ha-mcp-dev 9.3.0.dev3505__tar.gz → 9.3.0.dev3511__tar.gz

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 9.3.0.dev3505
+Version: 9.3.0.dev3511
 Summary: Configure and automate Home Assistant with Claude, ChatGPT, and other AI assistants.
 Keywords: mcp,home-assistant,ai,automation,smart-home
 Author: Julien

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.3.0.dev3505"
+version = "9.3.0.dev3511"
 description = "Configure and automate Home Assistant with Claude, ChatGPT, and other AI assistants."
 readme = "README.md"
 requires-python = ">=3.14,<3.15"
@@ -121,7 +121,6 @@ disable_error_code = [
 module = [
     "tests.addon.test_addon_startup",
     "tests.addon.test_addon_structure",
-    "tests.addon.test_webhook_proxy",
     "tests.haos_image_build.build_image",
     "tests.haos_image_build.dev_addon_tree",
     "tests.src.e2e._conftest_readiness",

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.3.0.dev3505"
+version = "9.3.0.dev3511"
 description = "Configure and automate Home Assistant with Claude, ChatGPT, and other AI assistants."
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's
@@ -180,7 +180,6 @@ disable_error_code = ["import-not-found", "import-untyped"]
 module = [
     "tests.addon.test_addon_startup",
     "tests.addon.test_addon_structure",
-    "tests.addon.test_webhook_proxy",
     "tests.haos_image_build.build_image",
     "tests.haos_image_build.dev_addon_tree",
     "tests.src.e2e._conftest_readiness",

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/__init__.py

@@ -25,7 +25,7 @@ if sys.version_info < (3, 14):
 # Must be imported before anything that reaches fastmcp (``.auth`` below does),
 # because fastmcp configures rich logging at import time and dies on a rich
 # older than 13.9.4. Importing this module applies the shim. See #2186.
-from . import _rich_compat as _rich_compat
+from . import rich_compat as rich_compat
 from ._version import get_version
 
 __version__ = get_version()

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/backup_manager.py

@@ -1961,7 +1961,7 @@ def get_backup_manager(client: Any, settings: Any) -> BackupManager:
     manager (and one set of per-entity locks). Rebuilds when the
     ``settings`` object identity differs from the cached manager's —
     runtime env-var changes that reset the global settings singleton
-    (see ``config._reset_global_settings``) yield a fresh ``settings``
+    (see ``config.reset_global_settings``) yield a fresh ``settings``
     instance, which forces a manager rebuild so new settings take effect.
     Active guards, capture locks and restore pins survive that replacement.
     """

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/config.py

@@ -61,7 +61,6 @@ __all__ = [
     "Settings",
     "_coerce_advanced_override_value",
     "_read_feature_flag_override_file",
-    "_reset_global_settings",
     "_settings",
     "get_backup_setting_origin",
     "get_embedded_config_dir",
@@ -124,7 +123,7 @@ def set_embedded_connection(
     server entry inside its server worker thread, before the server is
     constructed, so the loopback URL
     and admin token reach ``Settings`` in memory instead of through ``os.environ``.
-    The values survive ``_reset_global_settings()``: the settings-UI reset+rebuild
+    The values survive ``reset_global_settings()``: the settings-UI reset+rebuild
     path re-applies them on the next ``get_global_settings()`` call.
 
     Also applies to an ALREADY-BUILT singleton: importing ``ha_mcp`` runs the
@@ -205,7 +204,7 @@ def should_emit_llm_api_metadata() -> bool:
 def _reset_embedded_connection() -> None:
     """Drop the registered embedded connection (test seam).
 
-    Sibling to :func:`_reset_global_settings`; lets suites that exercise the
+    Sibling to :func:`reset_global_settings`; lets suites that exercise the
     in-process token channel isolate state between tests. Not used in production —
     the connection is registered once per worker thread and is meant to persist.
     """
@@ -236,7 +235,7 @@ def get_global_settings() -> Settings:
 
     Applies override files at first read so web-UI edits take effect
     on the next ``get_global_settings()`` call after
-    ``_reset_global_settings()`` is called by the POST handler:
+    ``reset_global_settings()`` is called by the POST handler:
 
     - Feature flags persisted to ``<data_dir>/feature_flags.json``
     - Auto-backup settings persisted to ``<data_dir>/backup_settings.json``
@@ -256,26 +255,16 @@ def get_global_settings() -> Settings:
 
 
 def reset_global_settings() -> None:
-    """Public seam to drop the cached settings singleton.
+    """Drop the cached settings singleton so the next read rebuilds it.
 
