comodor 0.2.3__tar.gz → 0.3.1__tar.gz

{comodor-0.2.3 → comodor-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: comodor
-Version: 0.2.3
+Version: 0.3.1
 Summary: Comodor — a self-improving terminal coding agent with a Rich TUI
 Project-URL: Homepage, https://comodor.ai
 Project-URL: Repository, https://github.com/ifekri/Comodor
@@ -28,6 +28,11 @@ Description-Content-Type: text/markdown
 
 **A coding agent that lives in your terminal — and learns the way you correct it.**
 
+[![PyPI](https://img.shields.io/pypi/v/comodor?label=pypi&color=c4441e)](https://pypi.org/project/comodor/)
+[![Python](https://img.shields.io/pypi/pyversions/comodor)](https://pypi.org/project/comodor/)
+[![CI](https://github.com/ifekri/Comodor/actions/workflows/ci.yml/badge.svg)](https://github.com/ifekri/Comodor/actions/workflows/ci.yml)
+[![Licence](https://img.shields.io/pypi/l/comodor?color=555)](LICENSE)
+
 [comodor.ai](https://comodor.ai) · [Install](#install) · [What it can do](#what-it-can-do)
 
 ---
@@ -113,12 +118,27 @@ Four questions, once. Nothing to create beforehand — no config file, no
 environment variable, no documentation to read first.
 
 ```
- 1/4  Which model provider?      18 to choose from, numbered
- 2/4  API key                    masked, with a link to the page that issues one
- 3/4  Which model?               read live from the provider you just chose
- 4/4  How much should it ask?    ask first · writes allowed · full autonomy
+ ✓ provider  Ollama (local)
+ ✓ api key   not needed
+
+ 3/4 Which model?
+┌─  Models  ──────────────────────────────────────────────┐
+│ ›  qwen2.5-coder:14b  recommended                       │
+│    llama3.3                                             │
+│    deepseek-r1:14b                                      │
+└─────────────────────────────────────────────────────────┘
+  ↑↓ move   enter choose   type filter   esc cancel
 ```
 
+One question per screen, answered with the arrow keys. Where a provider offers
+sixty models, typing filters them. Piped or scripted, the same questions arrive
+as a numbered list, so it can still be automated.
+
+Then it shows you the directory it is about to work in and asks once — the
+project root is found by walking upwards, and the answer is occasionally a
+surprise worth seeing before anything reads it. Approved folders are
+remembered.
+
 You are not asked again. Change your mind later with `comodor setup`.
 
 **No API key?** `comodor --demo` runs the whole interface offline — every
@@ -191,6 +211,35 @@ Everything you have ever asked is searchable.
 The agent searches it too, on its own, when you refer to earlier work — *"like
 we did last time"*, *"that bug from last week"*.
 
+### It can browse, not just fetch
+
+Most agents get one page at a time: download a URL, strip the markup, and the
+links go with it — so the only way onward is guessing another URL. Comodor
+browses.
+
+```
+› find out how the GitHub MCP server handles rate limits
+
+⚙ search: github mcp server rate limit          1.2s
+⚙ browse https://github.com/modelcontextprotocol/servers   0.8s
+    Links on this page:
+      1. src/github  →  …/tree/main/src/github
+⚙ follow link 1                                  0.6s
+⚙ find "rate limit" on the page                  0.0s
+```
+
+The links come back numbered and resolved, so the next move is `follow 4`
+rather than a guess — and links inside the content rank above the navigation
+bar that every page of a documentation site repeats. It is one session, so
+cookies, redirects and consent pages survive the hop. Long pages are handed
+over a screenful at a time with `find` to jump, instead of being cut off at
+40,000 characters. Moving around a page it has already fetched touches no
+network and asks no permission; a new host does.
+
+There is no JavaScript engine, and there is not going to be one — that means a
+real browser, which means a real dependency. A page that draws itself in the
+client says so and points at the Puppeteer server below rather than pretending.
+
 ### It connects to other tools
 
 Comodor speaks the [Model Context Protocol](https://modelcontextprotocol.io),
@@ -233,6 +282,34 @@ cache gets deleted. A corrupt config is reported and left exactly as it was,
 because it holds your API key — the one thing on your machine that cannot be
 regenerated.
 
