remo-cli 4.3.4__tar.gz → 4.3.6__tar.gz

remo_cli-4.3.6/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "4.3.6"
+}

{remo_cli-4.3.4 → remo_cli-4.3.6}/AGENTS.md

@@ -47,7 +47,7 @@ src/remo_cli/              # Python CLI package (src layout, hatchling build)
 ├── __main__.py            # python -m remo_cli entry point
 ├── cli/                   # Click command layer (parsing only, no business logic)
 │   ├── main.py            # Root CLI group; mounts one group per remo_cli.core.provider_registry.all_descriptors()
-│   ├── shell.py           # remo shell — registry-dispatched update_entry() (delegates to upgrade()); prompt names the exact `remo <type> upgrade <name>` it will run; unknown type/ssh handled explicitly (no silent no-op)
+│   ├── shell.py           # remo shell — pre-connect version check for EVERY host type; _run_tools_upgrade() dispatches to the provider's update_entry() (delegates to upgrade()) or, for type="ssh", providers/added.configure(); prompt names the exact `remo <type> upgrade <name>` / `remo configure <name>` it will run; unknown type raises (no silent no-op); an added host with no `~/.remo-version` marker connects silently (FR-011)
 │   ├── cp.py              # remo cp
 │   ├── added.py           # remo add / remo remove / remo configure — provider-neutral SSH host registration (014) and configure (022)
 │   ├── web.py             # remo web {serve,check,push,status,adopt} — serve/check lazy-import remo_cli.web.* (NFR-008); push/status/adopt use core/web_adopt + core/web_drift only (adopt is a deprecated alias for push)

{remo_cli-4.3.4 → remo_cli-4.3.6}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [4.3.6](https://github.com/get2knowio/remo/compare/v4.3.5...v4.3.6) (2026-08-16)
+
+
+### Bug Fixes
+
+* **web:** let macOS users select terminal text while a TUI owns the mouse ([#181](https://github.com/get2knowio/remo/issues/181)) ([84285e8](https://github.com/get2knowio/remo/commit/84285e8aa4414b225bfe2f820d6fc2d1cdb70103))
+
+## [4.3.5](https://github.com/get2knowio/remo/compare/v4.3.4...v4.3.5) (2026-08-16)
+
+
+### Bug Fixes
+
+* **cli:** check the tools version on added SSH hosts too ([#178](https://github.com/get2knowio/remo/issues/178)) ([#179](https://github.com/get2knowio/remo/issues/179)) ([1727b72](https://github.com/get2knowio/remo/commit/1727b724faef9b5b994640c41e80c3ebb550d240))
+
 ## [4.3.4](https://github.com/get2knowio/remo/compare/v4.3.3...v4.3.4) (2026-08-15)
 
 

{remo_cli-4.3.4 → remo_cli-4.3.6}/CLAUDE.md

@@ -47,7 +47,7 @@ src/remo_cli/              # Python CLI package (src layout, hatchling build)
 ├── __main__.py            # python -m remo_cli entry point
 ├── cli/                   # Click command layer (parsing only, no business logic)
 │   ├── main.py            # Root CLI group; mounts one group per remo_cli.core.provider_registry.all_descriptors()
-│   ├── shell.py           # remo shell — registry-dispatched update_entry() (delegates to upgrade()); prompt names the exact `remo <type> upgrade <name>` it will run; unknown type/ssh handled explicitly (no silent no-op)
+│   ├── shell.py           # remo shell — pre-connect version check for EVERY host type; _run_tools_upgrade() dispatches to the provider's update_entry() (delegates to upgrade()) or, for type="ssh", providers/added.configure(); prompt names the exact `remo <type> upgrade <name>` / `remo configure <name>` it will run; unknown type raises (no silent no-op); an added host with no `~/.remo-version` marker connects silently (FR-011)
 │   ├── cp.py              # remo cp
 │   ├── added.py           # remo add / remo remove / remo configure — provider-neutral SSH host registration (014) and configure (022)
 │   ├── web.py             # remo web {serve,check,push,status,adopt} — serve/check lazy-import remo_cli.web.* (NFR-008); push/status/adopt use core/web_adopt + core/web_drift only (adopt is a deprecated alias for push)

