github-agent 2.4.15__py3-none-any.whl → 2.5.0__py3-none-any.whl

github_agent/api/api_client_dependabot.py

@@ -2,6 +2,7 @@
 from typing import Any
 
 from scion_sdk.exceptions import require_auth
+from scion_sdk.mcp.destructive import destructive_operation
 
 from github_agent.api.api_client_base import BaseApiClient
 from github_agent.github_response_models import Response
@@ -59,6 +60,7 @@ class Api(BaseApiClient):
         response.raise_for_status()
         return Response(response=response, data=response.json())
 
+    @destructive_operation
     @require_auth
     def update_dependabot_alert(
         self,

github_agent/api/api_client_orgs.py

@@ -111,8 +111,8 @@ class Api(BaseApiClient):
         """Schedule an organization for deletion. IRREVERSIBLE.
 
         GitHub responds 202 Accepted and deletes the organization, all of its
-        repositories, and all of its data asynchronously. The MCP layer gates
-        this action behind allow_destructive / GITHUB_ALLOW_DESTRUCTIVE.
+        repositories, and all of its data asynchronously. The SDK asks
+        the caller to confirm this action.
 
         DELETE /orgs/{org}
         https://docs.github.com/en/rest/orgs/orgs#delete-an-organization
@@ -240,8 +240,8 @@ class Api(BaseApiClient):
     def remove_organization_member(self, org: str, username: str) -> Response:
         """Remove a user from an organization (repositories access included).
 
-        Destructive: the MCP layer gates this action behind
-        allow_destructive / GITHUB_ALLOW_DESTRUCTIVE. GitHub responds 204.
+        Destructive: the SDK asks the caller to confirm this
+        action. GitHub responds 204.
 
         DELETE /orgs/{org}/members/{username}
         https://docs.github.com/en/rest/orgs/members#remove-an-organization-member

github_agent/api/api_client_pages.py

@@ -150,8 +150,8 @@ class Api(BaseApiClient):
     def delete_pages(self, owner: str, repo: str) -> Response:
         """Disable GitHub Pages for a repository and delete the site.
 
-        Destructive: the MCP layer gates this action behind
-        allow_destructive / GITHUB_ALLOW_DESTRUCTIVE. GitHub responds 204.
+        Destructive: the SDK asks the caller to confirm this
+        action. GitHub responds 204.
 
         DELETE /repos/{owner}/{repo}/pages
         https://docs.github.com/en/rest/pages/pages#delete-a-apiname-pages-site

github_agent/api/api_client_pulls.py

@@ -5,6 +5,7 @@ from scion_sdk.exceptions import (
     ParameterError,
     require_auth,
 )
+from scion_sdk.mcp.destructive import destructive_operation
 
 from github_agent.api.api_client_base import BaseApiClient
 from github_agent.github_input_models import (
@@ -107,6 +108,7 @@ class Api(BaseApiClient):
         response.raise_for_status()
         return Response(response=response, data=response.json())
 
+    @destructive_operation
     @require_auth
     def merge_pull_request(
         self,

github_agent/auth.py

@@ -21,16 +21,6 @@ from github_agent.api_client import Api
 logger = get_logger(__name__)
 
 
-def allow_destructive_default() -> bool:
-    """Fleet-wide default for the destructive-action gate.
-
-    Destructive MCP actions (e.g. organization delete, member removal) are
-    blocked unless the caller passes allow_destructive=true or the
-    GITHUB_ALLOW_DESTRUCTIVE environment variable is set truthy.
-    """
-    return setting("GITHUB_ALLOW_DESTRUCTIVE", False)
-
-
 def _exchange_delegated_token(settings: DelegationSettings) -> str:
     """Exchange the caller's verified MCP token for a downstream GitHub token."""
     logger.info(

github_agent/mcp_server.py

@@ -29,6 +29,7 @@ from scion_sdk.config import load_config
 from scion_sdk.connector_identity import connector_version
 from scion_sdk.mcp.concurrency import run_blocking
 from scion_sdk.mcp.content import ConnectorContent
+from scion_sdk.mcp.destructive import guard_destructive
 from scion_sdk.mcp.server import create_mcp_server
 from scion_sdk.mcp.tool_surface import register_tool_surface
 
@@ -218,7 +219,7 @@ def register_auto_merge_tools(mcp: FastMCP):
     """Register the GraphQL-only pull request auto-merge tools."""
 
