.py

@@ -5,7 +5,7 @@ try:
     from utim_cli._version import VERSION as __version__
 except ImportError:
     # Fallback during first-install / editable-install edge cases
-    __version__ = "1.46.32"
+    __version__ = "1.46.34"
 
 import builtins, os, pathlib, urllib.parse, re
 

{utim_cli-1.46.32 → utim_cli-1.46.34}/utim_cli/_version.py

@@ -11,4 +11,4 @@
 # from here so every surface stays in sync automatically.
 # ─────────────────────────────────────────────────────────────────────────────
 
-VERSION = "1.46.32"
+VERSION = "1.46.34"

{utim_cli-1.46.32 → utim_cli-1.46.34}/utim_cli/config.py

@@ -22,62 +22,50 @@ class Config:
         self._global_data: Dict[str, Any] = {}
         self._local_data: Dict[str, Any] = {}
         self._load()
-        # Always inject a browser User-Agent to prevent firewalls/proxies blocking default python-requests
+        # Always inject a browser User-Agent to prevent firewalls/proxies blocking default python-requests.
+        # We patch Session.request (not __init__) so it applies to ALL sessions regardless of when
+        # they were created, and even when callers pass their own headers dict (the UA is merged in
+        # without overwriting any caller-supplied headers that may already have a User-Agent set).
         try:
-            import requests
-            original_init = requests.Session.__init__
-            def patched_init(self_session, *args, **kwargs):
-                original_init(self_session, *args, **kwargs)
-                self_session.headers.update({
-                    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
-                })
-            requests.Session.__init__ = patched_init
+            import requests as _req_mod
+            _BROWSER_UA = (
+                "Mozilla/5.0 (Windows NT 10.0; Win64; x64) "
+                "AppleWebKit/537.36 (KHTML, like Gecko) "
+                "Chrome/120.0.0.0 Safari/537.36"
+            )
+            _original_request = _req_mod.Session.request
+
+            def _ua_patched_request(self, method, url, *args, **kwargs):
+                # Merge headers so we never overwrite a caller-supplied User-Agent
+                hdrs = kwargs.pop("headers", None) or {}
+                if isinstance(hdrs, dict):
+                    hdrs = dict(hdrs)
+                else:
+                    hdrs = dict(hdrs)
+                hdrs.setdefault("User-Agent", _BROWSER_UA)
+                kwargs["headers"] = hdrs
+                return _original_request(self, method, url, *args, **kwargs)
+
+            _req_mod.Session.request = _ua_patched_request
         except Exception:
             pass
 
-        # Patch requests Session to support automatic SSL verification bypass and fallback
-        try:
-            import requests
-            original_request = requests.Session.request
-            def new_request(self_session, method, url, *args, **kwargs):
-                # If verify_ssl is explicitly False, always disable verification
-                if not self.verify_ssl:
-                    kwargs['verify'] = False
-                    return original_request(self_session, method, url, *args, **kwargs)
-
-                try:
-                    return original_request(self_session, method, url, *args, **kwargs)
-                except Exception as exc:
-                    is_ssl_err = False
-                    err_str = str(exc).lower()
-                    if "ssl" in err_str and ("cert" in err_str or "verify" in err_str or "untrusted" in err_str or "authority" in err_str):
-                        is_ssl_err = True
-
-                    if is_ssl_err:
-                        try:
-                            import urllib3
-                            urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
-                        except Exception:
-                            pass
-                        try:
-                            self.set("verify_ssl", False)
-                        except Exception:
-                            pass
-                        kwargs['verify'] = False
-                        return original_request(self_session, method, url, *args, **kwargs)
-                    raise exc
-
-            requests.Session.request = new_request
-        except Exception:
-            pass
-
-        # Suppress warnings if SSL verification is disabled
+        # Suppress warnings and patch requests if SSL verification is disabled
         if not self.verify_ssl:
             try:
                 import urllib3
                 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
             except Exception:
                 pass
+            try:
+                import requests as _req_mod2
+                _original_request2 = _req_mod2.Session.request
+                def _ssl_patched_request(self, method, url, *args, **kwargs):
+                    kwargs.setdefault('verify', False)
+                    return _original_request2(self, method, url, *args, **kwargs)
+                _req_mod2.Session.request = _ssl_patched_request
+            except Exception:
+                pass
 
     def _load(self):
         # Load global config