mcp-server-appwrite 2.1.1__tar.gz → 2.1.2__tar.gz

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mcp-server-appwrite
-Version: 2.1.1
+Version: 2.1.2
 Summary: Build and deploy application backends. Add authentication, PostgreSQL/MySQL databases, vector databases, storage, serverless functions, realtime, messaging, hosting, domains, CDN and firewall.
 License-File: LICENSE
 Requires-Python: >=3.12

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/src/mcp_server_appwrite/apps/resource.py

@@ -2,6 +2,10 @@
 
 One HTML document (``assets/view.html``, plain JavaScript with no build step)
 renders every view; it picks one from the tool result's ``structuredContent``.
+Hosts cache UI resources by URI, so the tools point at
+``ui://appwrite/view/<hash of the HTML>``: a release that changes the view
+changes the URI, and hosts fetch it again. The bare ``ui://appwrite/view``
+still serves the current HTML for tool lists cached before versioning.
 It declares no CSP domains, so hosts apply SEP-1865's restrictive default: no
 network access and no external scripts. Every Appwrite read and write it makes
 is a ``tools/call`` the host proxies to this server under the user's own
@@ -11,6 +15,7 @@ credentials.
 from __future__ import annotations
 
 from functools import cache
+from hashlib import sha256
 from importlib.resources import files
 from typing import Any
 
@@ -23,14 +28,30 @@ from .protocol import MIME_TYPE
 META: dict[str, Any] = {"ui": {"csp": {}, "prefersBorder": True}}
 
 
+VERSION_LENGTH = 12
+"""Hex digits of the HTML's SHA-256 in the URI: enough that two releases
+never collide."""
+
+
 @cache
 def html() -> str:
     return files("mcp_server_appwrite.assets").joinpath("view.html").read_text()
 
 
+@cache
+def uri() -> str:
+    """The URI the tools point at, versioned by the HTML it serves."""
+    digest = sha256(html().encode("utf-8")).hexdigest()[:VERSION_LENGTH]
+    return f"{VIEW_URI}/{digest}"
+
+
+def serves(requested: str) -> bool:
+    return requested in (uri(), VIEW_URI)
+
+
 def resource() -> types.Resource:
     return types.Resource(
-        uri=VIEW_URI,
+        uri=uri(),
         name="Appwrite view",
         description=(
             "Interactive Appwrite view: table rows and deployment build logs."

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/src/mcp_server_appwrite/apps/views.py

@@ -27,7 +27,8 @@ from typing import Any
 import mcp.types as types
 from appwrite_console.query import Query
 
-from ..constants import SHOW_TOOL_NAME, VIEW_URI, VIEW_WRITE_TOOL_NAME
+from ..constants import SHOW_TOOL_NAME, VIEW_WRITE_TOOL_NAME
+from . import resource
 
 Run = Callable[[dict[str, Any], bool], list[Any]]
 """Runs a hidden catalog tool from raw call arguments (``tool_name``,
@@ -278,10 +279,10 @@ def _show_tool() -> types.Tool:
             "additionalProperties": False,
         },
         _meta={
-            "ui": {"resourceUri": VIEW_URI, "visibility": ["model", "app"]},
+            "ui": {"resourceUri": resource.uri(), "visibility": ["model", "app"]},
             # The flat key hosts read before ``ui.resourceUri``; SEP-1865 drops
             # it at GA.
-            "ui/resourceUri": VIEW_URI,
+            "ui/resourceUri": resource.uri(),
         },
     )
 
@@ -307,7 +308,7 @@ def _write_tool() -> types.Tool:
             "required": ["tool_name", "arguments", "confirm_write"],
             "additionalProperties": False,
         },
-        _meta={"ui": {"resourceUri": VIEW_URI, "visibility": ["app"]}},
+        _meta={"ui": {"resourceUri": resource.uri(), "visibility": ["app"]}},
     )
 
 

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/src/mcp_server_appwrite/data/docs_index.npz

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
-name: mcp_server_appwrite-2.1.1/src/mcp_server_appwrite/data/docs_index.npz
+name: mcp_server_appwrite-2.1.2/src/mcp_server_appwrite/data/docs_index.npz
 size: 35543664 bytes
 sha256: 61d266fdb9a958b272d1b351cc6ebd6e824b0d0fe294483703e0795e4b0580df

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/src/mcp_server_appwrite/operator.py

