remo-cli 4.3.4__tar.gz → 4.3.5__tar.gz

remo_cli-4.3.5/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "4.3.5"
+}

{remo_cli-4.3.4 → remo_cli-4.3.5}/AGENTS.md

@@ -47,7 +47,7 @@ src/remo_cli/              # Python CLI package (src layout, hatchling build)
 ├── __main__.py            # python -m remo_cli entry point
 ├── cli/                   # Click command layer (parsing only, no business logic)
 │   ├── main.py            # Root CLI group; mounts one group per remo_cli.core.provider_registry.all_descriptors()
-│   ├── shell.py           # remo shell — registry-dispatched update_entry() (delegates to upgrade()); prompt names the exact `remo <type> upgrade <name>` it will run; unknown type/ssh handled explicitly (no silent no-op)
+│   ├── shell.py           # remo shell — pre-connect version check for EVERY host type; _run_tools_upgrade() dispatches to the provider's update_entry() (delegates to upgrade()) or, for type="ssh", providers/added.configure(); prompt names the exact `remo <type> upgrade <name>` / `remo configure <name>` it will run; unknown type raises (no silent no-op); an added host with no `~/.remo-version` marker connects silently (FR-011)
 │   ├── cp.py              # remo cp
 │   ├── added.py           # remo add / remo remove / remo configure — provider-neutral SSH host registration (014) and configure (022)
 │   ├── web.py             # remo web {serve,check,push,status,adopt} — serve/check lazy-import remo_cli.web.* (NFR-008); push/status/adopt use core/web_adopt + core/web_drift only (adopt is a deprecated alias for push)

{remo_cli-4.3.4 → remo_cli-4.3.5}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [4.3.5](https://github.com/get2knowio/remo/compare/v4.3.4...v4.3.5) (2026-08-16)
+
+
+### Bug Fixes
+
+* **cli:** check the tools version on added SSH hosts too ([#178](https://github.com/get2knowio/remo/issues/178)) ([#179](https://github.com/get2knowio/remo/issues/179)) ([1727b72](https://github.com/get2knowio/remo/commit/1727b724faef9b5b994640c41e80c3ebb550d240))
+
 ## [4.3.4](https://github.com/get2knowio/remo/compare/v4.3.3...v4.3.4) (2026-08-15)
 
 

{remo_cli-4.3.4 → remo_cli-4.3.5}/CLAUDE.md

@@ -47,7 +47,7 @@ src/remo_cli/              # Python CLI package (src layout, hatchling build)
 ├── __main__.py            # python -m remo_cli entry point
 ├── cli/                   # Click command layer (parsing only, no business logic)
 │   ├── main.py            # Root CLI group; mounts one group per remo_cli.core.provider_registry.all_descriptors()
-│   ├── shell.py           # remo shell — registry-dispatched update_entry() (delegates to upgrade()); prompt names the exact `remo <type> upgrade <name>` it will run; unknown type/ssh handled explicitly (no silent no-op)
+│   ├── shell.py           # remo shell — pre-connect version check for EVERY host type; _run_tools_upgrade() dispatches to the provider's update_entry() (delegates to upgrade()) or, for type="ssh", providers/added.configure(); prompt names the exact `remo <type> upgrade <name>` / `remo configure <name>` it will run; unknown type raises (no silent no-op); an added host with no `~/.remo-version` marker connects silently (FR-011)
 │   ├── cp.py              # remo cp
 │   ├── added.py           # remo add / remo remove / remo configure — provider-neutral SSH host registration (014) and configure (022)
 │   ├── web.py             # remo web {serve,check,push,status,adopt} — serve/check lazy-import remo_cli.web.* (NFR-008); push/status/adopt use core/web_adopt + core/web_drift only (adopt is a deprecated alias for push)

{remo_cli-4.3.4 → remo_cli-4.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: remo-cli
-Version: 4.3.4
+Version: 4.3.5
 Summary: Remote development environment CLI
 License-Expression: MIT
 License-File: LICENSE
@@ -327,6 +327,13 @@ remo configure mybox --skip docker  # everything except Docker
 remo web push                       # authorize the web service on it
 ```
 
+Re-running it is how a configured host stays current — it refreshes
+`project-menu`, `remo-host`, `project-launch` and the rest of the toolchain, and
+applies system package updates. `remo shell` checks the version on connect and
+offers to run it for you when the host is behind, exactly as it does for
+provider hosts. A host you added but never configured is left alone: no marker,
+no prompt, straight into a login shell.
+
 #### Example: an OrbStack VM
 
 [`docs/examples/orbstack-cloud-init.yaml`](docs/examples/orbstack-cloud-init.yaml)

{remo_cli-4.3.4 → remo_cli-4.3.5}/README.md

@@ -301,6 +301,13 @@ remo configure mybox --skip docker  # everything except Docker
 remo web push                       # authorize the web service on it
 ```
 
