minima-cli 0.11.0__tar.gz → 0.12.1__tar.gz

minima_cli-0.12.1/.github/workflows/catalog-snapshot.yml

@@ -0,0 +1,113 @@
+name: Catalog — refresh vendored snapshot
+
+# Keeps the vendored cold-start model catalog fresh so it stops drifting by hand.
+#
+# WHAT/WHY: src/minima/catalog/data/capability_priors.json is the cold-start
+# fallback the server loads when the live cost feed (LiteLLM/OpenRouter) is
+# unreachable — see src/minima/catalog/store.py (load_snapshot_cards) and the
+# /v1/models router. It used to be hand-maintained and drifted stale (e.g.
+# missing the gpt-5 family). This job pulls the *live* served catalog from
+# api.minima.sh/v1/models — the source-of-truth that already merges curated
+# capability priors with live cost — normalizes it (via jq) into the EXACT
+# shape the loader reads, and opens a PR only when it actually changed.
+#
+# We deliberately DO NOT commit straight to main and DO NOT hand-edit the JSON:
+# a reviewer sees the diff, and the automation (not a human) keeps it current.
+on:
+  schedule:
+    - cron: "17 6 * * *" # daily (~every 24h); minute offset avoids the top-of-hour rush
+  workflow_dispatch: {}
+
+concurrency:
+  group: catalog-snapshot
+  cancel-in-progress: false
+
+# Least privilege: only what's needed to push a chore branch and open a PR.
+permissions:
+  contents: write
+  pull-requests: write
+
+env:
+  # Source-of-truth: the live served catalog. Override via repo/environment var
+  # CATALOG_SOURCE_URL if the prod host ever changes.
+  CATALOG_URL: ${{ vars.CATALOG_SOURCE_URL || 'https://api.minima.sh/v1/models' }}
+  SNAPSHOT_PATH: src/minima/catalog/data/capability_priors.json
+  BRANCH: chore/catalog-snapshot-auto
+
+jobs:
+  refresh:
+    name: Fetch live catalog → PR if changed
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Fetch + normalize live catalog into the vendored snapshot shape
+        run: |
+          set -euo pipefail
+          # /v1/models returns {models:[ModelCard...], catalog_version, stale}.
+          # ModelCard is a superset of the snapshot object, so we project it back
+          # to the exact fields load_snapshot_cards() reads and drop the runtime
+          # metadata (cost_source/cost_fetched_at/cost_stale/capability_source),
+          # which the loader always re-stamps as "fallback-snapshot".
+          curl -fsSL --retry 3 --retry-delay 5 --max-time 60 "$CATALOG_URL" -o live.json
+
+          count="$(jq '.models | length' live.json)"
+          if [ "$count" -lt 5 ]; then
+            echo "::error::live catalog returned only $count models (<5); refusing to overwrite snapshot"
+            exit 1
+          fi
+
+          version="fallback-snapshot-$(date -u +%Y-%m)"
+          note="Cold-start fallback only. Auto-refreshed by .github/workflows/catalog-snapshot.yml from the live /v1/models catalog — do not hand-edit. Live cost is overlaid from LiteLLM/OpenRouter at runtime; capability_by_task_type are normalized [0,1] heuristic priors, corrected by accumulated memory. Prices are approximate USD per million tokens."
+
+          jq \
+             --arg version "$version" \
+             --arg note "$note" '{
+               version: $version,
+               note: $note,
+               models: (.models | sort_by(.model_id) | map({
+                 model_id, provider, display_name,
+                 input_cost_per_mtok, output_cost_per_mtok, cache_read_cost_per_mtok,
+                 supports_prompt_caching, context_window, max_output_tokens,
+                 capability_priors, capability_by_task_type
+               }))
+             }' live.json > "$SNAPSHOT_PATH.tmp"
+          mv "$SNAPSHOT_PATH.tmp" "$SNAPSHOT_PATH"
+          rm -f live.json
+          echo "Normalized $count models into $SNAPSHOT_PATH"
+
+      - name: Commit + open PR only if the snapshot changed
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          if git diff --quiet -- "$SNAPSHOT_PATH"; then
+            echo "Snapshot already up to date; nothing to do."
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git checkout -B "$BRANCH"
+          git add "$SNAPSHOT_PATH"
+          git commit -m "chore(catalog): refresh vendored model snapshot from live /v1/models"
+          # Plain --force: this branch is automation-owned and rebuilt from main every
+          # run, and the fresh checkout has no remote-tracking ref for it, so
+          # --force-with-lease always fails with "stale info" once the branch exists.
+          git push -u origin "$BRANCH" --force
+
+          # Fail LOUD when the PR can't be opened: `|| echo` masked a hard denial
+          # ("GitHub Actions is not permitted to create ... pull requests") for days —
+          # green runs, branch pushed, no PR, nobody the wiser. An existing open PR is
+          # the only benign create-failure; anything else must turn the run red.
+          if ! gh pr create --base main --head "$BRANCH" \
+            --title "chore(catalog): refresh vendored model snapshot" \
+            --body "Automated refresh of \`$SNAPSHOT_PATH\` from the live catalog at \`$CATALOG_URL\` (normalized to the loader's shape). Opened by \`.github/workflows/catalog-snapshot.yml\`. Review the diff — this is the cold-start fallback the server serves when the live cost feed is unreachable."; then
+            if [ -n "$(gh pr list --base main --head "$BRANCH" --json number --jq '.[0].number // empty')" ]; then
+              echo "PR already open for $BRANCH; pushed update."
+            else
+              echo "::error::pushed $BRANCH but could not open its PR — likely the repo forbids Actions-created PRs (Settings → Actions → General → 'Allow GitHub Actions to create and approve pull requests')"
+              exit 1
+            fi
+          fi

