getbased-agent-stack 0.5.2__tar.gz → 0.5.4__tar.gz

{getbased_agent_stack-0.5.2/src/getbased_agent_stack.egg-info → getbased_agent_stack-0.5.4}/PKG-INFO

@@ -1,14 +1,14 @@
 Metadata-Version: 2.4
 Name: getbased-agent-stack
-Version: 0.5.2
+Version: 0.5.4
 Summary: One-command install of the full getbased agent stack — getbased-mcp + getbased-rag + getbased-dashboard
 License-Expression: AGPL-3.0-or-later
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: getbased-mcp>=0.2.5
+Requires-Dist: getbased-mcp>=0.2.6
 Requires-Dist: getbased-rag>=0.7.2
-Requires-Dist: getbased-dashboard>=0.6.2
+Requires-Dist: getbased-dashboard>=0.6.4
 Provides-Extra: full
 Requires-Dist: getbased-rag[full]>=0.7.2; extra == "full"
 Provides-Extra: test
@@ -79,7 +79,7 @@ getbased-stack init --yes
 
 The wizard (~30 seconds):
 
-1. Prompts for your `GETBASED_TOKEN` (skip if you don't use sync; `--yes` skips)
+1. Prompts for your `GETBASED_TOKEN` and `GETBASED_AGENT_CONTEXT_KEY` (skip if you don't use Agent Access; `--yes` keeps current values and lets you set them later with `getbased-stack set ...`)
 2. Generates a rag API key if one doesn't exist
 3. Writes `~/.config/getbased/env` (mode 0600) — the shared config file
 4. Installs systemd user units for rag + dashboard, enables them, starts them
@@ -122,7 +122,8 @@ sudo loginctl enable-linger $USER
 
 ```bash
 getbased-stack status          # env file, unit state, linger
-getbased-stack set GETBASED_TOKEN=new   # rotate the token
+getbased-stack set GETBASED_TOKEN=new
+getbased-stack set GETBASED_AGENT_CONTEXT_KEY=new
 getbased-stack install         # re-apply unit files after package upgrade
 getbased-stack uninstall       # stop + disable + remove units
 ```
@@ -149,7 +150,7 @@ sync GW   getbased-rag  ◀──────────────┘       g
 
 The MCP holds no persistent state; it's a thin translator between MCP tool calls and two HTTP backends:
 
-- `sync.getbased.health/api/context` — read-only lab summary pushed by your PWA session (via Agent Access token)
+- `sync.getbased.health/api/context` — encrypted lab context pushed by your PWA session (authorized by Agent Access token, decrypted locally with Agent Context key)
 - `localhost:8322` (getbased-rag) — your local research library
 
 The dashboard is likewise stateless — it proxies rag for Knowledge operations, imports `getbased_mcp` to introspect env/config, and spawns the MCP binary on demand to verify it works.

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/README.md

@@ -60,7 +60,7 @@ getbased-stack init --yes
 
 The wizard (~30 seconds):
 
-1. Prompts for your `GETBASED_TOKEN` (skip if you don't use sync; `--yes` skips)
+1. Prompts for your `GETBASED_TOKEN` and `GETBASED_AGENT_CONTEXT_KEY` (skip if you don't use Agent Access; `--yes` keeps current values and lets you set them later with `getbased-stack set ...`)
 2. Generates a rag API key if one doesn't exist
 3. Writes `~/.config/getbased/env` (mode 0600) — the shared config file
 4. Installs systemd user units for rag + dashboard, enables them, starts them
@@ -103,7 +103,8 @@ sudo loginctl enable-linger $USER
 
 ```bash
 getbased-stack status          # env file, unit state, linger
-getbased-stack set GETBASED_TOKEN=new   # rotate the token
+getbased-stack set GETBASED_TOKEN=new
+getbased-stack set GETBASED_AGENT_CONTEXT_KEY=new
 getbased-stack install         # re-apply unit files after package upgrade
 getbased-stack uninstall       # stop + disable + remove units
 ```
@@ -130,7 +131,7 @@ sync GW   getbased-rag  ◀──────────────┘       g
 
 The MCP holds no persistent state; it's a thin translator between MCP tool calls and two HTTP backends:
 
-- `sync.getbased.health/api/context` — read-only lab summary pushed by your PWA session (via Agent Access token)
+- `sync.getbased.health/api/context` — encrypted lab context pushed by your PWA session (authorized by Agent Access token, decrypted locally with Agent Context key)
 - `localhost:8322` (getbased-rag) — your local research library
 
 The dashboard is likewise stateless — it proxies rag for Knowledge operations, imports `getbased_mcp` to introspect env/config, and spawns the MCP binary on demand to verify it works.

