taskuary 0.3.2.6__tar.gz → 0.3.2.7__tar.gz

{taskuary-0.3.2.6/taskuary.egg-info → taskuary-0.3.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: taskuary
-Version: 0.3.2.6
+Version: 0.3.2.7
 Summary: Automate your job - the local-first operating system for your work: AI triage in, coding agents out.
 License: MIT
 Project-URL: Homepage, https://github.com/ldbumble/taskuary
@@ -64,7 +64,7 @@ and replies wait for your approval. Nothing sends or ships without you.
 
 ![The Taskuary Studio: work arrives, triage decides what needs action, and agents take seats to work it.](https://raw.githubusercontent.com/ldbumble/taskuary/master/docs/hero.gif)
 
-Taskuary is early—currently **v0.3.2.6**—and moving fast. The funnel, review queue,
+Taskuary is early—currently **v0.3.2.7**—and moving fast. The funnel, review queue,
 agent sessions, and reports pipeline are in daily use; breaking changes are still possible
 before 1.0.
 

{taskuary-0.3.2.6 → taskuary-0.3.2.7}/README.md

@@ -13,7 +13,7 @@ and replies wait for your approval. Nothing sends or ships without you.
 
 ![The Taskuary Studio: work arrives, triage decides what needs action, and agents take seats to work it.](https://raw.githubusercontent.com/ldbumble/taskuary/master/docs/hero.gif)
 
-Taskuary is early—currently **v0.3.2.6**—and moving fast. The funnel, review queue,
+Taskuary is early—currently **v0.3.2.7**—and moving fast. The funnel, review queue,
 agent sessions, and reports pipeline are in daily use; breaking changes are still possible
 before 1.0.
 

{taskuary-0.3.2.6 → taskuary-0.3.2.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "taskuary"
-version = "0.3.2.6"
+version = "0.3.2.7"
 description = "Automate your job - the local-first operating system for your work: AI triage in, coding agents out."
 readme = "README.md"
 license = { text = "MIT" }

{taskuary-0.3.2.6 → taskuary-0.3.2.7}/taskuary/guard.py

@@ -57,6 +57,7 @@ DENIED = (
     (r'POST|PUT|PATCH', r'^/api/settings', 'the settings decide what agents may do'),
     (r'POST|PUT|PATCH|DELETE', r'^/api/(policies|agents)', 'the rules and the agent profiles'),
     (r'POST|PUT|PATCH|DELETE', r'^/api/(docs?|playbooks)(/|$)', 'SOUL.md, the playbooks and the rest are the owner\'s word, not an agent\'s - propose, do not write'),
+    (r'POST', r'^/api/update$', 'replacing the program is the owner\'s decision'),
 )
 _DENIED = tuple((re.compile(f'^({m})$', re.I), re.compile(p), why) for m, p, why in DENIED)
 

{taskuary-0.3.2.6 → taskuary-0.3.2.7}/taskuary/server.py

@@ -197,6 +197,23 @@ _started = datetime.now().isoformat(sep=' ', timespec='seconds')
 @app.get('/api/version')
 def version(): return {'version': _ver, 'started': _started}
 
+# ── update in place (update.py): Settings → Updates ─────────────────────────────────────
+@app.get('/api/update')
+def update_check(force: int = 0):
+    from . import update
+    return update.check(force=bool(force))
+
+@app.post('/api/update')
+def update_apply():
+    """Fetch the latest release and swap it in. The answer goes out first; the process ends a
+    moment later so the new build can start. Owner-only: guard.py refuses an agent token."""
+    from . import update
+    try: out = update.apply()
+    except Exception as e: raise HTTPException(422, str(e))
+    store.audit('app', 0, 'update', ACTOR, detail={k: v for k, v in out.items() if k != 'pip'})
+    if out.get('restarting'): update.exit_soon()
+    return out
+
 def _can_send(channel, has_message=True, gh_ok=None) -> bool:
     """Can an approved reply actually LEAVE on this channel? One answer for the whole app -
     outbound.can_reply - so the Approve button, triage and the coder wrap-up cannot

