github-agent 2.4.14__tar.gz → 2.5.0__tar.gz

{github_agent-2.4.14 → github_agent-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 2.4.14
+Version: 2.5.0
 Summary: GitHub Agent for MCP
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -13,7 +13,7 @@ Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: requests>=2.34.2
-Requires-Dist: scion-sdk[graphql,mcp]<0.7.0,>=0.6.4
+Requires-Dist: scion-sdk[graphql,mcp]<0.11,>=0.10.2
 Provides-Extra: mcp
 Provides-Extra: all
 Provides-Extra: test
@@ -84,29 +84,9 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 <!-- MCP-TOOLS-TABLE:START -->
 
-#### Condensed action-routed tools (`MCP_TOOL_MODE=condensed`)
+Every operation is one typed tool; there are no action-routed tools.
 
-| MCP Tool | Toggle Env Var | Description |
-|----------|----------------|-------------|
-| `github_actions` | `ACTIONTOOL` | Manage GitHub actions workflows and runs. |
-| `github_branches` | `BRANCHTOOL` | Manage GitHub branches. |
-| `github_collaborators` | `COLLABORATORTOOL` | Manage repository collaborators. |
-| `github_comments` | `COMMENTTOOL` | Manage GitHub issue and pull-request comments. |
-| `github_commits` | `COMMITTOOL` | Manage GitHub commits. |
-| `github_contents` | `CONTENTTOOL` | Manage GitHub contents. |
-| `github_dependabot` | `DEPENDABOTTOOL` | Review and manage GitHub Dependabot vulnerability alerts. |
-| `github_discover_graphql_schema` | `GRAPHQLTOOL` | Discover the live GitHub GraphQL schema (types, fields, and attributes) in real-time. |
-| `github_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitHub. |
-| `github_ingest_pipelines` | `INGESTTOOL` | Natively ingest GitHub Actions workflow runs into epistemic-graph. |
-| `github_ingest_repos` | `INGESTTOOL` | Natively ingest GitHub repositories into epistemic-graph as typed :Repository nodes. |
-| `github_issues` | `ISSUETOOL` | Manage GitHub issues. |
-| `github_orgs` | `ORGTOOL` | Manage GitHub organizations. |
-| `github_pulls` | `PULLTOOL` | Manage GitHub pull requests and their review/merge lifecycle. |
-| `github_releases` | `RELEASETOOL` | Manage repository releases. |
-| `github_repos` | `REPOTOOL` | Manage GitHub repositories and their GitHub Pages sites. |
-| `github_search` | `SEARCHTOOL` | Search GitHub repositories, issues, or code. |
-
-#### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
+#### Typed per-operation tools
 
 <details>
 <summary>95 per-operation tools — one per public API method (click to expand)</summary>
@@ -267,7 +247,6 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -318,7 +297,6 @@ own runtime secret boundary.
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -368,7 +346,6 @@ docker run -i --rm \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
   -e DEPENDABOTTOOL=True \
-  -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
   -e GITHUB_TOKEN=your_github_token_here \
@@ -432,7 +409,6 @@ the detailed transport contract.
 | `TLS_PROFILE` | `private-ca` | AgentConfig named transport profile |
 | `TLS_PROFILE_REF` | `secret://transport/provider` | Direct runtime profile reference |
 | `TLS_PROFILES_REF` | `secret://transport/catalog` | Named runtime profile catalog |
-| `GITHUB_ALLOW_DESTRUCTIVE` | `False` | Allow destructive (delete/force) operations |
 | `GITHUB_HTTP_CONNECT_TIMEOUT` | `10` | HTTP client timeouts (seconds) |
 | `GITHUB_HTTP_READ_TIMEOUT` | `30` |  |
 | `DEBUG` | `False` |  |
@@ -498,24 +474,8 @@ Every variable the server reads.
 | `DEBUG` | Verbose logging | `False` |
 | `PYTHONUNBUFFERED` | Unbuffered stdout (recommended in containers) | `1` |
 
-### Tool toggles
-Each action-routed tool can be disabled individually via its toggle env var (set to `false`).
-The full list is in the [Available MCP Tools](#available-mcp-tools) table above.
-
-| Variable | Tool | Default |
-|----------|------|---------|
-| `ACTIONTOOL` | `github_actions` — Actions workflows and runs | `True` |
-| `BRANCHTOOL` | `github_branches` — branches | `True` |
-| `COLLABORATORTOOL` | `github_collaborators` — repository collaborators | `True` |
-| `COMMITTOOL` | `github_commits` — commits | `True` |
-| `CONTENTTOOL` | `github_contents` — file contents | `True` |
-| `INGESTTOOL` | `github_ingest_repos` — KG repository ingestion | `True` |
-| `ISSUETOOL` | `github_issues` — issues | `True` |
-| `ORGTOOL` | `github_orgs` — organizations | `True` |
-| `PULLTOOL` | `github_pulls` — pull requests | `True` |
-| `RELEASETOOL` | `github_releases` — releases | `True` |
-| `REPOTOOL` | `github_repos` — repositories and Pages sites | `True` |
-| `SEARCHTOOL` | `github_search` — search repositories, issues, code | `True` |
+### Tool surface
+The tool surface is the typed per-operation tools; there are no per-domain toggles.
 
