dtlpymcp 0.1.11__py3-none-any.whl → 0.1.13__py3-none-any.whl

dtlpymcp/__init__.py

@@ -1,3 +1,3 @@
 from .utils.dtlpy_context import DataloopContext, MCPSource
 
-__version__ = "0.1.11"
+__version__ = "0.1.13"

dtlpymcp/utils/dtlpy_context.py

@@ -20,6 +20,8 @@ logger = logging.getLogger("dtlpymcp")
 class MCPSource(BaseModel):
     dpk_name: Optional[str] = None
     app_url: Optional[str] = None
+    dpk_version: Optional[str] = None
+    app_trusted: Optional[bool] = None
     server_url: Optional[str] = None
     app_jwt: Optional[str] = None
     tools: Optional[List[Tool]] = []
@@ -60,6 +62,7 @@ class DataloopContext:
                 sources.append(
                     {
                         "dpk_name": app.dpk_name,
+                        "dpk_version": app.dpk_version,	
                         "app_url": next(iter(app.routes.values())),
                         "server_url": None,
                         "app_jwt": None,
@@ -154,6 +157,8 @@ class DataloopContext:
                 app = apps[0]
                 logger.info(f"App: {app.name}")
                 source.app_url = next(iter(app.routes.values()))
+            dpk = dl.dpks.get(dpk_name=source.dpk_name, dpk_version=source.dpk_version).to_json()
+            source.app_trusted = dpk.get('trusted', False)
             session = requests.Session()
             response = session.get(source.app_url, headers=dl.client_api.auth)
             logger.info(f"App route URL: {response.url}")
@@ -168,14 +173,21 @@ class DataloopContext:
     def is_expired(app_jwt: str) -> bool:
         """
         Check if the APP_JWT is expired.
+
+        Note: Verification is intentionally skipped - this is only used for
+        client-side expiration checking. The server validates the JWT.
         """
         try:
-            decoded = jwt.decode(app_jwt, options={"verify_signature": False})
-            if decoded.get("exp") < time.time():
-                return True
-            return False
-        except jwt.ExpiredSignatureError:
-            return True
+            decoded = jwt.decode(
+                app_jwt,
+                options={
+                    "verify_signature": False,
+                    "verify_exp": False,
+                    "verify_aud": False,
+                    "verify_iss": False,
+                },
+            )
+            return decoded.get("exp", 0) < time.time()
         except Exception as e:
             logger.error(f"Error decoding JWT: {e}")
             return True
@@ -203,9 +215,19 @@ class DataloopContext:
     def user_info(token: str) -> dict:
         """
         Decode a JWT token and return user info.
+
+        Note: Verification is intentionally skipped - this is only used for
+        reading claims client-side. The server validates the JWT.
         """
-        decoded = jwt.decode(token, options={"verify_signature": False})
-        return decoded
+        return jwt.decode(
+            token,
+            options={
+                "verify_signature": False,
+                "verify_exp": False,
+                "verify_aud": False,
+                "verify_iss": False,
+            },
+        )
 
     async def list_source_tools(self, source: MCPSource) -> Tuple[str, List[dict], Callable]:
         """
@@ -214,7 +236,10 @@ class DataloopContext:
         if source.server_url is None:
             logger.error("DataloopContext required for DPK servers")
             raise ValueError("DataloopContext required for DPK servers")
-        headers = {"Cookie": f"JWT-APP={source.app_jwt}", "x-dl-info": f"{self.token}"}
+        if source.app_trusted:
+            headers = {"authorization": f"Bearer {self.token}", "x-dl-info": f"{self.token}"}
+        else:
+            headers = {"Cookie": f"JWT-APP={source.app_jwt}", "x-dl-info": f"{self.token}"}
         async with streamablehttp_client(source.server_url, headers=headers) as (read, write, _):
             async with ClientSession(read, write, read_timeout_seconds=timedelta(seconds=60)) as session:
                 await session.initialize()

{dtlpymcp-0.1.11.dist-info → dtlpymcp-0.1.13.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dtlpymcp
-Version: 0.1.11
+Version: 0.1.13
 Summary: STDIO MCP proxy server for Dataloop platform.
 Author-email: Your Name <your.email@example.com>
 Classifier: Programming Language :: Python :: 3.10

dtlpymcp-0.1.13.dist-info/RECORD

@@ -0,0 +1,10 @@
+dtlpymcp/__init__.py,sha256=xwXA73VWK4Kq8rahO55HjkGdKof5CT6kAK4jOWcUqRE,87
+dtlpymcp/__main__.py,sha256=ZsXN8guga8Qo-94bSvgC6u9s5gmmdyppUijb-_bCxCw,1347
+dtlpymcp/min_proxy.py,sha256=QYGoqclGNN7ZMjoLzWBLCxUm4yT2xCoLTbtdFRsqlEk,2572
+dtlpymcp/proxy.py,sha256=IzZrK6s37sXM-AM2L2m_K9AveT7uX_VSxwgrwggJYV4,6213
+dtlpymcp/utils/dtlpy_context.py,sha256=_yA-HiBbq11eZsruiATOo2F2pmAikgohMhEtyc2PZYM,13109
+dtlpymcp-0.1.13.dist-info/METADATA,sha256=s_3QEu8q6HzeEUcbf1_yhrR1BBuwKkeguvpDedZ9Qzc,2190
+dtlpymcp-0.1.13.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+dtlpymcp-0.1.13.dist-info/entry_points.txt,sha256=6hRVZNTjQevj7erwt9dAOURtPVrSrYu6uHXhAlhTaXQ,52
+dtlpymcp-0.1.13.dist-info/top_level.txt,sha256=z85v20pIEnY3cBaWgwhU3EZS4WAZRywejhIutwd-iHk,9
+dtlpymcp-0.1.13.dist-info/RECORD,,

dtlpymcp-0.1.11.dist-info/RECORD

@@ -1,10 +0,0 @@
-dtlpymcp/__init__.py,sha256=-iPfWD7k43HTz0akAm7BHONlJipmtYiMjmF1CCEj0us,87
-dtlpymcp/__main__.py,sha256=ZsXN8guga8Qo-94bSvgC6u9s5gmmdyppUijb-_bCxCw,1347
-dtlpymcp/min_proxy.py,sha256=QYGoqclGNN7ZMjoLzWBLCxUm4yT2xCoLTbtdFRsqlEk,2572
-dtlpymcp/proxy.py,sha256=IzZrK6s37sXM-AM2L2m_K9AveT7uX_VSxwgrwggJYV4,6213
-dtlpymcp/utils/dtlpy_context.py,sha256=6ad136vmk0Cstp10cAcY6YaZkUTgFzyvMlocIP6DwiE,12112
-dtlpymcp-0.1.11.dist-info/METADATA,sha256=G895DOpzSG2bf9EzmzGIIO2MJgH0RtX6W48Z_eXqnRU,2190
-dtlpymcp-0.1.11.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-dtlpymcp-0.1.11.dist-info/entry_points.txt,sha256=6hRVZNTjQevj7erwt9dAOURtPVrSrYu6uHXhAlhTaXQ,52
-dtlpymcp-0.1.11.dist-info/top_level.txt,sha256=z85v20pIEnY3cBaWgwhU3EZS4WAZRywejhIutwd-iHk,9
-dtlpymcp-0.1.11.dist-info/RECORD,,