kache-ssh 0.3.0__tar.gz → 0.4.0__tar.gz

{kache_ssh-0.3.0 → kache_ssh-0.4.0}/.gitignore

@@ -1,7 +1,9 @@
-.venv/
-__pycache__/
-*.pyc
-dist/
-build/
-*.egg-info/
-.pytest_cache/
+.venv/
+__pycache__/
+*.pyc
+dist/
+build/
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+release-test-results.xml

kache_ssh-0.4.0/AGENTS.md

@@ -0,0 +1,45 @@
+# Working on Kache
+
+**Using Kache** (sending commands, reading the feed, MCP): read
+[src/kache/AGENTS.md](src/kache/AGENTS.md), which is also printed by `kache guide`.
+
+**Changing Kache:**
+
+- Setup: `python -m venv .venv`, then `.venv/Scripts/pip install -e ".[dev]"`
+  (Windows) or `.venv/bin/pip install -e ".[dev]"`.
+- Tests: `python -m pytest -q`. They start real proxies on 127.0.0.1
+  with temporary state folders and test through the real SSH path, the CLI
+  (subprocesses), the MCP server and the Textual app (`run_test`).
+
+Layout (`src/kache/`):
+
+| file | role |
+|---|---|
+| `agent.py` | the proxy: SSH server, internal `kache:` requests, commands, feed, pairing |
+| `client.py` | connecting (address race, key pinning), commands, pairing, device list |
+| `probe.py` | status snapshots, Tailscale discovery, `doctor` (shared by CLI, MCP, TUI) |
+| `network.py` | Tailscale and interface addresses, listen modes |
+| `cli.py` | the `kache` command |
+| `tui.py` | the Kache terminal (Textual) |
+| `mcp.py` | MCP server over stdio |
+| `evidence.py`, `telemetry.py` | failure reports, health numbers |
+| `config.py`, `keys.py`, `service.py` | state folder, device key, autostart |
+| `control.py`, `platform.py`, `fsops.py` | transactional actors/work/chat/health, structured operations, file edits |
+| `shells.py`, `connections.py` | persistent interpreters and pooled pinned transports |
+| `desktop.py` | native Tk window, local show-only IPC, tray |
+| `sync.py`, `updater.py`, `job_worker.py`, `ssh_audit.py` | staged transfers, updates, detached stdin, OS login audit |
+
+Rules:
+
+- Bump `PROTOCOL` in `__init__.py` when proxies of different versions
+  could misread each other.
+- Bump `SCHEMA` when a JSON shape that agents read changes incompatibly, and
+  update `src/kache/AGENTS.md` with it.
+- The client must only ever offer the device key. `_DeviceKeyClient` exists
+  because asyncssh would otherwise add ssh-agent keys first.
+- Windows commands use UTF-8 `.ps1` files, dot-sourced by a persistent shell;
+  detached jobs use `-File`. Never use `-EncodedCommand`/CLIXML.
+- Tests use temporary identities, ephemeral ports and isolated startup keys.
+  Never touch production pairing, running jobs or startup from tests.
+- No auto-acknowledgement of another actor's work; no automatic clearing of
+  operator/resource stops. Labels are attribution, not a security sandbox.