+### It updates itself
+
+```
+$ comodor update
+
+Comodor 0.2.3
+  0.3.0 is available.  https://pypi.org/project/comodor/0.3.0/
+  installed as a uv tool
+  uv tool upgrade comodor
+
+  updating…
+  now on 0.3.0
+```
+
+It uses whatever put it there — uv, pipx, pip, or the environment the installer
+built — because guessing wrong is worse than not offering the command: a `pip
+install --upgrade` inside a uv environment appears to work and leaves uv's
+record pointing at a version that is gone.
+
+Afterwards it runs the new one and asks what it is, and *that* is what gets
+printed. An upgrade that reports success by echoing the number it was aiming at
+is how a silently failed install goes unnoticed for a week. `--check` says
+what is available and changes nothing, and `comodor doctor` mentions a new
+release without ever installing one.
+
+A source checkout is left alone: `git pull` is the upgrade, and overwriting a
+working tree with a release throws away work that was never committed.
+
 ### It leaves when you ask it to
 
 ```
@@ -271,22 +348,6 @@ not by searching your disk. Three things it will not do: touch a source
 checkout, take a directory off your PATH that other programs are still using,
 or claim to have deleted a file the operating system would not let go of.
 
-### It can prove it is improving
-
-Every tool claims to get better over time. Comodor shows the numbers.
-
-```
-◈ Steps per task down 40% since the first tasks in this project.
-
-metric                trend                            now  vs first
-Steps per task        ▇██▇▇▆▇▅▅▅▅▆▄▅▄▅▄▄▂▄▂▁▂▂▂▁▁▁▁▁   5.3      ↓40%
-Corrections per task  ████▆▇▆█▆▆▆▇▆▆▅▃▃▅▆▆▅▃▆▃▆▃▂▁▁▃   0.9      ↓65%
-Approvals asked       █▇▇▇▇▇▇▇▇▇▅▅▅▅▅▅▅▅▅▅▃▃▃▃▃▃▃▃▃▁   0.8      ↓73%
-```
-
-The panel is built to under-claim: with too little history it says so, and a
-fall from 0.4 to 0 is never allowed to headline as "down 100%".
-
 ---
 
 ## You stay in control
@@ -339,6 +400,7 @@ comodor --demo                              # offline walkthrough, no key needed
 comodor run "fix the failing test" --yes    # one task, headless, for scripts
 comodor run "audit this module" --json      # machine-readable, for pipelines
 comodor doctor                              # check everything; --fix repairs it
+comodor update                              # move to the newest release; --check first
 comodor uninstall                           # remove it completely; --dry-run first
 ```
 

{comodor-0.2.3 → comodor-0.3.1}/README.md

@@ -2,6 +2,11 @@
 
 **A coding agent that lives in your terminal — and learns the way you correct it.**
 
+[![PyPI](https://img.shields.io/pypi/v/comodor?label=pypi&color=c4441e)](https://pypi.org/project/comodor/)
+[![Python](https://img.shields.io/pypi/pyversions/comodor)](https://pypi.org/project/comodor/)
+[![CI](https://github.com/ifekri/Comodor/actions/workflows/ci.yml/badge.svg)](https://github.com/ifekri/Comodor/actions/workflows/ci.yml)
+[![Licence](https://img.shields.io/pypi/l/comodor?color=555)](LICENSE)
+
 [comodor.ai](https://comodor.ai) · [Install](#install) · [What it can do](#what-it-can-do)
 
 ---
@@ -87,12 +92,27 @@ Four questions, once. Nothing to create beforehand — no config file, no
 environment variable, no documentation to read first.
 
 ```
- 1/4  Which model provider?      18 to choose from, numbered
- 2/4  API key                    masked, with a link to the page that issues one
- 3/4  Which model?               read live from the provider you just chose
- 4/4  How much should it ask?    ask first · writes allowed · full autonomy
+ ✓ provider  Ollama (local)
+ ✓ api key   not needed
+
+ 3/4 Which model?
+┌─  Models  ──────────────────────────────────────────────┐
+│ ›  qwen2.5-coder:14b  recommended                       │
+│    llama3.3                                             │
+│    deepseek-r1:14b                                      │
+└─────────────────────────────────────────────────────────┘
+  ↑↓ move   enter choose   type filter   esc cancel
 ```
 
+One question per screen, answered with the arrow keys. Where a provider offers
+sixty models, typing filters them. Piped or scripted, the same questions arrive
+as a numbered list, so it can still be automated.
+
+Then it shows you the directory it is about to work in and asks once — the
+project root is found by walking upwards, and the answer is occasionally a
+surprise worth seeing before anything reads it. Approved folders are
+remembered.
+
 You are not asked again. Change your mind later with `comodor setup`.
 
