inkscape-mcp 1.0.0__tar.gz

inkscape_mcp-1.0.0/.github/dependabot.yml

@@ -0,0 +1,45 @@
+# Dependabot configuration — automated dependency PRs.
+# See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+
+  # Python deps (pyproject.toml + uv.lock)
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "Etc/UTC"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+    # Bundle non-breaking bumps so they land as one PR instead of many.
+    groups:
+      python-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
+
+  # GitHub Actions used in .github/workflows/*.yml
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 3
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    groups:
+      actions-minor-patch:
+        update-types:
+          - "minor"
+          - "patch"

inkscape_mcp-1.0.0/.github/labeler.yml

@@ -0,0 +1,61 @@
+# PR Labeler configuration
+# Automatically labels PRs based on files changed
+
+# Code changes
+'source code':
+  - src/**
+
+'tests':
+  - tests/**
+
+'documentation':
+  - docs/**
+  - README.md
+  - CHANGELOG.md
+  - "*.md"
+
+'dependencies':
+  - pyproject.toml
+  - requirements*.txt
+  - poetry.lock
+  - Pipfile.lock
+
+'ci/cd':
+  - .github/**
+
+'docker':
+  - Dockerfile
+  - docker-compose*.yml
+  - DOCKER_PLAN.md
+
+'security':
+  - any:
+    - '**/security/**'
+    - '**/auth/**'
+    - '**/crypto/**'
+
+# Extensions and plugins
+'extensions':
+  - src/inkscape_mcp/plugins/**
+
+# Vector operations
+'vector-graphics':
+  - src/inkscape_mcp/tools/vector_operations.py
+
+# File operations
+'file-operations':
+  - src/inkscape_mcp/tools/file_operations.py
+
+# Analysis tools
+'analysis':
+  - src/inkscape_mcp/tools/analysis.py
+
+# System tools
+'system':
+  - src/inkscape_mcp/tools/system.py
+
+# Core infrastructure
+'infrastructure':
+  - src/inkscape_mcp/server.py
+  - src/inkscape_mcp/config.py
+  - src/inkscape_mcp/__init__.py

inkscape_mcp-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,59 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+    paths-ignore:
+      - "docs/**"
+      - "**.md"
+      - ".github/ISSUE_TEMPLATE/**"
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Lint + Tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install Inkscape 1.4.x + system headers
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends software-properties-common
+          sudo add-apt-repository -y ppa:inkscape.dev/stable
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            inkscape \
+            libcairo2-dev \
+            libgirepository-2.0-dev \
+            libgirepository1.0-dev \
+            pkg-config \
+            python3-dev
+          inkscape --version
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+
+      - name: Sync project
+        run: uv sync --all-extras --dev
+
+      - name: Ruff lint
+        run: uv run ruff check .
+
+      - name: Ruff format check
+        run: uv run ruff format --check .
+
+      - name: Pytest
+        run: uv run pytest tests/ -m "not network" -q --tb=short --ignore=tests/test_inkscape_live.py

inkscape_mcp-1.0.0/.github/workflows/publish.yml

@@ -0,0 +1,71 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Re-run tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Inkscape 1.4.x + system headers
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends software-properties-common
+          sudo add-apt-repository -y ppa:inkscape.dev/stable
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            inkscape \
+            libcairo2-dev \
+            libgirepository-2.0-dev \
+            libgirepository1.0-dev \
+            pkg-config \
+            python3-dev
+          inkscape --version
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv sync --all-extras --dev
+      - run: uv run ruff check .
+      - run: uv run pytest tests/ -m "not network" -q --tb=short --ignore=tests/test_inkscape_live.py
+
+  build:
+    name: Build distribution
+    needs: test
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI (Trusted Publisher / OIDC)
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      id-token: write   # required for OIDC; no PyPI token needed
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          print-hash: true

inkscape_mcp-1.0.0/.github/workflows/release.yml

@@ -0,0 +1,54 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag name to release (e.g. v1.0.0)"
+        required: true
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: GitHub Release
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0  # full history so the changelog generator can walk tags
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+
+      - name: Build distribution
+        run: uv build
+
+      - name: Resolve tag
+        id: tag
+        run: |
+          TAG="${GITHUB_REF#refs/tags/}"
+          if [ -z "$TAG" ] || [ "$TAG" = "$GITHUB_REF" ]; then
+            TAG="${{ inputs.tag }}"
+          fi
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v3
+        with:
+          tag_name: ${{ steps.tag.outputs.tag }}
+          name: ${{ steps.tag.outputs.tag }}
+          generate_release_notes: true   # auto-builds notes from PRs / commits since last tag
+          files: |
+            dist/*.whl
+            dist/*.tar.gz
+          draft: false
+          prerelease: ${{ contains(steps.tag.outputs.tag, '-') }}

inkscape_mcp-1.0.0/.github/workflows/security.yml

@@ -0,0 +1,47 @@
+name: Security
+
+on:
+  schedule:
+    - cron: "0 2 * * 1"   # weekly, Monday 02:00 UTC — nightly was overkill
+  push:
+    branches: [main]
+    paths:
+      - "pyproject.toml"
+      - "uv.lock"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    name: Dependency vulnerability scan
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install system deps for pycairo / pygobject
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libcairo2-dev \
+            libgirepository-2.0-dev \
+            libgirepository1.0-dev \
+            pkg-config \
+            python3-dev
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+
+      - name: Sync project
+        run: uv sync --all-extras
+
+      - name: pip-audit (third-party deps only)
+        run: |
+          uv pip install pip-audit
+          uv export --no-emit-project --format requirements-txt -o /tmp/requirements.txt
+          uv run pip-audit -r /tmp/requirements.txt --disable-pip --strict

