ermes-cli 1.0.0__tar.gz → 1.1.0__tar.gz

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.5
 Name: ermes-cli
-Version: 1.0.0
-Summary: CLI-first access to Ermes marketing automation, with Auth0 multi-project auth and an optional compatibility MCP.
+Version: 1.1.0
+Summary: CLI-first access to Ermes marketing automation with Auth0 multi-project auth.
 Project-URL: Homepage, https://ermes.publinker.com
 Project-URL: Repository, https://github.com/Martech-DM/ermes
 Author: Martech-DM
@@ -14,7 +14,6 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Topic :: Communications :: Email
 Requires-Python: >=3.10
-Requires-Dist: fastmcp>=2.0
 Requires-Dist: httpx>=0.28
 Requires-Dist: keyring>=24.0
 Requires-Dist: pyyaml>=6.0
@@ -28,13 +27,12 @@ Requires-Dist: pytest>=8.0; extra == 'dev'
 Requires-Dist: responses>=0.25; extra == 'dev'
 Description-Content-Type: text/markdown
 
-# Ermes CLI and optional compatibility MCP
+# Ermes CLI
 
-This package gives Ermes operators a CLI-first surface for explicit-project API reads and guarded
-writes. It also retains a 10-tool read-only MCP for temporary compatibility, but normal agent
-sessions leave that server unregistered.
+This package gives Ermes operators a CLI surface for explicit-project API reads and guarded writes.
 
-Version 1.0.0 (DEV-2261). Verified 2026-10-20.
+Version 1.1.0. It removed the `ermes-mcp` compatibility server that 1.0.0 shipped (DEV-2326); a
+machine that registered it must drop that registration (e.g. `claude mcp remove ermes`).
 
 ## Install the CLI
 
@@ -55,22 +53,44 @@ Releases are cut by pushing a tag `ermes-cli-vX.Y.Z` equal to `cli/pyproject.tom
 (`.github/workflows/publish-cli.yml` runs the tests, builds the wheel, publishes to PyPI and attaches
 it to a GitHub Release). `install-cli.sh` is idempotent and safe to re-run for upgrades.
 
-If a temporary rollback needs fixed typed schemas, register the compatibility MCP only for one
-explicit project:
+## Update the CLI
 
-```bash
-./cli/scripts/install-mcp.sh --project=<project-name-or-id>
+**Automatic prompt.** In an interactive terminal, the CLI checks PyPI for a newer `ermes-cli` at
+most once every 24 hours (2-second timeout, cached in `~/.ermes/update-check.json`; failed checks
+are cached too, so an offline laptop is not slowed down). When one exists it asks before running
+your command:
+
+```
+ermes-cli 1.2.0 is available (you have 1.1.0). Update now? [Y]es / [n]ot now / [s]kip this version
 ```
 
-Remove it after the rollback window. Removal preserves Auth0 tokens, project keys, and every file
-under `~/.ermes`:
+- **Yes** (Enter): runs `pipx upgrade ermes-cli`, checks the new version in a fresh process, then
+  re-runs your command on it.
+- **Not now**: runs your command; asks again on the next run.
+- **Skip this version**: never asks about that version again; a newer release asks once more.
+
+A failed upgrade or Ctrl-C at the prompt prints one line and runs your command on the current
+version. The check never runs with `--json`, when `CI` is set, when stdin/stdout/stderr is not a
+TTY, before `ermes version` / `ermes update`, or with `ERMES_NO_UPDATE_CHECK=1`.
+
+**Manual.**
 
