code-coordinator 0.5.242__tar.gz → 0.5.243__tar.gz

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/CLAUDE.md

@@ -286,6 +286,11 @@ reviewer can stop reading here.
   the one to read when a customer request needs turning into coordinator work** — repo
   creation, the project↔repo mapping, the decomposition session, Gate-A mocks, and how a mock
   gets back to the client for sign-off, in the order you actually do them.
+- [`docs/CUSTOMER_FACING_APPS.md`](docs/CUSTOMER_FACING_APPS.md) — shipping a repo whose
+  **external** customer judges it by looking at it (natal-chart today). Why `Work → Test →
+  Review → Merge → auto-deploy` makes that customer the first human to see the change, the
+  per-PR preview / `uat` gate / visual-baseline pattern that fixes it, and the manual runbook
+  to use until the gate exists.
 - [`docs/ORACLE_LOOP.md`](docs/ORACLE_LOOP.md) — sealed acceptance suites, Gate-A contracts, the test-author agent.
 - [`docs/PHONE_WEBAPP.md`](docs/PHONE_WEBAPP.md) — Phone Control Center v1 runbook and the `/api/pipeline` surface.
 - [`docs/GRAPHIFY_SETUP.md`](docs/GRAPHIFY_SETUP.md) — installing the knowledge graph on a new machine (four layers, all of which fail *silently*).

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-coordinator
-Version: 0.5.242
+Version: 0.5.243
 Summary: Coordinate Claude Code workers across multiple machines and repos.
 Author-email: John Donaghy <johnfdonaghy@gmail.com>
 License-Expression: LicenseRef-FSL-1.1-MIT

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/code_coordinator.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-coordinator
-Version: 0.5.242
+Version: 0.5.243
 Summary: Coordinate Claude Code workers across multiple machines and repos.
 Author-email: John Donaghy <johnfdonaghy@gmail.com>
 License-Expression: LicenseRef-FSL-1.1-MIT

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/code_coordinator.egg-info/SOURCES.txt

@@ -232,6 +232,7 @@ coord/health/checks/plan_usage.py
 coord/health/checks/release_cordon.py
 coord/health/checks/repo_state.py
 coord/health/checks/spawned_coord.py
+coord/health/checks/stalled_pipeline.py
 coord/health/checks/timer_active.py
 coord/health/checks/toolchain.py
 coord/health/checks/unit_drift.py
@@ -294,6 +295,7 @@ docs/COCKPIT.md
 docs/CONTROL_CENTER.md
 docs/COST_DISCIPLINE.md
 docs/CROSS_PLATFORM.md
+docs/CUSTOMER_FACING_APPS.md
 docs/CUSTOMER_PORTAL.md
 docs/DRIVE_QUEUE.md
 docs/EPHEMERAL_WORKERS.md
@@ -426,6 +428,7 @@ tests/test_cli_fix_headless_review.py
 tests/test_cli_gate_a.py
 tests/test_cli_install_drift.py
 tests/test_cli_install_skills.py
+tests/test_cli_issue_comment.py
 tests/test_cli_issue_create_label.py
 tests/test_cli_issue_reopen.py
 tests/test_cli_issue_view_list.py
@@ -484,9 +487,11 @@ tests/test_coord_test_runner_baseline.py
 tests/test_coord_test_runner_populated_home.py
 tests/test_coord_test_runner_routing.py
 tests/test_coord_test_runner_toolchain.py
+tests/test_coord_uat.py
 tests/test_coord_web_sse_restart_live.py
 tests/test_coordinator_machine.py
 tests/test_cross_platform_imports.py
+tests/test_dao.py
 tests/test_dashboard.py
 tests/test_dashboard_fixture.py
 tests/test_dashboard_terminal.py
@@ -552,6 +557,7 @@ tests/test_health_config.py
 tests/test_health_context.py
 tests/test_health_coord_web_ci_pin.py
 tests/test_health_deploy_lane_facts.py
+tests/test_health_fix.py
 tests/test_health_incident_regression.py
 tests/test_health_pypi.py
 tests/test_health_registry.py
@@ -647,6 +653,7 @@ tests/test_release_cordon_daemon_leads_2176.py
 tests/test_release_cordon_deadlock_2240.py
 tests/test_release_cordon_stuck_2490.py
 tests/test_release_propagate.py
+tests/test_release_propagate_threshold.py
 tests/test_release_roll_window_handoff.py
 tests/test_release_unified_1242.py
 tests/test_release_verify.py
@@ -699,6 +706,7 @@ tests/test_test_orchestrator.py
 tests/test_test_report.py
 tests/test_test_verdict_parsing.py
 tests/test_test_verdict_transcript_floor.py
+tests/test_text_io_encoding_audit.py
 tests/test_thin_client_board_audit.py
 tests/test_thin_client_config_load_1080.py
 tests/test_thin_client_daemon_routing_906.py