     @mcp.tool(
-        tags={"pulls"}, annotations={"readOnlyHint": False, "destructiveHint": False}
+        tags={"pulls"}, annotations={"readOnlyHint": False, "destructiveHint": True}
     )
     async def github_pulls_enable_auto_merge(
         owner: str = Field(description="Repository owner."),
@@ -228,9 +229,21 @@ def register_auto_merge_tools(mcp: FastMCP):
             default="MERGE", description="MERGE, SQUASH or REBASE."
         ),
         client=Depends(get_client),
+        confirm: bool = Field(
+            default=False,
+            description="Confirm this destructive call when the client cannot be asked.",
+        ),
         ctx: Context | None = Field(default=None, description="MCP context"),
     ) -> Any:
         """Turn on auto-merge for a pull request: it merges once required checks pass."""
+        refused = await guard_destructive(
+            ctx,
+            "enable_auto_merge",
+            {"owner": owner, "repo": repo, "number": number},
+            confirm=confirm,
+        )
+        if refused is not None:
+            return refused
         try:
             gql_client = await run_blocking(get_graphql_client)
         except Exception as e:

github_agent/ontology/certification.json

@@ -2,10 +2,10 @@
   "api_version": "graphos.io/v1",
   "artifacts": {
     "github_agent/ontology/fixtures/records.json": "12f5b54b0ae98770f279f99e136788d063340042a9d6ff4bac0c22a886d2dc7b",
-    "github_agent/ontology/github.ttl": "3558c43835211ddcf7d2af622a37c0c370a7e8fe6b40a111b9bc98dd7e91f2ac",
+    "github_agent/ontology/github.ttl": "70c68c0ae5cc8b056bd6f21af44eb3cbdf6d3bf213e0764e5c3341ea536fbd20",
     "github_agent/ontology/mappings/source.yaml": "5142f75b88634aeac6850fe6de5b176958d63073daab2c573cf9c03daa46021c",
     "github_agent/ontology/migrations/manifest.json": "adf16022502dd031dd303a52abae7a0677ece1135e1e05c21dba24c9ae51935c",
-    "github_agent/ontology/shapes/connector.shacl.ttl": "709f555b7b8cc6b1e0adddfeb8e077834f5db548bed4a904afd2a195e49aab1c"
+    "github_agent/ontology/shapes/connector.shacl.ttl": "0972b7e3b5f56fb0452f070800cd1f7ee790f6cf183f308f1cf69e5a0db716e0"
   },
   "checks": {
     "declared_tool_schema": "passed",
@@ -29,5 +29,5 @@
   "signer": "UNSIGNED-PREVIEW",
   "signing_public_key": "",
   "status": "source-validated",
-  "validated_at": "2026-11-06T18:41:25Z"
+  "validated_at": "2026-11-12T19:19:41Z"
 }

github_agent/ontology/github.ttl

@@ -2,6 +2,7 @@
 @prefix foaf: <http://xmlns.com/foaf/0.1/> .
 @prefix dc: <http://purl.org/dc/terms/> .
 @prefix : <http://knuckles.team/kg#> .
+@prefix core: <https://knuckles-team.github.io/ontology/core#> .
 @prefix owl: <http://www.w3.org/2002/07/owl#> .
 @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
 @prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@@ -15,24 +16,26 @@
 # Shared concepts owned by the epistemic-graph ontology and referenced here, never redeclared:
 # Repository, PullRequest, Release, Branch, Commit, PipelineRun. Only the GitHub-specific subclasses and properties are declared in this pack.
 
-:Organization a owl:Class .
+:Organization a owl:Class ;
+    rdfs:subClassOf core:Organization .
 
 
 :Issue a owl:Class ;
-    rdfs:subClassOf :WorkItem ;
+    rdfs:subClassOf core:WorkItem ;
     rdfs:label "Issue" ;
     rdfs:comment "A tracked work item, bug, or discussion in a repository (github_get_issues)." .
 
