silicon-cli 1.0.8__tar.gz → 1.0.11__tar.gz

{silicon_cli-1.0.8/silicon_cli.egg-info → silicon_cli-1.0.11}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: silicon-cli
-Version: 1.0.8
+Version: 1.0.11
 Summary: Silicon CLI — create, run, and manage your silicon instances.
 Author: Saket
 Project-URL: Homepage, https://github.com/saket1225/silicon-cli
@@ -13,6 +13,7 @@ Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: certifi>=2024.2.2
+Dynamic: license-file
 
 # silicon-cli
 
@@ -40,12 +41,14 @@ pip install silicon-cli
 silicon                      Show status or list instances
 silicon new [dir]            Create a new Silicon (hydrate from stemcell)
 silicon new .                Hydrate the current folder into a runnable silicon
-silicon start <target>       Start silicon(s). target = name, index, 1,2,4, or all
-silicon stop [--full] <target>  Stop silicon(s) (--full also stops the glass agent)
-silicon restart <target>     Restart silicon(s)
+silicon start <target>       Start silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon stop [--full] <target>  Stop silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon restart <target>     Restart silicon(s). target = name, *, all, 1,2,4, or name,name
 silicon agent <start|stop|status> [name]   Manage the per-silicon glass agent
 silicon status [name]        Show instance status
 silicon browser [name]       Open a headed browser for login
+silicon browser-profile setup <token>  Create a Steel browser profile through Glass
+silicon browser-profile finish <token> <session_id> [before_ids_csv]  Finish profile setup
 silicon debug [name]         Tail a running instance's logs
 silicon attach [path]        Register an existing silicon directory
 silicon pull [api_token]     Pull a Glass team or silicon into local folders
@@ -92,8 +95,8 @@ silicon pull sct_live_...
 
 The command validates the token with Glass, mints one local silicon API key per
 team silicon, creates one folder per silicon, hydrates the stemcell, writes
-`.glass.json`, `.env`, and `env.py`, registers each instance, and starts each
-Silicon Interface daemon.
+`.glass.json`, `.env`, and `env.py`, registers each instance, starts each
+Silicon Interface daemon, and starts each silicon process.
 
 During team pull, setup asks for the default brain/fallback settings once. You
 can apply those settings to every silicon, or select specific silicons that
@@ -102,9 +105,9 @@ Older per-silicon `scs_live_...` tokens still pull just that one silicon.
 
 Provider API keys for voice, browser profiles, billing, and architecture
 generation are configured on the Glass backend. After the silicon API token is
-validated, `silicon pull` reads the team's provider-key metadata from Glass,
-shows each provider as saved/missing without returning plaintext secrets, and
-asks whether the pulled silicon(s) should use the Glass-managed keys. A
+validated, `silicon pull` reads the team's provider-key metadata from Glass and
+automatically marks the pulled silicon(s) to use Glass-managed keys when every
+provider is available. Plaintext secrets are never returned to the CLI. A
 Glass-pulled silicon only stores its Glass API token plus a local marker that
 provider keys come from Glass.
 

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/README.md

@@ -24,12 +24,14 @@ pip install silicon-cli
 silicon                      Show status or list instances
 silicon new [dir]            Create a new Silicon (hydrate from stemcell)
 silicon new .                Hydrate the current folder into a runnable silicon
-silicon start <target>       Start silicon(s). target = name, index, 1,2,4, or all
-silicon stop [--full] <target>  Stop silicon(s) (--full also stops the glass agent)
-silicon restart <target>     Restart silicon(s)
+silicon start <target>       Start silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon stop [--full] <target>  Stop silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon restart <target>     Restart silicon(s). target = name, *, all, 1,2,4, or name,name
 silicon agent <start|stop|status> [name]   Manage the per-silicon glass agent
 silicon status [name]        Show instance status
 silicon browser [name]       Open a headed browser for login
+silicon browser-profile setup <token>  Create a Steel browser profile through Glass
+silicon browser-profile finish <token> <session_id> [before_ids_csv]  Finish profile setup
 silicon debug [name]         Tail a running instance's logs
 silicon attach [path]        Register an existing silicon directory
 silicon pull [api_token]     Pull a Glass team or silicon into local folders
@@ -76,8 +78,8 @@ silicon pull sct_live_...
 
