brindle 0.3.8__tar.gz → 0.3.11__tar.gz

{brindle-0.3.8 → brindle-0.3.11}/.gitignore

@@ -2,6 +2,8 @@
 __pycache__/
 *.egg-info/
 .pytest_cache/
+.coverage
+.coverage.*
 graphify-out/
 # brindle local state that is not part of the repo
 .brindle/*.log

{brindle-0.3.8 → brindle-0.3.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: brindle
-Version: 0.3.8
+Version: 0.3.11
 Summary: Run coding agents in parallel, each on its own git branch, with a supervisor that delegates, reviews, and merges
 Project-URL: Homepage, https://pawdelta.com/brindle/
 Project-URL: Documentation, https://pawdelta.com/brindle/docs/recommended-use
@@ -25,6 +25,7 @@ Classifier: Topic :: Software Development :: Version Control :: Git
 Requires-Python: >=3.11
 Requires-Dist: cryptography>=42
 Requires-Dist: mcp<3,>=2.2
+Requires-Dist: packaging>=24
 Requires-Dist: typer>=0.12
 Description-Content-Type: text/markdown
 
@@ -78,6 +79,10 @@ curl -fsSL pawdelta.com/brindle/install | sh
 
 The script ([scripts/install.sh](scripts/install.sh)) installs uv and tmux if
 they're missing, then brindle, then runs `brindle doctor`. Run it again to upgrade.
+Session starts check PyPI at most once a day and show available updates in the status
+bar and `brindle doctor`; set `"auto_update": true` in `~/.brindle/config.json` to
+upgrade in the background (restart to use it). Checks skip local and editable
+installs and can be disabled with `BRINDLE_NO_UPDATE_CHECK`.
 To do it by hand:
 
 ```sh
@@ -89,7 +94,7 @@ uv tool install --editable ~/Projects/brindle   # or from a local checkout
 brindle drives Claude Code, so you need that too (`npm install -g @anthropic-ai/claude-code`).
 
 `brindle --version` prints the installed version; the tmux status bar of every brindle
-session shows it too (`brindle 0.3.8`). A session started before an upgrade keeps
+session shows it too (`brindle 0.3.11`). A session started before an upgrade keeps
 running the old code, and shows the old number, until you restart it.
 
 ## Quick start
@@ -523,6 +528,7 @@ Autopilot, merge gates and cleanup:
 | Key | Default | |
 |---|---|---|
 | `autopilot` | `true` | start the supervisor with autopilot on |
+| `auto_update` | `false` | run `uv tool upgrade brindle` in the background at session start when PyPI has a newer version; restart to use it. Can also be set in `~/.brindle/config.json` for every repo |
 | `checks` | `[]` | commands that must pass in a worker's branch before it merges |
 | `review` | only under autopilot | require a reviewer's approval before merging |
 | `reviewer` | `"reviewer"` | the agent profile that reviews (a Codex profile gives a second model's view) |

{brindle-0.3.8 → brindle-0.3.11}/README.md

@@ -48,6 +48,10 @@ curl -fsSL pawdelta.com/brindle/install | sh
 
 The script ([scripts/install.sh](scripts/install.sh)) installs uv and tmux if
 they're missing, then brindle, then runs `brindle doctor`. Run it again to upgrade.
+Session starts check PyPI at most once a day and show available updates in the status
+bar and `brindle doctor`; set `"auto_update": true` in `~/.brindle/config.json` to
+upgrade in the background (restart to use it). Checks skip local and editable
+installs and can be disabled with `BRINDLE_NO_UPDATE_CHECK`.
 To do it by hand:
 
 ```sh
@@ -59,7 +63,7 @@ uv tool install --editable ~/Projects/brindle   # or from a local checkout
 brindle drives Claude Code, so you need that too (`npm install -g @anthropic-ai/claude-code`).
 
 `brindle --version` prints the installed version; the tmux status bar of every brindle
-session shows it too (`brindle 0.3.8`). A session started before an upgrade keeps
+session shows it too (`brindle 0.3.11`). A session started before an upgrade keeps
 running the old code, and shows the old number, until you restart it.
 