-:Workflow a owl:Class .
+:Workflow a owl:Class ;
+    rdfs:subClassOf core:Workflow .
 
 
 :WorkflowRun a owl:Class ;
-    rdfs:subClassOf :PipelineRun ;
+    rdfs:subClassOf core:PipelineRun ;
     rdfs:label "Workflow Run" ;
     rdfs:comment "A single execution of a GitHub Actions workflow for a ref/commit (github_get_workflow_runs)." .
 
 :CheckRun a owl:Class ;
-    rdfs:subClassOf :PipelineRun ;
+    rdfs:subClassOf core:PipelineRun ;
     rdfs:label "Check Run" ;
     rdfs:comment """A single job/check within a PipelineRun (github_get_workflow_run_jobs workflow-run job or
     GitHub Checks-API check run). Shares its class name with the twin gitlab-api producer.""" .

github_agent/ontology/shapes/connector.shacl.ttl

@@ -1,5 +1,5 @@
-@prefix : <http://knuckles.team/kg#> .
-@prefix shape: <http://knuckles.team/kg/github/shape#> .
+@prefix : <https://knuckles-team.github.io/ontology/core#> .
+@prefix shape: <https://knuckles-team.github.io/ontology/connector/github-shapes#> .
 @prefix sh: <http://www.w3.org/ns/shacl#> .
 @prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
 

github_agent/skills/github-agent-development/SKILL.md

@@ -65,8 +65,7 @@ with local copies or bypass a failing check.
 - Credentials come from `GITHUB_TOKEN`; the endpoint is derived from `GITHUB_URL`
   (`api.github.com`, or a GitHub Enterprise `/api/v3` host whose GraphQL endpoint
   is `/api/graphql`). Mock all GitHub calls; never use a real token in a gate.
-- Destructive operations stay behind `GITHUB_ALLOW_DESTRUCTIVE`; keep it false
-  by default and test both states.
+- Destructive operations are declared once with the SDK `destructive_operation` decorator; the SDK asks the caller to confirm (`confirm=true`), and `SCION_ALLOW_DESTRUCTIVE` is the one operator setting. Never add a connector-local knob.
 - Prefer one aliased `github_graphql` query over many REST calls for cross-repo
   reads; keep REST and GraphQL parity when adding a tool domain.
 - Packaged skills under `github_agent/skills/` have their own helper tests

{github_agent-2.4.15.dist-info → github_agent-2.5.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 2.4.15
+Version: 2.5.0
 Summary: GitHub Agent for MCP
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -13,7 +13,7 @@ Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: requests>=2.34.2
-Requires-Dist: scion-sdk[graphql,mcp]>=0.9.0
+Requires-Dist: scion-sdk[graphql,mcp]<0.11,>=0.10.2
 Provides-Extra: mcp
 Provides-Extra: all
 Provides-Extra: test
@@ -247,7 +247,6 @@ When query strings or parameters are supplied, an LLM-free **Knowledge Graph res
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -298,7 +297,6 @@ own runtime secret boundary.
         "COMMITTOOL": "True",
         "CONTENTTOOL": "True",
         "DEPENDABOTTOOL": "True",
-        "GITHUB_ALLOW_DESTRUCTIVE": "False",
         "GITHUB_HTTP_CONNECT_TIMEOUT": "10",
         "GITHUB_HTTP_READ_TIMEOUT": "30",
         "GITHUB_TOKEN": "your_github_token_here",
@@ -348,7 +346,6 @@ docker run -i --rm \
   -e COMMITTOOL=True \
   -e CONTENTTOOL=True \
   -e DEPENDABOTTOOL=True \
-  -e GITHUB_ALLOW_DESTRUCTIVE=False \
   -e GITHUB_HTTP_CONNECT_TIMEOUT=10 \
   -e GITHUB_HTTP_READ_TIMEOUT=30 \
   -e GITHUB_TOKEN=your_github_token_here \
@@ -412,7 +409,6 @@ the detailed transport contract.
 | `TLS_PROFILE` | `private-ca` | AgentConfig named transport profile |
 | `TLS_PROFILE_REF` | `secret://transport/provider` | Direct runtime profile reference |
 | `TLS_PROFILES_REF` | `secret://transport/catalog` | Named runtime profile catalog |
-| `GITHUB_ALLOW_DESTRUCTIVE` | `False` | Allow destructive (delete/force) operations |
 | `GITHUB_HTTP_CONNECT_TIMEOUT` | `10` | HTTP client timeouts (seconds) |
 | `GITHUB_HTTP_READ_TIMEOUT` | `30` |  |
 | `DEBUG` | `False` |  |