 The command validates the token with Glass, mints one local silicon API key per
 team silicon, creates one folder per silicon, hydrates the stemcell, writes
-`.glass.json`, `.env`, and `env.py`, registers each instance, and starts each
-Silicon Interface daemon.
+`.glass.json`, `.env`, and `env.py`, registers each instance, starts each
+Silicon Interface daemon, and starts each silicon process.
 
 During team pull, setup asks for the default brain/fallback settings once. You
 can apply those settings to every silicon, or select specific silicons that
@@ -86,9 +88,9 @@ Older per-silicon `scs_live_...` tokens still pull just that one silicon.
 
 Provider API keys for voice, browser profiles, billing, and architecture
 generation are configured on the Glass backend. After the silicon API token is
-validated, `silicon pull` reads the team's provider-key metadata from Glass,
-shows each provider as saved/missing without returning plaintext secrets, and
-asks whether the pulled silicon(s) should use the Glass-managed keys. A
+validated, `silicon pull` reads the team's provider-key metadata from Glass and
+automatically marks the pulled silicon(s) to use Glass-managed keys when every
+provider is available. Plaintext secrets are never returned to the CLI. A
 Glass-pulled silicon only stores its Glass API token plus a local marker that
 provider keys come from Glass.
 

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "silicon-cli"
-version = "1.0.8"
+version = "1.0.11"
 description = "Silicon CLI — create, run, and manage your silicon instances."
 readme = "README.md"
 requires-python = ">=3.9"

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/__init__.py

@@ -1,2 +1,2 @@
 """Silicon CLI — manage silicon instances. Python port of the original bash manager."""
-__version__ = "1.0.8"
+__version__ = "1.0.10"

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/cli.py

@@ -10,7 +10,7 @@ from .config import python_run_cmd
 
 COMMANDS = ["start", "stop", "restart", "status", "browser", "debug", "attach",
             "pull", "push", "backup", "update", "update-check", "check-update",
-            "list", "install", "new", "help", "script", "agent"]
+            "browser-profile", "list", "install", "new", "help", "script", "agent"]
 
 
 # ----------------------------------------------------------------- commands
@@ -61,7 +61,7 @@ def cmd_status(target: str | None) -> None:
 def cmd_browser(target: str | None) -> None:
     inst = registry.resolve_one(target)
     ui.info(f"Opening browser for '{inst.name}'...")
-    subprocess.run([python_run_cmd(), "main.py", "browser"], cwd=inst.path)
+    subprocess.run([python_run_cmd(inst.path), "main.py", "browser"], cwd=inst.path)
 
 
 def cmd_debug(target: str | None) -> None:
@@ -156,13 +156,17 @@ def cmd_help() -> None:
   silicon                     Show status or list instances
   silicon new [dir]           Create a new Silicon (hydrate from stemcell)
   silicon new .               Hydrate the current folder into a runnable silicon
-  silicon start <target>      Start silicon(s). target = name, index, 1,2,4, or all
+  silicon start <target>      Start silicon(s). target = name, *, all, 1,2,4, or name,name
   silicon stop <target>       Stop silicon(s) (agent stays alive)
   silicon stop --full <target> Stop silicon(s) and glass agent
   silicon restart <target>    Restart silicon(s)
   silicon agent <start|stop|status> [name]  Manage glass agent
   silicon status [name]       Show instance status
   silicon browser [name]      Open headed browser for login
+  silicon browser-profile setup <token>
+                             Create a Steel browser profile through Glass
+  silicon browser-profile finish <token> <session_id> [before_ids_csv]
+                             Finish a browser profile setup session
   silicon debug [name]        Attach to running instance (live logs)
   silicon attach [path]       Register an existing silicon instance
   silicon pull [api_token]    Pull a Glass team or silicon into local folders
@@ -170,7 +174,7 @@ def cmd_help() -> None:
   silicon push [name] now     Push a one-time backup to Glass
   silicon push [name] stop    Stop the daily backup loop
   silicon backup [name] [now|stop] Alias for silicon push
-  silicon update <target>     Update silicon(s) to latest. target = name, index, 1,2,4, or all
+  silicon update <target>     Update silicon(s) to latest. target = name, *, all, 1,2,4, or name,name
   silicon update check [name] Trigger this silicon's system update check now
   silicon update-check [name] Trigger this silicon's system update check now
   silicon list                List all instances
@@ -220,6 +224,18 @@ def main(argv: list[str] | None = None) -> None:
         cmd_status(a1)
     elif cmd == "browser":
         cmd_browser(a1)
+    elif cmd == "browser-profile":
+        if a1 == "setup":
+            sync.browser_profile_setup(a2)
+        elif a1 == "finish":
+            sync.browser_profile_finish(
+                a2,
+                argv[3] if len(argv) > 3 else None,
+                argv[4] if len(argv) > 4 else None,
+            )
+        else:
+            ui.error("Usage: silicon browser-profile <setup|finish> ...")
+            sys.exit(1)
     elif cmd == "debug":
         cmd_debug(a1)
     elif cmd == "attach":

