tca-mcp-server 1.3.2 → 2.0.1

package/dist/api/client.js

@@ -1,9 +1,9 @@
 import { createHash } from 'crypto';
 import * as ini from 'ini';
 import * as fs from 'fs';
-export const mainUrlOA = "http://server.codedog.woa.com/main/api/";
-export const analysisUrlOA = "http://server.codedog.woa.com/analysis/api/";
-export const webUrlOA = "https://codedog.woa.com/";
+export const mainUrlOA = 'http://server.codedog.woa.com/main/api/';
+export const analysisUrlOA = 'http://server.codedog.woa.com/analysis/api/';
+export const webUrlOA = 'https://codedog.woa.com/';
 export default class TcaClient {
     static instance = null;
     static commonParams = null;
@@ -28,7 +28,7 @@ export default class TcaClient {
             return TcaClient.instance;
         }
         else {
-            throw new Error("TcaClient is not initialized");
+            throw new Error('TcaClient is not initialized');
         }
     }
     static async initConfig(configPath) {
@@ -39,7 +39,7 @@ export default class TcaClient {
         if (TcaClient.instance?.runInOA()) {
             TcaClient.commonOAParams = {
                 projectId: configSection.project_id,
-                repoId: configSection.repo_id
+                repoId: configSection.repo_id,
             };
         }
         else {
@@ -52,29 +52,43 @@ export default class TcaClient {
         }
         return;
     }
+    static setCommonParams(orgSid, teamName, repoId, projectId) {
+        TcaClient.commonParams = {
+            orgSid,
+            teamName,
+            repoId,
+            projectId,
+        };
+    }
+    static setCommonOAParams(repoId, projectId) {
+        TcaClient.commonOAParams = {
+            repoId,
+            projectId,
+        };
+    }
     static getcommonParams() {
         if (!TcaClient.commonParams) {
-            throw new Error("common params is not initialized");
+            throw new Error('common params is not initialized');
         }
         return TcaClient.commonParams;
     }
     static getcommonOAParams() {
         if (!TcaClient.commonOAParams) {
-            throw new Error("common OA params is not initialized");
+            throw new Error('common OA params is not initialized');
         }
         return TcaClient.commonOAParams;
     }
     runInOA() {
-        return this.env === "oa";
+        return this.env === 'oa';
     }
     getHeader() {
         const timestamp = Math.floor(new Date().getTime() / 1000);
         const tokenSig = `${timestamp}${this.userName}#${this.token}#${this.userName}${timestamp}`;
-        const ticket = createHash("sha256").update(tokenSig).digest("hex").toUpperCase();
+        const ticket = createHash('sha256').update(tokenSig).digest('hex').toUpperCase();
         return {
-            "TCA-USERID": this.userName,
-            "TCA-TICKET": ticket,
-            "TCA-TIMESTAMP": timestamp.toString(),
+            'TCA-USERID': this.userName,
+            'TCA-TICKET': ticket,
+            'TCA-TIMESTAMP': timestamp.toString(),
         };
     }
     buildUrlWithNestedParams(url, params) {
@@ -107,23 +121,23 @@ export default class TcaClient {
         if (!baseUrl) {
             baseUrl = this.baseUrl;
         }
-        const norBaseUrl = baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`;
-        const norPath = path.startsWith("/") ? path.slice(1) : path;
+        const norBaseUrl = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`;
+        const norPath = path.startsWith('/') ? path.slice(1) : path;
         const url = new URL(norPath, norBaseUrl);
         var headers = {};
         if (TcaClient.getInstance().runInOA()) {
             headers = {
-                "Content-Type": "application/json",
-                "Authorization": `Token ${this.token}`,
+                'Content-Type': 'application/json',
+                Authorization: `Token ${this.token}`,
             };
         }
         else {
             let header = this.getHeader();
             headers = {
-                "Content-Type": "application/json",
-                "TCA-USERID": header['TCA-USERID'],
-                "TCA-TICKET": header['TCA-TICKET'],
-                "TCA-TIMESTAMP": header['TCA-TIMESTAMP']
+                'Content-Type': 'application/json',
+                'TCA-USERID': header['TCA-USERID'],
+                'TCA-TICKET': header['TCA-TICKET'],
+                'TCA-TIMESTAMP': header['TCA-TIMESTAMP'],
             };
         }
         const options = {