     The in-process (embedded) server calls this at every start: a config-entry
     reload reuses the same Python process, so without an explicit reset the
     singleton built on the FIRST start would keep serving stale feature-flag /
     override values forever (the add-on gets fresh settings for free from its
-    process restart).
-    """
-    _reset_global_settings()
-
-
-def _reset_global_settings() -> None:
-    """Drop the cached settings singleton.
-
-    Test seam so suites that mutate env vars can force a re-read
-    without reaching into module-private state. Also used by the
-    feature-flag and auto-backup settings POST handlers to publish a
-    freshly edited override file value to runtime consumers
-    (``get_global_settings`` is the only documented read path; the
-    ``@with_auto_backup`` decorator reads it per tool call).
+    process restart). The settings POST handlers call it to publish a freshly
+    edited override file value to runtime consumers (``get_global_settings`` is
+    the only documented read path; the ``@with_auto_backup`` decorator reads it
+    per tool call), and tests that mutate env vars call it to force a re-read.
     """
     global _settings
     _settings = None

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/config_overrides.py

@@ -27,7 +27,7 @@ logger = logging.getLogger("ha_mcp.config")
 # INFO log so we don't spam addon logs on every Settings rebuild
 # now that the cascade-clear is gone and the file may carry truthy
 # sub-flag values long-term. Reset alongside
-# the Settings singleton in ``_reset_global_settings``.
+# the Settings singleton in ``reset_global_settings``.
 _BETA_GATE_LOGGED: set[str] = set()
 
 

ha_mcp_dev-9.3.0.dev3505/src/ha_mcp/_rich_compat.py → ha_mcp_dev-9.3.0.dev3511/src/ha_mcp/rich_compat.py

@@ -51,7 +51,8 @@ def ensure_rich_handler_compat() -> bool:
     Returns ``True`` when a shim is in place (freshly applied or already
     applied), ``False`` when none is needed or none could be applied — an
     unimportable ``rich``, an uninspectable ``__init__``, or a signature that
-    already absorbs ``**kwargs``.
+    already absorbs ``**kwargs``. Importing ``ha_mcp`` applies it once; a
+    public module so tests can re-apply it to a stand-in ``RichHandler``.
     """
     try:
         from rich.logging import RichHandler

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/__init__.py

@@ -155,7 +155,7 @@ except OSError as exc:  # pragma: no cover - packaging guard
 #   __HA_MCP_CSS__         -> settings.css contents (inside <style>)
 #   __HA_MCP_JS__          -> settings_js/ contents (inside <script>)
 #   __HA_MCP_THEME_PREFS__ -> per-request server-seeded theme prefs JSON,
-#                             substituted in _render_settings_html()
+#                             substituted in render_settings_html()
 #   __HA_MCP_I18N__        -> selected merged translation catalog JSON
 #   __HA_MCP_LANG__        -> selected locale code for the html lang attribute
 #   __HA_MCP_DIR__         -> selected catalog text direction (ltr / rtl)
@@ -190,7 +190,7 @@ for _sentinel in (
         )
 
 # CSS and JS are injected once at import; __HA_MCP_THEME_PREFS__ remains in the
-# string and is substituted per-request in _render_settings_html().
+# string and is substituted per-request in render_settings_html().
 _SETTINGS_HTML = _settings_html_template.replace(
     "__HA_MCP_CSS__", _SETTINGS_CSS
 ).replace("__HA_MCP_JS__", _SETTINGS_JS)
@@ -373,9 +373,11 @@ def _build_visibility_handlers(*, data_dir: Path) -> dict[str, Any]:
     }
 
 
-def _render_settings_html(request: Request | None = None) -> str:
-    """Substitute theme preferences and the request-selected locale.
+def render_settings_html(request: Request | None = None) -> str:
+    """Render the settings page every settings-page route serves.
 