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "getbased-agent-stack"
-version = "0.5.2"
+version = "0.5.4"
 description = "One-command install of the full getbased agent stack — getbased-mcp + getbased-rag + getbased-dashboard"
 readme = "README.md"
 license = "AGPL-3.0-or-later"
@@ -12,9 +12,9 @@ requires-python = ">=3.10"
 # Pulls every sibling package. Bump this meta when a sibling protocol
 # bump requires coordinated release.
 dependencies = [
-    "getbased-mcp>=0.2.5",
+    "getbased-mcp>=0.2.6",
     "getbased-rag>=0.7.2",
-    "getbased-dashboard>=0.6.2",
+    "getbased-dashboard>=0.6.4",
 ]
 
 [project.optional-dependencies]

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/src/getbased_agent_stack/__init__.py

@@ -5,4 +5,4 @@ plus a small CLI that proxies to the real binaries. Everything
 interesting lives in the sibling repos.
 """
 
-__version__ = "0.4.1"
+__version__ = "0.5.4"

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/src/getbased_agent_stack/cli.py

@@ -100,20 +100,28 @@ def cmd_init(args: argparse.Namespace) -> int:
     )
     print()
 
-    # 1. token (optional)
+    # 1. Agent Access secrets (optional)
     existing = env_file.read_env_file()
     current_token = existing.get("GETBASED_TOKEN", "")
+    current_context_key = existing.get("GETBASED_AGENT_CONTEXT_KEY", "")
     masked = "****" + current_token[-4:] if current_token else "(unset)"
-    print(f"[1/4] getbased sync token (current: {masked})")
+    key_masked = "****" + current_context_key[-4:] if current_context_key else "(unset)"
+    print(f"[1/4] Agent Access token + context key (token: {masked}, key: {key_masked})")
     if non_interactive:
         token = current_token
-        print("  keeping current value (set with `getbased-stack set GETBASED_TOKEN=…` later).")
+        context_key = current_context_key
+        print("  keeping current values (set with `getbased-stack set GETBASED_TOKEN=…` and `getbased-stack set GETBASED_AGENT_CONTEXT_KEY=…` later).")
     else:
         token = _prompt(
             "Paste GETBASED_TOKEN (press Enter to keep current / skip)",
             default=current_token,
             secret=True,
         )
+        context_key = _prompt(
+            "Paste GETBASED_AGENT_CONTEXT_KEY (press Enter to keep current / skip)",
+            default=current_context_key,
+            secret=True,
+        )
 
     # 2. API key
     key_path = Path(existing.get("LENS_API_KEY_FILE", str(_default_api_key_file())))
@@ -131,6 +139,8 @@ def cmd_init(args: argparse.Namespace) -> int:
     merged["GETBASED_STACK_MANAGED"] = "1"
     if token:
         merged["GETBASED_TOKEN"] = token
+    if context_key:
+        merged["GETBASED_AGENT_CONTEXT_KEY"] = context_key
     merged["LENS_API_KEY_FILE"] = str(key_path)
     merged.setdefault("LENS_URL", "http://127.0.0.1:8322")
     path = env_file.write_env_file(merged)
@@ -153,6 +163,14 @@ def cmd_init(args: argparse.Namespace) -> int:
     _print_linger_hint(strict=False)
 