{remo_cli-4.3.4 → remo_cli-4.3.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: remo-cli
-Version: 4.3.4
+Version: 4.3.6
 Summary: Remote development environment CLI
 License-Expression: MIT
 License-File: LICENSE
@@ -327,6 +327,13 @@ remo configure mybox --skip docker  # everything except Docker
 remo web push                       # authorize the web service on it
 ```
 
+Re-running it is how a configured host stays current — it refreshes
+`project-menu`, `remo-host`, `project-launch` and the rest of the toolchain, and
+applies system package updates. `remo shell` checks the version on connect and
+offers to run it for you when the host is behind, exactly as it does for
+provider hosts. A host you added but never configured is left alone: no marker,
+no prompt, straight into a login shell.
+
 #### Example: an OrbStack VM
 
 [`docs/examples/orbstack-cloud-init.yaml`](docs/examples/orbstack-cloud-init.yaml)

{remo_cli-4.3.4 → remo_cli-4.3.6}/README.md

@@ -301,6 +301,13 @@ remo configure mybox --skip docker  # everything except Docker
 remo web push                       # authorize the web service on it
 ```
 
+Re-running it is how a configured host stays current — it refreshes
+`project-menu`, `remo-host`, `project-launch` and the rest of the toolchain, and
+applies system package updates. `remo shell` checks the version on connect and
+offers to run it for you when the host is behind, exactly as it does for
+provider hosts. A host you added but never configured is left alone: no marker,
+no prompt, straight into a login shell.
+
 #### Example: an OrbStack VM
 
 [`docs/examples/orbstack-cloud-init.yaml`](docs/examples/orbstack-cloud-init.yaml)

{remo_cli-4.3.4 → remo_cli-4.3.6}/docs/web-session-interface.md

@@ -145,7 +145,15 @@ The SPA is a two-pane **web console**:
 
 **Clipboard & links.** Select text and press **⌘C** (macOS) / **Ctrl+Shift+C** (Linux/Windows), or click
 the **⧉ Copy** button that appears on selection, to copy to the system clipboard; bare **Ctrl+C** stays
-SIGINT. **Paste** with ⌘V / Ctrl+V. **http(s) URLs are clickable** and open in a new tab. Remote apps that
+SIGINT. **Paste** with ⌘V / Ctrl+V.
+
+> **Selecting while a full-screen app is running.** Claude Code, vim, htop and
+> anything else that turns on mouse reporting receive your drags, so an ordinary
+> drag selects nothing. Hold a modifier to select locally instead:
+> **Option+drag** on macOS, **Shift+drag** on Linux/Windows. (The split is
+> xterm's, not ours — Shift is not consulted on macOS at all.)
+
+**http(s) URLs are clickable** and open in a new tab. Remote apps that
 emit **OSC 52** (e.g. Claude Code's copy-on-select) can write to the browser clipboard — best-effort: it
 must traverse Zellij and the browser must permit a gesture-less clipboard write. OSC 52 *reads* are denied
 (a remote app can never read your clipboard). Clipboard access needs a secure context (HTTPS or localhost).

remo_cli-4.3.6/frontend/src/terminal/XtermRenderer.test.ts

@@ -0,0 +1,45 @@
+// Construction-time xterm options that are load-bearing for behaviour we can't
+// otherwise reach from a test.
+//
+// Why these are asserted against the constructed Terminal rather than exercised
+// end-to-end: the behaviour they gate is platform-branched inside xterm, on a
+// `isMac` it reads from `navigator.platform` at module load. Chromium on a Linux
+// CI runner always takes the non-Mac branch, and Playwright's `userAgent`
+// override does not change `navigator.platform` — so a browser test of the macOS
+// path would silently exercise the Linux one and pass no matter what we set.
+// Asserting the option is the honest bound of what is checkable here.
+
+import { describe, expect, it } from "vitest";
+import type { Terminal } from "@xterm/xterm";
+
+import { XtermRenderer } from "./XtermRenderer";
+
+/** The renderer owns its Terminal privately; tests read it deliberately. */
+function terminalOf(renderer: XtermRenderer): Terminal {
+  return (renderer as unknown as { terminal: Terminal }).terminal;
+}
+
+describe("XtermRenderer terminal options", () => {
+  it("lets macOS users select text while a TUI owns the mouse", () => {
+    // xterm's escape hatch from application mouse reporting is asymmetric:
+    //   isMac ? altKey && macOptionClickForcesSelection : shiftKey
+    // Shift is never consulted on macOS, and this option defaults to false, so
+    // leaving it unset means a Mac user inside Claude Code (or vim, or htop)
+    // cannot select — and therefore cannot copy — anything at all.
+    const renderer = new XtermRenderer();
+
+    expect(terminalOf(renderer).options.macOptionClickForcesSelection).toBe(true);
+
+    renderer.dispose();
+  });
+
+  it("enables proposed API so the ligatures addon can load", () => {
+    // @xterm/addon-ligatures registers a character joiner behind xterm's
+    // proposed-API guard and throws on load without this.
+    const renderer = new XtermRenderer();
+
+    expect(terminalOf(renderer).options.allowProposedApi).toBe(true);
+
+    renderer.dispose();
+  });
+});

