ha-mcp-dev 8.1.0.dev2245__tar.gz → 8.1.0.dev2247__tar.gz

{ha_mcp_dev-8.1.0.dev2245/src/ha_mcp_dev.egg-info → ha_mcp_dev-8.1.0.dev2247}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 8.1.0.dev2245
+Version: 8.1.0.dev2247
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Author-email: Julien <github@qc-h.net>
 License: MIT
@@ -24,7 +24,6 @@ Requires-Dist: httpx[socks]==0.28.1
 Requires-Dist: pydantic==2.13.4
 Requires-Dist: python-dotenv==1.2.2
 Requires-Dist: truststore==0.10.4
-Requires-Dist: websockets==17.0
 Requires-Dist: cryptography<51,>=48.0.0
 Requires-Dist: pydantic-monty==0.0.18
 Requires-Dist: tzdata>=2024.1

{ha_mcp_dev-8.1.0.dev2245 → ha_mcp_dev-8.1.0.dev2247}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ha-mcp-dev"
-version = "8.1.0.dev2245"
+version = "8.1.0.dev2247"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's
@@ -33,7 +33,18 @@ dependencies = [
     "pydantic==2.13.4",
     "python-dotenv==1.2.2",
     "truststore==0.10.4",
-    "websockets==17.0",
+    # websockets is deliberately ABSENT from this list: ha-mcp ships its own
+    # private copy (src/ha_mcp/_vendor/websockets, pinned in the vendor
+    # requirements.txt and synced by scripts/vendor_websockets.py) and never
+    # imports the shared site-packages copy. Inside Home Assistant that
+    # shared copy is unowned — ~20 integration libraries drag it in with
+    # conflicting version demands and any of their installs can replace or
+    # tear it in place (#2135/#2146); a declared dependency here would make
+    # ha-mcp PIN that contested copy, which is what forced the in-place
+    # replacements. A shared copy can still arrive transitively (fastmcp
+    # declares one), so what keeps us off it is the vendored import path,
+    # not the absence of this line — and the embedded no-stomp e2e guard is
+    # what proves no install of ours ever replaces the shared copy.
     # Range (not a hard pin) so the resolver can satisfy Home Assistant's own
     # cryptography constraint when ha-mcp is installed into the HA venv for
     # in-process embedding (HA 2026.6 pins cryptography==48.0.0, 2026.7 pins
@@ -66,6 +77,11 @@ packages = { find = { where = ["src", "."], include = ["ha_mcp*", "tests"] } }
 
 [tool.setuptools.package-data]
 ha_mcp = ["py.typed", "_pypi_marker", "settings_ui/settings.html", "settings_ui/settings.js", "settings_ui/settings.css", "settings_ui/locales/*.json", "settings_ui/locales/README.md", "resources/skills-vendor/**/*"]
+# The vendored websockets tree's non-Python files: the upstream LICENSE
+# (BSD-3 requires shipping it), the VENDORED provenance marker, and the
+# renovate-managed pin file the drift test reads.
+"ha_mcp._vendor" = ["requirements.txt"]
+"ha_mcp._vendor.websockets" = ["LICENSE", "VENDORED", "MANIFEST.sha256", "py.typed"]
 
 [tool.mypy]
 python_version = "3.13"
@@ -94,6 +110,14 @@ module = [
 ]
 ignore_missing_imports = true
 
+[[tool.mypy.overrides]]
+# Vendored websockets: upstream's typing, not ours to check. follow_imports
+# skip keeps our client code checked against Any instead of dragging the
+# vendored tree into the run.
+module = ["ha_mcp._vendor.*"]
+follow_imports = "skip"
+ignore_errors = true
+
 [[tool.mypy.overrides]]
 module = [
     "homeassistant.*",
@@ -118,6 +142,9 @@ target-version = "py313"
 line-length = 88
 extend-exclude = [
     "tests/initial_test_state",
+    # Vendored websockets — upstream's code style, not ours. Kept in sync
+    # with PATHS_IGNORE in scripts/codeql_quality_gate.py.
+    "src/ha_mcp/_vendor/websockets",
     # HA integration manifests must be strict JSON (no trailing commas);
     # ruff 0.15+ formats .json files as JSONC and inserts trailing commas
     # which makes Python's json.load() reject the file at HA startup.
@@ -244,6 +271,13 @@ dev = [
     # pins 3.14.3), so the version tested here is one a supported HA runs.
     "aiohttp>=3.13.5",
     "build>=1.2.2",
+    # Test infrastructure imports the SHARED websockets directly (the HAOS
+    # runtime harness, the image bake, wait_helpers) to talk to Home
+    # Assistant's own WebSocket API — that is test tooling driving HA, not
+    # ha-mcp code, so it does not go through the vendored copy. Declared
+    # here so the test suite never depends on it arriving transitively;
+    # it is NOT a runtime dependency (see the note in [project.dependencies]).
+    "websockets>=15.0.1",
     "docker>=7.1.0",
     "httpx2>=2.4.0",
     "mypy>=1.17.0",