 ### Telemetry & governance
 | Variable | Description | Default |

{github_agent-2.4.14 → github_agent-2.5.0}/README.md

@@ -60,29 +60,9 @@ _Auto-generated from the live MCP server — do not edit by hand._
 
 <!-- MCP-TOOLS-TABLE:START -->
 
-#### Condensed action-routed tools (`MCP_TOOL_MODE=condensed`)
+Every operation is one typed tool; there are no action-routed tools.
 
-| MCP Tool | Toggle Env Var | Description |
-|----------|----------------|-------------|
-| `github_actions` | `ACTIONTOOL` | Manage GitHub actions workflows and runs. |
-| `github_branches` | `BRANCHTOOL` | Manage GitHub branches. |
-| `github_collaborators` | `COLLABORATORTOOL` | Manage repository collaborators. |
-| `github_comments` | `COMMENTTOOL` | Manage GitHub issue and pull-request comments. |
-| `github_commits` | `COMMITTOOL` | Manage GitHub commits. |
-| `github_contents` | `CONTENTTOOL` | Manage GitHub contents. |
-| `github_dependabot` | `DEPENDABOTTOOL` | Review and manage GitHub Dependabot vulnerability alerts. |
-| `github_discover_graphql_schema` | `GRAPHQLTOOL` | Discover the live GitHub GraphQL schema (types, fields, and attributes) in real-time. |
-| `github_graphql` | `GRAPHQLTOOL` | Execute raw GraphQL queries and mutations natively on GitHub. |
-| `github_ingest_pipelines` | `INGESTTOOL` | Natively ingest GitHub Actions workflow runs into epistemic-graph. |
-| `github_ingest_repos` | `INGESTTOOL` | Natively ingest GitHub repositories into epistemic-graph as typed :Repository nodes. |
-| `github_issues` | `ISSUETOOL` | Manage GitHub issues. |
-| `github_orgs` | `ORGTOOL` | Manage GitHub organizations. |
-| `github_pulls` | `PULLTOOL` | Manage GitHub pull requests and their review/merge lifecycle. |
-| `github_releases` | `RELEASETOOL` | Manage repository releases. |
-| `github_repos` | `REPOTOOL` | Manage GitHub repositories and their GitHub Pages sites. |
-| `github_search` | `SEARCHTOOL` | Search GitHub repositories, issues, or code. |
-
-#### Verbose 1:1 API-mapped tools (`MCP_TOOL_MODE=verbose` or `both`)
+#### Typed per-operation tools
 
 <details>
 <summary>95 per-operation tools — one per public API method (click to expand)</summary>
@@ -243,7 +223,6 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -294,7 +273,6 @@ own runtime secret boundary.
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -344,7 +322,6 @@ docker run -i --rm \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
   -e DEPENDABOTTOOL=True \
-  -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
   -e GITHUB_TOKEN=your_github_token_here \
@@ -408,7 +385,6 @@ the detailed transport contract.
 | `TLS_PROFILE` | `private-ca` | AgentConfig named transport profile |
 | `TLS_PROFILE_REF` | `secret://transport/provider` | Direct runtime profile reference |
 | `TLS_PROFILES_REF` | `secret://transport/catalog` | Named runtime profile catalog |
-| `GITHUB_ALLOW_DESTRUCTIVE` | `False` | Allow destructive (delete/force) operations |
 | `GITHUB_HTTP_CONNECT_TIMEOUT` | `10` | HTTP client timeouts (seconds) |
 | `GITHUB_HTTP_READ_TIMEOUT` | `30` |  |
 | `DEBUG` | `False` |  |
@@ -474,24 +450,8 @@ Every variable the server reads.
 | `DEBUG` | Verbose logging | `False` |
 | `PYTHONUNBUFFERED` | Unbuffered stdout (recommended in containers) | `1` |
 
