@vess-id/ai-identity 0.15.1 → 0.16.0

package/dist/index.js

@@ -77,6 +77,7 @@ __export(index_exports, {
   PROVIDER_ALIASES: () => PROVIDER_ALIASES,
   REAUTH_REQUIRED_ACTION: () => REAUTH_REQUIRED_ACTION,
   RESOURCE_TYPES: () => RESOURCE_TYPES,
+  RESOURCE_TYPE_LABELS: () => RESOURCE_TYPE_LABELS,
   ReceiptStatus: () => ReceiptStatus,
   SDJwtClient: () => SDJwtClient,
   SIGNATURE_HEADER: () => SIGNATURE_HEADER,
@@ -104,9 +105,11 @@ __export(index_exports, {
   buildKbJwtPayload: () => buildKbJwtPayload,
   buildPhase1VcClaims: () => buildPhase1VcClaims,
   buildValidationErrors: () => buildValidationErrors,
+  canonicalResourceId: () => canonicalResourceId,
   canonicalizeAction: () => canonicalizeAction,
   checkPermissionWithVP: () => checkPermissionWithVP,
   classifyCedarErrorMessage: () => classifyCedarErrorMessage,
+  compareResourceIds: () => compareResourceIds,
   configure: () => configure,
   createAjv: () => createAjv,
   createCedarEngine: () => createCedarEngine,
@@ -148,6 +151,7 @@ __export(index_exports, {
   isWriteAction: () => isWriteAction,
   loadActionRegistryFromFile: () => loadActionRegistryFromFile,
   loadActionRegistryFromObject: () => loadActionRegistryFromObject,
+  looksLikeNativeId: () => looksLikeNativeId,
   normalizeDomain: () => normalizeDomain,
   normalizeMcpActionName: () => normalizeMcpActionName,
   parseGrantAction: () => parseGrantAction,
@@ -4717,7 +4721,7 @@ var ACTION_REGISTRY = {
       action: "github.issue.create",
       resource_type: "github:repo",
       required_relations: ["editor", "act_as"],
-      required_scopes: ["repo", "write:issues"],
+      required_scopes: ["repo"],
       capability: "github.issues.triage",
       // Schema mirrors the server contract (GitHubConnectorAdapter
       // getSupportedActions inputSchema — packages/api/src/tool/adapters/
@@ -4739,36 +4743,1485 @@ var ACTION_REGISTRY = {
       constraints: { rate_bucket: "github.write" },
       effects: ["Create:Issue"],
       risk: "high",
+      target_bindings: {
+        resource_id: { source: "param", param: "repo", fallback_param: "repository" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      // Schema mirrors the server contract (GitHubConnectorAdapter):
+      // owner/repo are required params.
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
+          repo: { type: "string", minLength: 1, description: "Repository name" },
+          state: { type: "string", enum: ["open", "closed", "all"] },
+          labels: { type: "string" },
+          sort: { type: "string", enum: ["created", "updated", "comments"] },
+          direction: { type: "string", enum: ["asc", "desc"] },
+          per_page: { type: "integer", minimum: 1, maximum: 100 },
+          page: { type: "integer", minimum: 1 }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:IssueList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "param", param: "repo", fallback_param: "repository" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.read",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      // Schema mirrors the server contract (GitHubConnectorAdapter):
+      // owner/repo required, camelCase issueNumber (the adapter reads
+      // params.issueNumber — snake_case issue_number was a drift).
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
+          repo: { type: "string", minLength: 1, description: "Repository name" },
+          issueNumber: { type: "integer", minimum: 1, description: "Issue number" }
+        },
+        required: ["owner", "repo", "issueNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Issue"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "param", param: "repo", fallback_param: "repository" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.update",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.issues.triage",
+      // Schema mirrors the server contract (GitHubConnectorAdapter):
+      // owner/repo required, camelCase issueNumber (the adapter reads
+      // params.issueNumber — snake_case issue_number was a drift).
