banto 5.2.2__tar.gz → 5.2.4__tar.gz

{banto-5.2.2 → banto-5.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: banto
-Version: 5.2.2
+Version: 5.2.4
 Summary: Local-first secret management with optional budget gating and dynamic leases
 Author: AllNew LLC
 License-Expression: LicenseRef-Dual
@@ -20,6 +20,7 @@ Classifier: Topic :: Software Development :: Libraries
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
+Requires-Dist: tomli>=1.1; python_version < "3.11"
 Provides-Extra: mcp
 Requires-Dist: mcp<2,>=1.0; extra == "mcp"
 Provides-Extra: browser
@@ -37,7 +38,7 @@ Dynamic: license-file
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-5.2.2-0D3B66?style=flat-square" alt="version">
+  <img src="https://img.shields.io/badge/version-5.2.4-0D3B66?style=flat-square" alt="version">
   <img src="https://img.shields.io/badge/python-3.10%2B-0D3B66?style=flat-square" alt="python">
   <img src="https://img.shields.io/badge/license-Dual-262626?style=flat-square" alt="license">
   <img src="https://img.shields.io/badge/stdlib%20only-262626?style=flat-square&label=dependencies" alt="dependencies">
@@ -193,30 +194,34 @@ BANTO SYNC VALIDATE — Testing 4 key(s)
 
 - macOS (uses Keychain for secret storage)
 - Python 3.10+
-- No external dependencies (MCP server: `pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"`)
+- No external dependencies (MCP server: `pip install "banto[mcp]"`)
 
 ## ⚡ Quick start
 
 ### 1. Install
 
 ```bash
-# banto is not published on PyPI yet. Install directly from the GitHub repository.
-
 # uv (recommended)
-uv tool install "git+https://github.com/allnew-llc/banto.git"
+uv tool install banto
 
 # pipx
-pipx install "git+https://github.com/allnew-llc/banto.git"
+pipx install banto
 
 # pip
-pip install "git+https://github.com/allnew-llc/banto.git"
+pip install banto
+
+# With MCP server support
+pip install "banto[mcp]"
 
 # From source
 git clone https://github.com/allnew-llc/banto.git
 cd banto
 pip install -e .
 
-# With MCP server support
+# Latest development version from GitHub
+uv tool install "git+https://github.com/allnew-llc/banto.git"
+pipx install "git+https://github.com/allnew-llc/banto.git"
+pip install "git+https://github.com/allnew-llc/banto.git"
 pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
 ```
 
@@ -258,7 +263,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 ## 💻 CLI reference
 
 <details>
-<summary><strong>Core commands (9)</strong></summary>
+<summary><strong>Core commands (10)</strong></summary>
 
 | Command | Description |
 |---------|-------------|
@@ -271,6 +276,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 | `banto list` | List stored keys and budget summary |
 | `banto check <model> ...` | Dry-run budget check (`--tokens`, `--n`, `--seconds`, `--quality`, `--size`) |
 | `banto init` | Copy default config to `~/.config/banto/` |
+| `banto version` | Print the installed version (`banto --version` / `banto -V` also work, including in broker mode) |
 
 </details>
 
@@ -358,7 +364,7 @@ Add to your `.mcp.json`:
 Requires the optional MCP dependency:
 
 ```bash
-pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
+pip install "banto[mcp]"
 ```
 
 ### ChatGPT

{banto-5.2.2 → banto-5.2.4}/README.md

@@ -9,7 +9,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-5.2.2-0D3B66?style=flat-square" alt="version">
+  <img src="https://img.shields.io/badge/version-5.2.4-0D3B66?style=flat-square" alt="version">
   <img src="https://img.shields.io/badge/python-3.10%2B-0D3B66?style=flat-square" alt="python">
   <img src="https://img.shields.io/badge/license-Dual-262626?style=flat-square" alt="license">
   <img src="https://img.shields.io/badge/stdlib%20only-262626?style=flat-square&label=dependencies" alt="dependencies">
@@ -165,30 +165,34 @@ BANTO SYNC VALIDATE — Testing 4 key(s)
 
 - macOS (uses Keychain for secret storage)
 - Python 3.10+
-- No external dependencies (MCP server: `pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"`)
+- No external dependencies (MCP server: `pip install "banto[mcp]"`)
 
 ## ⚡ Quick start
 
 ### 1. Install
 
 ```bash
-# banto is not published on PyPI yet. Install directly from the GitHub repository.
-
 # uv (recommended)
-uv tool install "git+https://github.com/allnew-llc/banto.git"
+uv tool install banto
 
 # pipx
-pipx install "git+https://github.com/allnew-llc/banto.git"
+pipx install banto
 
 # pip
-pip install "git+https://github.com/allnew-llc/banto.git"
+pip install banto
+
+# With MCP server support
+pip install "banto[mcp]"
 
 # From source
 git clone https://github.com/allnew-llc/banto.git
 cd banto
 pip install -e .
 
-# With MCP server support
+# Latest development version from GitHub
+uv tool install "git+https://github.com/allnew-llc/banto.git"
+pipx install "git+https://github.com/allnew-llc/banto.git"
+pip install "git+https://github.com/allnew-llc/banto.git"
 pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
 ```
 