{github_agent-2.4.15.dist-info → github_agent-2.5.0.dist-info}/RECORD

@@ -1,7 +1,7 @@
 github_agent/__init__.py,sha256=C7pWvMKXqVTxI5_jZAr1KWEYADZurn5is0VOx5l5CbM,474
 github_agent/__main__.py,sha256=O4Xg__fMvKfUsA6m61pLV56jlYY6EORiLhgDLlp0vJ8,92
 github_agent/api_client.py,sha256=O69YfkXBKyVd59EC8szaMlw3_ZxwEEvsLSvhWlfYnvk,1581
-github_agent/auth.py,sha256=W26J0N34mXIvq5ipYokJ7eJcInfnvxaGvqOiGWyWUp0,4611
+github_agent/auth.py,sha256=pB3jUeP7qvLdzzpYeZZ8o7FTS3GMsBpuaIIzWx1daLs,4239
 github_agent/connector_contracts.py,sha256=2plbwsw6d4mMuxRx-kksD4EamYDgf03HOqBFd8ixCAQ,41936
 github_agent/connector_sources.py,sha256=00mzXqC9KPSi15QIIE20UkmgS0QLd7wnYAatdWAjRoQ,6329
 github_agent/github_gql.py,sha256=23_sJnv037WE2CvG93bXFHob8oiw1VShnevLi78BiTU,4282
@@ -10,18 +10,18 @@ github_agent/github_input_models.py,sha256=yqqPGHb206th736MZvbnxq9F1JRsBUBODNeNV
 github_agent/github_response_models.py,sha256=mllSt0frBgzklUtfuHywJ2Ald3m99So948Xikt3H2Tc,8859
 github_agent/kg_ingest.py,sha256=aXVYbK8RDlE39wBJxgxc73OoqEdgNJLGUCFCl5hbNd8,17958
 github_agent/mcp_config.json,sha256=2OOXrwO1sDLyHQqpZwhvDHizPIe3by6YmK4KFE333gI,23
-github_agent/mcp_server.py,sha256=wgI99lAUtzsIaazgSDH7g5HnXKgg8bSHj3bS5jDvxp8,15317
+github_agent/mcp_server.py,sha256=LmtrpwEWZJGILrgmkeQs0_-Y8RtrDPplhc4MWtqNGN8,15784
 github_agent/api/__init__.py,sha256=ntaEPqk-dsAV3HyyDLc2hYpc9nTTyG5CKI-SVDDjc24,27
 github_agent/api/api_client_base.py,sha256=UdVOUPPRnfVo8IeZxpHXn7VbrHm-4vsXTKk3ZAv8wgQ,7445
 github_agent/api/api_client_branches.py,sha256=Lj3eCwNxuyR564YV4Lh00Zm4xjsJDfN20q463ON5qDg,3930
 github_agent/api/api_client_comments.py,sha256=lfUveMt5m3-ZPrIY2UV-j3huEm1nThllz1uPp2QxVnw,13192
 github_agent/api/api_client_commits.py,sha256=1p8XOPnlGAtNvhG3JqoediHnCANK-z0B066AY0NiahY,1471
 github_agent/api/api_client_contents.py,sha256=3dwNkGzl_Nk5PlGKsdlmw2lKf9HQUOOxChZfpnRgD-Q,3916
-github_agent/api/api_client_dependabot.py,sha256=IKSwk8Qkb0ME6uqNLwWNB2EnjZEy7cv9VCSw2RSViV4,3521
+github_agent/api/api_client_dependabot.py,sha256=0JE2xe3bJjAx5gJYkGCad1-ak3o6eKP0De86qEFlHu4,3608
 github_agent/api/api_client_issues.py,sha256=yOmzu1bFd2s_FOdQpuq5J4ob6h-a33R4JjtqQ4AWrsk,2952
-github_agent/api/api_client_orgs.py,sha256=rm5fbM0DvGbE-XYFOD8T25tFHHyzAMtXS8TtZ2XTlOI,11114
-github_agent/api/api_client_pages.py,sha256=D7AiKMKAQhBJvMU0v7dBO2aUhmF9gnzW0QBe5DFch-A,8827
