agent-toggle 0.16.1__tar.gz → 0.17.0__tar.gz

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-toggle
-Version: 0.16.1
+Version: 0.17.0
 Summary: Temporarily disable / re-enable AI-agent skills, agents, commands, rules, plugins and MCP servers across harnesses (Claude Code, Codex, Grok, OpenCode, OpenClaw, Copilot, Vibe, Devin, Antigravity)
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/weskao/agent-toggle
@@ -168,6 +168,9 @@ installs above, type this at the prompt of a Claude Code terminal session (2.1.2
 ```
 
 Answer `y` to add the marketplace, pick a scope (user is the default), then run `/agent-toggle`.
+The same mod is also listed in the `weskao-agent-plugins` marketplace
+(`claude plugin marketplace add weskao/weskao-agent-plugins`, then
+`claude plugin install agent-toggle@weskao-agent-plugins`); install it from one of the two, not both.
 
 See [Claude Code pane mod](#claude-code-pane-mod).
 
@@ -260,7 +263,7 @@ Flags accepted by every command, before or after the subcommand:
 
 Extra row fields: `list` rows carry `at`, `mechanism`, `companions`; `cost` rows
 carry `enabled`, `tokens`, `would_save`, `chars`, and the final `total` row
-carries `total_tokens`, `saved_tokens`, `formula`. Rows for a
+carries `total_tokens`, `saved_tokens`, `formula`, `version`. Rows for a
 directory shared with another harness (see below) carry `shared_with`, the other
 harnesses that read it: `disable` / `enable` rows relative to the harness you
 asked, plus `owner`, the harness whose park dir and state entry hold the item;
@@ -498,7 +501,7 @@ invalid value in either is ignored with one warning on stderr.
 
 ## Update check
 
-On every invocation (unless disabled) agent-toggle checks PyPI for a newer release. It starts
+On every invocation (unless disabled) agent-toggle checks the repository's release tags for a newer release. It starts
 before the command and is offered after it, on every exit path; it overlaps the command and waits at most 0.8 s afterwards.
 `update` and `completion` skip it.
 
@@ -513,9 +516,9 @@ before the command and is offered after it, on every exit path; it overlaps the
   then `  agent-toggle update`.
 - It never changes the exit code or stdout, so `--json` output stays one document.
 
-It is one `GET https://pypi.org/pypi/agent-toggle/json` on a background thread with a 0.8 s
-timeout, cached for 10 minutes in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a
-normal HTTP request with the User-Agent `agent-toggle-update-check`. See `SECURITY.md`
+The lookup is update-kit's: one `git ls-remote --tags --refs` of the repository on a background
+thread, cached for 10 minutes in `~/.update-kit/state.json`. Only the version you chose to skip is
+kept in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a normal git request. See `SECURITY.md`
 for the hardening. To turn it off, set `AGENT_TOGGLE_UPDATE_CHECK=0` or the `update_check` setting
 to off (the settings menu's "Check for updates").
 
@@ -527,9 +530,9 @@ tag (`git ls-remote --tags`) and always installs that tag with
 `uv tool install --force --no-sources git+<repo>@<tag>` (`pipx install --force` for a pipx install).
 A dev checkout, a branch or commit install, or an unmanaged install is replaced by the tag too
 (with uv, else pipx); only an install made from exactly that tag is already up to date.
-It then runs, with the new binary and in order: when the Claude Code plugin is installed,
-`claude plugin marketplace update agent-toggle` and `claude plugin update agent-toggle@agent-toggle`,
-then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
+It then runs, with the new binary and in order: when the Claude Code plugin is installed (from any
+marketplace), `claude plugin marketplace update <marketplace>` and
+`claude plugin update agent-toggle@<marketplace>`, then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
 It never prompts and writes to stderr only.
 
 | Exit | Meaning |
@@ -931,7 +934,7 @@ bookkeeping.
 | `parked/<sha8>/` | items parked by `--project` (`<sha8>` = first 8 hex of the SHA-1 of the resolved project dir) |
 | `profiles/` | `<name>.json` profiles (dir `0700`, files `0600`) |
 | `config.json` | [settings](#settings--config-menu) and the Telegram chat id (mode `0600`, atomic write, unknown keys kept) |
-| `update-check.json` | the [update check](#update-check)'s 10-minute cache (mode `0600`, atomic write) |
+| `update-check.json` | the [update check](#update-check)'s skipped version (mode `0600`, atomic write) |
 
 A killed run loses at most the one item in flight. If that was a flag write or a
 dir move (with its companions), its `pending` record (the full entry, a flag's
@@ -1011,8 +1014,9 @@ CLI (`cost --json`, `disable|enable --json`) and works for the claude harness on
 `agent-toggle ui` stays the cross-harness UI.
 
 Install it with `/plugin install agent-toggle --marketplace weskao/agent-toggle` (see
-[Install](#install)); `claude plugin update agent-toggle@agent-toggle` picks up a new release. To
-run your own checkout instead (edits reload as you save):
+[Install](#install)); `/agent-toggle update` picks up a new release: it runs `agent-toggle update`,
+which updates the CLI, this mod and the shims together (restart Claude Code to load the new mod).
+The mod and the CLI share one version. To run your own checkout instead (edits reload as you save):
 