package/dist/api/project.js

@@ -0,0 +1,207 @@
+import TcaClient, { mainUrlOA } from "./client.js";
+/**
+ * 列出用户所有团队
+ */
+export async function listOrgs() {
+    const clientInst = TcaClient.getInstance();
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/`;
+        return clientInst.request(path, "GET", null, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/`;
+        return clientInst.request(path, "GET");
+    }
+}
+/**
+ * 列出团队下的所有项目组
+ */
+export async function listTeams(orgSid) {
+    const clientInst = TcaClient.getInstance();
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/`;
+        return clientInst.request(path, "GET", null, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/`;
+        return clientInst.request(path, "GET");
+    }
+}
+/**
+ * 列出项目组下的所有代码仓库
+ */
+export async function listRepos(orgSid, teamName, offset = 0, limit = 50) {
+    const clientInst = TcaClient.getInstance();
+    const params = { offset, limit };
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/`;
+        return clientInst.request(path, "GET", null, params, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/`;
+        return clientInst.request(path, "GET", null, params);
+    }
+}
+/**
+ * 列出仓库下的所有分析项目
+ */
+export async function listProjects(orgSid, teamName, repoId, offset = 0, limit = 50) {
+    const clientInst = TcaClient.getInstance();
+    const params = { offset, limit };
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+        return clientInst.request(path, "GET", null, params, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+        return clientInst.request(path, "GET", null, params);
+    }
+}
+/**
+ * 创建项目组
+ */
+export async function createTeam(orgSid, teamName, displayName) {
+    const clientInst = TcaClient.getInstance();
+    const data = {
+        name: teamName,
+        display_name: displayName,
+    };
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/`;
+        return clientInst.request(path, "POST", data, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/`;
+        return clientInst.request(path, "POST", data);
+    }
+}
+/**
+ * 列出用户的 SCM 凭证列表（包含用户名密码、SSH Key、OAuth、Private Token 等所有类型）
+ */
+export async function listScmAuths(orgSid) {
+    const clientInst = TcaClient.getInstance();
+    if (clientInst.runInInternal()) {
+        const path = `/authen/scmallaccounts/`;
+        return clientInst.request(path, "GET", null, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/authen/scmallaccounts/`;
+        return clientInst.request(path, "GET");
+    }
+}
+/**
+ * 创建用户名密码类型的 SCM 凭证
+ */
+export async function createScmAccount(scmUsername, scmPassword) {
+    const clientInst = TcaClient.getInstance();
+    const data = {
+        scm_username: scmUsername,
+        scm_password: scmPassword,
+    };
+    if (clientInst.runInInternal()) {
+        const path = `/authen/scmaccounts/`;
+        return clientInst.request(path, "POST", data, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/authen/scmaccounts/`;
+        return clientInst.request(path, "POST", data);
+    }
+}
+/**
+ * 创建 SSH 类型的 SCM 凭证
+ */
+export async function createScmSSH(name, sshPrivateKey, password) {
+    const clientInst = TcaClient.getInstance();
+    const data = {
+        name,
+        ssh_private_key: sshPrivateKey,
+    };
+    if (password) {
+        data.password = password;
+    }
+    if (clientInst.runInInternal()) {
+        const path = `/authen/scmsshinfos/`;
+        return clientInst.request(path, "POST", data, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/authen/scmsshinfos/`;
+        return clientInst.request(path, "POST", data);
+    }
+}
+/**
+ * 接入代码仓库到项目组
+ */
+export async function createRepo(orgSid, teamName, scmUrl, scmType = "git", options) {
+    const clientInst = TcaClient.getInstance();
+    const data = {
+        scm_url: scmUrl,
+        scm_type: scmType,
+    };
+    if (options?.name) {
+        data.name = options.name;
+    }
+    if (options?.scm_auth) {
+        data.scm_auth = options.scm_auth;
+    }
+    if (options?.created_from) {
+        data.created_from = options.created_from;
+    }
+    if (options?.symbol) {
+        data.symbol = options.symbol;
+    }
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/`;
+        return clientInst.request(path, "POST", data, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/`;
+        return clientInst.request(path, "POST", data);
+    }
+}
+/**
+ * 创建分析项目（使用指定的分析方案或官方体验方案）
+ */
+export async function createProject(orgSid, teamName, repoId, scanSchemeName, branch = "master") {
+    const clientInst = TcaClient.getInstance();
+    const data = {
+        scan_scheme_name: scanSchemeName,
+        branch: branch,
+    };
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+        return clientInst.request(path, "POST", data, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+        return clientInst.request(path, "POST", data);
+    }
+}
+/**
+ * 获取仓库详情
+ */
+export async function getRepoDetail(orgSid, teamName, repoId) {
+    const clientInst = TcaClient.getInstance();
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/`;
+        return clientInst.request(path, "GET", null, null, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/`;
+        return clientInst.request(path, "GET");
+    }
+}
+/**
+ * 获取分析方案列表
+ */
+export async function listSchemes(orgSid, teamName, repoId, offset = 0, limit = 50) {
+    const clientInst = TcaClient.getInstance();
+    const params = { offset, limit };
+    if (clientInst.runInInternal()) {
+        const path = `/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/schemes/`;
+        return clientInst.request(path, "GET", null, params, mainUrlOA);
+    }
+    else {
+        const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/schemes/`;
+        return clientInst.request(path, "GET", null, params);
+    }
+}

