ha-mcp-dev 8.7.0.dev3043__tar.gz → 8.7.0.dev3047__tar.gz

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 8.7.0.dev3043
+Version: 8.7.0.dev3047
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Keywords: mcp,home-assistant,ai,automation,smart-home
 Author: Julien
@@ -20,7 +20,7 @@ Requires-Dist: authlib>=1.6.11
 Requires-Dist: cyclopts>=4.0.0
 Requires-Dist: exceptiongroup>=1.2.2
 Requires-Dist: griffelib>=2.0.0
-Requires-Dist: httpx2>=2.5.0
+Requires-Dist: httpx2>=2.10.0
 Requires-Dist: joserfc>=1.5.0
 Requires-Dist: jsonref>=1.1.0
 Requires-Dist: jsonschema>=4.20.0

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "8.7.0.dev3043"
+version = "8.7.0.dev3047"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 requires-python = ">=3.13,<3.15"
@@ -33,7 +33,7 @@ dependencies = [
     "cyclopts>=4.0.0",
     "exceptiongroup>=1.2.2",
     "griffelib>=2.0.0",
-    "httpx2>=2.5.0",
+    "httpx2>=2.10.0",
     "joserfc>=1.5.0",
     "jsonref>=1.1.0",
     "jsonschema>=4.20.0",

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "8.7.0.dev3043"
+version = "8.7.0.dev3047"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's
@@ -36,7 +36,7 @@ dependencies = [
     "cyclopts>=4.0.0",
     "exceptiongroup>=1.2.2",
     "griffelib>=2.0.0",
-    "httpx2>=2.5.0",
+    "httpx2>=2.10.0",
     "joserfc>=1.5.0",
     "jsonref>=1.1.0",
     "jsonschema>=4.20.0",

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/src/ha_mcp/_vendor/fastmcp/MANIFEST.sha256