{remo_cli-4.3.4 → remo_cli-4.3.6}/frontend/src/terminal/XtermRenderer.ts

@@ -76,6 +76,24 @@ export class XtermRenderer implements RendererAdapter {
       // @xterm/addon-ligatures registers a character joiner, which lives behind
       // xterm's "proposed API" guard; without this the addon throws on load.
       allowProposedApi: true,
+      // Makes text selectable on macOS while a TUI owns the mouse.
+      //
+      // Once an application enables mouse reporting (Claude Code, vim, htop,
+      // ...), xterm forwards drags to it instead of selecting locally. Its
+      // escape hatch is asymmetric:
+      //
+      //   shouldForceSelection(e) {
+      //     return isMac ? e.altKey && macOptionClickForcesSelection
+      //                  : e.shiftKey;
+      //   }
+      //
+      // Shift is not consulted on macOS at all, and this option defaults to
+      // false — so a Mac user inside any mouse-reporting TUI had NO way to
+      // select text, while Shift+drag worked fine on every other platform.
+      // Enabling it restores parity via Option+drag. The trade is that
+      // Option+click no longer reaches the application, which is not a chord
+      // terminal programs bind.
+      macOptionClickForcesSelection: true,
     });
     this.fitAddon = new FitAddon();
     this.terminal.loadAddon(this.fitAddon);

{remo_cli-4.3.4 → remo_cli-4.3.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "remo-cli"
-version = "4.3.4"
+version = "4.3.6"
 description = "Remote development environment CLI"
 readme = "README.md"
 license = "MIT"

{remo_cli-4.3.4 → remo_cli-4.3.6}/src/remo_cli/cli/shell.py

@@ -104,12 +104,18 @@ def shell(
 
     # Pre-shell remote version check.
     #
-    # Skip entirely for manually-added SSH hosts (feature 014, type="ssh"):
-    # they have no remo-managed tooling, so a missing `remo-host`/version marker
-    # is "unknown/unmanaged", not a prompt to run a (nonexistent) provider
-    # update. This lets `remo shell` drop straight into a plain login shell
-    # (FR-011).
-    if not no_update_check and host.type != "ssh":
+    # Applies to every host type, added SSH hosts included. Feature 014 skipped
+    # type="ssh" outright on the premise that such hosts "have no remo-managed
+    # tooling" — true then, false since 022 gave them `remo configure`, which
+    # runs the same shared `tasks/configure_dev_tools.yml` role list every
+    # provider upgrade runs and writes the very `~/.remo-version` marker this
+    # check reads. A configured added host is version-managed like any other,
+    # and skipping it meant an arbitrarily stale one was never surfaced.
+    #
+    # What survives from FR-011 is narrower and lives in the no-marker branch
+    # below: an added host that was never configured is a plain SSH box by the
+    # operator's choice, and still drops straight into a login shell.
+    if not no_update_check:
         local_version = get_current_version()
         if local_version != "unknown":
             remote_version, remote_err = check_remote_version(host)
@@ -125,6 +131,13 @@ def shell(
                     f"  {remote_err}\n"
                     f"  Skipping update check; proceeding with connection."
                 )
+            elif remote_version is None and host.type == "ssh":
+                # An added host with no marker was never `remo configure`d.
+                # Prompting to configure a box the operator deliberately left
+                # unmanaged would nag on every single connect, so stay silent
+                # (FR-011). Once configured it has a marker and takes the
+                # ordinary comparison branches below.
+                pass
             elif remote_version is None:
                 # No marker file on remote
                 should_update = confirm(
@@ -151,7 +164,7 @@ def shell(
                 from remo_cli.core.errors import ProviderError  # noqa: PLC0415
 