+    Substitutes theme preferences and the request-selected locale. Public
+    because the JS behaviour tests load the served page from here.
     The ``server-prefs`` head script carries a ``data-prefs`` attribute
     with a placeholder token; request-time substitution keeps
     ``_SETTINGS_HTML`` a static import-time constant (and keeps the script
@@ -455,10 +457,10 @@ def build_settings_handlers(
     """
 
     async def _root_page(request: Request) -> HTMLResponse:
-        return HTMLResponse(_render_settings_html(request))
+        return HTMLResponse(render_settings_html(request))
 
     async def _settings_page(request: Request) -> HTMLResponse:
-        return HTMLResponse(_render_settings_html(request))
+        return HTMLResponse(render_settings_html(request))
 
     handlers: dict[str, Any] = {
         "root_page": _root_page,

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_handlers_advanced.py

@@ -21,7 +21,7 @@ from starlette.requests import Request
 from starlette.responses import JSONResponse
 
 from .._version import is_running_in_addon
-from ..config import _reset_global_settings, get_global_settings
+from ..config import get_global_settings, reset_global_settings
 from ..errors import ErrorCode, create_error_response
 from . import _persistence, _supervisor
 
@@ -594,7 +594,7 @@ async def _save_advanced_settings(
     if write_err is not None:
         return write_err
 
-    _reset_global_settings()
+    reset_global_settings()
     return JSONResponse(
         {
             "success": True,

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_handlers_backups.py

@@ -38,9 +38,9 @@ from ..backup_manager import (
 from ..backup_todo import TodoListNotLoaded
 from ..config import (
     BACKUP_OVERRIDE_FIELDS,
-    _reset_global_settings,
     get_backup_setting_origin,
     get_global_settings,
+    reset_global_settings,
 )
 from ..config_registry import SETTING_BOUNDS
 from ..errors import ErrorCode, create_error_response
@@ -557,7 +557,7 @@ def _apply_backup_config_file(clean: dict[str, Any]) -> JSONResponse:
     # File-mode auto-backup settings take effect immediately on the next
     # ``get_global_settings()`` read — no restart needed, hence
     # ``restart_required=False``.
-    _reset_global_settings()
+    reset_global_settings()
     return JSONResponse(
         {"success": True, "applied": clean, "mode": "file", "restart_required": False}
     )

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_handlers_server.py

@@ -28,7 +28,7 @@ from starlette.requests import Request
 from starlette.responses import JSONResponse
 
 from .._version import get_version, is_embedded, is_running_in_addon
-from ..config import _reset_global_settings, get_global_settings
+from ..config import get_global_settings, reset_global_settings
 from ..errors import ErrorCode, create_error_response
 from . import _persistence, _supervisor
 
@@ -833,7 +833,7 @@ async def _save_feature_flags(
     # Publish the change so the same process picks it up on the next
     # ``get_global_settings()`` call. ``restart_required=True`` because
     # feature flags gate tool registration / transforms at startup.
-    _reset_global_settings()
+    reset_global_settings()
     return JSONResponse(
         {
             "success": True,

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_i18n.py

@@ -14,7 +14,7 @@ from collections import Counter
 from pathlib import Path
 from typing import Any
 
-from . import _locale_policy
+from . import locale_policy
 
 _LOGGER = logging.getLogger(__name__)
 
@@ -328,11 +328,11 @@ def load_catalogs(
             catalogs[locale] = _load_catalog_file(
                 path,
                 best_effort_locale=(
-                    locale if _locale_policy.is_best_effort_locale(locale) else None
+                    locale if locale_policy.is_best_effort_locale(locale) else None
                 ),
             )
         except (ImportError, ValueError) as exc:
-            if not _locale_policy.is_best_effort_locale(locale):
+            if not locale_policy.is_best_effort_locale(locale):
                 raise
             _warn_best_effort_catalog(locale, path, exc)
 
@@ -344,7 +344,7 @@ def load_catalogs(
     strict_catalogs = {
         locale: catalog
         for locale, catalog in catalogs.items()
-        if not _locale_policy.is_best_effort_locale(locale)
+        if not locale_policy.is_best_effort_locale(locale)
     }
     _validate_placeholder_parity(strict_catalogs)
     _validate_inline_markup(strict_catalogs)

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_persistence.py

@@ -344,7 +344,7 @@ def _get_backup_settings_override_path() -> Path:
 
     Sits next to ``tool_config.json`` in the same data dir. Web UI edits
     in standalone (non-addon) mode persist here; ``get_global_settings``
-    reads the file on the next call after ``_reset_global_settings``.
+    reads the file on the next call after ``reset_global_settings``.
     """
     return get_data_dir() / "backup_settings.json"
 

