Component Sourcing MCP v0.7.0-rc.4

Component Sourcing MCP v0.7.0-rc.4

First public source snapshot with a fresh history. Includes 45 tools for SZLCSC/JLCPCB sourcing, pricing, datasheets, EasyEDA/Altium and managed component libraries, plus one Resource and one Prompt. Mouser, Huaqiu and DigiKey are integration candidates; their adapters are not implemented in this version.

The Python distribution is component-sourcing-mcp; the module szlcsc_mcp, old CLI alias and szlcsc_* tool names remain compatible. Altium parsing/writing is now an explicit [altium] extra, requiring Python 3.12+. The default sourcing installation excludes its known vulnerable lxml/Pillow pins. Review the dependency security record before enabling CAD. AGPL dependencies are disclosed in THIRD_PARTY_NOTICES.md.

Validation: 203 unit/mock tests passed; all eight MCP transport groups passed in both the full development environment and a separate default sourcing environment. The default environment's dependency audit reported no known vulnerabilities. Public CI also verified the core on Python 3.11 and full tests on Python 3.12. CI for the original release commit.

Installed-wheel live probes recorded 13 passes, four JLCPCB access/rate restrictions and one network timeout. A bounded alternatives recheck recovered with an empty result; it does not validate candidate availability or ranking. See the validation record for limits.

Full manual Altium GUI/Datasheet manufacturing acceptance is NOT_RUN. This remains a pre-release. No publication to PyPI is implied; install from the source snapshot or attached wheel, and verify it with SHA256SUMS.txt.

Release commit: 1b0771e2241d608783dd00a26e32c0d5ac62e5ef.

The original rc.4 artifacts are preserved byte-for-byte. Follow-up fixes for component constraint matching, final candidate filters and optional Altium readiness are available on main; see the bug-fix record. Those follow-up changes are not included in these original rc.4 attachments.