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/code_coordinator.egg-info/scm_file_list.json

@@ -154,6 +154,7 @@
     "coord/health/checks/release_cordon.py",
     "coord/health/checks/repo_state.py",
     "coord/health/checks/spawned_coord.py",
+    "coord/health/checks/stalled_pipeline.py",
     "coord/health/checks/timer_active.py",
     "coord/health/checks/toolchain.py",
     "coord/health/checks/unit_drift.py",
@@ -286,6 +287,7 @@
     "docs/CONTROL_CENTER.md",
     "docs/COST_DISCIPLINE.md",
     "docs/CROSS_PLATFORM.md",
+    "docs/CUSTOMER_FACING_APPS.md",
     "docs/CUSTOMER_PORTAL.md",
     "docs/DRIVE_QUEUE.md",
     "docs/EPHEMERAL_WORKERS.md",
@@ -498,6 +500,7 @@
     "tests/test_cli_gate_a.py",
     "tests/test_cli_install_drift.py",
     "tests/test_cli_install_skills.py",
+    "tests/test_cli_issue_comment.py",
     "tests/test_cli_issue_create_label.py",
     "tests/test_cli_issue_reopen.py",
     "tests/test_cli_issue_view_list.py",
@@ -556,9 +559,11 @@
     "tests/test_coord_test_runner_populated_home.py",
     "tests/test_coord_test_runner_routing.py",
     "tests/test_coord_test_runner_toolchain.py",
+    "tests/test_coord_uat.py",
     "tests/test_coord_web_sse_restart_live.py",
     "tests/test_coordinator_machine.py",
     "tests/test_cross_platform_imports.py",
+    "tests/test_dao.py",
     "tests/test_dashboard.py",
     "tests/test_dashboard_fixture.py",
     "tests/test_dashboard_terminal.py",
@@ -624,6 +629,7 @@
     "tests/test_health_context.py",
     "tests/test_health_coord_web_ci_pin.py",
     "tests/test_health_deploy_lane_facts.py",
+    "tests/test_health_fix.py",
     "tests/test_health_incident_regression.py",
     "tests/test_health_pypi.py",
     "tests/test_health_registry.py",
@@ -719,6 +725,7 @@
     "tests/test_release_cordon_deadlock_2240.py",
     "tests/test_release_cordon_stuck_2490.py",
     "tests/test_release_propagate.py",
+    "tests/test_release_propagate_threshold.py",
     "tests/test_release_roll_window_handoff.py",
     "tests/test_release_unified_1242.py",
     "tests/test_release_verify.py",
@@ -771,6 +778,7 @@
     "tests/test_test_report.py",
     "tests/test_test_verdict_parsing.py",
     "tests/test_test_verdict_transcript_floor.py",
+    "tests/test_text_io_encoding_audit.py",
     "tests/test_thin_client_board_audit.py",
     "tests/test_thin_client_config_load_1080.py",
     "tests/test_thin_client_daemon_routing_906.py",

code_coordinator-0.5.243/code_coordinator.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.5.243",
+  "distance": 0,
+  "node": "g1b9f7b7e97dc258d03dccf3588639dc09d1e6060",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-08-24"
+}

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/coord/_board_mapping.py

@@ -98,6 +98,10 @@ def row_to_assignment(row: object) -> Assignment:
         review_posted_at=d.get("review_posted_at"),
         test_state=d.get("test_state"),
         test_reason=d.get("test_reason"),
+        # #2687: pre-merge UAT gate verdict; None for rows predating this
+        # column or a repo that hasn't opted in via Repo.uat_preview.
+        uat_state=d.get("uat_state"),
+        uat_reason=d.get("uat_reason"),
         # #1479: Test-gate staleness anchor; None for pre-1479 rows or where
         # it couldn't be captured — the merge-queue gate treats that as "SHA
         # tracking unavailable" and skips the staleness check (fail open).