@@ -1,25 +1,26 @@
 43070e2d4e532684de521b885f385d0841030efa2b1a20bafb76133a5e1379c1  LICENSE
 21859d4324326a6fb383cfd827626db2278088d4659000a8569f55262309a894  REQUIRES.txt
-e12f954d5272b6d9e098942fc232a0e1993b945b0d7184b0b850df99afafcc79  VENDORED
-3cf3adee844fb112711cfb37a8974f76b7d47b678721e180ff4ae21cada26343  __init__.py
+37ed62a077baf7706de1f4818e0947a191be920c2fa146f6303d12a0b9a0a42e  VENDORED
+33578dbbbf641862000fb89e15d4313aed849c9f44540bdddae3a28d7a308531  __init__.py
 2ae9ce0d217923abf551b6f8bcf08e516529b9a6abab160bab5d8c9b7e245c3d  _compat.py
 0fe101433a655a48e5fd1dde0c75879f3a74f9092d2b935bd71fad19bcfb77a1  _install_hints.py
 a9c59fe78564360444de04484a2b0906569fb58408be3c968be3f81a5e3015a4  _warnings.py
 d0d1090ec6c6b80434d6f69d834ac018a10466834c67d119399438b8f3bd78f2  apps/__init__.py
-5bc366f21426e0bee8637c971912d7c7a0b9fb281b93e94b30f1c02951536a03  apps/app.py
+d5a7cf7be1b90a54cb2aa34b4c52f16a627365756bae2799f8a1e8bfc19e3be1  apps/app.py
 43c543658ba0dfdd7622b42c6d9c1bd18ac1b5516d6f64e984bc21f5491968cc  apps/approval.py
 ebc30d58d7be55717fdd0d2c8c3691e2d42e5e7ae7a6edca6a1aaeef06a6390e  apps/choice.py
-524a0892d82e25b29916f777fcd965663d24d88a8c8645a16dce777635d2cc03  apps/config.py
+f37ca3568e62ff272436263dba64baf712c4ee05e9c92c047c697f1fc8e6cebf  apps/config.py
 bed87b113844d5811bd107a5cb773eb007cd3e4164e8612e5352123025e0c484  apps/file_upload.py
 8b2e94be32a1e5753d06cd79af72f10f73f6959069db664f25d490f16f2450fc  apps/form.py
 28cfe9189bce13f2a36ec6c93c4229570b7fb9d1bfbdcb3c4c0dfef998a80b1f  apps/generative.py
 1f3d55a17ea1a14a11eb4f4c47ae4a23bf27180135879c4a681619c616d4c84d  cli/__init__.py
 f7e802853b93ea231afe35bf6512bb8659f6ce31f5e2d788cbec70206b73ec6c  cli/__main__.py
-0b1d648a0661951dbd14271cf269cb14e90fada2b49247f380e689e38675680e  cli/apps_dev.py
+4bd9a6ab3a2584ad11e1f77883dfb1c7c9f80be9fd0c31ce89cce16a31f55375  cli/apps_dev.py
+25706d223a4a0bf6aeee9d998b6c2cc35a43f599b26b8da10188ffd632488412  cli/apps_dev_security.py
 69c000d140b8cd9e48a0feddf08fd5a7d8735f719f7443f34cb89caeea58d29f  cli/auth.py
 c0b3e37538968d37ff03613bee536e83840c5a7bd6003fdac39b17e1f210fc15  cli/cimd.py
-1fe70ae806e363ae356a266f784e5d909a2c0f1e6e1429dbc7accbb949ecaff5  cli/cli.py
-0d2a801516155bad78baef538706428a7b35ff861817d479b51d25761f164093  cli/client.py
+f5c5f74589d41ae9d2dfb38a047f524fbcec324316c5ee22ec546140dd5820b2  cli/cli.py
+ae79984f424d4e2502e6ad4a9f30f73adc1a17ade703394f628b7fb0832f799a  cli/client.py
 e957afa2f01583177872973ad9ee3870b59353ef03aaaf716a27454c3c1be945  cli/deploy/__init__.py
 f0b119ec65bcfbadbe610b676fb3054c7dd55bd1ef8bd37325afe1f9c85e696b  cli/deploy/authentication.py
 4e8d460c536d638ed6ddf1f44e21723b5aef4df3d822a80da791f0d96bf7d50c  cli/deploy/command.py
@@ -31,15 +32,15 @@ e7b738e649d73217fc6e2f131ebed95c629f87946046647cb63e62299b51bb03  cli/deploy/sta
 e2ccacdd93ce5498809b611d628f0cd002d860eaa36376d659d4f8dab355f269  cli/discovery.py
 90d7a90e51c318ae78302431e2ebbb7193ea8089b9ade66f92693db1999b4cd3  cli/generate.py
 3064643d52a2ee08d78b9c9f859e7e6365841ddc8a4ee3cb32bab5adf86c241b  cli/install/__init__.py
-938a4bcc3cf7526ce1baab5c610dcca6463e444380a6eeb011c41245e24d4839  cli/install/claude_code.py
-c4133e8eb4a5e756077a772ea2927b8ff070bcdab5300e6a7ff31806693b97ed  cli/install/claude_desktop.py
+bed3123c8e5ef639b4aba8c12b023cd75076101e7c4ac69759fb28675ead764a  cli/install/claude_code.py
+53ccf776aee80eda7c0ade5a9e5d5e6482ef96fe76385cea302fed3969440dd3  cli/install/claude_desktop.py
 16276f0330a8762a549378892038fea1ac8ccbfbe603fbe1a239dbb4d493409b  cli/install/cursor.py
-8d26dc0765afaafeca92d0a7b4f52b16341713f0ff4328edc91e6d53d0dcadc0  cli/install/gemini_cli.py
+dfaff2c1daef9ffdbbbbbabd616ad128d26b749e1faf17d868a52d0616b8df78  cli/install/gemini_cli.py
 c033cdb08bb526c2ea5fb8f1d5574318188d6d88bdf3a549f495e03376d492a0  cli/install/goose.py
 3728ec9ce609f4d64beab73584f480e6b469e58b3a2874f33e25e74645831f44  cli/install/mcp_json.py
-5d0101298b75c3659207c44bec52776fb9572273231387e36da69e7586f9b543  cli/install/shared.py