@@ -230,7 +234,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 ## 💻 CLI reference
 
 <details>
-<summary><strong>Core commands (9)</strong></summary>
+<summary><strong>Core commands (10)</strong></summary>
 
 | Command | Description |
 |---------|-------------|
@@ -243,6 +247,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 | `banto list` | List stored keys and budget summary |
 | `banto check <model> ...` | Dry-run budget check (`--tokens`, `--n`, `--seconds`, `--quality`, `--size`) |
 | `banto init` | Copy default config to `~/.config/banto/` |
+| `banto version` | Print the installed version (`banto --version` / `banto -V` also work, including in broker mode) |
 
 </details>
 
@@ -330,7 +335,7 @@ Add to your `.mcp.json`:
 Requires the optional MCP dependency:
 
 ```bash
-pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
+pip install "banto[mcp]"
 ```
 
 ### ChatGPT

{banto-5.2.2 → banto-5.2.4}/banto/__init__.py

@@ -30,4 +30,4 @@ __all__ = [
     "KeyNotFoundError",
     "ProfileManager",
 ]
-__version__ = "5.2.2"
+__version__ = "5.2.4"

{banto-5.2.2 → banto-5.2.4}/banto/__main__.py

@@ -11,6 +11,7 @@ Commands:
     list                List stored provider keys
     check <model> ...   Dry-run budget check for a model
     init                Copy default config to ~/.config/banto/
+    version             Show the installed version (also --version, -V)
 """
 
 import getpass
@@ -475,6 +476,15 @@ def cmd_sealed(args: list[str]) -> None:
     cmd_sealed_dispatch(args)
 
 
+def _print_version() -> None:
+    from . import __version__
+    print(f"banto {__version__}")
+
+
+def cmd_version(args: list[str]) -> None:
+    _print_version()
+
+
 def cmd_chatgpt(args: list[str]) -> None:
     if not args or args[0] in ("-h", "--help"):
         print("banto chatgpt: Connect banto to ChatGPT\n")
@@ -503,10 +513,18 @@ COMMANDS = {
     "lease": cmd_lease,
     "sealed": cmd_sealed,
     "chatgpt": cmd_chatgpt,
+    "version": cmd_version,
 }
 
+VERSION_FLAGS = ("--version", "-V", "version")
+
 
 def main() -> None:
+    # Handled before broker routing so it works in broker mode too and never
+    # touches Keychain, the broker socket, or config files.
+    if len(sys.argv) > 1 and sys.argv[1] in VERSION_FLAGS:
+        _print_version()
+        return
     if len(sys.argv) > 1 and sys.argv[1] == "broker":
         from .broker import main as broker_main
         sys.argv.pop(1)
@@ -518,7 +536,8 @@ def main() -> None:
             return
     if len(sys.argv) < 2 or sys.argv[1] in ("-h", "--help"):
         print("banto: Budget-gated API key vault for LLM applications\n")
-        print("Usage: banto <command> [args]\n")
+        print("Usage: banto <command> [args]")
+        print("       banto --version | -V\n")
         print("Commands:")
         print("  broker <cmd>        Common Keychain process: install, health, enable, call")
         print("  status              Show budget status (with per-provider/model breakdown)")
@@ -534,6 +553,7 @@ def main() -> None:
         print("  lease <cmd>         Dynamic secrets with TTL and auto-revoke")
         print("  sealed <cmd>        Secure Enclave sealed signing (non-extractable keys)")
         print("  chatgpt connect     Connect banto to ChatGPT (starts tunnel)")
+        print("  version             Show the installed version (also --version, -V)")
         print()
         print("Budget examples:")
         print("  banto budget                          Show all limits")

{banto-5.2.2 → banto-5.2.4}/banto/broker_client.py

@@ -59,9 +59,20 @@ class BrokerClient:
             with socket.socket(socket.AF_UNIX, socket.SOCK_STREAM) as connection:
                 connection.settimeout(self.timeout)
                 connection.connect(str(self.path))
-                connection.sendall(encode_message({"operation": operation, "arguments": arguments}))
+                send_error = None
+                try:
+                    connection.sendall(encode_message({"operation": operation, "arguments": arguments}))
+                except (BrokenPipeError, ConnectionResetError) as error:
+                    # The broker may reply (e.g. peer_denied) and close before reading
+                    # the request; its reply is still buffered, so read it.
+                    send_error = error
                 with connection.makefile("rb") as stream:
-                    result = read_message(stream)
+                    try:
+                        result = read_message(stream)
+                    except BrokerError:
+                        if send_error is not None:
+                            raise send_error from None
+                        raise
         except (OSError, ValueError):
             raise BrokerError("broker_unavailable_or_outcome_unknown; do not retry mutations blindly") from None
         if not result.get("ok"):