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/coord/agent.py

@@ -451,7 +451,7 @@ def is_host_sleep_reason(reason: str | None) -> bool:
 def _append_log_line(log_path: str, line: str) -> None:
     """Best-effort append of a single line to the assignment log. Never raises."""
     try:
-        with open(log_path, "a") as fh:
+        with open(log_path, "a", encoding="utf-8") as fh:
             fh.write(line)
     except OSError:
         pass
@@ -972,6 +972,7 @@ def _git(cwd: Path, *args: str, timeout: float = 15.0) -> str:
         cwd=str(cwd),
         capture_output=True,
         text=True,
+        encoding="utf-8",
         timeout=timeout,
     )
     if result.returncode != 0:
@@ -1229,6 +1230,7 @@ def _worktree_dirt(wt_path: Path) -> tuple[int, int] | None:
             cwd=str(wt_path),
             capture_output=True,
             text=True,
+            encoding="utf-8",
             timeout=30.0,
         )
     except (subprocess.SubprocessError, OSError):
@@ -2163,7 +2165,7 @@ def stash_artifacts_for_branch(
     # not be recorded as a valid build artifact set.
     if assignment_id is not None and copied > 0:
         try:
-            (stash_dir / ".assignment_id").write_text(assignment_id)
+            (stash_dir / ".assignment_id").write_text(assignment_id, encoding="utf-8")
         except OSError:
             pass
 
@@ -2301,6 +2303,8 @@ def _run_pre_stash_build(
             cwd=str(worktree),
             capture_output=True,
             text=True,
+            encoding="utf-8",
+            errors="replace",
             timeout=600,
         )
         ok = result.returncode == 0
@@ -4487,7 +4491,7 @@ def find_blocking_deny_rule(
     worktree_path = worktree_path.expanduser()
     for settings_path in settings_files:
         try:
-            raw = settings_path.read_text()
+            raw = settings_path.read_text(encoding="utf-8")
         except OSError:
             continue
         try:
@@ -4530,7 +4534,7 @@ def check_worktree_writable(
     try:
         worktree_path.mkdir(parents=True, exist_ok=True)
         probe = worktree_path / f".coord-write-probe-{os.getpid()}"
-        probe.write_text("probe")
+        probe.write_text("probe", encoding="utf-8")
         probe.unlink()
     except OSError as e:
         return f"cannot write to {worktree_path}: {e}"
@@ -6430,7 +6434,7 @@ class AgentServer:
         aid_path = stash_dir / ".assignment_id"
         built_by: str | None = None
         try:
-            built_by = aid_path.read_text().strip()
+            built_by = aid_path.read_text(encoding="utf-8").strip()
         except OSError:
             pass
 
