adoptai-mcp 1.0.0

package/dist/integrations/github-code-scanning/tools.js

@@ -0,0 +1,987 @@
+import axios from 'axios';
+import { buildAuthHeaders } from './auth.js';
+
+const BASE_URL = 'https://api.github.com';
+const APP_ID = 'github-code-scanning';
+
+function handleError(err) {
+  const status = err.response?.status;
+  const msg = err.response?.data?.message || err.response?.data?.error || err.message;
+  if (status === 401) throw new Error(`Token invalid.\nRun: npx adoptai-${APP_ID}-mcp --client cursor`);
+  if (status === 403) throw new Error('Insufficient permissions. Check your API key scopes.');
+  if (status === 404) throw new Error('Resource not found. Check your parameters.');
+  if (status === 429) throw new Error('Rate limit exceeded. Please wait and try again.');
+  throw new Error(msg || 'API request failed');
+}
+
+async function apiRequest(method, pathTemplate, params = {}, opts = {}) {
+  const { deleteSendsJsonBody = false } = opts;
+  const headers = buildAuthHeaders();
+  let url = BASE_URL + pathTemplate;
+  const pathKeys = [...pathTemplate.matchAll(/\{([^}]+)\}/g)].map((m) => m[1]);
+  for (const key of pathKeys) {
+    const value = params[key];
+    if (value !== undefined && value !== null) url = url.replace(`{${key}}`, encodeURIComponent(String(value)));
+  }
+  const rest = { ...params };
+  for (const key of pathKeys) delete rest[key];
+  const m = method.toUpperCase();
+  const useQuery = m === 'GET' || (m === 'DELETE' && !deleteSendsJsonBody);
+  const queryParams = {};
+  const bodyParams = {};
+  for (const [key, value] of Object.entries(rest)) {
+    if (value === undefined) continue;
+    if (useQuery) queryParams[key] = value; else bodyParams[key] = value;
+  }
+  try {
+    const res = await axios({
+      method: m,
+      url,
+      headers: { 'Content-Type': 'application/json', ...headers },
+      params: Object.keys(queryParams).length ? queryParams : undefined,
+      data: Object.keys(bodyParams).length ? bodyParams : undefined,
+      timeout: 30000,
+    });
+    if (res.status === 204 || res.data === '' || res.data === undefined) return { ok: true, status: res.status };
+    return res.data;
+  } catch (err) {
+    handleError(err);
+  }
+}
+
+const ENDPOINTS = [
+  {
+    "name": "code_scanning_list_alerts_for_org",
+    "description": "List code scanning alerts for an organization",
+    "method": "GET",
+    "path": "/orgs/{org}/code-scanning/alerts",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "org": {
+          "type": "string",
+          "description": "The organization name. The name is not case sensitive."
+        },
+        "tool_name": {
+          "type": "string",
+          "description": "The name of a code scanning tool. Only results by this tool will be listed. You can specify the tool by using either `tool_name` or `tool_guid`, but not both."
+        },
+        "tool_guid": {
+          "type": "string",
+          "description": "The GUID of a code scanning tool. Only results by this tool will be listed. Note that some code scanning tools may not include a GUID in their analysis data. You can specify the tool by using either `tool_guid` or `tool_name`, but not both."
