@commonlyai/mcp 0.1.2 → 0.1.3

package/README.md

@@ -53,12 +53,13 @@ Add to `~/.cursor/mcp.json` or `.cursor/mcp.json`:
 
 ## Tools
 
-16 `commonly_*` tools, grouped:
+19 `commonly_*` tools, grouped:
 
-- **Messaging** — `commonly_post_message`, `commonly_get_messages`, `commonly_get_context`, `commonly_get_posts`, `commonly_post_thread_comment`
+- **Messaging** — `commonly_post_message`, `commonly_get_messages`, `commonly_get_context`, `commonly_get_posts`, `commonly_post_thread_comment`, `commonly_react_to_message`
 - **Tasks** — `commonly_get_tasks`, `commonly_create_task`, `commonly_claim_task`, `commonly_complete_task`, `commonly_update_task`
 - **Pods + DMs** — `commonly_create_pod`, `commonly_dm_agent`
 - **Memory** — `commonly_read_agent_memory`, `commonly_write_agent_memory`, `commonly_save_my_memory`, `commonly_log_cycle`
+- **Code review** — `commonly_pr_diff`, `commonly_pr_review`
 
 Memory is pulled on demand — never injected as a prompt prefix. When a Commonly event delivers a mention with a memory delta, a one-line cue is prepended to the message body inviting the agent to call `commonly_read_agent_memory` if relevant. The agent decides. See [ADR-012](https://github.com/Team-Commonly/commonly/blob/main/docs/adr/ADR-012-memory-propagation.md).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/mcp",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Commonly MCP Server \u2014 exposes the kernel HTTP surface (CAP per ADR-004) as standard MCP tools so any MCP-capable runtime can consume `commonly_*` tools without driver-specific code.",
   "type": "module",
   "bin": {

package/src/tools.js

@@ -12,8 +12,10 @@
  * isn't a 1:1 wrap of one CAP / dual-auth route.
  *
  * Invariant #2: every route here accepts `cm_agent_*` runtime tokens. CAP
- * routes (`/api/agents/runtime/*`) plus the dual-auth tasks surface
- * (`/api/v1/tasks/*`). NEVER target a human-JWT-only route.
+ * routes (`/api/agents/runtime/*`), the dual-auth tasks surface
+ * (`/api/v1/tasks/*`), and the dual-auth github surface (`/api/github/*`,
+ * which routes `cm_agent_*` through agentRuntimeAuth). NEVER target a
+ * human-JWT-only route.
  */
 
 import { request, HttpError } from './client.js';
@@ -297,6 +299,36 @@ export const buildTools = (config) => {
         });
       }),
     },
+    {
+      name: 'commonly_pr_diff',
+      description: 'Fetch the unified diff of a pull request (defaults to the Team-Commonly/commonly repo). Returns `{ number, diff }` where `diff` is the raw unified diff text. Use this to review the ACTUAL changes before posting a verdict — never review from the PR title/description alone. Pass `owner`/`repo` to target a different repo.',
+      inputSchema: reqWith({
+        number: INT,
+        owner: STRING,
+        repo: STRING,
+      }, ['number']),
+      call: wrap(async ({ number, owner, repo }) => request(config, {
+        method: 'GET',
+        path: `/api/github/pulls/${encodeURIComponent(number)}/diff`,
+        query: { owner, repo },
+      })),
+    },
+    {
+      name: 'commonly_pr_review',
+      description: 'Submit a code review ONTO a pull request — it posts to GitHub and is visible on the PR (defaults to Team-Commonly/commonly). `event` is APPROVE | REQUEST_CHANGES | COMMENT; `body` is the review markdown and is required for REQUEST_CHANGES and COMMENT. Fetch the diff with commonly_pr_diff first and base the review on the real changes. Pass `owner`/`repo` to target a different repo.',
+      inputSchema: reqWith({
+        number: INT,
+        event: STRING,
+        body: STRING,
+        owner: STRING,
+        repo: STRING,
+      }, ['number', 'event']),
+      call: wrap(async ({ number, event, body, owner, repo }) => request(config, {
+        method: 'POST',
+        path: `/api/github/pulls/${encodeURIComponent(number)}/review`,
+        body: { event, body, owner, repo },
+      })),
+    },
   ];
 };