+2a5e03919735ef98f08380a6ed9001d7a99321bbb926522954b53b553d37d887  cli/install/shared.py
 fc192e680cf06cc032ec80bfd663adbbfd80650b4a48fe4bfce5b71516c72f25  cli/install/stdio.py
-a3ebfd05cef2262d642d425a94a8d9310bfcbd9a65567bbf995dfe3dd6085393  cli/run.py
+5acfbc12c60d32a091fced0bb0750f3a4be7e9ccf246ff8b6849357831d1cbdf  cli/run.py
 be600c67653ad9248ffe5e8d35a93f466276afdcf5b1a193629217fd722f61ad  client/__init__.py
 c2ccfa385e1ac971ca62bb3411f7922b773c2ebbf717368150ae9f9849cc996b  client/_sdk_context_shim.py
 c1bb592687a240305e777178e6684d08f788a6c1559b1c4ee3086160268c934a  client/auth/__init__.py
@@ -57,7 +58,7 @@ a7fe536d6fc5dbad6a2c8d34b3b8074a0c28e7572ee69c7d816ef8fd4617f2e9  client/group.p
 01e24f9b114fd85aacd62fb99631adedb23e5293e9e72cfc9b2680035364c7a9  client/mixins/__init__.py
 a286df8775a6de31aa19ff6f26002a6f612a9ab36acf4e8629b52da44e406da4  client/mixins/prompts.py
 26c5c96f8ffa53ebf035667efde96418750eebeb016c6d79ab2f5f4fe087718e  client/mixins/resources.py
-c78ce42cd9e3496947d582c548d9852dad251407635b1f44ba2ff41ed60a0b6b  client/mixins/tools.py
+5340ddf323fdeb1e011000050f52c3abb26dc7bb957a3ef68d8a8ce0f3d65a5f  client/mixins/tools.py
 e418845c0228e016596d96d1a962f2d0ccb814f7b769ee0b08e9f158de44fe89  client/oauth_callback.py
 c3a98f99610d06c9b95fd9df0f7acefacbfc4756a9f62bbd0a64df880ccd01ca  client/progress.py
 5aa421cd60f10be7bdab46641ade22e90e41bf6a6226cb2d26814fb53ffcf406  client/roots.py
@@ -80,9 +81,9 @@ e5a5146354d214ab73d69bd32d20ea9140a41a4baa31f31936c2de68da848007  contrib/bulk_t
 c6f19249a5174d0adcdf57ab0688b51a1ec18a480e9621130e26154cfdeb2f16  contrib/bulk_tool_caller/__init__.py
 14b9a331bddba2e12bdb816424a9bdad1de247d10e0b79fbd4a98aec27104efe  contrib/bulk_tool_caller/bulk_tool_caller.py
 796edc6dd7736036cb6f13eeafe5e73d9577319364de1361c856fc322f281f11  contrib/bulk_tool_caller/example.py
-b2979e924c754bee190f5b4d960b56e2a47cd87cd8c29fae692dd07f24eaf73f  contrib/component_manager/README.md
+fd6536eb022a9fd828ee088b1bc18b55e050b15b3011d9f33ebc409968cd6624  contrib/component_manager/README.md
 9bee27be06ce8083646442ab477ef772e9a642785d5d58342e8069ef5e927fdf  contrib/component_manager/__init__.py
-c390368130792fa78bafe56820ab990351c77a20c64c7a0f2a06eff85fcfab37  contrib/component_manager/component_manager.py
+971b25b708b8dec0c43a87a30616bc507a939d9a248e954ee6f3d280b13b3ee4  contrib/component_manager/component_manager.py
 9c0b76ef099a63ba6d402770561a92ffd88e1b5b4b45c91c0647767ba5b2e0bc  contrib/component_manager/example.py
 7fa8a77bacfd92e131d6a2a163d8f3ac7eac0308f5a16a5770b5c6bcad063159  contrib/mcp_mixin/README.md
 cd914794019ec542420cb020e29ec21990e66fe9a03dd375c55bf4b51e2683b2  contrib/mcp_mixin/__init__.py
@@ -111,24 +112,24 @@ f62be5cd46be03e6f4fdaacfc5c5a6acf729516f528e56e146c0aa83a6204e61  resources/type
 ab8636d8b6e57e37ed6b8f6243f03d231bae8a0666eeb43b90be481aa1f679c1  server/auth/auth.py
 2d2ec9ec41e3e6716a2f4b214dabecf3e10a167652546bfa692570c640647263  server/auth/cimd.py
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  server/auth/handlers/__init__.py
-e52df6b15b5b66edad8e11c71bf32d8f9cacba628a1d7a9ed97e440f6a491296  server/auth/handlers/authorize.py
+bd6cc8b7e5728f65e4ec8c9ee976533bfe7d712a63d4009b672c84d1a94125b9  server/auth/handlers/authorize.py
 690754c201248ff04a5c73899d9b0b1d2911507eac7d9bd649133b8185c07002  server/auth/identity_assertion.py
 314d030761e61f91af73267efd894b6af291faa8fa1c1fa41eb15f8f0217ebed  server/auth/jwt_issuer.py
 4d4f873e248431b4e9105f67fad77952dba1b902e411eafbd8cf3db37cf7291d  server/auth/middleware.py
 482e01b4ecc8af2714eb1bc50cc7afa0bdbadab1e583171cb9aa70fa2b270af0  server/auth/oauth_proxy/__init__.py
 5f490615f239c44e861b7860fbdabc02e4a768587e9e77259b7695b2628576d3  server/auth/oauth_proxy/consent.py
 66c2b86e445bb5e930eae7ec7c495a20e752ceec57af059fd96de66ebf2fcce0  server/auth/oauth_proxy/models.py
-aa221b963ec2dc1466a4acc0fc41f440a4f1c1926fede489dd1bbc56f3f1cea0  server/auth/oauth_proxy/proxy.py
-c20a999e75dbfbd5801ccf0172127b316f8bca1807fb3ca282cadcdc0a37295e  server/auth/oauth_proxy/ui.py