 ```bash
-./cli/scripts/install-mcp.sh --uninstall
+ermes update            # check, then ask before upgrading
+ermes update --check    # report only, never install
+ermes update --yes      # upgrade without asking
+ermes --json update [--yes]   # --json installs only with --yes
 ```
 
-Never run `ermes logout` as part of registration removal; logout deletes the Keychain session and
-`projects.yml`.
+**Status values** (`--json` `status`): `up_to_date`, `ahead`, `update_available`, `updated`,
+`lookup_failed` (exit 1), `update_failed` (exit 1). Installer output goes to stderr; stdout stays
+one JSON document.
+
+**Supported install.** Only the pipx install of the PyPI package (`install-cli.sh`, or
+`pipx install ermes-cli`) upgrades itself. `pipx upgrade` keeps the old venv if pip fails, so a
+failed upgrade never leaves you without a CLI. Editable checkouts (`git pull`), git or local-dir
+installs, non-pipx environments and an `ermes` that is not the venv pipx manages get the manual
+command instead of a prompt. Keychain tokens and `~/.ermes` are untouched.
 
 ## Auth — Auth0 device login (recommended)
 
@@ -161,8 +181,8 @@ State lives in `~/.ermes/state.yml` (chmod 600), separate from `projects.yml`
 so refreshing projects doesn't clobber the write window. `ermes whoami` shows
 the current write status.
 
-The optional compatibility MCP remains fixed at 10 read-only tools. Mutations stay CLI-only so every
-agent write must carry explicit project scope and one-process `ERMES_ALLOW_WRITES=1` authorization.
+Every agent write must carry explicit project scope and one-process `ERMES_ALLOW_WRITES=1`
+authorization.
 
 ## Metrics
 
@@ -243,35 +263,12 @@ is legible.
 
 Full surface: `ermes --help`.
 
-### Optional compatibility MCP (`ermes-mcp`)
-
-The 10-tool read-only MCP remains for temporary Claude Code rollback only. Normal sessions use the
-CLI so they can pin project scope per command without loading fixed schemas at startup.
-`install-mcp.sh --project=<name-or-id>` writes an explicit `ERMES_PROJECT`; `ermes use` doesn't
-retarget that process.
-
-The CLI covers every compatibility read and is the preferred path:
-
-| Tool | Purpose |
-|---|---|
-| `whoami` | Current profile + base URL (no API call) |
-| `list_campaigns(limit?, status?)` | Campaigns; use CLI `campaigns list --status` when filtering |
-| `get_campaign(campaign_id)` | One campaign |
-| `list_templates(limit?)` | Templates |
-| `get_template(template_id)` | One template |
-| `list_lists(limit?)` | Contact lists |
-| `list_journeys(limit?)` | Automation journeys |
-| `list_users(limit?, email?)` | Users; use CLI `users list --q` for exact search |
-| `get_user(user_id)` | One user; the CLI argument is the external ID |
-| `get_user_events(user_id, limit?)` | Recent events; the CLI argument is the external ID |
-
 ## Where in the wider stack
 
 Ermes is a CLI-first integration in the
 [`Martech-DM/martech-mcps`](https://github.com/Martech-DM/martech-mcps) registry.
 That repo's `ermes/README.md` and `ermes/skills/ermes-ops/SKILL.md` are the
-cross-fleet setup and operating runbooks. The compatibility MCP stays
-unregistered during normal operation.
+cross-fleet setup and operating runbooks.
 
 ## CLI source history
 

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/README.md

@@ -1,10 +1,9 @@
-# Ermes CLI and optional compatibility MCP
+# Ermes CLI
 
-This package gives Ermes operators a CLI-first surface for explicit-project API reads and guarded
-writes. It also retains a 10-tool read-only MCP for temporary compatibility, but normal agent
-sessions leave that server unregistered.
+This package gives Ermes operators a CLI surface for explicit-project API reads and guarded writes.
 
-Version 1.0.0 (DEV-2261). Verified 2026-10-20.
+Version 1.1.0. It removed the `ermes-mcp` compatibility server that 1.0.0 shipped (DEV-2326); a
+machine that registered it must drop that registration (e.g. `claude mcp remove ermes`).
 
 ## Install the CLI
 
@@ -25,22 +24,44 @@ Releases are cut by pushing a tag `ermes-cli-vX.Y.Z` equal to `cli/pyproject.tom
 (`.github/workflows/publish-cli.yml` runs the tests, builds the wheel, publishes to PyPI and attaches
 it to a GitHub Release). `install-cli.sh` is idempotent and safe to re-run for upgrades.
 
-If a temporary rollback needs fixed typed schemas, register the compatibility MCP only for one
-explicit project:
+## Update the CLI
 
-```bash
-./cli/scripts/install-mcp.sh --project=<project-name-or-id>
+**Automatic prompt.** In an interactive terminal, the CLI checks PyPI for a newer `ermes-cli` at
+most once every 24 hours (2-second timeout, cached in `~/.ermes/update-check.json`; failed checks
+are cached too, so an offline laptop is not slowed down). When one exists it asks before running
+your command:
+
+```
+ermes-cli 1.2.0 is available (you have 1.1.0). Update now? [Y]es / [n]ot now / [s]kip this version
 ```
 
