google-cloud-support-mcp 0.1.0__tar.gz

google_cloud_support_mcp-0.1.0/.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  # Action tags move faster than anything else here, and a stale action inside a
+  # workflow that holds id-token: write is worth noticing early.
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: ci
+
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: build

google_cloud_support_mcp-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+# A newer push to the same branch makes the older run irrelevant.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: Lint and test
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up uv
+        # Pinned to an exact patch, unlike the other actions here, because
+        # astral-sh/setup-uv publishes no floating `v10` major tag — only
+        # v10.0.0 and v10.0.1. `@v10` fails to resolve and the job dies
+        # before it runs anything.
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          python-version: "3.14"
+          enable-cache: true
+
+      - name: Install
+        run: uv sync --locked --all-extras --dev
+
+      - name: Lint
+        run: uv run ruff check .
+
+      - name: Format
+        run: uv run ruff format --check .
+
+      - name: Test
+        # Integration tests are deselected by pyproject's addopts; they need
+        # live Google Cloud Support credentials and would create real cases.
+        run: uv run pytest -q
+
+      - name: Server loads through the FastMCP CLI
+        # Constitution principle VI, and the one check the test suite cannot
+        # make: the tests import the package directly, while the CLI loads
+        # server.py by path with no parent package. A relative import added to
+        # that file passes every test above and breaks `fastmcp inspect`, `run`
+        # and `dev` — which is exactly how this went unnoticed until it was
+        # found by hand.
+        run: uv run fastmcp inspect