+        },
+        "before": {
+          "type": "string",
+          "description": "A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results before this cursor. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "after": {
+          "type": "string",
+          "description": "A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results after this cursor. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "page": {
+          "type": "number",
+          "description": "The page number of the results to fetch. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "per_page": {
+          "type": "number",
+          "description": "The number of results per page (max 100). For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "direction": {
+          "type": "string",
+          "description": "The direction to sort the results by.",
+          "enum": [
+            "asc",
+            "desc"
+          ]
+        },
+        "state": {
+          "type": "string",
+          "description": "If specified, only code scanning alerts with this state will be returned.",
+          "enum": [
+            "open",
+            "closed",
+            "dismissed",
+            "fixed"
+          ]
+        },
+        "sort": {
+          "type": "string",
+          "description": "The property by which to sort the results.",
+          "enum": [
+            "created",
+            "updated"
+          ]
+        },
+        "severity": {
+          "type": "string",
+          "description": "If specified, only code scanning alerts with this severity will be returned.",
+          "enum": [
+            "critical",
+            "high",
+            "medium",
+            "low",
+            "warning",
+            "note",
+            "error"
+          ]
+        },
+        "assignees": {
+          "type": "string",
+          "description": "Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., `octocat` or `octocat,hubot`).\nUse `*` to list alerts with at least one assignee or `none` to list alerts with no assignees.\n"
+        }
+      },
+      "required": [
+        "org"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_list_alerts_for_repo",
+    "description": "List code scanning alerts for a repository",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "tool_name": {
+          "type": "string",
+          "description": "The name of a code scanning tool. Only results by this tool will be listed. You can specify the tool by using either `tool_name` or `tool_guid`, but not both."
+        },
+        "tool_guid": {
+          "type": "string",
+          "description": "The GUID of a code scanning tool. Only results by this tool will be listed. Note that some code scanning tools may not include a GUID in their analysis data. You can specify the tool by using either `tool_guid` or `tool_name`, but not both."
+        },
+        "page": {
+          "type": "number",
+          "description": "The page number of the results to fetch. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "per_page": {
+          "type": "number",
+          "description": "The number of results per page (max 100). For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "ref": {
+          "type": "string",
+          "description": "The Git reference for the results you want to list. The `ref` for a branch can be formatted either as `refs/heads/<branch name>` or simply `<branch name>`. To reference a pull request use `refs/pull/<number>/merge`."
+        },
+        "pr": {
+          "type": "number",
+          "description": "The number of the pull request for the results you want to list."
+        },
+        "direction": {
+          "type": "string",
+          "description": "The direction to sort the results by.",
+          "enum": [
+            "asc",
+            "desc"
+          ]
+        },
+        "before": {
+          "type": "string",
+          "description": "A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results before this cursor. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "after": {
+          "type": "string",
+          "description": "A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results after this cursor. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "sort": {
+          "type": "string",
+          "description": "The property by which to sort the results.",
+          "enum": [
+            "created",
+            "updated"
+          ]
+        },
+        "state": {
+          "type": "string",
+          "description": "If specified, only code scanning alerts with this state will be returned.",
+          "enum": [
+            "open",
+            "closed",
+            "dismissed",
+            "fixed"
+          ]
+        },
+        "severity": {
+          "type": "string",
+          "description": "If specified, only code scanning alerts with this severity will be returned.",
+          "enum": [
+            "critical",
+            "high",
+            "medium",
+            "low",
+            "warning",
+            "note",
+            "error"
+          ]
+        },
+        "assignees": {
+          "type": "string",
+          "description": "Filter alerts by assignees. Provide a comma-separated list of user handles (e.g., `octocat` or `octocat,hubot`).\nUse `*` to list alerts with at least one assignee or `none` to list alerts with no assignees.\n"
+        }
+      },
+      "required": [
+        "owner",
+        "repo"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_alert",
+    "description": "Get a code scanning alert",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_update_alert",
+    "description": "Update a code scanning alert",
+    "method": "PATCH",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        },
+        "state": {
+          "type": "string",
+          "description": "Sets the state of the code scanning alert. You must provide `dismissed_reason` when you set the state to `dismissed`.",
+          "enum": [
+            "open",
+            "dismissed"
+          ]
+        },
+        "dismissed_reason": {
+          "type": "string",
+          "description": "**Required when the state is dismissed.** The reason for dismissing or closing the alert.",
+          "enum": [
+            "false positive",
+            "won't fix",
+            "used in tests",
+            null
+          ]
+        },
+        "dismissed_comment": {
+          "type": "string",
+          "description": "The dismissal comment associated with the dismissal of the alert."
