apm-cli 0.28.0__tar.gz → 0.29.0__tar.gz

{apm_cli-0.28.0/src/apm_cli.egg-info → apm_cli-0.29.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apm-cli
-Version: 0.28.0
+Version: 0.29.0
 Summary: MCP configuration tool
 Author-email: Daniel Meppiel <user@example.com>
 License: MIT License
@@ -78,7 +78,7 @@ Think `package.json`, `requirements.txt`, or `Cargo.toml` — but for AI agent c
 
 GitHub Copilot | Claude Code | Grok Build | Cursor | OpenCode | Codex | Gemini | Windsurf | Kiro
 
-**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[Roadmap](https://github.com/orgs/microsoft/projects/2304)**
+**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)**
 
 ---
 
@@ -239,7 +239,8 @@ Use agentrc to author high-quality instructions, then package them with APM to s
 
 Created by [@danielmeppiel](https://github.com/danielmeppiel). Maintained by [@danielmeppiel](https://github.com/danielmeppiel) and [@sergio-sisternes-epam](https://github.com/sergio-sisternes-epam).
 
-- [Roadmap & Discussions](https://github.com/microsoft/apm/discussions/116)
+- [v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)
+- [Discussions](https://github.com/microsoft/apm/discussions)
 - [Contributing](CONTRIBUTING.md)
 - [AI Native Development guide](https://danielmeppiel.github.io/awesome-ai-native) — a practical learning path for AI-native development
 

{apm_cli-0.28.0 → apm_cli-0.29.0}/README.md

@@ -6,7 +6,7 @@ Think `package.json`, `requirements.txt`, or `Cargo.toml` — but for AI agent c
 
 GitHub Copilot | Claude Code | Grok Build | Cursor | OpenCode | Codex | Gemini | Windsurf | Kiro
 
-**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[Roadmap](https://github.com/orgs/microsoft/projects/2304)**
+**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)**
 
 ---
 
@@ -167,7 +167,8 @@ Use agentrc to author high-quality instructions, then package them with APM to s
 
 Created by [@danielmeppiel](https://github.com/danielmeppiel). Maintained by [@danielmeppiel](https://github.com/danielmeppiel) and [@sergio-sisternes-epam](https://github.com/sergio-sisternes-epam).
 
-- [Roadmap & Discussions](https://github.com/microsoft/apm/discussions/116)
+- [v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)
+- [Discussions](https://github.com/microsoft/apm/discussions)
 - [Contributing](CONTRIBUTING.md)
 - [AI Native Development guide](https://danielmeppiel.github.io/awesome-ai-native) — a practical learning path for AI-native development
 

{apm_cli-0.28.0 → apm_cli-0.29.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "apm-cli"
-version = "0.28.0"
+version = "0.29.0"
 description = "MCP configuration tool"
 readme = "README.md"
 requires-python = ">=3.10"

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/base.py

@@ -7,7 +7,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, ClassVar
 
-from ...models.dependency.mcp import _RESERVED_EXTRA_KEYS
+from ...models.dependency.mcp import _RESERVED_EXTRA_KEYS, TrustedEnvLiteral
 from ...utils.console import _rich_error, _rich_warning
 
 _INPUT_VAR_RE = re.compile(r"\$\{input:([^}]+)\}")
@@ -1087,7 +1087,9 @@ class MCPClientAdapter(ABC):
                 if not isinstance(raw_value, str):
                     translated[name] = raw_value
                     continue
-                if _has_env_placeholder(raw_value):
+                if isinstance(raw_value, TrustedEnvLiteral):
+                    translated[name] = raw_value
+                elif _has_env_placeholder(raw_value):
                     self._last_legacy_angle_vars.update(_extract_legacy_angle_vars(raw_value))
                     translated[name] = self._translate_env_placeholder_for_runtime(raw_value)
                     placeholder_keys.extend(