package/dist/api/setup.js

@@ -0,0 +1,149 @@
+import TcaClient from './client.js';
+import * as ini from 'ini';
+import * as fs from 'fs';
+/**
+ * 获取用户所属的团队列表
+ */
+export async function listOrgs() {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 获取指定团队下的项目组列表
+ */
+export async function listTeams(orgSid) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 获取指定项目组下的代码仓库列表
+ */
+export async function listRepos(orgSid, teamName) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 获取指定仓库下的分析项目列表
+ */
+export async function listProjects(orgSid, teamName, repoId) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 获取指定仓库下可用的分析方案列表
+ */
+export async function listSchemes(orgSid, teamName, repoId) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/schemes/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 在指定仓库下创建分析项目
+ */
+export async function createProject(orgSid, teamName, repoId, scanSchemeName, branch) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/${repoId}/projects/`;
+    const data = {
+        scan_scheme_name: scanSchemeName,
+        branch: branch,
+    };
+    return clientInst.request(path, 'POST', data);
+}
+/**
+ * 在指定团队下创建项目组
+ */
+export async function createTeam(orgSid, teamName, displayName) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/`;
+    const data = {
+        name: teamName,
+        display_name: displayName,
+    };
+    return clientInst.request(path, 'POST', data);
+}
+/**
+ * 在指定项目组下接入代码仓库
+ */
+export async function createRepo(orgSid, teamName, scmUrl, scmType = 'git', name, scmAuthType, scmAccountId, scmSshId, scmOauthId, scmPrivateTokenId, createdFrom, symbol) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/orgs/${orgSid}/teams/${teamName}/repos/`;
+    const data = {
+        scm_url: scmUrl,
+        scm_type: scmType,
+    };
+    if (name)
+        data.name = name;
+    if (scmAuthType)
+        data.scm_auth_type = scmAuthType;
+    if (scmAccountId)
+        data.scm_account = scmAccountId;
+    if (scmSshId)
+        data.scm_ssh = scmSshId;
+    if (scmOauthId)
+        data.scm_oauth = scmOauthId;
+    if (scmPrivateTokenId)
+        data.scm_private_token = scmPrivateTokenId;
+    if (createdFrom)
+        data.created_from = createdFrom;
+    if (symbol)
+        data.symbol = symbol;
+    return clientInst.request(path, 'POST', data);
+}
+/**
+ * 获取用户在 TCA 上已配置的凭证列表
+ */
+export async function listScmAuths(orgSid) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/v3/authen/scmauthinfos/`;
+    return clientInst.request(path, 'GET');
+}
+/**
+ * 创建用户名密码类型的凭证
+ */
+export async function createScmAccount(scmUsername, scmPassword) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/v3/authen/scmaccounts/`;
+    const data = {
+        scm_username: scmUsername,
+        scm_password: scmPassword,
+    };
+    return clientInst.request(path, 'POST', data);
+}
+/**
+ * 创建 SSH 类型的凭证
+ */
+export async function createScmSsh(name, sshPrivateKey, password) {
+    const clientInst = TcaClient.getInstance();
+    const path = `/server/main/api/v3/authen/scmsshinfos/`;
+    const data = {
+        name: name,
+        ssh_private_key: sshPrivateKey,
+    };
+    if (password)
+        data.password = password;
+    return clientInst.request(path, 'POST', data);
+}
+/**
+ * 生成 tca-mcp.ini 配置文件
+ */
+export async function setupConfig(configPath, orgSid, teamName, repoId, projectId) {
+    const config = {
+        config: {
+            org_sid: orgSid,
+            team_name: teamName,
+            repo_id: repoId,
+            project_id: projectId,
+        },
+    };
+    const content = ini.stringify(config);
+    await fs.promises.writeFile(configPath, content, 'utf-8');
+    return {
+        message: '配置文件已成功生成',
+        path: configPath,
+        config: config.config,
+    };
+}