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/config.py

@@ -41,6 +41,29 @@ SILICON_INTERFACE_DAEMON_SKIP = os.environ.get("SILICON_INTERFACE_DAEMON_SKIP",
 }
 
 
-def python_run_cmd() -> str:
-    """The interpreter used to RUN a silicon's main.py (not this CLI's venv)."""
+def venv_python(path: str | os.PathLike) -> str | None:
+    """The silicon's own .venv interpreter, if one exists."""
+    sub = "Scripts/python.exe" if os.name == "nt" else "bin/python"
+    cand = Path(path) / ".venv" / sub
+    return str(cand) if cand.exists() else None
+
+
+def base_python_cmd() -> str:
+    """The interpreter used to CREATE a silicon's venv (not this CLI's venv)."""
     return os.environ.get("SILICON_PYTHON") or shutil.which("python3") or shutil.which("python") or "python3"
+
+
+def python_run_cmd(path: str | os.PathLike | None = None) -> str:
+    """The interpreter used to RUN a silicon's code (not this CLI's venv).
+
+    SILICON_PYTHON always wins; otherwise prefer the silicon's own .venv —
+    system interpreters are often externally managed (PEP 668) and never
+    received the silicon's dependencies.
+    """
+    if os.environ.get("SILICON_PYTHON"):
+        return os.environ["SILICON_PYTHON"]
+    if path:
+        venv = venv_python(path)
+        if venv:
+            return venv
+    return shutil.which("python3") or shutil.which("python") or "python3"

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/glassagent.py

@@ -45,7 +45,7 @@ def start(path: str) -> None:
         return
     log = open(Path(path) / ".glass_agent.log", "a")
     proc = subprocess.Popen(
-        [python_run_cmd(), "-u", "glass_agent.py"], cwd=path,
+        [python_run_cmd(path), "-u", "glass_agent.py"], cwd=path,
         stdout=log, stderr=subprocess.STDOUT, start_new_session=True,
     )
     _pid_file(path).write_text(str(proc.pid))

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/process.py

@@ -92,7 +92,7 @@ def watchdog_loop(name: str, path: str, pid_file: str) -> None:
     log_file = Path(path) / ".silicon.log"
     main_py = str(Path(path) / "main.py")
     stop_file = Path(path) / ".silicon.stop"
-    py = python_run_cmd()
+    py = python_run_cmd(path)
     child: subprocess.Popen | None = None
 
     def _terminate(signum=None, frame=None):
@@ -231,7 +231,7 @@ def _multi(target: str, verb: str, fn) -> bool:
     if not names:
         ui.error("No matching installations")
         sys.exit(1)
-    if target == "all":
+    if target in {"all", "*"}:
         joined = ", ".join(names)
         if not ui.confirm(f"Are you sure you want to {verb} the following silicons: {joined}?"):
             return True

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/registry.py

@@ -82,26 +82,35 @@ def find(search: str | None = None) -> Install | None:
 
 
 def is_multi_target(s: str) -> bool:
-    if s == "all":
+    if s in {"all", "*"}:
         return True
-    parts = s.split(",")
-    return all(p.strip().isdigit() for p in parts) and bool(parts)
+    parts = [p.strip() for p in s.split(",")]
+    return len(parts) > 1 and all(bool(p) for p in parts)
 
 
 def resolve_targets(selector: str) -> list[str]:
-    """'all' | '1,2,4' (1-based indices) → list of install names."""
+    """'all' | '*' | '1,2,4' | 'api-dev,copywriter' → install names."""
     rows = installs()
-    if selector == "all":
+    if selector in {"all", "*"}:
         return [i.name for i in rows]
+    by_name = {i.name: i.name for i in rows}
     out = []
-    for num in selector.split(","):
-        num = num.strip()
-        if not num.isdigit():
+    seen = set()
+    for part in selector.split(","):
+        part = part.strip()
+        name = ""
+        if part.isdigit():
+            idx = int(part) - 1
+            for i in rows:
+                if i.index == idx:
+                    name = i.name
+                    break
+        else:
+            name = by_name.get(part, "")
+        if not name or name in seen:
             continue
-        idx = int(num) - 1
-        for i in rows:
-            if i.index == idx:
-                out.append(i.name)
+        seen.add(name)
+        out.append(name)
     return out
 