@@ -7326,7 +7330,7 @@ class AgentServer:
         # Trace the injection in the log so users can correlate later.
         if assignment.log_path:
             try:
-                with open(assignment.log_path, "a") as fh:
+                with open(assignment.log_path, "a", encoding="utf-8") as fh:
                     fh.write(f"# inject: {text}\n")
             except OSError:
                 pass
@@ -7470,7 +7474,7 @@ class AgentServer:
                         f"Push them when convenient so they aren't lost.\n"
                     )
                     try:
-                        with open(assignment.log_path, "a") as fh:
+                        with open(assignment.log_path, "a", encoding="utf-8") as fh:
                             fh.write(msg)
                     except OSError:
                         pass
@@ -7573,7 +7577,7 @@ class AgentServer:
             # won't fail and so the worker starts from origin/<default>.
             if local_has_branch and assignment.log_path:
                 try:
-                    with open(assignment.log_path, "a") as fh:
+                    with open(assignment.log_path, "a", encoding="utf-8") as fh:
                         fh.write(
                             f"# warning: discarding leftover local branch "
                             f"{branch_name!r} (not on origin) and branching "
@@ -7602,7 +7606,7 @@ class AgentServer:
     def _log_line(self, assignment: AgentAssignment, text: str) -> None:
         """Append one line to the assignment log. Never raises (#1394)."""
         try:
-            with open(assignment.log_path, "a") as fh:
+            with open(assignment.log_path, "a", encoding="utf-8") as fh:
                 fh.write(text if text.endswith("\n") else text + "\n")
         except (OSError, AttributeError, TypeError):
             pass
@@ -8061,7 +8065,7 @@ class AgentServer:
         On any failure: mark the assignment FAILED and skip spawn. The HTTP
         client polls status to discover this.
         """
-        with open(assignment.log_path, "w") as log_fh:
+        with open(assignment.log_path, "w", encoding="utf-8") as log_fh:
             log_fh.write(
                 f"# pulling dependencies: {assignment.spec.pull_repos}\n"
             )
@@ -8161,7 +8165,7 @@ class AgentServer:
             argv = self.worker_command(assignment.spec)
             initial_input = _user_message_line(assignment.spec.briefing)
 
-        log_fh = open(assignment.log_path, "a")  # noqa: SIM115 — handle closed in _reap
+        log_fh = open(assignment.log_path, "a", encoding="utf-8")  # noqa: SIM115 — handle closed in _reap
 
         argv_oneline = shlex.join(argv).replace("\n", "\\n")
         header = (
@@ -8333,7 +8337,7 @@ class AgentServer:
             spec, resolved_model=spec.model
         )
 
-        log_fh = open(assignment.log_path, "a")  # noqa: SIM115 — closed in _reap
+        log_fh = open(assignment.log_path, "a", encoding="utf-8")  # noqa: SIM115 — closed in _reap
         argv_oneline = shlex.join(argv).replace("\n", "\\n")
         header = (
             f"# agent={self.machine_name} repo={spec.repo_name} "
@@ -8942,7 +8946,7 @@ class AgentServer:
                 if _kill is not None:
                     _usage_limit_reason = format_usage_limit_reason(_kill)
                     try:
-                        with open(log_path, "a") as reopen:
+                        with open(log_path, "a", encoding="utf-8") as reopen:
                             reopen.write(
                                 "# reap: usage-limit kill detected — "
                                 f"{_usage_limit_reason} (#1461)\n"
@@ -8997,7 +9001,7 @@ class AgentServer:
                     result_text=_worker_summary.result_text,
                 )
                 try:
-                    with open(log_path, "a") as reopen:
+                    with open(log_path, "a", encoding="utf-8") as reopen:
                         reopen.write(
                             "# reap: terminal API error detected — "
                             f"{_api_error_reason} (#1584)\n"
@@ -9046,11 +9050,11 @@ class AgentServer:
                 wt_path = Path(assignment.worktree_path)
                 if wt_path.exists() and exit_code == 0:
                     try:
-                        with open(assignment.log_path, "a") as reopen:
+                        with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                             reopen.write("\n# reap: push starting\n")
                         _git(wt_path, "push", "-u", "origin", "HEAD", timeout=60.0)
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 reopen.write("# reap: push completed\n")
                         except OSError:
                             pass
@@ -9097,7 +9101,7 @@ class AgentServer:
                             else:
                                 _push_failure_reason = _reason
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 if _suppressed_as_already_pushed:
                                     # Deliberately NOT the generic "push
                                     # failed" line below: that line reads as
@@ -9172,7 +9176,7 @@ class AgentServer:
                             _worker_summary.stop_reason, assignment.spec.provider
                         )
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 reopen.write(
                                     "# reap: truncated — 0 commits ahead of "
                                     f"{_base}; stop_reason="
@@ -9184,7 +9188,7 @@ class AgentServer:
                     elif DELIVERABLE_ANALYSIS_LABEL in (assignment.spec.issue_labels or []):
                         _analysis_deliverable = True
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 reopen.write(
                                     "# reap: analysis deliverable — 0 commits "
                                     f"ahead of {_base}; issue labelled "
@@ -9208,7 +9212,7 @@ class AgentServer:
                             "worker cited a standing repo-rule prohibition"
                         )
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 reopen.write(
                                     "# reap: refused_policy — 0 commits ahead "
                                     f"of {_base}; worker's final message cites "
@@ -9222,7 +9226,7 @@ class AgentServer:
                             "worker exited cleanly but pushed 0 commits"
                         )
                         try:
-                            with open(assignment.log_path, "a") as reopen:
+                            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                                 reopen.write(
                                     "# reap: advisory — 0 commits ahead of "
                                     f"{_base}; status set to advisory\n"
@@ -9233,7 +9237,7 @@ class AgentServer:
         # This block MUST always run regardless of push outcome so that
         # the assignment transitions out of 'running'.
         try:
-            with open(assignment.log_path, "a") as reopen:
+            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                 reopen.write("# reap: updating status\n")
         except (OSError, AttributeError):
             pass
@@ -9412,7 +9416,7 @@ class AgentServer:
 
