gentyr 1.3.0

package/packages/mcp-servers/dist/github/server.js

@@ -0,0 +1,686 @@
+#!/usr/bin/env node
+/**
+ * GitHub MCP Server
+ *
+ * Provides tools for managing GitHub repositories, pull requests, issues, and workflows.
+ *
+ * Protocol: JSON-RPC 2.0 over stdin/stdout (stdio MCP)
+ *
+ * Required env vars:
+ * - GITHUB_TOKEN: GitHub personal access token or fine-grained token
+ *
+ * @version 1.0.0
+ */
+import nacl from 'tweetnacl';
+import { McpServer } from '../shared/server.js';
+import { GetRepoArgsSchema, ListBranchesArgsSchema, CreateBranchArgsSchema, DeleteBranchArgsSchema, GetFileContentsArgsSchema, CreateOrUpdateFileArgsSchema, ListPullRequestsArgsSchema, GetPullRequestArgsSchema, CreatePullRequestArgsSchema, MergePullRequestArgsSchema, GetPullRequestFilesArgsSchema, ListIssuesArgsSchema, GetIssueArgsSchema, CreateIssueArgsSchema, CreateIssueCommentArgsSchema, ListWorkflowRunsArgsSchema, GetWorkflowRunArgsSchema, RerunWorkflowArgsSchema, CancelWorkflowRunArgsSchema, CreateSecretArgsSchema, ListSecretsArgsSchema, DeleteSecretArgsSchema, ListEnvironmentsArgsSchema, CreateEnvironmentSecretArgsSchema, DeleteEnvironmentSecretArgsSchema, GetBranchProtectionArgsSchema, UpdateBranchProtectionArgsSchema, DeleteBranchProtectionArgsSchema, } from './types.js';
+const { GITHUB_TOKEN } = process.env;
+const BASE_URL = 'https://api.github.com';
+if (!GITHUB_TOKEN) {
+    console.error('GITHUB_TOKEN environment variable is required');
+    process.exit(1);
+}
+/**
+ * Make a request to the GitHub API
+ */
+async function githubFetch(endpoint, options = {}) {
+    const url = `${BASE_URL}${endpoint}`;
+    const response = await fetch(url, {
+        ...options,
+        headers: {
+            Authorization: `Bearer ${GITHUB_TOKEN}`,
+            Accept: 'application/vnd.github+json',
+            'X-GitHub-Api-Version': '2022-11-28',
+            'Content-Type': 'application/json',
+            ...options.headers,
+        },
+    });
+    // Handle 204 No Content responses
+    if (response.status === 204) {
+        return { success: true };
+    }
+    const data = await response.json();
+    if (!response.ok) {
+        const error = data.message;
+        throw new Error(error || `HTTP ${response.status}: ${JSON.stringify(data)}`);
+    }
+    return data;
+}
+// ============================================================================
+// Repository Handlers
+// ============================================================================
+async function getRepo(args) {
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}`);
+    return {
+        id: data.id,
+        name: data.name,
+        full_name: data.full_name,
+        private: data.private,
+        description: data.description,
+        default_branch: data.default_branch,
+        html_url: data.html_url,
+        clone_url: data.clone_url,
+        created_at: data.created_at,
+        updated_at: data.updated_at,
+        language: data.language,
+        stargazers_count: data.stargazers_count,
+        forks_count: data.forks_count,
+    };
+}
+async function listBranches(args) {
+    const endpoint = `/repos/${args.owner}/${args.repo}/branches`;
+    const params = args.protected !== undefined ? `?protected=${args.protected}` : '';
+    const data = await githubFetch(`${endpoint}${params}`);
+    return data.map(branch => ({
+        name: branch.name,
+        commit_sha: branch.commit.sha,
+        protected: branch.protected,
+    }));
+}
+async function createBranch(args) {
+    // First, get the SHA of the source branch
+    const refData = await githubFetch(`/repos/${args.owner}/${args.repo}/git/ref/heads/${args.from_branch}`);
+    const { sha } = refData.object;
+    // Create the new branch
+    await githubFetch(`/repos/${args.owner}/${args.repo}/git/refs`, {
+        method: 'POST',
+        body: JSON.stringify({
+            ref: `refs/heads/${args.branch}`,
+            sha,
+        }),
+    });
+    return {
+        success: true,
+        message: `Created branch ${args.branch} from ${args.from_branch}`,
+    };
+}
+async function deleteBranch(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/git/refs/heads/${args.branch}`, {