taskuary-0.3.2.7/taskuary/update.py

@@ -0,0 +1,179 @@
+"""Update in place, from Settings: check what the latest release is, fetch it, swap it in, come back.
+
+Everything the owner has - connections, tokens, the database, the operator documents, the
+playbooks - lives under ~/.taskuary (config.home()), never beside the program. So an update is
+only ever a program swap: nothing in the data folder is touched, and the new build opens the same
+database the old one closed. That is what makes "keep the connection and all the settings" free.
+
+Three ways Taskuary can be installed, three roads:
+  exe     Taskuary.exe (PyInstaller, taskuary.spec). A running exe cannot overwrite itself on
+          Windows, so the new one is downloaded beside it as Taskuary.new.exe and a tiny batch
+          script does the rest after we exit: wait for our PID to go, move the new file over
+          the old, start it with the same arguments, delete itself.
+  pip     a wheel in a venv: `pip install -U taskuary`, then relaunch the same command line.
+  source  a checkout (`pip install -e .`, the developer's machine): updating means `git pull`,
+          which is not ours to run in somebody's repository - say so instead.
+
+The latest version is the GitHub release the publish workflow cuts on every tag, and the exe is
+the asset it attaches at a fixed URL (releases/latest/download/Taskuary.exe). No token, no extra
+service, and the same file a person would download by hand.
+"""
+import os, re, sys, threading, time
+from pathlib import Path
+
+import requests
+from loguru import logger
+
+from . import __version__
+
+REPO = 'ldbumble/taskuary'
+LATEST_API = f'https://api.github.com/repos/{REPO}/releases/latest'
+EXE_URL = f'https://github.com/{REPO}/releases/latest/download/Taskuary.exe'
+TIMEOUT = 20
+_cache = {'at': 0.0, 'result': None}
+CACHE_S = 600                   # GitHub allows 60 anonymous calls an hour; the header pill asks often
+
+
+def how() -> str:
+    """'exe' | 'pip' | 'source' - which road an update takes on this install."""
+    if getattr(sys, 'frozen', False): return 'exe'
+    if (Path(__file__).parent.parent / 'pyproject.toml').is_file(): return 'source'
+    return 'pip'
+
+
+def _parts(v: str) -> tuple:
+    return tuple(int(x) for x in re.findall(r'\d+', str(v or '')))
+
+
+def newer(latest: str, current: str) -> bool:
+    """Is `latest` a later release than `current`? Dotted integers, any depth; a bad string is
+    never newer - an update button must not fire on a parse error."""
+    a, b = _parts(latest), _parts(current)
+    if not a or not b: return False
+    n = max(len(a), len(b))
+    return a + (0,) * (n - len(a)) > b + (0,) * (n - len(b))
+
+
+def check(force: bool = False) -> dict:
+    """What is out there vs what is running. Cached ten minutes; a failure to reach GitHub is a
+    fact in the answer, not an exception - the card says 'could not check' and stays useful."""
+    if not force and _cache['result'] and time.time() - _cache['at'] < CACHE_S: return _cache['result']
+    out = {'current': __version__, 'how': how(), 'latest': None, 'newer': False, 'url': None, 'notes': None, 'error': None}
+    try:
+        r = requests.get(LATEST_API, timeout=TIMEOUT, headers={'Accept': 'application/vnd.github+json'})
+        r.raise_for_status()
+        j = r.json()
+        tag = str(j.get('tag_name') or '').lstrip('v')
+        out.update({'latest': tag or None, 'newer': newer(tag, __version__), 'notes': j.get('html_url'),
+                    'url': next((a.get('browser_download_url') for a in j.get('assets') or []
+                                 if str(a.get('name') or '').lower() == 'taskuary.exe'), EXE_URL)})
+    except Exception as e:
+        out['error'] = f'could not reach GitHub to check: {str(e)[:160]}'
+    _cache.update({'at': time.time(), 'result': out})
+    return out
+
+
+# ── the exe road ────────────────────────────────────────────────────────────────────────
+def _download(url: str, dest: Path, progress=None) -> int:
+    """Stream the new exe beside the old one. Size-checked against Content-Length and sniffed
+    for the PE header: a half-downloaded or HTML-error-page 'exe' must never be swapped in."""
+    with requests.get(url, stream=True, timeout=TIMEOUT, allow_redirects=True) as r:
+        r.raise_for_status()
+        total = int(r.headers.get('Content-Length') or 0)
+        got = 0
+        with open(dest, 'wb') as f:
+            for chunk in r.iter_content(1 << 20):
