mcp_run_isolated_python 0.0.0__tar.gz → 0.2.0__tar.gz

mcp_run_isolated_python-0.2.0/.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# These are supported funding model platforms
+
+github: kigstn
+ko_fi: kigstn

mcp_run_isolated_python-0.2.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

mcp_run_isolated_python-0.2.0/.github/ISSUE_TEMPLATE/feature-form.yml

@@ -0,0 +1,30 @@
+name: Feature Request
+description: Request a new feature
+title: "[Feature Request]: "
+labels: ["enhancement", "triage"]
+
+assignees:
+  - Kigstn
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this feature request!
+        Please complete the following form to help us assist you.
+
+  - type: textarea
+    id: feature-description
+    attributes:
+      label: Feature Description
+      description: Describe the feature you are requesting. Try to reference examples when possible.
+    validations:
+      required: true
+
+  - type: textarea
+    id: value-add
+    attributes:
+      label: Value of Feature
+      description: Why is this feature valuable?
+    validations:
+      required: false

mcp_run_isolated_python-0.2.0/.github/ISSUE_TEMPLATE/issue-form.yml

@@ -0,0 +1,47 @@
+name: Bug Report
+description: File a bug report
+title: "[Bug]: "
+labels: ["bug", "triage"]
+
+assignees:
+  - Kigstn
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report!
+        Please complete the following form to help us assist you.
+
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: Bug Description
+      description: What happened? If you have screenshots, please add them here.
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps-to-reproduce
+    attributes:
+      label: Steps to Reproduce
+      description: Which steps should someone take to run into the same error?
+    validations:
+      required: true
+
+  - type: input
+    id: webpage
+    attributes:
+      label: Webpage
+      description: The URL where the error happened.
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Relevant Browser Console Logs / Errors
+      description: Please copy and paste any relevant log output if there is any. This will be automatically formatted into code, so no need for backticks.
+      render: shell
+    validations:
+      required: false

mcp_run_isolated_python-0.2.0/.github/ISSUE_TEMPLATE/question-form.yml

@@ -0,0 +1,31 @@
+name: General Question
+description: Ask a question
+title: "[Question]: "
+labels: ["question"]
+
+assignees:
+  - Kigstn
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this question form!
+        Please complete the following form to help us assist you.
+
+  - type: checkboxes
+    id: pre-question
+    attributes:
+      label: Question Validation
+      description: By submitting this issue, you agree that you've previously search the existing GitHub issues and did not find a proper answer to your question.
+      options:
+        - label: I have searched both the my question is not a duplicate.
+          required: true
+
+  - type: textarea
+    id: question
+    attributes:
+      label: Question
+      description: Ask your question here!
+    validations:
+      required: true

mcp_run_isolated_python-0.2.0/.github/actions/setup_python_environment/action.yaml

@@ -0,0 +1,30 @@
+name: Setup Python Environment
+description: Sets up python environment
+
+inputs:
+    python-version:
+        description: "Python version to use (e.g., 3.10, 3.11, etc.)"
+        required: false
+        default: "3.13"
+
+runs:
+  using: "composite"
+
+  steps:
+    - name: Set up `uv`
+      uses: astral-sh/setup-uv@v7
+      with:
+        python-version: ${{ inputs.python-version }}
+
+    - name: Install requirements
+      shell: bash
+      run: uv sync --all-extras --dev
+
+    - name: Install node
+      uses: actions/setup-node@v6
+
+    - name: Install srt & deps
+      shell: bash
+      run: |
+        npm install -g @anthropic-ai/sandbox-runtime@'<=0.0.64'
+        sudo apt-get install ripgrep socat bubblewrap

mcp_run_isolated_python-0.2.0/.github/pull_request_template.md

@@ -0,0 +1,15 @@
+## What type of pull request is this?
+<!-- Check whichever applies to your PR -->
+
+- [ ] Hotfix change
+- [ ] Non-breaking code change
+- [ ] Breaking code change
+- [ ] Database change
+- [ ] Tests change
+- [ ] CI change
+- [ ] Other: [Replace with a description]
+
+## Description
+<!-- Clearly and concisely describe what this PR is for, and why you feel it should be merged. -->
+<!-- Ideally include a bullet-pointed list outlining the changes you have made -->
+