{banto-5.2.2 → banto-5.2.4}/banto/broker_setup.py

@@ -45,7 +45,10 @@ def json_update(text: str, entry: dict) -> str:
 
 
 def toml_update(text: str, command: str) -> str:
-    import tomllib
+    try:
+        import tomllib
+    except ModuleNotFoundError:  # Python 3.10: tomllib was added in 3.11
+        import tomli as tomllib
     parsed = tomllib.loads(text)
     entry = {"command": command, "args": [], "enabled": True}
     existing = parsed.get("mcp_servers", {}).get("banto")

{banto-5.2.2 → banto-5.2.4}/banto.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: banto
-Version: 5.2.2
+Version: 5.2.4
 Summary: Local-first secret management with optional budget gating and dynamic leases
 Author: AllNew LLC
 License-Expression: LicenseRef-Dual
@@ -20,6 +20,7 @@ Classifier: Topic :: Software Development :: Libraries
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
+Requires-Dist: tomli>=1.1; python_version < "3.11"
 Provides-Extra: mcp
 Requires-Dist: mcp<2,>=1.0; extra == "mcp"
 Provides-Extra: browser
@@ -37,7 +38,7 @@ Dynamic: license-file
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-5.2.2-0D3B66?style=flat-square" alt="version">
+  <img src="https://img.shields.io/badge/version-5.2.4-0D3B66?style=flat-square" alt="version">
   <img src="https://img.shields.io/badge/python-3.10%2B-0D3B66?style=flat-square" alt="python">
   <img src="https://img.shields.io/badge/license-Dual-262626?style=flat-square" alt="license">
   <img src="https://img.shields.io/badge/stdlib%20only-262626?style=flat-square&label=dependencies" alt="dependencies">
@@ -193,30 +194,34 @@ BANTO SYNC VALIDATE — Testing 4 key(s)
 
 - macOS (uses Keychain for secret storage)
 - Python 3.10+
-- No external dependencies (MCP server: `pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"`)
+- No external dependencies (MCP server: `pip install "banto[mcp]"`)
 
 ## ⚡ Quick start
 
 ### 1. Install
 
 ```bash
-# banto is not published on PyPI yet. Install directly from the GitHub repository.
-
 # uv (recommended)
-uv tool install "git+https://github.com/allnew-llc/banto.git"
+uv tool install banto
 
 # pipx
-pipx install "git+https://github.com/allnew-llc/banto.git"
+pipx install banto
 
 # pip
-pip install "git+https://github.com/allnew-llc/banto.git"
+pip install banto
+
+# With MCP server support
+pip install "banto[mcp]"
 
 # From source
 git clone https://github.com/allnew-llc/banto.git
 cd banto
 pip install -e .
 
-# With MCP server support
+# Latest development version from GitHub
+uv tool install "git+https://github.com/allnew-llc/banto.git"
+pipx install "git+https://github.com/allnew-llc/banto.git"
+pip install "git+https://github.com/allnew-llc/banto.git"
 pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
 ```
 
@@ -258,7 +263,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 ## 💻 CLI reference
 
 <details>
-<summary><strong>Core commands (9)</strong></summary>
+<summary><strong>Core commands (10)</strong></summary>
 
 | Command | Description |
 |---------|-------------|
@@ -271,6 +276,7 @@ banto budget --provider openai 30    # $30/month for OpenAI
 | `banto list` | List stored keys and budget summary |
 | `banto check <model> ...` | Dry-run budget check (`--tokens`, `--n`, `--seconds`, `--quality`, `--size`) |
 | `banto init` | Copy default config to `~/.config/banto/` |
+| `banto version` | Print the installed version (`banto --version` / `banto -V` also work, including in broker mode) |
 
 </details>
 
@@ -358,7 +364,7 @@ Add to your `.mcp.json`:
 Requires the optional MCP dependency:
 
 ```bash
-pip install "banto[mcp] @ git+https://github.com/allnew-llc/banto.git"
+pip install "banto[mcp]"
 ```
 
 ### ChatGPT

{banto-5.2.2 → banto-5.2.4}/banto.egg-info/SOURCES.txt

@@ -101,6 +101,7 @@ banto/sync/notifiers/slack.py
 banto/sync/notifiers/teams.py
 tests/test_broker.py
 tests/test_broker_setup.py
+tests/test_cli_version.py
 tests/test_ecdsa_p256.py
 tests/test_hold_timeout.py
 tests/test_host_validation.py

