getbased-mcp 0.2.2__tar.gz → 0.2.3__tar.gz

{getbased_mcp-0.2.2 → getbased_mcp-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: getbased-mcp
-Version: 0.2.2
+Version: 0.2.3
 Summary: MCP server for querying blood work data and knowledge base from getbased
 License-Expression: GPL-3.0-only
 Requires-Python: >=3.10

{getbased_mcp-0.2.2 → getbased_mcp-0.2.3}/getbased_mcp.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: getbased-mcp
-Version: 0.2.2
+Version: 0.2.3
 Summary: MCP server for querying blood work data and knowledge base from getbased
 License-Expression: GPL-3.0-only
 Requires-Python: >=3.10

{getbased_mcp-0.2.2 → getbased_mcp-0.2.3}/getbased_mcp.egg-info/SOURCES.txt

@@ -8,4 +8,5 @@ getbased_mcp.egg-info/dependency_links.txt
 getbased_mcp.egg-info/entry_points.txt
 getbased_mcp.egg-info/requires.txt
 getbased_mcp.egg-info/top_level.txt
+tests/test_env_loader.py
 tests/test_tools.py

{getbased_mcp-0.2.2 → getbased_mcp-0.2.3}/getbased_mcp.py

@@ -21,6 +21,42 @@ import time
 import httpx
 from mcp.server.fastmcp import FastMCP
 
+
+def _maybe_load_user_env() -> None:
+    """Opt-in: load $XDG_CONFIG_HOME/getbased/env into os.environ.
+
+    Guarded by GETBASED_STACK_MANAGED=1 so existing deployments that wire env
+    explicitly (Hermes via ~/.hermes/config.yaml, hand-rolled setups) are
+    untouched. Uses setdefault — an explicit env var always wins over the file.
+    Silent on a missing file; malformed lines skipped without crashing.
+    Escape hatch: GETBASED_NO_ENV_FILE=1 disables even when managed.
+    """
+    if os.environ.get("GETBASED_STACK_MANAGED") != "1":
+        return
+    if os.environ.get("GETBASED_NO_ENV_FILE") == "1":
+        return
+    xdg = os.environ.get("XDG_CONFIG_HOME") or os.path.expanduser("~/.config")
+    path = os.path.join(xdg, "getbased", "env")
+    try:
+        with open(path, "r", encoding="utf-8") as fh:
+            lines = fh.readlines()
+    except OSError:
+        return
+    for raw in lines:
+        line = raw.strip()
+        if not line or line.startswith("#") or "=" not in line:
+            continue
+        key, _, val = line.partition("=")
+        key = key.strip()
+        val = val.strip()
+        if len(val) >= 2 and val[0] == val[-1] and val[0] in ("'", '"'):
+            val = val[1:-1]
+        if key:
+            os.environ.setdefault(key, val)
+
+
+_maybe_load_user_env()
+
 log = logging.getLogger("getbased_mcp")
 
 mcp = FastMCP("getbased")

{getbased_mcp-0.2.2 → getbased_mcp-0.2.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "getbased-mcp"
-version = "0.2.2"
+version = "0.2.3"
 description = "MCP server for querying blood work data and knowledge base from getbased"
 readme = "README.md"
 license = "GPL-3.0-only"