mcp_run_isolated_python-0.2.0/.github/workflows/publish.yml

@@ -0,0 +1,73 @@
+name: "Publish to PyPI"
+
+on:
+  push:
+    tags:
+      # Publish on any tag starting with a `v`, e.g., v0.1.0
+      - v*
+
+jobs:
+  pypi:
+    runs-on: ubuntu-latest
+
+    environment:
+      name: pypi
+
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Python Environment
+        uses: ./.github/actions/setup_python_environment
+
+      - name: Build
+        run: uv build
+
+      - name: Publish
+        run: uv publish
+
+  docker_hub:
+    runs-on: ubuntu-latest
+
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: kigstn/mcp-run-isolated-python
+
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Generate artifact attestation
+        uses: actions/attest@v4
+        with:
+          subject-name: index.docker.io/kigstn/mcp-run-isolated-python
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

mcp_run_isolated_python-0.2.0/.github/workflows/pytest.yml

@@ -0,0 +1,39 @@
+name: Pytest
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  pytest:
+    # running on ubuntu 22 due to this bug:
+    # https://github.com/anthropic-experimental/sandbox-runtime/issues/74
+    runs-on: ubuntu-22.04
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: [ "3.10", "3.11", "3.12", "3.13", "3.14", "3.14t" ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Python Environment
+        uses: ./.github/actions/setup_python_environment
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Test with Pytest
+        run: |
+          # install pytest sugar for nicer logs
+          uv pip install pytest-sugar
+          
+          uv run --frozen pytest . --force-sugar --color=yes --disable-warnings -qq -r fE
+  

mcp_run_isolated_python-0.2.0/.github/workflows/ruff_format.yml

@@ -0,0 +1,25 @@
+name: Ruff Formater
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  ruff_format:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Python Environment
+        uses: ./.github/actions/setup_python_environment
+
+      - name: Run Ruff Formater
+        run: uv run ruff format --check .

mcp_run_isolated_python-0.2.0/.github/workflows/ruff_linter.yml

@@ -0,0 +1,25 @@
+name: Ruff Linter
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  ruff_linter:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Python Environment
+        uses: ./.github/actions/setup_python_environment
+
+      - name: Run Ruff Linter
+        run: uv run ruff check --output-format=github .

mcp_run_isolated_python-0.2.0/.github/workflows/ty.yml

@@ -0,0 +1,25 @@
+name: Ty Type Checking
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  ruff_linter:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Python Environment
+        uses: ./.github/actions/setup_python_environment
+
+      - name: Run Ty
+        run: uv run ty check --output-format=concise .

mcp_run_isolated_python-0.2.0/.gitignore

@@ -0,0 +1,143 @@
+.testing/
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+.pdm.toml
+.pdm-python
+.pdm-build/
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+.idea/
+
+*/todo*
+*.db
+*.egg-info

mcp_run_isolated_python-0.2.0/.intelij/Run CLI.run.xml

@@ -0,0 +1,18 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="Run CLI" type="UvRunConfigurationType" factoryName="UvRunConfigurationType">
+    <option name="args">
+      <list />
+    </option>
+    <option name="checkSync" value="false" />
+    <option name="env">
+      <map />
+    </option>
+    <option name="runType" value="SCRIPT" />
+    <option name="scriptOrModule" value="./src/mcp_run_isolated_python/cli.py" />
+    <option name="uvArgs">
+      <list />
+    </option>
+    <option name="uvSdkKey" value="uv (mcp-run-isolated-python)" />
+    <method v="2" />
+  </configuration>
+</component>

mcp_run_isolated_python-0.2.0/.intelij/Run MCP server.run.xml

@@ -0,0 +1,18 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="Run MCP server" type="UvRunConfigurationType" factoryName="UvRunConfigurationType">
+    <option name="args">
+      <list />
+    </option>
+    <option name="checkSync" value="false" />
+    <option name="env">
+      <map />
+    </option>
+    <option name="runType" value="SCRIPT" />
+    <option name="scriptOrModule" value="./src/mcp_run_isolated_python/mcp_server.py" />
+    <option name="uvArgs">
+      <list />
+    </option>
+    <option name="uvSdkKey" value="uv (mcp-run-isolated-python)" />
+    <method v="2" />
+  </configuration>
+</component>

