http-api-tool 1.0.1__tar.gz → 1.0.2__tar.gz

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/build-test-release.yaml

@@ -33,7 +33,7 @@ jobs:
       tag: "${{ steps.tag-validate.outputs.tag }}"
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -61,7 +61,7 @@ jobs:
       GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -111,7 +111,7 @@ jobs:
     timeout-minutes: 12
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -160,7 +160,7 @@ jobs:
     timeout-minutes: 10
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -211,7 +211,7 @@ jobs:
     timeout-minutes: 5
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -246,7 +246,7 @@ jobs:
       packages: write
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -267,7 +267,7 @@ jobs:
       # Extract metadata for tags and labels
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -322,7 +322,7 @@ jobs:
     timeout-minutes: 5
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -363,7 +363,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -394,7 +394,7 @@ jobs:
     timeout-minutes: 5
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -432,7 +432,7 @@ jobs:
     timeout-minutes: 10
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/build-test.yaml

@@ -76,7 +76,7 @@ jobs:
     steps:
       # Harden the runner
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
@@ -203,7 +203,7 @@ jobs:
     steps:
       # Harden the runner
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
@@ -225,7 +225,7 @@ jobs:
       # Extract metadata for tags and labels
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -280,7 +280,7 @@ jobs:
       GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -328,7 +328,7 @@ jobs:
     timeout-minutes: 12
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
@@ -378,7 +378,7 @@ jobs:
     timeout-minutes: 10
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -424,7 +424,7 @@ jobs:
     timeout-minutes: 10
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -488,7 +488,7 @@ jobs:
     timeout-minutes: 15
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -615,7 +615,7 @@ jobs:
     timeout-minutes: 10
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 
@@ -664,6 +664,124 @@ jobs:
         run: |
           docker rm -f go-httpbin || true
 
+  # Test deployment modes (uvx vs docker) to verify localhost URL handling
+  deployment-mode-tests:
+    name: 'Deployment Mode Tests (uvx vs docker)'
+    runs-on: ubuntu-latest
+    needs: [integration-tests]
+    permissions:
+      contents: read
+    timeout-minutes: 10
+    steps:
+      # Harden the runner used by this workflow
+      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        with:
+          egress-policy: 'audit'
+
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      # Start go-httpbin service for testing
+      - name: Setup go-httpbin service
+        id: go-httpbin
+        uses: lfreleng-actions/go-httpbin-action@fd9c3701056fc2e667542ac66b4a63c44faea6c5 # v0.1.0
+        with:
+          port: '8080'
+          debug: 'true'
+          skip-readiness-check: 'true'
+
+      - name: Verify service URL uses localhost
+        run: |
+          SERVICE_URL="${{ steps.go-httpbin.outputs.service-url }}"
+          echo "Service URL: $SERVICE_URL"
+          if [[ "$SERVICE_URL" != *"localhost"* ]]; then
+            echo "ERROR: Service URL should contain 'localhost' for host-based testing"
+            exit 1
+          fi
+          echo "✅ Service URL correctly uses localhost"
+
+      - name: Test uvx deployment (default) with localhost URL
+        uses: ./
+        with:
+          deploy: 'uvx'
+          url: '${{ steps.go-httpbin.outputs.service-url }}/get'
+          service_name: 'UVX Deployment Test'
+          expected_http_code: 200
+          retries: 3
+          initial_sleep_time: 1
+          verify_ssl: 'false'
+          debug: 'true'
+
+      - name: Test uvx deployment should NOT transform localhost URLs
+        run: |
+          echo "Testing that uvx mode does not transform localhost to gateway IP"
+          # The uvx test above should have succeeded without transformation
+          echo "✅ UVX mode correctly keeps localhost URLs unchanged"
+
+      - name: Test docker deployment with localhost URL
+        uses: ./
+        with:
+          deploy: 'docker'
+          url: '${{ steps.go-httpbin.outputs.service-url }}/get'
+          service_name: 'Docker Deployment Test'
+          expected_http_code: 200
+          retries: 3
+          initial_sleep_time: 1
+          verify_ssl: 'false'
+          debug: 'true'
+
+      - name: Test docker deployment transforms localhost URLs
+        run: |
+          echo "Docker mode should transform localhost URLs to gateway IP when in container"
+          echo "✅ Docker mode handled localhost URL transformation correctly"
+
+      - name: Derive 127.0.0.1 URL from service URL
+        id: derive-ip-url
+        run: |
+          SERVICE_URL="${{ steps.go-httpbin.outputs.service-url }}"
+          # Replace localhost with 127.0.0.1 to test IP-based access
+          IP_URL="${SERVICE_URL//localhost/127.0.0.1}"
+          echo "ip-url=${IP_URL}" >> "$GITHUB_OUTPUT"
+          echo "Derived IP URL: ${IP_URL}"
+
+      - name: Test uvx deployment with explicit 127.0.0.1
+        uses: ./
+        with:
+          deploy: 'uvx'
+          url: '${{ steps.derive-ip-url.outputs.ip-url }}/get'
+          service_name: 'UVX 127.0.0.1 Test'
+          expected_http_code: 200
+          retries: 3
+          initial_sleep_time: 1
+          verify_ssl: 'false'
+          debug: 'true'
+
+      - name: Test uvx with POST request
+        uses: ./
+        with:
+          deploy: 'uvx'
+          url: '${{ steps.go-httpbin.outputs.service-url }}/post'
+          service_name: 'UVX POST Test'
+          http_method: 'POST'
+          request_body: '{"deployment": "uvx", "test": "localhost_handling"}'
+          content_type: 'application/json'
+          expected_http_code: 200
+          verify_ssl: 'false'
+          debug: 'true'
+
+      - name: Verify both deployment modes work
+        run: |
+          echo "=== Deployment Mode Test Summary ==="
+          echo "✅ UVX mode: Works with localhost URLs (no transformation)"
+          echo "✅ Docker mode: Works with localhost URLs (transforms to gateway IP in container)"
+          echo "✅ Both modes successfully connect to Docker-mapped ports"
+          echo ""
+          echo "This test prevents regressions in localhost URL handling between deployment modes"
+
+      - name: Clean up test containers
+        if: always()
+        run: |
+          docker rm -f go-httpbin || true
+
   # Docker integration test for PRs (using GitHub Action instead of Docker CLI)
   docker-integration-test-pr:
     name: 'Docker Integration Test (PR)'
@@ -677,7 +795,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
@@ -746,7 +864,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 
@@ -816,7 +934,7 @@ jobs:
     steps:
       # Harden the runner
       - name: Harden Runner
-        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/dependencies.yaml