+                if not chunk: continue
+                f.write(chunk); got += len(chunk)
+                if progress: progress(got, total)
+    if total and got != total:
+        dest.unlink(missing_ok=True)
+        raise RuntimeError(f'download stopped short: {got:,} of {total:,} bytes')
+    with open(dest, 'rb') as f: head = f.read(2)
+    if head != b'MZ':
+        dest.unlink(missing_ok=True)
+        raise RuntimeError('what came down is not a Windows program - the release asset may be missing')
+    return got
+
+
+def swap_script(exe: Path, new: Path, pid: int, args: list) -> str:
+    """The batch that finishes the job after this process has gone. Waits for the PID (the exe
+    is locked while it runs), moves the new file over the old (retrying - antivirus likes to hold
+    a fresh download for a second), starts the new build with the SAME arguments, removes itself."""
+    q = lambda s: '"' + str(s).replace('"', '""') + '"'
+    argstr = ' '.join(q(a) for a in args)
+    return '\r\n'.join([
+        '@echo off',
+        'setlocal',
+        ':wait',
+        f'tasklist /FI "PID eq {pid}" 2>nul | find "{pid}" >nul',
+        'if not errorlevel 1 (timeout /t 1 /nobreak >nul & goto wait)',
+        'set /a tries=0',
+        ':swap',
+        f'move /Y {q(new)} {q(exe)} >nul 2>&1',
+        'if errorlevel 1 (',
+        '  set /a tries+=1',
+        '  if %tries% geq 30 goto giveup',
+        '  timeout /t 1 /nobreak >nul',
+        '  goto swap',
+        ')',
+        f'start "" {q(exe)} {argstr}'.rstrip(),
+        'del "%~f0"',
+        'exit /b 0',
+        ':giveup',
+        f'start "" {q(exe)} {argstr}'.rstrip(),
+        'del "%~f0"',
+        'exit /b 1',
+    ]) + '\r\n'
+
+
+def _apply_exe(url: str, progress=None) -> dict:
+    exe = Path(sys.executable).resolve()
+    new = exe.with_name('Taskuary.new.exe')
+    size = _download(url, new, progress)
+    script = exe.with_name('taskuary-update.cmd')
+    script.write_text(swap_script(exe, new, os.getpid(), sys.argv[1:]), encoding='utf-8')
+    from . import spawn
+    import subprocess
+    # detached: it must outlive us, and it must not die when our (nonexistent) console does
+    spawn.popen(['cmd', '/c', str(script)], cwd=str(exe.parent), close_fds=True,
+                creationflags=getattr(subprocess, 'DETACHED_PROCESS', 0) | getattr(subprocess, 'CREATE_NEW_PROCESS_GROUP', 0))
+    logger.info(f'update: {size:,} bytes downloaded to {new.name}; {script.name} takes over when this process exits')
+    return {'how': 'exe', 'downloaded': size, 'restarting': True}
+
+
+# ── the pip road ────────────────────────────────────────────────────────────────────────
+def _apply_pip(progress=None) -> dict:
+    from . import spawn
+    if progress: progress(0, 0)
+    r = spawn.run([sys.executable, '-m', 'pip', 'install', '-U', '--no-input', 'taskuary'],
+                  capture_output=True, text=True, timeout=600)
+    if r.returncode != 0:
+        raise RuntimeError('pip could not update: ' + (r.stderr or r.stdout or '').strip()[-400:])
+    # relaunch the same command line, detached, once we are gone
+    import subprocess
+    kw = ({'creationflags': getattr(subprocess, 'DETACHED_PROCESS', 0) | getattr(subprocess, 'CREATE_NEW_PROCESS_GROUP', 0)}
+          if os.name == 'nt' else {'start_new_session': True})
+    spawn.popen([sys.executable, *sys.argv], close_fds=True, **kw)
+    return {'how': 'pip', 'restarting': True, 'pip': (r.stdout or '').strip()[-300:]}
+
+
+def apply(progress=None) -> dict:
+    """Do it. Returns what happened; the caller ends the process (exit_soon) when 'restarting'."""
+    road = how()
+    if road == 'source':
+        raise RuntimeError('this is a source checkout - update it with `git pull` in the repository, then restart')
+    info = check(force=True)
+    if info.get('error'): raise RuntimeError(info['error'])
+    if not info.get('newer'): raise RuntimeError(f'already on the latest release ({__version__})')
+    return _apply_exe(info.get('url') or EXE_URL, progress) if road == 'exe' else _apply_pip(progress)
+
+
+def exit_soon(delay: float = 1.5):
+    """Leave AFTER the HTTP answer has gone out. os._exit, not sys.exit: uvicorn runs in a
+    thread and pywebview owns the main one; a polite exit from a request handler goes nowhere."""
+    def _go():
+        time.sleep(delay)
+        logger.info('update: exiting so the new build can start')
+        os._exit(0)
+    threading.Thread(target=_go, daemon=True).start()