+Re-running it is how a configured host stays current — it refreshes
+`project-menu`, `remo-host`, `project-launch` and the rest of the toolchain, and
+applies system package updates. `remo shell` checks the version on connect and
+offers to run it for you when the host is behind, exactly as it does for
+provider hosts. A host you added but never configured is left alone: no marker,
+no prompt, straight into a login shell.
+
 #### Example: an OrbStack VM
 
 [`docs/examples/orbstack-cloud-init.yaml`](docs/examples/orbstack-cloud-init.yaml)

{remo_cli-4.3.4 → remo_cli-4.3.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "remo-cli"
-version = "4.3.4"
+version = "4.3.5"
 description = "Remote development environment CLI"
 readme = "README.md"
 license = "MIT"

{remo_cli-4.3.4 → remo_cli-4.3.5}/src/remo_cli/cli/shell.py

@@ -104,12 +104,18 @@ def shell(
 
     # Pre-shell remote version check.
     #
-    # Skip entirely for manually-added SSH hosts (feature 014, type="ssh"):
-    # they have no remo-managed tooling, so a missing `remo-host`/version marker
-    # is "unknown/unmanaged", not a prompt to run a (nonexistent) provider
-    # update. This lets `remo shell` drop straight into a plain login shell
-    # (FR-011).
-    if not no_update_check and host.type != "ssh":
+    # Applies to every host type, added SSH hosts included. Feature 014 skipped
+    # type="ssh" outright on the premise that such hosts "have no remo-managed
+    # tooling" — true then, false since 022 gave them `remo configure`, which
+    # runs the same shared `tasks/configure_dev_tools.yml` role list every
+    # provider upgrade runs and writes the very `~/.remo-version` marker this
+    # check reads. A configured added host is version-managed like any other,
+    # and skipping it meant an arbitrarily stale one was never surfaced.
+    #
+    # What survives from FR-011 is narrower and lives in the no-marker branch
+    # below: an added host that was never configured is a plain SSH box by the
+    # operator's choice, and still drops straight into a login shell.
+    if not no_update_check:
         local_version = get_current_version()
         if local_version != "unknown":
             remote_version, remote_err = check_remote_version(host)
@@ -125,6 +131,13 @@ def shell(
                     f"  {remote_err}\n"
                     f"  Skipping update check; proceeding with connection."
                 )
+            elif remote_version is None and host.type == "ssh":
+                # An added host with no marker was never `remo configure`d.
+                # Prompting to configure a box the operator deliberately left
+                # unmanaged would nag on every single connect, so stay silent
+                # (FR-011). Once configured it has a marker and takes the
+                # ordinary comparison branches below.
+                pass
             elif remote_version is None:
                 # No marker file on remote
                 should_update = confirm(
@@ -151,7 +164,7 @@ def shell(
                 from remo_cli.core.errors import ProviderError  # noqa: PLC0415
 
                 try:
-                    _run_provider_upgrade(host)
+                    _run_tools_upgrade(host)
                 except ProviderError as e:
                     # The playbook log has already been dumped, but the SSH
                     # connection (and any remote project picker) would scroll
@@ -174,7 +187,10 @@ def shell(
 
 
 def _upgrade_command_hint(host) -> str:  # noqa: ANN001
-    """Render the exact `remo <type> upgrade <name>` command for *host*.
+    """Render the exact command that accepting the prompt will run.
+
+    ``remo configure <name>`` for an added (type="ssh") host, and
+    `remo <type> upgrade <name>` for a provider one.
 