package/dist/http.js

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { registerTools } from './tools/index.js';
+// 从命令行获取参数，判断运行环境
+function getEnv() {
+    if (process.argv.includes('--tai'))
+        return 'tai';
+    if (process.argv.includes('--oa'))
+        return 'oa';
+    return 'saas';
+}
+// 从命令行获取端口号，默认 3000
+function getPort() {
+    const portIndex = process.argv.indexOf('--port');
+    if (portIndex !== -1 && process.argv[portIndex + 1]) {
+        const port = parseInt(process.argv[portIndex + 1], 10);
+        if (!isNaN(port))
+            return port;
+    }
+    return parseInt(process.env.PORT || '3000', 10);
+}
+const env = getEnv();
+process.env.TCA_ENV = env;
+const port = getPort();
+// 存储活跃的 transport 实例（按 sessionId 索引）
+const transports = new Map();
+/**
+ * 创建新的 MCP Server + Transport 对
+ */
+function createMcpSession() {
+    const server = new McpServer({
+        name: '腾讯云代码分析(TCA)',
+        version: '1.3.2',
+    });
+    registerTools(server);
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: () => randomUUID(),
+        onsessioninitialized: (sessionId) => {
+            transports.set(sessionId, transport);
+            console.log(`[会话创建] sessionId=${sessionId}`);
+        },
+    });
+    transport.onclose = () => {
+        if (transport.sessionId) {
+            transports.delete(transport.sessionId);
+            console.log(`[会话关闭] sessionId=${transport.sessionId}`);
+        }
+    };
+    // 连接 server 和 transport
+    server.connect(transport);
+    return transport;
+}
+/**
+ * 从请求头中获取 sessionId
+ */
+function getSessionId(req) {
+    const header = req.headers['mcp-session-id'];
+    return Array.isArray(header) ? header[0] : header;
+}
+/**
+ * 处理 HTTP 请求
+ */
+async function handleRequest(req, res) {
+    const url = req.url || '/';
+    // 健康检查端点
+    if (url === '/health' && req.method === 'GET') {
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ status: 'ok', env, sessions: transports.size }));
+        return;
+    }
+    // MCP 端点 —— 只处理根路径 /mcp 或 /
+    if (url !== '/mcp' && url !== '/') {
+        res.writeHead(404);
+        res.end('Not Found');
+        return;
+    }
+    // 如果是太湖环境，将 x-tai-identity 写入环境变量，供 TcaClient 使用
+    if (env === 'tai') {
+        const taiIdentity = req.headers['x-tai-identity'];
+        if (taiIdentity) {
+            // 将太湖身份信息存入环境变量，TcaClient 初始化时会读取
+            process.env.TAI_IDENTITY = Array.isArray(taiIdentity) ? taiIdentity[0] : taiIdentity;
+        }
+    }
+    const sessionId = getSessionId(req);
+    if (req.method === 'POST') {
+        // 读取请求体
+        const body = await new Promise((resolve, reject) => {
+            let data = '';
+            req.on('data', (chunk) => { data += chunk.toString(); });
+            req.on('end', () => resolve(data));
+            req.on('error', reject);
+        });
+        let parsedBody;
+        try {
+            parsedBody = JSON.parse(body);
+        }
+        catch {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Invalid JSON' }));
+            return;
+        }
+        // 如果有 sessionId，使用已有的 transport
+        if (sessionId && transports.has(sessionId)) {
+            const transport = transports.get(sessionId);
+            await transport.handleRequest(req, res, parsedBody);
+            return;
+        }
+        // 没有 sessionId 或 sessionId 无效 —— 可能是初始化请求，创建新会话
+        if (!sessionId) {
+            const transport = createMcpSession();
+            await transport.handleRequest(req, res, parsedBody);
+            return;
+        }
+        // sessionId 无效（会话已过期或不存在）
+        res.writeHead(404, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Session not found', code: -32000 }));
+        return;
+    }
+    if (req.method === 'GET') {
+        // SSE 连接
+        if (sessionId && transports.has(sessionId)) {
+            const transport = transports.get(sessionId);
+            await transport.handleRequest(req, res);
+            return;
+        }
+        res.writeHead(400, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Missing or invalid session ID for GET request' }));
+        return;
+    }
+    if (req.method === 'DELETE') {
+        // 关闭会话
+        if (sessionId && transports.has(sessionId)) {
+            const transport = transports.get(sessionId);
+            await transport.handleRequest(req, res);
+            return;
+        }
+        res.writeHead(404, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Session not found' }));
+        return;
+    }
+    // 不支持的方法
+    res.writeHead(405);
+    res.end('Method Not Allowed');
+}
+// 创建 HTTP 服务器
+const httpServer = createServer(handleRequest);
+httpServer.listen(port, () => {
+    console.log(`TCA MCP HTTP Server 已启动`);
+    console.log(`  环境: ${env}`);
+    console.log(`  端口: ${port}`);
+    console.log(`  MCP 端点: http://localhost:${port}/mcp`);
+    console.log(`  健康检查: http://localhost:${port}/health`);
+});