-github_agent/api/api_client_pulls.py,sha256=R1DZnx-oQ2FV0-nTe74WPZJJTOms6KsJPzSXjYa3kxQ,5801
+github_agent/api/api_client_orgs.py,sha256=OVJ3qWwgXt6YBbfjAAdSS3xqiWhhvFhsbiVmZcdB8BY,11040
+github_agent/api/api_client_pages.py,sha256=9-4yM4dbsqxn9VUD6k2Jezzn4AfVxhNnUMnAStaL5L0,8790
+github_agent/api/api_client_pulls.py,sha256=8q2s2Ir-Ci_y4PwPSsFonxipH9llpOK-HkFyd42mzrU,5888
 github_agent/api/api_client_releases.py,sha256=q3XrePe9KW3_tyjzpagnGIU4KOJB4wo3Ek-g4yxsGCY,3661
 github_agent/api/api_client_repos.py,sha256=zBpuc4WeslH7Pw0PKeh9XpveE4eGmoSXsUniED8hCHE,8420
 github_agent/api/api_client_search.py,sha256=-lOrVHjSncZ4us2tr4Keo3ygUdOABJxCWikpbsmTwJo,2222
@@ -29,12 +29,12 @@ github_agent/api/api_client_workflows.py,sha256=_ukxS6rnezp33Zk6bmAyNv4RIjwZvkUf
 github_agent/connectors/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 github_agent/mcp/__init__.py,sha256=9aOfl64J5oMSnaUZVwnpo3XO7GykLM2D11_4Kt761go,31
 github_agent/ontology/__init__.py,sha256=dy7lE5jChNOHXMHm7ZfGfT8bH8ZhCZMSuGgu3G-Q3mM,532
-github_agent/ontology/certification.json,sha256=JRRsPwnTiQOAAnWaMWgWNoWo5nxoCpdJ-squxKokY4M,1313
-github_agent/ontology/github.ttl,sha256=NVjEODUhHdz30q9iKjfAw3Cn6P5rQKERubyY3X6R8qw,8209
+github_agent/ontology/certification.json,sha256=JRrxEABdVSLxZW8Kj7hWdwpoUX386qAF0H_4r6dCUss,1313
+github_agent/ontology/github.ttl,sha256=cMaMCuXMiwVr1vIa9E6zy99tO_IT4HZOXDNB6lNvvSA,8362
 github_agent/ontology/fixtures/records.json,sha256=EvW1Swrph3DyefmeE2eI0GM0AEKp1v9LrAwiqIbS3Hs,543
 github_agent/ontology/mappings/source.yaml,sha256=UUL3W4hjSurGhQ_m3lsXaVjWMHPaqyxXPPnAPapGAhw,529
 github_agent/ontology/migrations/manifest.json,sha256=rfFgIlAt0DHdMDpSq656Bnfs4RNeHgXCHbokya5Rk1w,118
-github_agent/ontology/shapes/connector.shacl.ttl,sha256=cJ9VW3uMxrHgrd3-uOB3g09dtUi-1KkEr9KhleSaqxw,3234
+github_agent/ontology/shapes/connector.shacl.ttl,sha256=CXK347X1b7BFLwcIAM0ffueQ9s8YPzCPHPaeWg23FuA,3284
 github_agent/prompts/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 github_agent/prompts/github-mcp-operator.json,sha256=HZVcyK-7TdWT7XKnjmJL2V1XsNhha9PHtJMVj0wT_uo,12687
 github_agent/prompts/github-mcp-release-manager.json,sha256=Vi4NwiDjI4O_VLntSXzSFidcu_eL4fsI0a41pv6QlvA,6990
@@ -42,7 +42,7 @@ github_agent/prompts/github-mcp-repository-administrator.json,sha256=rkPXgrh3UN5
 github_agent/prompts/github-mcp-triage-lead.json,sha256=-PZ_ycFLeQRN5hPEBmkqr6WJQQhPmOECUUrzRKXkGF8,4581