     Names the precise command the accepted prompt runs (SC-003) so the
     remedy is always executable and truthful.
@@ -194,24 +210,41 @@ def _upgrade_command_hint(host) -> str:  # noqa: ANN001
         is_provider_type,
     )
 
-    if is_provider_type(host.type):
-        descriptor = get_descriptor(host.type)
-        if descriptor.name_format is NameFormat.HOST_SCOPED and "/" in host.name:
-            host_part, _, short_name = host.name.partition("/")
-            cmd = f"remo {host.type} upgrade {short_name} --host {host_part}"
-            for attr, json_key in descriptor.registry_fields:
-                if json_key.endswith("_user"):
-                    user_value = getattr(host, attr, "")
-                    if user_value:
-                        flag = "--" + json_key.replace("_", "-")
-                        cmd += f" {flag} {user_value}"
-                    break
-            return cmd
+    if host.type == "ssh":
+        # Added host: `remo configure` is its upgrade verb — the same shared
+        # role list, reached through ssh_configure.yml. There is no `remo ssh`
+        # command group, so the provider spelling below would name a command
+        # that cannot be run.
+        return f"remo configure {host.name}"
+
+    if not is_provider_type(host.type):
+        # Unrecognized registry type: keep the provider spelling so the message
+        # names the type that is actually wrong. _run_tools_upgrade() refuses
+        # it with a PreconditionError rather than running anything.
+        return f"remo {host.type} upgrade {host.name}"
+
+    descriptor = get_descriptor(host.type)
+    if descriptor.name_format is NameFormat.HOST_SCOPED and "/" in host.name:
+        host_part, _, short_name = host.name.partition("/")
+        cmd = f"remo {host.type} upgrade {short_name} --host {host_part}"
+        for attr, json_key in descriptor.registry_fields:
+            if json_key.endswith("_user"):
+                user_value = getattr(host, attr, "")
+                if user_value:
+                    flag = "--" + json_key.replace("_", "-")
+                    cmd += f" {flag} {user_value}"
+                break
+        return cmd
     return f"remo {host.type} upgrade {host.name}"
 
 
-def _run_provider_upgrade(host) -> None:  # noqa: ANN001
-    """Run the appropriate provider upgrade for the given host.
+def _run_tools_upgrade(host) -> None:  # noqa: ANN001
+    """Refresh remo's tooling on *host*, whichever kind of host it is.
+
+    Two paths onto the same shared ``tasks/configure_dev_tools.yml`` role list:
+    ``providers.added.configure()`` for an added (type="ssh") host, and the
+    provider's own ``update_entry()`` for a managed one. Must stay in step with
+    :func:`_upgrade_command_hint`, which promises the user exactly one of them.
 
     Raises :class:`~remo_cli.core.errors.ProviderError` on failure (including
     an unrecognized provider type — no more silent no-op).
@@ -222,6 +255,17 @@ def _run_provider_upgrade(host) -> None:  # noqa: ANN001
 
     print_info(f"Upgrading instance '{host.name}'...")
 
+    if host.type == "ssh":
+        from remo_cli.providers import added  # noqa: PLC0415
+
+        # assume_yes: the caller already confirmed the named `remo configure`
+        # command. configure()'s own prompt warns about apt-upgrade and
+        # passwordless sudo — consent the operator necessarily gave when this
+        # host was first configured, which is what put the marker there that
+        # brought us here. Provider upgrades don't re-prompt either.
+        added.configure(name=host.name, assume_yes=True)
+        return
+
     if not is_provider_type(host.type):
         raise PreconditionError(
             f"Unknown provider type '{host.type}' for '{host.name}'; cannot upgrade tools."

{remo_cli-4.3.4 → remo_cli-4.3.5}/tests/unit/cli/test_shell.py

@@ -431,41 +431,42 @@ class TestBuildProjectLaunchRemoteCmd:
 
 
 class TestRunProviderUpgrade:
-    """Tests for _run_provider_upgrade(): registry-dispatched via
-    provider_registry + the Protocol's update_entry(entry) verb (018)."""
+    """Tests for _run_tools_upgrade(): registry-dispatched via
+    provider_registry + the Protocol's update_entry(entry) verb (018), plus the
+    added-host path onto providers.added.configure() (#178)."""
 