+        method: 'DELETE',
+    });
+    return {
+        success: true,
+        message: `Deleted branch ${args.branch}`,
+    };
+}
+async function getFileContents(args) {
+    const params = args.ref ? `?ref=${args.ref}` : '';
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/contents/${args.path}${params}`);
+    // Handle directory contents (array response)
+    if (Array.isArray(data)) {
+        return data.map(item => ({
+            name: item.name,
+            path: item.path,
+            sha: item.sha,
+            size: item.size,
+            type: item.type,
+            download_url: item.download_url,
+        }));
+    }
+    // Handle single file response
+    const file = data;
+    return {
+        name: file.name,
+        path: file.path,
+        sha: file.sha,
+        size: file.size,
+        type: file.type,
+        content: file.content,
+        encoding: file.encoding,
+        download_url: file.download_url,
+    };
+}
+async function createOrUpdateFile(args) {
+    // Base64 encode the content
+    const contentBase64 = Buffer.from(args.content).toString('base64');
+    const body = {
+        message: args.message,
+        content: contentBase64,
+        branch: args.branch,
+    };
+    if (args.sha) {
+        body.sha = args.sha;
+    }
+    await githubFetch(`/repos/${args.owner}/${args.repo}/contents/${args.path}`, {
+        method: 'PUT',
+        body: JSON.stringify(body),
+    });
+    return {
+        success: true,
+        message: `${args.sha ? 'Updated' : 'Created'} file ${args.path}`,
+    };
+}
+// ============================================================================
+// Pull Request Handlers
+// ============================================================================
+async function listPullRequests(args) {
+    const params = new URLSearchParams();
+    params.set('state', args.state || 'open');
+    params.set('per_page', (args.limit || 30).toString());
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/pulls?${params}`);
+    return data.map(pr => ({
+        number: pr.number,
+        title: pr.title,
+        state: pr.state,
+        user: pr.user.login,
+        created_at: pr.created_at,
+        updated_at: pr.updated_at,
+        draft: pr.draft,
+        head_ref: pr.head.ref,
+        base_ref: pr.base.ref,
+        html_url: pr.html_url,
+    }));
+}
+async function getPullRequest(args) {
+    return await githubFetch(`/repos/${args.owner}/${args.repo}/pulls/${args.pull_number}`);
+}
+async function createPullRequest(args) {
+    const body = {
+        title: args.title,
+        head: args.head,
+        base: args.base,
+        draft: args.draft || false,
+    };
+    if (args.body) {
+        body.body = args.body;
+    }
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/pulls`, {
+        method: 'POST',
+        body: JSON.stringify(body),
+    });
+    return {
+        number: data.number,
+        title: data.title,
+        state: data.state,
+        user: data.user.login,
+        created_at: data.created_at,
+        updated_at: data.updated_at,
+        draft: data.draft,
+        head_ref: data.head.ref,
+        base_ref: data.base.ref,
+        html_url: data.html_url,
+    };
+}
+async function mergePullRequest(args) {
+    const body = {
+        merge_method: args.merge_method || 'merge',
+    };
+    if (args.commit_title) {
+        body.commit_title = args.commit_title;
+    }
+    if (args.commit_message) {
+        body.commit_message = args.commit_message;
+    }
+    await githubFetch(`/repos/${args.owner}/${args.repo}/pulls/${args.pull_number}/merge`, {
+        method: 'PUT',
+        body: JSON.stringify(body),
+    });
+    return {
+        success: true,
+        message: `Merged PR #${args.pull_number}`,
+    };
+}
+async function getPullRequestFiles(args) {
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/pulls/${args.pull_number}/files`);
+    return data.map(file => ({
+        filename: file.filename,
+        status: file.status,
+        additions: file.additions,
+        deletions: file.deletions,
+        changes: file.changes,
+        patch: file.patch,
+    }));
+}