google_cloud_support_mcp-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,292 @@
+name: Release
+
+# Two ways in.
+#
+# 1. Push a tag you set yourself — the normal path:
+#
+#        git tag v0.1.1
+#        git push origin v0.1.1
+#
+#    That is the whole release. The version is derived from the tag, so there is
+#    no version field to bump and nothing to commit first.
+#
+# 2. Re-run an existing tag from the Actions tab, for when a release failed
+#    partway and you want to retry without inventing a new version number.
+#
+# Nothing publishes on an ordinary push to main.
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Existing tag to publish or retry, e.g. v0.1.1"
+        required: true
+        type: string
+
+env:
+  # `github.ref_name` is the tag on a tag push and the branch on a manual run,
+  # so the input takes precedence and every job reads the same value.
+  RELEASE_TAG: ${{ inputs.tag || github.ref_name }}
+
+# Never let two runs for the same tag upload at once. `cancel-in-progress: false`
+# on purpose: cancelling mid-upload is how you get a half-published release.
+concurrency:
+  group: release-${{ inputs.tag || github.ref_name }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    name: Verify tag and test
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    outputs:
+      released: ${{ steps.check.outputs.released }}
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          # The version is derived from git tags, so a shallow clone would
+          # silently build 0.0.0 instead of the release.
+          fetch-depth: 0
+
+      - name: Set up uv
+        # Pinned to an exact patch, unlike the other actions here, because
+        # astral-sh/setup-uv publishes no floating `v10` major tag — only
+        # v10.0.0 and v10.0.1. `@v10` fails to resolve and the job dies
+        # before it runs anything.
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          python-version: "3.14"
+
+      - name: Tag must be a release tag
+        id: check
+        # pyproject.toml carries no version to compare against — it is derived
+        # from this tag — so the only thing to validate here is the tag itself.
+        # That the build actually produced this version is asserted in `build`.
+        run: |
+          case "$RELEASE_TAG" in
+            v[0-9]*) ;;
+            *)
+              echo "::error::'$RELEASE_TAG' is not a release tag; expected something like v0.1.1."
+              exit 1
+              ;;
+          esac
+          echo "released=${RELEASE_TAG#v}" >> "$GITHUB_OUTPUT"
+          echo "Releasing ${RELEASE_TAG#v} from ${RELEASE_TAG}"
+
+      - name: Install
+        run: uv sync --locked --all-extras --dev
+
+      - name: Lint
+        run: uv run ruff check . && uv run ruff format --check .
+
+      - name: Test
+        run: uv run pytest -q
+
+  build:
+    name: Build distributions
+    needs: verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          # Same reason as above: hatchling reads the tag to compute the version.
+          fetch-depth: 0
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v10.0.1
+        with:
+          python-version: "3.14"
+
+      - name: Build sdist and wheel
+        run: uv build
+
+      - name: Built version must be the tag
+        # Replaces the old tag-vs-pyproject comparison. With the version derived
+        # from git, the failure mode is no longer a stale string in a file — it
+        # is a checkout that could not see the tag, which yields something like
+        # 0.0.0.post7.dev0+ed6fdff. PyPI rejects local version segments, so
+        # catching it here turns a confusing upload error into a clear one.
+        run: |
+          want="${RELEASE_TAG#v}"
+          got="$(ls dist/*.whl | head -1 | sed -E 's|.*/[^-]+-([^-]+)-.*|\1|')"
+          if [ "$got" != "$want" ]; then
+            echo "::error::Built ${got} but the tag says ${want}."
+            echo "::error::Usually this means the checkout could not see tag ${RELEASE_TAG} — check fetch-depth and that the tag is pushed."
+            exit 1
+          fi
+          echo "Built ${got}, matching ${RELEASE_TAG}"
+
+      - name: Smoke-test the wheel
+        # Catches the packaging failure that matters most here. A wheel that
+        # installs but does not expose the `google-cloud-support-mcp` console
+        # script breaks `uvx google-cloud-support-mcp` for every user, and
+        # nothing in the test suite would notice — the tests import the package
+        # directly.
+        run: |
+          uv venv /tmp/smoke
+          VIRTUAL_ENV=/tmp/smoke uv pip install dist/*.whl
+          test -x /tmp/smoke/bin/google-cloud-support-mcp \
+            || { echo "::error::console script missing from the wheel"; exit 1; }
+          /tmp/smoke/bin/python -c "import google_cloud_support_mcp as m; assert callable(m.main)"
+          echo "console script and entry point present"
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  pypi:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    # Lets you require a manual approval, or restrict which tags may publish.
+    environment:
+      name: pypi
+      url: https://pypi.org/p/google-cloud-support-mcp
+    permissions:
+      # Trusted Publishing and Sigstore both need this: GitHub mints a
+      # short-lived OIDC token, PyPI verifies it against a publisher you
+      # registered, and uv signs the PEP 740 attestations with it. No API
+      # token is stored anywhere.
+      id-token: write
+    steps:
+      # v8 pairs with upload-artifact v7: it reads Content-Type and only
+      # decompresses what is actually zipped, which is what makes v7's direct
+      # uploads work. It also errors on a digest mismatch rather than warning.
+      # The majors differ because these are separate repositories, not because
+      # one is stale.
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v10.0.1
+
+      - name: Publish
+        # --trusted-publishing always: if OIDC is not configured, fail here
+        #   rather than silently falling back to a token that does not exist.
+        # --check-url: makes a retry safe. If a previous run uploaded the sdist
+        #   and then died before the wheel, uv skips what is already on the
+        #   index instead of erroring on a duplicate. This is what makes
+        #   "re-run failed jobs" a real recovery path rather than a second
+        #   failure. Attestations are uploaded by default.
+        run: |
+          uv publish \
+            --trusted-publishing always \
+            --check-url https://pypi.org/simple
+
+  github-release:
+    name: Create GitHub release
+    needs: [verify, pypi]
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          # git-cliff reads the commit range between tags, so a shallow clone
+          # would produce an empty changelog.
+          fetch-depth: 0
+
+      # v8 pairs with upload-artifact v7: it reads Content-Type and only
+      # decompresses what is actually zipped, which is what makes v7's direct
+      # uploads work. It also errors on a digest mismatch rather than warning.
+      # The majors differ because these are separate repositories, not because
+      # one is stale.
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+
+      - name: Generate changelog
+        id: changelog
+        uses: orhun/git-cliff-action@v4
+        # Deferred, not swallowed. PyPI has already published by this point and
+        # git-cliff panics rather than degrading when the GitHub API 404s or
+        # rate-limits, so stopping here would leave the package on PyPI with no
+        # release pointing at it. Instead the release is still created and the
+        # job then fails on purpose in the final step below — the run goes red,
+        # and nothing is lost.
+        continue-on-error: true
+        with:
+          # `github` renders the familiar release-note shape and, with the API
+          # reachable, adds contributors and pull-request links.
+          # Swap to `detailed` for sections grouped by Conventional Commit type
+          # (Features / Bug Fixes / Documentation) with per-commit links.
+          config: github
+          args: --latest --strip header
+        env:
+          GITHUB_REPO: ${{ github.repository }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish release
+        uses: softprops/action-gh-release@v3
+        with:
+          # Explicit because a manual re-run is not triggered by the tag itself.
+          tag_name: ${{ env.RELEASE_TAG }}
+          files: dist/*
+          # Re-running must refresh the attached files rather than fail on them.
+          overwrite_files: true
+          # A pre-release tag such as v1.0.0-rc1 should not be marked "latest".
+          prerelease: ${{ contains(env.RELEASE_TAG, '-') }}
+          # Falls back to GitHub's own generator if the step above degraded,
+          # so the release is never published with an empty body. The
+          # substitution is reported as a failure by the next step.
+          generate_release_notes: ${{ steps.changelog.outcome != 'success' }}
+          body: |
+            ${{ steps.changelog.outputs.content }}
+
+            ## Install
+
+            Run it without cloning anything:
+
+            ```bash
+            uvx google-cloud-support-mcp
+            ```
+
+            Or pin this exact release:
+
+            ```bash
+            uvx google-cloud-support-mcp@${{ needs.verify.outputs.released }}
+            ```
+
+            MCP client configuration:
+
+            ```json
+            {
+              "mcpServers": {
+                "google-cloud-support": {
+                  "command": "uvx",
+                  "args": ["google-cloud-support-mcp"],
+                  "env": {
+                    "GOOGLE_CLOUD_SUPPORT_MCP_PARENTS": "[\"projects/my-project\"]",
+                    "GOOGLE_CLOUD_SUPPORT_MCP_QUOTA_PROJECT": "my-project"
+                  }
+                }
+              }
+            }
+            ```
+
+      - name: Fail if the changelog was not generated
+        # The release exists and PyPI is published — neither is rolled back.
+        # But a run that silently swapped in generic notes would report success
+        # and nobody would know the release notes are wrong, so this makes the
+        # degradation loud instead.
+        if: steps.changelog.outcome != 'success'
+        run: |
+          echo "::error title=Changelog degraded::git-cliff failed; the release was published with GitHub's generic notes instead of the Conventional Commit changelog."
+          echo "::error::Nothing was lost — the PyPI upload and the GitHub release for ${RELEASE_TAG} both completed."
+          echo "::error::Fix the cause, then either edit the release body by hand or re-run this job."
+          exit 1