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
+          repo: { type: "string", minLength: 1, description: "Repository name" },
+          issueNumber: { type: "integer", minimum: 1, description: "Issue number to update" },
+          title: { type: "string" },
+          body: { type: "string" },
+          state: { type: "string", enum: ["open", "closed"] },
+          labels: { type: "array", items: { type: "string" } },
+          assignees: { type: "array", items: { type: "string" } }
+        },
+        required: ["owner", "repo", "issueNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Update:Issue"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "param", param: "repo", fallback_param: "repository" }
+      },
+      version: "1.0.0"
+    },
+    // ─── GitHub Pull Request Actions ───
+    {
+      action: "github.pr.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          title: { type: "string", description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u306E\u30BF\u30A4\u30C8\u30EB" },
+          head: { type: "string", description: "\u30DE\u30FC\u30B8\u5143\u30D6\u30E9\u30F3\u30C1\u540D" },
+          base: { type: "string", description: "\u30DE\u30FC\u30B8\u5148\u30D6\u30E9\u30F3\u30C1\u540D" },
+          body: { type: "string", description: "\u672C\u6587\uFF08\u7701\u7565\u53EF\uFF09" },
+          draft: { type: "boolean", description: "\u30C9\u30E9\u30D5\u30C8\u3068\u3057\u3066\u4F5C\u6210\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "title", "head", "base"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:PullRequest"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          state: { type: "string", enum: ["open", "closed", "all"], description: "\u30D5\u30A3\u30EB\u30BF\u30FC\u72B6\u614B" },
+          head: { type: "string", description: "\u30D8\u30C3\u30C9\u30D6\u30E9\u30F3\u30C1\u3067\u30D5\u30A3\u30EB\u30BF\u30FC\uFF08\u7701\u7565\u53EF\uFF09" },
+          base: { type: "string", description: "\u30D9\u30FC\u30B9\u30D6\u30E9\u30F3\u30C1\u3067\u30D5\u30A3\u30EB\u30BF\u30FC\uFF08\u7701\u7565\u53EF\uFF09" },
+          sort: { type: "string", enum: ["created", "updated", "popularity", "long-running"], description: "\u30BD\u30FC\u30C8\u9805\u76EE" },
+          direction: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:PullRequestList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.read",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:PullRequest"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.update",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          title: { type: "string", description: "\u65B0\u3057\u3044\u30BF\u30A4\u30C8\u30EB\uFF08\u7701\u7565\u53EF\uFF09" },
+          body: { type: "string", description: "\u65B0\u3057\u3044\u672C\u6587\uFF08\u7701\u7565\u53EF\uFF09" },
+          state: { type: "string", enum: ["open", "closed"], description: "\u65B0\u3057\u3044\u72B6\u614B" },
+          base: { type: "string", description: "\u30DE\u30FC\u30B8\u5148\u30D6\u30E9\u30F3\u30C1\u540D\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Update:PullRequest"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.merge",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          commitTitle: { type: "string", description: "\u30DE\u30FC\u30B8\u30B3\u30DF\u30C3\u30C8\u306E\u30BF\u30A4\u30C8\u30EB\uFF08\u7701\u7565\u53EF\uFF09" },
+          commitMessage: { type: "string", description: "\u30DE\u30FC\u30B8\u30B3\u30DF\u30C3\u30C8\u306E\u30E1\u30C3\u30BB\u30FC\u30B8\uFF08\u7701\u7565\u53EF\uFF09" },
+          mergeMethod: { type: "string", enum: ["merge", "squash", "rebase"], description: "\u30DE\u30FC\u30B8\u65B9\u6CD5" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Merge:PullRequest"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.files.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:PullRequestFileList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.review.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:PullRequestReviewList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.review.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          event: { type: "string", enum: ["APPROVE", "REQUEST_CHANGES", "COMMENT"], description: "\u30EC\u30D3\u30E5\u30FC\u7A2E\u5225" },
+          body: { type: "string", description: "\u30EC\u30D3\u30E5\u30FC\u30B3\u30E1\u30F3\u30C8\u672C\u6587\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "pullNumber", "event"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:PullRequestReview"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.comment.reply",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          commentId: { type: "integer", minimum: 1, description: "\u30EC\u30D3\u30E5\u30FC\u30B3\u30E1\u30F3\u30C8 ID" },
+          body: { type: "string", description: "\u8FD4\u4FE1\u672C\u6587" }
+        },
+        required: ["owner", "repo", "pullNumber", "commentId", "body"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:PullRequestComment"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.branch.update",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.pulls.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          pullNumber: { type: "integer", minimum: 1, description: "\u30D7\u30EB\u30EA\u30AF\u30A8\u30B9\u30C8\u756A\u53F7" },
+          expectedHeadSha: { type: "string", description: "\u671F\u5F85\u3059\u308B\u30D8\u30C3\u30C9 SHA\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "pullNumber"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Update:Branch"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.pr.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:PullRequestSearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    // ─── GitHub Repositories & Contents Actions ───
+    {
+      action: "github.repo.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\uFF09" },
+          sort: { type: "string", description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          order: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:RepositorySearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.collaborator.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:CollaboratorList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.content.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          path: { type: "string", minLength: 1, description: "\u30D5\u30A1\u30A4\u30EB\u307E\u305F\u306F\u30C7\u30A3\u30EC\u30AF\u30C8\u30EA\u306E\u30D1\u30B9" },
+          ref: { type: "string", description: "\u30D6\u30E9\u30F3\u30C1\u30FB\u30BF\u30B0\u30FB\u30B3\u30DF\u30C3\u30C8 SHA\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "path"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Content"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.tree.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          treeSha: { type: "string", minLength: 1, description: "\u30C4\u30EA\u30FC SHA \u307E\u305F\u306F\u30D6\u30E9\u30F3\u30C1\u540D" },