 

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/stemcell.py

@@ -17,7 +17,7 @@ import tempfile
 from pathlib import Path
 
 from . import interface_cli, registry, ui
-from .config import STEMCELL_GIT_URL, STEMCELL_ZIP_URL, python_run_cmd
+from .config import STEMCELL_GIT_URL, STEMCELL_ZIP_URL, base_python_cmd, python_run_cmd, venv_python
 
 SKIP_NAMES = {".git", "__pycache__", ".DS_Store"}
 PRESERVE_ROOT = {"env.py", "silicon.json", ".glass.json"}
@@ -90,6 +90,58 @@ def _choose_brain_order(primary: str) -> list[str]:
     return [primary]
 
 
+def _ensure_venv(dst: Path) -> str | None:
+    """Create <dst>/.venv if missing. Returns its interpreter, or None.
+
+    Returns None when the venv can't be created — e.g. Debian/Ubuntu without
+    python3-venv, where ensurepip is stripped from the system interpreter.
+    """
+    existing = venv_python(dst)
+    if existing:
+        return existing
+    r = subprocess.run([base_python_cmd(), "-m", "venv", str(dst / ".venv")],
+                       capture_output=True, text=True)
+    if r.returncode != 0:
+        shutil.rmtree(dst / ".venv", ignore_errors=True)
+        return None
+    return venv_python(dst)
+
+
+def install_requirements(dst: Path, req: Path) -> None:
+    """Install the silicon's requirements, preferring an instance-local venv.
+
+    System interpreters are commonly externally managed (PEP 668), so a plain
+    `pip install` is refused. Try, in order: the silicon's own .venv, plain
+    pip, `--user`, `--break-system-packages`. A failure here must abort the
+    hydration — a silicon without its dependencies starts but never completes
+    its Glass handshake.
+    """
+    ui.info("Installing Python dependencies...")
+    vpy = _ensure_venv(dst)
+    if vpy:
+        r = subprocess.run([vpy, "-m", "pip", "install", "-r", str(req), "--quiet"])
+        if r.returncode == 0:
+            return
+        ui.warn("Install into the silicon's venv failed; falling back to the system interpreter.")
+        # A half-provisioned venv must not survive: python_run_cmd() would
+        # prefer it over the system interpreter that gets the deps below.
+        shutil.rmtree(dst / ".venv", ignore_errors=True)
+    py = base_python_cmd()
+    last = None
+    for extra in ([], ["--user"], ["--break-system-packages"]):
+        last = subprocess.run([py, "-m", "pip", "install", "-r", str(req), "--quiet", *extra],
+                              capture_output=True, text=True)
+        if last.returncode == 0:
+            return
+    if last is not None and last.stderr:
+        sys.stderr.write(last.stderr)
+    ui.error("Could not install Python dependencies — this silicon would start but never "
+             "complete its Glass handshake, so hydration was aborted.")
+    ui.info("On Debian/Ubuntu, install venv support and retry:  sudo apt install python3-venv")
+    ui.info("Or point SILICON_PYTHON at an interpreter that allows pip installs.")
+    sys.exit(1)
+
+
 def hydrate(target: str, setup_config=None) -> None:
     abs_target = str(Path(target).resolve())
     os.makedirs(abs_target, exist_ok=True)
@@ -166,10 +218,7 @@ def hydrate(target: str, setup_config=None) -> None:
         # Install dependencies
         req = dst / "requirements.txt"
         if req.exists():
-            ui.info("Installing Python dependencies...")
-            r = subprocess.run([python_run_cmd(), "-m", "pip", "install", "-r", str(req), "--quiet"])
-            if r.returncode != 0:
-                subprocess.run([python_run_cmd(), "-m", "pip", "install", "-r", str(req), "--quiet", "--user"])
+            install_requirements(dst, req)
 
         registry.register(name, abs_target)
         interface_cli.setup(abs_target)