-Remove it after the rollback window. Removal preserves Auth0 tokens, project keys, and every file
-under `~/.ermes`:
+- **Yes** (Enter): runs `pipx upgrade ermes-cli`, checks the new version in a fresh process, then
+  re-runs your command on it.
+- **Not now**: runs your command; asks again on the next run.
+- **Skip this version**: never asks about that version again; a newer release asks once more.
+
+A failed upgrade or Ctrl-C at the prompt prints one line and runs your command on the current
+version. The check never runs with `--json`, when `CI` is set, when stdin/stdout/stderr is not a
+TTY, before `ermes version` / `ermes update`, or with `ERMES_NO_UPDATE_CHECK=1`.
+
+**Manual.**
 
 ```bash
-./cli/scripts/install-mcp.sh --uninstall
+ermes update            # check, then ask before upgrading
+ermes update --check    # report only, never install
+ermes update --yes      # upgrade without asking
+ermes --json update [--yes]   # --json installs only with --yes
 ```
 
-Never run `ermes logout` as part of registration removal; logout deletes the Keychain session and
-`projects.yml`.
+**Status values** (`--json` `status`): `up_to_date`, `ahead`, `update_available`, `updated`,
+`lookup_failed` (exit 1), `update_failed` (exit 1). Installer output goes to stderr; stdout stays
+one JSON document.
+
+**Supported install.** Only the pipx install of the PyPI package (`install-cli.sh`, or
+`pipx install ermes-cli`) upgrades itself. `pipx upgrade` keeps the old venv if pip fails, so a
+failed upgrade never leaves you without a CLI. Editable checkouts (`git pull`), git or local-dir
+installs, non-pipx environments and an `ermes` that is not the venv pipx manages get the manual
+command instead of a prompt. Keychain tokens and `~/.ermes` are untouched.
 
 ## Auth — Auth0 device login (recommended)
 
@@ -131,8 +152,8 @@ State lives in `~/.ermes/state.yml` (chmod 600), separate from `projects.yml`
 so refreshing projects doesn't clobber the write window. `ermes whoami` shows
 the current write status.
 
-The optional compatibility MCP remains fixed at 10 read-only tools. Mutations stay CLI-only so every
-agent write must carry explicit project scope and one-process `ERMES_ALLOW_WRITES=1` authorization.
+Every agent write must carry explicit project scope and one-process `ERMES_ALLOW_WRITES=1`
+authorization.
 
 ## Metrics
 
@@ -213,35 +234,12 @@ is legible.
 
 Full surface: `ermes --help`.
 
