ha-mcp-dev 8.0.0.dev2233__tar.gz → 8.0.0.dev2238__tar.gz

{ha_mcp_dev-8.0.0.dev2233/src/ha_mcp_dev.egg-info → ha_mcp_dev-8.0.0.dev2238}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 8.0.0.dev2233
+Version: 8.0.0.dev2238
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Author-email: Julien <github@qc-h.net>
 License: MIT

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ha-mcp-dev"
-version = "8.0.0.dev2233"
+version = "8.0.0.dev2238"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/__main__.py

@@ -609,6 +609,25 @@ async def _cleanup_resources() -> None:
     logger.info("Server resources cleaned up")
 
 
+def _log_cleanup_result(task: "asyncio.Future[None]") -> None:
+    """Consume the cleanup task's outcome so a failure is never silent.
+
+    ``asyncio.wait`` does not retrieve results, and the timeout path
+    deliberately abandons rather than awaits (see the ``finally`` block), so
+    without this nothing observes ``cleanup_task``. An exception left
+    unretrieved this close to loop teardown surfaces only as a GC-time "Task
+    exception was never retrieved" error, which is unstructured and not
+    guaranteed to be emitted before exit. Mirrors what ``_cancel_tasks`` does
+    for the tasks it reaps. Cancellation is the expected abandoned-timeout
+    outcome and stays silent.
+    """
+    if task.cancelled():
+        return
+    exc = task.exception()
+    if exc is not None:
+        logger.warning(f"Resource cleanup raised: {exc!r}")
+
+
 async def _cancel_tasks(*tasks: asyncio.Task) -> None:
     """Cancel tasks and wait for completion, bounding the wait.
 
@@ -697,6 +716,7 @@ async def _run_with_shutdown(server_coro: Coroutine[Any, Any, Any]) -> None:
         # guard), so a hung close handshake could block shutdown past the
         # budget. A straggler is left to the runner's own task sweep.
         cleanup_task = asyncio.ensure_future(_cleanup_resources())
+        cleanup_task.add_done_callback(_log_cleanup_result)
         _done, cleanup_pending = await asyncio.wait(
             {cleanup_task}, timeout=SHUTDOWN_TIMEOUT_SECONDS
         )
@@ -1004,6 +1024,19 @@ def _get_http_runtime(default_port: int = 8086) -> tuple[str, int, str]:
     ``run_async``, any ``FASTMCP_HOST`` value in the environment is
     ignored — ``MCP_HOST`` is the only env var that affects bind host
     for ha-mcp's CLI entry points.
+
+    The ``0.0.0.0`` default is deliberate and documented: SECURITY.md
+    § "Local network is the trusted zone for standard mode" states that the
+    HTTP entrypoints bind to all interfaces so LAN peers can reach them, and
+    its Scope section excludes "LAN-peer access to standard-mode HTTP
+    endpoints".
+
+    The default ``/mcp`` path is *not* blessed the same way once the bind
+    leaves loopback. That combination is what ``_warn_if_default_path_exposed``
+    warns about, and SECURITY.md's Scope classes it under "a misconfigured
+    deployment" — meaning such reports are declined, not that the
+    configuration is endorsed. Operators on a non-loopback bind are still
+    expected to set a high-entropy ``MCP_SECRET_PATH``.
     """
 
     host = os.getenv("MCP_HOST", "0.0.0.0")
@@ -1020,7 +1053,9 @@ def _get_http_runtime(default_port: int = 8086) -> tuple[str, int, str]:
 # Default ``MCP_SECRET_PATH`` value, shared by ``_get_http_runtime`` (the
 # read-from-env fallback) and ``_warn_if_default_path_exposed`` (the
 # hardening-nudge predicate). Single source of truth so the two sites
-# can't drift.
+# can't drift. Safe on a loopback bind; on a non-loopback bind it is the
+# misconfiguration ``_warn_if_default_path_exposed`` flags, which SECURITY.md
+# declines to action without endorsing — see ``_get_http_runtime`` above.
 DEFAULT_MCP_PATH = "/mcp"
 
 # Hostname literals (not IP addresses) treated as loopback by

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/__init__.py

@@ -566,6 +566,15 @@ def register_settings_routes(
     and serve the "Open Web UI" button. Stdio transports use a separate
     side-process sidecar instead — see :mod:`ha_mcp.stdio_settings_sidecar`.
 