 github_agent/skills/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 github_agent/skills/github-actions-ci-review/SKILL.md,sha256=v_g7ilOldIotyzvizEbgiQqUszNBqcP4BSdtUxxroy4,1998
-github_agent/skills/github-agent-development/SKILL.md,sha256=77dGiA9HNulJ0nWu81ppCac7VCP9cpzRi0P5ZUL32yU,3924
+github_agent/skills/github-agent-development/SKILL.md,sha256=5Rd_v1QmXbMo_DC2nQXB2BGQgOUQoEhogyFWvKROuK0,4047
 github_agent/skills/github-agent-operations/SKILL.md,sha256=sPwGdgGfXZLFsCttOaEaJ7zTzttgNeFItgmB6gcFdPE,2739
 github_agent/skills/github-backlog-planner/SKILL.md,sha256=xzP7Iyvm9huKF4-XR1JjwIuIjYpJoHfi5PNvW5BqzMU,2631
 github_agent/skills/github-backlog-planner/references/addressed-heuristics.md,sha256=GoW7Adzm43p7pKlh6U_g2mHtNHrrgdM60EY917384gQ,3413
@@ -68,13 +68,14 @@ github_agent/skills/github-triage-resolver/SKILL.md,sha256=o8EIk-rrDSmeTBn2gl_Qd
 github_agent/skills/github-triage-resolver/references/resolution-rules.md,sha256=lGPvfLCSHpNIeh2rKWcH2k_2lla3ovgBxzwvtMmyQ-0,4133
 github_agent/skills/github-triage-resolver/scripts/classify_safe.py,sha256=peh1R5oksZfTwlzWEvKuBLmMBdNwHucwAJYWYA9fVDU,9548
 github_agent/skills/github-triage-resolver/scripts/gh_write.py,sha256=ZA9xXbjzM-jq1dSFzcZVd1_fKyGeU4mZSAfmX4LeqxY,4129
-github_agent-2.4.15.dist-info/licenses/LICENSE,sha256=5ALbh4fIALWVsUhO7q1nFT1bQb-CL9sWKf7p3GgLEG8,1070
+github_agent-2.5.0.dist-info/licenses/LICENSE,sha256=5ALbh4fIALWVsUhO7q1nFT1bQb-CL9sWKf7p3GgLEG8,1070
 tests/conftest.py,sha256=wbbxNvJTHj5_Ma2ewxkI0--A_CM9KtlMzI_rWN-F82Q,3533
 tests/test_api_client_endpoints.py,sha256=ykF9UMx3hIbf_dCpecl9uE57FJ-VQH5yw51dUQ1WlVc,6572
 tests/test_api_validation.py,sha256=eXAKGdqzGyoKFoN4-RmZzCwKBtyK43pVEFliwzQDH2Q,3291
 tests/test_auth_client_edge_cases.py,sha256=OZjqgLoOQPxDVwqQZMxPG7VIfS6szKUMgABNpvLgKuQ,6440
-tests/test_cq_paths.py,sha256=ypZSbpB0gQv8-FT1jtw-ZVwJ5JP2pXaSl2ocRhhT1Mw,1485
+tests/test_cq_paths.py,sha256=yMFO2dayYrBGXPdhqdQfvDlxr7DgboTCSqA9vvhNIK0,1489
 tests/test_default_content_surfaces.py,sha256=UmgtO78MWki9qmTzZtnNxy47SNVmsjZjz_8dQKQQe58,2455
+tests/test_destructive_declaration.py,sha256=yBDf2HJ9rvVk9skrBR9hTmWVcJNTfjlSsBeEqauPsI0,2751
 tests/test_fleet_name.py,sha256=L1SuM4w05dbQvyj-eBiw01lKfvI-p2o1oj6dpQxsPIY,1409
 tests/test_github_agent_api_brute_force_coverage.py,sha256=5jWW6oVU7cmXL2sS3OZ-3gbYGhyjlYPIWqH2rsdF2fw,7347