-### Tool toggles
-Each action-routed tool can be disabled individually via its toggle env var (set to `false`).
-The full list is in the [Available MCP Tools](#available-mcp-tools) table above.
-
-| Variable | Tool | Default |
-|----------|------|---------|
-| `ACTIONTOOL` | `github_actions` — Actions workflows and runs | `True` |
-| `BRANCHTOOL` | `github_branches` — branches | `True` |
-| `COLLABORATORTOOL` | `github_collaborators` — repository collaborators | `True` |
-| `COMMITTOOL` | `github_commits` — commits | `True` |
-| `CONTENTTOOL` | `github_contents` — file contents | `True` |
-| `INGESTTOOL` | `github_ingest_repos` — KG repository ingestion | `True` |
-| `ISSUETOOL` | `github_issues` — issues | `True` |
-| `ORGTOOL` | `github_orgs` — organizations | `True` |
-| `PULLTOOL` | `github_pulls` — pull requests | `True` |
-| `RELEASETOOL` | `github_releases` — releases | `True` |
-| `REPOTOOL` | `github_repos` — repositories and Pages sites | `True` |
-| `SEARCHTOOL` | `github_search` — search repositories, issues, code | `True` |
+### Tool surface
+The tool surface is the typed per-operation tools; there are no per-domain toggles.
 
 ### Telemetry & governance
 | Variable | Description | Default |

{github_agent-2.4.14 → github_agent-2.5.0}/github_agent/api/api_client_dependabot.py

@@ -2,6 +2,7 @@
 from typing import Any
 
 from scion_sdk.exceptions import require_auth
+from scion_sdk.mcp.destructive import destructive_operation
 
 from github_agent.api.api_client_base import BaseApiClient
 from github_agent.github_response_models import Response
@@ -59,6 +60,7 @@ class Api(BaseApiClient):
         response.raise_for_status()
         return Response(response=response, data=response.json())
 
+    @destructive_operation
     @require_auth
     def update_dependabot_alert(
         self,

{github_agent-2.4.14 → github_agent-2.5.0}/github_agent/api/api_client_orgs.py

@@ -111,8 +111,8 @@ class Api(BaseApiClient):
         """Schedule an organization for deletion. IRREVERSIBLE.
 
         GitHub responds 202 Accepted and deletes the organization, all of its
-        repositories, and all of its data asynchronously. The MCP layer gates
-        this action behind allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+        repositories, and all of its data asynchronously. The SDK asks
+        the caller to confirm this action.
 
         DELETE /orgs/{org}
         https://docs.github.com/en/rest/orgs/orgs#delete-an-organization
@@ -240,8 +240,8 @@ class Api(BaseApiClient):
     def remove_organization_member(self, org: str, username: str) -> Response:
         """Remove a user from an organization (repositories access included).
 
-        Destructive: the MCP layer gates this action behind
-        allow_destructive / GITHUB_ALLOW_DESTRUCTIVE. GitHub responds 204.
+        Destructive: the SDK asks the caller to confirm this
+        action. GitHub responds 204.
 
         DELETE /orgs/{org}/members/{username}
         https://docs.github.com/en/rest/orgs/members#remove-an-organization-member

{github_agent-2.4.14 → github_agent-2.5.0}/github_agent/api/api_client_pages.py

@@ -150,8 +150,8 @@ class Api(BaseApiClient):
     def delete_pages(self, owner: str, repo: str) -> Response:
         """Disable GitHub Pages for a repository and delete the site.
 
-        Destructive: the MCP layer gates this action behind
-        allow_destructive / GITHUB_ALLOW_DESTRUCTIVE. GitHub responds 204.
+        Destructive: the SDK asks the caller to confirm this
+        action. GitHub responds 204.
 
         DELETE /repos/{owner}/{repo}/pages
         https://docs.github.com/en/rest/pages/pages#delete-a-apiname-pages-site

{github_agent-2.4.14 → github_agent-2.5.0}/github_agent/api/api_client_pulls.py

@@ -5,6 +5,7 @@ from scion_sdk.exceptions import (
     ParameterError,
     require_auth,
 )
+from scion_sdk.mcp.destructive import destructive_operation
 
 from github_agent.api.api_client_base import BaseApiClient
 from github_agent.github_input_models import (
@@ -107,6 +108,7 @@ class Api(BaseApiClient):
         response.raise_for_status()
         return Response(response=response, data=response.json())
 
+    @destructive_operation
     @require_auth
     def merge_pull_request(
         self,

{github_agent-2.4.14 → github_agent-2.5.0}/github_agent/auth.py

@@ -21,16 +21,6 @@ from github_agent.api_client import Api
 logger = get_logger(__name__)
 
 
-def allow_destructive_default() -> bool:
-    """Fleet-wide default for the destructive-action gate.
-
-    Destructive MCP actions (e.g. organization delete, member removal) are
-    blocked unless the caller passes allow_destructive=true or the
-    GITHUB_ALLOW_DESTRUCTIVE environment variable is set truthy.
-    """
-    return setting("GITHUB_ALLOW_DESTRUCTIVE", False)
-
-
 def _exchange_delegated_token(settings: DelegationSettings) -> str:
     """Exchange the caller's verified MCP token for a downstream GitHub token."""
     logger.info(