kache_ssh-0.4.0/CHANGELOG.md

@@ -0,0 +1,27 @@
+# Changelog
+
+## 0.4.0
+
+- Standalone native desktop, tray dot, shell/device selection, activity, actors,
+  chat and human-approved pairing prompts. Keep `kache tui` as a compatibility UI.
+- Explicit PowerShell/Bash/cmd/Zsh selection. Stateful serial interpreter
+  sessions; no silent shell-language translation. Native Git Bash path handling.
+- SQLite-backed actor presence, home device, job ownership, generation-checked
+  work notices and addressed chat. Unread messages stop an agent's next task
+  for review once; no claim of waking an idle model or guaranteeing a response.
+- Structured filesystem/process/inventory/health operations, SHA-256 guarded
+  patches, backups, stale-safe undo, staged incremental sync and direct transfers.
+- Supervised services, interval/daily schedules, bounded waits, line-oriented
+  detached-job stdin, Wake-on-LAN and interactive-desktop screenshots.
+- Best-effort existing OpenSSH login logs and seven-day health retention.
+- Side-by-side pinned update staging and guarded Windows login-proxy activation.
+  Boot tasks and other unsupported activation modes fail before stopping.
+- Reuse pinned SSH transports in long-lived clients; enforce revocation on warm
+  connections and open SFTP handles. Bound streamed output and shell/UI resources.
+- Command/proxy terminology; protocol 2 and JSON schema 2. Preserve historical
+  feed/job files, identities and legacy Python source aliases. Adopt existing
+  running jobs into ownership notices without restarting them.
+
+Limits: no full PTY, no agent security sandbox, at-most-once message delivery,
+per-file (not whole-folder) atomic sync, desktop/session-dependent capture/tray,
+and platform/permission-dependent OpenSSH visibility. See `kache guide`.

kache_ssh-0.4.0/IMPLEMENTATION.md

@@ -0,0 +1,84 @@
+# Kache platform release — implementation record
+
+Operator: Simon. Implementation: Codex only. **Do not delegate to Claude.**
+Baseline: 73e16ec / 0.3.0. Development branch: codex/platform-v04.
+The existing installation, paired identities and Puck training stay untouched
+until validated release installation. Never print private keys or publishing tokens.
+
+## Requested scope (numbers refer to Claude's 24-item list)
+
+- [x] 1 structured cross-platform filesystem/process/health tools
+- [x] 2 selectable PowerShell, Bash, cmd and Zsh execution
+- [x] 3 optimistic-concurrency patching; 4 backups and undo
+- [x] 5 incremental sync; 6 warm connections and persistent shell sessions
+- [x] 7 bounded waits; 8 supervised services; 9 schedules; 10 job stdin
+- [x] 13 direct device-to-device copy; 14 inventory; 16 Wake-on-LAN
+- [x] 19 ordinary SSH-login visibility; 20 seven-day health history
+- [x] 21 explicit coordinated updates
+- [x] screenshot with honest interactive-session/platform errors
+- [x] actor presence/home device, work-conflict acknowledgement, job ownership
+- [x] addressed chat, unread mentions delivered once on the next agent operation
+- [x] standalone desktop window, shell/device selectors, tray address/open/exit
+- [x] command/proxy terminology, migration and compatibility documentation
+- [ ] final Git/release artifacts, PyPI publication and production installs
+
+## Architecture and safety
+
+Keep the existing AsyncSSH transport and pinned device identities. Add a typed
+`kache:api` operation router, a SQLite transactional control plane, explicit
+actor/session identity and a fixed allowlist of structured operations. Actor
