linux-mcp-server 0.1.0.dev0__tar.gz → 1.0.0__tar.gz

linux_mcp_server-1.0.0/.codecov.yml

@@ -0,0 +1,38 @@
+codecov:
+  notify:
+    after_n_builds: 6
+    wait_for_ci: false
+
+  require_ci_to_pass: false
+  token: 74bc381b-9c5f-44c1-9efa-af57d5f3fe50 # notsecret  # repo-scoped, upload-only, stability in fork PRs
+
+coverage:
+  range: 40..100
+  status:
+    project:
+      default:
+        target: 60%
+        threshold: 10%
+      app:
+        target: 60%
+        threshold: 10%
+        paths:
+          - src/
+      tests:
+        target: 100%
+        paths:
+          - tests/
+
+    patch:
+      default:
+        target: 95%
+        threshold: 10%
+      app:
+        target: 95%
+        threshold: 10%
+        paths:
+          - src/
+      tests:
+        target: 100%
+        paths:
+          - tests/

linux_mcp_server-1.0.0/.coderabbit.yaml

@@ -0,0 +1,111 @@
+# CodeRabbit Configuration for linux-mcp-server
+# Docs: https://docs.coderabbit.ai/configuration/
+
+language: en-US
+tone_instructions: >
+  You are a brilliant but world-weary senior developer who has seen too much.
+  Deliver feedback with dry wit and gentle sarcasm, but always be helpful.
+  Use programming puns when the opportunity arises.
+
+reviews:
+  profile: chill
+  collapse_walkthrough: true
+  poem: false
+  request_changes_workflow: false
+  high_level_summary: false
+  high_level_summary_placeholder: "@coderabbitai summary"
+  abort_on_close: true
+  review_status: false
+
+  auto_review:
+    enabled: false
+    drafts: false
+    base_branches:
+      - main
+    ignore_title_keywords:
+      - "WIP"
+      - "[WIP]"
+      - "DO NOT MERGE"
+
+  path_filters:
+    - "!**/__pycache__/**"
+    - "!**/.venv/**"
+    - "!**/.pytest_cache/**"
+    - "!**/.ruff_cache/**"
+    - "!**/dist/**"
+    - "!**/*.egg-info/**"
+    - "!**/htmlcov/**"
+    - "!**/.coverage"
+    - "!**/uv.lock"
+
+  path_instructions:
+    - path: "src/**/*.py"
+      # NOTE(major): Adjust the read-only line at the top when
+      # write operations are allowed.
+      instructions: |
+        Focus on security and architecture:
+        - CRITICAL: All operations MUST be read-only. Flag any write operations.
+        - Check for TOCTOU race conditions (use try-except, not check-then-use)
+        - psutil exceptions pattern: except (psutil.NoSuchProcess, psutil.AccessDenied)
+        - Verify async/await patterns (no blocking calls in async functions)
+        - Ensure proper exception handling with graceful degradation
+        - Error messages must be clear enough for LLMs to understand and act on
+        - Check input validation before shell commands (command injection)
+        - Verify MCP decorator order: @mcp.tool, @log_tool_call, @disallow_local_execution_in_containers
+        - Host parameter pattern: host: Host | None = None (supports local and remote)
+        - Resource cleanup: Verify SSH connections use context managers
+        - Timeout handling: All network/SSH operations must have timeouts
+        - Container safety: Flag operations that won't work in containers without explicit checks
+        - Don't nitpick style (ruff handles) or types (pyright validates)
+
+    - path: "src/**/config.py"
+      instructions: |
+        Configuration validation:
+        - Centralize derived config logic (defaults, path resolution) in config class
+        - Validate environment variables at startup, not lazily
+        - Check for secure defaults
+
+    - path: "src/**/connection/*.py"
+      instructions: |
+        SSH/connection handling:
+        - All SSH operations must have timeouts
+        - Prefer library-native async features (asyncssh timeout param) over wrappers (asyncio.wait_for)
+        - Connection errors must include host information for debugging
+        - Resource cleanup: Use context managers for all connections
+        - Key handling: No plaintext passwords, only key-based auth
+
+    - path: "tests/**/*.py"
+      instructions: |
+        Focus on test quality and meaningfulness:
+        - Tests should verify behavior, not just chase coverage. A test that doesn't assert meaningful outcomes is worse than no test.
+        - Prefer parameterized tests over duplicate test functions
+        - Mock specs should be provided: AsyncMock(spec=SomeClass)
+        - Use pytest.raises with nullcontext() pattern, not boolean flags
+        - Use fixtures for reusable test components, not helper functions
+        - Check for edge cases: process disappearing, permission denied, empty output
+        - Verify both local (psutil) and remote (SSH) code paths tested
+        - Don't nitpick coverage percentages (CI enforces 70%+ overall, 100% patch)
+
+    - path: "pyproject.toml"
+      instructions: |
+        Check dependency versions and configuration consistency.
+        Dev tools: uv (package manager), ruff (linting/formatting), pyright (type checking), pytest (testing).
+
+    - path: ".github/workflows/**"
+      instructions: "Validate workflow syntax and security (no secrets in logs)"
+
+    - path: "Makefile"
+      instructions: |
+        Makefile validation:
+        - .PHONY declarations for all non-file targets
+        - Avoid flags that are already defaults
+
+    - path: "Containerfile"
+      instructions: "Use Podman + Containerfile conventions (not Docker + Dockerfile)"
+
+chat:
+  auto_reply: true
+
+knowledge_base:
+  learnings:
+    scope: global