+          recursive: { type: "boolean", description: "\u518D\u5E30\u7684\u306B\u53D6\u5F97\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "treeSha"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Tree"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.branch.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:BranchList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.commit.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          ref: { type: "string", minLength: 1, description: "\u30B3\u30DF\u30C3\u30C8 SHA\u30FB\u30D6\u30E9\u30F3\u30C1\u30FB\u30BF\u30B0" }
+        },
+        required: ["owner", "repo", "ref"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Commit"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.commit.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          sha: { type: "string", description: "\u30D6\u30E9\u30F3\u30C1\u540D\u307E\u305F\u306F\u958B\u59CB\u30B3\u30DF\u30C3\u30C8 SHA\uFF08\u7701\u7565\u53EF\uFF09" },
+          path: { type: "string", description: "\u3053\u306E\u30D1\u30B9\u306B\u5F71\u97FF\u3059\u308B\u30B3\u30DF\u30C3\u30C8\u306E\u307F\uFF08\u7701\u7565\u53EF\uFF09" },
+          author: { type: "string", description: "\u30B3\u30DF\u30C3\u30C8\u4F5C\u8005\u3067\u30D5\u30A3\u30EB\u30BF\u30FC\uFF08\u7701\u7565\u53EF\uFF09" },
+          since: { type: "string", description: "\u3053\u306E\u65E5\u6642\u4EE5\u964D\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" },
+          until: { type: "string", description: "\u3053\u306E\u65E5\u6642\u4EE5\u524D\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:CommitList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.commit.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\uFF09" },
+          sort: { type: "string", enum: ["author-date", "committer-date"], description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          order: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:CommitSearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.tag.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:TagList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.release.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:ReleaseList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.release.getLatest",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Release"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.release.getByTag",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          tag: { type: "string", minLength: 1, description: "\u30BF\u30B0\u540D" }
+        },
+        required: ["owner", "repo", "tag"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Release"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.code.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\uFF09" },
+          sort: { type: "string", enum: ["indexed"], description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          order: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:CodeSearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          name: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          description: { type: "string", description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u306E\u8AAC\u660E\uFF08\u7701\u7565\u53EF\uFF09" },
+          private: { type: "boolean", description: "\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30EA\u30DD\u30B8\u30C8\u30EA\u306B\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" },
+          org: { type: "string", description: "\u4F5C\u6210\u5148\u306E\u7D44\u7E54\u540D\uFF08\u7701\u7565\u6642\u306F\u8A8D\u8A3C\u30E6\u30FC\u30B6\u30FC\u914D\u4E0B\u306B\u4F5C\u6210\uFF09" },
+          autoInit: { type: "boolean", description: "README \u3067\u521D\u671F\u5316\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["name"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:Repository"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.fork",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30D5\u30A9\u30FC\u30AF\u5143\u30EA\u30DD\u30B8\u30C8\u30EA\u306E\u30AA\u30FC\u30CA\u30FC" },
+          repo: { type: "string", minLength: 1, description: "\u30D5\u30A9\u30FC\u30AF\u5143\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          organization: { type: "string", description: "\u30D5\u30A9\u30FC\u30AF\u5148\u306E\u7D44\u7E54\u540D\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:RepositoryFork"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.content.createOrUpdate",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          path: { type: "string", minLength: 1, description: "\u30D5\u30A1\u30A4\u30EB\u30D1\u30B9" },
+          message: { type: "string", minLength: 1, description: "\u30B3\u30DF\u30C3\u30C8\u30E1\u30C3\u30BB\u30FC\u30B8" },
+          content: { type: "string", minLength: 1, description: "\u30D5\u30A1\u30A4\u30EB\u5185\u5BB9\uFF08Base64 \u30A8\u30F3\u30B3\u30FC\u30C9\u6587\u5B57\u5217\uFF09" },
+          branch: { type: "string", description: "\u5BFE\u8C61\u30D6\u30E9\u30F3\u30C1\uFF08\u7701\u7565\u53EF\uFF09" },
+          sha: { type: "string", description: "\u66F4\u65B0\u6642\u306B\u6307\u5B9A\u3059\u308B\u65E2\u5B58\u30D5\u30A1\u30A4\u30EB\u306E blob SHA\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "path", "message", "content"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:Content"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.content.delete",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          path: { type: "string", minLength: 1, description: "\u30D5\u30A1\u30A4\u30EB\u30D1\u30B9" },
+          message: { type: "string", minLength: 1, description: "\u30B3\u30DF\u30C3\u30C8\u30E1\u30C3\u30BB\u30FC\u30B8" },
+          sha: { type: "string", minLength: 1, description: "\u524A\u9664\u5BFE\u8C61\u30D5\u30A1\u30A4\u30EB\u306E blob SHA" },
+          branch: { type: "string", description: "\u5BFE\u8C61\u30D6\u30E9\u30F3\u30C1\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "path", "message", "sha"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Delete:Content"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.branch.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          branch: { type: "string", minLength: 1, description: "\u4F5C\u6210\u3059\u308B\u65B0\u3057\u3044\u30D6\u30E9\u30F3\u30C1\u540D" },
+          fromBranch: { type: "string", description: "\u57FA\u70B9\u3068\u3059\u308B\u30D6\u30E9\u30F3\u30C1\u540D\uFF08\u7701\u7565\u6642\u306F\u30C7\u30D5\u30A9\u30EB\u30C8\u30D6\u30E9\u30F3\u30C1\uFF09" }
+        },
+        required: ["owner", "repo", "branch"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:Branch"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    // ─── GitHub Issues 拡張 & Labels Actions ───
+    {