+labels are attribution, NOT a new security boundary: pairing still grants broad
+user-level access. Never promise an LLM will wake up or answer; its next call
+receives unread mentions once. Conflicting work requires explicit acknowledgement
+of the current work generation and is checked again atomically when work starts.
+
+Services/schedules are explicit persistent configurations, not blanket permission
+to resume an operator-stopped task. Tests use isolated state, loopback listeners,
+ephemeral ports and mocks for power, startup, update and screenshot side effects.
+Screenshots must fail clearly when a proxy is in Windows session 0 or no desktop
+is available. Plain-SSH monitoring is best effort and never requests elevation.
+All requested shell types need installed executables; never silently translate
+a command into a different shell. State migrations must not replace device keys.
+
+## Verification and release gates
+
+Run existing regression tests plus new feature, isolation, concurrency and
+negative/security cases. Test GUI logic headlessly and the real Windows window
+when the available UI tools permit it. Build/inspect the wheel, install in an
+isolated environment, then validate both real machines with recoverable backups
+before publishing. If any required feature or release gate is not verified,
+report it accurately instead of publishing an incomplete release.
+
+## Coordination note
+
+An earlier request to the existing Claude session was sent before Simon clarified
+that no Claude work was wanted. A cancellation-only relay was attempted but the
+Claude API returned usage_limit_reached. No Claude implementation is incorporated;
+all further implementation and decisions belong to Codex. Keep work isolated.
+
+
+## Validation performed during implementation
+
+- Baseline: 26 existing tests passed before implementation.
+- Final full feature/regression suite: **72 passed in 79.25 seconds**. Lint
+  (undefined/unused names, excluding pytest fixture shadowing) and diff checks
+  are clean. Includes transfer leases, direct MCP PNG output, initialization
+  readiness, native Bash and five updater control-flow/recovery cases.
+- Native Windows window inspected with the supported computer-use API:
+  device/shell selectors, contrast correction, dot icon and actor table.
+  No terminal commands were entered through UI automation.
+- Native PowerShell, cmd and Git Bash persistence tested, including Windows
+  path conversion and LF scripts. Zsh is not installed on these machines;
+  missing-shell behavior is tested and no Zsh runtime verification is claimed.
+- Real desktop staging job J-12e09b: isolated wheel install, pip check and
+  installed-wheel smoke checks passed, while live 0.3.0 stayed running.
+- Wake packet generation is mocked: no physical wake claim. Screenshots are
+  image-format/session/error tested with synthetic captures, not personal
+  desktop uploads. Existing OpenSSH log access is best effort/permission-bound.
+- Coordinated update staging/activation/recovery logic is unit-tested. Real
+  privileged boot-task activation is deliberately refused by the managed updater.
+  The initial 0.3→0.4 bootstrap retains the existing global Python path and boot
+  task; it is not an unapproved task/security/hardware change.
+- Tests use dedicated registry keys; production task deletion is explicitly
+  excluded for custom/test startup keys.
+- Puck code, checkpoints, training jobs and hardware settings are out of scope.