 ```sh
 claude --plugin-dir ./mod    # then run /agent-toggle inside Claude
@@ -1144,8 +1148,10 @@ prints a `::notice::` and exits 0, so it never adds a second red X.
 ## Releasing
 
 A release is a git tag `vX.Y.Z` (where `X.Y.Z` must match `agent_toggle.__version__`).
-Bump `version` in `mod/.claude-plugin/plugin.json` to the same value by hand; nothing checks it,
-and without it `claude plugin update` does not hand marketplace installs the new mod.
+`version` in `mod/.claude-plugin/plugin.json` must be the same value (the mod ships in lockstep;
+without the bump `claude plugin update` does not hand marketplace installs the new mod).
+`tests/test_mod_version.py` and the release workflow both fail on a mismatch.
+The `weskao-agent-plugins` marketplace lists the mod without a version, so it needs no bump there.
 Pushing the tag triggers `.github/workflows/release.yml`:
 
 1. **Build** job checks that the tag matches `__version__`, builds a wheel and

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/README.md

@@ -134,6 +134,9 @@ installs above, type this at the prompt of a Claude Code terminal session (2.1.2
 ```
 
 Answer `y` to add the marketplace, pick a scope (user is the default), then run `/agent-toggle`.
+The same mod is also listed in the `weskao-agent-plugins` marketplace
+(`claude plugin marketplace add weskao/weskao-agent-plugins`, then
+`claude plugin install agent-toggle@weskao-agent-plugins`); install it from one of the two, not both.
 
 See [Claude Code pane mod](#claude-code-pane-mod).
 
@@ -226,7 +229,7 @@ Flags accepted by every command, before or after the subcommand:
 
 Extra row fields: `list` rows carry `at`, `mechanism`, `companions`; `cost` rows
 carry `enabled`, `tokens`, `would_save`, `chars`, and the final `total` row
-carries `total_tokens`, `saved_tokens`, `formula`. Rows for a
+carries `total_tokens`, `saved_tokens`, `formula`, `version`. Rows for a
 directory shared with another harness (see below) carry `shared_with`, the other
 harnesses that read it: `disable` / `enable` rows relative to the harness you
 asked, plus `owner`, the harness whose park dir and state entry hold the item;
@@ -464,7 +467,7 @@ invalid value in either is ignored with one warning on stderr.
 
 ## Update check
 
-On every invocation (unless disabled) agent-toggle checks PyPI for a newer release. It starts
+On every invocation (unless disabled) agent-toggle checks the repository's release tags for a newer release. It starts
 before the command and is offered after it, on every exit path; it overlaps the command and waits at most 0.8 s afterwards.
 `update` and `completion` skip it.
 
@@ -479,9 +482,9 @@ before the command and is offered after it, on every exit path; it overlaps the
   then `  agent-toggle update`.
 - It never changes the exit code or stdout, so `--json` output stays one document.
 
-It is one `GET https://pypi.org/pypi/agent-toggle/json` on a background thread with a 0.8 s
-timeout, cached for 10 minutes in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a
-normal HTTP request with the User-Agent `agent-toggle-update-check`. See `SECURITY.md`
+The lookup is update-kit's: one `git ls-remote --tags --refs` of the repository on a background
+thread, cached for 10 minutes in `~/.update-kit/state.json`. Only the version you chose to skip is
+kept in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a normal git request. See `SECURITY.md`
 for the hardening. To turn it off, set `AGENT_TOGGLE_UPDATE_CHECK=0` or the `update_check` setting
 to off (the settings menu's "Check for updates").
 
@@ -493,9 +496,9 @@ tag (`git ls-remote --tags`) and always installs that tag with
 `uv tool install --force --no-sources git+<repo>@<tag>` (`pipx install --force` for a pipx install).
 A dev checkout, a branch or commit install, or an unmanaged install is replaced by the tag too
 (with uv, else pipx); only an install made from exactly that tag is already up to date.
-It then runs, with the new binary and in order: when the Claude Code plugin is installed,
-`claude plugin marketplace update agent-toggle` and `claude plugin update agent-toggle@agent-toggle`,
-then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
+It then runs, with the new binary and in order: when the Claude Code plugin is installed (from any
+marketplace), `claude plugin marketplace update <marketplace>` and
+`claude plugin update agent-toggle@<marketplace>`, then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
 It never prompts and writes to stderr only.
 
 | Exit | Meaning |
@@ -897,7 +900,7 @@ bookkeeping.
 | `parked/<sha8>/` | items parked by `--project` (`<sha8>` = first 8 hex of the SHA-1 of the resolved project dir) |
 | `profiles/` | `<name>.json` profiles (dir `0700`, files `0600`) |
 | `config.json` | [settings](#settings--config-menu) and the Telegram chat id (mode `0600`, atomic write, unknown keys kept) |
-| `update-check.json` | the [update check](#update-check)'s 10-minute cache (mode `0600`, atomic write) |
+| `update-check.json` | the [update check](#update-check)'s skipped version (mode `0600`, atomic write) |
 
 A killed run loses at most the one item in flight. If that was a flag write or a
 dir move (with its companions), its `pending` record (the full entry, a flag's
@@ -977,8 +980,9 @@ CLI (`cost --json`, `disable|enable --json`) and works for the claude harness on
 `agent-toggle ui` stays the cross-harness UI.
 
 Install it with `/plugin install agent-toggle --marketplace weskao/agent-toggle` (see
-[Install](#install)); `claude plugin update agent-toggle@agent-toggle` picks up a new release. To
-run your own checkout instead (edits reload as you save):
+[Install](#install)); `/agent-toggle update` picks up a new release: it runs `agent-toggle update`,
+which updates the CLI, this mod and the shims together (restart Claude Code to load the new mod).
+The mod and the CLI share one version. To run your own checkout instead (edits reload as you save):
 
 ```sh
 claude --plugin-dir ./mod    # then run /agent-toggle inside Claude
@@ -1110,8 +1114,10 @@ prints a `::notice::` and exits 0, so it never adds a second red X.
 ## Releasing
 
 A release is a git tag `vX.Y.Z` (where `X.Y.Z` must match `agent_toggle.__version__`).
-Bump `version` in `mod/.claude-plugin/plugin.json` to the same value by hand; nothing checks it,
-and without it `claude plugin update` does not hand marketplace installs the new mod.
+`version` in `mod/.claude-plugin/plugin.json` must be the same value (the mod ships in lockstep;
+without the bump `claude plugin update` does not hand marketplace installs the new mod).
+`tests/test_mod_version.py` and the release workflow both fail on a mismatch.
+The `weskao-agent-plugins` marketplace lists the mod without a version, so it needs no bump there.
 Pushing the tag triggers `.github/workflows/release.yml`:
 
 1. **Build** job checks that the tag matches `__version__`, builds a wheel and

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/__init__.py

@@ -1,3 +1,3 @@
 """agent-toggle: temporarily disable / re-enable AI-agent resources."""
 
