@ryuu-reinzz/ryuu-cli 0.4.3 → 0.5.1

package/plugins/github/tool-helpers.js

@@ -0,0 +1,259 @@
+import { ValidationError, RyuuError } from '../../src/utils/errors.js';
+import { GitHubPluginError, GITHUB_CODES } from './errors.js';
+
+/**
+ * Pembantu bersama untuk definisi tool GitHub.
+ *
+ * Tujuannya bukan hanya validasi, tetapi juga membatasi data yang dikirim ke
+ * model: setiap list dipotong dan setiap body panjang diringkas.
+ */
+
+export const OWNER_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
+export const REPO_RE = /^[A-Za-z0-9._-]{1,100}$/;
+
+/** Validasi owner/repo dari argumen tool dan kembalikan prefix path API. */
+export function repoBase(args = {}) {
+  const owner = String(args.owner ?? '').trim();
+  const repo = String(args.repo ?? '').trim();
+  if (!OWNER_RE.test(owner)) {
+    throw new ValidationError('owner tidak valid: gunakan nama pengguna/organisasi GitHub (huruf, angka, tanda hubung).');
+  }
+  if (!REPO_RE.test(repo) || repo === '.' || repo === '..') {
+    throw new ValidationError('repo tidak valid: gunakan nama repository tanpa spasi atau garis miring.');
+  }
+  return `/repos/${owner}/${repo}`;
+}
+
+/** Nama branch/tag; menolak path traversal. */
+export function refSegment(value, field = 'ref') {
+  const text = String(value ?? '').trim();
+  if (!text || text.length > 200 || text.includes('..') || text.includes('\\')) {
+    throw new ValidationError(`${field} tidak valid.`);
+  }
+  return text.split('/').map((part) => encodeURIComponent(part)).join('/');
+}
+
+/** Path file relatif di dalam repository. */
+export function contentPath(value) {
+  const text = String(value ?? '').trim();
+  if (!text || text.length > 400 || text.startsWith('/') || text.includes('\\') || text.includes('\0')) {
+    throw new ValidationError('path file tidak valid.');
+  }
+  if (text.split('/').some((part) => part === '..' || part === '.' || part.length === 0)) {
+    throw new ValidationError('path file tidak boleh memuat segmen "." atau "..".');
+  }
+  return text.split('/').map((part) => encodeURIComponent(part)).join('/');
+}
+
+/** Argumen pagination yang aman. */
+export function pageQuery(args = {}, { perPage = 30, max = 100 } = {}) {
+  const requested = Number(args.per_page);
+  const per_page = Number.isInteger(requested) ? Math.min(max, Math.max(1, requested)) : perPage;
+  const page = Number.isInteger(Number(args.page)) && Number(args.page) > 0 ? Number(args.page) : 1;
+  return { per_page, page };
+}
+
+/** Batasi jumlah item yang dikirim ke model. */
+export function limitItems(items, max = 50) {
+  const list = Array.isArray(items) ? items : [];
+  return list.slice(0, max);
+}
+
+/** Ringkas teks panjang (body issue/PR/commit). */
+export function text(value, max = 2000) {
+  const raw = value === null || value === undefined ? '' : String(value);
+  return raw.length > max ? `${raw.slice(0, max)}…` : raw;
+}
+
+function loginOf(value) {
+  return value && typeof value === 'object' ? value.login || null : value || null;
+}
+
+export function pickUser(user) {
+  if (!user || typeof user !== 'object') return null;
+  return {
+    id: user.id,
+    login: user.login,
+    name: user.name || null,
+    type: user.type || null,
+    company: user.company || null,
+    blog: user.blog || null,
+    location: user.location || null,
+    bio: text(user.bio, 500),
+    public_repos: user.public_repos ?? null,
+    followers: user.followers ?? null,
+    following: user.following ?? null,
+    avatar_url: user.avatar_url || null,
+    html_url: user.html_url || null,
+    created_at: user.created_at || null,
+    updated_at: user.updated_at || null,
+  };
+}
+
+export function pickRepo(repo) {
+  if (!repo || typeof repo !== 'object') return null;
+  return {
+    id: repo.id,
+    name: repo.name,
+    full_name: repo.full_name,
+    owner: loginOf(repo.owner),
+    private: Boolean(repo.private),
+    fork: Boolean(repo.fork),
+    archived: Boolean(repo.archived),
+    disabled: Boolean(repo.disabled),
+    description: text(repo.description, 500),
+    default_branch: repo.default_branch || null,
+    language: repo.language || null,
+    visibility: repo.visibility || null,
+    html_url: repo.html_url || null,
+    clone_url: repo.clone_url || null,
+    stargazers_count: repo.stargazers_count ?? null,