{kache_ssh-0.3.0 → kache_ssh-0.4.0}/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Simon Malm
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Simon Malm
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

kache_ssh-0.4.0/PKG-INFO

@@ -0,0 +1,146 @@
+Metadata-Version: 2.5
+Name: kache-ssh
+Version: 0.4.0
+Summary: Kache: a desktop and multi-agent orchestration platform for your paired devices over SSH.
+Author: Simon Malm
+License-Expression: MIT
+License-File: LICENSE
+Keywords: ai-agents,fleet,mcp,orchestration,remote,ssh,tailscale,terminal,tui
+Classifier: Environment :: Console
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.10
+Requires-Dist: asyncssh>=2.14
+Requires-Dist: pillow>=10.4
+Requires-Dist: platformdirs>=4.0
+Requires-Dist: psutil>=5.9
+Requires-Dist: pystray>=0.19.5
+Requires-Dist: regex>=2024.11.6
+Requires-Dist: textual>=8.0
+Provides-Extra: desktop
+Requires-Dist: pillow>=10.4; extra == 'desktop'
+Requires-Dist: pystray>=0.19.5; extra == 'desktop'
+Provides-Extra: dev
+Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Provides-Extra: gpu
+Requires-Dist: nvidia-ml-py>=12; extra == 'gpu'
+Description-Content-Type: text/markdown
+
+# Kache
+
+A standalone desktop window, CLI and MCP server for working on your own paired
+devices over SSH. Each device runs a **proxy**; commands, ownership and results
+are visible in its activity feed.
+
+## Install and open
+
+```console
+python -m pip install -U kache-ssh
+kache
+```
+
+The desktop has device and shell selectors, a terminal, activity, active actors
+and addressed chat. PowerShell, Bash, cmd and Zsh commands run in that exact
+installed interpreter, without translation. Closing hides the window in the tray;
+the dot icon opens it and its menu shows addresses and Exit.
+`kache tui` retains the previous Textual interface.
+
+Python 3.10+ is required. Windows Python needs its bundled Tcl/Tk for the window.
+Headless machines can use CLI, MCP and proxy without opening a window.
+Opening the desktop starts the proxy if needed; startup registration is explicit:
+`kache service install`.
+
+## Pair your own devices
+
+Open Kache on both devices. Run `kache pair ADDRESS`; compare the six-digit
+code on both screens and accept on the receiving device. Pairing grants broad
+access as the proxy's OS user, not an agent sandbox. Clients offer only Kache's
+device key and verify the destination's pinned fingerprint.
+
+```console
+kache devices --json
+kache run desktop --as codex --actor-id project-a --shell powershell --timeout 30 -- Get-Location
+kache run desktop --as codex --detach -- python train.py
+kache jobs --json
+kache logs J-abc123 -d desktop
+```
+
+Foreground sessions retain variables, cwd and activated environments. The proxy
+limits them to 32 and expires idle sessions after 30 minutes. Cancellation resets
+a busy shell. Detached jobs survive disconnection and proxy restart.
+
+## Working together
+
+`kache actors --json` lists active actors, home devices and work across reachable
+paired devices. Use KACHE_AS and a distinct stable KACHE_ACTOR for each CLI agent.
+MCP instances have distinct ids. Labels are attribution, not security boundaries.
+
+Starting work on an occupied device returns its owner/task and a generation token.
+Decide whether to proceed, then retry with `--acknowledge TOKEN`. New work
+invalidates old acknowledgements.
+
+```console
+kache chat @alice "Please inspect the test report" -d desktop --as bob
+kache inbox -d desktop --as alice --json
+```
+
+Unread messages stop an agent's next command/job for review and are shown once.
+This **does not wake an idle AI or guarantee a reply**. Delivery is at-most-once;
+history remains after a lost response. Offline proxies retain mail.
+
+## Platform tools
+
+- Shell-free ls/cat/tail/find/ps/top/gpu/disk/inventory.
+- Hash-checked patch, backups and stale-safe undo.
+- Incremental `sync SOURCE DEVICE:FOLDER`, optional --watch, per-file atomic
+  staged commits, no remote deletion.
+- Direct `copy SOURCE_DEVICE:PATH DEST_DEVICE:PATH`, using an existing pairing
+  from source to destination. No payload relay through the controller.
+- Bounded waits for files, log regexes, jobs and ports.
+- Explicit supervised services and interval/daily schedules. Operator stops persist.
+- Line-oriented job stdin, including EOF; not a full PTY.
+- LAN Wake-on-LAN, interactive-desktop screenshots, seven-day health history.
+- Best-effort OpenSSH successful-login visibility, without elevation or audit edits.
+
+Full commands, schemas and limitations: `kache guide` or
+[src/kache/AGENTS.md](src/kache/AGENTS.md).
+
+## Updates and compatibility
+
+0.4 uses **protocol 2 / JSON schema 2**. Update both endpoints. Historical feeds,
+job files and identities are retained. Gatekeeper/run_order source aliases remain;
+the preferred names are Proxy/run_command.
+
+```console
+kache update all --to-version 0.4.0 --confirm
+```
+
+Updates stage a pinned package in a separate environment, verify imports, activate
+remotes before the controller, and check the same pinned key/version. Previous
+environments and jobs remain. Managed activation supports Windows login proxies;
+privileged boot tasks need explicit operator updates. Do not delete environments
+while old jobs use them.
+
+## MCP and development
+
+```console
+kache mcp
+python -m venv .venv
+.venv/Scripts/python -m pip install -e ".[dev]"
+.venv/Scripts/python -m pytest -q
+```
+
+Existing MCP tools remain, plus kache_tool for structured operations. Long-lived
+MCP and desktop clients reuse pinned connections without retrying commands.
+`kache_screenshot` returns an actual PNG image content block to MCP clients.
+
+Tests use temporary identities and loopback proxies, not production startup,
+pairing, hardware or training. See [IMPLEMENTATION.md](IMPLEMENTATION.md) for
+validation and release status.
+
+MIT · Simon Malm.