+      action: "github.issue.comment.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.issues.triage",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          issueNumber: { type: "integer", minimum: 1, description: "Issue \u307E\u305F\u306F Pull Request \u756A\u53F7" },
+          body: { type: "string", minLength: 1, description: "\u30B3\u30E1\u30F3\u30C8\u672C\u6587" }
+        },
+        required: ["owner", "repo", "issueNumber", "body"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Create:IssueComment"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.subissue.write",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.issues.triage",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          issueNumber: { type: "integer", minimum: 1, description: "\u89AA Issue \u756A\u53F7" },
+          subIssueId: { type: "integer", minimum: 1, description: "\u30B5\u30D6 Issue \u306E ID\uFF08issue number \u3067\u306F\u306A\u304F\u5185\u90E8 ID\uFF09" }
+        },
+        required: ["owner", "repo", "issueNumber", "subIssueId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:SubIssue"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\u3002`is:issue` \u7B49\u306F\u547C\u3073\u51FA\u3057\u5074\u3067\u542B\u3081\u308B\uFF09" },
+          sort: { type: "string", description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          order: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:IssueSearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.issue.types.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["read:org"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          org: { type: "string", minLength: 1, description: "\u7D44\u7E54\u540D\uFF08Organization \u306E\u30ED\u30B0\u30A4\u30F3\u540D\uFF09" }
+        },
+        required: ["org"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:IssueTypes"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.label.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          name: { type: "string", minLength: 1, description: "\u30E9\u30D9\u30EB\u540D" }
+        },
+        required: ["owner", "repo", "name"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Label"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.label.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:LabelList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.label.write",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.issues.triage",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          name: { type: "string", minLength: 1, description: "\u30E9\u30D9\u30EB\u540D\uFF08\u65E2\u5B58\u306A\u3089\u66F4\u65B0\u3001\u306A\u3051\u308C\u3070\u65B0\u898F\u4F5C\u6210\uFF09" },
+          color: { type: "string", description: "16\u9032\u30AB\u30E9\u30FC\u30B3\u30FC\u30C9\uFF08\u5148\u982D\u306E # \u306F\u4E0D\u8981\u3001\u7701\u7565\u53EF\uFF09" },
+          description: { type: "string", description: "\u30E9\u30D9\u30EB\u306E\u8AAC\u660E\uFF08\u7701\u7565\u53EF\uFF09" },
+          newName: { type: "string", description: "\u66F4\u65B0\u6642\u306E\u65B0\u3057\u3044\u30E9\u30D9\u30EB\u540D\uFF08\u6539\u540D\u3059\u308B\u5834\u5408\u306E\u307F\u6307\u5B9A\u3001\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo", "name"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:Label"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    // ─── GitHub Actions(CI) / Stargazers / Context / Users Actions ───
+    {
+      action: "github.workflow.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          workflowId: {
+            type: ["string", "integer"],
+            description: "\u30EF\u30FC\u30AF\u30D5\u30ED\u30FC\u306E\u6570\u5024 ID \u307E\u305F\u306F\u30D5\u30A1\u30A4\u30EB\u540D\uFF08\u4F8B: ci.yml\uFF09"
+          }
+        },
+        required: ["owner", "repo", "workflowId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Workflow"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.workflow.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:WorkflowList"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.workflow.run",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          workflowId: {
+            type: ["string", "integer"],
+            description: "\u30EF\u30FC\u30AF\u30D5\u30ED\u30FC\u306E\u6570\u5024 ID \u307E\u305F\u306F\u30D5\u30A1\u30A4\u30EB\u540D\uFF08\u4F8B: ci.yml\uFF09"
+          },
+          ref: { type: "string", minLength: 1, description: "\u5B9F\u884C\u5BFE\u8C61\u306E git ref\uFF08\u30D6\u30E9\u30F3\u30C1\u540D\u307E\u305F\u306F\u30BF\u30B0\u540D\uFF09" },
+          inputs: {
+            type: "object",
+            description: "\u30EF\u30FC\u30AF\u30D5\u30ED\u30FC\u3078\u306E\u5165\u529B\u5024\uFF08workflow_dispatch \u306E inputs\u3001\u7701\u7565\u53EF\uFF09",
+            additionalProperties: true
+          }
+        },
+        required: ["owner", "repo", "workflowId", "ref"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Run:Workflow"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.workflow.jobLogs.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          jobId: { type: "integer", minimum: 1, description: "\u30B8\u30E7\u30D6\u306E\u6570\u5024 ID" }
+        },
+        required: ["owner", "repo", "jobId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:JobLogs"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.starred.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" },
+          sort: { type: "string", enum: ["created", "updated"], description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          direction: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: [],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:StarredRepos"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.star",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:Star"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.repo.unstar",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["repo"],
+      capability: "github.repos.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" }
+        },
+        required: ["owner", "repo"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:Unstar"],
+      risk: "high",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
       version: "1.0.0"
     },
     {
-      action: "github.issue.list",
+      action: "github.user.me.get",
       resource_type: "github:repo",
       required_relations: ["viewer", "editor", "admin", "owner"],
-      required_scopes: ["repo", "read:issues"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {},
+        required: [],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:AuthenticatedUser"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.org.teams.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["read:org"],
       capability: "github.read.basic",
-      // Schema mirrors the server contract (GitHubConnectorAdapter):
-      // owner/repo are required params.
