feat: Google Sheets MCP to replace legacy tool bundle (#723)

* wip: init commit of google sheet MCP

* wip: fix issues, add update_cells

* feat: improve tools, add dockerfile

* chore: clean up

* feat: clear_range tool

Author: tybalex

.github/workflows/google-sheets-build.yaml

@@ -0,0 +1,58 @@
+name: Build release google sheets
+
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - 'google/sheets/**'
+    branches:
+      - main
+
+jobs:
+  oss-tools-build:
+    runs-on: depot-ubuntu-22.04
+    concurrency:
+      group: google-sheets-build
+      cancel-in-progress: true
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.GHCR_USERNAME }}
+          password: ${{ secrets.GHCR_TOKEN }}
+
+      - name: Build and Push Docker image
+        uses: depot/build-push-action@v1
+        id: build-and-push
+        with:
+          project: bbqjs4tj1g
+          context: ./google/sheets
+          push: true
+          pull: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/${{ github.repository }}/google-sheets:latest
+
+      - name: Install Cosign
+        uses: sigstore/[email protected]
+        with:
+          cosign-release: 'v2.4.3'
+
+      - name: Sign Images
+        env:
+          DIGEST: ${{ steps.build-and-push.outputs.digest }}
+          TAGS: ghcr.io/${{ github.repository }}/google-sheets:latest
+        run: |
+          images=""
+          for tag in ${TAGS}; do
+            images+="${tag}@${DIGEST} "
+          done
+          cosign sign --yes ${images}

google/sheets/.python-version

@@ -0,0 +1 @@
+3.13

google/sheets/Dockerfile

@@ -0,0 +1,27 @@
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+
+# Prevents Python from writing .pyc files and buffers stdout/stderr
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+WORKDIR /app
+
+# Install system deps (if any needed) - using apt for Debian
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy uv project files first for better Docker layer caching
+COPY pyproject.toml uv.lock ./
+
+# Copy your application code (needed for local package build)
+COPY . .
+
+# Install dependencies using uv sync (faster and more reliable)
+RUN uv sync --frozen --no-dev --no-editable
+
+EXPOSE 9000
+
+# Start the server using uv run (ensures proper virtual environment)
+CMD ["uv", "run", "python", "-m", "app.server"]

google/sheets/app/__init__.py

@@ -1,35 +1,24 @@
-import os
 
 from google.oauth2.credentials import Credentials
 from googleapiclient.discovery import build
 from googleapiclient.errors import HttpError
+import gspread
+from fastmcp.exceptions import ToolError
 
 
-def client(service_name: str, version: str):
-    token = os.getenv('GOOGLE_OAUTH_TOKEN')
-    if token is None:
-        raise ValueError("GOOGLE_OAUTH_TOKEN environment variable is not set")
-
+def get_google_client(token: str, service_name: str = "sheets", version: str = "v4"):
     creds = Credentials(token=token)
     try:
         service = build(serviceName=service_name, version=version, credentials=creds)
         return service
     except HttpError as err:
-        print(err)
-        exit(1)
-
+        raise ToolError(f"Error getting Google client: {err}")
 
-def gspread_client():
-    import gspread
-    token = os.getenv('GOOGLE_OAUTH_TOKEN')
-    if token is None:
-        raise ValueError("GOOGLE_OAUTH_TOKEN environment variable is not set")
 
+def get_gspread_client(token: str) -> gspread.Client:
     creds = Credentials(token=token)
     try:
         service = gspread.authorize(creds)
-
         return service
     except HttpError as err:
-        print(err)
-        exit(1)
+        raise ToolError(f"Error getting Gspread client: {err}")