+4903684b5c5b1b883079ff3f1f151d32e8383bf5755e6233b6b539b7cbaaba82  server/auth/oauth_proxy/proxy.py
+0e44df9ec0fb91a209674a1e201345d925161e509c537e996fda7bb5b0c78677  server/auth/oauth_proxy/ui.py
 a7dfed182cd72300a09136f500738cafd81960807b474fd184143a24fa0898d9  server/auth/oauth_proxy/upstream.py
-99d06bf47c740b3b42b84269058d6ee71c52fabea047aec8189ca150aa8edd2b  server/auth/oidc_proxy.py
+662eebf05ebf0cade5e9dfb63b8cba4158a0ac180a6ff75f70ec96a801daf56b  server/auth/oidc_proxy.py
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  server/auth/providers/__init__.py
 2309357e391e3ca50f368b87581c915f5da83103d6fe8b157fc3f6365ae940f6  server/auth/providers/auth0.py
 2096389558eb1eb799a5e69379dcfffcad2ee0fe7a9bb98b632871581c456cce  server/auth/providers/aws.py
 c027201a5debfd00665fda478a361ac1dcda47cd4c1501edad09ecbfed0a94c7  server/auth/providers/azure.py
 0afe32ad1950f740d1e5798444fa79a39251e1173f214cd71d1a7202d4e1b492  server/auth/providers/clerk.py
 b682ebb2419462e9bb506f2bf473d8ae33febcce4055df5dd506a4845c81e47f  server/auth/providers/debug.py
-0b86ffe4e0b1f06c040b264dbd88a44943ed9d15392419f55956503d83760642  server/auth/providers/descope.py
+565367bc78820801144af6a22e54e249644beacdb215812e88e3e0344c7e99a9  server/auth/providers/descope.py
 d98f08e8041870f3effa331b2837d0073c26079872dd34b501c0804669625442  server/auth/providers/discord.py
 df69c87adbdc2caee72185bdeaf55d19bf5308f94b2756343177556878f44ae2  server/auth/providers/github.py
 32ccc82663080f5d3e0c423e8c9bdb58b6b560291d60a17c289ad399e410e059  server/auth/providers/google.py
@@ -143,15 +144,15 @@ f858f390ad6ca87990e548cdca584cef57fc93a0d2d36b4f5353dad2c4c0f7bf  server/auth/pr
 df16f6cf532f38b87318d06d7c0f97717699614ada54fcfb53701d5281ed6cc5  server/auth/providers/supabase.py
 3da61543f26146cf2597089f17580ad4a9e5d3423e92425ecc2b1a8a6c9bceda  server/auth/providers/workos.py
 9ed8d6fec5e0ca8fdb9716cd0f80f178a0814ed34b2202770f509c1fe96305e5  server/auth/redirect_validation.py
-0a6d55566e2c33fe15c31969dd68547181205bce148486dcb6183f314abf4141  server/auth/ssrf.py
+8db12964a2f64b576d72858ad4d21aa27e5e8325101cd575762cb1dd56f01a22  server/auth/ssrf.py
 871c89e8a16ca2a3cd030b94108abb0bf15d8addab05b398f959da8445f4e6a9  server/caching.py
 38f783123395ffa153bc91af5db1ffac86eceaa249333d2991a59e057a2f4af1  server/completions.py
 542477c828645b4fd2c08bafb7fa1ee4f8721a3f07744af05d9035c8852a1554  server/context.py
-66e9338f10e07693891eaf68c5654a5a41fdec4e54a3a3a8917d3899613e662f  server/dependencies.py
+f3ad7d6f25b95f3d9ba189d1b72842df9f9ac311d6739da04d795f2c55068b6d  server/dependencies.py
 3affb1031ddcf7f6f02322075340ee46ff21f3cb74f0d3c2f48d21cdc4cd0899  server/elicitation.py
 e0497cf65d8a93849bf2873b94e18abaff2d8a9a879d24db9af22d52548bb696  server/event_store.py
-29bc8c6a594ec12a859fcf54658bedc59e7e3a507e861b3a79a72ca5d2fdb83c  server/extensions.py
-bc157f88e7854f970ba57108745eeb72c04a95fc593a102b6c8a54f5c01e8998  server/http.py
+295d07943099c96d594d17aa592bae0c3014ed751f6a2a9541bb5b724e873b85  server/extensions.py
+5c16b9f01889ef7e782276b24bffeb7c6f5fbbfe91e0fb574f1505803afb664a  server/http.py
 c939ec1886308f99257b07aaa73a4781565d5d3e170fc13b0d8b36f4735a4fda  server/lifespan.py
 9ad85391f6cdd905a7168a579afdf423bf9600d5067b09123ac201295e6c1126  server/low_level.py
 dc669c15efc3c6bdeb531a6267860c141bb86d64e49c0ee586805c4866bd0c01  server/middleware/__init__.py
@@ -162,21 +163,22 @@ d9d61213e77f496a3d73f2b5115af44732dbdf30bd5ea78d4c3c0d86abd8ad21  server/middlew
 d55654f305388914c045482ffaea32832fdfc57f17f90f558901ab422fe04cc2  server/middleware/logging.py
 f866f0fd1fe052a9835c23197ed868ac270727bec9f443d76a35d3d10cc7bdce  server/middleware/middleware.py
 54745915b9fa8e6b8202a3a0a06d821f84fe81306d185d6f943f6b4f3797a3c8  server/middleware/ping.py
-954f892d9f577e268751578436c0f4b4aac3a187e478276650480db31bd30d33  server/middleware/rate_limiting.py
+b5cfa6d7148c34b40b9c685059f5227236b210e0295bfe56d9a3da03b86de3ac  server/middleware/rate_limiting.py
 0c5f1dc9f3f0930e4a5776c2602b8d50c86d536d22e8a00b48a8b05f900663bb  server/middleware/response_limiting.py
