@mgsoftwarebv/mg-dashboard-mcp 7.4.14 → 7.4.15

package/dist/index.js

@@ -1136,6 +1136,128 @@ async function waitForCompletion(conn, proxy, sshExec2, instance, runId, waitSec
     }]
   };
 }
+
+// src/github-code-access-tools.ts
+var GITHUB_CODE_ACCESS_TOOLS = [
+  {
+    name: "get_mg_dashboard_file",
+    description: "Read ONE source file at a git ref for an allowlisted GitHub org/repo (CODE_BATTLE_GITHUB_ORGS, default MGSoftwareBV). Use after get_mg_dashboard_commits when commit subjects are not enough to judge exists / polish / new. Returns metadata + text content (secrets redacted). Credential paths (.env, keys) are denied. Binary files return { binary: true } with no payload. Full diffs are never attached to get_mg_dashboard_commits \u2014 use get_mg_dashboard_diff for a compact patch.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repository: {
+          type: "string",
+          description: "owner/repo, e.g. MGSoftwareBV/mg-dashboard. Org must be allowlisted."
+        },
+        ref: {
+          type: "string",
+          description: "Commit sha, branch, or tag."
+        },
+        path: {
+          type: "string",
+          description: "File path inside the repo (not a directory)."
+        }
+      },
+      required: ["repository", "ref", "path"]
+    }
+  },
+  {
+    name: "get_mg_dashboard_diff",
+    description: "Fetch a COMPACT unified diff for one commit sha XOR one pull request number, same org allowlist as get_mg_dashboard_file. Returns per-file path/status/+/- and a truncated patch (secrets redacted). Binary files are omitted. Does not change get_mg_dashboard_commits (metadata-only by design).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        repository: {
+          type: "string",
+          description: "owner/repo, e.g. MGSoftwareBV/mg-dashboard. Org must be allowlisted."
+        },
+        sha: {
+          type: "string",
+          description: "Commit sha. Provide exactly one of sha or pullNumber."
+        },
+        pullNumber: {
+          type: "number",
+          description: "Pull request number. Provide exactly one of sha or pullNumber."
+        }
+      },
+      required: ["repository"]
+    }
+  }
+];
+async function handleGithubCodeAccessTool(name, args2, ctx) {
+  if (name === "get_mg_dashboard_file") {
+    const repository = typeof args2.repository === "string" ? args2.repository.trim() : "";
+    const ref = typeof args2.ref === "string" ? args2.ref.trim() : "";
+    const path = typeof args2.path === "string" ? args2.path.trim() : "";
+    if (!repository || !ref || !path) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Error: repository, ref and path are required"
+          }
+        ]
+      };
+    }
+    return proxyJson(ctx, "/api/activity/file", { repository, ref, path });
+  }
+  if (name === "get_mg_dashboard_diff") {
+    const repository = typeof args2.repository === "string" ? args2.repository.trim() : "";
+    if (!repository) {
+      return {
+        content: [
+          { type: "text", text: "Error: repository is required" }
+        ]
+      };
+    }
+    const sha = typeof args2.sha === "string" ? args2.sha.trim() : void 0;
+    const pullNumber = typeof args2.pullNumber === "number" ? args2.pullNumber : void 0;
+    const hasSha = Boolean(sha);
+    const hasPr = pullNumber != null;
+    if (hasSha === hasPr) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Error: provide exactly one of sha or pullNumber"
+          }
+        ]
+      };
+    }
+    return proxyJson(ctx, "/api/activity/diff", {
+      repository,
+      ...hasSha ? { sha } : { pullNumber }
+    });
+  }
+  return {
+    content: [{ type: "text", text: `Error: unknown tool ${name}` }]
+  };
+}
+async function proxyJson(ctx, route, body) {
+  const res = await fetch(`${ctx.dashboardBaseUrl}${route}`, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${ctx.apiKey}`
+    },
+    body: JSON.stringify(body)
+  });
+  if (!res.ok) {
+    const detail = await res.text().catch(() => "");
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Error: mg-dashboard ${route} failed (${res.status}). ${detail.slice(0, 300)}`
+        }
+      ]
+    };
+  }
+  const data = await res.json();
+  return {
+    content: [{ type: "text", text: JSON.stringify(data, null, 2) }]
+  };
+}
 var ALGORITHM = "aes-256-gcm";
 var IV_LENGTH = 16;
 var AUTH_TAG_LENGTH = 16;
@@ -5712,7 +5834,12 @@ pgTable(
   (table) => [
     index("idx_agent_world_event_created").on(table.createdAt),
     index("idx_agent_world_event_type").on(table.type),
-    index("idx_agent_world_event_agent").on(table.agentId)
+    index("idx_agent_world_event_agent").on(table.agentId),
+    // Diary / per-agent feed: WHERE agent_id ORDER BY created_at DESC LIMIT N
+    index("idx_agent_world_event_agent_created").on(
+      table.agentId,
+      table.createdAt
+    )
   ]
 );
 pgTable(
@@ -10547,6 +10674,8 @@ var RESPONSE_MAX_BYTES = 8192;
 var NO_FOOTER_TOOLS = /* @__PURE__ */ new Set();
 var RAW_JSON_TOOLS = /* @__PURE__ */ new Set([
   "get_mg_dashboard_commits",
+  "get_mg_dashboard_file",
+  "get_mg_dashboard_diff",
   "extract_article",
   // Content family (2026-DASMG-040/041/042) — compact JSON consumed verbatim.
   // Consolidated action-based tools (the Cursor surface); each proxies to the
@@ -12717,6 +12846,7 @@ var TOOLS = [
       required: ["actor", "dateFrom", "dateTo"]
     }
   },
+  ...GITHUB_CODE_ACCESS_TOOLS,
   {
     name: "extract_article",
     description: "Extract readable article/content data from ONE PUBLIC URL, with a browser-render fallback for pages that block a normal fetch (403) or only render with JavaScript (ticket 2026-DASMG-039). Returns title, author, publishedAt, source, summary, facts[], optional rawText (capped), canonicalUrl, the `extractionMethod` used (http | browser | jsonld | rss | amp | metadata_only) and an explicit `limitations` array (e.g. blocked_without_browser, paywall_detected, partial_content, rawtext_truncated). PUBLIC URLs only \u2014 SSRF-guarded (private/loopback/metadata addresses rejected), no paywall bypass, no credentials; the source/canonical URL is always preserved. Use it to turn a news/article link into safe factual source material for agents; it never auto-publishes or rewrites. For several sources + cross-checking, use `research` with action=topic.",
@@ -13629,6 +13759,12 @@ async function executeToolCall(name, a, _serverId) {
           content: [{ type: "text", text: JSON.stringify(data, null, 2) }]
         };
       }
+      case "get_mg_dashboard_file":
+      case "get_mg_dashboard_diff":
+        return handleGithubCodeAccessTool(name, a, {
+          dashboardBaseUrl,
+          apiKey: apiKey ?? ""
+        });
       // ----- Public-web extraction (article tools) -----
       case "extract_article": {
         const url = typeof a.url === "string" ? a.url.trim() : "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mgsoftwarebv/mg-dashboard-mcp",
-  "version": "7.4.14",
+  "version": "7.4.15",
   "description": "MCP Server for MG Dashboard - SSH, SFTP, Docker, domains, DNS, and environment config tools for Cursor",
   "type": "module",
   "main": "dist/index.js",