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/sync.py

@@ -13,10 +13,11 @@ import time
 import urllib.error
 import urllib.parse
 import urllib.request
+import webbrowser
 from datetime import datetime, timedelta, timezone
 from pathlib import Path
 
-from . import registry, stemcell, ui
+from . import process, registry, stemcell, ui
 from .config import GLASS_CLI_REPO, GLASS_SERVER_URL
 
 MANIFEST_NAME = ".backupsilicon"
@@ -226,6 +227,30 @@ def _post_json_with_team_key(url: str, team_key: str, body=None) -> tuple[int, d
         return 0, {"detail": str(e)}
 
 
+def _post_json(url: str, body=None, *, timeout: int = 60) -> tuple[int, dict]:
+    data = json.dumps(body or {}).encode("utf-8")
+    req = urllib.request.Request(
+        url,
+        data=data,
+        method="POST",
+        headers={
+            "Content-Type": "application/json",
+            "Accept": "application/json",
+            "User-Agent": "silicon-cli",
+        },
+    )
+    try:
+        with _urlopen(req, timeout=timeout) as resp:
+            return resp.status, json.loads(resp.read().decode() or "{}")
+    except urllib.error.HTTPError as e:
+        try:
+            return e.code, json.loads(e.read().decode() or "{}")
+        except Exception:
+            return e.code, {}
+    except Exception as e:
+        return 0, {"detail": str(e)}
+
+
 def _team_slug_from_silicon(silicon: dict) -> str:
     return str(
         silicon.get("team")
@@ -263,7 +288,12 @@ def _configured_team_key_names(rows: list[dict]) -> list[str]:
     configured = []
     for key_name, _label in PROVIDER_API_KEYS:
         row = by_name.get(key_name, {})
-        if row.get("configured"):
+        if (
+            row.get("configured")
+            or row.get("team_configured")
+            or row.get("center_configured")
+            or row.get("server_fallback_configured")
+        ):
             configured.append(key_name)
     return configured
 
@@ -273,8 +303,15 @@ def _display_team_api_keys(rows: list[dict]) -> None:
     ui.info("Provider API token status from Glass (secrets are not returned):")
     for key_name, label in PROVIDER_API_KEYS:
         row = by_name.get(key_name, {})
-        if row.get("configured"):
-            status = "saved in Glass"
+        source = str(row.get("source") or "").strip()
+        if row.get("team_configured") or source == "team":
+            status = "team override"
+        elif row.get("center_configured") or source == "center":
+            status = "center managed"
+        elif row.get("server_fallback_configured") or source == "server":
+            status = "server fallback"
+        elif row.get("configured"):
+            status = "Glass managed"
         elif row.get("server_fallback_configured"):
             status = "server fallback only"
         else:
@@ -282,7 +319,7 @@ def _display_team_api_keys(rows: list[dict]) -> None:
         ui.info(f"  {label} ({key_name}): {status}")
 
 
-def _provider_key_env_from_rows(team_slug: str, rows: list[dict], prompt: str) -> dict[str, str]:
+def _provider_key_env_from_rows(team_slug: str, rows: list[dict], prompt: str = "") -> dict[str, str]:
     if not rows:
         ui.warn("Glass did not return provider API token metadata.")
         return {}
@@ -295,10 +332,6 @@ def _provider_key_env_from_rows(team_slug: str, rows: list[dict], prompt: str) -
         ui.info("Set them in Glass > API keys, then rerun silicon pull if these silicons need them.")
         return {}
 
-    if not ui.confirm(prompt, default_yes=True):
-        ui.info("Skipping Glass-managed provider API token marker.")
-        return {}
-
     return {
         "SILICON_PROVIDER_KEYS_SOURCE": "glass",
         "SILICON_PROVIDER_KEYS_TEAM": team_slug,
@@ -506,6 +539,89 @@ def _team_pull_url(server: str) -> str:
     return f"{server}/api/v1/teams/setup-pull"
 