-__version__ = "0.16.1"
+__version__ = "0.17.0"

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/backends/flag_json.py

@@ -25,9 +25,9 @@ from __future__ import annotations
 
 import json
 import re
+from collections.abc import Sequence
 from json.decoder import WHITESPACE, scanstring
 from pathlib import Path
-from typing import Sequence
 
 from agent_toggle import fs
 

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/backends/plugin_cli.py

@@ -10,8 +10,8 @@ import os
 import shutil
 import subprocess
 import sys
+from collections.abc import Callable
 from pathlib import Path
-from typing import Callable
 
 from .. import fs
 

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/cli.py

@@ -298,7 +298,7 @@ def cmd_cost(state: dict, out: Result, harness: str | None = None,
     if len(shown) > len(items):
         _say_hidden(out, f"{len(shown) - len(items)} hidden by settings (agent-toggle config)")
     out.row(harness, type_, None, "cost", "ok", "total", show=False, items=len(items),
-            total_tokens=live, saved_tokens=saved, formula=cost.FORMULA,
+            total_tokens=live, saved_tokens=saved, formula=cost.FORMULA, version=__version__,
             **({"project": str(proj)} if proj else {}))
 
 

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/cost.py

@@ -26,10 +26,10 @@ from __future__ import annotations
 import json
 import re
 from collections import Counter
+from collections.abc import Callable
 from concurrent.futures import ThreadPoolExecutor
 from dataclasses import dataclass
 from pathlib import Path
-from typing import Callable
 
 from . import fs
 from .backends.flag_json import jsonc_loads

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/doctor.py

@@ -15,8 +15,9 @@ import filecmp
 import json
 import os
 import shutil
+from collections.abc import Callable
 from pathlib import Path
-from typing import Callable, NamedTuple
+from typing import NamedTuple
 
 from . import fs, ops, store
 from .backends.flag_json import jsonc_loads

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/harnesses.py

@@ -2,10 +2,10 @@
 from __future__ import annotations
 
 import os
+from collections.abc import Mapping
 from dataclasses import dataclass, field
 from pathlib import Path
 from types import MappingProxyType
-from typing import Mapping
 
 from . import fs
 from .backends import flag_json

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/ui/config_menu.py

@@ -17,8 +17,8 @@ import contextlib
 import io
 import sys
 import time
+from collections.abc import Callable
 from dataclasses import dataclass
-from typing import Callable
 
 from .. import __version__, config, doctor, fs, harnesses, i18n, settings, undo
 from ..i18n import t

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/ui/picker.py

@@ -498,7 +498,7 @@ def ask_save(win, v: View, pal: theme.Palette, g: theme.Glyphs,
             top = min(top, max(0, len(changed) - max(1, page)))
             row_y = y0 + (2 if bh >= 7 else 1)
 
-            def put(y, segments):
+            def put(y, segments, x0=x0, inner=inner):
                 theme.draw_segments(win, y, x0, [(g.v, "accent"),
                     *clip(segments, inner, g.ellipsis), (g.v, "accent")], pal)
 