       input_schema: {
         type: "object",
         properties: {
-          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
-          repo: { type: "string", minLength: 1, description: "Repository name" },
-          state: { type: "string", enum: ["open", "closed", "all"] },
-          labels: { type: "string" },
-          sort: { type: "string", enum: ["created", "updated", "comments"] },
-          direction: { type: "string", enum: ["asc", "desc"] },
-          per_page: { type: "integer", minimum: 1, maximum: 100 },
-          page: { type: "integer", minimum: 1 }
+          org: { type: "string", minLength: 1, description: "\u7D44\u7E54\u540D\uFF08Organization \u306E\u30ED\u30B0\u30A4\u30F3\u540D\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["org"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:OrgTeams"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.team.members.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["read:org"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          org: { type: "string", minLength: 1, description: "\u7D44\u7E54\u540D\uFF08Organization \u306E\u30ED\u30B0\u30A4\u30F3\u540D\uFF09" },
+          teamSlug: { type: "string", minLength: 1, description: "\u30C1\u30FC\u30E0\u306E slug" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["org", "teamSlug"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:TeamMembers"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.user.search",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["repo"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          query: { type: "string", minLength: 1, description: "\u691C\u7D22\u30AF\u30A8\u30EA\u6587\u5B57\u5217\uFF08GitHub Search API \u69CB\u6587\uFF09" },
+          sort: { type: "string", enum: ["followers", "repositories", "joined"], description: "\u30BD\u30FC\u30C8\u9805\u76EE\uFF08\u7701\u7565\u53EF\uFF09" },
+          order: { type: "string", enum: ["asc", "desc"], description: "\u30BD\u30FC\u30C8\u65B9\u5411\uFF08\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["query"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:UserSearch"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    // ─── GitHub Notifications / Gists Actions ───
+    {
+      action: "github.notification.list",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["notifications"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          all: { type: "boolean", description: "\u65E2\u8AAD\u3092\u542B\u3080\u5168\u901A\u77E5\u3092\u53D6\u5F97\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\u3001\u30C7\u30D5\u30A9\u30EB\u30C8 false\uFF09" },
+          participating: { type: "boolean", description: "\u81EA\u5206\u304C\u53C2\u52A0\u3057\u3066\u3044\u308B\u901A\u77E5\u306E\u307F\u306B\u7D5E\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" },
+          since: { type: "string", description: "\u3053\u306E\u65E5\u6642\u4EE5\u964D\u306B\u66F4\u65B0\u3055\u308C\u305F\u901A\u77E5\u306E\u307F\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" },
+          before: { type: "string", description: "\u3053\u306E\u65E5\u6642\u3088\u308A\u524D\u306B\u66F4\u65B0\u3055\u308C\u305F\u901A\u77E5\u306E\u307F\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: [],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:Notifications"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.notification.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["notifications"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          threadId: { type: "integer", minimum: 1, description: "\u901A\u77E5\u30B9\u30EC\u30C3\u30C9\u306E\u6570\u5024 ID" }
+        },
+        required: ["threadId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.read" },
+      effects: ["Read:NotificationThread"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.notification.markRead",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["notifications"],
+      capability: "github.notifications.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          threadId: { type: "integer", minimum: 1, description: "\u901A\u77E5\u30B9\u30EC\u30C3\u30C9\u306E\u6570\u5024 ID" }
+        },
+        required: ["threadId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:NotificationThreadRead"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.notification.markAllRead",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["notifications"],
+      capability: "github.notifications.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          lastReadAt: { type: "string", description: "\u3053\u306E\u65E5\u6642\u4EE5\u524D\u306E\u901A\u77E5\u3092\u65E2\u8AAD\u306B\u3059\u308B\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" }
+        },
+        required: [],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:AllNotificationsRead"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.notification.subscription.set",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["notifications"],
+      capability: "github.notifications.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          threadId: { type: "integer", minimum: 1, description: "\u901A\u77E5\u30B9\u30EC\u30C3\u30C9\u306E\u6570\u5024 ID" },
+          ignored: { type: "boolean", description: "\u30B9\u30EC\u30C3\u30C9\u306E\u901A\u77E5\u3092\u7121\u8996\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" }
+        },
+        required: ["threadId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:ThreadSubscription"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.notification.repoSubscription.set",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["notifications"],