 94bff173e12b2c3e65a657ef779f872325846d9860341624710ef82855c03240  server/middleware/timing.py
-c065a1287db24cd7662162f6f56a36500a58a9412182348046e3aff4a3750c76  server/middleware/tool_injection.py
+aefe367cf4119f62a497224bd39effb9e876a4cb15032558256e7bd749f7c1cc  server/middleware/tool_injection.py
 7dbadca2563c9c44dbd242d6f75f53df1827b5ca24e09c76a26a63c450768467  server/mixins/__init__.py
-6272edf875b7f0926b26d97f924fd4f1bd06eb80ef6f90cc18e507df7eedab94  server/mixins/lifespan.py
+46368f2ede13b030da757d4ec2a105eb2332e05c435d6e140a8caf9de4f55246  server/mixins/extensions.py
+10ccc0151a0590a6e0d1a6c611d71b6941b8942de975c094b791d201fd6f0f1e  server/mixins/lifespan.py
 52af4cd66251d312a9c2cc3dd822bf25512f2b8a39f2571dc6e7dd5184ffa56c  server/mixins/mcp_operations.py
-ff3963b066eceb0e5a81fd16fbdd0f414e11aeac73959ef7761b121a767fb939  server/mixins/transport.py
+962233287dd9c3166103ba1b4125f7aa1d7895b03111857a59681f109050249a  server/mixins/transport.py
 cd4f7cade13e4a23391117605bbbd4e9d9f66c43d949c09e4fef05ff279a5a32  server/providers/__init__.py
-adad3883f3554739df02cbda56f8fa2c50fbd0259c6cc4dd0c6c84281b2043ed  server/providers/addressing.py
-cd022ac9e2a9846c76ed95be96b136f36a1d4a9edcde1b73e62062ba43622556  server/providers/aggregate.py
-93f53dffe65b9751b73dfbb7ae2efd21c50a47392e7acf0a477f6618d2ef3a82  server/providers/base.py
-174acc648b9862c5e744f6dc0085fcb4b30578cf7e0e772af846217587b41bcb  server/providers/fastmcp_provider.py
+60c8b27855ed49b56faf1935097a5d9cda837b3ff7e3f8c7e0f7949dddef3bf9  server/providers/addressing.py
+4c47a9a72686e7a673223ec68d838b74c7208e91a302ffda7440701da73ccf58  server/providers/aggregate.py
+6f992abff4c667c8822274487de7041cee62fbfd8c6f3e1b5e3d108638f652c5  server/providers/base.py
+ef179352ecdff09a70c303773238667b1f827b6f1ea968b7074de94dadcac399  server/providers/fastmcp_provider.py
 ae7b241be3607f9702aa8ea5907f7c60fd184403df3914c8c8e69932b5956b27  server/providers/filesystem.py
-0f2e2b16740711527589a4315799c19fb2496337a71b77b9820ead3ab256a729  server/providers/filesystem_discovery.py
+f73fc9e2b36a4a8aa8cbc78819709ec41ec73a3f5dbddc4e7e7d23e7a040197c  server/providers/filesystem_discovery.py
 0f0702f2501537c34982eba9d930afde4d22638d1623ce6691198ce46f5c3d34  server/providers/local_provider/__init__.py
 5b0058ec22c9ed8b5c2b3833e7e6beb34066f73f1818df1b62741ddb369b7edf  server/providers/local_provider/decorators/__init__.py
 101c860292375904bb89f3f8e4590eb9537f232f4aab4e207ac96f9bad229241  server/providers/local_provider/decorators/prompts.py
@@ -185,20 +187,20 @@ ae7b241be3607f9702aa8ea5907f7c60fd184403df3914c8c8e69932b5956b27  server/provide
 91d662fa33ab5c71a889e5be59135dd2780758d295c616fc3b140c6e332dda34  server/providers/local_provider/local_provider.py
 11c75b6557ce98f4855c76aa0d7740df71e704d05fda8435d92f89aee4a5623e  server/providers/openapi/README.md
 9e4dd35d653c9363b7c7679b38ca3f653b53a359065507046bce94db5dfe4bd5  server/providers/openapi/__init__.py
-3eedd623727b69f35c701c7f20e5ea499eee0ed43353310a33425cb32ff04798  server/providers/openapi/components.py
+fc7dc06da9971a02819689b47c7497c8812f62b3405dd8a0a9c98dbc66e21435  server/providers/openapi/components.py
 0cb11a3c52208a4ecede5a793c13798723d3c59464617c56436d1d786d27e3c0  server/providers/openapi/provider.py
 b00f94d08ce939d3aca4fb4e9d77d34633570e505640bd7c0a3a4cfb27030b05  server/providers/openapi/routing.py
 776be4ae2a017410f3b505fe5a6ade18690f396545115ba3bf4e525f30ea3164  server/providers/prefab_payload.py
 59455808dce7fb5c90fa043ca0a1cbe7d911658f79efe92771dcc1b1109c3789  server/providers/prefab_synthesis.py
-a03d17e3298444cb16e4c1ccb079f182b184fafe7807b1d914606bf95743b701  server/providers/proxy.py
+e9e9b29800f0e39f54ecc5a4414eab30e1c846bc5cba7dce905961b8ae8b112f  server/providers/proxy.py
 6bb7641e4c222ff359a38f9617987cc64a8c3eaf04118346b1e96f8b336bc9da  server/providers/skills/__init__.py
-8845d0ceb5a62372ea24f338522998282552941c29801810448444edf85b513d  server/providers/skills/_common.py
+f91a1853484963de7508eba7091e5ba7ff59ff5e5802330d9675b9ced3d03d17  server/providers/skills/_common.py