google_cloud_support_mcp-0.1.0/.gitignore

@@ -0,0 +1,35 @@
+# Python-generated files
+__pycache__/
+*.py[oc]
+build/
+dist/
+wheels/
+*.egg-info
+
+# Virtual environments
+.venv
+venv/
+
+# Tooling caches
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Local agent/editor tooling — vendored or generated, not project artifacts.
+# .specify/ is deliberately NOT listed: it carries the project constitution
+# (.specify/memory/constitution.md), which governs this repo.
+.claude/
+.codegraph/
+.cursor/
+.aider*
+.idea/
+.vscode/
+
+# Secrets
+.env
+.env.*
+
+# OS
+.DS_Store
+Thumbs.db
+*.swp

google_cloud_support_mcp-0.1.0/.python-version

@@ -0,0 +1 @@
+3.14

google_cloud_support_mcp-0.1.0/.specify/.gitignore

@@ -0,0 +1,9 @@
+# Machine-local Spec Kit state — not meant to be shared.
+# Managed by the Specify CLI; safe to edit (your changes are preserved on refresh).
+
+# Local pointer to the current feature directory. Rewritten every time you
+# switch features, so it is per-checkout state rather than something to share.
+feature.json
+
+# Per-machine extension config overrides.
+extensions/*/local-config.yml

google_cloud_support_mcp-0.1.0/.specify/init-options.json

@@ -0,0 +1,9 @@
+{
+  "ai": "claude",
+  "ai_skills": true,
+  "feature_numbering": "sequential",
+  "here": true,
+  "integration": "claude",
+  "script": "sh",
+  "speckit_version": "1.0.1"
+}

google_cloud_support_mcp-0.1.0/.specify/integration.json

@@ -0,0 +1,15 @@
+{
+  "version": "1.0.1",
+  "integration_state_schema": 1,
+  "installed_integrations": [
+    "claude"
+  ],
+  "integration_settings": {
+    "claude": {
+      "script": "sh",
+      "invoke_separator": "-"
+    }
+  },
+  "integration": "claude",
+  "default_integration": "claude"
+}