+      capability: "github.notifications.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          owner: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u30AA\u30FC\u30CA\u30FC\uFF08\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u7D44\u7E54\u540D\uFF09" },
+          repo: { type: "string", minLength: 1, description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u540D" },
+          subscribed: { type: "boolean", description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u3092\u30A6\u30A9\u30C3\u30C1\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" },
+          ignored: { type: "boolean", description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u306E\u901A\u77E5\u3092\u7121\u8996\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\uFF09" }
         },
         required: ["owner", "repo"],
         additionalProperties: false
       },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:RepoSubscription"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.gist.create",
+      resource_type: "github:repo",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["gist"],
+      capability: "github.gists.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          files: {
+            type: "object",
+            description: 'Gist \u306E\u30D5\u30A1\u30A4\u30EB\u7FA4\u3002\u30AD\u30FC\u304C\u30D5\u30A1\u30A4\u30EB\u540D\u3001\u5024\u304C { content: "\u30D5\u30A1\u30A4\u30EB\u5185\u5BB9" } \u306E\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF08\u4F8B: {"hello.txt": {"content": "world"}}\uFF09\u3002\u30CD\u30B9\u30C8\u69CB\u9020\u306E\u691C\u8A3C\u306F\u884C\u308F\u305A\u305D\u306E\u307E\u307E GitHub \u3078\u6E21\u3059',
+            additionalProperties: true
+          },
+          description: { type: "string", description: "Gist \u306E\u8AAC\u660E\uFF08\u7701\u7565\u53EF\uFF09" },
+          public: { type: "boolean", description: "\u516C\u958B Gist \u306B\u3059\u308B\u304B\uFF08\u7701\u7565\u53EF\u3001\u30C7\u30D5\u30A9\u30EB\u30C8 false\uFF09" }
+        },
+        required: ["files"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "github.write" },
+      effects: ["Write:Gist"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "context", key: "resource_id" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "github.gist.get",
+      resource_type: "github:repo",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["gist"],
+      capability: "github.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          gistId: { type: "string", minLength: 1, description: "Gist \u306E ID" }
+        },
+        required: ["gistId"],
+        additionalProperties: false
+      },
       constraints: { rate_bucket: "github.read" },
-      effects: ["Read:IssueList"],
+      effects: ["Read:Gist"],
       risk: "low",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
@@ -4776,26 +6229,24 @@ var ACTION_REGISTRY = {
       version: "1.0.0"
     },
     {
-      action: "github.issue.read",
+      action: "github.gist.list",
       resource_type: "github:repo",
       required_relations: ["viewer", "editor", "admin", "owner"],
-      required_scopes: ["repo", "read:issues"],
+      required_scopes: ["gist"],
       capability: "github.read.basic",
-      // Schema mirrors the server contract (GitHubConnectorAdapter):
-      // owner/repo required, camelCase issueNumber (the adapter reads
-      // params.issueNumber — snake_case issue_number was a drift).
       input_schema: {
         type: "object",
         properties: {
-          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
-          repo: { type: "string", minLength: 1, description: "Repository name" },
-          issueNumber: { type: "integer", minimum: 1, description: "Issue number" }
+          username: { type: "string", minLength: 1, description: "\u5BFE\u8C61\u30E6\u30FC\u30B6\u30FC\u540D\uFF08\u6307\u5B9A\u6642\u306F\u305D\u306E\u30E6\u30FC\u30B6\u30FC\u306E\u516C\u958B Gist\u3001\u7701\u7565\u6642\u306F\u8A8D\u8A3C\u30E6\u30FC\u30B6\u30FC\u306E Gist\uFF09" },
+          since: { type: "string", description: "\u3053\u306E\u65E5\u6642\u4EE5\u964D\u306B\u66F4\u65B0\u3055\u308C\u305F Gist \u306E\u307F\uFF08ISO 8601\u3001\u7701\u7565\u53EF\uFF09" },
+          per_page: { type: "integer", minimum: 1, description: "1\u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u4EF6\u6570\uFF08\u7701\u7565\u53EF\uFF09" },
+          page: { type: "integer", minimum: 1, description: "\u30DA\u30FC\u30B8\u756A\u53F7\uFF08\u7701\u7565\u53EF\uFF09" }
         },
-        required: ["owner", "repo", "issueNumber"],
+        required: [],
         additionalProperties: false
       },
       constraints: { rate_bucket: "github.read" },
-      effects: ["Read:Issue"],
+      effects: ["Read:GistList"],
       risk: "low",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
@@ -4803,31 +6254,27 @@ var ACTION_REGISTRY = {
       version: "1.0.0"
     },
     {
-      action: "github.issue.update",
+      action: "github.gist.update",
       resource_type: "github:repo",
       required_relations: ["editor", "act_as"],
-      required_scopes: ["repo", "write:issues"],
-      capability: "github.issues.triage",
-      // Schema mirrors the server contract (GitHubConnectorAdapter):
-      // owner/repo required, camelCase issueNumber (the adapter reads
-      // params.issueNumber — snake_case issue_number was a drift).