+        },
+        "create_request": {
+          "type": "boolean",
+          "description": "If `true`, attempt to create an alert dismissal request."
+        },
+        "assignees": {
+          "type": "array",
+          "description": "The list of users to assign to the code scanning alert. An empty array unassigns all previous assignees from the alert."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_autofix",
+    "description": "Get the status of an autofix for a code scanning alert",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_create_autofix",
+    "description": "Create an autofix for a code scanning alert",
+    "method": "POST",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_commit_autofix",
+    "description": "Commit an autofix for a code scanning alert",
+    "method": "POST",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix/commits",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        },
+        "target_ref": {
+          "type": "string",
+          "description": "The Git reference of target branch for the commit. Branch needs to already exist.  For more information, see \"[Git References](https://git-scm.com/book/en/v2/Git-Internals-Git-References)\" in the Git documentation."
+        },
+        "message": {
+          "type": "string",
+          "description": "Commit message to be used."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_list_alert_instances",
+    "description": "List instances of a code scanning alert",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "alert_number": {
+          "type": "number",
+          "description": "The number that identifies an alert. You can find this at the end of the URL for a code scanning alert within GitHub, and in the `number` field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation."
+        },
+        "page": {
+          "type": "number",
+          "description": "The page number of the results to fetch. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "per_page": {
+          "type": "number",
+          "description": "The number of results per page (max 100). For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "ref": {
+          "type": "string",
+          "description": "The Git reference for the results you want to list. The `ref` for a branch can be formatted either as `refs/heads/<branch name>` or simply `<branch name>`. To reference a pull request use `refs/pull/<number>/merge`."
+        },
+        "pr": {
+          "type": "number",
+          "description": "The number of the pull request for the results you want to list."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "alert_number"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_list_recent_analyses",
+    "description": "List code scanning analyses for a repository",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/analyses",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "tool_name": {
+          "type": "string",
+          "description": "The name of a code scanning tool. Only results by this tool will be listed. You can specify the tool by using either `tool_name` or `tool_guid`, but not both."
+        },
+        "tool_guid": {
+          "type": "string",
+          "description": "The GUID of a code scanning tool. Only results by this tool will be listed. Note that some code scanning tools may not include a GUID in their analysis data. You can specify the tool by using either `tool_guid` or `tool_name`, but not both."
+        },
+        "page": {
+          "type": "number",
+          "description": "The page number of the results to fetch. For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "per_page": {
+          "type": "number",
+          "description": "The number of results per page (max 100). For more information, see \"[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api).\""
+        },
+        "pr": {
+          "type": "number",
+          "description": "The number of the pull request for the results you want to list."
+        },
+        "ref": {
+          "type": "string",
+          "description": "The Git reference for the analyses you want to list. The `ref` for a branch can be formatted either as `refs/heads/<branch name>` or simply `<branch name>`. To reference a pull request use `refs/pull/<number>/merge`."
+        },
+        "sarif_id": {
+          "type": "string",
+          "description": "Filter analyses belonging to the same SARIF upload."
+        },
+        "direction": {
+          "type": "string",
+          "description": "The direction to sort the results by.",
+          "enum": [
+            "asc",
+            "desc"
+          ]
+        },
+        "sort": {
+          "type": "string",
+          "description": "The property by which to sort the results.",
+          "enum": [
+            "created"
+          ]
+        }
+      },
+      "required": [
+        "owner",
+        "repo"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_analysis",
+    "description": "Get a code scanning analysis for a repository",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "analysis_id": {
+          "type": "number",
+          "description": "The ID of the analysis, as returned from the `GET /repos/{owner}/{repo}/code-scanning/analyses` operation."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "analysis_id"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_delete_analysis",
+    "description": "Delete a code scanning analysis from a repository",
+    "method": "DELETE",
+    "path": "/repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "analysis_id": {
+          "type": "number",
+          "description": "The ID of the analysis, as returned from the `GET /repos/{owner}/{repo}/code-scanning/analyses` operation."