getbased_mcp-0.2.3/tests/test_env_loader.py

@@ -0,0 +1,162 @@
+"""Tests for _maybe_load_user_env in getbased_mcp.
+
+This is the critical guardrail for existing deployments like Hermes: without
+GETBASED_STACK_MANAGED=1, the loader MUST be a no-op — no filesystem access,
+no env mutation. Hermes doesn't set the flag and doesn't use the shared env
+file, so these tests protect its MCP behavior from any regression.
+"""
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+import pytest
+
+
+@pytest.fixture
+def env_file(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Path:
+    """Isolated XDG_CONFIG_HOME with a getbased/env file containing a
+    sentinel value. Tests decide whether the loader sees it by toggling
+    GETBASED_STACK_MANAGED / GETBASED_NO_ENV_FILE."""
+    monkeypatch.setenv("XDG_CONFIG_HOME", str(tmp_path))
+    d = tmp_path / "getbased"
+    d.mkdir()
+    path = d / "env"
+    path.write_text("GETBASED_TOKEN=from_file\nLENS_URL=http://from-file:9999\n")
+    return path
+
+
+def _load(monkeypatch: pytest.MonkeyPatch):
+    """Freshly import and return the loader function. Reload ensures we
+    don't accidentally share state between tests."""
+    import importlib
+
+    import getbased_mcp
+
+    importlib.reload(getbased_mcp)
+    return getbased_mcp._maybe_load_user_env
+
+
+def test_noop_without_managed_flag(env_file, monkeypatch):
+    """Hermes-safety contract: no flag → no read, no mutation."""
+    monkeypatch.delenv("GETBASED_STACK_MANAGED", raising=False)
+    monkeypatch.delenv("GETBASED_TOKEN", raising=False)
+    monkeypatch.delenv("LENS_URL", raising=False)
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert "GETBASED_TOKEN" not in os.environ
+    assert "LENS_URL" not in os.environ
+
+
+def test_loads_when_managed(env_file, monkeypatch):
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    monkeypatch.delenv("GETBASED_TOKEN", raising=False)
+    monkeypatch.delenv("LENS_URL", raising=False)
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert os.environ["GETBASED_TOKEN"] == "from_file"
+    assert os.environ["LENS_URL"] == "http://from-file:9999"
+
+
+def test_explicit_env_wins_over_file(env_file, monkeypatch):
+    """setdefault semantics — user/systemd-provided env must not be
+    overridden by the shared file."""
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    monkeypatch.setenv("GETBASED_TOKEN", "from_shell")
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert os.environ["GETBASED_TOKEN"] == "from_shell"
+
+
+def test_escape_hatch(env_file, monkeypatch):
+    """GETBASED_NO_ENV_FILE=1 bails even when managed — debugging/override use."""
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    monkeypatch.setenv("GETBASED_NO_ENV_FILE", "1")
+    monkeypatch.delenv("GETBASED_TOKEN", raising=False)
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert "GETBASED_TOKEN" not in os.environ
+
+
+def test_missing_file_silent(tmp_path, monkeypatch):
+    """No env file at the expected path → no error, no mutation."""
+    monkeypatch.setenv("XDG_CONFIG_HOME", str(tmp_path))
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    monkeypatch.delenv("GETBASED_TOKEN", raising=False)
+
+    loader = _load(monkeypatch)
+    loader()  # must not raise
+
+    assert "GETBASED_TOKEN" not in os.environ
+
+
+def test_malformed_lines_skipped(tmp_path, monkeypatch):
+    """A typo'd env file must not crash MCP startup."""
+    monkeypatch.setenv("XDG_CONFIG_HOME", str(tmp_path))
+    d = tmp_path / "getbased"
+    d.mkdir()
+    (d / "env").write_text(
+        "# a comment\n"
+        "\n"
+        "NO_EQUALS_SIGN\n"
+        "GOOD_VAR=ok\n"
+        "   =missing_key\n"
+    )
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    monkeypatch.delenv("GOOD_VAR", raising=False)
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert os.environ["GOOD_VAR"] == "ok"
+
+
+def test_quoted_values_unwrapped(tmp_path, monkeypatch):
+    monkeypatch.setenv("XDG_CONFIG_HOME", str(tmp_path))
+    d = tmp_path / "getbased"
+    d.mkdir()
+    (d / "env").write_text('DOUBLE="dv"\nSINGLE=\'sv\'\nBARE=bv\n')
+    monkeypatch.setenv("GETBASED_STACK_MANAGED", "1")
+    for k in ("DOUBLE", "SINGLE", "BARE"):
+        monkeypatch.delenv(k, raising=False)
+
+    loader = _load(monkeypatch)
+    loader()
+
+    assert os.environ["DOUBLE"] == "dv"
+    assert os.environ["SINGLE"] == "sv"
+    assert os.environ["BARE"] == "bv"
+
+
+def test_module_import_parity_without_flag(monkeypatch, tmp_path):
+    """Smoke: importing getbased_mcp without the managed flag must not
+    read or mutate anything related to the shared env file. This is the
+    end-to-end Hermes contract — if this ever fails, we risk regressing
+    a live deployment."""
+    monkeypatch.setenv("XDG_CONFIG_HOME", str(tmp_path))
+    d = tmp_path / "getbased"
+    d.mkdir()
+    # Would poison LENS_URL if the loader ran
+    (d / "env").write_text("LENS_URL=http://POISON:1234\n")
+
+    monkeypatch.delenv("GETBASED_STACK_MANAGED", raising=False)
+    monkeypatch.setenv("LENS_URL", "http://explicit:8322")
+    monkeypatch.setenv("GETBASED_TOKEN", "real")
+
+    import importlib
+
+    import getbased_mcp
+
+    importlib.reload(getbased_mcp)
+
+    # Explicit env must survive; poison must not have been loaded
+    assert getbased_mcp.LENS_URL == "http://explicit:8322"
+    assert "POISON" not in getbased_mcp.LENS_URL