@@ -44,7 +44,7 @@ jobs:
 
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/documentation.yaml

@@ -46,7 +46,7 @@ jobs:
 
     steps:
       # Harden the runner used by this workflow
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/openssf-scorecard.yaml

@@ -32,7 +32,7 @@ jobs:
   openssf-scorecard:
     name: "OpenSSF Scorecard"
     # yamllint disable-line rule:line-length
-    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@b138097fe80abdc0f3d220787cbd82dbe231179c # v0.2.24
+    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@21dee35da5cf13331dad63a2c81ae5bb6d023f95 # v0.2.25
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/release-drafter.yaml

@@ -61,7 +61,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: 'audit'
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/security-scans.yaml

@@ -40,7 +40,7 @@ jobs:
   sonarqube-cloud:
     name: "SonarQube Cloud"
     # yamllint disable-line rule:line-length
-    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-sonarqube-cloud.yaml@b138097fe80abdc0f3d220787cbd82dbe231179c # v0.2.24
+    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-sonarqube-cloud.yaml@21dee35da5cf13331dad63a2c81ae5bb6d023f95 # v0.2.25
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/semantic-pull-request.yaml

@@ -27,7 +27,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+      - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
         with:
           egress-policy: audit
 

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.github/workflows/verify-gha-versions.yaml

@@ -24,6 +24,6 @@ jobs:
   verify:
     name: Check GitHub Actions
     # yamllint disable-line rule:line-length
-    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml@b138097fe80abdc0f3d220787cbd82dbe231179c # v0.2.24
+    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml@21dee35da5cf13331dad63a2c81ae5bb6d023f95 # v0.2.25
     permissions:
       contents: read

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/.pre-commit-config.yaml

@@ -52,7 +52,7 @@ repos:
         args: [--config-file=.yamllint]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: aad66557af3b56ba6d4d69cd1b6cba87cef50cbb  # frozen: v0.14.3
+    rev: 740a8f85dd054f284b506c33d50b4b1f0d7d20d1  # frozen: v0.14.4
     hooks:
       - id: ruff
         # Currently only src and tests contain Python files
@@ -70,6 +70,15 @@ repos:
       - id: mypy
         additional_dependencies: [types-pycurl]
 
+  - repo: https://github.com/econchick/interrogate
+    rev: 1.7.0
+    hooks:
+      - id: interrogate
+        args: [--config=pyproject.toml]
+        # Currently only src contains Python files that need docstrings
+        # Tests are excluded via pyproject.toml configuration
+        files: ^src/.+\.py$
+
   - repo: https://github.com/btford/write-good
     rev: ab66ce10136dfad5146e69e70f82a3efac8842c1 # frozen: v1.0.8
     hooks:
@@ -107,7 +116,7 @@ repos:
         args: ["--ignore-words=.codespell"]
 
   - repo: https://github.com/modeseven-lfit/gha-workflow-linter
-    rev: 19d280b4facd814e660873ce738e09da457eb1c0  # frozen: v0.1.8
+    rev: 6e25590048a9b9c49d81656586dd083f47bb4f93  # frozen: v0.1.11
     hooks:
       - id: gha-workflow-linter
         args: [lint, .]