         self._persist()
         try:
-            with open(assignment.log_path, "a") as reopen:
+            with open(assignment.log_path, "a", encoding="utf-8") as reopen:
                 final_status = assignment.status if assignment else "unknown"
                 # #2212: log a plain `graphify_invocations=N` counter alongside
                 # the existing reap line — this is the measurable half of the
@@ -9494,7 +9498,7 @@ class AgentServer:
                     _sa.stash_unmatched_globs = list(_stash_unmatched)
             self._persist()
             try:
-                with open(assignment.log_path, "a") as _lf:
+                with open(assignment.log_path, "a", encoding="utf-8") as _lf:
                     _lf.write(
                         f"# reap: stash diagnostic — {_stash_diag_reason}; "
                         "status left unchanged (see #1357)\n"
@@ -9781,7 +9785,7 @@ class AgentServer:
                 dir=str(self.state_dir), prefix="agent_state.", suffix=".tmp"
             )
             tmp_path = Path(tmp_name)
-            with os.fdopen(fd, "w") as f:
+            with os.fdopen(fd, "w", encoding="utf-8") as f:
                 f.write(json.dumps(data, indent=2))
             os.replace(tmp_path, self.state_path)
         except (FileNotFoundError, OSError) as e:
@@ -9796,7 +9800,7 @@ class AgentServer:
         if not self.state_path.exists():
             return
         try:
-            data = json.loads(self.state_path.read_text())
+            data = json.loads(self.state_path.read_text(encoding="utf-8"))
         except (OSError, json.JSONDecodeError) as e:
             # #1421: a corrupt/truncated state file used to be discarded
             # silently here, so an agent restart after the _persist() race

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/coord/agent_app.py

@@ -26,6 +26,7 @@ from coord.dist_name import DistributionNotFoundError, resolve_installed, resolv
 from coord.dist_name import pkg_spec as _dist_pkg_spec
 from coord.events import stream_assignment_log
 from coord.openapi import build_spec, dataclass_schema, openapi_and_docs_routes
+from coord.platform_paths import venv_python as platform_venv_python
 
 _log = logging.getLogger(__name__)
 
@@ -132,6 +133,22 @@ def _running_under_systemd() -> bool:
     return bool(os.environ.get("INVOCATION_ID"))
 