+    The ``RequireAuthMiddleware`` bypass is the documented posture, not an
+    oversight: SECURITY.md § "OAuth Mode — Beta Warning" states that the
+    settings UI "is **not** gated by the OAuth token", and its Scope section
+    excludes "The web settings UI not being gated by the OAuth/OIDC token".
+    OAuth and OIDC modes compensate by passing a *dedicated* secret path here
+    rather than the client-known MCP path (GHSA-mx64-982r-65vg); standard mode
+    and the add-on pass the MCP secret path, which already gates the whole
+    tool surface.
+
     Args:
         mcp: The FastMCP instance to register routes on.
         server: The HomeAssistantSmartMCPServer wrapping ``mcp``.

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/de.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "Keine ausstehenden Genehmigungen.",
     "policies.rules.title": "Gegated Tools",
     "policies.rules.empty": "Derzeit keine Tools sicherheitsgegated. Aktiviere das Tool-Gating pro Tool im Tab <a href=\"#\" data-panel-link=\"tools\">Tools</a>.",
-    "accessibility.intro": "Diese Einstellungen werden sofort angewendet und im Browser und auf dem Server gespeichert, sodass sie in jedem Modus (einschließlich stdio, bei dem die Einstellungsseite bei jeder Sitzung auf einen neuen Port wechselt) Neustarts überstehen. Die Docs-Website bietet dieselben Steuerelemente in ihrer Navigationsleiste; sie hat keinen Server und speichert pro Browser.",
+    "accessibility.intro": "Diese Einstellungen werden sofort angewendet und werden in diesem Browser und auf dem Server gespeichert, sodass sie Neustarts in jedem Modus überleben (einschließlich stdio, wo die Einstellungsseite gelegentlich auf einen neuen Port verschoben werden kann). Die Dokumentationsseite bietet dieselben Steuerelemente in ihrer Navigationsleiste; sie hat keinen Server und speichert pro Browser.",
     "accessibility.storage_blocked": "Dein Browser blockiert den Site-Speicher; Auswahlen gelten nur für diese Sitzung.",
     "accessibility.theme.title": "Design",
     "accessibility.theme.help": "Ein-Klick-Farbschemata. Automatisch, die Standardeinstellung, folgt deiner OS-Präferenz und wechselt live, wenn sie sich ändert.",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "Zusätzliche YAML-Schreib-Keys",
     "advanced.extra_yaml_write_keys.help": "Kommagetrennte Top-Level-Keys, die ha_config_set_yaml zusätzlich zu den eingebauten schreiben darf – für YAML-first-Integrationen auf dieser Installation (z. B. alert2). Keys, die die Vertrauensgrenze von Home Assistant selbst verändern, lassen sich nie hinzufügen und werden ignoriert. Erfordert Custom Component 1.2.4 oder neuer.",
     "advanced.sidecar_pin_port.label": "Einstellungs-UI-Sidecar-Port",
-    "advanced.sidecar_pin_port.help": "0 wählt bei jedem Neustart einen freien Port; 1024-65535 heftet einen bevorzugten Port an. Neustart erforderlich.",
+    "advanced.sidecar_pin_port.help": "0 wählt beim ersten Start einen freien Port und behält ihn für spätere Neustarts bei; 1024–65535 fixiert einen bevorzugten Port (greift auf einen freien zurück, falls belegt). Neustart erforderlich.",
     "advanced.enable_dev_mode.label": "Entwicklermodus",
     "advanced.enable_dev_mode.help": "⚠ Registriert versteckte Tools, die Einstellungen ändern und den laufenden Server ersetzen können. Nur für Entwicklung und Tests. Neustart erforderlich.",
     "addon.backup_hint.name": "Full-HA Snapshot-Vorschlagsebene (LLM-seitig)",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/es.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "No hay aprobaciones pendientes.",
     "policies.rules.title": "Herramientas controladas",
     "policies.rules.empty": "Ahora mismo no hay ninguna herramienta bajo control de seguridad. Activa el control por herramienta desde la pestaña <a href=\"#\" data-panel-link=\"tools\">Herramientas</a>.",
-    "accessibility.intro": "Estos ajustes se aplican de inmediato y se guardan en este navegador y en el servidor, así que sobreviven a los reinicios en todos los modos (incluido stdio, donde la página de ajustes cambia de puerto en cada sesión). El sitio de documentación ofrece los mismos controles en su barra de navegación; no tiene servidor y guarda por navegador.",
+    "accessibility.intro": "Estas configuraciones se aplican inmediatamente y se guardan en este navegador y en el servidor, por lo que sobreviven a los reinicios en todos los modos (incluido stdio, donde la página de configuración puede ocasionalmente moverse a un nuevo puerto). El sitio de documentación ofrece los mismos controles en su barra de navegación; no tiene servidor y guarda por navegador.",
     "accessibility.storage_blocked": "Tu navegador está bloqueando el almacenamiento del sitio; las opciones se aplican solo a esta sesión.",
     "accessibility.theme.title": "Tema",
     "accessibility.theme.help": "Combinaciones de color de un clic. Automático, el valor predeterminado, sigue la preferencia de tu sistema operativo y cambia en caliente cuando esta cambia.",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "Claves YAML de escritura adicionales",