+// ============================================================================
+// Issue Handlers
+// ============================================================================
+async function listIssues(args) {
+    const params = new URLSearchParams();
+    params.set('state', args.state || 'open');
+    params.set('per_page', (args.limit || 30).toString());
+    if (args.labels) {
+        params.set('labels', args.labels);
+    }
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/issues?${params}`);
+    // Filter out pull requests (they have a pull_request field)
+    const issues = data.filter(item => !item.pull_request);
+    return issues.map(issue => ({
+        number: issue.number,
+        title: issue.title,
+        state: issue.state,
+        user: issue.user.login,
+        created_at: issue.created_at,
+        updated_at: issue.updated_at,
+        labels: issue.labels.map(l => l.name),
+        assignees: issue.assignees.map(a => a.login),
+        html_url: issue.html_url,
+    }));
+}
+async function getIssue(args) {
+    return await githubFetch(`/repos/${args.owner}/${args.repo}/issues/${args.issue_number}`);
+}
+async function createIssue(args) {
+    const body = {
+        title: args.title,
+    };
+    if (args.body) {
+        body.body = args.body;
+    }
+    if (args.labels && args.labels.length > 0) {
+        body.labels = args.labels;
+    }
+    if (args.assignees && args.assignees.length > 0) {
+        body.assignees = args.assignees;
+    }
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/issues`, {
+        method: 'POST',
+        body: JSON.stringify(body),
+    });
+    return {
+        number: data.number,
+        title: data.title,
+        state: data.state,
+        user: data.user.login,
+        created_at: data.created_at,
+        updated_at: data.updated_at,
+        labels: data.labels.map(l => l.name),
+        assignees: data.assignees.map(a => a.login),
+        html_url: data.html_url,
+    };
+}
+async function createIssueComment(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/issues/${args.issue_number}/comments`, {
+        method: 'POST',
+        body: JSON.stringify({ body: args.body }),
+    });
+    return {
+        success: true,
+        message: `Added comment to issue #${args.issue_number}`,
+    };
+}
+// ============================================================================
+// Workflow Handlers
+// ============================================================================
+async function listWorkflowRuns(args) {
+    const params = new URLSearchParams();
+    params.set('per_page', (args.limit || 20).toString());
+    if (args.branch) {
+        params.set('branch', args.branch);
+    }
+    if (args.status) {
+        params.set('status', args.status);
+    }
+    let endpoint = `/repos/${args.owner}/${args.repo}/actions/runs`;
+    if (args.workflow_id) {
+        endpoint = `/repos/${args.owner}/${args.repo}/actions/workflows/${args.workflow_id}/runs`;
+    }
+    const data = await githubFetch(`${endpoint}?${params}`);
+    return data.workflow_runs.map(run => ({
+        id: run.id,
+        name: run.name,
+        head_branch: run.head_branch,
+        status: run.status,
+        conclusion: run.conclusion,
+        created_at: run.created_at,
+        updated_at: run.updated_at,
+        html_url: run.html_url,
+    }));
+}
+async function getWorkflowRun(args) {
+    return await githubFetch(`/repos/${args.owner}/${args.repo}/actions/runs/${args.run_id}`);
+}
+async function rerunWorkflow(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/actions/runs/${args.run_id}/rerun`, {
+        method: 'POST',
+    });
+    return {
+        success: true,
+        message: `Triggered rerun of workflow run ${args.run_id}`,
+    };
+}
+async function cancelWorkflowRun(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/actions/runs/${args.run_id}/cancel`, {
+        method: 'POST',
+    });
+    return {
+        success: true,
+        message: `Cancelled workflow run ${args.run_id}`,
+    };
+}
+// ============================================================================
+// Secrets Handlers
+// ============================================================================