+    forks_count: repo.forks_count ?? null,
+    open_issues_count: repo.open_issues_count ?? null,
+    permissions: repo.permissions || null,
+    created_at: repo.created_at || null,
+    updated_at: repo.updated_at || null,
+    pushed_at: repo.pushed_at || null,
+  };
+}
+
+export function pickBranch(branch) {
+  if (!branch || typeof branch !== 'object') return null;
+  return {
+    name: branch.name,
+    protected: Boolean(branch.protected),
+    sha: branch.commit?.sha || null,
+    commit_url: branch.commit?.url || null,
+  };
+}
+
+export function pickCommit(commit) {
+  if (!commit || typeof commit !== 'object') return null;
+  return {
+    sha: commit.sha,
+    message: text(commit.commit?.message, 1500),
+    author: loginOf(commit.author),
+    committer: loginOf(commit.committer),
+    date: commit.commit?.author?.date || commit.commit?.committer?.date || null,
+    html_url: commit.html_url || null,
+    parents: (commit.parents || []).map((parent) => parent.sha),
+    stats: commit.stats || null,
+  };
+}
+
+export function pickIssue(issue) {
+  if (!issue || typeof issue !== 'object') return null;
+  return {
+    number: issue.number,
+    title: issue.title,
+    state: issue.state,
+    state_reason: issue.state_reason || null,
+    user: loginOf(issue.user),
+    labels: (issue.labels || []).map((label) => (typeof label === 'string' ? label : label.name)),
+    assignees: (issue.assignees || []).map((assignee) => assignee.login),
+    comments: issue.comments ?? null,
+    body: text(issue.body, 4000),
+    html_url: issue.html_url || null,
+    is_pull_request: Boolean(issue.pull_request),
+    created_at: issue.created_at || null,
+    updated_at: issue.updated_at || null,
+    closed_at: issue.closed_at || null,
+  };
+}
+
+export function pickPull(pull) {
+  if (!pull || typeof pull !== 'object') return null;
+  return {
+    number: pull.number,
+    title: pull.title,
+    state: pull.state,
+    draft: Boolean(pull.draft),
+    merged: Boolean(pull.merged),
+    mergeable: pull.mergeable ?? null,
+    mergeable_state: pull.mergeable_state || null,
+    user: loginOf(pull.user),
+    head: pull.head ? { ref: pull.head.ref, sha: pull.head.sha } : null,
+    base: pull.base ? { ref: pull.base.ref, sha: pull.base.sha } : null,
+    body: text(pull.body, 4000),
+    additions: pull.additions ?? null,
+    deletions: pull.deletions ?? null,
+    changed_files: pull.changed_files ?? null,
+    comments: pull.comments ?? null,
+    html_url: pull.html_url || null,
+    created_at: pull.created_at || null,
+    updated_at: pull.updated_at || null,
+    merged_at: pull.merged_at || null,
+  };
+}
+
+export function pickRelease(release) {
+  if (!release || typeof release !== 'object') return null;
+  return {
+    id: release.id,
+    tag_name: release.tag_name,
+    target_commitish: release.target_commitish || null,
+    name: release.name || null,
+    draft: Boolean(release.draft),
+    prerelease: Boolean(release.prerelease),
+    author: loginOf(release.author),
+    body: text(release.body, 4000),
+    html_url: release.html_url || null,
+    tarball_url: release.tarball_url || null,
+    zipball_url: release.zipball_url || null,
+    created_at: release.created_at || null,
+    published_at: release.published_at || null,
+  };
+}
+
+export function pickWorkflow(workflow) {
+  if (!workflow || typeof workflow !== 'object') return null;
+  return {
+    id: workflow.id,
+    name: workflow.name,
+    path: workflow.path,
+    state: workflow.state,
+    html_url: workflow.html_url || null,
+    created_at: workflow.created_at || null,
+    updated_at: workflow.updated_at || null,
+  };
+}
+
+export function pickWorkflowRun(run) {
+  if (!run || typeof run !== 'object') return null;
+  return {
+    id: run.id,
+    name: run.name || null,
+    display_title: text(run.display_title, 300),
+    workflow_id: run.workflow_id ?? null,
+    run_number: run.run_number ?? null,
+    event: run.event || null,
+    status: run.status || null,
+    conclusion: run.conclusion || null,
+    head_branch: run.head_branch || null,
+    head_sha: run.head_sha || null,
+    actor: loginOf(run.actor),
+    html_url: run.html_url || null,
+    created_at: run.created_at || null,
+    updated_at: run.updated_at || null,
+    run_started_at: run.run_started_at || null,
+  };
