sentinel-mcp 0.3.0 → 0.4.0

package/dist/image-server.d.ts

@@ -0,0 +1,16 @@
+export declare function isAllowedUrl(url: string): boolean;
+export declare function findImageInHtml(html: string, uuid: string): string | null;
+interface IssueContext {
+    repo: string;
+    issueNumber: number;
+}
+type FetchResult = {
+    ok: true;
+    data: string;
+    mimeType: string;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function fetchImage(url: string, token?: string, context?: IssueContext): Promise<FetchResult>;
+export {};

package/dist/image-server.js

@@ -0,0 +1,122 @@
+const ALLOWED_PATTERNS = [
+    /^https:\/\/github\.com\/user-attachments\/assets\//,
+    /^https:\/\/[a-z0-9-]+\.githubusercontent\.com\//,
+];
+const MAX_IMAGE_SIZE = 10 * 1024 * 1024; // 10 MB
+export function isAllowedUrl(url) {
+    try {
+        const parsed = new URL(url);
+        if (parsed.protocol !== "https:")
+            return false;
+        return ALLOWED_PATTERNS.some((p) => p.test(url));
+    }
+    catch {
+        return false;
+    }
+}
+export function findImageInHtml(html, uuid) {
+    const imgPattern = /<img[^>]+src="([^"]+)"/g;
+    let match;
+    // First pass: match by UUID
+    while ((match = imgPattern.exec(html)) !== null) {
+        const src = match[1].replace(/&amp;/g, "&");
+        if (src.includes(uuid))
+            return src;
+    }
+    // Second pass: fallback to first private-user-images URL
+    imgPattern.lastIndex = 0;
+    while ((match = imgPattern.exec(html)) !== null) {
+        const src = match[1].replace(/&amp;/g, "&");
+        if (src.includes("private-user-images.githubusercontent.com"))
+            return src;
+    }
+    return null;
+}
+async function fetchAndEncode(url, headers) {
+    let res;
+    try {
+        res = await fetch(url, { headers });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: `Fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    if (!res.ok) {
+        return { ok: false, error: `HTTP ${res.status}` };
+    }
+    const contentType = res.headers.get("content-type") ?? "";
+    if (!contentType.startsWith("image/")) {
+        return { ok: false, error: `Response is not an image (${contentType})` };
+    }
+    const buffer = await res.arrayBuffer();
+    if (buffer.byteLength > MAX_IMAGE_SIZE) {
+        return {
+            ok: false,
+            error: `Image too large (${(buffer.byteLength / 1024 / 1024).toFixed(1)}MB)`,
+        };
+    }
+    const data = Buffer.from(buffer).toString("base64");
+    const mimeType = contentType.split(";")[0].trim();
+    return { ok: true, data, mimeType };
+}
+async function resolveImageFromIssueHtml(targetUrl, repo, issueNumber, token) {
+    const headers = {
+        Authorization: `token ${token}`,
+        Accept: "application/vnd.github.full+json",
+        "User-Agent": "sentinel-mcp/1.0",
+        "X-GitHub-Api-Version": "2022-11-28",
+    };
+    const uuidMatch = targetUrl.match(/\/assets\/([a-f0-9-]+)/);
+    if (!uuidMatch)
+        return null;
+    const uuid = uuidMatch[1];
+    const [issueRes, commentsRes] = await Promise.all([
+        fetch(`https://api.github.com/repos/${repo}/issues/${issueNumber}`, { headers }),
+        fetch(`https://api.github.com/repos/${repo}/issues/${issueNumber}/comments?per_page=100`, { headers }),
+    ]);
+    if (issueRes.ok) {
+        const issue = (await issueRes.json());
+        if (issue.body_html) {
+            const found = findImageInHtml(issue.body_html, uuid);
+            if (found)
+                return found;
+        }
+    }
+    if (commentsRes.ok) {
+        const comments = (await commentsRes.json());
+        for (const comment of comments) {
+            if (comment.body_html) {
+                const found = findImageInHtml(comment.body_html, uuid);
+                if (found)
+                    return found;
+            }
+        }
+    }
+    return null;
+}
+export async function fetchImage(url, token, context) {
+    if (!isAllowedUrl(url)) {
+        return { ok: false, error: "URL not allowed" };
+    }
+    const headers = {
+        "User-Agent": "sentinel-mcp/1.0",
+    };
+    if (token) {
+        headers["Authorization"] = `token ${token}`;
+    }
+    const result = await fetchAndEncode(url, headers);
+    // If direct fetch failed and it's a user-attachments URL, try resolving via GitHub Issues API
+    if (!result.ok &&
+        /github\.com\/user-attachments\/assets\//.test(url) &&
+        token &&
+        context?.repo &&
+        context?.issueNumber) {
+        const resolvedUrl = await resolveImageFromIssueHtml(url, context.repo, context.issueNumber, token);
+        if (resolvedUrl) {
+            return fetchAndEncode(resolvedUrl, { "User-Agent": "sentinel-mcp/1.0" });
+        }
+    }
+    return result;
+}

package/dist/index.js

@@ -8,6 +8,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { WsClient, decodeInstallationId } from "./ws-client.js";
 import { EventQueue } from "./queue.js";
+import { fetchImage } from "./image-server.js";
 // ---------------------------------------------------------------------------
 // Config from environment
 // ---------------------------------------------------------------------------
@@ -261,8 +262,16 @@ server.registerTool("fetch_image", {
         issue_number: z.number().describe("Issue number where the image was posted"),
     },
 }, async ({ url, repo, issue_number }) => {
-    const result = await mcpToolCall("fetch_image", { url, repo, issue_number });
-    return { content: [{ type: "text", text: JSON.stringify(result) }] };
+    const result = await fetchImage(url, githubToken, { repo, issueNumber: issue_number });
+    if (!result.ok) {
+        return {
+            content: [{ type: "text", text: `${result.error}. Ask the user to describe the image or paste it as text.` }],
+            isError: true,
+        };
+    }
+    return {
+        content: [{ type: "image", data: result.data, mimeType: result.mimeType }],
+    };
 });
 server.registerTool("register_worktree", {
     description: "Register a new worktree for persistent subagent tracking. Call this after creating a worktree with git.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sentinel-mcp",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Sentinel MCP server — connects GitHub issues to Claude Code sessions",
   "type": "module",
   "main": "dist/index.js",