 ## Quick start
@@ -493,6 +497,7 @@ Autopilot, merge gates and cleanup:
 | Key | Default | |
 |---|---|---|
 | `autopilot` | `true` | start the supervisor with autopilot on |
+| `auto_update` | `false` | run `uv tool upgrade brindle` in the background at session start when PyPI has a newer version; restart to use it. Can also be set in `~/.brindle/config.json` for every repo |
 | `checks` | `[]` | commands that must pass in a worker's branch before it merges |
 | `review` | only under autopilot | require a reviewer's approval before merging |
 | `reviewer` | `"reviewer"` | the agent profile that reviews (a Codex profile gives a second model's view) |

{brindle-0.3.8 → brindle-0.3.11}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "brindle"
-version = "0.3.8"
+version = "0.3.11"
 description = "Run coding agents in parallel, each on its own git branch, with a supervisor that delegates, reviews, and merges"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -22,6 +22,7 @@ classifiers = [
     "Topic :: Software Development :: Version Control :: Git",
 ]
 dependencies = [
+    "packaging>=24",
     "typer>=0.12",
     "mcp>=2.2,<3",
     "cryptography>=42",

{brindle-0.3.8 → brindle-0.3.11}/src/brindle/agents.py

@@ -20,7 +20,7 @@ import sys
 import time
 import uuid
 
-from brindle import company_identity, company_login, git, keystore, pane_auth, providers, secrets, tmux, workspaces
+from brindle import cloud_credential, company_identity, company_login, git, keystore, pane_auth, providers, secrets, tmux, workspaces
 from brindle.config import RepoConfig
 from brindle.db import DB, Agent, Workspace
 from brindle.model_availability import ModelAvailabilityChecker, PROVISIONING_TIMEOUT, provisioning_context
@@ -193,6 +193,8 @@ def agent_env(ws: Workspace, agent_id: str, agent: Agent | None = None,
         # org's managed route (an enforced agent_setup, or provider_config) both
         # beat it; none at all under Claude Code's managed settings (stored_env).
         company = {} if agent.provider != "claude" else company_login.stored_env()
+        if "AZURE_FEDERATED_TOKEN_FILE" in company:     # Azure has no hook: a launch freshens the file
+            cloud_credential.freshen_azure(company["AZURE_FEDERATED_TOKEN_FILE"])
         managed_env = {} if org else managed_models.agent_env(m, agent.provider)
         enforced = None if agent.provider != "claude" or org else company_identity.enforced_route_env()
         session_creds = {}

{brindle-0.3.8 → brindle-0.3.11}/src/brindle/cli.py

@@ -302,6 +302,7 @@ def start(
     # processes, old paused sessions' worktrees and the pool refill are all
     # handled by the detached cull.
     _pause_running(db, ws, stop_procs=False)
+    _check_updates(ws.repo_root)
     if autopilot is None:
         autopilot = _run(load_repo_config, ws.repo_root).autopilot
     a = _run(agents.spawn, db, ws, agents.SUPERVISOR, prompt=prompt, provider_name=provider,
@@ -319,6 +320,23 @@ def start(
         _attach(ws, a.tmux_window)
 
 
+def _check_updates(repo_root: str) -> None:
+    from brindle import updates
+    from brindle.config import load_repo_config
+
+    cfg = load_repo_config(repo_root)
+    latest = updates.newer_version()
+    if not latest or cfg.auto_update is not True:
+        return
+    try:
+        subprocess.Popen(["uv", "tool", "upgrade", "brindle"], start_new_session=True,
+                         stdin=subprocess.DEVNULL, stdout=subprocess.DEVNULL,
+                         stderr=subprocess.DEVNULL)
+    except OSError:
+        return
+    typer.echo(f"  updating brindle to {latest} in the background; the new version takes effect after a restart")
+
+
 def _preflight(agent: str, provider: Optional[str], repo_root: str) -> None:
     """Stop before launching when the chat can't start (no tmux, no CLI)."""
     from brindle import doctor as doctor_mod
@@ -509,6 +527,7 @@ def continue_cmd(
         ws = scratch.for_origin(db, cwd)
         if ws is None:
             _fail("no scratch session started from this folder to continue; run `brindle` to start one")
+    _check_updates(ws.repo_root)
     live = agents.find_running(db, ws, "supervisor") or next(
         (a for a in reversed(db.list_agents(ws.id)) if a.mode == "interactive" and (agents.is_alive(a) or a.status == "failed")),
         None,
@@ -2716,6 +2735,16 @@ def local_models_cmd(repo: Optional[str] = typer.Option(None, "--repo")) -> None
         pass
 
 
+@app.command("cloud-credential", hidden=True)
+def cloud_credential_cmd(cloud: str = typer.Argument(..., help="aws, gcp or azure"),
+                         org: Optional[str] = typer.Option(None, "--org", help="The org id")) -> None:
+    """The hook the clouds run for a federated org (`credential_process`, the GCP
+    executable source): prints the credential the cloud's contract asks for."""
+    from brindle import cloud_credential
+
+    raise typer.Exit(cloud_credential.run(cloud, org))
+
+
 @app.command("_sync-settings", hidden=True)
 def sync_settings_cmd() -> None:
     """Pull synced settings (brindle Pro); detached from `brindle`."""