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/settings_ui/_theme.py

@@ -125,7 +125,7 @@ def _load_theme_prefs() -> dict[str, str]:
         # Hand-edited values outside the offered sets are dropped on load
         # AND overwritten by the next save's RMW merge — leave a trail so
         # the edit's author can see why their value never sticks. Warn
-        # once per key per process: _render_settings_html() calls this on
+        # once per key per process: render_settings_html() calls this on
         # every page view, and a permanently stale key (e.g. left behind
         # by a future version) must not spam the log forever (#1574
         # review).

ha_mcp_dev-9.3.0.dev3505/src/ha_mcp/settings_ui/_locale_policy.py → ha_mcp_dev-9.3.0.dev3511/src/ha_mcp/settings_ui/locale_policy.py

@@ -1,4 +1,7 @@
-"""Maintenance policy for intentionally best-effort locale catalogs."""
+"""Maintenance policy for intentionally best-effort locale catalogs.
+
+Public: the catalog loader, the locale scripts and the tests share it.
+"""
 
 from __future__ import annotations
 

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/config_helpers/update.py

@@ -32,7 +32,7 @@ from .schemas import (
 )
 
 
-async def _stored_item(
+async def stored_item(
     client: Any, helper_type: str, entity_id: str, unique_id: str
 ) -> dict[str, Any]:
     """The stored item from ``<type>/list`` (person nests its storage items)."""
@@ -71,7 +71,7 @@ async def _execute_legacy_update(
     fields: dict[str, Any],
 ) -> dict[str, Any]:
     """Update through Core's ``<type>/update`` WS command (no component)."""
-    stored = await _stored_item(client, helper_type, entity_id, unique_id)
+    stored = await stored_item(client, helper_type, entity_id, unique_id)
     body = merged_update(helper_type, stored, name, item_icon, fields)
     result = await client.send_websocket_message(
         {**body, "type": f"{helper_type}/update", f"{helper_type}_id": unique_id}
@@ -79,7 +79,7 @@ async def _execute_legacy_update(
     if not result.get("success"):
         code = ws_failure_code(result)
         if code is ErrorCode.RESOURCE_NOT_FOUND:
-            # The item vanished after _stored_item read it; report it the same way.
+            # The item vanished after stored_item read it; report it the same way.
             code = ErrorCode.CONFIG_NOT_FOUND
         raise_tool_error(
             create_error_response(

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/search/overview.py

@@ -23,9 +23,9 @@ from ..util_helpers import filter_active_repairs, project_repair_fields
 from .base import SearchToolsBase
 
 __all__ = [
-    "_OVERVIEW_AVAILABLE_FIELDS",
-    "_OVERVIEW_ENTITY_FIELDS",
-    "_OVERVIEW_INDEPENDENT_FIELDS",
+    "OVERVIEW_AVAILABLE_FIELDS",
+    "OVERVIEW_ENTITY_FIELDS",
+    "OVERVIEW_INDEPENDENT_FIELDS",
     "OverviewMixin",
     "_OverviewInputs",
     "logger",
@@ -73,8 +73,9 @@ class _OverviewSlices:
 
 
 # These disjoint sets partition every key documented by ha_get_overview's
-# fields parameter. Keep the manifest test in sync when the public schema changes.
-_OVERVIEW_INDEPENDENT_FIELDS = frozenset(
+# fields parameter. Public so the fields-docstring drift test can check that
+# partition; keep it in sync when the public schema changes.
+OVERVIEW_INDEPENDENT_FIELDS = frozenset(
     {
         "success",
         "system_info",
@@ -108,7 +109,7 @@ _OVERVIEW_REPAIR_FIELDS = frozenset(
 )
 
 
-_OVERVIEW_ENTITY_FIELDS = frozenset(
+OVERVIEW_ENTITY_FIELDS = frozenset(
     {
         "system_summary",
         "domain_stats",
@@ -123,7 +124,7 @@ _OVERVIEW_ENTITY_FIELDS = frozenset(
 )
 
 
-_OVERVIEW_AVAILABLE_FIELDS = _OVERVIEW_INDEPENDENT_FIELDS | _OVERVIEW_ENTITY_FIELDS
+OVERVIEW_AVAILABLE_FIELDS = OVERVIEW_INDEPENDENT_FIELDS | OVERVIEW_ENTITY_FIELDS
 
 
 def _build_component_overview_request(inputs: _OverviewInputs) -> dict[str, Any]:

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/search/response.py

@@ -53,8 +53,9 @@ _CONFIG_BUCKETS: tuple[str, ...] = (
 # pins their presence (search_type at 17+ sites, domain_filter at 6,
 # area_filter at 1, message at 2), so callers verifiably depend on them.
 # All are documented as top-level keys + retained in
-# ``_ALWAYS_KEEP_PROJECTION``.
-_ENTITIES_BRANCH_SKIP_KEYS: tuple[str, ...] = (
+# ``_ALWAYS_KEEP_PROJECTION``. Public so the fields-docstring drift test can
+# require every emitted entities-branch key to be stripped or documented.
+ENTITIES_BRANCH_SKIP_KEYS: tuple[str, ...] = (
     "results",
     "total_matches",
     "has_more",
@@ -522,7 +523,7 @@ def _apply_search_outcome(
         _merge_payload_metadata(
             response,
             payload,
-            skip_keys=_ENTITIES_BRANCH_SKIP_KEYS,
+            skip_keys=ENTITIES_BRANCH_SKIP_KEYS,
         )
     elif label == "configs":
         for bucket in _CONFIG_BUCKETS:

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/tools_config_dashboards.py

@@ -267,8 +267,8 @@ _NON_CARD_CHILD_KEYS = ("elements",)
 # The card_type value that selects view badges, which are not cards.
 _BADGE_CARD_TYPE = "badge"
 # Bound on card nesting levels against pathological configs; real dashboards
-# nest a handful.
-_MAX_CARD_DEPTH = 50
+# nest a handful. Public so tests can build a config at the boundary.
+MAX_CARD_DEPTH = 50
 # Bound on non-card nesting inside one card, which keeps the recursive split far
 # below Python's recursion limit even at the card bound.
 _MAX_NODE_DEPTH = 100
@@ -513,17 +513,17 @@ def _walk_card(
     container only.
 
     Only a dict carrying a ``type`` key is matched as a card. Subtrees past
-    ``_MAX_CARD_DEPTH`` card levels are recorded in ``frame.gaps.truncation``;
+    ``MAX_CARD_DEPTH`` card levels are recorded in ``frame.gaps.truncation``;
     cards carrying ``_NON_CARD_CHILD_KEYS`` in ``frame.gaps.uncovered``.
     """
     if not isinstance(card, dict):
         if frame.criteria.can_match_cards():
             frame.gaps.unread.append(jq_prefix)
         return []
-    if frame.depth > _MAX_CARD_DEPTH:
+    if frame.depth > MAX_CARD_DEPTH:
         logger.warning(
             "Card-search depth bound (%d) exceeded at %s; not descending further",
-            _MAX_CARD_DEPTH,
+            MAX_CARD_DEPTH,
             jq_prefix,
         )
         frame.gaps.truncation.append(jq_prefix)

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/tools_dev.py

@@ -1624,7 +1624,7 @@ class DevTools:
         Extracted verbatim from the inline branch: rejects env/addon-managed
         settings, removes any file override, and reports whether one existed.
         """
-        from ..config import _reset_global_settings
+        from ..config import reset_global_settings
 
         if origin == "env":
             raise_tool_error(
@@ -1646,7 +1646,7 @@ class DevTools:
         had_override = origin == "file"
         if had_override:
             await self._merge_file_override({setting: _REMOVE})
-            _reset_global_settings()
+            reset_global_settings()
         return {
             "success": True,
             "data": {
@@ -1676,8 +1676,8 @@ class DevTools:
         """
         from ..config import (
             BETA_FEATURE_FIELDS,
-            _reset_global_settings,
             get_global_settings,
+            reset_global_settings,
         )
 
         if value is None:
@@ -1754,7 +1754,7 @@ class DevTools:
             mode = "addon"
         else:
             await self._merge_file_override({setting: coerced})
-            _reset_global_settings()
+            reset_global_settings()
             mode = "file"
         return {
             "success": True,

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/tools_search.py

@@ -36,9 +36,9 @@ from .search.entities import (
     _validate_result_field_names,
 )
 from .search.overview import (
-    _OVERVIEW_AVAILABLE_FIELDS,
-    _OVERVIEW_ENTITY_FIELDS,
-    _OVERVIEW_INDEPENDENT_FIELDS,
+    OVERVIEW_AVAILABLE_FIELDS,
+    OVERVIEW_ENTITY_FIELDS,
+    OVERVIEW_INDEPENDENT_FIELDS,
     OverviewMixin,
     _OverviewInputs,
 )
@@ -640,9 +640,9 @@ class SearchTools(ComponentSearchMixin, OverviewMixin, StateMixin):
             raise_tool_error(create_validation_error(str(exc), parameter="domains"))
 