+}
+
+/** Operasi destruktif bisa dimatikan lewat `/github config set confirmDestructive false`. */
+export async function assertDestructiveAllowed(plugin, action) {
+  const settings = await plugin.loadConfig();
+  if (!settings.confirmDestructive) {
+    throw new GitHubPluginError(
+      `${action} diblokir karena confirmDestructive=false. Aktifkan lagi dengan /github config set confirmDestructive true.`,
+      { code: GITHUB_CODES.DESTRUCTIVE },
+    );
+  }
+}
+
+/** Cek `ok` pada respons yang tidak melempar error. */
+export function assertOk(value, message) {
+  if (!value || value.ok === false) {
+    throw new RyuuError(message, { code: 'GITHUB_UNEXPECTED' });
+  }
+  return value;
+}

package/plugins/github/tools-account.js

@@ -0,0 +1,64 @@
+import { defineTool } from '../../src/tools/registry.js';
+import { pickUser } from './tool-helpers.js';
+
+export function createAccountTools(plugin) {
+  return [
+    defineTool({
+      name: 'github_get_me',
+      description:
+        'Ambil profil akun GitHub yang sedang terhubung (login, nama, tipe akun, jumlah repository publik, tautan profil). Memerlukan user access token dengan scope read:user.',
+      risk: 'read',
+      schema: { type: 'object', properties: {} },
+      async handler() {
+        const api = await plugin.requireClient();
+        const user = await api.get('/user');
+        return { ok: true, account: pickUser(user) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_get_user',
+      description:
+        'Ambil profil publik pengguna atau organisasi GitHub lain berdasarkan username. Tidak mengembalikan data privat pemilik akun.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          username: { type: 'string', description: 'Username GitHub, contoh: torvalds atau github.' },
+        },
+        required: ['username'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const username = String(args.username || '').trim();
+        if (!/^[A-Za-z0-9-]{1,39}$/.test(username)) {
+          throw new Error('username GitHub tidak valid.');
+        }
+        const user = await api.get(`/users/${encodeURIComponent(username)}`);
+        return { ok: true, user: pickUser(user) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_get_rate_limit',
+      description:
+        'Periksa sisa kuota GitHub REST API untuk token yang terhubung (core, search, graphql) beserta waktu reset. Gunakan sebelum operasi massal.',
+      risk: 'read',
+      schema: { type: 'object', properties: {} },
+      async handler() {
+        const api = await plugin.requireClient();
+        const rate = await api.rateLimit();
+        const resources = rate?.resources || {};
+        return {
+          ok: true,
+          rate_limit: {
+            core: resources.core || null,
+            search: resources.search || null,
+            graphql: resources.graphql || null,
+          },
+          documentation: 'https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api',
+        };
+      },
+    }),
+  ];
+}

package/plugins/github/tools-actions.js

@@ -0,0 +1,126 @@
+import { defineTool } from '../../src/tools/registry.js';
+import { limitItems, pageQuery, pickWorkflow, pickWorkflowRun, repoBase } from './tool-helpers.js';
+
+const REPO_PROPS = {
+  owner: { type: 'string', description: 'Pemilik repository.' },
+  repo: { type: 'string', description: 'Nama repository.' },
+};
+
+export function createActionTools(plugin) {
+  return [
+    defineTool({
+      name: 'github_list_workflows',
+      description:
+        'Daftar GitHub Actions workflow yang terdaftar pada repository. Membutuhkan permission Actions read.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          per_page: { type: 'integer', minimum: 1, maximum: 100, description: 'Jumlah per halaman (default 30).' },
+          page: { type: 'integer', minimum: 1, description: 'Halaman (default 1).' },
+        },
+        required: ['owner', 'repo'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const result = await api.get(`${repoBase(args)}/actions/workflows`, pageQuery(args));
+        const workflows = Array.isArray(result?.workflows) ? result.workflows : [];
+        return {
+          ok: true,
+          total_count: result?.total_count ?? workflows.length,
+          workflows: limitItems(workflows, 100).map(pickWorkflow),