-### Optional compatibility MCP (`ermes-mcp`)
-
-The 10-tool read-only MCP remains for temporary Claude Code rollback only. Normal sessions use the
-CLI so they can pin project scope per command without loading fixed schemas at startup.
-`install-mcp.sh --project=<name-or-id>` writes an explicit `ERMES_PROJECT`; `ermes use` doesn't
-retarget that process.
-
-The CLI covers every compatibility read and is the preferred path:
-
-| Tool | Purpose |
-|---|---|
-| `whoami` | Current profile + base URL (no API call) |
-| `list_campaigns(limit?, status?)` | Campaigns; use CLI `campaigns list --status` when filtering |
-| `get_campaign(campaign_id)` | One campaign |
-| `list_templates(limit?)` | Templates |
-| `get_template(template_id)` | One template |
-| `list_lists(limit?)` | Contact lists |
-| `list_journeys(limit?)` | Automation journeys |
-| `list_users(limit?, email?)` | Users; use CLI `users list --q` for exact search |
-| `get_user(user_id)` | One user; the CLI argument is the external ID |
-| `get_user_events(user_id, limit?)` | Recent events; the CLI argument is the external ID |
-
 ## Where in the wider stack
 
 Ermes is a CLI-first integration in the
 [`Martech-DM/martech-mcps`](https://github.com/Martech-DM/martech-mcps) registry.
 That repo's `ermes/README.md` and `ermes/skills/ermes-ops/SKILL.md` are the
-cross-fleet setup and operating runbooks. The compatibility MCP stays
-unregistered during normal operation.
+cross-fleet setup and operating runbooks.
 
 ## CLI source history
 

ermes_cli-1.1.0/ermes_cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "1.1.0"

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/ermes_cli/commands/auth_cmds.py

@@ -80,7 +80,7 @@ def _hostname() -> str:
 def ensure_project_key(project_id: int) -> str:
     """Return the cached CLI key for `project_id`, minting it on first use.
 
-    Raises `ConfigError` (never SystemExit — the MCP server calls this too)
+    Raises `ConfigError` (never SystemExit)
     when there is no Auth0 session or the server refuses.
     """
     payload = load_projects_file()

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/ermes_cli/commands/projects.py

@@ -246,7 +246,7 @@ def use(
         ..., help="Project name or numeric id (from `ermes projects list`)"
     ),
 ) -> None:
-    """Switch the active project. Affects every subsequent CLI + MCP call."""
+    """Switch the active project. Affects every subsequent CLI call."""
     projects = get_projects()
     if not projects:
         console.print("[yellow]No cached projects.[/yellow] Run `ermes login` first.")

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/ermes_cli/config.py

@@ -304,7 +304,7 @@ def get_auth0_email() -> str | None:
 
 
 # ---------------------------------------------------------------------------
-# Profile resolution — what the CLI / MCP actually consume at runtime
+# Profile resolution — what the CLI actually consumes at runtime
 # ---------------------------------------------------------------------------
 
 

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/ermes_cli/main.py

@@ -32,11 +32,15 @@ atexit.register(_close_client)
 
 @app.callback()
 def main(
+    ctx: typer.Context,
     profile: Optional[str] = typer.Option(None, "--profile", "-p", help="Profile name"),
     use_json: bool = typer.Option(False, "--json", help="Output as JSON"),
 ):
     state.profile_name = profile
     state.use_json = use_json
+    from ermes_cli.update import maybe_prompt
+
+    maybe_prompt(use_json, ctx.invoked_subcommand)
 
 
 def get_client() -> ErmesClient:
@@ -61,6 +65,50 @@ def version():
         typer.echo(f"ermes-cli {__version__}")
 