agent_toggle-0.17.0/agent_toggle/update_check.py

@@ -0,0 +1,209 @@
+"""Update check on top of update-kit, plus the "skip this version" memory.
+
+    from agent_toggle.update_check import check
+    found = check("1.0.0", cache_path=Path.home() / ".agent-toggle" / "update-check.json")
+    if found:
+        print(f"{found.latest} is available (you have {found.current})")
+
+The lookup itself -- ``git ls-remote`` of the release tags, the 10-minute cache in
+``~/.update-kit/state.json``, the timeout -- is :func:`update_kit.check`; ``latest`` is
+the tag as it returns it (``v1.2.0``). Only the skipped version lives in *cache_path*.
+
+To overlap the lookup with the command's own work instead of paying for
+it at exit, start it early and collect the result at the end:
+
+    started = start("1.0.0", cache_path=...)
+    ...  # the command's own work
+    found = collect(started)
+
+To ask the user what to do instead of only hinting, hand :func:`offer` the
+UI as a callback -- it owns what each answer does, the UI only picks one:
+
+    offer(started, ask, cache_path=..., upgrade=["uv", "tool", "upgrade", "agent-toggle"])
+
+where ``ask(found)`` returns ``UPDATE_NOW``, ``SKIP`` or ``SKIP_VERSION``.
+When the upgrade depends on the version or takes several steps, pass a
+callable instead: ``upgrade=lambda found: [[...], [...]]`` runs each command
+in order and stops at the first one that fails.
+``SKIP_VERSION`` is remembered in *cache_path*; a newer release asks again.
+
+Nothing here is allowed to raise to the caller: a missing cache, a bad
+payload, or a dead network all become ``None``.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import re
+import subprocess
+import threading
+from collections.abc import Callable, Sequence
+from dataclasses import dataclass, field
+from pathlib import Path
+
+__all__ = [
+    "DEFAULT_TIMEOUT",
+    "REPO",
+    "SKIP",
+    "SKIP_VERSION",
+    "UPDATE_NOW",
+    "UPGRADE_FAILED",
+    "Started",
+    "UpdateAvailable",
+    "check",
+    "collect",
+    "offer",
+    "skip",
+    "start",
+]
+
+REPO = "weskao/agent-toggle"
+#: How long :func:`collect` waits for the background lookup before giving up on it.
+DEFAULT_TIMEOUT = 0.8
+
+#: Answers an ``ask`` callback returns to :func:`offer`.
+UPDATE_NOW = "update-now"
+SKIP = "skip"
+SKIP_VERSION = "skip-version"
+#: What :func:`offer` returns when UPDATE_NOW's command could not run or failed.
+UPGRADE_FAILED = "upgrade-failed"
+
+#: What a skipped version may look like before it is trusted: it is read from a file.
+_VERSION_RE = re.compile(r"v?\d{1,6}(\.\d{1,6}){1,3}([a-zA-Z0-9.+-]{0,20})?")
+
+
+@dataclass(frozen=True)
+class UpdateAvailable:
+    current: str
+    latest: str
+
+
+def check(current: str, *, cache_path: Path) -> UpdateAvailable | None:
+    """Return an update when the latest release is newer than *current* and not the
+    version skipped in *cache_path*, else None. Never raises."""
+    try:
+        import update_kit  # lazy: a checkout run or a stale env lacks it
+
+        latest = update_kit.check(repo=REPO, current=current)
+        if not isinstance(latest, str) or _bare(latest) == _bare(_load_cache(cache_path).get("skipped")):
+            return None
+        return UpdateAvailable(current=current, latest=latest)
+    except Exception:  # noqa: BLE001 - a hint must never fail the command
+        return None
+
+
+@dataclass
+class Started:
+    """A background check in flight; pass to :func:`collect` to get its result."""
+
+    thread: threading.Thread
+    _result: list = field(default_factory=list)
+
+
+def start(current: str, *, cache_path: Path) -> Started:
+    """Run :func:`check` on a daemon thread so it overlaps the caller's own work."""
+    result: list = []
+
+    def run() -> None:
+        result.append(check(current, cache_path=cache_path))
+
+    thread = threading.Thread(target=run, name="agent-toggle-update-check", daemon=True)