 ce1a7b8a0adece4168f039721d3c0d196da79ae6d8d2b7835ef13733f6c510ab  server/providers/skills/claude_provider.py
 571e579ffa410d5a932dc7afeeb76717171ac927450ecd408ca7b2c99e7c5150  server/providers/skills/directory_provider.py
 a427c8444b114edb0a6bf40541dd0a3c53b8adfb59ad292a3eb785711825e145  server/providers/skills/skill_provider.py
 b759c2e9f832ff7b27a9d4347a12851e235d59f7cfa0360aba5efd57377a4adb  server/providers/skills/vendor_providers.py
-b1c5da43ebebd945011ade0432f022d0f10966850d6fb43b9530cbf67e26ca6d  server/providers/wrapped_provider.py
-13f132a0d4599ce0e221d0e4e258ea3b3db16b2ee963489574880b3c1e83f664  server/server.py
+ab36a66d437044cfd929d78b224d8c909296a968b3ef3670f0656af7202f3eb5  server/providers/wrapped_provider.py
+3377b47d29451f03d428b479c7cce7e822b180f91a04bf419c69460be8ebf9f6  server/server.py
 a50d0db0003d63db49a3ec62b18dc75e267d6e03b7165f11f02992316be4e160  server/session_scoped_event_store.py
 a172b6697b515083db1d9f2466d8c88659d37427ece0d292c26d1646c1e72e2f  server/sessions.py
 24b63d7adc0e3e7ebb5528924d9cf2e5789faad798bd39175690c8dca0742ac4  server/telemetry.py
@@ -208,7 +210,7 @@ ef58b435263324aac98f71dd08057232e2eb39abdaec2697e4f2369e98c7734a  server/transfo
 d653f84b07153d687b486a19244c4a179e8378f3fb8f34f9f2c6e8ab18ec9dad  server/transforms/prompts_as_tools.py
 35823161ae66939a64ed2d4365af0eae4fa02177907b6d2ac9bb9d1e3f3d815f  server/transforms/resources_as_tools.py
 250bd40ffdaccfd4b0df19092965d743c1a7d55ff3e6cb812a3ade85e4a5419f  server/transforms/search/__init__.py
-40329f5c2e7da5a487871caef331d9cb6bd94b3dd18ab5581e7cc63c87aafb8b  server/transforms/search/base.py
+79f72a914511606c3c4083540fc198d9af27bf119f6bae078654d85e62c61cc8  server/transforms/search/base.py
 587b7a7523796b9f56c547104a48ef52da73990fc128b775579ccc92d2373fa8  server/transforms/search/bm25.py
 b81fef10f30d792bc261e76a0f97437a596febd76b67d9b46e264c45eeda770e  server/transforms/search/regex.py
 e83d5c70c181f5145ebf4bd2fb4a808f6ebf4eb1ce9a052165a07d983045c44a  server/transforms/tool_transform.py
@@ -218,23 +220,23 @@ d66e0f39358b3d410906d0c5fb6b5b09c908ebd2bb8da61130a0a6a89dafa428  settings.py
 1918d45032f08b689ad2d7f5df63e48b777266a81d4d0991a0415d5ff04bdfe7  telemetry.py
 fd1992e098123e61b8e2697dae56bc3d6311ea118c9dbdbac0197d7ad274b126  tools/__init__.py
 2fceb041133d3d9d38b172f9d87650a6a5c9a856c11a8f0c29c35a682c1a7232  tools/base.py
-d750e73263d2cd1b1fa184476d5256086858e7495ace3f26b32048eaeae39663  tools/function_parsing.py
+6c81a2724088ed9450dadf5ec0530c8adaaeb41772348f11f3bb689a00c8fd1f  tools/function_parsing.py
 eb1f8951c3695227a91c32a9a3f52f7f68aaa1572b3ec22843b9e199774cdeaf  tools/function_tool.py
 9e7fbcfde19d838b70cf25db2cc9ffa757cc69253ff245a3d578b683db3634f5  tools/tool_transform.py
 114f6988d2f7f28911d20afa9792106f76b723e8f4f8c09625e2310b7db438a3  types.py
 fa2989f12fab5e66d73167836a695d3fe7470ea00f83fc3098f573f8b357d781  utilities/__init__.py
 492b2b02870f7ae4f4cd4d07ddc26695fcdb20fb2b0ac38c062759b53a7bb2c2  utilities/asgi_transport.py
 455378f3edd87d92de0d4724899dbfcb8cd62807703ea3c518d418d5c2545955  utilities/async_utils.py
-7b63cbc3a467c99ec262f658aec0a5e1c79514b6b77240ba6e7d86bffc67831a  utilities/auth.py
+cde0af6863c7ecaf5b43c5718d5a5186ebe83df93f4faabd484dc1b4cf5a1ae5  utilities/auth.py
 756eebcba1a9eabed3eb7f522df0ef90b0709147d46cf02e01224ead9b9e99b3  utilities/authorization.py
-a98fe36c4923efe99beddcd67677f1afe3fc56a86d262352e270141d0b208f6a  utilities/cli.py
+29dbfbef524572917aa070b3565843e817d278a676fac2c9a9ecba51c1215269  utilities/cli.py
 98b26b250be5d7b91cb531e06b86ab026615b1561264a5548ad5829d09c3d7ce  utilities/components.py
 26ad47158cd9685fed257fa096ff3d022e3cca9ff4dfc4df41fda47bfdcc8433  utilities/docstring_parsing.py
 26af5197f0c30342ec96338f37e7d0ee400674ac56e18f613de343df9b4c6022  utilities/exceptions.py
 d254480ddb82cb17eab1264cb27a06e4538980efdabc70abf4f23279f3c1c3aa  utilities/http.py
-5bd8fcffa8a384ed85bd4e251d111fd72345df1788c511611d61fdc51c40aea3  utilities/inspect.py
-eb2034d2a8a60daa08b6191420ef609e9e88a46527330d75c86e9f4645499edb  utilities/json_schema.py