taskuary-0.3.2.6/taskuary/web/assets/GeneralWorkspace-D46ydeAJ.css → taskuary-0.3.2.7/taskuary/web/assets/GeneralWorkspace-BpkuvgFU.css

@@ -1 +1 @@
-.tq-aui-thread{height:100%;min-height:0;overflow:hidden;display:flex;flex-direction:column;background:#fbfaf7;color:#292824}.tq-aui-viewport{flex:1 1 auto;min-height:0;overflow-y:auto;display:flex;flex-direction:column;padding:18px;box-sizing:border-box;scrollbar-width:thin}.tq-aui-welcome{margin:auto auto 18px;max-width:560px;display:flex;align-items:flex-start;gap:10px;color:#667164}.tq-aui-welcome-title{color:#343832;font-weight:700;font-size:15px}.tq-aui-welcome-copy{color:#77766f;font-size:12.5px;margin-top:3px;line-height:1.45}.tq-aui-message{width:min(760px,92%);margin:0 auto 18px;display:grid;grid-template-columns:66px minmax(0,1fr);gap:10px;align-items:start}.tq-aui-role{padding-top:8px;color:#8b877e;font:600 9px/1.2 Cascadia Mono,Consolas,monospace;letter-spacing:.14em;text-transform:uppercase}.tq-aui-user-bubble{justify-self:start;max-width:88%;border:1px solid #dfdbd3;background:#f1eee8;border-radius:13px;padding:9px 13px;font-size:13px;line-height:1.48}.tq-aui-user-bubble p{margin:0;white-space:pre-wrap!important}.tq-aui-agent-body{min-width:0;padding:5px 3px}.tq-aui-report-action{width:min(760px,92%);margin:2px auto 14px;padding:10px 12px;border:1px dashed #d8d1c5;border-radius:11px;background:#f8f5ee;display:flex;align-items:center;gap:12px}.tq-aui-report-action>div{flex:1;min-width:0;display:flex;flex-direction:column}.tq-aui-report-action b{color:#4d514b;font-size:12px}.tq-aui-report-action span{color:#858078;font-size:10.5px}.tq-aui-progress{margin:0 0 8px;border:1px dashed #ddd7cd;border-radius:9px;color:#77766f;font-size:11.5px}.tq-aui-progress summary{cursor:pointer;padding:6px 9px;font-weight:650;color:#676b64}.tq-aui-progress>div{padding:0 9px 8px;white-space:pre-wrap;line-height:1.45}.tq-aui-tool{margin:0 0 7px;border:1px solid #ddd8cf;border-radius:9px;background:#faf8f4;overflow:hidden}.tq-aui-tool summary{min-height:31px;padding:5px 9px;display:flex;align-items:center;gap:7px;cursor:pointer;list-style:none;font-size:11.5px}.tq-aui-tool summary::-webkit-details-marker{display:none}.tq-aui-tool summary b{color:#4d514b}.tq-aui-tool summary span:not(.tq-aui-tool-dot){color:#858078;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tq-aui-tool summary em{margin-left:auto;color:#8d897f;font:9px/1.2 Cascadia Mono,Consolas,monospace;font-style:normal;text-transform:uppercase}.tq-aui-tool-dot{width:7px;height:7px;flex:0 0 7px;border-radius:50%;background:#78917a}.tq-aui-tool-running .tq-aui-tool-dot{background:#c99b42;animation:tqAuiPulse 1.2s ease-in-out infinite}.tq-aui-tool-error .tq-aui-tool-dot{background:#9a4e53}.tq-aui-tool pre{margin:0;padding:8px 