+/**
+ * Encrypt a secret value using the repository's public key
+ * GitHub requires secrets to be encrypted using the sealed box algorithm
+ */
+function encryptSecretValue(publicKeyBase64, secretValue) {
+    // Decode the public key from base64
+    const publicKey = Uint8Array.from(Buffer.from(publicKeyBase64, 'base64'));
+    // Convert secret to bytes
+    const secretBytes = Buffer.from(secretValue);
+    // Generate an ephemeral key pair for the sealed box
+    const ephemeralKeyPair = nacl.box.keyPair();
+    // Create a nonce (24 bytes of zeros followed by the first 24 bytes of the ephemeral public key)
+    const nonce = new Uint8Array(24);
+    for (let i = 0; i < 24; i++) {
+        nonce[i] = ephemeralKeyPair.publicKey[i % ephemeralKeyPair.publicKey.length];
+    }
+    // Encrypt the secret using nacl.box (sealed box format)
+    const encryptedMessage = nacl.box(secretBytes, nonce, publicKey, ephemeralKeyPair.secretKey);
+    // Combine ephemeral public key + encrypted message (sealed box format)
+    const sealedBox = new Uint8Array(ephemeralKeyPair.publicKey.length + encryptedMessage.length);
+    sealedBox.set(ephemeralKeyPair.publicKey);
+    sealedBox.set(encryptedMessage, ephemeralKeyPair.publicKey.length);
+    // Return base64 encoded
+    return Buffer.from(sealedBox).toString('base64');
+}
+async function createSecret(args) {
+    // First, get the repository's public key for encryption
+    const keyData = await githubFetch(`/repos/${args.owner}/${args.repo}/actions/secrets/public-key`);
+    // Encrypt the secret value using NaCl sealed box algorithm (G017 compliance)
+    const encryptedValue = encryptSecretValue(keyData.key, args.secret_value);
+    await githubFetch(`/repos/${args.owner}/${args.repo}/actions/secrets/${args.secret_name}`, {
+        method: 'PUT',
+        body: JSON.stringify({
+            encrypted_value: encryptedValue,
+            key_id: keyData.key_id,
+        }),
+    });
+    return {
+        success: true,
+        message: `Created/updated secret ${args.secret_name}`,
+    };
+}
+async function listSecrets(args) {
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/actions/secrets`);
+    return data.secrets.map(secret => ({
+        name: secret.name,
+        created_at: secret.created_at,
+        updated_at: secret.updated_at,
+    }));
+}
+async function deleteSecret(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/actions/secrets/${args.secret_name}`, {
+        method: 'DELETE',
+    });
+    return {
+        success: true,
+        message: `Deleted secret ${args.secret_name}`,
+    };
+}
+// ============================================================================
+// Environment Handlers
+// ============================================================================
+async function listEnvironments(args) {
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/environments`);
+    return data.environments.map(env => ({
+        id: env.id,
+        name: env.name,
+        html_url: env.html_url,
+        created_at: env.created_at,
+        updated_at: env.updated_at,
+    }));
+}
+async function createEnvironmentSecret(args) {
+    // First, get the environment's public key for encryption
+    const keyData = await githubFetch(`/repos/${args.owner}/${args.repo}/environments/${args.environment_name}/secrets/public-key`);
+    // Encrypt the secret value
+    const encryptedValue = encryptSecretValue(keyData.key, args.secret_value);
+    await githubFetch(`/repos/${args.owner}/${args.repo}/environments/${args.environment_name}/secrets/${args.secret_name}`, {
+        method: 'PUT',
+        body: JSON.stringify({
+            encrypted_value: encryptedValue,
+            key_id: keyData.key_id,
+        }),
+    });
+    return {
+        success: true,
+        message: `Created/updated secret ${args.secret_name} in environment ${args.environment_name}`,
+    };
+}
+async function deleteEnvironmentSecret(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/environments/${args.environment_name}/secrets/${args.secret_name}`, {
+        method: 'DELETE',
+    });
+    return {
+        success: true,