 
+@app.command()
+def update(
+    check: bool = typer.Option(False, "--check", help="Only report whether a newer version exists."),
+    yes: bool = typer.Option(False, "--yes", "-y", help="Upgrade without asking."),
+):
+    """Check PyPI for a newer ermes-cli and upgrade the pipx install. Disable the daily prompt with ERMES_NO_UPDATE_CHECK=1."""
+    import json
+    import time
+
+    from ermes_cli import update as upd
+
+    def done(status: str, code: int = 0, **extra) -> None:
+        if state.use_json:
+            print(json.dumps({"status": status, "installed": __version__, **extra}))
+        raise typer.Exit(code=code)
+
+    try:
+        latest = upd.fetch_latest()
+    except upd.UpdateError as e:
+        typer.echo(f"Update check failed: {e}", err=True)
+        done("lookup_failed", 1, error=str(e))
+    upd.write_cache(checked_at=time.time(), latest=latest, error=None)
+
+    if not upd.is_newer(latest, __version__):
+        status = "ahead" if upd.is_newer(__version__, latest) else "up_to_date"
+        if not state.use_json:
+            typer.echo(f"ermes-cli {__version__} is {'newer than PyPI ' + latest if status == 'ahead' else 'up to date'}.")
+        done(status, latest=latest)
+    if check or (state.use_json and not yes):
+        if not state.use_json:
+            typer.echo(f"ermes-cli {latest} is available (you have {__version__}). Run `ermes update` to install.")
+        done("update_available", latest=latest)
+    if not yes and not typer.confirm(f"Upgrade ermes-cli {__version__} -> {latest}?", default=True, err=True):
+        done("update_available", latest=latest)
+    try:
+        installed = upd.upgrade(upd.detect_install(), latest)
+    except upd.UpdateError as e:
+        typer.echo(f"Update failed: {e}", err=True)
+        done("update_failed", 1, latest=latest, error=str(e))
+    if not state.use_json:
+        typer.echo(f"Updated ermes-cli to {installed}.")
+    done("updated", latest=latest)
+
+
 @app.command()
 def whoami(
     check: bool = typer.Option(