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/codex.py

@@ -12,6 +12,7 @@ from ...registry.client import SimpleRegistryClient
 from ...registry.integration import RegistryIntegration
 from ...utils.atomic_io import atomic_write_text
 from ...utils.console import _rich_success, _rich_warning
+from ...utils.net import is_loopback_host
 from ...utils.path_security import PathTraversalError
 from ._mcp_runtime_args import process_v01_value_hint_arg
 from .base import MCPClientAdapter
@@ -216,6 +217,8 @@ class CodexClientAdapter(MCPClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(
@@ -239,7 +242,8 @@ class CodexClientAdapter(MCPClientAdapter):
         # Precedence on Codex when a server publishes BOTH a remote and a stdio
         # package: prefer the stdio package (falls through to the packages branch
         # below). The remote-only branch here handles the streamable-http path
-        # and rejects SSE / non-https / empty-url remotes with explicit warnings.
+        # and rejects SSE / non-https (except loopback http) / empty-url remotes
+        # with explicit warnings.
         remotes = server_info.get("remotes", [])
         packages = server_info.get("packages", [])
         if remotes and not packages:
@@ -263,11 +267,22 @@ class CodexClientAdapter(MCPClientAdapter):
                 )
                 return None
 
-            scheme = urlparse(remote_url).scheme.lower()
-            if scheme != "https":
+            try:
+                parsed_remote = urlparse(remote_url)
+                scheme = parsed_remote.scheme.lower()
+                insecure_loopback = scheme == "http" and is_loopback_host(parsed_remote.hostname)
+            except ValueError:
+                scheme = ""
+                insecure_loopback = False
+            # Codex CLI itself accepts plain-http loopback URLs (its docs use
+            # http://localhost examples), and local dev servers rarely carry
+            # certs -- so loopback http is allowed. Any other non-https host is
+            # still rejected to avoid cleartext bearer tokens in transit.
+            if scheme != "https" and not insecure_loopback:
                 _rich_warning(
                     f"Skipping MCP server '{server_name}' for Codex CLI: remote URL "
-                    f"must use https:// (got {scheme or 'no scheme'}).",
+                    f"must use https:// (got {scheme or 'no scheme'}). "
+                    "Plain http is allowed for loopback addresses only.",
                     symbol="warning",
                 )
                 return None

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/copilot.py

@@ -1,8 +1,8 @@
 """GitHub Copilot CLI implementation of MCP client adapter.
 
-This adapter implements the Copilot CLI-specific handling of MCP server configuration,
-targeting the global ~/.copilot/mcp-config.json file as specified in the MCP installation
-architecture specification.
+This adapter implements the Copilot-specific handling of MCP server configuration.
+At project scope it targets .github/mcp.json (read by Copilot CLI); at user scope
+it targets the global ~/.copilot/mcp-config.json file.
 """
 
 import json
@@ -13,6 +13,7 @@ from typing import ClassVar
 import click
 
 from ...core.token_manager import GitHubTokenManager
+from ...models.dependency.mcp import TrustedEnvLiteral
 from ...registry.client import SimpleRegistryClient
 from ...registry.integration import RegistryIntegration
 from ...utils.console import _rich_warning
@@ -103,13 +104,23 @@ class CopilotClientAdapter(MCPClientAdapter):
         self.registry_integration = RegistryIntegration(registry_url)
 
     def get_config_path(self):
-        """Get the path to the Copilot CLI MCP configuration file.
+        """Get the path to the Copilot MCP configuration file.
+
+        At user scope returns the global Copilot CLI config so MCP servers are
+        available across all projects. At project scope returns the per-repo
+        .github/mcp.json path that Copilot CLI reads since deprecating
+        .vscode/mcp.json.
 