10px;max-height:220px;overflow:auto;border-top:1px solid #e5e0d8;background:#22231f;color:#e8e4dc;font:10.5px/1.45 Cascadia Mono,Consolas,monospace;white-space:pre-wrap}@keyframes tqAuiPulse{50%{opacity:.3}}.tq-aui-footer{flex:0 0 auto;padding:10px 18px 8px;background:#fbfaf7;border-top:1px solid #e4e0d9}.tq-aui-composer{width:min(820px,100%);margin:0 auto;min-height:48px;display:flex;align-items:flex-end;gap:5px;padding:6px 7px;border:1px solid #d5d0c7;background:#fff;border-radius:13px;box-shadow:0 2px 8px #39352d0b}.tq-aui-input{flex:1;resize:none;border:0;outline:0;background:transparent;color:#292824;font:inherit;font-size:13px;line-height:1.45;padding:7px 5px;max-height:150px}.tq-aui-input::placeholder{color:#8f8b84}.tq-aui-send,.tq-aui-cancel{width:34px;height:34px;flex:0 0 34px;border:0;border-radius:9px;display:grid;place-items:center;cursor:pointer;color:#fff;background:#738275}.tq-aui-send:disabled{cursor:default;opacity:.4}.tq-aui-cancel{background:#9a6d65}.tq-aui-cancel:disabled{display:none}.tq-aui-hint{margin:5px auto 0;text-align:center;color:#a09b92;font:9px/1.2 Cascadia Mono,Consolas,monospace}.tq-aui-attachments{width:min(820px,100%);margin:0 auto 6px;display:flex;flex-wrap:wrap;gap:5px}@media (max-width: 700px){.tq-aui-viewport{padding-left:10px;padding-right:10px}.tq-aui-message{width:100%;grid-template-columns:1fr;gap:3px}.tq-aui-role{padding-top:0}.tq-aui-footer{padding-left:10px;padding-right:10px}}
+.tq-aui-thread{height:100%;min-height:0;overflow:hidden;display:flex;flex-direction:column;background:#fbfaf7;color:#292824}.tq-aui-viewport{flex:1 1 auto;min-height:0;overflow-y:auto;display:flex;flex-direction:column;padding:18px;box-sizing:border-box;scrollbar-width:thin}.tq-aui-welcome{margin:auto auto 18px;max-width:560px;display:flex;align-items:flex-start;gap:10px;color:#667164}.tq-aui-welcome-title{color:#343832;font-weight:700;font-size:15px}.tq-aui-welcome-copy{color:#77766f;font-size:12.5px;margin-top:3px;line-height:1.45}.tq-aui-message{width:min(760px,92%);margin:0 auto 18px;display:grid;grid-template-columns:66px minmax(0,1fr);gap:10px;align-items:start}.tq-aui-role{padding-top:8px;color:#8b877e;font:600 9px/1.2 Cascadia Mono,Consolas,monospace;letter-spacing:.14em;text-transform:uppercase}.tq-aui-user-bubble{justify-self:start;max-width:88%;border:1px solid #dfdbd3;background:#f1eee8;border-radius:13px;padding:9px 13px;font-size:13px;line-height:1.48}.tq-aui-user-bubble p{margin:0;white-space:pre-wrap!important}.tq-aui-agent-body{min-width:0;padding:5px 3px}.tq-aui-report-action{width:min(760px,92%);margin:2px auto 14px;padding:10px 12px;border:1px dashed #d8d1c5;border-radius:11px;background:#f8f5ee;display:flex;align-items:center;gap:12px}.tq-aui-report-action>div{flex:1;min-width:0;display:flex;flex-direction:column}.tq-aui-report-action