+    thread.start()
+    return Started(thread=thread, _result=result)
+
+
+def collect(started: Started | None, *, timeout: float = DEFAULT_TIMEOUT) -> UpdateAvailable | None:
+    """Wait for a :func:`start`-ed check and return its result. Never raises."""
+    if started is None:
+        return None
+    try:
+        # Usually already done: it ran alongside the caller's own work.
+        started.thread.join(timeout)
+        return started._result[0] if started._result else None
+    except Exception:  # noqa: BLE001 - a hint must never fail the command
+        return None
+
+
+def skip(cache_path: Path, version: str) -> None:
+    """Stop reporting *version*; a newer release is reported again. Never raises."""
+    data = _load_cache(cache_path)
+    data["skipped"] = version
+    _write_cache(cache_path, data)
+
+
+def offer(
+    started: Started | None,
+    ask: Callable[[UpdateAvailable], str],
+    *,
+    cache_path: Path,
+    upgrade: Sequence[str] | Callable[[UpdateAvailable], Sequence[Sequence[str]]],
+    run: Callable[..., object] = subprocess.run,
+) -> str | None:
+    """Collect *started*, let *ask* pick an answer, then act on it.
+
+    *upgrade* is one command, or a callable building the commands from the
+    found release, run in order. Returns the answer acted on
+    (``UPGRADE_FAILED`` when a command is missing or exits nonzero — the
+    rest are then skipped), or None when there was nothing to offer. Ctrl+C
+    inside *ask* is ``SKIP``. Never raises.
+    """
+    try:
+        found = collect(started)
+        if found is None:
+            return None
+        try:
+            answer = ask(found)
+        except KeyboardInterrupt:
+            return SKIP
+        if answer == SKIP_VERSION:
+            skip(cache_path, found.latest)
+        elif answer == UPDATE_NOW:
+            steps = upgrade(found) if callable(upgrade) else [upgrade]
+            for step in steps:
+                try:
+                    done = run(list(step), check=False)
+                except OSError:
+                    return UPGRADE_FAILED
+                if getattr(done, "returncode", 1) != 0:
+                    return UPGRADE_FAILED
+        return answer
+    except Exception:  # noqa: BLE001 - an update offer must never fail the command
+        return None
+
+
+def _bare(version: object) -> str | None:
+    """*version* without a leading ``v`` (an old cache holds PyPI's ``0.10.0``, now tags)."""
+    return version.removeprefix("v") if isinstance(version, str) else None
+
+
+def _load_cache(path: Path) -> dict:
+    try:
+        data = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, ValueError, RecursionError):    # RecursionError: a deeply nested file
+        return {}
+    if not isinstance(data, dict):
+        return {}
+    # Only a valid skipped version survives: a hostile file can't smuggle anything
+    # (e.g. a 100k-deep dict that json.dumps can't write back), and old
+    # checked_at/latest keys are dropped on the next write.
+    skipped = data.get("skipped")
+    return {"skipped": skipped} if isinstance(skipped, str) and _VERSION_RE.fullmatch(skipped) else {}
+
+
+def _write_cache(path: Path, data: dict) -> None:
+    # tmp + os.replace never follows a symlink at *path*; 0600 from creation.
+    tmp = path.with_name(f".{path.name}.{os.getpid()}.tmp")
+    try:
+        path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+        tmp.unlink(missing_ok=True)
+        fd = os.open(tmp, os.O_CREAT | os.O_EXCL | os.O_WRONLY, 0o600)
+        try:
+            with os.fdopen(fd, "w", encoding="utf-8") as fh:
+                fh.write(json.dumps(data) + "\n")
+            os.replace(tmp, path)
+        except BaseException:
+            tmp.unlink(missing_ok=True)
+            raise
+    except (OSError, RecursionError, ValueError):
+        return