mcp_run_isolated_python-0.2.0/.intelij/Run Tests.run.xml

@@ -0,0 +1,21 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="Run Tests" type="tests" factoryName="py.test">
+    <module name="mcp-run-isolated-python" />
+    <option name="ENV_FILES" value="" />
+    <option name="INTERPRETER_OPTIONS" value="" />
+    <option name="PARENT_ENVS" value="true" />
+    <option name="SDK_HOME" value="" />
+    <option name="SDK_NAME" value="uv (mcp-run-isolated-python)" />
+    <option name="WORKING_DIRECTORY" value="$ProjectFileDir$" />
+    <option name="IS_MODULE_SDK" value="false" />
+    <option name="ADD_CONTENT_ROOTS" value="true" />
+    <option name="ADD_SOURCE_ROOTS" value="true" />
+    <option name="RUN_TOOL" value="true" />
+    <option name="_new_keywords" value="&quot;&quot;" />
+    <option name="_new_parameters" value="&quot;&quot;" />
+    <option name="_new_additionalArguments" value="&quot;&quot;" />
+    <option name="_new_target" value="&quot;.&quot;" />
+    <option name="_new_targetType" value="&quot;PATH&quot;" />
+    <method v="2" />
+  </configuration>
+</component>

mcp_run_isolated_python-0.2.0/.pre-commit-config.yaml

@@ -0,0 +1,25 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    # Ruff version.
+    rev: v0.16.6
+    hooks:
+      # Run the linter.
+      - id: ruff-check
+        types_or: [ python, pyi, jupyter ]
+        args: [ --fix ]
+        priority: 10
+
+      # Run the formatter.
+      - id: ruff-format
+        types_or: [ python, pyi, jupyter ]
+        priority: 0
+
+  # Gitleaks
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+        priority: 10

mcp_run_isolated_python-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,2 @@
+## Contributions
+Contributions are more than welcome if you find bugs / are interested in new features!

mcp_run_isolated_python-0.2.0/Dockerfile

@@ -0,0 +1,81 @@
+# Adapted from:
+# - https://github.com/astral-sh/uv-docker-example/blob/main/standalone.Dockerfile
+
+# Args to make configurable easily
+ARG ENVIROMENT="trixie-slim"
+
+# ----------------------------
+# Builder stage
+# ----------------------------
+FROM ghcr.io/astral-sh/uv:${ENVIROMENT} AS builder
+
+# Args to make configurable easily
+ARG PYTHON_VERSION="3.13"
+ARG PYTHON_DEPENDENCIES="pydantic"
+
+# Setup uv environment variables
+# Configure the Python directory so it is consistent
+ENV UV_COMPILE_BYTECODE=1
+ENV UV_LINK_MODE=copy
+ENV UV_PYTHON_INSTALL_DIR=/python
+ENV UV_PYTHON_PREFERENCE=only-managed
+
+# Install Python before the project for caching
+RUN uv python install ${PYTHON_VERSION}
+
+# Install the custom uv environment that will be used by the code executor
+WORKDIR /sandbox
+RUN uv venv --python ${PYTHON_VERSION}
+RUN uv pip install ${PYTHON_DEPENDENCIES}
+
+# Copy project source
+WORKDIR /code
+COPY . .
+
+# make sure the srt default config has the `enableWeakerNestedSandbox` set to true (needed for docker)
+RUN sed -i 's/"enableWeakerNestedSandbox": *false/"enableWeakerNestedSandbox": true/' ./default_srt_settings.json
+
+# Install project + deps into venv
+RUN uv sync --frozen --no-editable --no-dev
+
+# ----------------------------
+# Final stage
+# ----------------------------
+# Then, use a final image with uv and with node
+FROM node:${ENVIROMENT}
+LABEL authors="daniel.j"
+
+# install certs & required deps
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ca-certificates \
+    && apt-get install -y ripgrep socat bubblewrap \
+    && rm -rf /var/lib/apt/lists/*
+
+# install the srt sandbox
+RUN npm install -g @anthropic-ai/sandbox-runtime@'<=0.0.64'
+
+WORKDIR /code
+
+# Setup a non-root user
+RUN groupadd --system --gid 999 nonroot \
+ && useradd --system --gid 999 --uid 999 --create-home nonroot
+
+# Copy the Python version
+COPY --from=builder --chown=python:python /python /python
+
+# uv, so users of the prebuilt image can add packages at runtime via -e PYTHON_DEPENDENCIES
+COPY --from=builder /usr/local/bin/uv /usr/local/bin/uv
+
+# Copy project (with venv)
+COPY --from=builder --chown=nonroot:nonroot /code /code
+
+# Copy Sandbox
+COPY --from=builder --chown=nonroot:nonroot /sandbox /sandbox
+
+# Place executables in the environment at the front of the path
+ENV PATH="/code/.venv/bin:$PATH"
+
+EXPOSE 6400
+
+COPY --chmod=755 docker-entrypoint.sh /docker-entrypoint.sh
+ENTRYPOINT ["/docker-entrypoint.sh"]