     # 6. MCP config pointers
+    print("\nNext steps for Agent Access:")
+    print("  1. In getbased, enable Cross-device Sync and Agent Access.")
+    print("  2. Copy both values from Settings → Agent Access:")
+    print("     GETBASED_TOKEN and GETBASED_AGENT_CONTEXT_KEY.")
+    print("  3. Save them here with:")
+    print("     getbased-stack set GETBASED_TOKEN=...")
+    print("     getbased-stack set GETBASED_AGENT_CONTEXT_KEY=...")
+
     print("\nConfigure your MCP client(s):")
     for client in mcp_configs.SUPPORTED_CLIENTS:
         print(f"  getbased-stack mcp-config {client}")

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/src/getbased_agent_stack/mcp_configs.py

@@ -133,9 +133,10 @@ def emit_hermes(resolver: Callable[[str], "str | None"] = shutil.which) -> str:
     lines = [
         "# Hermes Agent MCP configuration snippet for ~/.hermes/config.yaml",
         "# See https://github.com/hermes-agent/hermes-agent for the full config schema.",
-        "# The getbased stack's shared env file carries GETBASED_TOKEN + rag URL +",
-        "# api key path; only the opt-in flag belongs in Hermes's config.",
-        "# (If your Hermes config already sets GETBASED_TOKEN / LENS_* explicitly,",
+        "# The getbased stack's shared env file carries GETBASED_TOKEN,",
+        "# GETBASED_AGENT_CONTEXT_KEY, rag URL, and api key path; only the",
+        "# opt-in flag belongs in Hermes's config.",
+        "# (If your Hermes config already sets GETBASED_TOKEN / GETBASED_AGENT_CONTEXT_KEY / LENS_* explicitly,",
         "# drop the env block entirely — the Python loader honors existing env.)",
     ]
     if warning:

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/src/getbased_agent_stack/units.py

@@ -108,6 +108,17 @@ class UnitManager:
         args.extend(SERVICE_NAMES)
         return self._shell(args)
 
+    def restart(self) -> CommandResult:
+        """Restart bundled services after an upgrade/reinstall.
+
+        `uv tool install` replaces files inside the tool environment. If the
+        services are already running, `systemctl enable --now …` is a no-op and
+        the old Python processes can keep serving from a half-replaced venv.
+        Restarting makes repeated `curl | bash` installs safe and starts the
+        units when they were previously inactive.
+        """
+        return self._shell(["systemctl", "--user", "restart", *SERVICE_NAMES])
+
     def disable(self, now: bool = True) -> CommandResult:
         args = ["systemctl", "--user", "disable"]
         if now:
@@ -154,7 +165,11 @@ class UnitManager:
             else:
                 log.append("enabled " + ", ".join(SERVICE_NAMES))
                 if start:
-                    log.append("started " + ", ".join(SERVICE_NAMES))
+                    r = self.restart()
+                    if r.returncode != 0:
+                        log.append(f"restart FAILED: {r.stderr.strip()}")
+                    else:
+                        log.append("restarted " + ", ".join(SERVICE_NAMES))
         return log
 
     def uninstall(self) -> "list[str]":

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4/src/getbased_agent_stack.egg-info}/PKG-INFO

@@ -1,14 +1,14 @@
 Metadata-Version: 2.4
 Name: getbased-agent-stack
-Version: 0.5.2
+Version: 0.5.4
 Summary: One-command install of the full getbased agent stack — getbased-mcp + getbased-rag + getbased-dashboard
 License-Expression: AGPL-3.0-or-later
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: getbased-mcp>=0.2.5
+Requires-Dist: getbased-mcp>=0.2.6
 Requires-Dist: getbased-rag>=0.7.2
-Requires-Dist: getbased-dashboard>=0.6.2
+Requires-Dist: getbased-dashboard>=0.6.4
 Provides-Extra: full
 Requires-Dist: getbased-rag[full]>=0.7.2; extra == "full"
 Provides-Extra: test
@@ -79,7 +79,7 @@ getbased-stack init --yes
 
 The wizard (~30 seconds):
 