kache_ssh-0.4.0/README.md

@@ -0,0 +1,113 @@
+# Kache
+
+A standalone desktop window, CLI and MCP server for working on your own paired
+devices over SSH. Each device runs a **proxy**; commands, ownership and results
+are visible in its activity feed.
+
+## Install and open
+
+```console
+python -m pip install -U kache-ssh
+kache
+```
+
+The desktop has device and shell selectors, a terminal, activity, active actors
+and addressed chat. PowerShell, Bash, cmd and Zsh commands run in that exact
+installed interpreter, without translation. Closing hides the window in the tray;
+the dot icon opens it and its menu shows addresses and Exit.
+`kache tui` retains the previous Textual interface.
+
+Python 3.10+ is required. Windows Python needs its bundled Tcl/Tk for the window.
+Headless machines can use CLI, MCP and proxy without opening a window.
+Opening the desktop starts the proxy if needed; startup registration is explicit:
+`kache service install`.
+
+## Pair your own devices
+
+Open Kache on both devices. Run `kache pair ADDRESS`; compare the six-digit
+code on both screens and accept on the receiving device. Pairing grants broad
+access as the proxy's OS user, not an agent sandbox. Clients offer only Kache's
+device key and verify the destination's pinned fingerprint.
+
+```console
+kache devices --json
+kache run desktop --as codex --actor-id project-a --shell powershell --timeout 30 -- Get-Location
+kache run desktop --as codex --detach -- python train.py
+kache jobs --json
+kache logs J-abc123 -d desktop
+```
+
+Foreground sessions retain variables, cwd and activated environments. The proxy
+limits them to 32 and expires idle sessions after 30 minutes. Cancellation resets
+a busy shell. Detached jobs survive disconnection and proxy restart.
+
+## Working together
+
+`kache actors --json` lists active actors, home devices and work across reachable
+paired devices. Use KACHE_AS and a distinct stable KACHE_ACTOR for each CLI agent.
+MCP instances have distinct ids. Labels are attribution, not security boundaries.
+
+Starting work on an occupied device returns its owner/task and a generation token.
+Decide whether to proceed, then retry with `--acknowledge TOKEN`. New work
+invalidates old acknowledgements.
+
+```console
+kache chat @alice "Please inspect the test report" -d desktop --as bob
+kache inbox -d desktop --as alice --json
+```
+
+Unread messages stop an agent's next command/job for review and are shown once.
+This **does not wake an idle AI or guarantee a reply**. Delivery is at-most-once;
+history remains after a lost response. Offline proxies retain mail.
+
+## Platform tools
+
+- Shell-free ls/cat/tail/find/ps/top/gpu/disk/inventory.
+- Hash-checked patch, backups and stale-safe undo.
+- Incremental `sync SOURCE DEVICE:FOLDER`, optional --watch, per-file atomic
+  staged commits, no remote deletion.
+- Direct `copy SOURCE_DEVICE:PATH DEST_DEVICE:PATH`, using an existing pairing
+  from source to destination. No payload relay through the controller.
+- Bounded waits for files, log regexes, jobs and ports.
+- Explicit supervised services and interval/daily schedules. Operator stops persist.
+- Line-oriented job stdin, including EOF; not a full PTY.
+- LAN Wake-on-LAN, interactive-desktop screenshots, seven-day health history.
+- Best-effort OpenSSH successful-login visibility, without elevation or audit edits.
+
+Full commands, schemas and limitations: `kache guide` or
+[src/kache/AGENTS.md](src/kache/AGENTS.md).
+
+## Updates and compatibility
+
+0.4 uses **protocol 2 / JSON schema 2**. Update both endpoints. Historical feeds,
+job files and identities are retained. Gatekeeper/run_order source aliases remain;
+the preferred names are Proxy/run_command.
+
+```console
+kache update all --to-version 0.4.0 --confirm
+```
+
+Updates stage a pinned package in a separate environment, verify imports, activate
+remotes before the controller, and check the same pinned key/version. Previous
+environments and jobs remain. Managed activation supports Windows login proxies;
+privileged boot tasks need explicit operator updates. Do not delete environments
+while old jobs use them.
+
+## MCP and development
+
+```console
+kache mcp
+python -m venv .venv
+.venv/Scripts/python -m pip install -e ".[dev]"
+.venv/Scripts/python -m pytest -q
+```
+
+Existing MCP tools remain, plus kache_tool for structured operations. Long-lived
+MCP and desktop clients reuse pinned connections without retrying commands.
+`kache_screenshot` returns an actual PNG image content block to MCP clients.
+
+Tests use temporary identities and loopback proxies, not production startup,
+pairing, hardware or training. See [IMPLEMENTATION.md](IMPLEMENTATION.md) for
+validation and release status.
+
+MIT · Simon Malm.