         Returns:
-            str: Path to ~/.copilot/mcp-config.json
+            str: Path to the MCP configuration file.
         """
-        copilot_dir = Path.home() / ".copilot"
-        return str(copilot_dir / "mcp-config.json")
+        if self.user_scope:
+            configured_home = os.environ.get("COPILOT_HOME", "").strip()
+            copilot_home = (
+                Path(configured_home).expanduser() if configured_home else Path.home() / ".copilot"
+            )
+            return str(copilot_home / "mcp-config.json")
+        return str(self.project_root / ".github" / "mcp.json")
 
     def update_config(self, config_updates):
         """Update the Copilot CLI MCP configuration.
@@ -423,6 +434,8 @@ class CopilotClientAdapter(MCPClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(
@@ -723,7 +736,9 @@ class CopilotClientAdapter(MCPClientAdapter):
                 if not isinstance(raw_value, str):
                     translated[name] = _stringify_env_literal(raw_value)
                     continue
-                if _has_env_placeholder(raw_value):
+                if isinstance(raw_value, TrustedEnvLiteral):
+                    translated[name] = raw_value
+                elif _has_env_placeholder(raw_value):
                     self._last_legacy_angle_vars.update(_extract_legacy_angle_vars(raw_value))
                     translated[name] = self._translate_env_placeholder_for_runtime(raw_value)
                     for match in _ENV_VAR_RE.finditer(translated[name]):

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/cursor.py

@@ -134,6 +134,8 @@ class CursorClientAdapter(CopilotClientAdapter):
         if raw:
             config["type"] = "stdio"
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/gemini.py

@@ -148,6 +148,8 @@ class GeminiClientAdapter(CopilotClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/kiro.py

@@ -116,6 +116,8 @@ class KiroClientAdapter(CopilotClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config: dict[str, Any] = {"command": raw["command"]}
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict[str, Any] = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.0}/src/apm_cli/adapters/client/vscode.py

@@ -277,6 +277,8 @@ class VSCodeClientAdapter(MCPClientAdapter):
                 "command": raw["command"],
                 "args": raw["args"],
             }
+            if raw.get("cwd") is not None:
+                server_config["cwd"] = raw["cwd"]
             if raw.get("env"):
                 # Translate bare ${VAR} -> ${env:VAR} so VS Code's runtime env
                 # interpolation resolves them at server-start. ${input:...}

