Main Flask application class, instance creation, and public API exports.

Defines Flask application factory, initializes database ORM, and sets up routes.

requests.api ~~~~~~~~~~~~ This module implements the Requests API. :copyright: (c) 2012 by Kenneth Reitz. :license: Apache2, see LICENSE for more details.

Wraps Werkzeug's Request class—Flask's request object handling HTTP request data within the Flask application framework.

Schema‑validated, safe registry for browser hook actions, replacing exec‑based hooks in the Docker server.

Defines Flask's application class managing routing, configuration, and request/response lifecycle sans-I/O.

Next.js API route that serves files from the project root, employing Upstash caching and sliding‑window rate limiting for llms.txt requests.

Core Express web framework: app factory, routing, middleware composition, request/response helpers.

requests.sessions ~~~~~~~~~~~~~~~~~ This module provides a Session object to manage and persist settings across requests (cookies, auth, proxies).

Main application class for FastAPI, extending Starlette. It configures API metadata, routes, middleware, and OpenAPI documentation, serving as the central entry point for building

Process tree signal validation and Unix signal helpers. ! ! Rejects unsafe signal targets (pid 0/1, the current agent, its parent, ! and protected system processes), verifies that

Resolves executable binaries, spawns processes, manages paths, handles health checks for command execution utility in Go.

requests.exceptions ~~~~~~~~~~~~~~~~~~~ This module contains the set of Requests' exceptions.

requests.adapters ~~~~~~~~~~~~~~~~~ This module contains the transport adapters that Requests uses to define and maintain connections.

Sliding-window rate limiters for abuse prevention. Supports an in-memory backend (default, no external dependencies) and a Redis-backed backend for multi-process / distributed depl

requests.structures ~~~~~~~~~~~~~~~~~~~ Data structures that power Requests.

NATS KV-based policy synchronization. ! ! Watches a tenant/agent-scoped KV bucket for policy updates and writes ! them to the local policy file. On delete events, the last known po

Stub for unimplemented endpoint responses; saves sessions in init.ts.

Provides read-only access to Tailscale API types, separating data views from mutable types for safe sharing.

Encrypts and decrypts tokens using AES‑256‑GCM with a base64 key from environment variables, adding a prefix for detection. Reuse for secure storage of API keys or session tokens.

Applies seccomp BPF filters to the calling thread for syscall sandboxing and restrictions.

Stores and restores async run context (session, state, request metadata) for propagation across reentrant calls and async task boundaries.

Manages TCP communication to and from a Redis server, handling connection setup, keepalive configuration, and error reporting.

Validates and pins outbound IPs, blocking non‑global addresses to prevent SSRF in Docker deployments.

Trace sink that fans out records to multiple child sinks, combining their status and statistics while ensuring one child's failure doesn't block others.

Canonical NATS subject and stream name helpers. ! ! The cloud enrollment response provides a tenant-scoped `subject_prefix`. ! All adaptive-SDR NATS channels must derive from that

Core configuration management for API keys, environment, and runtime settings.

express Copyright(c) 2009-2013 TJ Holowaychuk Copyright(c) 2013 Roman Shtylman Copyright(c) 2014-2015 Douglas Christopher Wilson MIT Licensed /

Cross-platform detection utilities for NanoClaw setup. /

Configures Linux cgroups for resource isolation constraints.

Step 1: → step 2 tool: step 1. terse " no step 1: step 2 steps: no nodes? step 1, step 2, step 3? null?** Actually terse per instructions. Output: "Loads persisted loop-guard state

Middleware automatically trimming string inputs and converting empty strings to null.

Middleware preventing all requests during maintenance mode except from allowed IPs.

MCP client implementation handling connection, capability negotiation, protocol handshakes, paginated listing, caching, and request validation.

Centralised settings classes using Pydantic Settings for tool, summarizer, model, and test configuration, loading from .env.

Enables SSBD (Speculative Store Bypass Disable) mitigation for CPU speculative execution vulnerabilities in Firecracker's main entry point.

Implements the MCP Streamable HTTP transport using Web Standard APIs, handling POST/GET/DELETE, SSE streams, JSON responses, session validation, and resumability.

Resolves the platform-specific cache directory for AxonFlow, honoring an explicit override, XDG, and OS conventions. Centralizes state location logic for portability and testabilit

Safe, typed Redis operations with env validation, timeout handling and diagnostics for serverless environments.

Generates a unique ID by combining a prefix with a random UUID stripped of dashes, used for creating distinct identifiers.

Loads, validates, and normalizes netlify.toml with context/branch resolution, environment variable merging, and Netlify API integration.

Filters Docker and kubectl output into compact summaries.

Singleton factory function returning the Orchestrator instance, throwing if uninitialized; part of the orchestrator state management store.

Validates that an inference endpoint resolves to a public address, preserving trusted private inference routes and preventing SSRF attacks.

Runtime-agent registration and identity normalization. ! ! Maintains a local persistent catalog of runtime agents (Claude Code/OpenClaw/MCP/etc) ! so policy events can reference st

Checks if a protocol version is modern by comparing against the first modern version threshold. Used widely to gate modern protocol behavior.

Spawns Claude process, builds command, reads session telemetry, and formats output markers for CLI execution.

Calculates body size from stream or content-length for HTTP client requests/responses.

Thread-local proxy objects for request, session, app context, and g.

Encodes and decodes Shadowsocks 2022 UDP packets, supporting multiple cipher methods and PSK lists.