+        };
+      },
+    }),
+
+    defineTool({
+      name: 'github_list_workflow_runs',
+      description:
+        'Daftar eksekusi workflow (workflow run), dapat difilter per workflow, branch, event, status, dan aktor. Membutuhkan permission Actions read.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          workflow_id: { type: 'integer', minimum: 1, description: 'ID workflow; kosongkan untuk semua workflow.' },
+          branch: { type: 'string', description: 'Filter branch.' },
+          event: { type: 'string', description: 'Filter event, contoh: push atau pull_request.' },
+          status: {
+            type: 'string',
+            enum: ['queued', 'in_progress', 'completed', 'success', 'failure', 'cancelled', 'skipped'],
+            description: 'Filter status/kesimpulan.',
+          },
+          actor: { type: 'string', description: 'Filter username pemicu.' },
+          per_page: { type: 'integer', minimum: 1, maximum: 100, description: 'Jumlah per halaman (default 30).' },
+          page: { type: 'integer', minimum: 1, description: 'Halaman (default 1).' },
+        },
+        required: ['owner', 'repo'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const base = repoBase(args);
+        const path = args.workflow_id
+          ? `${base}/actions/workflows/${Number(args.workflow_id)}/runs`
+          : `${base}/actions/runs`;
+        const result = await api.get(path, {
+          ...pageQuery(args),
+          ...(args.branch ? { branch: args.branch } : {}),
+          ...(args.event ? { event: args.event } : {}),
+          ...(args.status ? { status: args.status } : {}),
+          ...(args.actor ? { actor: args.actor } : {}),
+        });
+        const runs = Array.isArray(result?.workflow_runs) ? result.workflow_runs : [];
+        return {
+          ok: true,
+          total_count: result?.total_count ?? runs.length,
+          runs: limitItems(runs, 100).map(pickWorkflowRun),
+        };
+      },
+    }),
+
+    defineTool({
+      name: 'github_get_workflow_run',
+      description: 'Ambil detail satu workflow run: status, kesimpulan, commit, aktor, dan tautan ke halaman Actions.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          run_id: { type: 'integer', minimum: 1, description: 'ID workflow run.' },
+        },
+        required: ['owner', 'repo', 'run_id'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const run = await api.get(`${repoBase(args)}/actions/runs/${Number(args.run_id)}`);
+        return { ok: true, run: pickWorkflowRun(run) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_rerun_workflow',
+      description:
+        'Jalankan ulang seluruh job pada workflow run yang sudah selesai. Membutuhkan permission Actions write; operasi ini selalu meminta approval.',
+      risk: 'write',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          run_id: { type: 'integer', minimum: 1, description: 'ID workflow run.' },
+          enable_debug_logging: { type: 'boolean', description: 'Aktifkan debug logging pada rerun.' },
+        },
+        required: ['owner', 'repo', 'run_id'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        await api.post(`${repoBase(args)}/actions/runs/${Number(args.run_id)}/rerun`, {
+          ...(args.enable_debug_logging !== undefined
+            ? { enable_debug_logging: Boolean(args.enable_debug_logging) }
+            : {}),
+        });
+        return { ok: true, rerun: true, run_id: Number(args.run_id) };
+      },
+    }),
+  ];
+}

package/plugins/github/tools-issues.js

@@ -0,0 +1,214 @@
+import { defineTool } from '../../src/tools/registry.js';
+import { limitItems, pageQuery, pickIssue, repoBase, text } from './tool-helpers.js';
+
+const REPO_PROPS = {
+  owner: { type: 'string', description: 'Pemilik repository (username atau organisasi).' },
+  repo: { type: 'string', description: 'Nama repository.' },
+};
+
+export function createIssueTools(plugin) {
+  return [
+    defineTool({
+      name: 'github_list_issues',
+      description:
+        'Daftar issue pada repository. Secara default pull request disaring keluar; set include_pull_requests=true bila hasil gabungan memang diinginkan. Membutuhkan permission Issues read.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          state: { type: 'string', enum: ['open', 'closed', 'all'], description: 'Status issue. Default open.' },