{banto-5.2.2 → banto-5.2.4}/banto.egg-info/requires.txt

@@ -1,4 +1,7 @@
 
+[:python_version < "3.11"]
+tomli>=1.1
+
 [browser]
 playwright<2,>=1.45
 

{banto-5.2.2 → banto-5.2.4}/pyproject.toml

@@ -4,12 +4,13 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "banto"
-version = "5.2.2"
+version = "5.2.4"
 description = "Local-first secret management with optional budget gating and dynamic leases"
 readme = "README.md"
 license = "LicenseRef-Dual"
 requires-python = ">=3.10"
 authors = [{ name = "AllNew LLC" }]
+dependencies = ["tomli>=1.1; python_version < '3.11'"]
 keywords = ["llm", "api", "budget", "keychain", "macos", "security", "secrets", "sync", "vault", "lease", "dynamic-secrets"]
 classifiers = [
     "Development Status :: 4 - Beta",

{banto-5.2.2 → banto-5.2.4}/tests/test_broker.py

@@ -51,6 +51,40 @@ def test_other_uid_denied(local_server, monkeypatch):
         client.call("health")
 
 
+def test_reply_read_when_broker_closes_before_request(monkeypatch):
+    import socket
+    import tempfile
+    with tempfile.TemporaryDirectory(prefix="banto-", dir="/tmp") as directory:
+        path = Path(directory) / "b.sock"
+        listener = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
+        listener.bind(str(path))
+        os.chmod(path, 0o600)
+        listener.listen(1)
+        closed = threading.Event()
+        encode = broker_client.encode_message
+
+        def deny_and_close():
+            connection, _ = listener.accept()
+            connection.sendall(encode({"ok": False, "error": "peer_denied"}))
+            connection.close()
+            closed.set()
+
+        thread = threading.Thread(target=deny_and_close, daemon=True)
+        thread.start()
+
+        def encode_after_close(value):
+            assert closed.wait(5)
+            return encode(value)
+
+        monkeypatch.setattr(broker_client, "encode_message", encode_after_close)
+        try:
+            with pytest.raises(BrokerError, match="peer_denied"):
+                BrokerClient(path).call("health")
+        finally:
+            thread.join(5)
+            listener.close()
+
+
 def test_exception_does_not_leak(local_server):
     server, client = local_server
     def fail(*args):

banto-5.2.4/tests/test_cli_version.py

@@ -0,0 +1,58 @@
+# Copyright 2025-2026 AllNew LLC
+# Licensed under LicenseRef-Dual (see LICENSE)
+"""Tests for `banto --version` / `-V` / `version`."""
+
+import subprocess
+import sys
+from unittest.mock import Mock
+
+import pytest
+
+import banto
+from banto import __main__ as cli
+from banto import broker_cli
+from banto.broker_client import BrokerClient
+
+FLAGS = ["--version", "-V", "version"]
+
+
+@pytest.mark.parametrize("flag", FLAGS)
+def test_version_prints_and_exits_zero(flag, monkeypatch, capsys):
+    monkeypatch.setattr(sys, "argv", ["banto", flag])
+    cli.main()  # returns normally (exit status 0)
+    assert capsys.readouterr().out == f"banto {banto.__version__}\n"
+
+
+@pytest.mark.parametrize("flag", FLAGS)
+def test_version_works_in_broker_mode(flag, tmp_path, monkeypatch, capsys):
+    (tmp_path / "required").touch()
+    monkeypatch.setattr(broker_cli, "runtime_dir", lambda: tmp_path)
+    call = Mock(side_effect=AssertionError("broker must not be called"))
+    monkeypatch.setattr(BrokerClient, "call", call)
+    monkeypatch.setattr(sys, "argv", ["banto", flag])
+    cli.main()
+    assert capsys.readouterr().out == f"banto {banto.__version__}\n"
+    call.assert_not_called()
+
+
+@pytest.mark.parametrize("flag", ["--version", "-V"])
+def test_version_subprocess_exit_code(flag):
+    proc = subprocess.run(
+        [sys.executable, "-m", "banto", flag], capture_output=True, text=True, timeout=60
+    )
+    assert proc.returncode == 0
+    assert proc.stdout.strip() == f"banto {banto.__version__}"
+
+
+def test_help_lists_version(monkeypatch, capsys):
+    monkeypatch.setattr(sys, "argv", ["banto", "--help"])
+    with pytest.raises(SystemExit) as exc:
+        cli.main()
+    assert exc.value.code == 0
+    out = capsys.readouterr().out
+    assert "--version" in out
+    assert "version " in out
+
+
+def test_version_is_registered_command():
+    assert "version" in cli.COMMANDS