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/__init__.py

@@ -0,0 +1 @@
+"""Vendored third-party libraries (see each subpackage's VENDORED marker)."""

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/requirements.txt

@@ -0,0 +1,8 @@
+# Vendored-library pins, bumped by the renovate custom manager that matches
+# this exact path (see renovate.json — no stock manager sees this file).
+#
+# A bump lands here FIRST and the tree stays stale, so the drift test in
+# tests/src/unit/test_vendored_websockets.py fails that PR on purpose:
+# run `python scripts/vendor_websockets.py` and commit the regenerated tree
+# to make it green. That red CI is the handoff, not a mistake.
+websockets==17.0.1

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/websockets/LICENSE

@@ -0,0 +1,24 @@
+Copyright (c) Aymeric Augustin and contributors
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright notice,
+      this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimer in the documentation
+      and/or other materials provided with the distribution.
+    * Neither the name of the copyright holder nor the names of its contributors
+      may be used to endorse or promote products derived from this software
+      without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/websockets/MANIFEST.sha256

@@ -0,0 +1,55 @@
+3d6a0c050d8bec52fabad502e45fb25bd02bcadbd70dea34d447b6a0ff4e6da8  LICENSE
+c7a15094e48d9870f5ca9292be2dbcf02c1236041a596c7364ecd7fb952a5a5a  VENDORED
+ce6042263ec421ae99244403a787487739dfcc025403c756e35fa3ec49be4034  __init__.py
+c2ee4ddb093c9af060cafaf68219907f8a6b7b301ed3f8bea75db7555adec987  __main__.py
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  asyncio/__init__.py
+a00be58048d15e2c6622bb6d6d0678020880f287ad03c123c6633fdfa6eaa151  asyncio/client.py
+5772fe3eb5c6f2367fe88cad23ef5fb40f893a598a5e59c8f68092d605b1b083  asyncio/connection.py
+bc13ddf7722e2f72c4d0e4b179a202223cefca886de7792687efd9868f9b1b35  asyncio/messages.py
+8147589f675cfbe913fa434414e6bfab0a3f779bda5f7e16ca844db8f39256b5  asyncio/router.py
+e97a29f917bc4aa84ab01504b6ba5cf3d7ad16e42258f3f273d833ec072b866a  asyncio/server.py
+53f2709a7e7d65143a11e7293af322cd0086fd96c0be051fd6293b85a6510b77  auth.py
+7d87f462aad6231fe224303e45675cce1e6f8cef69e99c59be613beb56d4420d  cli.py
+0e9e23f3db8b9f35ec22d65ab03b3c855d38e587d1a57e9f60956e866b840c0d  client.py
+38b88c56435ddb9ffceac07c43b0ab0b00685f2f6703438281d80b440f16511f  connection.py
+5c64efbe015d6527af355fd3ebe2e8f83c66d951f125c80a9789750cd43a7d4f  datastructures.py
+b69d3f132a907ddec260d3879b102278e1fc11df4f49016dd7c7be0ae45e4ce6  exceptions.py
+42466cc5a255965552a75ba1743e6e3c689b75bc7fd3dd46ad555f4b92d7729c  extensions/__init__.py
+24d7f2939e370bb56e3c7d103a86e2a8aa06af38c920b8deeaccf920bbce3e5e  extensions/base.py
+2005dd08663ad337dd8dab4a77a7c37d3322cce79062c9e1d3306d2fdbcfbb30  extensions/permessage_deflate.py
+4f08aa9ff6eebd089b94446e81c4fe3039a73d9ee4b7e14c5c449ed8384e4fda  frames.py