     def test_aws_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="aws", name="devbox", host="1.2.3.4", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.aws.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_hetzner_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="hetzner", name="webserver", host="5.6.7.8", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.hetzner.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_incus_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="incus", name="myhost/devcontainer", host="192.168.1.50", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.incus.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_proxmox_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(
             type="proxmox",
@@ -478,21 +479,49 @@ class TestRunProviderUpgrade:
         )
         mock_update_entry = mocker.patch("remo_cli.providers.proxmox.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_unknown_type_raises_precondition_error_naming_the_type(self):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
         from remo_cli.core.errors import PreconditionError
 
         host = KnownHost(type="totally-unknown", name="foo", host="1.2.3.4", user="remo")
 
         with pytest.raises(PreconditionError, match="totally-unknown"):
-            _run_provider_upgrade(host)
+            _run_tools_upgrade(host)
+
+    def test_added_ssh_host_dispatches_to_configure(self, mocker):
+        """An added host has no provider; `remo configure` is its upgrade verb.
+
+        Pinned because get_provider("ssh") would raise: the dispatch has to
+        branch before the registry lookup, not after it.
+        """
+        from remo_cli.cli.shell import _run_tools_upgrade
+
+        host = KnownHost(type="ssh", name="mybox", host="1.2.3.4", user="remo")
+        configure = mocker.patch("remo_cli.providers.added.configure")
+
+        _run_tools_upgrade(host)
+
+        configure.assert_called_once_with(name="mybox", assume_yes=True)
+
+    def test_added_ssh_host_configure_failure_propagates(self, mocker):
+        from remo_cli.cli.shell import _run_tools_upgrade
+        from remo_cli.core.errors import OperationFailedError
+
+        host = KnownHost(type="ssh", name="mybox", host="1.2.3.4", user="remo")
+        mocker.patch(
+            "remo_cli.providers.added.configure",
+            side_effect=OperationFailedError("playbook rc=2"),
+        )
+
+        with pytest.raises(OperationFailedError, match="rc=2"):
+            _run_tools_upgrade(host)
 
     def test_update_entry_failure_propagates_as_provider_error(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
         from remo_cli.core.errors import OperationFailedError
 
         host = KnownHost(type="aws", name="devbox", host="1.2.3.4", user="remo")
@@ -502,4 +531,4 @@ class TestRunProviderUpgrade:
         )
 
         with pytest.raises(OperationFailedError):
-            _run_provider_upgrade(host)
+            _run_tools_upgrade(host)

remo_cli-4.3.5/tests/unit/cli/test_shell_added.py

@@ -0,0 +1,149 @@
+"""`remo shell` behaviour for manually-added SSH hosts (feature 014, FR-011).
+
+The pre-connect version check applies to added (type="ssh") hosts, because 022
+gave them `remo configure` — the same shared tasks/configure_dev_tools.yml role
+list a provider upgrade runs, writing the same `~/.remo-version` marker. What
+FR-011 protects is narrower than "skip the check": an added host that was never
+configured has no marker, and must drop straight into a plain login shell rather
+than nag on every connect. See #178.
+"""
+
+from __future__ import annotations
+
+import pytest
+from click.testing import CliRunner
+
+from remo_cli.cli.shell import shell
+from remo_cli.models.host import KnownHost
+
+
+@pytest.fixture
+def runner() -> CliRunner:
+    return CliRunner()
+
+
+def _ssh_host() -> KnownHost:
+    return KnownHost(
+        type="ssh",
+        name="mybox",
+        host="1.2.3.4",
+        user="remo",
+        instance_id="22",
+        access_mode="direct",
+    )
+
+
+def _incus_host() -> KnownHost:
+    return KnownHost(type="incus", name="h/dev", host="10.0.0.5", user="remo")
+
+
+def test_unconfigured_ssh_host_connects_without_prompting(runner, mocker) -> None:
+    """FR-011, restated as what it actually protects.
+
+    An added host with no ``~/.remo-version`` was never ``remo configure``d —
+    a plain SSH box by the operator's choice — so it drops straight into a login
+    shell. The probe itself DOES run now (it is how we learn there is no
+    marker); what must not happen is a prompt.
+
+    This replaces an earlier assertion that the probe was never issued at all,
+    which pinned #178: it made a configured-but-stale added host permanently
+    invisible to the check.
+    """
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="2.2.0"
+    )
+    check = mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=(None, None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"], input="")
+
+    assert result.exit_code == 0
+    check.assert_called_once()
+    upgrade.assert_not_called()
+    assert "no version info" not in result.output
+    connect.assert_called_once()
+
+
+def test_stale_configured_ssh_host_is_offered_remo_configure(runner, mocker) -> None:
+    """The #178 regression: a configured added host that is behind must be told.
+
+    `remo configure` runs the same shared tasks/configure_dev_tools.yml role
+    list a provider upgrade runs, so the prompt has to name it — `remo ssh
+    upgrade` is not a command that exists.
+    """
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="4.3.4"
+    )
+    mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("4.3.2", None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"], input="y\n")
+
+    assert result.exit_code == 0
+    assert "4.3.2" in result.output and "4.3.4" in result.output
+    assert "remo configure mybox" in result.output
+    assert "remo ssh upgrade" not in result.output
+    upgrade.assert_called_once()
+    connect.assert_called_once()
+
+
+def test_ssh_host_ahead_of_client_warns_like_any_other(runner, mocker) -> None:
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="4.3.2"
+    )
+    mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("4.3.4", None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"])
+
+    assert result.exit_code == 0
+    assert "newer tools" in result.output
+    upgrade.assert_not_called()
+    connect.assert_called_once()
+
+
+def test_managed_host_still_runs_version_check(runner, mocker) -> None:
+    # Contrast: a provider host DOES get the version check (gate is type-specific).
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_incus_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="2.2.0"
+    )
+    check = mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("2.2.0", None)
+    )
+    mocker.patch("remo_cli.core.version.version_is_newer", return_value=False)
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["dev"])
+
+    assert result.exit_code == 0
+    check.assert_called_once()
+    connect.assert_called_once()