apm_cli-0.29.0/src/apm_cli/agent_plugins/__init__.py

@@ -0,0 +1,146 @@
+"""Agent Plugins v1 contract helpers."""
+
+from .assets import AssetInventoryError, open_verified_asset
+from .constants import (
+    AGENT_PLUGINS_SCHEMA_PREFIX,
+    AGENT_PLUGINS_SITE_COMMIT,
+    AGENT_PLUGINS_SPEC_COMMIT,
+    AGENT_PLUGINS_SPEC_SHA256,
+    AGENT_PLUGINS_VERSION,
+    COM_MICROSOFT_APM_NAMESPACE,
+    COM_MICROSOFT_APM_SCHEMA_VERSION,
+    MAX_COMPONENT_ASSET_BYTES,
+    MAX_COMPONENT_ASSET_ENTRIES,
+    MCP_SCHEMA_ID,
+    MCP_SCHEMA_SHA256,
+    PLUGIN_SCHEMA_ID,
+    PLUGIN_SCHEMA_SHA256,
+    SUPPORTED_MCP_SCHEMA_IDS,
+    SUPPORTED_PLUGIN_SCHEMA_IDS,
+)
+from .errors import (
+    AgentPluginDeploymentBoundaryError,
+    AgentPluginError,
+    AgentPluginLegacyBoundaryError,
+    AgentPluginManifestAuthorityError,
+    AgentPluginManifestError,
+    NotAgentPluginError,
+    UnsupportedAgentPluginVersionError,
+)
+from .io import MAX_JSON_BYTES, read_json_document
+from .ir import (
+    AgentPlugin,
+    AgentPluginAsset,
+    AgentPluginComponents,
+    AgentPluginDetection,
+    AgentPluginDiagnostic,
+    AgentPluginExecutable,
+    AgentPluginIdentity,
+    AgentPluginMcpServer,
+    AgentPluginSkill,
+    ApmConfiguration,
+    ApmExtensionData,
+    DiagnosticSeverity,
+    FrozenJsonArray,
+    FrozenJsonObject,
+    FrozenJsonValue,
+    JsonValue,
+    McpServerType,
+    SourceProvenance,
+    thaw_frozen_json,
+)
+from .loader import (
+    admit_legacy_plugin_manifest,
+    detect_agent_plugin,
+    load_agent_plugin,
+    reject_agent_plugin_legacy_normalization,
+)
+from .validation import (
+    ValidationResult,
+    args_contain_literal_secret,
+    contains_literal_secret_fields,
+    is_agent_plugin_schema_id,
+    schema_version_from_id,
+    supports_mcp_schema_id,
+    supports_plugin_schema_id,
+    url_contains_literal_secret,
+    validate_mcp_config_document,
+    validate_mcp_config_file,
+    validate_plugin_manifest_document,
+    validate_plugin_manifest_file,
+)
+
+
+def __getattr__(name: str) -> object:
+    """Lazily expose compatibility projection without a models import cycle."""
+    if name != "project_agent_plugin_package":
+        raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+    from .projection import project_agent_plugin_package
+
+    return project_agent_plugin_package
+
+
+__all__ = [
+    "AGENT_PLUGINS_SCHEMA_PREFIX",
+    "AGENT_PLUGINS_SITE_COMMIT",
+    "AGENT_PLUGINS_SPEC_COMMIT",
+    "AGENT_PLUGINS_SPEC_SHA256",
+    "AGENT_PLUGINS_VERSION",
+    "COM_MICROSOFT_APM_NAMESPACE",
+    "COM_MICROSOFT_APM_SCHEMA_VERSION",
+    "MAX_COMPONENT_ASSET_BYTES",
+    "MAX_COMPONENT_ASSET_ENTRIES",
+    "MAX_JSON_BYTES",
+    "MCP_SCHEMA_ID",
+    "MCP_SCHEMA_SHA256",
+    "PLUGIN_SCHEMA_ID",
+    "PLUGIN_SCHEMA_SHA256",
+    "SUPPORTED_MCP_SCHEMA_IDS",
+    "SUPPORTED_PLUGIN_SCHEMA_IDS",
+    "AgentPlugin",
+    "AgentPluginAsset",
+    "AgentPluginComponents",
+    "AgentPluginDeploymentBoundaryError",
+    "AgentPluginDetection",
+    "AgentPluginDiagnostic",
+    "AgentPluginError",
+    "AgentPluginExecutable",
+    "AgentPluginIdentity",
+    "AgentPluginLegacyBoundaryError",
+    "AgentPluginManifestAuthorityError",
+    "AgentPluginManifestError",
+    "AgentPluginMcpServer",
+    "AgentPluginSkill",
+    "ApmConfiguration",
+    "ApmExtensionData",
+    "AssetInventoryError",
+    "DiagnosticSeverity",
+    "FrozenJsonArray",
+    "FrozenJsonObject",
+    "FrozenJsonValue",
+    "JsonValue",
+    "McpServerType",
+    "NotAgentPluginError",
+    "SourceProvenance",
+    "UnsupportedAgentPluginVersionError",
+    "ValidationResult",
+    "admit_legacy_plugin_manifest",
+    "args_contain_literal_secret",
+    "contains_literal_secret_fields",
+    "detect_agent_plugin",
+    "is_agent_plugin_schema_id",
+    "load_agent_plugin",
+    "open_verified_asset",
+    "project_agent_plugin_package",
+    "read_json_document",
+    "reject_agent_plugin_legacy_normalization",
+    "schema_version_from_id",
+    "supports_mcp_schema_id",
+    "supports_plugin_schema_id",
+    "thaw_frozen_json",
+    "url_contains_literal_secret",
+    "validate_mcp_config_document",
+    "validate_mcp_config_file",
+    "validate_plugin_manifest_document",
+    "validate_plugin_manifest_file",
+]