+c909cf963559c15d7f57ea4e49128d2c6feef36ef0142d61ef671c8a88dc43c3  headers.py
+b4b56e36f3400f0b7c775ba2e4a305299099313b49e82a9766f7a880b68f6dfd  http11.py
+4ff07d4d4987a1c78a310f8f36985d410007d97771031c1240d790120a882e41  imports.py
+c10e7344810d1944bfe5e28d017f42444ef1d53c0a6a92a29ab40515637d4b1b  legacy/__init__.py
+0dc41c09279578ff7725c1fcbc5584d072092fe5fe7f6dcb6740ec2696afd52a  legacy/auth.py
+e6826ead47333dd7578bc45d7b97c0da10f7578a67bfffd9eb8a514573fa1c1b  legacy/client.py
+562123a684f4f5fcf1fd9a9fd1a3460d5b510cd8d768ec3481d0ad6b72e48c57  legacy/exceptions.py
+6f4c0cc7cdd74c85d56683bad299770226ca1db4250dbeeb040ca114491a3029  legacy/framing.py
+d8dcebe40376c6f0c2e4474d3fe901de539cac069436562e8fffa1aff8efee93  legacy/handshake.py
+70e0909835a120a4269bc5161973d6ec20d9834df08e8802b1bd0b3fda1eb4d4  legacy/http.py
+d56508cc31c17b0f8d6757b086672dfd64f4c9c753c53e070dd83e226ef5cf86  legacy/protocol.py
+8529389c54ec23778c45bbb925c2388177a2f546f0d3b452ad28ed2f878cda07  legacy/server.py
+dc7b8204c2d324cc69f491dde49301aad4c5f384ac636f62b871f4cb39ee0ff4  protocol.py
+a05adb118b5ab185aff960dc9e239b0fd9c1479439aa41e9c8254b9e0c7b58c4  proxy.py
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  py.typed
+ee41092f540414ef294c1f74c0fe1f51b9336060dc6e44daee34ef762499b509  server.py
+ac9ac33522fd872dc42587353c51e3631e2b75dd6f10b0ae6b40b074588737ff  streams.py
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  sync/__init__.py
+8fd7efb0ec02cc98109da03239a558c3a893fc874f10cef42452e37aa5f3da3c  sync/client.py
+c497896596676c82c952170d83f94158bdba226bfeb768ec9e73b9cbf79c1dfe  sync/connection.py
+abc2b5bf176ba959356ef9f7cd6d49c74f5395a908592c9870e1c2eee7854269  sync/messages.py
+06a29200a35962d45688ec6897da987b27e0c9746b30d27a16b4d364b35c5cc8  sync/router.py
+7d565989a596f084a8a8570963964d6be301c6d2c26023f800b240b677201770  sync/server.py
+4ed5be9dc605bc99a2496da03bcea7804d8156c9e705d2fee07f3c91634361b8  sync/utils.py
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  trio/__init__.py
+570a49f5b6040883ccaecb17ece436aeb88d5630772e2b43a9748711f109c102  trio/client.py
+95a970258845359a980cfedeebda28f4a5de6c536c6f233cc259a8aac31c7f4b  trio/connection.py
+8280dce6b7c8344c67bf27c44d66180d3dfeb6181125dec33ebe2e8f0243dcff  trio/messages.py
+a992fdfb8e268bd48e393194dc22c13ee68237369f406a99f9f265f61569bfeb  trio/router.py
+8d1b6b7d97f7847a75690a3a7df34c37bb22696cef65586a0b58aad7f3e3d2c0  trio/server.py
+035d8d6143ce8d06a21aeb1a938de85b33c8702c618a429390024b5ed649bdc6  trio/utils.py
+ccbe0f8bfa501c919594be1c4f215abaac6030100523907a75fbcc567ed2158b  typing.py
+d9f14cc3e01b289e47547342bb0d51c7532790290d591a688315a184cdf4114e  uri.py
+59db6c876a908872eb5d40449e9dcb6ad30b253663076084adb78e16fadd5ef1  utils.py
+4c93e014e70be31b07f08d8a890bb55778fc9121db39dfc458a3559e73aef121  version.py

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/websockets/VENDORED

@@ -0,0 +1,2 @@
+websockets==17.0.1
+Vendored by scripts/vendor_websockets.py — do not edit by hand.

