devops-bot-sdk 1.6.85__tar.gz → 1.6.86__tar.gz

{devops_bot_sdk-1.6.85 → devops_bot_sdk-1.6.86}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.6.85
+Version: 1.6.86
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.6.85 → devops_bot_sdk-1.6.86}/devops_bot_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.6.85
+Version: 1.6.86
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.6.85 → devops_bot_sdk-1.6.86}/devops_bot_sdk.egg-info/SOURCES.txt

@@ -238,6 +238,7 @@ tests/test_ui_gate.py
 tests/test_ui_lifespan.py
 tests/test_update_timer.py
 tests/test_updater_extras.py
+tests/test_updater_ignores_cwd.py
 tests/test_updater_pep668.py
 tests/test_updater_reports_the_truth.py
 tests/test_url_access.py

{devops_bot_sdk-1.6.85 → devops_bot_sdk-1.6.86}/sdk/__init__.py

@@ -1,6 +1,6 @@
 """AgentOS Desktop SDK — thin HTTPS/SSE client for the Electron app.
 
-Version: 1.6.85
+Version: 1.6.86
 
 Public surface:
   BackendClient.from_config()        — create client from ~/.agentos/config.toml
@@ -34,7 +34,7 @@ Rules:
   - All data egress through submit_webhook only
 """
 
-__version__ = "1.6.85"   # SINGLE SOURCE OF TRUTH — bump on every change; pyproject,
+__version__ = "1.6.86"   # SINGLE SOURCE OF TRUTH — bump on every change; pyproject,
 __author__  = "AgentOS"   # sdk.client.SDK_VERSION and the UI server version all read this.
 
 from sdk.client import BackendClient

{devops_bot_sdk-1.6.85 → devops_bot_sdk-1.6.86}/sdk/updater.py

@@ -306,6 +306,28 @@ def _pip_install(
         return (False, _redact(str(exc)))
 
 
+def _fresh_python_argv(code: str) -> list[str]:
+    """``python -P -c <code>`` — a fresh interpreter that does NOT put the current
+    directory on ``sys.path``.
+
+    Without ``-P``, ``python -c`` imports from the caller's working directory first.
+    Run from a checkout of this repo, that meant the checkout's ``sdk/`` and its
+    leftover ``devops_bot_sdk.egg-info`` (git-ignored, written by a past
+    ``pip install -e .``) shadowed what pip had just installed: measured on
+    2026-10-24, ``agentos-auto update`` installed 1.6.85, read 1.6.82 from the
+    stale egg-info, reported "the upgrade did not take" and force-reinstalled
+    through every source. ``-P`` exists from 3.11, which ``requires-python``
+    already demands. The callers also run from a neutral directory, belt and
+    braces for an interpreter that ignores the flag.
+    """
+    return [sys.executable, "-P", "-c", code]
+
+
+def _neutral_cwd() -> str:
+    import tempfile
+    return tempfile.gettempdir()
+
+
 def installed_version() -> str:
     """The version pip has ON DISK, read in a FRESH interpreter.
 
@@ -318,10 +340,10 @@ def installed_version() -> str:
     """
     try:
         r = subprocess.run(
-            [sys.executable, "-c",
-             f"from importlib.metadata import version; print(version({_DIST!r}))"],
+            _fresh_python_argv(
+                f"from importlib.metadata import version; print(version({_DIST!r}))"),
             capture_output=True, text=True, errors="replace", timeout=60,
-            check=False,
+            check=False, cwd=_neutral_cwd(),
         )
         ver = (r.stdout or "").strip().splitlines()
         if r.returncode == 0 and ver and ver[-1].strip():
@@ -338,10 +360,11 @@ def _verify_install() -> bool:
     ``agentos-auto.exe`` / loaded package files can't be replaced mid-pip, which
     can leave ``sdk`` importable but missing submodules (e.g. local_exec)."""
     try:
+        # Same shadowing as `installed_version`: from a checkout, this imported the
+        # CHECKOUT's sdk and called a broken install healthy.
         r = subprocess.run(
-            [sys.executable, "-c",
-             "import sdk, sdk.local_exec, sdk.ipc.handlers, sdk.run_auto"],
-            capture_output=True, timeout=90,
+            _fresh_python_argv("import sdk, sdk.local_exec, sdk.ipc.handlers, sdk.run_auto"),
+            capture_output=True, timeout=90, cwd=_neutral_cwd(),
         )
         return r.returncode == 0
     except Exception:  # noqa: BLE001

devops_bot_sdk-1.6.86/tests/test_updater_ignores_cwd.py

@@ -0,0 +1,67 @@
+"""`agentos-auto update` run from a checkout must read what pip installed, not the
+checkout.
+
+Measured 2026-10-24: run from `~/github/DevOpsBot-SDK`, the update installed
+1.6.85, then read 1.6.82 from the checkout's leftover `devops_bot_sdk.egg-info`
+(a `python -c` child puts the working directory first on `sys.path`), reported
+"the upgrade did not take" and force-reinstalled through every source.
+"""
+from __future__ import annotations
+
+import subprocess
+import sys
+
+import pytest
+
+from sdk import updater
+
+
+@pytest.fixture
+def stale_checkout(tmp_path, monkeypatch):
+    """Two places that both look like the SDK:
+
+    * the WORKING DIRECTORY — an old checkout: egg-info at 0.0.1 and an `sdk/`
+      that cannot be imported;
+    * an INSTALLED location on PYTHONPATH (which `-P` still honours) — what pip
+      just put down: 9.9.9, importable with the submodules `_verify_install` loads.
+    """
+    checkout = tmp_path / "checkout"
+    egg = checkout / "devops_bot_sdk.egg-info"
+    egg.mkdir(parents=True)
+    (egg / "PKG-INFO").write_text("Metadata-Version: 2.1\nName: devops-bot-sdk\nVersion: 0.0.1\n")
+    (checkout / "sdk").mkdir()
+    (checkout / "sdk" / "__init__.py").write_text("raise ImportError('the stale checkout')\n")
+
+    installed = tmp_path / "site"
+    dist = installed / "devops_bot_sdk-9.9.9.dist-info"
+    dist.mkdir(parents=True)
+    (dist / "METADATA").write_text("Metadata-Version: 2.1\nName: devops-bot-sdk\nVersion: 9.9.9\n")
+    for mod in ("sdk/__init__.py", "sdk/local_exec.py", "sdk/run_auto.py",
+                "sdk/ipc/__init__.py", "sdk/ipc/handlers.py"):
+        (installed / mod).parent.mkdir(parents=True, exist_ok=True)
+        (installed / mod).write_text("")
+
+    monkeypatch.setenv("PYTHONPATH", str(installed))
+    monkeypatch.chdir(checkout)
+    return checkout
+
+
+def test_the_shadowing_is_real(stale_checkout):
+    """Proof the fixture reproduces the bug: a plain `python -c` reads the checkout."""
+    r = subprocess.run(
+        [sys.executable, "-c",
+         "from importlib.metadata import version; print(version('devops-bot-sdk'))"],
+        capture_output=True, text=True)
+    assert r.stdout.strip() == "0.0.1"
+
+
+def test_installed_version_reads_the_install_not_the_checkout(stale_checkout):
+    assert updater.installed_version() == "9.9.9"
+
+
+def test_verify_install_imports_the_install_not_the_checkout(stale_checkout):
+    assert updater._verify_install() is True
+
+
+def test_the_probe_never_puts_the_cwd_on_the_path():
+    assert updater._fresh_python_argv("pass")[:3] == [sys.executable, "-P", "-c"]