ermes_cli-1.1.0/ermes_cli/update.py

@@ -0,0 +1,225 @@
+"""Newer-version check, upgrade prompt and `ermes update` (DEV-1972).
+
+ermes-cli ships to PyPI on `ermes-cli-v*` tags (DEV-2262), so "latest" is PyPI's current
+`ermes-cli` release: a public JSON endpoint, no GitHub or Ermes credentials. Interactive runs check
+at most once a day and ask before upgrading, like Codex / Claude Code. Only the pipx install made by
+`install-cli.sh` is upgraded in place (`pipx upgrade`); anything else gets the manual command.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import re
+import shutil
+import subprocess
+import sys
+import time
+from dataclasses import dataclass
+from importlib import metadata
+from pathlib import Path
+
+import httpx
+import typer
+
+from ermes_cli import __version__
+
+PACKAGE = "ermes-cli"
+PYPI_URL = f"https://pypi.org/pypi/{PACKAGE}/json"
+
+CACHE_FILE = "update-check.json"
+CHECK_INTERVAL_S = 24 * 3600
+AUTO_TIMEOUT_S = 2.0
+EXPLICIT_TIMEOUT_S = 10.0
+OPT_OUT_ENV = "ERMES_NO_UPDATE_CHECK"
+# Never prompt before these: `version` must stay a pure read, `update` does its own check.
+SKIP_COMMANDS = {"update", "version"}
+
+MANUAL_INSTALL = f"Upgrade manually: `pipx upgrade {PACKAGE}`, or re-run cli/scripts/install-cli.sh."
+
+_SEMVER_RE = re.compile(r"^(\d+)\.(\d+)\.(\d+)$")
+
+
+class UpdateError(Exception):
+    """Lookup, environment or install failure. The message is shown to the operator."""
+
+
+def parse_version(value: str | None) -> tuple[int, int, int] | None:
+    """MAJOR.MINOR.PATCH -> int tuple; anything else (pre-release, junk, None) -> None."""
+    m = _SEMVER_RE.match((value or "").strip())
+    return (int(m[1]), int(m[2]), int(m[3])) if m else None
+
+
+def is_newer(latest: str | None, current: str | None) -> bool:
+    """True only when both parse and latest > current. Malformed never counts as newer."""
+    a, b = parse_version(latest), parse_version(current)
+    return a is not None and b is not None and a > b
+
+
+def fetch_latest(timeout: float = EXPLICIT_TIMEOUT_S) -> str:
+    """PyPI's current release. `info.version` already excludes yanked and pre-releases."""
+    try:
+        r = httpx.get(PYPI_URL, timeout=timeout, follow_redirects=True)
+        r.raise_for_status()
+        version = r.json()["info"]["version"]
+    except httpx.HTTPStatusError as e:
+        raise UpdateError(f"PyPI lookup failed: HTTP {e.response.status_code}") from e
+    except httpx.HTTPError as e:
+        raise UpdateError(f"PyPI lookup failed: {e.__class__.__name__}") from e
+    except (ValueError, KeyError, TypeError) as e:
+        raise UpdateError("PyPI returned an unexpected response") from e
+    if parse_version(version) is None:
+        raise UpdateError(f"PyPI's latest {PACKAGE} is not MAJOR.MINOR.PATCH: {version!r}")
+    return version
+
+
+# ---------------------------------------------------------------- cache
+
+
+def _cache_path() -> Path:
+    from ermes_cli.config import _config_dir
+
+    return _config_dir() / CACHE_FILE
+
+
+def read_cache() -> dict:
+    try:
+        data = json.loads(_cache_path().read_text())
+        return data if isinstance(data, dict) else {}
+    except (OSError, ValueError):
+        return {}
+
+
+def write_cache(**fields) -> None:
+    """Merge into the cache. Failed lookups are cached too, so an offline laptop backs off."""
+    try:
+        path = _cache_path()
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_text(json.dumps({**read_cache(), **fields}))
+    except OSError:
+        pass
+
+
+# ---------------------------------------------------------------- install detection + upgrade
+
+
+@dataclass
+class Install:
+    venv: Path
+    pipx: str
+
+
+def detect_install() -> Install:
+    """Prove the RUNNING CLI is the pipx venv `pipx upgrade ermes-cli` would touch, else refuse."""
+    try:
+        raw = metadata.distribution(PACKAGE).read_text("direct_url.json")
+    except metadata.PackageNotFoundError as e:
+        raise UpdateError(f"{PACKAGE} is not installed as a package. {MANUAL_INSTALL}") from e
+    if raw:  # PyPI installs carry no direct_url.json; git, local-dir and editable installs do.
+        du = json.loads(raw)
+        if du.get("dir_info", {}).get("editable"):
+            raise UpdateError(f"this ermes runs from an editable checkout ({du.get('url')}); update it with git pull.")
+        raise UpdateError(f"this ermes was installed from {du.get('url')}, not PyPI. {MANUAL_INSTALL}")
+
+    venv = Path(sys.prefix)
+    if not (venv / "pipx_metadata.json").is_file():