minima_cli-0.12.1/.github/workflows/ci.yml

@@ -0,0 +1,96 @@
+name: CI — PR checks
+
+# Gate on every PR to main (and on push to main) with the exact local test
+# conventions: server (ruff + offline pytest) and TUI (bun test + tsc). Two
+# independent jobs so a red on one surfaces without masking the other. No
+# deploy, no secrets — the suites are offline (`-m "not live and not eval"`).
+# mypy runs after ruff/pytest: src/minima is now type-clean, so it gates too.
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+env:
+  BUN_VERSION: "1.3.14"
+
+jobs:
+  server:
+    name: Server — ruff + pytest + mypy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
+
+      - name: Sync deps (dev extra)
+        run: uv sync --extra dev
+
+      - name: Ruff
+        run: uv run ruff check src client_sdk tests
+
+      - name: Pytest (offline)
+        run: uv run pytest -m "not live and not eval" -q
+
+      - name: Mypy
+        run: uv run mypy src/minima
+
+  tui:
+    name: TUI — bun test + tsc
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: packages/tui
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ env.BUN_VERSION }}
+
+      - name: Install deps
+        run: bun install --frozen-lockfile
+
+      - name: Test
+        run: bun test
+
+      - name: Typecheck
+        run: bun run check
+
+  sdk-ts:
+    name: TS SDK — bun test + tsc
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: packages/sdk
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ env.BUN_VERSION }}
+
+      - name: Install deps
+        run: bun install --frozen-lockfile
+
+      - name: Test
+        run: bun test
+
+      - name: Typecheck
+        run: bun run check
+
+      - name: Lint
+        run: bun run lint