{kache_ssh-0.3.0 → kache_ssh-0.4.0}/pyproject.toml

@@ -1,42 +1,46 @@
-[build-system]
-requires = ["hatchling>=1.24"]
-build-backend = "hatchling.build"
-
-[project]
-name = "kache-ssh"
-version = "0.3.0"
-description = "Kache: one terminal to command all your devices over SSH, with a gatekeeper agent on every device."
-readme = "README.md"
-requires-python = ">=3.10"
-license = "MIT"
-license-files = ["LICENSE"]
-authors = [{ name = "Simon Malm" }]
-keywords = ["ssh", "remote", "orchestration", "terminal", "tui", "fleet", "tailscale", "mcp", "ai-agents"]
-classifiers = [
-    "Environment :: Console",
-    "Operating System :: Microsoft :: Windows",
-    "Operating System :: POSIX :: Linux",
-    "Operating System :: MacOS",
-    "Programming Language :: Python :: 3",
-    "Topic :: System :: Systems Administration",
-]
-dependencies = [
-    "asyncssh>=2.14",
-    "textual>=8.0",
-    "psutil>=5.9",
-    "platformdirs>=4.0",
-]
-
-[project.optional-dependencies]
-gpu = ["nvidia-ml-py>=12"]
-dev = ["pytest>=8", "pytest-asyncio>=0.23", "build>=1.0"]
-
-[project.scripts]
-kache = "kache.cli:main"
-
-[tool.hatch.build.targets.wheel]
-packages = ["src/kache"]
-
-[tool.pytest.ini_options]
-asyncio_mode = "auto"
-testpaths = ["tests"]
+[build-system]
+requires = ["hatchling>=1.24"]
+build-backend = "hatchling.build"
+
+[project]
+name = "kache-ssh"
+version = "0.4.0"
+description = "Kache: a desktop and multi-agent orchestration platform for your paired devices over SSH."
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [{ name = "Simon Malm" }]
+keywords = ["ssh", "remote", "orchestration", "terminal", "tui", "fleet", "tailscale", "mcp", "ai-agents"]
+classifiers = [
+    "Environment :: Console",
+    "Operating System :: Microsoft :: Windows",
+    "Operating System :: POSIX :: Linux",
+    "Operating System :: MacOS",
+    "Programming Language :: Python :: 3",
+    "Topic :: System :: Systems Administration",
+]
+dependencies = [
+    "asyncssh>=2.14",
+    "textual>=8.0",
+    "psutil>=5.9",
+    "platformdirs>=4.0",
+    "Pillow>=10.4",
+    "pystray>=0.19.5",
+    "regex>=2024.11.6",
+]
+
+[project.optional-dependencies]
+gpu = ["nvidia-ml-py>=12"]
+desktop = ["Pillow>=10.4", "pystray>=0.19.5"]
+dev = ["pytest>=8", "pytest-asyncio>=0.23", "build>=1.0"]
+
+[project.scripts]
+kache = "kache.cli:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/kache"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]