mcp-server-appwrite 2.1.2__tar.gz → 2.1.3__tar.gz

{mcp_server_appwrite-2.1.2 → mcp_server_appwrite-2.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mcp-server-appwrite
-Version: 2.1.2
+Version: 2.1.3
 Summary: Build and deploy application backends. Add authentication, PostgreSQL/MySQL databases, vector databases, storage, serverless functions, realtime, messaging, hosting, domains, CDN and firewall.
 License-File: LICENSE
 Requires-Python: >=3.12

{mcp_server_appwrite-2.1.2 → mcp_server_appwrite-2.1.3}/src/mcp_server_appwrite/data/docs_index.npz

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
-name: mcp_server_appwrite-2.1.2/src/mcp_server_appwrite/data/docs_index.npz
+name: mcp_server_appwrite-2.1.3/src/mcp_server_appwrite/data/docs_index.npz
 size: 35543664 bytes
 sha256: 61d266fdb9a958b272d1b351cc6ebd6e824b0d0fe294483703e0795e4b0580df

{mcp_server_appwrite-2.1.2 → mcp_server_appwrite-2.1.3}/src/mcp_server_appwrite/server.py

@@ -988,8 +988,11 @@ def _perform_bounded_binary_client_call(
     if method.lower() != "get" or response_type != "json":
         raise RuntimeError(f"Unsupported bounded binary request for {tool_name}.")
 
+    # Merge by lowercased name: the SDK repeats the project header in the call's
+    # own headers with different casing, and both copies would be sent, which
+    # Appwrite reads as one comma-joined project ID that does not exist.
     request_headers = {
-        key: value
+        key.lower(): value
         for key, value in {**client._global_headers, **(headers or {})}.items()
         if value
     }

{mcp_server_appwrite-2.1.2 → mcp_server_appwrite-2.1.3}/tests/e2e/support.py

@@ -1027,6 +1027,11 @@ SCOPES = frozenset(
 APPS_SCOPES = frozenset({"rows.read", "rows.write", "functions.write", "sites.write"})
 """The scopes the MCP Apps views need on top of :data:`SCOPES`."""
 
+PNG = base64.b64decode(
+    "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg=="
+)
+"""A 1x1 PNG: what Appwrite's image previews return, in miniature."""
+
 CUSTOM_ID = re.compile(r"[A-Za-z0-9][A-Za-z0-9._-]{0,35}")
 
 AUTH_PASSWORD_MAX = 2048
@@ -1122,17 +1127,27 @@ class Cloud:
             def _serve(self) -> None:
                 length = int(self.headers.get("Content-Length", "0") or 0)
                 body = self.rfile.read(length) if length else b""
-                headers = {name.lower(): value for name, value in self.headers.items()}
+                # A header sent twice reaches Appwrite as one comma-joined
+                # value, as the proxies in front of it combine them.
+                headers: dict[str, str] = {}
+                for name, value in self.headers.items():
+                    name = name.lower()
+                    headers[name] = (
+                        f"{headers[name]}, {value}" if name in headers else value
+                    )
                 status, payload = cloud._handle(self.command, self.path, headers, body)
-                content = b"" if payload is None else json.dumps(payload).encode()
+                if isinstance(payload, bytes):
+                    content, kind = payload, "image/png"
+                else:
+                    content = b"" if payload is None else json.dumps(payload).encode()
+                    # Appwrite answers 204 with an HTML content type, which the
+                    # Python SDK returns as raw bytes.
+                    kind = (
+                        "text/html; charset=UTF-8"
+                        if payload is None
+                        else "application/json"
+                    )
                 self.send_response(status)
-                # Appwrite answers 204 with an HTML content type, which the
-                # Python SDK returns as raw bytes.
-                kind = (
-                    "text/html; charset=UTF-8"
-                    if payload is None
-                    else "application/json"
-                )
                 self.send_header("Content-Type", kind)
                 self.send_header("Content-Length", str(len(content)))
                 self.end_headers()
@@ -1396,6 +1411,13 @@ class Cloud:
                 "bytesMax": 0,
                 "bytesUsed": 0,
             }
+        if match := re.fullmatch(
+            r"/v1/storage/buckets/([^/]+)/files/([^/]+)/preview", path
+        ):
+            need("files.read")
+            if match.group(1) not in project.buckets:
+                raise _Refusal(404, "storage_bucket_not_found", "Bucket not found")
+            return 200, PNG
         if match := re.fullmatch(r"/v1/storage/buckets/([^/]+)", path):
             need("buckets.read")
             if match.group(1) not in project.buckets:

{mcp_server_appwrite-2.1.2 → mcp_server_appwrite-2.1.3}/tests/e2e/test_tools.py

@@ -10,10 +10,11 @@ anything else, ``appwrite_call_write_tool`` is destructive and refuses reads.
 so a refused call is checked to have made no Appwrite request at all.
 """
 
+import base64
 import unittest
 from typing import Any
 
-from support import TOKEN, Client, Cloud, Project, Server, collector
+from support import PNG, SCOPES, TOKEN, Client, Cloud, Project, Server, collector
 
 PROJECT = "6630f1a2b3c4d5e6f7a8"
 HINTS = ("readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint")
@@ -40,8 +41,8 @@ cloud: Cloud
 def setUpModule() -> None:
     global cloud
     cloud = Cloud()
-    cloud.add(Project(PROJECT))
-    cloud.grant(TOKEN, {PROJECT})
+    cloud.add(Project(PROJECT, buckets={"photos"}))
+    cloud.grant(TOKEN, {PROJECT}, SCOPES | {"files.read"})
 
 
 def tearDownModule() -> None:
@@ -210,6 +211,23 @@ class ToolsFlow(unittest.TestCase):
             wrong + 2,
         )
 
+    def test_binary_reads_reach_the_project(self):
+        # The SDK sends the project header in the call's own headers too; sent
+        # twice, Appwrite reads "id, id" and finds no such project.
+        result = self.call(
+            "appwrite_call_tool",
+            {
+                "tool_name": "storage_get_file_preview",
+                "project_id": PROJECT,
+                "arguments": {"bucket_id": "photos", "file_id": "sunrise", "width": 64},
+            },
+        )
+        self.assertFalse(result.get("isError"), result)
+        (image,) = result["content"]
+        self.assertEqual(image["type"], "image")
+        self.assertEqual(image["mimeType"], "image/png")
+        self.assertEqual(base64.b64decode(image["data"]), PNG)
+
 
 if __name__ == "__main__":
     unittest.main()