 **No API key?** `comodor --demo` runs the whole interface offline — every
@@ -165,6 +185,35 @@ Everything you have ever asked is searchable.
 The agent searches it too, on its own, when you refer to earlier work — *"like
 we did last time"*, *"that bug from last week"*.
 
+### It can browse, not just fetch
+
+Most agents get one page at a time: download a URL, strip the markup, and the
+links go with it — so the only way onward is guessing another URL. Comodor
+browses.
+
+```
+› find out how the GitHub MCP server handles rate limits
+
+⚙ search: github mcp server rate limit          1.2s
+⚙ browse https://github.com/modelcontextprotocol/servers   0.8s
+    Links on this page:
+      1. src/github  →  …/tree/main/src/github
+⚙ follow link 1                                  0.6s
+⚙ find "rate limit" on the page                  0.0s
+```
+
+The links come back numbered and resolved, so the next move is `follow 4`
+rather than a guess — and links inside the content rank above the navigation
+bar that every page of a documentation site repeats. It is one session, so
+cookies, redirects and consent pages survive the hop. Long pages are handed
+over a screenful at a time with `find` to jump, instead of being cut off at
+40,000 characters. Moving around a page it has already fetched touches no
+network and asks no permission; a new host does.
+
+There is no JavaScript engine, and there is not going to be one — that means a
+real browser, which means a real dependency. A page that draws itself in the
+client says so and points at the Puppeteer server below rather than pretending.
+
 ### It connects to other tools
 
 Comodor speaks the [Model Context Protocol](https://modelcontextprotocol.io),
@@ -207,6 +256,34 @@ cache gets deleted. A corrupt config is reported and left exactly as it was,
 because it holds your API key — the one thing on your machine that cannot be
 regenerated.
 
+### It updates itself
+
+```
+$ comodor update
+
+Comodor 0.2.3
+  0.3.0 is available.  https://pypi.org/project/comodor/0.3.0/
+  installed as a uv tool
+  uv tool upgrade comodor
+
+  updating…
+  now on 0.3.0
+```
+
+It uses whatever put it there — uv, pipx, pip, or the environment the installer
+built — because guessing wrong is worse than not offering the command: a `pip
+install --upgrade` inside a uv environment appears to work and leaves uv's
+record pointing at a version that is gone.
+
+Afterwards it runs the new one and asks what it is, and *that* is what gets
+printed. An upgrade that reports success by echoing the number it was aiming at
+is how a silently failed install goes unnoticed for a week. `--check` says
+what is available and changes nothing, and `comodor doctor` mentions a new
+release without ever installing one.
+
+A source checkout is left alone: `git pull` is the upgrade, and overwriting a
+working tree with a release throws away work that was never committed.
+
 ### It leaves when you ask it to
 
 ```
@@ -245,22 +322,6 @@ not by searching your disk. Three things it will not do: touch a source
 checkout, take a directory off your PATH that other programs are still using,
 or claim to have deleted a file the operating system would not let go of.
 
-### It can prove it is improving
-
-Every tool claims to get better over time. Comodor shows the numbers.
-
-```
-◈ Steps per task down 40% since the first tasks in this project.
-
-metric                trend                            now  vs first
-Steps per task        ▇██▇▇▆▇▅▅▅▅▆▄▅▄▅▄▄▂▄▂▁▂▂▂▁▁▁▁▁   5.3      ↓40%
-Corrections per task  ████▆▇▆█▆▆▆▇▆▆▅▃▃▅▆▆▅▃▆▃▆▃▂▁▁▃   0.9      ↓65%
-Approvals asked       █▇▇▇▇▇▇▇▇▇▅▅▅▅▅▅▅▅▅▅▃▃▃▃▃▃▃▃▃▁   0.8      ↓73%
-```
-
-The panel is built to under-claim: with too little history it says so, and a
-fall from 0.4 to 0 is never allowed to headline as "down 100%".
-
 ---
 
 ## You stay in control
@@ -313,6 +374,7 @@ comodor --demo                              # offline walkthrough, no key needed
 comodor run "fix the failing test" --yes    # one task, headless, for scripts
 comodor run "audit this module" --json      # machine-readable, for pipelines
 comodor doctor                              # check everything; --fix repairs it
+comodor update                              # move to the newest release; --check first
 comodor uninstall                           # remove it completely; --dry-run first
 ```
 