package/dist/stdio.js

@@ -13,4 +13,5 @@ process.env.TCA_ENV = env;
 registerTools(server);
 const transport = new StdioServerTransport();
 await server.connect(transport);
-console.log('Server started');
+// 注意：stdio 模式下必须使用 stderr 输出日志，stdout 专用于 MCP 协议通信
+console.error('TCA MCP Server started');

package/dist/tools/index.js

@@ -1,15 +1,17 @@
-import TcaClient from "../api/client.js";
-import registerStartScan from "./scan.js";
-import registerJob from "./job.js";
-import registerIssueReport from "./issue.js";
+import TcaClient from '../api/client.js';
+import registerStartScan from './scan.js';
+import registerJob from './job.js';
+import registerIssueReport from './issue.js';
+import registerSetup from './setup.js';
 export function registerTools(server) {
     TcaClient.initTcaClient({
-        "token": process.env.TCA_TOKEN || "",
-        "userName": process.env.TCA_USER_NAME || "",
-        "baseUrl": process.env.TCA_BASE_URL || "https://tca.tencent.com/",
-        "env": process.env.TCA_ENV || "saas"
+        token: process.env.TCA_TOKEN || '',
+        userName: process.env.TCA_USER_NAME || '',
+        baseUrl: process.env.TCA_BASE_URL || 'https://tca.tencent.com/',
+        env: process.env.TCA_ENV || 'saas',
     });
     registerStartScan(server);
     registerJob(server);
     registerIssueReport(server);
+    registerSetup(server);
 }