                 try:
-                    _run_provider_upgrade(host)
+                    _run_tools_upgrade(host)
                 except ProviderError as e:
                     # The playbook log has already been dumped, but the SSH
                     # connection (and any remote project picker) would scroll
@@ -174,7 +187,10 @@ def shell(
 
 
 def _upgrade_command_hint(host) -> str:  # noqa: ANN001
-    """Render the exact `remo <type> upgrade <name>` command for *host*.
+    """Render the exact command that accepting the prompt will run.
+
+    ``remo configure <name>`` for an added (type="ssh") host, and
+    `remo <type> upgrade <name>` for a provider one.
 
     Names the precise command the accepted prompt runs (SC-003) so the
     remedy is always executable and truthful.
@@ -194,24 +210,41 @@ def _upgrade_command_hint(host) -> str:  # noqa: ANN001
         is_provider_type,
     )
 
-    if is_provider_type(host.type):
-        descriptor = get_descriptor(host.type)
-        if descriptor.name_format is NameFormat.HOST_SCOPED and "/" in host.name:
-            host_part, _, short_name = host.name.partition("/")
-            cmd = f"remo {host.type} upgrade {short_name} --host {host_part}"
-            for attr, json_key in descriptor.registry_fields:
-                if json_key.endswith("_user"):
-                    user_value = getattr(host, attr, "")
-                    if user_value:
-                        flag = "--" + json_key.replace("_", "-")
-                        cmd += f" {flag} {user_value}"
-                    break
-            return cmd
+    if host.type == "ssh":
+        # Added host: `remo configure` is its upgrade verb — the same shared
+        # role list, reached through ssh_configure.yml. There is no `remo ssh`
+        # command group, so the provider spelling below would name a command
+        # that cannot be run.
+        return f"remo configure {host.name}"
+
+    if not is_provider_type(host.type):
+        # Unrecognized registry type: keep the provider spelling so the message
+        # names the type that is actually wrong. _run_tools_upgrade() refuses
+        # it with a PreconditionError rather than running anything.
+        return f"remo {host.type} upgrade {host.name}"
+
+    descriptor = get_descriptor(host.type)
+    if descriptor.name_format is NameFormat.HOST_SCOPED and "/" in host.name:
+        host_part, _, short_name = host.name.partition("/")
+        cmd = f"remo {host.type} upgrade {short_name} --host {host_part}"
+        for attr, json_key in descriptor.registry_fields:
+            if json_key.endswith("_user"):
+                user_value = getattr(host, attr, "")
+                if user_value:
+                    flag = "--" + json_key.replace("_", "-")
+                    cmd += f" {flag} {user_value}"
+                break
+        return cmd
     return f"remo {host.type} upgrade {host.name}"
 
 
-def _run_provider_upgrade(host) -> None:  # noqa: ANN001
-    """Run the appropriate provider upgrade for the given host.
+def _run_tools_upgrade(host) -> None:  # noqa: ANN001
+    """Refresh remo's tooling on *host*, whichever kind of host it is.
+
+    Two paths onto the same shared ``tasks/configure_dev_tools.yml`` role list:
+    ``providers.added.configure()`` for an added (type="ssh") host, and the
+    provider's own ``update_entry()`` for a managed one. Must stay in step with
+    :func:`_upgrade_command_hint`, which promises the user exactly one of them.
 
     Raises :class:`~remo_cli.core.errors.ProviderError` on failure (including
     an unrecognized provider type — no more silent no-op).
@@ -222,6 +255,17 @@ def _run_provider_upgrade(host) -> None:  # noqa: ANN001
 
     print_info(f"Upgrading instance '{host.name}'...")
 