linux_mcp_server-1.0.0/.devcontainer/Containerfile

@@ -0,0 +1,22 @@
+FROM quay.io/fedora/fedora:43
+
+ENV UV_LINK_MODE=copy
+ENV UV_COMPILE_BYTECODE=1
+ENV SHELL=/usr/bin/fish
+
+RUN dnf install -y \
+    python3 \
+    python3-pip \
+    git \
+    make \
+    fish \
+    sudo \
+    && dnf clean all
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
+
+# Create vscode user with sudo access and fish shell
+RUN useradd -m -s /usr/bin/fish vscode && \
+    echo "vscode ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/vscode
+
+WORKDIR /workspace

linux_mcp_server-1.0.0/.devcontainer/devcontainer.json

@@ -0,0 +1,47 @@
+{
+    "$schema": "https://raw.githubusercontent.com/devcontainers/spec/refs/heads/main/schemas/devContainer.schema.json",
+    "name": "linux-mcp-server",
+    "build": {
+        "dockerfile": "Containerfile",
+        "context": "."
+    },
+    // Podman-specific: keep UID/GID mapping for rootless containers
+    "runArgs": [
+        "--userns=keep-id",
+        "--security-opt=label=disable"
+    ],
+    "containerUser": "vscode",
+    "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind,Z",
+    "workspaceFolder": "/workspace",
+    "postCreateCommand": "make sync",
+    "customizations": {
+        "vscode": {
+            "extensions": [
+                "charliermarsh.ruff",
+                "github.vscode-github-actions",
+                "github.vscode-pull-request-github",
+                "ms-python.debugpy",
+                "ms-python.python",
+                "ms-python.vscode-pylance"
+            ],
+            "settings": {
+                "python.defaultInterpreterPath": "/workspace/.venv/bin/python",
+                "python.terminal.activateEnvironment": true,
+                "editor.formatOnSave": true,
+                "terminal.integrated.defaultProfile.linux": "fish",
+                "terminal.integrated.profiles.linux": {
+                    "fish": {
+                        "path": "/usr/bin/fish"
+                    }
+                },
+                "[python]": {
+                    "editor.defaultFormatter": "charliermarsh.ruff",
+                    "editor.codeActionsOnSave": {
+                        "source.fixAll": "explicit",
+                        "source.organizeImports": "explicit"
+                    }
+                }
+            }
+        }
+    }
+}

linux_mcp_server-1.0.0/.github/workflows/build-publish.yml

@@ -0,0 +1,75 @@
+name: Build and publish
+on:
+  push:
+    tags:
+      - '*'
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build sdist and wheel
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+        with:
+          fetch-depth: 0
+
+      - name: Show environment
+        run: |
+          set -x
+          python -VV
+          python -m site
+          ls -ld $(python -c "import site; print(site.getsitepackages()[0])")
+          git tag --list --sort=-refname --format='%(refname:short) %(objectname:short)'
+          whoami
+
+      - name: Install build tools
+        run: |
+         python -m pip install --upgrade pip
+         python -m pip install build
+
+      - name: Build
+        run: python -m build --sdist --wheel
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v6.0.0
+        with:
+          name: artifacts
+          path: dist
+          if-no-files-found: error
+
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs:
+      - build
+
+    environment:
+      name: pypi
+      url: https://pypi.org/p/linux-mcp-server
+
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v7.0.0
+        with:
+          name: artifacts
+          path: dist
+
+      - name: Show environment
+        run: |
+          set -x
+          python -VV
+          python -m site
+          ls -ld $(python -c "import site; print(site.getsitepackages()[0])")
+          ls -l dist/
+          whoami
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@v1.13.0