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle/update_prompt.py

@@ -28,8 +28,7 @@ from .output import use_color
 from .ui import theme
 
 DIST = "agent-toggle"
-REPO = "weskao/agent-toggle"
-PLUGIN = "agent-toggle@agent-toggle"
+REPO = update_check.REPO
 UPDATE = [DIST, "update"]
 RELEASE_NOTES = "https://github.com/weskao/agent-toggle/releases/tag/v%s"
 ANSWERS = (update_check.UPDATE_NOW, update_check.SKIP, update_check.SKIP_VERSION)
@@ -48,9 +47,13 @@ def after_steps() -> list[list[str]]:
     installed, then the shims."""
     steps: list[list[str]] = []
     # bare "claude": what a person pastes; _run() resolves it, as claude is often off PATH
-    if plugin_cli.claude_bin() and any(p["id"] == PLUGIN for p in plugin_cli.list_plugins(lambda _msg: None)):
-        steps += [["claude", "plugin", "marketplace", "update", DIST],
-                  ["claude", "plugin", "update", PLUGIN]]
+    if plugin_cli.claude_bin():
+        # any marketplace the mod came from; one id lists once per scope
+        installed = sorted({p["id"] for p in plugin_cli.list_plugins(lambda _msg: None)
+                            if p["id"].partition("@")[0] == DIST})
+        for pid in installed:
+            steps += [["claude", "plugin", "marketplace", "update", pid.partition("@")[2]],
+                      ["claude", "plugin", "update", pid]]
     return [*steps, [DIST, "install-shims"]]
 