     "advanced.extra_yaml_write_keys.help": "Claves de primer nivel separadas por comas que ha_config_set_yaml puede escribir además de las integradas, para integraciones basadas en YAML de esta instalación (p. ej. alert2). Las claves que redefinen la propia frontera de confianza de Home Assistant no se pueden añadir nunca y se ignoran. Requiere el componente personalizado 1.2.4 o posterior.",
     "advanced.sidecar_pin_port.label": "Puerto del sidecar de la interfaz de ajustes",
-    "advanced.sidecar_pin_port.help": "0 elige un puerto libre en cada reinicio; 1024–65535 fija un puerto preferido. Hay que reiniciar.",
+    "advanced.sidecar_pin_port.help": "0 elige un puerto libre en el primer inicio y lo mantiene para reinicios posteriores; 1024–65535 fija un puerto preferido (recurre a uno libre si está ocupado). Se requiere reiniciar.",
     "advanced.enable_dev_mode.label": "Modo de desarrollo",
     "advanced.enable_dev_mode.help": "⚠ Registra herramientas ocultas que pueden cambiar los ajustes y sustituir el servidor en ejecución. Solo para desarrollo y pruebas. Hay que reiniciar.",
     "addon.backup_hint.name": "Nivel de sugerencia de instantánea completa de HA (para el LLM)",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/fr.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "Aucune approbation en attente.",
     "policies.rules.title": "Outils contrôlés",
     "policies.rules.empty": "Aucun outil actuellement soumis à un contrôle de sécurité. Activez le contrôle par outil depuis l'onglet <a href=\"#\" data-panel-link=\"tools\">Outils</a>.",
-    "accessibility.intro": "Ces paramètres s'appliquent immédiatement et sont enregistrés dans ce navigateur et sur le serveur, ils survivent donc aux redémarrages dans tous les modes (y compris stdio, où la page des paramètres change de port à chaque session). Le site de documentation offre les mêmes contrôles dans sa barre de navigation ; il n'a pas de serveur et enregistre par navigateur.",
+    "accessibility.intro": "Ces paramètres s'appliquent immédiatement et sont enregistrés dans ce navigateur et sur le serveur, afin qu'ils survivent aux redémarrages dans tous les modes (y compris stdio, où la page des paramètres peut occasionnellement se déplacer vers un nouveau port). Le site de documentation offre les mêmes contrôles dans sa barre de navigation ; il n'a pas de serveur et enregistre par navigateur.",
     "accessibility.storage_blocked": "Votre navigateur bloque le stockage du site ; les choix s'appliquent uniquement pour cette session.",
     "accessibility.theme.title": "Thème",
     "accessibility.theme.help": "Schémas de couleurs en un clic. Auto, le réglage par défaut, suit les préférences de votre OS et bascule en direct lorsqu'elles changent.",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "Clés d'écriture YAML supplémentaires",
     "advanced.extra_yaml_write_keys.help": "Clés de premier niveau séparées par des virgules que ha_config_set_yaml peut écrire en plus des clés intégrées, pour les intégrations YAML-first sur cette installation (p. ex. alert2). Les clés qui redéfinissent la propre frontière de confiance de Home Assistant ne peuvent jamais être ajoutées et sont ignorées. Nécessite le composant personnalisé 1.2.4 ou plus récent.",
     "advanced.sidecar_pin_port.label": "Port du sidecar de l'interface des paramètres",
-    "advanced.sidecar_pin_port.help": "0 choisit un port libre à chaque redémarrage ; 1024–65535 épingle un port préféré. Redémarrage requis.",
+    "advanced.sidecar_pin_port.help": "0 choisit un port libre au premier démarrage et le conserve pour les redémarrages ultérieurs ; 1024–65535 fixe un port préféré (revient à un port libre s'il est déjà pris). Redémarrage requis.",
     "advanced.enable_dev_mode.label": "Mode développeur",
     "advanced.enable_dev_mode.help": "⚠ Enregistre des outils cachés qui peuvent modifier les paramètres et remplacer le serveur en cours d'exécution. Développement et tests uniquement. Redémarrage requis.",
     "addon.backup_hint.name": "Niveau d'indication d'instantané HA complet (côté LLM)",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/it.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "Nessuna approvazione in sospeso.",
     "policies.rules.title": "Strumenti controllati",
     "policies.rules.empty": "Al momento nessuno strumento è sottoposto a controllo di sicurezza. Attiva il controllo per singolo strumento dalla scheda <a href=\"#\" data-panel-link=\"tools\">Strumenti</a>.",
-    "accessibility.intro": "Queste impostazioni si applicano subito e vengono salvate in questo browser e sul server, quindi sopravvivono ai riavvii in tutte le modalità (compresa stdio, dove la pagina delle impostazioni cambia porta a ogni sessione). Il sito della documentazione offre gli stessi controlli nella barra di navigazione; non ha un server e salva per singolo browser.",