minima_cli-0.12.1/.github/workflows/release-cli.yml

@@ -0,0 +1,148 @@
+name: Release — CLI binaries + Homebrew
+
+# On a published release, cross-compile the TypeScript/Bun CLI for macOS + Linux,
+# ad-hoc codesign the macOS arches, attach the tarballs to the release, and push
+# the bumped binary formula straight to the Homebrew tap (mubit-ai/homebrew-minima).
+# PyPI publishing of the Python `minima-cli` (SDK + server tooling) stays in prod.yml.
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Git tag to build (e.g. v0.5.0)"
+        required: true
+        type: string
+
+concurrency:
+  group: release-cli
+  cancel-in-progress: false
+
+env:
+  RELEASE_TAG: ${{ github.event.release.tag_name || inputs.tag }}
+  BUN_VERSION: "1.3.14"
+
+permissions:
+  contents: write # upload release assets
+
+jobs:
+  build-macos:
+    name: Build + sign macOS binaries
+    runs-on: macos-14 # Apple Silicon; cross-compiles darwin-x64 too, codesign is arch-agnostic
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ env.BUN_VERSION }}
+      - name: Install deps
+        working-directory: packages/tui
+        run: bun install --frozen-lockfile
+      - name: Cross-compile darwin arm64 + x64
+        working-directory: packages/tui
+        run: bun run scripts/build-all.ts bun-darwin-arm64 bun-darwin-x64
+      - name: Ad-hoc codesign (required for Apple Silicon to run the binary)
+        working-directory: packages/tui
+        run: |
+          for b in dist/minima-darwin-arm64 dist/minima-darwin-x64; do
+            codesign -s - --force --timestamp=none "$b"
+            codesign --verify --verbose=1 "$b"
+          done
+      - name: Package tarballs
+        working-directory: packages/tui
+        run: |
+          VER="${RELEASE_TAG#v}"
+          for slug in darwin-arm64 darwin-x64; do
+            tmp="$(mktemp -d)"; cp "dist/minima-$slug" "$tmp/minima"
+            tar -czf "dist/minima-$VER-$slug.tar.gz" -C "$tmp" minima
+          done
+      - uses: actions/upload-artifact@v4
+        with:
+          name: darwin
+          path: packages/tui/dist/minima-*.tar.gz
+
+  build-linux:
+    name: Build Linux binaries
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ env.BUN_VERSION }}
+      - name: Install deps
+        working-directory: packages/tui
+        run: bun install --frozen-lockfile
+      - name: Cross-compile linux x64 + arm64
+        working-directory: packages/tui
+        run: bun run scripts/build-all.ts bun-linux-x64 bun-linux-arm64
+      - name: Package tarballs
+        working-directory: packages/tui
+        run: |
+          VER="${RELEASE_TAG#v}"
+          for slug in linux-x64 linux-arm64; do
+            tmp="$(mktemp -d)"; cp "dist/minima-$slug" "$tmp/minima"
+            tar -czf "dist/minima-$VER-$slug.tar.gz" -C "$tmp" minima
+          done
+      - uses: actions/upload-artifact@v4
+        with:
+          name: linux
+          path: packages/tui/dist/minima-*.tar.gz
+
+  publish-and-bump:
+    name: Attach assets + push tap formula
+    needs: [build-macos, build-linux]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+      - uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+      - name: Collect tarballs
+        run: |
+          mkdir -p dist
+          find artifacts -name 'minima-*.tar.gz' -exec cp {} dist/ \;
+          ls -la dist
+      - name: Attach binaries to the release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release upload "$RELEASE_TAG" dist/minima-*.tar.gz --clobber --repo "${{ github.repository }}"
+      - name: Render binary formula
+        run: |
+          VER="${RELEASE_TAG#v}"
+          python3 packaging/homebrew/render_formula.py --version "$VER" --dist dist --out minima.rb
+          echo "----- rendered formula -----"; cat minima.rb
+      # Direct push, not a PR: the formula PRs sat unmerged (0.11.0 AND 0.12.0 —
+      # brew served 0.10.0 until 2026-07-20), so a published release silently never
+      # reached users. The sha256s come from the just-built release artifacts, so
+      # there is nothing for a reviewer to judge that the release itself didn't
+      # already gate.
+      - name: Push formula to the tap
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT }}
+        run: |
+          VER="${RELEASE_TAG#v}"
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/mubit-ai/homebrew-minima.git" tap
+          cp minima.rb tap/Formula/minima.rb
+          cd tap
+          git config user.name "mubit-release-bot"
+          git config user.email "release-bot@mubit.ai"
+          if git diff --quiet Formula/minima.rb; then
+            echo "formula already up to date for ${VER}; nothing to do"; exit 0
+          fi
+          git add Formula/minima.rb
+          git commit -m "minima ${VER} (prebuilt binary)"
+          git push origin HEAD:main
+      - name: Verify the tap serves the released version
+        run: |
+          VER="${RELEASE_TAG#v}"
+          served=$(curl -fsSL "https://raw.githubusercontent.com/mubit-ai/homebrew-minima/main/Formula/minima.rb" | sed -n 's/^ *version "\(.*\)"/\1/p' | head -1)
+          if [ "$served" != "$VER" ]; then
+            echo "::error::tap serves ${served:-nothing} but the release is ${VER}"
+            exit 1
+          fi
+          echo "tap serves ${served}"