 
+def _browser_profile_setup_start_url(server: str) -> str:
+    return f"{server}/api/v1/browser-profiles/setup/start"
+
+
+def _browser_profile_setup_finish_url(server: str) -> str:
+    return f"{server}/api/v1/browser-profiles/setup/finish"
+
+
+def _browser_profile_finish_command(token: str, session_id: str, before_ids: list[str]) -> str:
+    before = ",".join(before_ids)
+    return f"silicon browser-profile finish '{token}' '{session_id}' '{before}'"
+
+
+def browser_profile_finish(token: str | None, session_id: str | None, before_ids_csv: str | None = None) -> None:
+    token = (token or "").strip()
+    session_id = (session_id or "").strip()
+    if not token or not session_id:
+        ui.error("Usage: silicon browser-profile finish <setup_token> <session_id> [before_profile_ids_csv]")
+        sys.exit(1)
+    before_ids = [p.strip() for p in (before_ids_csv or "").split(",") if p.strip()]
+    server = GLASS_SERVER_URL.rstrip("/")
+    ui.info("Finishing browser profile setup with Glass...")
+    code, body = _post_json(
+        _browser_profile_setup_finish_url(server),
+        {"token": token, "session_id": session_id, "before_profile_ids": before_ids},
+        timeout=120,
+    )
+    if not (200 <= code < 300):
+        ui.error(body.get("detail") or body.get("error") or f"Glass could not finish the profile setup (HTTP {code}).")
+        sys.exit(1)
+    profile = body.get("profile") or {}
+    name = profile.get("name") or profile.get("id") or "browser profile"
+    assigned = body.get("assigned", 0)
+    ui.success(f"Saved Steel profile '{name}' and assigned it to {assigned} silicon(s).")
+
+
+def browser_profile_setup(token: str | None) -> None:
+    token = (token or "").strip()
+    if not token:
+        ui.error("Usage: silicon browser-profile setup <setup_token>")
+        sys.exit(1)
+    server = GLASS_SERVER_URL.rstrip("/")
+    ui.info("Starting browser profile setup with Glass...")
+    code, body = _post_json(_browser_profile_setup_start_url(server), {"token": token}, timeout=120)
+    if not (200 <= code < 300):
+        ui.error(body.get("detail") or body.get("error") or f"Glass could not start the profile setup (HTTP {code}).")
+        sys.exit(1)
+
+    session_id = str(body.get("session_id") or "").strip()
+    viewer_url = str(body.get("viewer_url") or body.get("debug_url") or "").strip()
+    before_ids = [str(p) for p in (body.get("before_profile_ids") or []) if p]
+    if not session_id or not viewer_url:
+        ui.error("Glass returned an incomplete browser setup session.")
+        sys.exit(1)
+
+    ui.success("Steel setup session started.")
+    ui.info(f"Viewer URL: {viewer_url}")
+    try:
+        webbrowser.open(viewer_url)
+    except Exception:
+        pass
+
+    finish_cmd = _browser_profile_finish_command(token, session_id, before_ids)
+    if not ui.interactive():
+        ui.info("When the browser is configured, finish with:")
+        print(f"  {finish_cmd}")
+        return
+
+    print()
+    ui.info("Use the browser window to log in or configure the profile.")
+    ui.info("Press Enter here when you're done. Ctrl+C leaves the session open; finish later with:")
+    print(f"  {finish_cmd}")
+    try:
+        input()
+    except KeyboardInterrupt:
+        print()
+        ui.warn("Setup session left open.")
+        ui.info(f"Finish later with: {finish_cmd}")
+        return
+
+    browser_profile_finish(token, session_id, ",".join(before_ids))
+
+
 def _silicon_display(silicon: dict) -> str:
     name = str(silicon.get("name") or "").strip()
     sid = str(silicon.get("silicon_id") or "").strip()
@@ -622,6 +738,10 @@ def _pull_team(api_key: str, server: str) -> None:
     for instance_name, target in pulled:
         ui.info(f"  {instance_name}: {target}")
 
+    ui.info("Starting pulled silicons...")
+    for instance_name, _target in pulled:
+        process.start_one(instance_name)
+
     if ui.interactive() and ui.confirm("Enable daily 23:59 UTC backups for all pulled silicons?"):
         for instance_name, target in pulled:
             ui.info(f"Running initial backup for '{instance_name}'...")
@@ -679,6 +799,7 @@ def pull(api_token: str | None) -> None:
 
     ui.success(f"Pulled Glass silicon '{silicon_name or silicon_id}' into {target}")
     ui.info(f"Registered as '{instance_name}'.")
+    process.start_one(instance_name)
 
     if ui.interactive() and ui.confirm("Enable daily 23:59 UTC backups for this silicon?"):
         ui.info("Running initial backup...")