inkscape_mcp-1.0.0/.gitignore

@@ -0,0 +1,184 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+pip-wheel-metadata/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+.python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# Ruff
+.ruff_cache/
+
+# Node / markdownlint-cli (when run outside pre-commit's managed env)
+node_modules/
+.npm/
+
+# uv / pip caches that sometimes land in repo dirs
+.uv-cache/
+pip-cache/
+
+# IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS generated files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Temporary files
+*.tmp
+*.temp
+temp/
+tmp/
+
+# Inkscape temporary files
+*.svg.tmp
+*.svg.backup
+
+# Test output
+test_output/
+test_results/
+*.png
+*.jpg
+*.pdf
+
+# But keep tracked assets (QR codes, logos, etc.) — exception to the broad PNG/JPG rule above.
+!assets/**
+
+# Log files
+*.log
+logs/
+
+# Configuration overrides
+config.local.yaml
+config.local.yml

inkscape_mcp-1.0.0/.gitmessage

@@ -0,0 +1,16 @@
+<type>: <short summary>
+
+# ---------------------------------------------------------
+# Types:
+#   feat:     New features or tools
+#   fix:      Bug fixes
+#   docs:     Documentation updates
+#   style:    Code style/formatting changes
+#   refactor: Code refactoring without feature changes
+#   test:     Testing related changes
+#   chore:    Maintenance tasks (build, deps, etc.)
+#   perf:     Performance improvements
+#   ci:       CI/CD and automation changes
+# ---------------------------------------------------------
+
+# Detailed description (Explain the 'Why', not the 'What'):

inkscape_mcp-1.0.0/.markdownlint.json

@@ -0,0 +1,21 @@
+{
+  "default": true,
+  "MD001": false,
+  "MD003": { "style": "atx" },
+  "MD004": { "style": "dash" },
+  "MD007": { "indent": 4 },
+  "MD013": false,
+  "MD024": false,
+  "MD025": { "level": 1 },
+  "MD026": false,
+  "MD029": { "style": "ordered" },
+  "MD030": { "ul_single": 1, "ol_single": 1, "ul_multi": 1, "ol_multi": 1 },
+  "MD033": { "allowed_elements": ["br", "kbd", "details", "summary", "sup", "sub", "p", "a", "img"] },
+  "MD034": false,
+  "MD036": false,
+  "MD040": false,
+  "MD041": false,
+  "MD046": { "style": "fenced" },
+  "MD048": { "style": "backtick" },
+  "MD060": false
+}

inkscape_mcp-1.0.0/.pre-commit-config.yaml

@@ -0,0 +1,44 @@
+# Pre-commit hooks — opt-in commit-time checks.
+# Activate locally once with:   pre-commit install
+# Run on the whole repo:        pre-commit run --all-files
+# Bump pinned versions with:    pre-commit autoupdate
+
+repos:
+  # Ruff: lint + format (mirrors what ci.yml runs).
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.14
+    hooks:
+      - id: ruff
+        args: [--fix, --exit-non-zero-on-fix]
+      - id: ruff-format
+
+  # Secret scanning — fails the commit if it spots common credential
+  # patterns (AWS keys, GitHub tokens, OpenAI keys, private keys,
+  # high-entropy strings near suspicious context, etc.).
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.0
+    hooks:
+      - id: gitleaks
+
+  # Markdown linting — enforces the rules in .markdownlint.json
+  # (heading style, list indent, line length, allowed inline HTML, etc.).
+  - repo: https://github.com/igorshubovych/markdownlint-cli
+    rev: v0.45.0
+    hooks:
+      - id: markdownlint
+        args: [--config, .markdownlint.json]
+
+  # Generic file-hygiene checks bundled with pre-commit itself.
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: check-yaml            # parses every .yml/.yaml; catches malformed workflows early
+      - id: check-toml            # parses pyproject.toml etc.
+      - id: check-json            # parses glama.json etc.
+      - id: check-added-large-files
+        args: [--maxkb=1024]      # 1 MB cap — adjust if you intentionally track bigger assets
+      - id: detect-private-key    # SSH / PGP / cert keys committed by mistake
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: mixed-line-ending
+        args: [--fix=lf]

inkscape_mcp-1.0.0/CONTRIBUTING.md

@@ -0,0 +1,30 @@
+# Contributing to inkscape_mcp
+
+Local Linux fork. PRs are not currently accepted upstream — see the repo `README.md` for context.
+
+## Dev setup
+
+```bash
+sudo apt install inkscape libcairo2-dev libgirepository-2.0-dev libgirepository1.0-dev pkg-config python3-dev
+git clone https://github.com/aravindev/inkscape_mcp.git
+cd inkscape_mcp
+uv sync
+```
+
+## Workflow
+
+```bash
+uv run pytest -v             # MCP-client-driven test suite
+uv run ruff check .          # lint
+uv run ruff format .         # format
+uv run mypy src/             # type check
+```
+
+Before opening a branch:
+
+- Comments are one-liners that explain _why_. Don't narrate what the code does.
+- Add a test under `tests/` whenever you add or change a tool operation.
+
+## License
+
+MIT.

inkscape_mcp-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Aravind EV
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.