meshcode 2.6.0__tar.gz → 2.6.2__tar.gz

{meshcode-2.6.0 → meshcode-2.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.6.0
+Version: 2.6.2
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.6.0 → meshcode-2.6.2}/meshcode/__init__.py

@@ -1,2 +1,2 @@
 """MeshCode — Real-time communication between AI agents."""
-__version__ = "2.6.0"
+__version__ = "2.6.2"

{meshcode-2.6.0 → meshcode-2.6.2}/meshcode/meshcode_mcp/server.py

@@ -2182,32 +2182,84 @@ def history_resource() -> str:
 # ============================================================
 
 def _auto_update() -> None:
-    """Upgrade meshcode from PyPI in background — opt-in via MESHCODE_AUTO_UPDATE=1.
+    """Blocking self-update: check PyPI, install if newer, re-exec.
 
-    Disabled by default to mitigate supply chain risk: if the PyPI account
-    is compromised, every agent would silently install malicious code.
+    Ensures every agent launch always runs the latest meshcode version.
+    The update is blocking (with short timeouts) so the new code is loaded
+    before the MCP server starts — no "two-launch" delay.
+
+    Disable with MESHCODE_AUTO_UPDATE=0 if needed.
+    Re-exec guard: MESHCODE_UPDATED=1 prevents infinite restart loops.
     """
-    if os.environ.get("MESHCODE_AUTO_UPDATE", "0") != "1":
-        log.debug("[meshcode] Auto-update disabled (set MESHCODE_AUTO_UPDATE=1 to enable)")
+    if os.environ.get("MESHCODE_AUTO_UPDATE", "1").lower() in ("0", "false", "no"):
+        log.debug("[meshcode] Auto-update disabled (MESHCODE_AUTO_UPDATE=0)")
+        return
+    if os.environ.get("MESHCODE_UPDATED") == "1":
         return
 
-    import threading
+    import subprocess
+    import urllib.request
 
-    def _upgrade():
-        try:
-            import subprocess
-            result = subprocess.run(
-                [sys.executable, "-m", "pip", "install", "--upgrade", "--quiet", "meshcode"],
-                capture_output=True, text=True, timeout=30,
-            )
-            if result.returncode == 0 and "Successfully installed" in result.stdout + result.stderr:
-                log.info("[meshcode] Auto-updated to latest version from PyPI")
-            else:
-                log.debug("[meshcode] Already at latest version")
-        except Exception as e:
-            log.debug(f"[meshcode] Auto-update failed (non-fatal): {e}")
+    # 1. Fetch latest version from PyPI (fast, 3s timeout)
+    current = "0.0.0"
+    try:
+        from meshcode import __version__
+        current = __version__
+    except Exception:
+        pass
+
+    latest = None
+    try:
+        req = urllib.request.Request(
+            f"https://pypi.org/pypi/meshcode/json",
+            headers={"User-Agent": f"meshcode/{current}"},
+        )
+        with urllib.request.urlopen(req, timeout=3) as resp:
+            data = json.loads(resp.read().decode("utf-8"))
+        latest = data.get("info", {}).get("version")
+    except Exception:
+        log.debug("[meshcode] Auto-update: PyPI check failed (offline?), skipping")
+        return
+
+    if not latest:
+        return
+
+    # 2. Compare versions
+    def _ver(v: str):
+        return tuple(int(x) for x in v.split(".") if x.isdigit())
+
+    try:
+        if _ver(latest) <= _ver(current):
+            log.debug(f"[meshcode] Already at latest version ({current})")
+            return
+    except Exception:
+        return
+
+    # 3. Install the new version (blocking, 60s timeout)
+    print(f"[meshcode] Updating {current} → {latest}...", file=sys.stderr)
+    try:
+        result = subprocess.run(
+            [sys.executable, "-m", "pip", "install", "--upgrade",
+             "--disable-pip-version-check", "--quiet", "meshcode"],
+            capture_output=True, text=True, timeout=60,
+        )
+        if result.returncode != 0:
+            log.debug(f"[meshcode] pip upgrade failed: {result.stderr}")
+            return
+    except subprocess.TimeoutExpired:
+        log.debug("[meshcode] pip upgrade timed out (60s), skipping")
+        return
+    except Exception as e:
+        log.debug(f"[meshcode] Auto-update failed: {e}")
+        return
 
-    threading.Thread(target=_upgrade, daemon=True).start()
+    # 4. Re-exec to load the new code
+    print(f"[meshcode] Updated to {latest}, restarting...", file=sys.stderr)
+    os.environ["MESHCODE_UPDATED"] = "1"
+    try:
+        os.execv(sys.executable, [sys.executable] + sys.argv)
+    except Exception as e:
+        log.debug(f"[meshcode] Re-exec failed: {e}, continuing with old version")
 
 
 def run_server():

{meshcode-2.6.0 → meshcode-2.6.2}/meshcode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.6.0
+Version: 2.6.2
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.6.0 → meshcode-2.6.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meshcode"
-version = "2.6.0"
+version = "2.6.2"
 description = "Real-time communication between AI agents — Supabase-backed CLI"
 readme = "README.md"
 license = {text = "MIT"}