-1. Prompts for your `GETBASED_TOKEN` (skip if you don't use sync; `--yes` skips)
+1. Prompts for your `GETBASED_TOKEN` and `GETBASED_AGENT_CONTEXT_KEY` (skip if you don't use Agent Access; `--yes` keeps current values and lets you set them later with `getbased-stack set ...`)
 2. Generates a rag API key if one doesn't exist
 3. Writes `~/.config/getbased/env` (mode 0600) — the shared config file
 4. Installs systemd user units for rag + dashboard, enables them, starts them
@@ -122,7 +122,8 @@ sudo loginctl enable-linger $USER
 
 ```bash
 getbased-stack status          # env file, unit state, linger
-getbased-stack set GETBASED_TOKEN=new   # rotate the token
+getbased-stack set GETBASED_TOKEN=new
+getbased-stack set GETBASED_AGENT_CONTEXT_KEY=new
 getbased-stack install         # re-apply unit files after package upgrade
 getbased-stack uninstall       # stop + disable + remove units
 ```
@@ -149,7 +150,7 @@ sync GW   getbased-rag  ◀──────────────┘       g
 
 The MCP holds no persistent state; it's a thin translator between MCP tool calls and two HTTP backends:
 
-- `sync.getbased.health/api/context` — read-only lab summary pushed by your PWA session (via Agent Access token)
+- `sync.getbased.health/api/context` — encrypted lab context pushed by your PWA session (authorized by Agent Access token, decrypted locally with Agent Context key)
 - `localhost:8322` (getbased-rag) — your local research library
 
 The dashboard is likewise stateless — it proxies rag for Knowledge operations, imports `getbased_mcp` to introspect env/config, and spawns the MCP binary on demand to verify it works.

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/src/getbased_agent_stack.egg-info/requires.txt

@@ -1,6 +1,6 @@
-getbased-mcp>=0.2.5
+getbased-mcp>=0.2.6
 getbased-rag>=0.7.2
-getbased-dashboard>=0.6.2
+getbased-dashboard>=0.6.4
 
 [full]
 getbased-rag[full]>=0.7.2

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/tests/test_cli.py

@@ -96,10 +96,14 @@ def test_install_writes_units_and_enables(stack_home, fake_shell):
     assert (unit_dir / "getbased-rag.service").exists()
     assert (unit_dir / "getbased-dashboard.service").exists()
 
-    # daemon-reload and enable --now both ran
+    # daemon-reload, enable --now, and restart all run. The explicit restart
+    # matters for re-running install.sh over an active stack after uv replaces
+    # the tool environment: old Python processes must not keep serving from a
+    # half-replaced venv.
     all_calls = [" ".join(cmd) for cmd in fake_shell]
     assert any("daemon-reload" in c for c in all_calls)
     assert any("enable --now" in c for c in all_calls)
+    assert any("restart getbased-rag.service getbased-dashboard.service" in c for c in all_calls)
 
 
 def test_install_no_enable_flag(stack_home, fake_shell):
@@ -313,6 +317,8 @@ def test_init_yes_flag_skips_all_prompts(stack_home, fake_shell, monkeypatch):
     assert rc == 0
     # Banner reflects the mode so the user sees what happened
     assert "non-interactive" in out.lower()
+    assert "GETBASED_TOKEN and GETBASED_AGENT_CONTEXT_KEY" in out
+    assert "getbased-stack set GETBASED_AGENT_CONTEXT_KEY" in out
     # Env file + units still land
     assert env_file.env_file_path().exists()
     assert (stack_home / "config" / "systemd" / "user" / "getbased-rag.service").exists()

{getbased_agent_stack-0.5.2 → getbased_agent_stack-0.5.4}/tests/test_units.py

@@ -145,11 +145,13 @@ def test_install_full_sequence(tmp_path):
     # systemctl called in the expected order
     assert shell.calls[0] == ["systemctl", "--user", "daemon-reload"]
     assert shell.calls[1] == ["systemctl", "--user", "enable", "--now", *SERVICE_NAMES]
+    assert shell.calls[2] == ["systemctl", "--user", "restart", *SERVICE_NAMES]
     # Log mentions what happened
     joined = "\n".join(log)
     assert "wrote" in joined
     assert "enabled" in joined
-    assert "started" in joined
+    assert "restarted" in joined
+    assert not any(line.startswith("started ") for line in log)
 
 
 def test_install_daemon_reload_failure_short_circuits(tmp_path):