{silicon_cli-1.0.8 → silicon_cli-1.0.11}/silicon_cli/update.py

@@ -50,8 +50,11 @@ def _update_one(target: str | None, tmp_src: str, updater: str, multi: bool) ->
         sys.exit(1)
 
     ui.info(f"Updating '{inst.name}' safely...")
-    r = subprocess.run([python_run_cmd(), updater, "update", "--source", tmp_src, "--target", inst.path])
+    r = subprocess.run([python_run_cmd(inst.path), updater, "update", "--source", tmp_src, "--target", inst.path])
     if r.returncode == 0:
+        req = Path(inst.path) / "requirements.txt"
+        if req.exists():
+            stemcell.install_requirements(Path(inst.path), req)
         ui.success(f"'{inst.name}' updated successfully")
     elif r.returncode == 2:
         ui.error(f"Update aborted — merge conflicts detected in '{inst.name}'. No files overwritten.")
@@ -87,9 +90,9 @@ def trigger_update_check(target: str | None) -> None:
     main_py = root / "main.py"
 
     if updater.exists():
-        cmd = [python_run_cmd(), str(updater)]
+        cmd = [python_run_cmd(inst.path), str(updater)]
     elif main_py.exists():
-        cmd = [python_run_cmd(), "main.py", "update-check"]
+        cmd = [python_run_cmd(inst.path), "main.py", "update-check"]
     else:
         ui.error(f"'{inst.name}' does not look like a stemcell with update.py or main.py.")
         sys.exit(1)

{silicon_cli-1.0.8 → silicon_cli-1.0.11/silicon_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: silicon-cli
-Version: 1.0.8
+Version: 1.0.11
 Summary: Silicon CLI — create, run, and manage your silicon instances.
 Author: Saket
 Project-URL: Homepage, https://github.com/saket1225/silicon-cli
@@ -13,6 +13,7 @@ Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: certifi>=2024.2.2
+Dynamic: license-file
 
 # silicon-cli
 
@@ -40,12 +41,14 @@ pip install silicon-cli
 silicon                      Show status or list instances
 silicon new [dir]            Create a new Silicon (hydrate from stemcell)
 silicon new .                Hydrate the current folder into a runnable silicon
-silicon start <target>       Start silicon(s). target = name, index, 1,2,4, or all
-silicon stop [--full] <target>  Stop silicon(s) (--full also stops the glass agent)
-silicon restart <target>     Restart silicon(s)
+silicon start <target>       Start silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon stop [--full] <target>  Stop silicon(s). target = name, *, all, 1,2,4, or name,name
+silicon restart <target>     Restart silicon(s). target = name, *, all, 1,2,4, or name,name
 silicon agent <start|stop|status> [name]   Manage the per-silicon glass agent
 silicon status [name]        Show instance status
 silicon browser [name]       Open a headed browser for login
+silicon browser-profile setup <token>  Create a Steel browser profile through Glass
+silicon browser-profile finish <token> <session_id> [before_ids_csv]  Finish profile setup
 silicon debug [name]         Tail a running instance's logs
 silicon attach [path]        Register an existing silicon directory
 silicon pull [api_token]     Pull a Glass team or silicon into local folders
@@ -92,8 +95,8 @@ silicon pull sct_live_...
 
 The command validates the token with Glass, mints one local silicon API key per
 team silicon, creates one folder per silicon, hydrates the stemcell, writes
-`.glass.json`, `.env`, and `env.py`, registers each instance, and starts each
-Silicon Interface daemon.
+`.glass.json`, `.env`, and `env.py`, registers each instance, starts each
+Silicon Interface daemon, and starts each silicon process.
 
 During team pull, setup asks for the default brain/fallback settings once. You
 can apply those settings to every silicon, or select specific silicons that
@@ -102,9 +105,9 @@ Older per-silicon `scs_live_...` tokens still pull just that one silicon.
 
 Provider API keys for voice, browser profiles, billing, and architecture
 generation are configured on the Glass backend. After the silicon API token is
-validated, `silicon pull` reads the team's provider-key metadata from Glass,
-shows each provider as saved/missing without returning plaintext secrets, and
-asks whether the pulled silicon(s) should use the Glass-managed keys. A
+validated, `silicon pull` reads the team's provider-key metadata from Glass and
+automatically marks the pulled silicon(s) to use Glass-managed keys when every
+provider is available. Plaintext secrets are never returned to the CLI. A
 Glass-pulled silicon only stores its Glass API token plus a local marker that
 provider keys come from Glass.