+          labels: { type: 'string', description: 'Daftar label dipisah koma, contoh: bug,urgent.' },
+          sort: { type: 'string', enum: ['created', 'updated', 'comments'], description: 'Urutan hasil.' },
+          direction: { type: 'string', enum: ['asc', 'desc'], description: 'Arah urutan.' },
+          since: { type: 'string', description: 'Hanya issue yang diperbarui setelah tanggal ISO 8601 ini.' },
+          creator: { type: 'string', description: 'Filter berdasarkan username pembuat.' },
+          assignee: { type: 'string', description: 'Filter berdasarkan username assignee, atau "none".' },
+          milestone: { type: 'string', description: 'Nomor milestone, "none", atau "*".' },
+          include_pull_requests: { type: 'boolean', description: 'Sertakan pull request dalam hasil. Default false.' },
+          per_page: { type: 'integer', minimum: 1, maximum: 100, description: 'Jumlah per halaman (default 30).' },
+          page: { type: 'integer', minimum: 1, description: 'Halaman (default 1).' },
+        },
+        required: ['owner', 'repo'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const query = {
+          ...pageQuery(args),
+          state: args.state || 'open',
+          ...(args.labels ? { labels: args.labels } : {}),
+          ...(args.sort ? { sort: args.sort } : {}),
+          ...(args.direction ? { direction: args.direction } : {}),
+          ...(args.since ? { since: args.since } : {}),
+          ...(args.creator ? { creator: args.creator } : {}),
+          ...(args.assignee ? { assignee: args.assignee } : {}),
+          ...(args.milestone ? { milestone: args.milestone } : {}),
+        };
+        const items = await api.paginate(`${repoBase(args)}/issues`, { query, maxPages: 2, maxItems: 100 });
+        const filtered = args.include_pull_requests ? items : items.filter((item) => !item.pull_request);
+        return {
+          ok: true,
+          count: filtered.length,
+          filtered_pull_requests: items.length - filtered.length,
+          issues: limitItems(filtered, 100).map(pickIssue),
+        };
+      },
+    }),
+
+    defineTool({
+      name: 'github_get_issue',
+      description: 'Ambil satu issue berdasarkan nomor, termasuk label, assignee, isi, dan jumlah komentar.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          issue_number: { type: 'integer', minimum: 1, description: 'Nomor issue.' },
+        },
+        required: ['owner', 'repo', 'issue_number'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const issue = await api.get(`${repoBase(args)}/issues/${Number(args.issue_number)}`);
+        return { ok: true, issue: pickIssue(issue) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_create_issue',
+      description:
+        'Buat issue baru. Membutuhkan permission Issues write. Operasi ini mengubah data dan selalu meminta approval pengguna.',
+      risk: 'write',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          title: { type: 'string', description: 'Judul issue (wajib).' },
+          body: { type: 'string', description: 'Isi issue dalam Markdown.' },
+          labels: { type: 'array', items: { type: 'string' }, description: 'Label yang dipasang.' },
+          assignees: { type: 'array', items: { type: 'string' }, description: 'Username yang ditugaskan.' },
+          milestone: { type: 'integer', minimum: 1, description: 'Nomor milestone.' },
+        },
+        required: ['owner', 'repo', 'title'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const body = { title: String(args.title) };
+        if (args.body !== undefined) body.body = String(args.body);
+        if (Array.isArray(args.labels)) body.labels = args.labels.map(String);
+        if (Array.isArray(args.assignees)) body.assignees = args.assignees.map(String);
+        if (args.milestone !== undefined) body.milestone = Number(args.milestone);
+        const issue = await api.post(`${repoBase(args)}/issues`, body);
+        return { ok: true, issue: pickIssue(issue) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_update_issue',
+      description:
+        'Perbarui judul, isi, status, label, assignee, atau milestone sebuah issue. Membutuhkan permission Issues write serta approval pengguna.',