{comodor-0.2.3 → comodor-0.3.1}/src/comodor/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.2.3'
-__version_tuple__ = version_tuple = (0, 2, 3)
+__version__ = version = '0.3.1'
+__version_tuple__ = version_tuple = (0, 3, 1)
 
 __commit_id__ = commit_id = None

{comodor-0.2.3 → comodor-0.3.1}/src/comodor/cli.py

@@ -9,6 +9,8 @@ Three ways in:
 * ``comodor setup`` — the first-run questions again, on demand.
 * ``comodor doctor`` — what is configured, what is reachable, what the terminal
   can do. The first thing to run when something is not working.
+* ``comodor update`` — move to the newest published version, using whichever
+  of uv, pipx or pip put this copy here.
 * ``comodor uninstall`` — takes every file, folder and PATH line back off the
   machine, after showing you the list.
 
@@ -64,6 +66,11 @@ def build_parser() -> argparse.ArgumentParser:
     doctor.add_argument("--fix", action="store_true",
                         help="apply every repair the check found")
 
+    upgrade = sub.add_parser(
+        "update", help="upgrade to the newest published version")
+    upgrade.add_argument("--check", action="store_true",
+                         help="say what is available and change nothing")
+
     remove = sub.add_parser(
         "uninstall",
         help="remove Comodor and everything it has written, completely")
@@ -303,6 +310,80 @@ def run_doctor(config: Config, fix: bool = False) -> int:
     return 1 if report.worst is Status.FAIL else 0
 
 
+def run_update(config: Config, check_only: bool = False) -> int:
+    """Move to the newest published version.
+
+    Four steps, and each one can stop the run with something the user can act
+    on: what is out there, whether it is newer than this, how this copy would
+    be upgraded, and what version answers afterwards.
+    """
+    from .ui import console as console_module
+    from . import update as updater
+
+    theme = console_module.prepare_theme(config.ui.theme, config.ui.ascii_borders,
+                                         no_color=False)
+    console = console_module.build(theme)
+    here = updater.current()
+
+    console.print(f"\n[title]Comodor {here}[/title]")
+
+    release = updater.latest()
+    if release is None:
+        console.print("  [bad]Could not reach the package index.[/bad] "
+                      "[dim]Check the connection and try again.[/dim]\n")
+        return 1
+
+    step = updater.plan()
+
+    if not updater.is_newer(release.version, here):
+        # Ahead of the index rather than behind it: a development build, which
+        # is a different sentence from "up to date".
+        ahead = updater.is_newer(here, release.version)
+        console.print(
+            f"  [good]{release.version} is the newest published version"
+            f"[/good][dim], and this is "
+            f"{'ahead of it' if ahead else 'it'}.[/dim]")
+        if step.detail:
+            console.print(f"  [dim]{step.detail}[/dim]")
+        console.print("")
+        return 0
+
+    console.print(f"  [accent]{release.version}[/accent] is available."
+                  f"  [dim]{release.url}[/dim]")
+
+    if step.blocked:
+        console.print(f"\n  [warn]{step.blocked}[/warn]\n")
+        return 1
+
+    if step.detail:
+        console.print(f"  [dim]{step.detail}[/dim]")
+    console.print(f"  [dim]{' '.join(step.command)}[/dim]")
+
+    if check_only:
+        console.print("\n[dim]Nothing was changed: this was --check.[/dim]\n")
+        return 0
+
+    console.print("\n  updating…")
+    # Run it, then ask what version answers. Asked, not assumed.
+    outcome = updater.upgrade(step, release.version)
+
+    if not outcome.ok:
+        console.print(f"  [bad]failed[/bad]  [dim]{outcome.message}[/dim]\n")
+        return 1
+    if outcome.deferred:
+        console.print(f"  [good]{outcome.message}[/good]\n")
+        return 0
+    if outcome.forced:
+        # Worth saying out loud: something was pinned, and now it is not.
+        console.print("  [dim]the recorded requirement pinned the version, so it "
+                      "was reinstalled from the index[/dim]")
+    if outcome.version:
+        console.print(f"  [good]now on {outcome.version}[/good]\n")
+    else:
+        console.print(f"  [good]done[/good] [dim]— {outcome.message}.[/dim]\n")
+    return 0
+
+
 def run_uninstall(config: Config, dry_run: bool = False,
                   assume_yes: bool = False) -> int:
     """Show everything that would go, then go.
@@ -448,6 +529,8 @@ def main(argv: list[str] | None = None) -> int:
 