-008236db5e99f0da390288f087be5fdcae34c7124c77c035ab8ad48d263d4ce2  utilities/json_schema_type.py
+aa0204571cb55806ea28484ab4bf60018f95fce4c3c28f255f7f3c3eb5e2db1b  utilities/inspect.py
+bb8649c8eae84eaf835279bfaaafb766747dcf980c6a44c7fdbc6bc6b7a5f471  utilities/json_schema.py
+d8e9daf7c4115a902e31ccf184b40ffd866eabf6ab787320753395b6adf9e54d  utilities/json_schema_type.py
 41a30eee26f03f4232b3b0ab3e88bfc925feaa4c08077c80f06a7eb8b4c5e1c1  utilities/lifespan.py
 c9734ef52ddc7185828b7a51bee16cff935cc52fef29a7e5c102d76709139790  utilities/logging.py
 91d04debaa395607f66912bbf108371543dd38703c8fc15ffaa8bfea0d8b8344  utilities/mcp_server_config/__init__.py
@@ -242,7 +244,7 @@ e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  utilities/mcp_
 3e0700699264439b4f892e4005ca983f40367b8a062e50f9e5e403c996751d6a  utilities/mcp_server_config/v1/environments/__init__.py
 7db0b50b6e63235c21c172e5210b668e2e41e141072e02afc392bc34809bdf76  utilities/mcp_server_config/v1/environments/base.py
 f042a9930897b88c18b2e4f9b6858cd047b9ce4509d74dfd3e5a1362aea82c42  utilities/mcp_server_config/v1/environments/uv.py
-81ac5609cb445ffdf0f5a4c87272925df7b01d12e9fb51fec4fe41390bd652d6  utilities/mcp_server_config/v1/mcp_server_config.py
+117b0d7366fff43b24a18086da180fe7cf82c2e5cc4fb26d2570122bd0ed5d40  utilities/mcp_server_config/v1/mcp_server_config.py
 ca60cd14e5b37299e120c7899953d3c3d6fe36d1e81e8aeef0c7345a5495c546  utilities/mcp_server_config/v1/schema.json
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  utilities/mcp_server_config/v1/sources/__init__.py
 639302c49ca80ec6b1701375cc32f4099b45e68017c53ff2a90388fb37bd6f7e  utilities/mcp_server_config/v1/sources/base.py
@@ -250,12 +252,12 @@ e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  utilities/mcp_
 99526bda0a6c8523eecb550bed72a03f815e379bca1ecaa870122a5af8e9a0ad  utilities/mime.py
 6890003fe8e02d81f2c1fe4ed7866e50ebfff06b699d7308724ceaa9f413f701  utilities/openapi/README.md
 c833f7723b65b8bf55695ab67261860ce5b21532dc6d6a3c6e887cc12e35ab83  utilities/openapi/__init__.py
-3015f816ee852d420df12d380d8b558d6e1635c12f110a210d144ce04a1b1f22  utilities/openapi/director.py
+2c1eaf1d52fa9dcd1d2472a18a90384f70f67ee5f70ec2af6184bb82d74a2484  utilities/openapi/director.py
 9eb89249d9644ba337379bbbc8140060ea6a5b642be1961d7cb214eed0cca404  utilities/openapi/formatters.py
 8521f1f6091a8cef4154db5342c017fafaf48876869153380b86f7eb741ffa8b  utilities/openapi/json_schema_converter.py
 6d833c04a3bc731a66258221e5f15826a41e265e9c80898218ae226e29f4d612  utilities/openapi/models.py
 2e58bc03dd82687ef7a843474eb65c1f644eafe2c039eb0949a61cce8b313de9  utilities/openapi/parser.py
-a3a027b8cf02e7041865b3a5d4c511f7e5b72af88df109c6b8e4f0c898b3e0a1  utilities/openapi/schemas.py
+2360dd5e73d6d0ce62a0b083c491f1dfa638b7608f6f72e37eb97b2a1e322992  utilities/openapi/schemas.py
 9db69a1b408230d652ec39d89867449d504491aeda59fbc7285a14210575b7e3  utilities/pagination.py
 634850f693e36fc0e5c877581bdb7e990bfd7541676288170c6a1d1713755d46  utilities/prefab.py
 3db58fb4f30afb73083baeb8d94c9a23d9875980f091c19592b9eff89588764c  utilities/skills.py
@@ -263,7 +265,7 @@ a3a027b8cf02e7041865b3a5d4c511f7e5b72af88df109c6b8e4f0c898b3e0a1  utilities/open
 63e6d25c67609e194c5e940602ccf0562ac1617ab33e6f5b5b05a55bfca9c31c  utilities/tests.py
 6e158212fb4a31e14b309c7c65aefee8861ac62f8edb2ee06ba359e37df92c37  utilities/timeout.py
 0b105f303612c242d5be4569b185a3e9780b9749f693ba5392ebad223b5aa0d6  utilities/token_cache.py
-aa8d018a5c09f3322184688b4626b3a72dbc1da4b17f64e6bc638a1ae2c71cdf  utilities/types.py
+546e18bbe53086f426eaff83e66441e1a1a3d0d5db9abd52e1d7d1192bc02388  utilities/types.py
 81c9e16bb563e31101c5dad2f3711994aa4dff8dc0433720899144be44eacea8  utilities/ui.py
-3ec3a6eeda40bce166793f27a109c8f132b29b4125f781cfc2de220c22568b6a  utilities/version_check.py
+e15b4687d5f807a4a8421c49f0e40d13916fdec1c12b74273964e94156350491  utilities/version_check.py
 5e19b700a340ef7fd8974571de2aa190ef1acfc609547aaa1729704bfc241ae2  utilities/versions.py