+    if host.type == "ssh":
+        from remo_cli.providers import added  # noqa: PLC0415
+
+        # assume_yes: the caller already confirmed the named `remo configure`
+        # command. configure()'s own prompt warns about apt-upgrade and
+        # passwordless sudo — consent the operator necessarily gave when this
+        # host was first configured, which is what put the marker there that
+        # brought us here. Provider upgrades don't re-prompt either.
+        added.configure(name=host.name, assume_yes=True)
+        return
+
     if not is_provider_type(host.type):
         raise PreconditionError(
             f"Unknown provider type '{host.type}' for '{host.name}'; cannot upgrade tools."

{remo_cli-4.3.4 → remo_cli-4.3.6}/tests/unit/cli/test_shell.py

@@ -431,41 +431,42 @@ class TestBuildProjectLaunchRemoteCmd:
 
 
 class TestRunProviderUpgrade:
-    """Tests for _run_provider_upgrade(): registry-dispatched via
-    provider_registry + the Protocol's update_entry(entry) verb (018)."""
+    """Tests for _run_tools_upgrade(): registry-dispatched via
+    provider_registry + the Protocol's update_entry(entry) verb (018), plus the
+    added-host path onto providers.added.configure() (#178)."""
 
     def test_aws_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="aws", name="devbox", host="1.2.3.4", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.aws.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_hetzner_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="hetzner", name="webserver", host="5.6.7.8", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.hetzner.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_incus_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(type="incus", name="myhost/devcontainer", host="192.168.1.50", user="remo")
         mock_update_entry = mocker.patch("remo_cli.providers.incus.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_proxmox_update(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
 
         host = KnownHost(
             type="proxmox",
@@ -478,21 +479,49 @@ class TestRunProviderUpgrade:
         )
         mock_update_entry = mocker.patch("remo_cli.providers.proxmox.update_entry")
 
-        _run_provider_upgrade(host)
+        _run_tools_upgrade(host)
 
         mock_update_entry.assert_called_once_with(host)
 
     def test_unknown_type_raises_precondition_error_naming_the_type(self):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
         from remo_cli.core.errors import PreconditionError
 
         host = KnownHost(type="totally-unknown", name="foo", host="1.2.3.4", user="remo")
 
         with pytest.raises(PreconditionError, match="totally-unknown"):
-            _run_provider_upgrade(host)
+            _run_tools_upgrade(host)
+
+    def test_added_ssh_host_dispatches_to_configure(self, mocker):
+        """An added host has no provider; `remo configure` is its upgrade verb.
+
+        Pinned because get_provider("ssh") would raise: the dispatch has to
+        branch before the registry lookup, not after it.
+        """
+        from remo_cli.cli.shell import _run_tools_upgrade
+
+        host = KnownHost(type="ssh", name="mybox", host="1.2.3.4", user="remo")
+        configure = mocker.patch("remo_cli.providers.added.configure")
+
+        _run_tools_upgrade(host)
+
+        configure.assert_called_once_with(name="mybox", assume_yes=True)
+
+    def test_added_ssh_host_configure_failure_propagates(self, mocker):
+        from remo_cli.cli.shell import _run_tools_upgrade
+        from remo_cli.core.errors import OperationFailedError
+
+        host = KnownHost(type="ssh", name="mybox", host="1.2.3.4", user="remo")
+        mocker.patch(
+            "remo_cli.providers.added.configure",
+            side_effect=OperationFailedError("playbook rc=2"),
+        )
+
+        with pytest.raises(OperationFailedError, match="rc=2"):
+            _run_tools_upgrade(host)
 
     def test_update_entry_failure_propagates_as_provider_error(self, mocker):
-        from remo_cli.cli.shell import _run_provider_upgrade
+        from remo_cli.cli.shell import _run_tools_upgrade
         from remo_cli.core.errors import OperationFailedError
 
         host = KnownHost(type="aws", name="devbox", host="1.2.3.4", user="remo")
@@ -502,4 +531,4 @@ class TestRunProviderUpgrade:
         )
 
         with pytest.raises(OperationFailedError):
-            _run_provider_upgrade(host)
+            _run_tools_upgrade(host)