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/websockets/__init__.py

@@ -0,0 +1,249 @@
+from __future__ import annotations
+
+# Importing the typing module would conflict with websockets.typing.
+from typing import TYPE_CHECKING
+
+from .imports import lazy_import
+from .version import version as __version__  # noqa: F401
+
+
+__all__ = [
+    # .asyncio.client
+    "connect",
+    "unix_connect",
+    "ClientConnection",
+    # .asyncio.router
+    "route",
+    "unix_route",
+    "Router",
+    # .asyncio.server
+    "basic_auth",
+    "broadcast",
+    "serve",
+    "unix_serve",
+    "ServerConnection",
+    "Server",
+    # .client
+    "ClientProtocol",
+    # .datastructures
+    "Headers",
+    "HeadersLike",
+    "MultipleValuesError",
+    # .exceptions
+    "ConcurrencyError",
+    "ConnectionClosed",
+    "ConnectionClosedError",
+    "ConnectionClosedOK",
+    "DuplicateParameter",
+    "HeaderLineTooLong",
+    "InvalidHandshake",
+    "InvalidHeader",
+    "InvalidHeaderFormat",
+    "InvalidHeaderValue",
+    "InvalidMessage",
+    "InvalidMethod",
+    "InvalidOrigin",
+    "InvalidParameterName",
+    "InvalidParameterValue",
+    "InvalidProtocol",
+    "InvalidProxy",
+    "InvalidProxyMessage",
+    "InvalidProxyStatus",
+    "InvalidState",
+    "InvalidStatus",
+    "InvalidUpgrade",
+    "InvalidURI",
+    "NegotiationError",
+    "PayloadTooBig",
+    "ProtocolError",
+    "ProxyError",
+    "RequestLineTooLong",
+    "SecurityError",
+    "StatusLineTooLong",
+    "TooManyHeaders",
+    "WebSocketException",
+    # .frames
+    "Close",
+    "CloseCode",
+    "Frame",
+    "Opcode",
+    # .http11
+    "Request",
+    "Response",
+    # .protocol
+    "Protocol",
+    "Side",
+    "State",
+    # .server
+    "ServerProtocol",
+    # .typing
+    "Data",
+    "ExtensionName",
+    "ExtensionParameter",
+    "LoggerLike",
+    "StatusLike",
+    "Origin",
+    "Subprotocol",
+]
+
+# When type checking, import non-deprecated aliases eagerly. Else, import on demand.
+if TYPE_CHECKING:
+    from .asyncio.client import ClientConnection, connect, unix_connect
+    from .asyncio.router import Router, route, unix_route
+    from .asyncio.server import (
+        Server,
+        ServerConnection,
+        basic_auth,
+        broadcast,
+        serve,
+        unix_serve,
+    )
+    from .client import ClientProtocol
+    from .datastructures import Headers, HeadersLike, MultipleValuesError
+    from .exceptions import (
+        ConcurrencyError,
+        ConnectionClosed,
+        ConnectionClosedError,
+        ConnectionClosedOK,
+        DuplicateParameter,
+        HeaderLineTooLong,
+        InvalidHandshake,
+        InvalidHeader,
+        InvalidHeaderFormat,
+        InvalidHeaderValue,
+        InvalidMessage,
+        InvalidMethod,
+        InvalidOrigin,
+        InvalidParameterName,
+        InvalidParameterValue,
+        InvalidProtocol,
+        InvalidProxy,
+        InvalidProxyMessage,
+        InvalidProxyStatus,
+        InvalidState,
+        InvalidStatus,
+        InvalidUpgrade,
+        InvalidURI,
+        NegotiationError,
+        PayloadTooBig,
+        ProtocolError,
+        ProxyError,
+        RequestLineTooLong,
+        SecurityError,
+        StatusLineTooLong,
+        TooManyHeaders,
+        WebSocketException,
+    )
+    from .frames import Close, CloseCode, Frame, Opcode
+    from .http11 import Request, Response
+    from .protocol import Protocol, Side, State
+    from .server import ServerProtocol
+    from .typing import (
+        Data,
+        ExtensionName,
+        ExtensionParameter,
+        LoggerLike,
+        Origin,
+        StatusLike,
+        Subprotocol,
+    )
+else:
+    lazy_import(
+        globals(),
+        aliases={
+            # .asyncio.client
+            "connect": ".asyncio.client",
+            "unix_connect": ".asyncio.client",
+            "ClientConnection": ".asyncio.client",