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/src/ha_mcp/_vendor/fastmcp/VENDORED

@@ -1,2 +1,2 @@
-fastmcp-slim==4.0.10
+fastmcp-slim==4.0.11
 Vendored by scripts/vendor_fastmcp.py — do not edit by hand.

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/src/ha_mcp/_vendor/fastmcp/__init__.py

@@ -32,7 +32,7 @@ from ha_mcp._vendor.fastmcp import _compat
 
 _compat.install()
 
-__version__ = "4.0.10"
+__version__ = "4.0.11"
 
 if settings.deprecation_warnings:
     warnings.simplefilter("default", FastMCPDeprecationWarning)

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/src/ha_mcp/_vendor/fastmcp/apps/app.py

@@ -95,7 +95,7 @@ def _make_resolver(app_name: str | None = None) -> Any:
 
             fmeta = get_fastmcp_meta(fn)
         except Exception:
-            pass
+            logger.debug("Failed to resolve FastMCP metadata for %r", fn, exc_info=True)
 
         if fmeta is not None:
             name: str | None = getattr(fmeta, "name", None)

{ha_mcp_dev-8.7.0.dev3043 → ha_mcp_dev-8.7.0.dev3047}/src/ha_mcp/_vendor/fastmcp/apps/config.py

@@ -90,6 +90,11 @@ class AppConfig(BaseModel):
     to render and where the tool appears.  On resources, those fields must
     be left unset (the resource itself is the UI).
 
+    `visibility` declares the intended audience; it is not a security boundary.
+    Direct MCP calls remain subject to authentication and authorization,
+    regardless of visibility. The server cannot distinguish model and app
+    callers on the same connection.
+
     All fields use ``exclude_none`` serialization so only explicitly-set
     values appear on the wire.  Aliases match the MCP Apps wire format
     (camelCase).
@@ -101,9 +106,13 @@ class AppConfig(BaseModel):
         serialization_alias="resourceUri",
         description="URI of the UI resource (typically ui:// scheme). Tools only.",
     )
+    # Audience metadata, not access control: direct tools/call remains possible.
     visibility: list[Literal["app", "model"]] | None = Field(
         default=None,
-        description="Where this tool is visible: 'app', 'model', or both. Tools only.",
+        description=(
+            "Intended audience: 'app', 'model', or both. Tools only. "
+            "Not a security boundary; direct calls use the server's authorization rules."
+        ),
     )
     csp: ResourceCSP | None = Field(
         default=None, description="Content Security Policy for the app iframe"
@@ -186,7 +195,10 @@ def app_config_to_meta_dict(app: AppConfig | dict[str, Any]) -> dict[str, Any]:
 
 
 def is_model_visible(component: FastMCPComponent) -> bool:
-    """Whether a component may be shown to, or invoked by, the model.
+    """Whether a component belongs on model-facing discovery and proxy surfaces.
+
+    This is audience filtering, not authorization. Direct MCP calls do not
+    use this predicate and cannot identify model versus app callers.
 
     Visibility is a declaration, and the MCP Apps spec puts the filtering on
     the host — so ``tools/list`` carries app-only tools and the host keeps