mcpaisuite-kernelmcp 1.0.3__tar.gz

mcpaisuite_kernelmcp-1.0.3/.bandit

@@ -0,0 +1,5 @@
+# B104: 0.0.0.0 binding is intentional for A2A server (container/Docker use)
+# B108: /tmp references are path-matching guards, not insecure temp file usage
+skips:
+  - B104
+  - B108

mcpaisuite_kernelmcp-1.0.3/.github/workflows/ci.yml

@@ -0,0 +1,35 @@
+name: CI — kernelmcp
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ['3.11', '3.12', '3.13']
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install sister libs (not yet on PyPI)
+        run: |
+          pip install "websearchmcp @ git+https://github.com/gashel01/websearchmcp.git@main"
+          pip install "ltpmcp @ git+https://github.com/gashel01/ltpmcp.git@main"
+          pip install "evalmcp @ git+https://github.com/gashel01/evalmcp.git@main"
+      - name: Install package
+        run: pip install -e ".[dev]"
+      - name: Lint (ruff)
+        run: |
+          pip install ruff
+          ruff check .
+      - name: Security scan (bandit)
+        run: |
+          pip install bandit
+          bandit -r kernelmcp/ -c .bandit --severity-level medium 2>&1 || true
+      - name: Tests
+        run: python -m pytest tests/ -v --tb=short --cov=kernelmcp --cov-report=term-missing --cov-fail-under=35

mcpaisuite_kernelmcp-1.0.3/.github/workflows/release.yml

@@ -0,0 +1,26 @@
+name: release
+# Publishes to PRODUCTION PyPI (pypi.org) when you push a version tag, e.g.
+# `git tag v1.0.3 && git push --tags`.
+# Auth = PyPI Trusted Publishing (OIDC): NO stored token. You must add this repo+workflow
+# as a (pending) trusted publisher on pypi.org first: https://pypi.org/manage/account/publishing/
+on:
+  push:
+    tags:
+      - 'v*'
+jobs:
+  pypi:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read    # checkout needs read access (private repo)
+      id-token: write   # short-lived OIDC token for Trusted Publishing — no secret stored
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Build sdist + wheel
+        run: |
+          python -m pip install --upgrade build
+          python -m build
+      - name: Publish to PyPI (Trusted Publishing, no token)
+        uses: pypa/gh-action-pypi-publish@release/v1

mcpaisuite_kernelmcp-1.0.3/.gitignore

@@ -0,0 +1,32 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.eggs/
+.env
+.env.*
+*.log
+.venv/
+venv/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+htmlcov/
+.coverage
+*.db
+*.sqlite3
+node_modules/
+.next/
+.DS_Store
+Thumbs.db
+
+# Only push README.md — exclude all other .md files
+*.md
+!README.md
+
+# Root test files with hardcoded paths
+test_post_roadmap.py
+test_s1_s2.py
+test_taskforce.py
+test.txt

mcpaisuite_kernelmcp-1.0.3/Dockerfile

@@ -0,0 +1,30 @@
+# Stage 1: Build — install all MCP libs
+FROM python:3.12-slim AS builder
+
+WORKDIR /build
+
+COPY pyproject.toml ./
+COPY kernelmcp/ kernelmcp/
+
+RUN pip install --no-cache-dir --prefix=/install \
+    . \
+    ragmcp searchmcp webextractormcp schedulermcp \
+    auditmcp metronomemcp reactmcp ltpmcp taskforcemcp browsermcp
+
+# Stage 2: Slim runtime
+FROM python:3.12-slim
+
+WORKDIR /app
+
+COPY --from=builder /install /usr/local
+COPY kernelmcp/ kernelmcp/
+
+RUN useradd --create-home appuser
+USER appuser
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/health')"
+
+ENTRYPOINT ["kernelmcp", "start", "--mode", "agent"]