 
@@ -93,12 +96,12 @@ def cache_path() -> Path:
 
 
 def start() -> update_check.Started | None:
-    """Kick off the PyPI check on a daemon thread, unless the `update_check` setting
-    (env AGENT_TOGGLE_UPDATE_CHECK wins) is off. Never raises."""
+    """Kick off the release check (update_kit) on a daemon thread, unless the `update_check`
+    setting (env AGENT_TOGGLE_UPDATE_CHECK wins) is off. Never raises."""
     try:
         if not settings.get("update_check"):
             return None
-        return update_check.start(DIST, __version__, cache_path=cache_path())
+        return update_check.start(__version__, cache_path=cache_path())
     except Exception:  # noqa: BLE001 - a hint must never fail the command
         return None
 
@@ -112,7 +115,7 @@ def is_interactive() -> bool:
 
 def _available(found: update_check.UpdateAvailable) -> str:
     return t("update.available", "agent-toggle %s is available (you have %s)",
-             _clean(found.latest), _clean(found.current))
+             _clean(found.latest).removeprefix("v"), _clean(found.current))
 
 
 def hint(found: update_check.UpdateAvailable) -> str:

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-toggle
-Version: 0.16.1
+Version: 0.17.0
 Summary: Temporarily disable / re-enable AI-agent skills, agents, commands, rules, plugins and MCP servers across harnesses (Claude Code, Codex, Grok, OpenCode, OpenClaw, Copilot, Vibe, Devin, Antigravity)
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/weskao/agent-toggle
@@ -168,6 +168,9 @@ installs above, type this at the prompt of a Claude Code terminal session (2.1.2
 ```
 
 Answer `y` to add the marketplace, pick a scope (user is the default), then run `/agent-toggle`.
+The same mod is also listed in the `weskao-agent-plugins` marketplace
+(`claude plugin marketplace add weskao/weskao-agent-plugins`, then
+`claude plugin install agent-toggle@weskao-agent-plugins`); install it from one of the two, not both.
 
 See [Claude Code pane mod](#claude-code-pane-mod).
 
@@ -260,7 +263,7 @@ Flags accepted by every command, before or after the subcommand:
 
 Extra row fields: `list` rows carry `at`, `mechanism`, `companions`; `cost` rows
 carry `enabled`, `tokens`, `would_save`, `chars`, and the final `total` row
-carries `total_tokens`, `saved_tokens`, `formula`. Rows for a
+carries `total_tokens`, `saved_tokens`, `formula`, `version`. Rows for a
 directory shared with another harness (see below) carry `shared_with`, the other
 harnesses that read it: `disable` / `enable` rows relative to the harness you
 asked, plus `owner`, the harness whose park dir and state entry hold the item;
@@ -498,7 +501,7 @@ invalid value in either is ignored with one warning on stderr.
 
 ## Update check
 
-On every invocation (unless disabled) agent-toggle checks PyPI for a newer release. It starts
+On every invocation (unless disabled) agent-toggle checks the repository's release tags for a newer release. It starts
 before the command and is offered after it, on every exit path; it overlaps the command and waits at most 0.8 s afterwards.
 `update` and `completion` skip it.
 
@@ -513,9 +516,9 @@ before the command and is offered after it, on every exit path; it overlaps the
   then `  agent-toggle update`.
 - It never changes the exit code or stdout, so `--json` output stays one document.
 
-It is one `GET https://pypi.org/pypi/agent-toggle/json` on a background thread with a 0.8 s
-timeout, cached for 10 minutes in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a
-normal HTTP request with the User-Agent `agent-toggle-update-check`. See `SECURITY.md`
+The lookup is update-kit's: one `git ls-remote --tags --refs` of the repository on a background
+thread, cached for 10 minutes in `~/.update-kit/state.json`. Only the version you chose to skip is
+kept in `~/.agent-toggle/update-check.json`. Nothing is sent beyond a normal git request. See `SECURITY.md`