     if args.command == "doctor":
         return run_doctor(config, fix=getattr(args, "fix", False))
+    if args.command == "update":
+        return run_update(config, check_only=args.check)
     if args.command == "uninstall":
         return run_uninstall(config, dry_run=args.dry_run, assume_yes=args.yes)
     if args.command == "mcp":
@@ -484,6 +567,22 @@ def main(argv: list[str] | None = None) -> int:
         if config.needs_setup:
             return 1
 
+    # Which directory is this about? Asked once per folder, before the agent
+    # exists — the project root is worked out by walking upwards, and the
+    # answer is occasionally a surprise worth seeing before anything reads it.
+    # `--cwd` is the user naming it themselves, so it does not ask again.
+    if not args.cwd:
+        from .ui import console as console_module
+        from .workspace import confirm
+
+        theme = console_module.prepare_theme(config.ui.theme,
+                                             config.ui.ascii_borders, no_color=False)
+        chosen = confirm(config, console_module.build(theme), theme)
+        if chosen is None:
+            return 0
+        if chosen != config.paths.project:
+            config = apply_overrides(load_config(str(chosen)), args)
+
     from .ui.app import App
 
     resume = None

{comodor-0.2.3 → comodor-0.3.1}/src/comodor/config.py

@@ -227,6 +227,9 @@ class SafetyConfig:
     deny_commands: list[str] = field(default_factory=lambda: list(DEFAULT_DENY))
     workspace_only: bool = True
     max_file_read_bytes: int = 512_000
+    #: Directories the user has confirmed as a workspace. Exact paths, never
+    #: prefixes: approving ~/work/api must not quietly approve ~/work.
+    trusted_folders: list[str] = field(default_factory=list)
 
 
 # Patterns that are never worth running from an agent, however it is prompted.

{comodor-0.2.3 → comodor-0.3.1}/src/comodor/doctor.py

@@ -92,13 +92,22 @@ class Report:
 # --------------------------------------------------------------------------- #
 
 
-def run_checks(config: Config) -> Report:
-    """Every check, in the order a person would want to read them."""
+def run_checks(config: Config, online: bool = True) -> Report:
+    """Every check, in the order a person would want to read them.
+
+    `online` exists because one check asks the package index whether there is a
+    newer release, and everything else here reads the local machine. A caller
+    that must not touch the network — a test, or a diagnostic being gathered
+    from somewhere with no route out — turns it off and gets the rest.
+    """
+    checks = [_check_config, _check_config_permissions, _check_provider,
+              _check_saved_provider, _check_model, _check_brain,
+              _check_search_index, _check_skills, _check_leftovers, _check_mcp]
+    if online:
+        checks.append(_check_version)
+
     report = Report()
-    for check in (_check_config, _check_config_permissions, _check_provider,
-                  _check_saved_provider, _check_model, _check_brain,
-                  _check_search_index,
-                  _check_skills, _check_leftovers, _check_mcp):
+    for check in checks:
         try:
             finding = check(config)
         except Exception as error:                # a check must never be the bug
@@ -450,3 +459,32 @@ def wait_for(condition: Callable[[], bool], timeout: float = 2.0,
             return True
         time.sleep(interval)
     return condition()
+
+
+def _check_version(config: Config) -> Finding | None:
+    """Is there a newer release than the one running?
+
+    Doctor is where people look when something is not working, and "you are
+    four versions behind" is often the whole answer. It is not a repair, though
+    — `--fix` must never reach out and change what is installed under somebody
+    without being asked, so this states the command and stops.
+
+    On a short timeout, and silent when the network is not there. A diagnostic
+    that hangs for fifteen seconds on an aeroplane is a worse diagnostic than
+    one with a line missing.
+    """
+    from . import __version__
+    from .update import is_newer, latest
+
+    release = latest(timeout=(2.0, 3.0))
+    if release is None:
+        return None                               # offline; not a fault to report
+
+    if not is_newer(release.version, __version__):
+        return Finding("version", Status.OK, f"{__version__} is current")
+
+    return Finding(
+        "version", Status.WARN,
+        f"{__version__} is installed; {release.version} is out",
+        remedy="comodor update",
+    )