b{color:#4d514b;font-size:12px}.tq-aui-report-action span{color:#858078;font-size:10.5px}.tq-aui-progress{margin:0 0 8px;border:1px dashed #ddd7cd;border-radius:9px;color:#77766f;font-size:11.5px}.tq-aui-progress summary{cursor:pointer;padding:6px 9px;font-weight:650;color:#676b64}.tq-aui-progress>div{padding:0 9px 8px;white-space:pre-wrap;line-height:1.45}.tq-aui-tool{margin:0 0 7px;border:1px solid #ddd8cf;border-radius:9px;background:#faf8f4;overflow:hidden}.tq-aui-tool summary{min-height:31px;padding:5px 9px;display:flex;align-items:center;gap:7px;cursor:pointer;list-style:none;font-size:11.5px}.tq-aui-tool summary::-webkit-details-marker{display:none}.tq-aui-tool summary b{color:#4d514b}.tq-aui-tool summary span:not(.tq-aui-tool-dot){color:#858078;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tq-aui-tool summary em{margin-left:auto;color:#8d897f;font:9px/1.2 Cascadia Mono,Consolas,monospace;font-style:normal;text-transform:uppercase}.tq-aui-tool-dot{width:7px;height:7px;flex:0 0 7px;border-radius:50%;background:#78917a}.tq-aui-tool-running .tq-aui-tool-dot{background:#c99b42;animation:tqAuiPulse 1.2s ease-in-out infinite}.tq-aui-tool-error .tq-aui-tool-dot{background:#9a4e53}.tq-aui-tool pre{margin:0;padding:8px 10px;max-height:220px;overflow:auto;border-top:1px solid #e5e0d8;background:#22231f;color:#e8e4dc;font:10.5px/1.45 Cascadia Mono,Consolas,monospace;white-space:pre-wrap}@keyframes tqAuiPulse{50%{opacity:.3}}.tq-aui-footer{flex:0 0 auto;padding:10px 18px 8px;background:#fbfaf7;border-top:1px solid #e4e0d9}.tq-aui-composer{width:min(820px,100%);margin:0 auto;min-height:48px;display:flex;align-items:flex-end;gap:5px;padding:6px 7px;border:1px solid #d5d0c7;background:#fff;border-radius:13px;box-shadow:0 2px 8px #39352d0b}.tq-aui-input{flex:1;resize:none;border:0;outline:0;background:transparent;color:#292824;font:inherit;font-size:13px;line-height:1.45;padding:7px 5px;max-height:150px}.tq-aui-input::placeholder{color:#8f8b84}.tq-aui-send,.tq-aui-cancel{width:34px;height:34px;flex:0 0 34px;border:0;border-radius:9px;display:grid;place-items:center;cursor:pointer;color:#fff;background:#738275}.tq-aui-send:disabled{cursor:default;opacity:.4}.tq-aui-cancel{background:#9a6d65}.tq-aui-cancel:disabled{display:none}.tq-aui-hint{margin:5px auto 0;text-align:center;color:#a09b92;font:9px/1.2 Cascadia Mono,Consolas,monospace}.tq-aui-attachments{width:min(820px,100%);margin:0 auto 6px;display:flex;flex-wrap:wrap;gap:5px}@media (max-width: 700px){.tq-aui-viewport{padding-left:10px;padding-right:10px}.tq-aui-message{width:100%;grid-template-columns:1fr;gap:3px}.tq-aui-role{padding-top:0}.tq-aui-footer{padding-left:10px;padding-right:10px}}@media (max-width: 600px){.tq-aui-report-action{flex-direction:column;align-items:stretch;gap:10px}}