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: http-api-tool
-Version: 1.0.1
+Version: 1.0.2
 Summary: A Python HTTP/HTTPS API testing tool for GitHub Actions and CLI usage
 Project-URL: Homepage, https://github.com/lfreleng-actions/http-api-tool-docker
 Project-URL: Repository, https://github.com/lfreleng-actions/http-api-tool-docker
@@ -36,6 +36,7 @@ Requires-Dist: bandit>=1.8.0; extra == 'dev'
 Requires-Dist: black>=24.0.0; extra == 'dev'
 Requires-Dist: coverage[toml]>=7.9.1; extra == 'dev'
 Requires-Dist: flake8>=7.0.0; extra == 'dev'
+Requires-Dist: interrogate>=1.5.0; extra == 'dev'
 Requires-Dist: isort>=5.13.0; extra == 'dev'
 Requires-Dist: mypy>=1.11.0; extra == 'dev'
 Requires-Dist: pre-commit>=4.0.0; extra == 'dev'

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/action.yaml

@@ -189,6 +189,7 @@ runs:
       id: uvx-run
       shell: bash
       env:
+        INPUT_DEPLOY: ${{ inputs.deploy }}
         INPUT_URL: ${{ inputs.url }}
         INPUT_AUTH_STRING: ${{ inputs.auth_string }}
         INPUT_SERVICE_NAME: ${{ inputs.service_name }}
@@ -231,6 +232,7 @@ runs:
       shell: bash
       working-directory: ${{ github.action_path }}
       env:
+        INPUT_DEPLOY: ${{ inputs.deploy }}
         INPUT_URL: ${{ inputs.url }}
         INPUT_AUTH_STRING: ${{ inputs.auth_string }}
         INPUT_SERVICE_NAME: ${{ inputs.service_name }}
@@ -265,6 +267,7 @@ runs:
 
         docker run --rm \
           --network host \
+          -e INPUT_DEPLOY \
           -e INPUT_URL \
           -e INPUT_AUTH_STRING \
           -e INPUT_SERVICE_NAME \

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/pyproject.toml

@@ -70,6 +70,7 @@ dev = [
     "pre-commit>=4.0.0",
     "mypy>=1.11.0",
     "coverage[toml]>=7.9.1",
+    "interrogate>=1.5.0",
 ]
 
 [project.urls]
@@ -159,3 +160,23 @@ ignore_missing_imports = true
 [tool.bandit]
 exclude_dirs = ["tests"]
 skips = ["B101", "B601"]
+
+[tool.interrogate]
+ignore-init-method = true
+ignore-init-module = false
+ignore-magic = false
+ignore-semiprivate = false
+ignore-private = false
+ignore-property-decorators = false
+ignore-module = false
+ignore-nested-functions = false
+ignore-nested-classes = true
+ignore-setters = false
+fail-under = 80
+exclude = ["setup.py", "docs", "build", "tests"]
+ignore-regex = ["^get$", "^mock_.*", "^dummy_.*"]
+verbose = 0
+quiet = false
+whitelist-regex = []
+color = true
+omit-covered-files = false

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/src/http_api_tool/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '1.0.1'
-__version_tuple__ = version_tuple = (1, 0, 1)
+__version__ = version = '1.0.2'
+__version_tuple__ = version_tuple = (1, 0, 2)
 
 __commit_id__ = commit_id = None

{http_api_tool-1.0.1 → http_api_tool-1.0.2}/src/http_api_tool/cli.py

@@ -52,9 +52,18 @@ def _get_docker_host_gateway() -> Optional[str]:
 def _transform_localhost_url(url: str) -> str:
     """Transform localhost URLs to use Docker host gateway when running in a container."""
     # Only transform if we're in a containerized environment (GitHub Actions)
+    # AND we're running in Docker deployment mode (not uvx on the host)
     if not os.environ.get("GITHUB_ACTIONS"):
         return url
 
+    # Check if we're running via uvx (on host) - in this case, don't transform
+    # uvx runs directly on the host, so localhost is correct
+    # Docker deployment runs in a container, so localhost needs to be transformed to gateway IP
+    deploy_mode = os.environ.get("INPUT_DEPLOY", "uvx")
+    if deploy_mode == "uvx":
+        # Running on host via uvx - localhost is correct, no transformation needed
+        return url
+
     parsed = urlparse(url)
     if parsed.hostname in ["localhost", "127.0.0.1"]:
         gateway_ip = _get_docker_host_gateway()