thin-mcp 0.1.0__tar.gz

thin_mcp-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  workflow_call:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v7
+        with:
+          python-version: ${{ matrix.python-version }}
+          enable-cache: true
+      - run: uv sync --locked --extra django --group dev
+      - run: uv run ruff check .
+      - run: uv run mypy
+      - run: uv run pytest
+      - run: uv build

thin_mcp-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,87 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pypi-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  checks:
+    uses: ./.github/workflows/ci.yml
+
+  build:
+    needs: checks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v7
+        with:
+          python-version: "3.12"
+      - name: Check release tag matches package version
+        run: |
+          python - <<'PY'
+          import os
+          import tomllib
+          from pathlib import Path
+
+          version = tomllib.loads(Path("pyproject.toml").read_text())["project"]["version"]
+          tag = os.environ["GITHUB_REF_NAME"]
+          if tag != f"v{version}":
+              raise SystemExit(f"Release tag {tag!r} must match v{version}")
+          PY
+      - run: uv build --no-sources
+      - run: uvx --from twine twine check --strict dist/*
+      - name: Check core wheel installation without Django
+        run: |
+          uv venv /tmp/thin-mcp-core
+          uv pip install --python /tmp/thin-mcp-core/bin/python dist/*.whl
+          /tmp/thin-mcp-core/bin/python -I - <<'PY'
+          import importlib.util
+          from importlib.metadata import distribution
+
+          import thin_mcp
+
+          assert importlib.util.find_spec("django") is None
+          assert importlib.util.find_spec("ninja") is None
+          assert distribution("thin-mcp").locate_file("thin_mcp/py.typed").is_file()
+          PY
+      - name: Check Django extra installation
+        run: |
+          uv venv /tmp/thin-mcp-django
+          uv pip install --python /tmp/thin-mcp-django/bin/python "thin-mcp[django] @ $(echo dist/*.whl)"
+          /tmp/thin-mcp-django/bin/python -I - <<'PY'
+          from django.conf import settings
+
+          settings.configure()
+
+          from thin_mcp.django_ninja import McpAPI
+
+          assert McpAPI is not None
+          PY
+      - uses: actions/upload-artifact@v4
+        with:
+          name: python-distributions
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/thin-mcp/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: python-distributions
+          path: dist/
+      - name: Publish distributions with Trusted Publishing
+        uses: pypa/gh-action-pypi-publish@release/v1

thin_mcp-0.1.0/.gitignore

@@ -0,0 +1,10 @@
+/.coverage
+/.mypy_cache/
+/.pytest_cache/
+/.ruff_cache/
+/.venv/
+/build/
+/dist/
+/*.egg-info/
+__pycache__/
+*.py[cod]

thin_mcp-0.1.0/AGENTS.md

@@ -0,0 +1,96 @@
+# AGENTS.md
+
+## Project
+
+`thin-mcp` is a reusable, typed Python framework for the tool-serving portion
+of the Model Context Protocol. It sits between a validated MCP request and a
+host application's typed tool handlers.
+
+The package owns:
+
+- strict Pydantic MCP and JSON-RPC models;
+- protocol initialization, ping, tool listing, tool calls, and notifications;
+- typed tool registration and deterministic discovery;
+- ordered permission execution and request-scoped resources;
+- structured tool results and framework-neutral response values; and
+- an optional Django Ninja transport adapter.
+
+The consuming application owns authentication, authorization policy, routes,
+throttling, auditing, persistence, domain services, and concrete tools.
+
+## Architecture boundary
+
+Keep the dependency direction one-way:
+
+```text
+host mcp_server integration -> thin_mcp
+host mcp_server integration -> host domain services
+```
+
+Never import a host application, its models, settings, or business services
+from `src/thin_mcp/`. Do not move product-specific token scopes, roles, tenant
+rules, audit behavior, or data access into this library.
+
+The optional `django_ninja.py` module may depend on the `django` extra. All
+other modules must remain usable when Django is not installed.
+
+## Source layout
+
+```text
+src/thin_mcp/
+  schemas.py          MCP and JSON-RPC models
+  error_codes.py      JSON-RPC error codes
+  responses.py        transport-independent results
+  tools.py            registry, permissions, execution, resources
+  server.py           protocol dispatch
+  django_ninja.py     optional Django Ninja adapter
+tests/                independent package tests
+docs/                 repository-native diagrams
+```
+
+## Engineering rules
+
+- Prefer the smallest change that preserves the library boundary.
+- Keep the public API deliberate. Export supported public names from
+  `src/thin_mcp/__init__.py`; treat additions as compatibility commitments.
+- Use Pydantic models for structured boundaries and type every function and
+  method.
+- Keep tool listing and execution backed by the same `ToolRegistry` entry.
+- Preserve registration order because hosts may depend on stable `tools/list`
+  output.
+- Expected, client-actionable failures use `ToolExecutionError` or
+  `ToolPermissionDenied`. Unexpected errors must remain visible to the host for
+  logging and transport-level handling.
+- Do not add automatic filesystem or Django app discovery. Host applications
+  should explicitly import domain tool modules as described in `GUIDE.md`.
+- Keep dependencies minimal. New framework integrations belong in optional
+  extras and isolated adapter modules.
+- Update `README.md`, `GUIDE.md`, type declarations, and tests when changing a
+  public contract.
+- Keep SVG diagrams valid XML and readable without external fonts or assets.
+
+## Verification
+
+Run the narrowest affected tests first, then the complete package checks before
+finishing:
+
+```bash
+uv sync --extra django --group dev
+uv run pytest
+uv run ruff check .
+uv run mypy
+uv build
+```
+
+For packaging changes, install the built wheel in a clean environment and
+confirm that the core wheel does not install Django unless the `django` extra
+is requested.
+
+For documentation changes, verify local links, compile every Python example
+that is intended to be complete, and validate SVG files with an XML parser.
+
+## Release policy
+
+The project follows Semantic Versioning. During `0.x`, incompatible public API
+changes require a minor release and must be called out in `CHANGELOG.md`. After
+`1.0.0`, incompatible changes require a major release.

thin_mcp-0.1.0/CHANGELOG.md

@@ -0,0 +1,27 @@
+# Changelog
+
+All notable changes to this project are documented here. The project follows
+[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- GitHub Release publishing workflow using PyPI Trusted Publishing, with
+  release checks and isolated wheel installation checks.
+- Modern MCP `2026-07-28` discovery, metadata, and Streamable HTTP header
+  validation while preserving legacy initialization behavior.
+- Protocol header and method enums, plus structured unsupported-version errors.
+
+## [0.1.0] - 2026-08-31
+
+### Added
+
+- Typed MCP request, response, initialization, and tool schemas.
+- Explicit typed tool registry with permission and request-resource support.
+- Transport-independent MCP dispatch for initialization, ping, tool listing,
+  tool calls, and notifications.
+- Optional Django Ninja HTTP and exception adapter.
+
+[Unreleased]: https://github.com/wild-edge/thin-mcp/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/wild-edge/thin-mcp/releases/tag/v0.1.0