linux_mcp_server-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,124 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+env:
+  PIP_DISABLE_PIP_VERSION_CHECK: 1
+  COVERAGE_IGOR_VERBOSE: 1
+  FORCE_COLOR: 1    # Get colored pytest output
+
+
+jobs:
+  sanity:
+    name: Sanity - ${{ matrix.test.name }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - name: Type
+            step_name: Check types
+            command: pyright
+
+          - name: Lint
+            step_name: Run lint
+            command: ruff check --diff
+
+          - name: Format
+            step_name: Run format check
+            command: ruff format --diff
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+
+      - name: Install Python
+        uses: actions/setup-python@v6.1.0
+        with:
+          python-version-file: pyproject.toml
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7.1.6
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install dependencies
+        run: uv sync --locked --group lint
+
+      - name: "Show environment"
+        run: |
+          python -VV
+          python -m site
+          uv --version
+          env | sort
+          ls -ld $(python -c "import site; print(site.getsitepackages()[0])")
+          whoami
+
+      - name: ${{ matrix.test.step_name }}
+        run: uv run --locked ${{ matrix.test.command }}
+
+  tests:
+    name: Unit - ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: true
+      matrix:
+        python-version:
+          - "3.10"
+          - "3.11"
+          - "3.12"
+          - "3.13"
+          - "3.14"
+          - "3.14t"
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+
+      - name: Install Python
+        uses: actions/setup-python@v6.1.0
+        with:
+          python-version-file: pyproject.toml
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7.1.6
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install dependencies
+        run: uv sync --locked --group test
+
+      - name: Show environment
+        run: |
+          set -x
+          python -VV
+          python -m site
+          uv --version
+          ls -ld $(python -c "import site; print(site.getsitepackages()[0])")
+          whoami
+
+      - name: Run tests
+        run: uv run --locked pytest --cov-report=xml
+
+      - name: Upload coverage report
+        uses: codecov/codecov-action@v5.5.2
+        with:
+          env_vars: OS,PYTHON
+          disable_search: true
+          files: coverage/coverage.xml
+          fail_ci_if_error: true
+          flags: unittests

linux_mcp_server-1.0.0/.github/workflows/ci_installation.yaml

@@ -0,0 +1,67 @@
+name: Installation Validation
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'src/linux_mcp_server/**'
+      - 'scripts/verify_installation.sh'
+
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'src/linux_mcp_server/**'
+      - 'scripts/verify_installation.sh'
+
+permissions:
+  contents: read
+
+env:
+  PIP_DISABLE_PIP_VERSION_CHECK: 1
+  FORCE_COLOR: 1
+
+jobs:
+  installation_qa:
+    name: Install QA - ${{ matrix.method }} - Py ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version:
+          - "3.10"
+          - "3.11"
+          - "3.12"
+          - "3.13"
+          - "3.14"
+          - "3.14t"
+        method:
+          - 'pip_user'
+          - 'uvx_run'
+          - 'uv_tool_run'
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6.0.1
+
+      - name: Install Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v6.1.0
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7.1.6
+        with:
+          enable-cache: true
+          prune-cache: false
+          
+      - name: Run Installation and Verification
+        shell: bash
+        env:
+          METHOD: ${{ matrix.method }}
+          UV_PYTHON: python
+        run: |
+          chmod +x scripts/verify_installation.sh
+          ./scripts/verify_installation.sh

linux_mcp_server-1.0.0/.github/workflows/docs.yml

@@ -0,0 +1,63 @@
+name: Documentation
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "docs/**"
+      - "src/**"
+      - "mkdocs.yml"
+      - "pyproject.toml"
+      - ".github/workflows/docs.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.1
+
+      - name: Install Python
+        uses: actions/setup-python@v6.1.0
+        with:
+          python-version-file: pyproject.toml
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7.1.6
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install dependencies
+        run: uv sync --locked --group docs
+
+      - name: Build documentation
+        run: uv run --locked mkdocs build --strict
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v4.0.0
+        with:
+          path: site
+
+  deploy:
+    if: github.event.repository.fork == false
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4.0.5

{linux_mcp_server-0.1.0.dev0 → linux_mcp_server-1.0.0}/.gitignore

@@ -20,6 +20,10 @@ wheels/
 .installed.cfg
 *.egg
 
+# Vendored packages
+src/linux_mcp_server/_vendor/*
+!src/linux_mcp_server/_vendor/__init__.py
+
 # Virtual environments
 .venv/
 venv/
@@ -29,9 +33,13 @@ env/
 # Testing
 .pytest_cache/
 .coverage
+coverage/
 htmlcov/
 .tox/
 
+# Documentation build
+site/
+
 # IDEs
 .vscode/
 .idea/
@@ -49,3 +57,5 @@ Thumbs.db
 # Configuration files (user-specific)
 config.sh
 
+.claude/settings.local.json
+CLAUDE.local.md