+        message: `Deleted secret ${args.secret_name} from environment ${args.environment_name}`,
+    };
+}
+// ============================================================================
+// Branch Protection Handlers
+// ============================================================================
+async function getBranchProtection(args) {
+    const data = await githubFetch(`/repos/${args.owner}/${args.repo}/branches/${args.branch}/protection`);
+    return data;
+}
+async function updateBranchProtection(args) {
+    const body = {};
+    if (args.required_status_checks) {
+        body.required_status_checks = args.required_status_checks;
+    }
+    if (args.enforce_admins !== undefined) {
+        body.enforce_admins = args.enforce_admins;
+    }
+    if (args.required_pull_request_reviews) {
+        body.required_pull_request_reviews = args.required_pull_request_reviews;
+    }
+    if (args.restrictions) {
+        body.restrictions = args.restrictions;
+    }
+    if (args.required_linear_history !== undefined) {
+        body.required_linear_history = args.required_linear_history;
+    }
+    if (args.allow_force_pushes !== undefined) {
+        body.allow_force_pushes = args.allow_force_pushes;
+    }
+    if (args.allow_deletions !== undefined) {
+        body.allow_deletions = args.allow_deletions;
+    }
+    await githubFetch(`/repos/${args.owner}/${args.repo}/branches/${args.branch}/protection`, {
+        method: 'PUT',
+        body: JSON.stringify(body),
+    });
+    return {
+        success: true,
+        message: `Updated branch protection for ${args.branch}`,
+    };
+}
+async function deleteBranchProtection(args) {
+    await githubFetch(`/repos/${args.owner}/${args.repo}/branches/${args.branch}/protection`, {
+        method: 'DELETE',
+    });
+    return {
+        success: true,
+        message: `Removed branch protection from ${args.branch}`,
+    };
+}
+// ============================================================================
+// Server Setup
+// ============================================================================
+const tools = [
+    // Repository tools
+    {
+        name: 'github_get_repo',
+        description: 'Get repository details including description, default branch, and metadata',
+        schema: GetRepoArgsSchema,
+        handler: getRepo,
+    },
+    {
+        name: 'github_list_branches',
+        description: 'List all branches in a repository',
+        schema: ListBranchesArgsSchema,
+        handler: listBranches,
+    },
+    {
+        name: 'github_create_branch',
+        description: 'Create a new branch from an existing branch',
+        schema: CreateBranchArgsSchema,
+        handler: createBranch,
+    },
+    {
+        name: 'github_delete_branch',
+        description: 'Delete a branch (protected branches cannot be deleted)',
+        schema: DeleteBranchArgsSchema,
+        handler: deleteBranch,
+    },
+    {
+        name: 'github_get_file_contents',
+        description: 'Get contents of a file or directory. Returns base64-encoded content for files, array of items for directories',
+        schema: GetFileContentsArgsSchema,
+        handler: getFileContents,
+    },
+    {
+        name: 'github_create_or_update_file',
+        description: 'Create a new file or update an existing file. Content will be base64 encoded automatically',
+        schema: CreateOrUpdateFileArgsSchema,
+        handler: createOrUpdateFile,
+    },
+    // Pull request tools
+    {
+        name: 'github_list_pull_requests',
+        description: 'List pull requests in a repository',
+        schema: ListPullRequestsArgsSchema,
+        handler: listPullRequests,
+    },
+    {
+        name: 'github_get_pull_request',
+        description: 'Get detailed information about a specific pull request',
+        schema: GetPullRequestArgsSchema,
+        handler: getPullRequest,
+    },
+    {
+        name: 'github_create_pull_request',
+        description: 'Create a new pull request',
+        schema: CreatePullRequestArgsSchema,
+        handler: createPullRequest,
+    },
+    {
+        name: 'github_merge_pull_request',
+        description: 'Merge a pull request using specified merge method',