+      risk: 'write',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          issue_number: { type: 'integer', minimum: 1, description: 'Nomor issue.' },
+          title: { type: 'string', description: 'Judul baru.' },
+          body: { type: 'string', description: 'Isi baru.' },
+          state: { type: 'string', enum: ['open', 'closed'], description: 'Status baru.' },
+          state_reason: {
+            type: 'string',
+            enum: ['completed', 'not_planned', 'reopened'],
+            description: 'Alasan penutupan (opsional).',
+          },
+          labels: { type: 'array', items: { type: 'string' }, description: 'Ganti seluruh label.' },
+          assignees: { type: 'array', items: { type: 'string' }, description: 'Ganti seluruh assignee.' },
+          milestone: { type: ['integer', 'null'], description: 'Nomor milestone baru atau null untuk menghapus.' },
+        },
+        required: ['owner', 'repo', 'issue_number'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const body = {};
+        for (const key of ['title', 'body', 'state', 'state_reason']) {
+          if (args[key] !== undefined) body[key] = args[key];
+        }
+        if (Array.isArray(args.labels)) body.labels = args.labels.map(String);
+        if (Array.isArray(args.assignees)) body.assignees = args.assignees.map(String);
+        if (args.milestone !== undefined) body.milestone = args.milestone;
+        if (Object.keys(body).length === 0) throw new Error('Tidak ada perubahan yang diminta.');
+        const issue = await api.patch(`${repoBase(args)}/issues/${Number(args.issue_number)}`, body);
+        return { ok: true, issue: pickIssue(issue) };
+      },
+    }),
+
+    defineTool({
+      name: 'github_comment_issue',
+      description:
+        'Tambahkan komentar pada issue atau pull request. Membutuhkan permission Issues write (untuk PR: Pull requests write) dan approval pengguna.',
+      risk: 'write',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          issue_number: { type: 'integer', minimum: 1, description: 'Nomor issue atau pull request.' },
+          body: { type: 'string', description: 'Isi komentar dalam Markdown.' },
+        },
+        required: ['owner', 'repo', 'issue_number', 'body'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const comment = await api.post(`${repoBase(args)}/issues/${Number(args.issue_number)}/comments`, {
+          body: String(args.body),
+        });
+        return {
+          ok: true,
+          comment: {
+            id: comment.id,
+            user: comment.user?.login || null,
+            body: text(comment.body, 2000),
+            html_url: comment.html_url || null,
+            created_at: comment.created_at || null,
+          },
+        };
+      },
+    }),
+
+    defineTool({
+      name: 'github_list_issue_comments',
+      description: 'Daftar komentar pada sebuah issue atau pull request, terbaru sesuai urutan GitHub.',
+      risk: 'read',
+      schema: {
+        type: 'object',
+        properties: {
+          ...REPO_PROPS,
+          issue_number: { type: 'integer', minimum: 1, description: 'Nomor issue atau pull request.' },
+          since: { type: 'string', description: 'Hanya komentar setelah tanggal ISO 8601 ini.' },
+          per_page: { type: 'integer', minimum: 1, maximum: 100, description: 'Jumlah per halaman (default 30).' },
+          page: { type: 'integer', minimum: 1, description: 'Halaman (default 1).' },
+        },
+        required: ['owner', 'repo', 'issue_number'],
+      },
+      async handler(args) {
+        const api = await plugin.requireClient();
+        const comments = await api.paginate(`${repoBase(args)}/issues/${Number(args.issue_number)}/comments`, {
+          query: { ...pageQuery(args), ...(args.since ? { since: args.since } : {}) },
+          maxPages: 2,
+          maxItems: 100,
+        });
+        return {
+          ok: true,
+          count: comments.length,
+          comments: limitItems(comments, 100).map((comment) => ({
+            id: comment.id,
+            user: comment.user?.login || null,
+            body: text(comment.body, 2000),
+            html_url: comment.html_url || null,
+            created_at: comment.created_at || null,
+            updated_at: comment.updated_at || null,
+          })),
+        };
+      },
+    }),
+  ];
+}