+        raise UpdateError(f"this ermes is not a pipx install ({venv}). {MANUAL_INSTALL}")
+    pipx = shutil.which("pipx")
+    if not pipx:
+        raise UpdateError(f"pipx is not on PATH. {MANUAL_INSTALL}")
+    out = subprocess.run(
+        [pipx, "environment", "--value", "PIPX_LOCAL_VENVS"],
+        capture_output=True, text=True, timeout=30, check=False,
+    )
+    expected = Path(out.stdout.strip() or Path.home() / ".local/pipx/venvs") / PACKAGE
+    if not expected.exists() or not expected.samefile(venv):
+        raise UpdateError(
+            f"the running ermes ({venv}) is not the venv pipx manages ({expected}); "
+            "refusing to update a different install."
+        )
+    return Install(venv=venv, pipx=pipx)
+
+
+def upgrade(inst: Install, target: str) -> str:
+    """`pipx upgrade`, then check a FRESH process reports `target`; raise otherwise.
+
+    `pipx upgrade` keeps the old venv when pip fails, so a failed upgrade never leaves the operator
+    without a CLI (the uninstall-first trap DEV-2070 describes for install-cli.sh).
+    """
+    # Installer output goes to stderr so `--json` stdout stays one parseable document.
+    subprocess.run([inst.pipx, "upgrade", PACKAGE], stdout=sys.stderr, stderr=sys.stderr, check=False)
+    out = subprocess.run(
+        [str(inst.venv / "bin" / "ermes"), "--json", "version"],
+        capture_output=True, text=True, timeout=60, check=False,
+        env={**os.environ, OPT_OUT_ENV: "1"},
+    )
+    try:
+        installed = json.loads(out.stdout)["version"]
+    except (ValueError, KeyError, TypeError) as e:
+        raise UpdateError(
+            f"the upgraded ermes did not report a version (exit {out.returncode}). {MANUAL_INSTALL}"
+        ) from e
+    if installed != target:
+        raise UpdateError(f"upgrade left {installed} installed, expected {target}. {MANUAL_INSTALL}")
+    return installed
+
+
+# ---------------------------------------------------------------- automatic prompt
+
+
+def auto_check_enabled(use_json: bool, command: str | None) -> bool:
+    """Interactive humans only: never in --json, CI, pipes, scripts, or with the opt-out set."""
+    if use_json or command in SKIP_COMMANDS or os.environ.get(OPT_OUT_ENV) or os.environ.get("CI"):
+        return False
+    return sys.stdin.isatty() and sys.stdout.isatty() and sys.stderr.isatty()
+
+
+def _cached_latest() -> str | None:
+    cache = read_cache()
+    if time.time() - float(cache.get("checked_at") or 0) < CHECK_INTERVAL_S:
+        return cache.get("latest")
+    try:
+        latest = fetch_latest(timeout=AUTO_TIMEOUT_S)
+    except UpdateError as e:
+        write_cache(checked_at=time.time(), latest=None, error=str(e))
+        return None
+    write_cache(checked_at=time.time(), latest=latest, error=None)
+    return latest
+
+
+def maybe_prompt(use_json: bool, command: str | None) -> None:
+    """Ask (at most daily) whether to upgrade; on yes, upgrade and re-run the command on the new code.
+
+    Never raises: a broken check must not break the command the operator actually asked for.
+    """
+    try:
+        if not auto_check_enabled(use_json, command):
+            return
+        latest = _cached_latest()
+        if not is_newer(latest, __version__) or read_cache().get("skipped") == latest:
+            return
+        try:
+            inst = detect_install()
+        except UpdateError as e:
+            typer.echo(f"ermes-cli {latest} is available (you have {__version__}). {e}", err=True)
+            return
+        # typer >= 0.24 vendors click, so there is no Choice type: anything but y/s means "not now".
+        choice = typer.prompt(
+            f"ermes-cli {latest} is available (you have {__version__}). "
+            "Update now? [Y]es / [n]ot now / [s]kip this version",
+            default="y", show_default=False, err=True,
+        ).strip().lower()[:1]
+        if choice == "s":
+            write_cache(skipped=latest)
+            return
+        if choice != "y":
+            return
+        upgrade(inst, latest)
+        typer.echo(f"Updated ermes-cli to {latest}. Re-running your command...", err=True)
+        os.execv(str(inst.venv / "bin" / "ermes"), ["ermes", *sys.argv[1:]])
+    except typer.Abort:  # Ctrl-C / EOF at the prompt: carry on with the command
+        typer.echo("", err=True)
+    except UpdateError as e:
+        typer.echo(f"Update failed, continuing on {__version__}: {e}", err=True)
+    except Exception:  # noqa: BLE001 - the check must never break the real command
+        return