+    "accessibility.intro": "Queste impostazioni si applicano immediatamente e vengono salvate in questo browser e sul server, in modo che sopravvivano ai riavvii in ogni modalità (inclusa stdio, dove la pagina delle impostazioni può occasionalmente spostarsi su una nuova porta). Il sito della documentazione offre gli stessi controlli nella sua barra di navigazione; non ha un server e salva per browser.",
     "accessibility.storage_blocked": "Il tuo browser sta bloccando l'archiviazione del sito; le scelte valgono solo per questa sessione.",
     "accessibility.theme.title": "Tema",
     "accessibility.theme.help": "Combinazioni di colori con un clic. Automatico, l'impostazione predefinita, segue la preferenza del sistema operativo e cambia in tempo reale quando questa cambia.",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "Chiavi YAML scrivibili aggiuntive",
     "advanced.extra_yaml_write_keys.help": "Chiavi di primo livello separate da virgole che ha_config_set_yaml può scrivere oltre a quelle integrate, per le integrazioni di questa installazione che si configurano soprattutto in YAML (per esempio alert2). Le chiavi che ridefiniscono il confine di fiducia di Home Assistant non possono mai essere aggiunte e vengono ignorate. Richiede il componente personalizzato 1.2.4 o successivo.",
     "advanced.sidecar_pin_port.label": "Porta del sidecar dell'interfaccia delle impostazioni",
-    "advanced.sidecar_pin_port.help": "0 sceglie una porta libera a ogni riavvio; 1024–65535 fissa la porta preferita. È necessario il riavvio.",
+    "advanced.sidecar_pin_port.help": "0 seleziona una porta libera al primo avvio e la mantiene per i riavvii successivi; 1024–65535 blocca una porta preferita (ricade su una libera se occupata). Riavvio richiesto.",
     "advanced.enable_dev_mode.label": "Modalità sviluppatore",
     "advanced.enable_dev_mode.help": "⚠ Registra strumenti nascosti in grado di modificare le impostazioni e di sostituire il server in esecuzione. Solo per sviluppo e collaudo. È necessario il riavvio.",
     "addon.backup_hint.name": "Livello del suggerimento di snapshot completo di HA (rivolto all'LLM)",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/ru.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "Нет запросов, ожидающих подтверждения.",
     "policies.rules.title": "Защищённые инструменты",
     "policies.rules.empty": "Сейчас ни один инструмент не защищён политикой. Включите защиту нужного инструмента на вкладке <a href=\"#\" data-panel-link=\"tools\">Инструменты</a>.",
-    "accessibility.intro": "Эти настройки применяются сразу и сохраняются в браузере и на сервере, поэтому переживают перезапуски во всех режимах, включая stdio, где страница настроек при каждом сеансе открывается на новом порту. На сайте документации доступны такие же элементы управления, но там настройки сохраняются только в браузере.",
+    "accessibility.intro": "Эти настройки применяются немедленно и сохраняются в этом браузере и на сервере, поэтому они сохраняются при перезапусках в любом режиме (включая stdio, где страница настроек может иногда перемещаться на новый порт). Сайт документации предлагает те же элементы управления в своей панели навигации; он не имеет сервера и сохраняет настройки для каждого браузера.",
     "accessibility.storage_blocked": "Браузер блокирует локальное хранилище; выбранные параметры действуют только в текущем сеансе.",
     "accessibility.theme.title": "Тема",
     "accessibility.theme.help": "Готовые цветовые схемы. Режим «Автоматически» по умолчанию следует системной теме и переключается вместе с ней.",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "Дополнительные YAML-ключи для записи",
     "advanced.extra_yaml_write_keys.help": "Список верхнеуровневых ключей через запятую, которые ha_config_set_yaml может записывать вдобавок к встроенным – для YAML-ориентированных интеграций на этой установке (например, alert2). Ключи, меняющие саму границу доверия Home Assistant, добавить нельзя, они игнорируются. Требуется пользовательский компонент 1.2.4 или новее.",
     "advanced.sidecar_pin_port.label": "Порт sidecar интерфейса настроек",
-    "advanced.sidecar_pin_port.help": "0 выбирает свободный порт при каждом запуске; 1024–65535 закрепляет желаемый порт. Нужен перезапуск.",
+    "advanced.sidecar_pin_port.help": "0 выбирает свободный порт при первом запуске и сохраняет его для последующих перезапусков; 1024–65535 закрепляет предпочтительный порт (переключается на свободный, если занят). Требуется перезапуск.",
     "advanced.enable_dev_mode.label": "Режим разработчика",
     "advanced.enable_dev_mode.help": "⚠ Регистрирует скрытые инструменты, способные менять настройки и заменять запущенную версию сервера. Только для разработки и тестов. Нужен перезапуск.",
     "addon.backup_hint.name": "Уровень рекомендации полного снимка HA (для LLM)",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/settings_ui/locales/zh-Hans.json

