Robert Helewka
94fb6cd79d
The MCP server was created but never mounted — no client could reach
it. Mount it at /mcp/ over streamable HTTP with a combined lifespan,
resolving the gateway lazily so mounting happens at app construction.
Security and safety for the agent surface:
- One static API_TOKEN (SecretStr) enforced across REST (dependency),
WebSocket (query param/header before accept), and MCP
(StaticTokenVerifier). Startup refuses tokenless non-loopback binds.
- Emergency numbers (911/9911/112) always refused on make_call, plus a
MAX_CONCURRENT_CALLS cap; ValueError surfaces as 400/ToolError.
- Safe defaults: debug off, no credential in default DATABASE_URL,
SIP/LLM/TTS secrets as SecretStr.
Cleanups:
- Delete broken learn_call_flow tool (wrong ctor args, nonexistent
method) and the never-fed CallAnalytics service; keep
call_flow_learner for proper wiring later.
- Trim dial_plan to what is actually used (emergency guard, extension
allocation); delete the unreferenced matcher/normaliser.
- Register call_history before calls so /api/calls/history is no
longer shadowed by /api/calls/{call_id}.
- fastmcp pinned >=3.0 (http_app + StaticTokenVerifier).
New tests: MCP in-memory client (tool surface, lazy gateway, emergency
refusal, call cap) and API security (401 paths, route order, mount).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
72 lines
1.5 KiB
TOML
72 lines
1.5 KiB
TOML
[project]
|
|
name = "hold-slayer"
|
|
version = "0.1.0"
|
|
description = "AI PSTN Gateway - Hold Slayer: Navigate IVRs, wait on hold, connect you when a human answers"
|
|
readme = "README.md"
|
|
requires-python = ">=3.12"
|
|
license = "MIT"
|
|
authors = [
|
|
{name = "Robert"},
|
|
]
|
|
|
|
dependencies = [
|
|
# Web framework
|
|
"fastapi>=0.115.0",
|
|
"uvicorn[standard]>=0.32.0",
|
|
"websockets>=13.0",
|
|
|
|
# Database
|
|
"sqlalchemy[asyncio]>=2.0.36",
|
|
"asyncpg>=0.30.0",
|
|
"alembic>=1.14.0",
|
|
|
|
# Settings & validation
|
|
"pydantic>=2.10.0",
|
|
"pydantic-settings>=2.6.0",
|
|
|
|
# SIP signaling
|
|
"sippy>=1.2.0",
|
|
|
|
# Audio analysis
|
|
"numpy>=1.26.0",
|
|
"librosa>=0.10.0",
|
|
"soundfile>=0.12.0",
|
|
|
|
# HTTP client (for Speaches STT)
|
|
"httpx>=0.28.0",
|
|
|
|
# MCP server (3.x — http_app + StaticTokenVerifier)
|
|
"fastmcp>=3.0.0",
|
|
|
|
# Utilities
|
|
"python-slugify>=8.0.0",
|
|
"python-multipart>=0.0.12",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
dev = [
|
|
"pytest>=8.0.0",
|
|
"pytest-asyncio>=0.24.0",
|
|
"pytest-cov>=6.0.0",
|
|
"httpx>=0.28.0",
|
|
"ruff>=0.8.0",
|
|
]
|
|
|
|
[tool.setuptools.packages.find]
|
|
include = ["api*", "core*", "db*", "models*", "services*", "mcp_server*"]
|
|
|
|
[build-system]
|
|
requires = ["setuptools>=75.0", "wheel"]
|
|
build-backend = "setuptools.build_meta"
|
|
|
|
[tool.pytest.ini_options]
|
|
asyncio_mode = "auto"
|
|
testpaths = ["tests"]
|
|
|
|
[tool.ruff]
|
|
target-version = "py312"
|
|
line-length = 100
|
|
|
|
[tool.ruff.lint]
|
|
select = ["E", "F", "I", "N", "W", "UP"]
|