+      required_scopes: ["gist"],
+      capability: "github.gists.write",
       input_schema: {
         type: "object",
         properties: {
-          owner: { type: "string", minLength: 1, description: "Repository owner (username or organization)" },
-          repo: { type: "string", minLength: 1, description: "Repository name" },
-          issueNumber: { type: "integer", minimum: 1, description: "Issue number to update" },
-          title: { type: "string" },
-          body: { type: "string" },
-          state: { type: "string", enum: ["open", "closed"] },
-          labels: { type: "array", items: { type: "string" } },
-          assignees: { type: "array", items: { type: "string" } }
+          gistId: { type: "string", minLength: 1, description: "Gist \u306E ID" },
+          files: {
+            type: "object",
+            description: '\u66F4\u65B0\u3059\u308B\u30D5\u30A1\u30A4\u30EB\u7FA4\u3002\u30AD\u30FC\u304C\u30D5\u30A1\u30A4\u30EB\u540D\u3001\u5024\u304C { content: "..." }\uFF08\u30EA\u30CD\u30FC\u30E0\u6642\u306F { filename: "\u65B0\u540D", content: "..." }\uFF09\u3002\u7701\u7565\u6642\u306F description \u306E\u307F\u66F4\u65B0',
+            additionalProperties: true
+          },
+          description: { type: "string", description: "Gist \u306E\u8AAC\u660E\uFF08\u7701\u7565\u53EF\uFF09" }
         },
-        required: ["owner", "repo", "issueNumber"],
+        required: ["gistId"],
         additionalProperties: false
       },
       constraints: { rate_bucket: "github.write" },
-      effects: ["Update:Issue"],
+      effects: ["Write:GistUpdate"],
       risk: "high",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
@@ -6465,14 +7912,38 @@ var ACTION_REGISTRY = {
     },
     {
       capability: "github.read.basic",
-      description: "Read issues from repositories",
-      includes: ["github.issue.list", "github.issue.read"],
+      description: "Read issues, pull requests and repository contents from repositories",
+      includes: ["github.issue.list", "github.issue.read", "github.pr.list", "github.pr.read", "github.pr.files.list", "github.pr.review.list", "github.pr.search", "github.repo.search", "github.repo.collaborator.list", "github.content.get", "github.tree.get", "github.branch.list", "github.commit.get", "github.commit.list", "github.commit.search", "github.tag.list", "github.release.list", "github.release.getLatest", "github.release.getByTag", "github.code.search", "github.issue.search", "github.issue.types.list", "github.label.get", "github.label.list", "github.workflow.get", "github.workflow.list", "github.workflow.jobLogs.get", "github.repo.starred.list", "github.user.me.get", "github.org.teams.list", "github.team.members.list", "github.user.search", "github.notification.list", "github.notification.get", "github.gist.get", "github.gist.list"],
       version: "1.0.0"
     },
     {
       capability: "github.issues.triage",
-      description: "Create and update issues",
-      includes: ["github.issue.create", "github.issue.update"],
+      description: "Create and update issues, post issue comments, manage sub-issues and labels",
+      includes: ["github.issue.create", "github.issue.update", "github.issue.comment.create", "github.issue.subissue.write", "github.label.write"],
+      version: "1.0.0"
+    },
+    {
+      capability: "github.pulls.write",
+      description: "Create, update, merge, and review pull requests",
+      includes: ["github.pr.create", "github.pr.update", "github.pr.merge", "github.pr.review.create", "github.pr.comment.reply", "github.pr.branch.update"],
+      version: "1.0.0"
+    },
+    {
+      capability: "github.repos.write",
+      description: "\u30EA\u30DD\u30B8\u30C8\u30EA\u306E\u4F5C\u6210\u30FB\u30D5\u30A9\u30FC\u30AF\u30FB\u30D5\u30A1\u30A4\u30EB\u66F4\u65B0\u30FB\u30D6\u30E9\u30F3\u30C1\u4F5C\u6210\u30FB\u30EF\u30FC\u30AF\u30D5\u30ED\u30FC\u5B9F\u884C\u30FB\u30B9\u30BF\u30FC\u64CD\u4F5C",
+      includes: ["github.repo.create", "github.repo.fork", "github.content.createOrUpdate", "github.content.delete", "github.branch.create", "github.workflow.run", "github.repo.star", "github.repo.unstar"],