@@ -63,7 +63,7 @@
     "policies.pending.empty": "暂无待审批项。",
     "policies.rules.title": "已门控工具",
     "policies.rules.empty": "当前没有工具被安全门控。请从<a href=\"#\" data-panel-link=\"tools\">工具</a>选项卡启用逐工具门控。",
-    "accessibility.intro": "这些设置立即生效，并保存在此浏览器和服务器上，因此在各种模式（包括 stdio 模式，该模式下设置页每次会话都会转移到新端口）重启后依然保留。文档站点在导航栏中提供相同的控件；它没有服务器，按浏览器保存。",
+    "accessibility.intro": "这些设置立即生效，并保存在此浏览器和服务器上，因此它们在所有模式下（包括 stdio，在 stdio 模式下，设置页面有时可能会移动到新的端口）重启后仍然有效。文档站点在其导航栏中提供相同的控件；它没有服务器，并且按浏览器保存。",
     "accessibility.storage_blocked": "您的浏览器正在阻止站点存储；选择仅对本次会话生效。",
     "accessibility.theme.title": "主题",
     "accessibility.theme.help": "一键配色方案。默认为自动，跟随您的系统偏好并在其变化时实时切换。",
@@ -420,7 +420,7 @@
     "advanced.extra_yaml_write_keys.label": "额外的 YAML 可写键",
     "advanced.extra_yaml_write_keys.help": "以逗号分隔的顶层键：除内置键外，ha_config_set_yaml 还可写入这些键，适用于本安装中以 YAML 为主的集成（例如 alert2）。重新定义 Home Assistant 自身信任边界的键始终无法添加，会被忽略。需要自定义组件 1.2.4 或更高版本。",
     "advanced.sidecar_pin_port.label": "设置界面旁路服务端口",
-    "advanced.sidecar_pin_port.help": "0 表示每次重启选择空闲端口；1024–65535 固定首选端口。需重启。",
+    "advanced.sidecar_pin_port.help": "0 会在首次启动时选择一个空闲端口，并在后续重启中保留该端口；1024–65535 会固定一个首选端口（如果被占用，则回退到空闲端口）。需要重启。",
     "advanced.enable_dev_mode.label": "开发者模式",
     "advanced.enable_dev_mode.help": "⚠ 注册可更改设置并替换运行中服务器的隐藏工具。仅用于开发和测试。需重启。",
     "addon.backup_hint.name": "完整 HA 快照建议级别（面向 LLM）",