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/ermes_cli/write_mode.py

@@ -1,4 +1,4 @@
-"""Write-mode guard: block mutating CLI/MCP calls by default.
+"""Write-mode guard: block mutating CLI calls by default.
 
 Why: most CLI sessions are read-only investigation ("what campaigns ran
 last week?"). The mutating commands (`campaigns create`, `lists delete`,
@@ -20,10 +20,6 @@ Behavior:
 State lives in `~/.ermes/state.yml` (chmod 600). It's deliberately
 separate from projects.yml so refreshing projects doesn't accidentally
 clobber the write window.
-
-The MCP server's tool set is read-only by design (see PR #395 TODO), so
-this guard primarily protects the `ermes` CLI surface. When MCP gains
-mutating tools (v0.4), they'll be gated through the same helper.
 """
 
 from __future__ import annotations

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/pyproject.toml

@@ -5,8 +5,8 @@ build-backend = "hatchling.build"
 [project]
 name = "ermes-cli"
 # Keep in lockstep with ermes_cli/__init__.py::__version__ — tests/test_version.py fails if they drift.
-version = "1.0.0"
-description = "CLI-first access to Ermes marketing automation, with Auth0 multi-project auth and an optional compatibility MCP."
+version = "1.1.0"
+description = "CLI-first access to Ermes marketing automation with Auth0 multi-project auth."
 readme = "README.md"
 requires-python = ">=3.10"
 license = { text = "Proprietary" }
@@ -25,7 +25,6 @@ dependencies = [
     "httpx>=0.28",
     "rich>=14.0",
     "pyyaml>=6.0",
-    "fastmcp>=2.0",
     "keyring>=24.0",
     "requests>=2.31",
     # zoneinfo data — guarantees `projects create --timezone` validation works on
@@ -36,7 +35,6 @@ dependencies = [
 
 [project.scripts]
 ermes = "ermes_cli.main:app"
-ermes-mcp = "ermes_cli.mcp_server:main"
 
 [project.urls]
 Homepage = "https://ermes.publinker.com"
@@ -55,6 +53,3 @@ exclude = ["uv.lock"]
 
 [tool.hatch.build.targets.wheel]
 packages = ["ermes_cli"]
-
-[tool.hatch.build.targets.wheel.force-include]
-"ermes_cli/routes.yaml" = "ermes_cli/routes.yaml"

{ermes_cli-1.0.0 → ermes_cli-1.1.0}/scripts/install-cli.sh

@@ -1,7 +1,5 @@
 #!/usr/bin/env bash
-# One-shot installer for the CLI-first Ermes package.
-# The package includes an optional compatibility MCP, but this script never
-# registers it.
+# One-shot installer for the Ermes CLI.
 #
 # Usage:
 #   ./cli/scripts/install-cli.sh                # install latest release from PyPI + verify
@@ -121,15 +119,12 @@ fi
 step "Verifying"
 ERMES_VENV="$(ermes_venv_dir)"
 ERMES_BIN="$ERMES_VENV/bin/ermes"
-ERMES_MCP_BIN="$ERMES_VENV/bin/ermes-mcp"
 
 [ -x "$ERMES_BIN" ] || die "ermes binary missing from pipx venv $ERMES_VENV."
-[ -x "$ERMES_MCP_BIN" ] || die "ermes-mcp binary missing from pipx venv $ERMES_VENV."
 
 # Typer apps expose a `version` subcommand (no --version flag).
 VERSION_OUTPUT="$("$ERMES_BIN" version 2>&1)" || die "ermes version failed: $VERSION_OUTPUT"
 ok "$VERSION_OUTPUT"
-ok "ermes-mcp at $ERMES_MCP_BIN"
 
 PATH_ERMES="$(command -v ermes || true)"
 if [ -z "$PATH_ERMES" ]; then
@@ -162,10 +157,5 @@ else
   ermes whoami --check proves the selected key against the API. CI or a box
   without a browser: ERMES_API_KEY=sk_... ermes --json campaigns list.
 
-  The optional compatibility MCP is not registered by default. If a temporary
-  rollback needs its 10 fixed schemas, pin its project at registration:
-
-      ./cli/scripts/install-mcp.sh --project=<project-name-or-id>
-
 EOF
 fi