 
+def _systemctl_env() -> dict[str, str]:
+    """``os.environ`` overlaid with a best-effort ``XDG_RUNTIME_DIR`` default
+    for the ``systemctl --user`` calls below.
+
+    ``XDG_RUNTIME_DIR`` is an XDG/systemd concept with no Windows meaning --
+    and ``os.getuid()`` doesn't exist there either, so the unguarded default
+    raised ``AttributeError`` at call time on win32 (#2681). None of these
+    call sites are reachable on Windows anyway (there is no ``systemctl``),
+    so the default is simply skipped there rather than invented.
+    """
+    env = dict(os.environ)
+    if sys.platform != "win32":
+        env.setdefault("XDG_RUNTIME_DIR", f"/run/user/{os.getuid()}")
+    return env
+
+
 def _restart_via_systemctl(unit: str = "coord-agent") -> bool:
     """Best-effort ``systemctl --user restart <unit>``, run from *inside*
     the unit's own process.
@@ -150,11 +167,10 @@ def _restart_via_systemctl(unit: str = "coord-agent") -> bool:
     whether the restart actually completed; the caller's process is about
     to exit either way, so there is nothing left here to poll for.
     """
-    env = dict(os.environ)
     # Should already be set for a process systemd itself started, but
     # setting it explicitly costs nothing and matches the SSH-driven
     # fallback in agent_ops.py, where it IS load-bearing.
-    env.setdefault("XDG_RUNTIME_DIR", f"/run/user/{os.getuid()}")
+    env = _systemctl_env()
     try:
         subprocess.Popen(
             ["systemctl", "--user", "restart", unit],
@@ -214,8 +230,7 @@ def _unit_listen_port(unit: str) -> str | None:
     systemctl on PATH, no user bus, unit not installed, or an ExecStart with
     no ``--port`` on it.
     """
-    env = dict(os.environ)
-    env.setdefault("XDG_RUNTIME_DIR", f"/run/user/{os.getuid()}")
+    env = _systemctl_env()
     try:
         result = subprocess.run(
             ["systemctl", "--user", "show", unit, "--property=ExecStart"],
@@ -306,8 +321,7 @@ def _restart_sibling_unit(unit: str, *, timeout: float = 30.0) -> tuple[bool, st
     call, is what actually decides the outcome now, exactly as its own
     docstring paragraph above argues it should.
     """
-    env = dict(os.environ)
-    env.setdefault("XDG_RUNTIME_DIR", f"/run/user/{os.getuid()}")
+    env = _systemctl_env()
     try:
         result = subprocess.run(
             ["systemctl", "--user", "restart", "--no-block", unit],
@@ -401,8 +415,8 @@ def _default_exec_restart(argv: list[str]) -> None:
     """
     if _running_under_systemd() and _restart_via_systemctl():
         os._exit(0)
-    venv_python = _venv_dir() / "bin" / "python"
-    executable = str(venv_python) if venv_python.exists() else sys.executable
+    venv_python_path = platform_venv_python(_venv_dir())
+    executable = str(venv_python_path) if venv_python_path.exists() else sys.executable
     os.execv(executable, [executable] + argv)
 
 

{code_coordinator-0.5.242 → code_coordinator-0.5.243}/coord/agent_update.py

@@ -85,6 +85,8 @@ import sys
 from dataclasses import dataclass
 from pathlib import Path
 
+from coord.platform_paths import venv_exe, venv_pip, venv_python
+
 _log = logging.getLogger(__name__)
 
 #: Suffixes for the two blue/green slots, relative to the live venv dir
@@ -548,8 +550,8 @@ def _smoke_check(slot: Path, *, target_version: str | None) -> tuple[bool, str |
     caught) — that means the fresh install is genuinely broken, which is
     exactly what a failed smoke check should report.
     """
-    python = slot / "bin" / "python"
-    coord_bin = slot / "bin" / "coord"
+    python = venv_python(slot)
+    coord_bin = venv_exe(slot, "coord")
     lines: list[str] = []
 
     try:
@@ -730,7 +732,7 @@ def perform_update(
     # distinct blue/green slots), so the interpreter doing the building can
     # never be the thing this update is about to rmtree, regardless of
     # which slot the calling process itself happens to be running from.
-    builder_python = active / "bin" / "python"
+    builder_python = venv_python(active)
     if not builder_python.exists():
         builder_python = Path(sys.executable)
     try:
@@ -746,7 +748,7 @@ def perform_update(
     if result.returncode != 0:
         return _fail(f"venv creation failed (exit {result.returncode})")
 
-    pip = str(next_slot / "bin" / "pip")
+    pip = str(venv_pip(next_slot))
     install_spec = f"{pkg_spec}=={target_version}" if target_version else pkg_spec
     try:
         result = subprocess.run(