remo_cli-4.3.6/tests/unit/cli/test_shell_added.py

@@ -0,0 +1,149 @@
+"""`remo shell` behaviour for manually-added SSH hosts (feature 014, FR-011).
+
+The pre-connect version check applies to added (type="ssh") hosts, because 022
+gave them `remo configure` — the same shared tasks/configure_dev_tools.yml role
+list a provider upgrade runs, writing the same `~/.remo-version` marker. What
+FR-011 protects is narrower than "skip the check": an added host that was never
+configured has no marker, and must drop straight into a plain login shell rather
+than nag on every connect. See #178.
+"""
+
+from __future__ import annotations
+
+import pytest
+from click.testing import CliRunner
+
+from remo_cli.cli.shell import shell
+from remo_cli.models.host import KnownHost
+
+
+@pytest.fixture
+def runner() -> CliRunner:
+    return CliRunner()
+
+
+def _ssh_host() -> KnownHost:
+    return KnownHost(
+        type="ssh",
+        name="mybox",
+        host="1.2.3.4",
+        user="remo",
+        instance_id="22",
+        access_mode="direct",
+    )
+
+
+def _incus_host() -> KnownHost:
+    return KnownHost(type="incus", name="h/dev", host="10.0.0.5", user="remo")
+
+
+def test_unconfigured_ssh_host_connects_without_prompting(runner, mocker) -> None:
+    """FR-011, restated as what it actually protects.
+
+    An added host with no ``~/.remo-version`` was never ``remo configure``d —
+    a plain SSH box by the operator's choice — so it drops straight into a login
+    shell. The probe itself DOES run now (it is how we learn there is no
+    marker); what must not happen is a prompt.
+
+    This replaces an earlier assertion that the probe was never issued at all,
+    which pinned #178: it made a configured-but-stale added host permanently
+    invisible to the check.
+    """
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="2.2.0"
+    )
+    check = mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=(None, None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"], input="")
+
+    assert result.exit_code == 0
+    check.assert_called_once()
+    upgrade.assert_not_called()
+    assert "no version info" not in result.output
+    connect.assert_called_once()
+
+
+def test_stale_configured_ssh_host_is_offered_remo_configure(runner, mocker) -> None:
+    """The #178 regression: a configured added host that is behind must be told.
+
+    `remo configure` runs the same shared tasks/configure_dev_tools.yml role
+    list a provider upgrade runs, so the prompt has to name it — `remo ssh
+    upgrade` is not a command that exists.
+    """
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="4.3.4"
+    )
+    mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("4.3.2", None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"], input="y\n")
+
+    assert result.exit_code == 0
+    assert "4.3.2" in result.output and "4.3.4" in result.output
+    assert "remo configure mybox" in result.output
+    assert "remo ssh upgrade" not in result.output
+    upgrade.assert_called_once()
+    connect.assert_called_once()
+
+
+def test_ssh_host_ahead_of_client_warns_like_any_other(runner, mocker) -> None:
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_ssh_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="4.3.2"
+    )
+    mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("4.3.4", None)
+    )
+    upgrade = mocker.patch("remo_cli.cli.shell._run_tools_upgrade")
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["mybox"])
+
+    assert result.exit_code == 0
+    assert "newer tools" in result.output
+    upgrade.assert_not_called()
+    connect.assert_called_once()
+
+
+def test_managed_host_still_runs_version_check(runner, mocker) -> None:
+    # Contrast: a provider host DOES get the version check (gate is type-specific).
+    mocker.patch("remo_cli.core.ssh.resolve_remo_host", return_value=_incus_host())
+    mocker.patch(
+        "remo_cli.providers.aws.auto_start_aws_if_stopped",
+        side_effect=lambda h: h,
+    )
+    mocker.patch(
+        "remo_cli.core.version.get_current_version", return_value="2.2.0"
+    )
+    check = mocker.patch(
+        "remo_cli.core.ssh.check_remote_version", return_value=("2.2.0", None)
+    )
+    mocker.patch("remo_cli.core.version.version_is_newer", return_value=False)
+    connect = mocker.patch("remo_cli.core.ssh.shell_connect")
+
+    result = runner.invoke(shell, ["dev"])
+
+    assert result.exit_code == 0
+    check.assert_called_once()
+    connect.assert_called_once()

{remo_cli-4.3.4 → remo_cli-4.3.6}/uv.lock

@@ -1035,7 +1035,7 @@ wheels = [
 
 [[package]]
 name = "remo-cli"
-version = "4.3.4"
+version = "4.3.6"
 source = { editable = "." }
 dependencies = [
     { name = "ansible-core" },

remo_cli-4.3.4/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "4.3.4"
-}