google_cloud_support_mcp-0.1.0/.specify/integrations/claude.manifest.json

@@ -0,0 +1,17 @@
+{
+  "integration": "claude",
+  "version": "1.0.1",
+  "installed_at": "2026-09-01T00:45:12.876815+00:00",
+  "files": {
+    ".claude/skills/speckit-analyze/SKILL.md": "e1f8323285ed23a9ec6b74a6436d7ebd23a3511778d5cc181bd27afa2b545427",
+    ".claude/skills/speckit-clarify/SKILL.md": "f4b3f2c95087ac2343c0b67faff67f7223d34213ca1816aa25908db5b9aff0ac",
+    ".claude/skills/speckit-constitution/SKILL.md": "a93047917a5fefeefff7aa35991109ce8f9938c4890e52206408b511bf756eb5",
+    ".claude/skills/speckit-implement/SKILL.md": "51bd89322e0258ae377ea66a6af41a159b0e1a05304d5a17ea0f9a9baa6640a9",
+    ".claude/skills/speckit-converge/SKILL.md": "65ea8b863835750931b522a9935391da887c4d188f1410113d16efe6396c2214",
+    ".claude/skills/speckit-plan/SKILL.md": "2fe3f96886e96284965c8586d14df5d226c1e796b3eb39d110c9d8231abe6417",
+    ".claude/skills/speckit-checklist/SKILL.md": "34c8c681f5472f2790d65ac29ca01e23f4f32ab6f06c9dca1b38fc89e2cfba86",
+    ".claude/skills/speckit-specify/SKILL.md": "42fe016b9183bb8fa7ce7c65e04ea8d382f7f2abfc94849aeead999247675886",
+    ".claude/skills/speckit-tasks/SKILL.md": "597853362a0a770fe967c5d56136e2db38de1aa7b97b89552db667b70ac493c1",
+    ".claude/skills/speckit-taskstoissues/SKILL.md": "76a6ec1fcc2d4f2f4ae4d1a70e59eca034fd9a3f97c5454094b023ed3da65151"
+  }
+}

google_cloud_support_mcp-0.1.0/.specify/integrations/speckit.manifest.json

@@ -0,0 +1,19 @@
+{
+  "integration": "speckit",
+  "version": "1.0.1",
+  "installed_at": "2026-09-01T00:45:12.891097+00:00",
+  "files": {
+    ".specify/scripts/bash/common.sh": "de9a49210b1a136e4e7b2bc0c16010a773bace22ef6fa19419b6bc652d50bc3c",
+    ".specify/scripts/bash/setup-plan.sh": "061cec0c6d71f8f88008b4d3d7f5bbc2bfbdb85d734d9e73fc5f07a3c60c88a6",
+    ".specify/scripts/bash/setup-tasks.sh": "4a33dd1e6c32ddc7d570f4b538572c54069192573eed0ec654d9fb826e31a4fe",
+    ".specify/scripts/bash/check-prerequisites.sh": "a7020699e6b6011aae09cffd7b20890b1321df7a12d8fe2814841ae99cba910f",
+    ".specify/scripts/bash/resolve-template.sh": "829e227096abc8bf0889889ec9f792f503ca5d395b7836a8a7eb739ee75214e7",
+    ".specify/scripts/bash/create-new-feature.sh": "fe99ea8da184380056ce8512ca5d37f67fb499ee4234835c15dcf7c4fb75451c",
+    ".specify/templates/constitution-template.md": "ce7549540fa45543cca797a150201d868e64495fdff39dc38246fb17bd4024b3",
+    ".specify/templates/checklist-template.md": "856532b3cb66171c662cc16f16b31a5856e4655a8666aad1e545bbfc7f603ca1",
+    ".specify/templates/tasks-template.md": "fc29a233f6f5a27ca31f1aa46b596af6500c627441c6e62b2bc4a1d721525842",
+    ".specify/templates/spec-template.md": "3945437fc35cd30a5b2bf7beea680337c3516826d3efa5a6b92c4a7eca1ba28e",
+    ".specify/templates/plan-template.md": "7e637502d41eccf0ca672496636365691fdca62ef37b27ec07fcb412dbfa90d4",
+    ".specify/.gitignore": "8c908410d177a1ef3d0dee16d7ad55f2ac3333df3104c4d4adee1c9b82f1dbc1"
+  }
+}

google_cloud_support_mcp-0.1.0/.specify/memory/.constitution-template.json

@@ -0,0 +1,4 @@
+{
+  "sha256": "ce7549540fa45543cca797a150201d868e64495fdff39dc38246fb17bd4024b3",
+  "source": "core"
+}