+        schema: MergePullRequestArgsSchema,
+        handler: mergePullRequest,
+    },
+    {
+        name: 'github_get_pull_request_files',
+        description: 'Get the list of files changed in a pull request with diff stats',
+        schema: GetPullRequestFilesArgsSchema,
+        handler: getPullRequestFiles,
+    },
+    // Issue tools
+    {
+        name: 'github_list_issues',
+        description: 'List issues in a repository (excludes pull requests)',
+        schema: ListIssuesArgsSchema,
+        handler: listIssues,
+    },
+    {
+        name: 'github_get_issue',
+        description: 'Get detailed information about a specific issue',
+        schema: GetIssueArgsSchema,
+        handler: getIssue,
+    },
+    {
+        name: 'github_create_issue',
+        description: 'Create a new issue with optional labels and assignees',
+        schema: CreateIssueArgsSchema,
+        handler: createIssue,
+    },
+    {
+        name: 'github_create_issue_comment',
+        description: 'Add a comment to an existing issue or pull request',
+        schema: CreateIssueCommentArgsSchema,
+        handler: createIssueComment,
+    },
+    // Workflow tools
+    {
+        name: 'github_list_workflow_runs',
+        description: 'List GitHub Actions workflow runs with optional filters',
+        schema: ListWorkflowRunsArgsSchema,
+        handler: listWorkflowRuns,
+    },
+    {
+        name: 'github_get_workflow_run',
+        description: 'Get detailed information about a specific workflow run',
+        schema: GetWorkflowRunArgsSchema,
+        handler: getWorkflowRun,
+    },
+    {
+        name: 'github_rerun_workflow',
+        description: 'Re-run a failed or completed workflow',
+        schema: RerunWorkflowArgsSchema,
+        handler: rerunWorkflow,
+    },
+    {
+        name: 'github_cancel_workflow_run',
+        description: 'Cancel a running workflow',
+        schema: CancelWorkflowRunArgsSchema,
+        handler: cancelWorkflowRun,
+    },
+    // Secrets tools
+    {
+        name: 'github_create_secret',
+        description: 'Create or update a repository secret for GitHub Actions',
+        schema: CreateSecretArgsSchema,
+        handler: createSecret,
+    },
+    {
+        name: 'github_list_secrets',
+        description: 'List all repository secrets (names only, values are never exposed)',
+        schema: ListSecretsArgsSchema,
+        handler: listSecrets,
+    },
+    {
+        name: 'github_delete_secret',
+        description: 'Delete a repository secret',
+        schema: DeleteSecretArgsSchema,
+        handler: deleteSecret,
+    },
+    // Environment tools
+    {
+        name: 'github_list_environments',
+        description: 'List deployment environments (e.g., production, staging)',
+        schema: ListEnvironmentsArgsSchema,
+        handler: listEnvironments,
+    },
+    {
+        name: 'github_create_environment_secret',
+        description: 'Create or update an environment-specific secret',
+        schema: CreateEnvironmentSecretArgsSchema,
+        handler: createEnvironmentSecret,
+    },
+    {
+        name: 'github_delete_environment_secret',
+        description: 'Delete an environment-specific secret',
+        schema: DeleteEnvironmentSecretArgsSchema,
+        handler: deleteEnvironmentSecret,
+    },
+    // Branch protection tools
+    {
+        name: 'github_get_branch_protection',
+        description: 'Get branch protection rules',
+        schema: GetBranchProtectionArgsSchema,
+        handler: getBranchProtection,
+    },
+    {
+        name: 'github_update_branch_protection',
+        description: 'Update branch protection rules (e.g., require PR reviews, status checks)',
+        schema: UpdateBranchProtectionArgsSchema,
+        handler: updateBranchProtection,
+    },
+    {
+        name: 'github_delete_branch_protection',
+        description: 'Remove branch protection rules',
+        schema: DeleteBranchProtectionArgsSchema,
+        handler: deleteBranchProtection,
+    },
+];
+// Create and start server
+const server = new McpServer({
+    name: 'github-mcp',
+    version: '1.0.0',
+    tools,
+});
+server.start();
+//# sourceMappingURL=server.js.map