+      version: "1.0.0"
+    },
+    {
+      capability: "github.notifications.write",
+      description: "\u901A\u77E5\u306E\u65E2\u8AAD\u5316\u30FB\u30B9\u30EC\u30C3\u30C9/\u30EA\u30DD\u30B8\u30C8\u30EA\u306E\u8CFC\u8AAD\u8A2D\u5B9A",
+      includes: ["github.notification.markRead", "github.notification.markAllRead", "github.notification.subscription.set", "github.notification.repoSubscription.set"],
+      version: "1.0.0"
+    },
+    {
+      capability: "github.gists.write",
+      description: "Gist \u306E\u4F5C\u6210\u30FB\u66F4\u65B0",
+      includes: ["github.gist.create", "github.gist.update"],
       version: "1.0.0"
     },
     {
@@ -6532,6 +8003,12 @@ var ACTION_REGISTRY = {
   ]
 };
 
+// src/registry/resource-type-labels.ts
+var RESOURCE_TYPE_LABELS = {
+  "github:repo": "\u5BFE\u8C61\u30EA\u30DD\u30B8\u30C8\u30EA",
+  "github:org": "\u5BFE\u8C61\u7D44\u7E54"
+};
+
 // src/registry/action-input-validator.ts
 var SCHEMA_INDEX = (() => {
   const map = /* @__PURE__ */ new Map();
@@ -7391,6 +8868,49 @@ var TargetResolver = class {
   }
 };
 
+// src/resolver/canonical-resource-id.ts
+var resolver = new TargetResolver();
+function canonicalResourceId(action, params, ctx) {
+  const def = ACTION_REGISTRY.actions.find((a) => a.action === action);
+  const provider = action.split(".")[0];
+  if (provider === "github") {
+    const owner = typeof params?.owner === "string" ? params.owner : void 0;
+    const repo = typeof params?.repo === "string" ? params.repo : void 0;
+    if (owner && repo) return `${owner}/${repo}`;
+    return void 0;
+  }
+  const binding = def?.target_bindings?.resource_id;
+  if (!binding) return void 0;
+  const paramBinding = binding;
+  if (paramBinding.source === "param" && paramBinding.derive != null) {
+    const p = params ?? {};
+    let v = p[paramBinding.param];
+    if (v == null && paramBinding.fallback_param) v = p[paramBinding.fallback_param];
+    if (v == null && paramBinding.default != null) v = paramBinding.default;
+    if (typeof v !== "string" || !v) return void 0;
+    return v;
+  }
+  const resolved = resolver.resolve(def.target_bindings, params ?? {}, ctx);
+  const id = resolved.resource_id ?? void 0;
+  if (id == null || id === "") return void 0;
+  return id;
+}
+
+// src/resolver/compare-resource-id.ts
+function looksLikeNativeId(value) {
+  if (/^[CDG][A-Z0-9]{8,}$/.test(value)) return true;
+  if (/^[a-zA-Z0-9_-]{6,}$/.test(value) && !value.startsWith("#")) return true;
+  return false;
+}
+function compareResourceIds(credResourceId, requestResourceId) {
+  if (credResourceId === requestResourceId) return "match";
+  if (credResourceId === "*") return "match";
+  const credIsNative = looksLikeNativeId(credResourceId);
+  const reqIsNative = looksLikeNativeId(requestResourceId);
+  if (credIsNative === reqIsNative) return "mismatch";
+  return "indeterminate";
+}
+
 // src/utils/action-classifier.ts
 var actionIndex = indexActions({
   registry_version: ACTION_REGISTRY.registry_version,
@@ -7401,7 +8921,7 @@ function isWriteAction(action) {
   if (!meta) {
     return true;
   }
-  const writeEffectPrefixes = ["Create:", "Update:", "Delete:", "Write:", "Execute:"];
+  const writeEffectPrefixes = ["Create:", "Update:", "Delete:", "Write:", "Execute:", "Merge:", "Run:"];
   if (meta.effects?.some((e) => writeEffectPrefixes.some((p) => e.startsWith(p)))) {
     return true;
   }
@@ -7853,6 +9373,7 @@ var version = "0.0.1";
   PROVIDER_ALIASES,
   REAUTH_REQUIRED_ACTION,
   RESOURCE_TYPES,
+  RESOURCE_TYPE_LABELS,
   ReceiptStatus,
   SDJwtClient,
   SIGNATURE_HEADER,
@@ -7880,9 +9401,11 @@ var version = "0.0.1";
   buildKbJwtPayload,
   buildPhase1VcClaims,
   buildValidationErrors,
+  canonicalResourceId,
   canonicalizeAction,
   checkPermissionWithVP,
   classifyCedarErrorMessage,
+  compareResourceIds,
   configure,
   createAjv,
   createCedarEngine,
@@ -7924,6 +9447,7 @@ var version = "0.0.1";
   isWriteAction,
   loadActionRegistryFromFile,
   loadActionRegistryFromObject,
+  looksLikeNativeId,
   normalizeDomain,
   normalizeMcpActionName,
   parseGrantAction,