+        },
+        "confirm_delete": {
+          "type": "string",
+          "description": "Allow deletion if the specified analysis is the last in a set. If you attempt to delete the final analysis in a set without setting this parameter to `true`, you'll get a 400 response with the message: `Analysis is last of its type and deletion may result in the loss of historical alert data. Please specify confirm_delete.`"
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "analysis_id"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_list_codeql_databases",
+    "description": "List CodeQL databases for a repository",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/databases",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        }
+      },
+      "required": [
+        "owner",
+        "repo"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_codeql_database",
+    "description": "Get a CodeQL database for a repository",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/databases/{language}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "language": {
+          "type": "string",
+          "description": "The language of the CodeQL database."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "language"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_delete_codeql_database",
+    "description": "Delete a CodeQL database",
+    "method": "DELETE",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/databases/{language}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "language": {
+          "type": "string",
+          "description": "The language of the CodeQL database."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "language"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_create_variant_analysis",
+    "description": "Create a CodeQL variant analysis",
+    "method": "POST",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/variant-analyses",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "language": {
+          "type": "string",
+          "description": "The language targeted by the CodeQL query",
+          "enum": [
+            "actions",
+            "cpp",
+            "csharp",
+            "go",
+            "java",
+            "javascript",
+            "python",
+            "ruby",
+            "rust",
+            "swift"
+          ]
+        },
+        "query_pack": {
+          "type": "string",
+          "description": "A Base64-encoded tarball containing a CodeQL query and all its dependencies"
+        },
+        "repositories": {
+          "type": "array",
+          "description": "List of repository names (in the form `owner/repo-name`) to run the query against. Precisely one property from `repositories`, `repository_lists` and `repository_owners` is required."
+        },
+        "repository_lists": {
+          "type": "array",
+          "description": "List of repository lists to run the query against. Precisely one property from `repositories`, `repository_lists` and `repository_owners` is required."
+        },
+        "repository_owners": {
+          "type": "array",
+          "description": "List of organization or user names whose repositories the query should be run against. Precisely one property from `repositories`, `repository_lists` and `repository_owners` is required."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "language",
+        "query_pack"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_variant_analysis",
+    "description": "Get the summary of a CodeQL variant analysis",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "codeql_variant_analysis_id": {
+          "type": "number",
+          "description": "The unique identifier of the variant analysis."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "codeql_variant_analysis_id"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_variant_analysis_repo_task",
+    "description": "Get the analysis status of a repository in a CodeQL variant analysis",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the controller repository."
+        },
+        "codeql_variant_analysis_id": {
+          "type": "number",
+          "description": "The ID of the variant analysis."
+        },
+        "repo_owner": {
+          "type": "string",
+          "description": "The account owner of the variant analysis repository. The name is not case sensitive."
+        },
+        "repo_name": {
+          "type": "string",
+          "description": "The name of the variant analysis repository."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "codeql_variant_analysis_id",
+        "repo_owner",
+        "repo_name"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_default_setup",
+    "description": "Get a code scanning default setup configuration",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/default-setup",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        }
+      },
+      "required": [
+        "owner",
+        "repo"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_update_default_setup",
+    "description": "Update a code scanning default setup configuration",
+    "method": "PATCH",
+    "path": "/repos/{owner}/{repo}/code-scanning/default-setup",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "state": {
+          "type": "string",
+          "description": "The desired state of code scanning default setup.",
+          "enum": [
+            "configured",
+            "not-configured"
+          ]
+        },
+        "runner_type": {
+          "type": "string",
+          "description": "Runner type to be used.",
+          "enum": [
+            "standard",
+            "labeled"
+          ]
+        },
+        "runner_label": {
+          "type": "string",
+          "description": "Runner label to be used if the runner type is labeled."