         requested_fields = set(parsed_fields or [])
-        recognized_fields = requested_fields & _OVERVIEW_INDEPENDENT_FIELDS
+        recognized_fields = requested_fields & OVERVIEW_INDEPENDENT_FIELDS
         use_independent_collectors = (
-            parsed_fields is not None and not requested_fields & _OVERVIEW_ENTITY_FIELDS
+            parsed_fields is not None and not requested_fields & OVERVIEW_ENTITY_FIELDS
         )
         if use_independent_collectors:
             result = await self._collect_independent_overview(
@@ -700,7 +700,7 @@ class SearchTools(ComponentSearchMixin, OverviewMixin, StateMixin):
         projected = project_fields(
             result,
             parsed_fields,
-            available_fields=_OVERVIEW_AVAILABLE_FIELDS,
+            available_fields=OVERVIEW_AVAILABLE_FIELDS,
         )
         sidecar_url = live_sidecar_url()
         if sidecar_url:

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/tools/tools_yaml_config.py

@@ -61,7 +61,7 @@ _LOVELACE_DASHBOARD_PREFIX = "lovelace.dashboards."
 # wrapper. The parity invariant (keys == PACKAGES_ONLY_YAML_KEYS, and
 # every value is a real Settings field) is enforced by
 # test_yaml_dashboards.py::test_flag_map_matches_packages_only_keys.
-_YAML_PACKAGES_FLAG_BY_KEY = {
+YAML_PACKAGES_FLAG_BY_KEY = {
     "automation": "enable_yaml_packages_automation",
     "script": "enable_yaml_packages_script",
     "scene": "enable_yaml_packages_scene",
@@ -105,12 +105,12 @@ def _disabled_packages_keys(settings: Any) -> list[str]:
     irrelevant on the wire.
 
     Uses ``getattr`` without a default so a future rename that breaks the
-    ``_YAML_PACKAGES_FLAG_BY_KEY`` → ``Settings`` mapping raises loudly
+    ``YAML_PACKAGES_FLAG_BY_KEY`` → ``Settings`` mapping raises loudly
     instead of silently treating the key as disabled (a dead toggle).
     """
     return sorted(
         key
-        for key, flag in _YAML_PACKAGES_FLAG_BY_KEY.items()
+        for key, flag in YAML_PACKAGES_FLAG_BY_KEY.items()
         if not getattr(settings, flag)
     )
 

{ha_mcp_dev-9.3.0.dev3505 → ha_mcp_dev-9.3.0.dev3511}/src/ha_mcp/utils/python_sandbox.py

@@ -41,11 +41,12 @@ class PythonSandboxExecutionError(PythonSandboxError):
 # can carry tokens / passwords / device addresses, and Python's default
 # repr happily embeds dict and list values into KeyError/TypeError text.
 # 240 chars is enough to identify the failure (exception type + a short
-# snippet) without pasting the input config back to the caller.
-_EXECUTION_ERROR_TEXT_LIMIT = 240
+# snippet) without pasting the input config back to the caller. Public so
+# tests can check the cap.
+EXECUTION_ERROR_TEXT_LIMIT = 240
 
 
-def _truncate_for_error(text: str, limit: int = _EXECUTION_ERROR_TEXT_LIMIT) -> str:
+def _truncate_for_error(text: str, limit: int = EXECUTION_ERROR_TEXT_LIMIT) -> str:
     if len(text) <= limit:
         return text
     return text[: limit - 3] + "..."
@@ -233,8 +234,9 @@ BLOCKED_FUNCTIONS = {
 # transforms — type checks, length, numeric/string coercion, simple
 # collection helpers. Expanding this list is fine if another pure builtin
 # is genuinely needed; adding anything that touches the filesystem, network,
-# or interpreter state is not.
-_SAFE_BUILTINS: dict[str, Any] = {
+# or interpreter state is not. Public, like SAFE_METHODS, so tests can check
+# the security documentation against it.
+SAFE_BUILTINS: dict[str, Any] = {
     "isinstance": isinstance,
     "len": len,
     "range": range,
@@ -383,7 +385,7 @@ def safe_execute_expression(
         )
 
     safe_globals: dict[str, Any] = {
-        "__builtins__": dict(_SAFE_BUILTINS),
+        "__builtins__": dict(SAFE_BUILTINS),
         "__name__": "__main__",
         "__doc__": None,
     }