@@ -33,7 +33,6 @@ from .constants import (
     SEARCH_TOOL_NAME,
     UPDATE_HINTS,
     VERBS,
-    VIEW_URI,
     WRITE_TOOL_NAME,
 )
 from .docs_search import DocsSearch
@@ -437,7 +436,7 @@ class Operator:
         if uri == CATALOG_URI:
             return [ReadResourceContents(self._cached_catalog_json, "application/json")]
 
-        if apps and uri == VIEW_URI:
+        if apps and view_resource.serves(uri):
             return [view_resource.read()]
 
         if (

{mcp_server_appwrite-2.1.1 → mcp_server_appwrite-2.1.2}/tests/e2e/test_apps.py

@@ -8,7 +8,9 @@ the view pages, refreshes, follows a build and saves an edit.
 checked to have reached no Appwrite write at all.
 """
 
+import hashlib
 import json
+import re
 import unittest
 from typing import Any
 
@@ -164,15 +166,18 @@ class AppsFlow(unittest.TestCase):
 
         listed = tools(self.host)
         show = listed["appwrite_show"]
+        # Hosts cache UI resources by URI, so the URI carries the HTML's hash:
+        # a release that changes the view makes hosts fetch it again.
+        uri = show["_meta"]["ui"]["resourceUri"]
+        self.assertRegex(uri, rf"^{re.escape(VIEW_URI)}/[0-9a-f]{{12}}$")
         self.assertEqual(
-            show["_meta"]["ui"],
-            {"resourceUri": VIEW_URI, "visibility": ["model", "app"]},
+            show["_meta"]["ui"], {"resourceUri": uri, "visibility": ["model", "app"]}
         )
-        self.assertEqual(show["_meta"]["ui/resourceUri"], VIEW_URI)
+        self.assertEqual(show["_meta"]["ui/resourceUri"], uri)
         self.assertTrue(show["annotations"]["readOnlyHint"])
         write = listed["appwrite_view_write"]
         self.assertEqual(
-            write["_meta"]["ui"], {"resourceUri": VIEW_URI, "visibility": ["app"]}
+            write["_meta"]["ui"], {"resourceUri": uri, "visibility": ["app"]}
         )
         self.assertTrue(write["annotations"]["destructiveHint"])
         # The operator tools are unchanged.
@@ -182,12 +187,13 @@ class AppsFlow(unittest.TestCase):
 
         _, response = self.host.call("resources/list")
         view = next(
-            each for each in response["result"]["resources"] if each["uri"] == VIEW_URI
+            each for each in response["result"]["resources"] if each["uri"] == uri
         )
         self.assertEqual(view["mimeType"], MIME_TYPE)
 
-        _, response = self.host.call("resources/read", {"uri": VIEW_URI})
+        _, response = self.host.call("resources/read", {"uri": uri})
         (contents,) = response["result"]["contents"]
+        self.assertEqual(contents["uri"], uri)
         self.assertEqual(contents["mimeType"], MIME_TYPE)
         # No CSP domains: the host's restrictive default, no network access.
         self.assertEqual(contents["_meta"]["ui"], {"csp": {}, "prefersBorder": True})
@@ -197,6 +203,12 @@ class AppsFlow(unittest.TestCase):
         # Appwrite data reaches the DOM as text only.
         self.assertNotIn("innerHTML", html)
         self.assertNotIn("insertAdjacentHTML", html)
+        digest = hashlib.sha256(html.encode("utf-8")).hexdigest()[:12]
+        self.assertEqual(uri, f"{VIEW_URI}/{digest}")
+
+        # Tool lists cached before the URI was versioned still resolve.
+        _, response = self.host.call("resources/read", {"uri": VIEW_URI})
+        self.assertEqual(response["result"]["contents"][0]["text"], html)
 
     def test_hosts_without_apps_are_not_offered_the_view(self):
         with self.server.client() as plain:
@@ -205,7 +217,7 @@ class AppsFlow(unittest.TestCase):
             self.assertNotIn("appwrite_view_write", listed)
             _, response = plain.call("resources/list")
             uris = {each["uri"] for each in response["result"]["resources"]}
-            self.assertNotIn(VIEW_URI, uris)
+            self.assertFalse(any(each.startswith(VIEW_URI) for each in uris))
 
         # A 2025-era client on the stateless transport lists tools without a
         # session, so its capabilities are unknown and the view is offered.