nextcloud-agent 2.4.1__tar.gz → 2.4.2__tar.gz

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nextcloud-agent
-Version: 2.4.1
+Version: 2.4.2
 Summary: Nextcloud MCP Server for Agentic AI!
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/nextcloud_agent/api/api_client_base.py

@@ -33,6 +33,12 @@ class _StreamedResponse(Protocol):
     def close(self) -> Any: ...
 
 
+def _allowed_private_hosts() -> set[str]:
+    """Hosts the operator admits for private addresses and plain http (R002)."""
+    raw = setting("NEXTCLOUD_ALLOWED_PRIVATE_HOSTS", "")
+    return {host.lower().rstrip(".") for host in csv_values(raw)}
+
+
 def _origin(url: str, *, require_clean_base: bool = False) -> tuple[str, str, int]:
     try:
         parsed = urlsplit(url)
@@ -57,8 +63,11 @@ def _origin(url: str, *, require_clean_base: bool = False) -> tuple[str, str, in
             loopback = ipaddress.ip_address(host).is_loopback
         except ValueError:
             loopback = host == "localhost"
-        if not loopback:
-            raise ValueError("unencrypted service URL is restricted to loopback")
+        if not loopback and host not in _allowed_private_hosts():
+            raise ValueError(
+                "unencrypted service URL is restricted to loopback and "
+                "NEXTCLOUD_ALLOWED_PRIVATE_HOSTS"
+            )
     return scheme, host, port
 
 
@@ -169,7 +178,7 @@ class BaseApiClient:
     def files_dav(self) -> WebDavBackend:
         """The SDK WebDAV backend on the files root (CONN-NEXTCLOUD-AGENT-R002)."""
         if self._files_dav is None:
-            hosts = tuple(csv_values(setting("NEXTCLOUD_ALLOWED_PRIVATE_HOSTS", "")))
+            hosts = tuple(sorted(_allowed_private_hosts()))
             self._files_dav = WebDavBackend(
                 self.webdav_base,
                 username=self.username,

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/nextcloud_agent/ontology/certification.json

@@ -29,5 +29,5 @@
   "signer": "UNSIGNED-PREVIEW",
   "signing_public_key": "",
   "status": "source-validated",
-  "validated_at": "2026-11-05T11:57:01Z"
+  "validated_at": "2026-11-05T12:20:44Z"
 }

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/nextcloud_agent.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: nextcloud-agent
-Version: 2.4.1
+Version: 2.4.2
 Summary: Nextcloud MCP Server for Agentic AI!
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "nextcloud-agent"
-version = "2.4.1"
+version = "2.4.2"
 description = "Nextcloud MCP Server for Agentic AI!"
 readme = "README.md"
 classifiers = [ "Development Status :: 3 - Alpha", "License :: OSI Approved :: MIT License", "Environment :: Console", "Operating System :: POSIX :: Linux", "Programming Language :: Python :: 3",]

{nextcloud_agent-2.4.1 → nextcloud_agent-2.4.2}/tests/test_files_webdav.py

@@ -143,3 +143,13 @@ def test_sdk_pin_carries_storage_backend():
     from scion_sdk.storage import WebDavBackend as Backend
 
     assert Backend.backend_type == "webdav"
+
+
+@pytest.mark.spec("CONN-NEXTCLOUD-AGENT-R002")
+def test_plain_http_is_admitted_only_for_listed_hosts(monkeypatch):
+    monkeypatch.delenv("NEXTCLOUD_ALLOWED_PRIVATE_HOSTS", raising=False)
+    with pytest.raises(ValueError, match="restricted to loopback"):
+        NextcloudAPI(base_url="http://files.example", username="svc", password="pw")
+    monkeypatch.setenv("NEXTCLOUD_ALLOWED_PRIVATE_HOSTS", "files.example")
+    client = NextcloudAPI(base_url="http://files.example", username="svc", password="pw")
+    assert client.files_dav.backend_type == "webdav"