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/tools/tools_code.py

@@ -53,8 +53,20 @@ logger = logging.getLogger(__name__)
 # boundary.
 #
 # WARNING: This is shared across all clients in the same server process.
-# In multi-user modes (OAuth, HTTP), one user's saved tools are visible to
-# all other users. Scope to per-session/user before multi-user support.
+# One client's saved tools are listable and runnable by every other client,
+# and ``save_as`` overwrites by name without an ownership check. OAuth is the
+# only mode with distinct per-user credentials for that to cross; standard,
+# OIDC and add-on modes are single-tenant already (SECURITY.md § "Standard
+# mode is single-tenant"), so every caller there shares one HA token anyway.
+#
+# That exposure is accepted design, not a pending TODO — SECURITY.md § Scope
+# excludes "Saved custom tools (code mode, off by default) visible to other
+# clients of the same server process", on the grounds that they are shared
+# scaffolding rather than per-user data, that ``run_saved`` executes with the
+# caller's own HA token (granting no access the caller lacks), and that any
+# client which can reach ha-mcp is a trusted principal (SECURITY.md § "MCP
+# clients are trusted principals"). Scoping per session/user would be a
+# feature, not a security fix.
 _saved_tools: dict[str, dict[str, str]] = {}
 
 # Tools that sandbox code must not call. Includes ``ha_manage_custom_tool``

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238}/src/ha_mcp/transport_security.py

@@ -23,6 +23,12 @@ exactly the pre-3.4.3 behaviour without giving up the protection that matters.
 Operators who front ha-mcp differently can re-enable the guard (and pin their
 own allow-lists) via ``FASTMCP_HTTP_HOST_ORIGIN_PROTECTION=true`` plus
 ``FASTMCP_HTTP_ALLOWED_HOSTS`` / ``FASTMCP_HTTP_ALLOWED_ORIGINS``.
+
+Turning the guard off is the documented posture, not an oversight: it has its
+own SECURITY.md section, § "Host/Origin validation (DNS-rebinding guard) is off
+by default", and the Scope section there excludes "DNS rebinding against the
+HTTP entrypoints" on the grounds that URL-path secrecy is the boundary and the
+local network is already the trusted zone.
 """
 
 from __future__ import annotations

{ha_mcp_dev-8.0.0.dev2233 → ha_mcp_dev-8.0.0.dev2238/src/ha_mcp_dev.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 8.0.0.dev2233
+Version: 8.0.0.dev2238
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Author-email: Julien <github@qc-h.net>
 License: MIT