 for the hardening. To turn it off, set `AGENT_TOGGLE_UPDATE_CHECK=0` or the `update_check` setting
 to off (the settings menu's "Check for updates").
 
@@ -527,9 +530,9 @@ tag (`git ls-remote --tags`) and always installs that tag with
 `uv tool install --force --no-sources git+<repo>@<tag>` (`pipx install --force` for a pipx install).
 A dev checkout, a branch or commit install, or an unmanaged install is replaced by the tag too
 (with uv, else pipx); only an install made from exactly that tag is already up to date.
-It then runs, with the new binary and in order: when the Claude Code plugin is installed,
-`claude plugin marketplace update agent-toggle` and `claude plugin update agent-toggle@agent-toggle`,
-then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
+It then runs, with the new binary and in order: when the Claude Code plugin is installed (from any
+marketplace), `claude plugin marketplace update <marketplace>` and
+`claude plugin update agent-toggle@<marketplace>`, then `agent-toggle install-shims`. A failing step prints a warning and makes the exit code `1`.
 It never prompts and writes to stderr only.
 
 | Exit | Meaning |
@@ -931,7 +934,7 @@ bookkeeping.
 | `parked/<sha8>/` | items parked by `--project` (`<sha8>` = first 8 hex of the SHA-1 of the resolved project dir) |
 | `profiles/` | `<name>.json` profiles (dir `0700`, files `0600`) |
 | `config.json` | [settings](#settings--config-menu) and the Telegram chat id (mode `0600`, atomic write, unknown keys kept) |
-| `update-check.json` | the [update check](#update-check)'s 10-minute cache (mode `0600`, atomic write) |
+| `update-check.json` | the [update check](#update-check)'s skipped version (mode `0600`, atomic write) |
 
 A killed run loses at most the one item in flight. If that was a flag write or a
 dir move (with its companions), its `pending` record (the full entry, a flag's
@@ -1011,8 +1014,9 @@ CLI (`cost --json`, `disable|enable --json`) and works for the claude harness on
 `agent-toggle ui` stays the cross-harness UI.
 
 Install it with `/plugin install agent-toggle --marketplace weskao/agent-toggle` (see
-[Install](#install)); `claude plugin update agent-toggle@agent-toggle` picks up a new release. To
-run your own checkout instead (edits reload as you save):
+[Install](#install)); `/agent-toggle update` picks up a new release: it runs `agent-toggle update`,
+which updates the CLI, this mod and the shims together (restart Claude Code to load the new mod).
+The mod and the CLI share one version. To run your own checkout instead (edits reload as you save):
 
 ```sh
 claude --plugin-dir ./mod    # then run /agent-toggle inside Claude
@@ -1144,8 +1148,10 @@ prints a `::notice::` and exits 0, so it never adds a second red X.
 ## Releasing
 
 A release is a git tag `vX.Y.Z` (where `X.Y.Z` must match `agent_toggle.__version__`).
-Bump `version` in `mod/.claude-plugin/plugin.json` to the same value by hand; nothing checks it,
-and without it `claude plugin update` does not hand marketplace installs the new mod.
+`version` in `mod/.claude-plugin/plugin.json` must be the same value (the mod ships in lockstep;
+without the bump `claude plugin update` does not hand marketplace installs the new mod).
+`tests/test_mod_version.py` and the release workflow both fail on a mismatch.
+The `weskao-agent-plugins` marketplace lists the mod without a version, so it needs no bump there.
 Pushing the tag triggers `.github/workflows/release.yml`:
 
 1. **Build** job checks that the tag matches `__version__`, builds a wheel and

{agent_toggle-0.16.1 → agent_toggle-0.17.0}/agent_toggle.egg-info/SOURCES.txt

@@ -73,6 +73,7 @@ tests/test_install.py
 tests/test_logo.py
 tests/test_mechanisms.py
 tests/test_menu.py
+tests/test_mod_version.py
 tests/test_mods.py
 tests/test_picker.py
 tests/test_platform.py