firekeep-client 1.7.1__tar.gz → 1.7.2__tar.gz

{firekeep_client-1.7.1/firekeep_client.egg-info → firekeep_client-1.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firekeep-client
-Version: 1.7.1
+Version: 1.7.2
 Summary: Client for Firekeep, the self-hosted operating layer for connected AI agents.
 License-Expression: LicenseRef-Firekeep-BUSL-1.1
 Project-URL: Homepage, https://firekeep.ai

{firekeep_client-1.7.1 → firekeep_client-1.7.2}/firekeep_client/__init__.py

@@ -9,4 +9,4 @@ versions without a verdict (`_check_versions`) and judges staleness against the
 release manifest instead (`_check_client_version`).
 """
 
-__version__ = "1.7.1"
+__version__ = "1.7.2"

{firekeep_client-1.7.1 → firekeep_client-1.7.2}/firekeep_client/cli.py

@@ -159,10 +159,11 @@ EMPTY_REGISTRY_HINT = (
 # §3.1), so this is the one place in the kit that names the wheel's source.
 HANDS_WHEEL_SPEC = "firekeep-hands>=0.1,<0.2"
 
-# Flip to True in the release that first publishes firekeep-hands through the
-# `pypi-hands` trusted publisher (Task 13). Until then a bare `pip install
-# firekeep-hands` could resolve to whoever registers the name first.
-HANDS_PYPI_PUBLISHED = False
+# True since client 1.7.2: firekeep-hands 0.1.0 was published through the
+# `pypi-hands` trusted publisher on 2026-10-06. While it was False, a bare
+# `pip install firekeep-hands` could have resolved to whoever registered the
+# name first, so `enable` refused without `--from`.
+HANDS_PYPI_PUBLISHED = True
 
 
 def _current_link(home: Path | None = None) -> Path:
@@ -2212,9 +2213,11 @@ def cmd_hands(args) -> int:
     is a translator onto `firekeep_hands.cli.main`, imported lazily so a kit
     without the wheel keeps every other command working.
 
-    PyPI squat guard (2026-09-05 ruling): `firekeep-hands` is not published
-    yet, so a bare `enable` (no `--from`, no `--pypi`) refuses rather than
-    `pip install`-ing a name a third party could still claim.
+    Source: `--from` (a checkout dir, wheel path or pip spec) when given,
+    otherwise the published PyPI wheel (`HANDS_WHEEL_SPEC`). PyPI squat guard
+    (2026-09-05 ruling): while `HANDS_PYPI_PUBLISHED` is False, `enable`
+    without `--from` refuses rather than `pip install`-ing a name a third
+    party could still claim.
     """
     action = getattr(args, "action", None) or "status"
     manifest = dexes.KNOWN_DEXES["hands"]
@@ -2222,7 +2225,7 @@ def cmd_hands(args) -> int:
     if action == "enable":
         source = (getattr(args, "source", None) or "").strip()
         if not source:
-            if getattr(args, "pypi", False) and HANDS_PYPI_PUBLISHED:
+            if HANDS_PYPI_PUBLISHED:
                 source = HANDS_WHEEL_SPEC
             else:
                 print("firekeep: firekeep-hands is not yet published to PyPI — install from a "
@@ -3224,7 +3227,8 @@ def _build_parser() -> argparse.ArgumentParser:
     p_hands.add_argument("--from", dest="source", default=None,
                          help="wheel source for enable: a local checkout dir or a pip spec")
     p_hands.add_argument("--pypi", action="store_true",
-                         help="enable: install the published wheel from PyPI (HANDS_WHEEL_SPEC)")
+                         help="enable: install the published wheel from PyPI (the default "
+                              "without --from; kept for scripts that pass it)")
     p_hands.add_argument("--no-autostart", action="store_true")
     p_hands.add_argument("--purge", action="store_true", help="with disable: delete ~/.firekeep/hands")
     p_hands.set_defaults(func=cmd_hands)

{firekeep_client-1.7.1 → firekeep_client-1.7.2/firekeep_client.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firekeep-client
-Version: 1.7.1
+Version: 1.7.2
 Summary: Client for Firekeep, the self-hosted operating layer for connected AI agents.
 License-Expression: LicenseRef-Firekeep-BUSL-1.1
 Project-URL: Homepage, https://firekeep.ai

{firekeep_client-1.7.1 → firekeep_client-1.7.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "firekeep-client"
-version = "1.7.1"
+version = "1.7.2"
 description = "Client for Firekeep, the self-hosted operating layer for connected AI agents."
 readme = "README.md"
 requires-python = ">=3.10"

{firekeep_client-1.7.1 → firekeep_client-1.7.2}/tests/test_cli_hands.py

@@ -35,7 +35,27 @@ def _args(**kw):
     return types.SimpleNamespace(**base)
 
 
-def test_enable_with_no_source_and_pypi_not_published_refuses(registry_home, capsys):
+def test_firekeep_hands_is_published_on_pypi():
+    # Flipped in client 1.7.2: firekeep-hands 0.1.0 was published through the
+    # `pypi-hands` trusted publisher on 2026-10-06, byte-identical to the wheel
+    # on the dist host (sha256 7358bdda...). The squat guard below still
+    # protects any kit built with the flag off.
+    assert cli.HANDS_PYPI_PUBLISHED is True
+
+
+def test_bare_enable_installs_from_pypi_once_published(registry_home, monkeypatch):
+    calls = []
+    monkeypatch.setattr(cli, "_pip_install", lambda python, spec: calls.append(("pip", spec)))
+    monkeypatch.setattr(dexes, "is_installed", lambda m: True)
+    monkeypatch.setattr(cli, "_run_hands_broker", lambda argv: calls.append(("broker", tuple(argv))) or 0)
+    monkeypatch.setattr(cli, "HANDS_PYPI_PUBLISHED", True)
+    assert cli.cmd_hands(_args(action="enable")) == 0
+    assert calls == [("pip", cli.HANDS_WHEEL_SPEC), ("broker", ("install-autostart",))]
+    assert dexes.read_registry()["hands"]["source"] == "pypi"
+
+
+def test_enable_with_no_source_and_pypi_not_published_refuses(registry_home, monkeypatch, capsys):
+    monkeypatch.setattr(cli, "HANDS_PYPI_PUBLISHED", False)
     assert cli.cmd_hands(_args(action="enable")) == 2
     err = capsys.readouterr().err
     assert "not yet published to PyPI" in err

{firekeep_client-1.7.1 → firekeep_client-1.7.2}/tests/test_package.py

@@ -7,7 +7,7 @@ from pathlib import Path
 def test_package_imports_and_exposes_frozen_version():
     import firekeep_client
 
-    assert firekeep_client.__version__ == "1.7.1"
+    assert firekeep_client.__version__ == "1.7.2"
 
 
 def test_the_version_pins_agree():