{remo_cli-4.3.4 → remo_cli-4.3.5}/uv.lock

@@ -1035,7 +1035,7 @@ wheels = [
 
 [[package]]
 name = "remo-cli"
-version = "4.3.4"
+version = "4.3.5"
 source = { editable = "." }
 dependencies = [
     { name = "ansible-core" },

remo_cli-4.3.4/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "4.3.4"
-}

remo_cli-4.3.4/tests/unit/cli/test_shell_added.py

@@ -1,76 +0,0 @@
-"""`remo shell` degradation for manually-added SSH hosts (feature 014, FR-011).
-
-An added (type="ssh") host has no managed tooling, so the pre-connect
-tools/version check must be skipped — no "Update tools?" prompt — and the
-command drops straight into a plain login shell via shell_connect.
-"""
-
-from __future__ import annotations
-
-import pytest
-from click.testing import CliRunner
-
-from remo_cli.cli.shell import shell
-from remo_cli.models.host import KnownHost
-
-
-@pytest.fixture
-def runner() -> CliRunner:
-    return CliRunner()
-
-
-def _ssh_host() -> KnownHost:
-    return KnownHost(
-        type="ssh",
-        name="mybox",
-        host="1.2.3.4",
-        user="remo",
-        instance_id="22",
-        access_mode="direct",
-    )
-
-
-def _incus_host() -> KnownHost:
-    return KnownHost(type="incus", name="h/dev", host="10.0.0.5", user="remo")
-
-
-def test_ssh_host_skips_version_check(runner, mocker) -> None:
-    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
-    mocker.patch(
-        "remo_cli.providers.aws.auto_start_aws_if_stopped",
-        side_effect=lambda h: h,
-    )
-    mocker.patch(
-        "remo_cli.core.version.get_current_version", return_value="2.2.0"
-    )
-    check = mocker.patch("remo_cli.core.ssh.check_remote_version")
-    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
-
-    result = runner.invoke(shell, ["mybox"])
-
-    assert result.exit_code == 0
-    check.assert_not_called()  # FR-011: no version probe for an added host
-    connect.assert_called_once()
-
-
-def test_managed_host_still_runs_version_check(runner, mocker) -> None:
-    # Contrast: a provider host DOES get the version check (gate is type-specific).
-    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_incus_host())
-    mocker.patch(
-        "remo_cli.providers.aws.auto_start_aws_if_stopped",
-        side_effect=lambda h: h,
-    )
-    mocker.patch(
-        "remo_cli.core.version.get_current_version", return_value="2.2.0"
-    )
-    check = mocker.patch(
-        "remo_cli.core.ssh.check_remote_version", return_value=("2.2.0", None)
-    )
-    mocker.patch("remo_cli.core.version.version_is_newer", return_value=False)
-    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
-
-    result = runner.invoke(shell, ["dev"])
-
-    assert result.exit_code == 0
-    check.assert_called_once()
-    connect.assert_called_once()