This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixes missing tokens sub‑package that caused ModuleNotFoundError on install.
Full changelog
v1.8.11 — fixes broken v1.8.10
Upgrade if you're on v1.8.9 or v1.8.10. Both shipped with missing sub-packages in the wheel. bernstein run crashed on install with ModuleNotFoundError: bernstein.core.tokens.
Cause: .gitignore had *token* (for stray secret files). Hatchling honors .gitignore during wheel build, so the whole src/bernstein/core/tokens/ package got dropped.
Fix:
- Narrowed
.gitignoreto explicit file patterns (*.token,*_token.{json,yaml,txt},auth_token*). - Added a CI regression test: enumerates every shipped sub-package, fails the build if any match
git check-ignore. Next time this can't reach PyPI. - Added missing
tokens/__init__.py, reformattedtoken_monitor.py+image_optimizer.py, switched float asserts intest_token_breakdown.pytopytest.approx.
Tried adding a pypi-yank workflow. Reverted — PyPI API tokens are upload-only, yanking has to be manual.
Full changelog: https://github.com/chernistry/bernstein/compare/v1.8.10...v1.8.11
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About chernistry/bernstein
Deterministic multi-agent orchestrator for 18 CLI coding agents (Claude Code, Codex, Cursor, Aider, Gemini CLI, OpenAI Agents SDK, and more). MCP server mode (stdio + HTTP/SSE) exposes the orchestrator to any MCP client. Git worktree isolation per agent, HMAC-chained audit trail, cost-aware model routing via contextual bandit. ~11K monthly PyPI downloads, Apache 2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]