+            # .asyncio.router
+            "route": ".asyncio.router",
+            "unix_route": ".asyncio.router",
+            "Router": ".asyncio.router",
+            # .asyncio.server
+            "basic_auth": ".asyncio.server",
+            "broadcast": ".asyncio.server",
+            "serve": ".asyncio.server",
+            "unix_serve": ".asyncio.server",
+            "ServerConnection": ".asyncio.server",
+            "Server": ".asyncio.server",
+            # .client
+            "ClientProtocol": ".client",
+            # .datastructures
+            "Headers": ".datastructures",
+            "HeadersLike": ".datastructures",
+            "MultipleValuesError": ".datastructures",
+            # .exceptions
+            "ConcurrencyError": ".exceptions",
+            "ConnectionClosed": ".exceptions",
+            "ConnectionClosedError": ".exceptions",
+            "ConnectionClosedOK": ".exceptions",
+            "DuplicateParameter": ".exceptions",
+            "HeaderLineTooLong": ".exceptions",
+            "InvalidHandshake": ".exceptions",
+            "InvalidHeader": ".exceptions",
+            "InvalidHeaderFormat": ".exceptions",
+            "InvalidHeaderValue": ".exceptions",
+            "InvalidMessage": ".exceptions",
+            "InvalidMethod": ".exceptions",
+            "InvalidOrigin": ".exceptions",
+            "InvalidParameterName": ".exceptions",
+            "InvalidParameterValue": ".exceptions",
+            "InvalidProtocol": ".exceptions",
+            "InvalidProxy": ".exceptions",
+            "InvalidProxyMessage": ".exceptions",
+            "InvalidProxyStatus": ".exceptions",
+            "InvalidState": ".exceptions",
+            "InvalidStatus": ".exceptions",
+            "InvalidUpgrade": ".exceptions",
+            "InvalidURI": ".exceptions",
+            "NegotiationError": ".exceptions",
+            "PayloadTooBig": ".exceptions",
+            "ProtocolError": ".exceptions",
+            "ProxyError": ".exceptions",
+            "RequestLineTooLong": ".exceptions",
+            "SecurityError": ".exceptions",
+            "StatusLineTooLong": ".exceptions",
+            "TooManyHeaders": ".exceptions",
+            "WebSocketException": ".exceptions",
+            # .frames
+            "Close": ".frames",
+            "CloseCode": ".frames",
+            "Frame": ".frames",
+            "Opcode": ".frames",
+            # .http11
+            "Request": ".http11",
+            "Response": ".http11",
+            # .protocol
+            "Protocol": ".protocol",
+            "Side": ".protocol",
+            "State": ".protocol",
+            # .server
+            "ServerProtocol": ".server",
+            # .typing
+            "Data": ".typing",
+            "ExtensionName": ".typing",
+            "ExtensionParameter": ".typing",
+            "LoggerLike": ".typing",
+            "Origin": ".typing",
+            "StatusLike": ".typing",
+            "Subprotocol": ".typing",
+        },
+        deprecated_aliases={
+            # deprecated in 14.0 - 2024-11-09
+            # .legacy.auth
+            "BasicAuthWebSocketServerProtocol": ".legacy.auth",
+            "basic_auth_protocol_factory": ".legacy.auth",
+            # .legacy.client
+            "WebSocketClientProtocol": ".legacy.client",
+            # .legacy.exceptions
+            "AbortHandshake": ".legacy.exceptions",
+            "InvalidStatusCode": ".legacy.exceptions",
+            "RedirectHandshake": ".legacy.exceptions",
+            "WebSocketProtocolError": ".legacy.exceptions",
+            # .legacy.protocol
+            "WebSocketCommonProtocol": ".legacy.protocol",
+            # .legacy.server
+            "WebSocketServer": ".legacy.server",
+            "WebSocketServerProtocol": ".legacy.server",
+        },
+    )

ha_mcp_dev-8.1.0.dev2247/src/ha_mcp/_vendor/websockets/__main__.py

@@ -0,0 +1,5 @@
+from .cli import main
+
+
+if __name__ == "__main__":
+    main()