+        },
+        "query_suite": {
+          "type": "string",
+          "description": "CodeQL query suite to be used.",
+          "enum": [
+            "default",
+            "extended"
+          ]
+        },
+        "threat_model": {
+          "type": "string",
+          "description": "Threat model to be used for code scanning analysis. Use `remote` to analyze only network sources and `remote_and_local` to include local sources like filesystem access, command-line arguments, database reads, environment variable and standard input.",
+          "enum": [
+            "remote",
+            "remote_and_local"
+          ]
+        },
+        "languages": {
+          "type": "array",
+          "description": "CodeQL languages to be analyzed."
+        }
+      },
+      "required": [
+        "owner",
+        "repo"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_upload_sarif",
+    "description": "Upload an analysis as SARIF data",
+    "method": "POST",
+    "path": "/repos/{owner}/{repo}/code-scanning/sarifs",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "commit_sha": {
+          "type": "string",
+          "description": "The SHA of the commit to which the analysis you are uploading relates."
+        },
+        "ref": {
+          "type": "string",
+          "description": "The full Git reference, formatted as `refs/heads/<branch name>`,\n`refs/tags/<tag>`, `refs/pull/<number>/merge`, or `refs/pull/<number>/head`."
+        },
+        "sarif": {
+          "type": "string",
+          "description": "A Base64 string representing the SARIF file to upload. You must first compress your SARIF file using [`gzip`](http://www.gnu.org/software/gzip/manual/gzip.html) and then translate the contents of the file into a Base64 encoding string. For more information, see \"[SARIF support for code scanning](https://docs.github.com/code-security/secure-coding/sarif-support-for-code-scanning).\""
+        },
+        "checkout_uri": {
+          "type": "string",
+          "description": "The base directory used in the analysis, as it appears in the SARIF file.\nThis property is used to convert file paths from absolute to relative, so that alerts can be mapped to their correct location in the repository."
+        },
+        "started_at": {
+          "type": "string",
+          "description": "The time that the analysis run began. This is a timestamp in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format: `YYYY-MM-DDTHH:MM:SSZ`."
+        },
+        "tool_name": {
+          "type": "string",
+          "description": "The name of the tool used to generate the code scanning analysis. If this parameter is not used, the tool name defaults to \"API\". If the uploaded SARIF contains a tool GUID, this will be available for filtering using the `tool_guid` parameter of operations such as `GET /repos/{owner}/{repo}/code-scanning/alerts`."
+        },
+        "validate": {
+          "type": "boolean",
+          "description": "Whether the SARIF file will be validated according to the code scanning specifications.\nThis parameter is intended to help integrators ensure that the uploaded SARIF files are correctly rendered by code scanning."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "commit_sha",
+        "ref",
+        "sarif"
+      ]
+    }
+  },
+  {
+    "name": "code_scanning_get_sarif",
+    "description": "Get information about a SARIF upload",
+    "method": "GET",
+    "path": "/repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}",
+    "deleteSendsJsonBody": false,
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "type": "string",
+          "description": "The account owner of the repository. The name is not case sensitive."
+        },
+        "repo": {
+          "type": "string",
+          "description": "The name of the repository without the `.git` extension. The name is not case sensitive."
+        },
+        "sarif_id": {
+          "type": "string",
+          "description": "The SARIF ID obtained after uploading."
+        }
+      },
+      "required": [
+        "owner",
+        "repo",
+        "sarif_id"
+      ]
+    }
+  }
+];
+
+export const tools = ENDPOINTS.map((e) => ({
+  name: e.name,
+  description: e.description,
+  method: e.method,
+  path: e.path,
+  deleteSendsJsonBody: Boolean(e.deleteSendsJsonBody),
+  inputSchema: e.inputSchema,
+  handler: async (params) => ({
+    content: [{ type: 'text', text: JSON.stringify(await apiRequest(e.method, e.path, params, { deleteSendsJsonBody: e.deleteSendsJsonBody }), null, 2) }],
+  }),
+}));