 tests/test_github_agent_brute_force_coverage.py,sha256=n5RJyxWfOeZEMXRRx_c48pF9ntN_ai67qyzUKtzoiKQ,4849
@@ -84,7 +85,7 @@ tests/test_ingest_sources.py,sha256=SQFPhf0qqgX_R5sn2NP_5qVzT3x2rqQIATbvHBM7IFs,
 tests/test_init_dynamics.py,sha256=qX7QPHvM9T7-1fE9clZWHZz2NHG9PddsEu4WmO7dwm8,1840
 tests/test_kg_ingest.py,sha256=98VEL2pog_8xl_lQa8qGwcPmeszt0BAxJp5AjlcvVUk,9466
 tests/test_model_fields.py,sha256=NboFxPOtLN-uevE9TLbS4Al-55RbF63PFFTa318gJ40,3374
-tests/test_ontology_parent_link.py,sha256=1VZrOLDQAmpXT9Sv1Bc4Q9EA2uC5q6WW1N3pvujcJZU,4062
+tests/test_ontology_parent_link.py,sha256=jE_arQxO9yG0q9B6Hqiwu6K7hCmIx6FWXhysd6KFFDc,4344
 tests/test_pages.py,sha256=ow_qLRo4IytkSGdQxjxJGoZOnTY0s8MebHFZn_ggElg,10815
 tests/test_skill_backlog_build_plan.py,sha256=DdvwgZKQnQ-d_SxErxKoTpjOROuCijr4q7CVAqB82BI,4569
 tests/test_skill_ci_failure_sweep_summarize_runs.py,sha256=lFHXWuIzGHCzHQpBBqF4VSHIfzO6cKVgstZHdXqE7U0,3933
@@ -94,8 +95,8 @@ tests/test_skill_org_remediation_classify_fix_risk.py,sha256=CK43UuLA9ZomajH7EMO
 tests/test_skill_pr_review_sweep_summarize_prs.py,sha256=NrNaucQvM7K-k1WBcOBKtTGjxJbW16VgTHbC7dSsjm4,3821
 tests/test_skill_triage_resolver_classify_safe.py,sha256=CNXXf98xa6UYk1xoQyDM6ZSbW_G_WLNMb-oNYUFErcI,9535
 tests/test_startup.py,sha256=Ix_g69k0tsZbY0-Vkeh8ADWojUdbYwTwwmnM4_hVuCc,1245
-github_agent-2.4.15.dist-info/METADATA,sha256=KVjNepnTBdyh4lJds2cMeBP70yT_83GD7TlgHuwxVKs,31841
-github_agent-2.4.15.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
-github_agent-2.4.15.dist-info/entry_points.txt,sha256=Xs66xjLEy6t408ysVybR_GA4blcThForMZfxAMw4oAw,125
-github_agent-2.4.15.dist-info/top_level.txt,sha256=rF1I0e3JiEUPistmGCg9UI1zYzTjg-bzVJ61YgbPrjU,42
-github_agent-2.4.15.dist-info/RECORD,,
+github_agent-2.5.0.dist-info/METADATA,sha256=qqjXxLS6Qcmbn4zUWMfAZbl5EXCXyu4HqmU0puBS0gs,31632
+github_agent-2.5.0.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+github_agent-2.5.0.dist-info/entry_points.txt,sha256=Xs66xjLEy6t408ysVybR_GA4blcThForMZfxAMw4oAw,125
+github_agent-2.5.0.dist-info/top_level.txt,sha256=rF1I0e3JiEUPistmGCg9UI1zYzTjg-bzVJ61YgbPrjU,42
+github_agent-2.5.0.dist-info/RECORD,,

tests/test_cq_paths.py

@@ -35,7 +35,7 @@ def test_state_is_declared_on_the_issue_type() -> None:
 
 
 def test_check_run_extends_pipeline_run() -> None:
-    assert "rdfs:subClassOf :PipelineRun" in _block("CheckRun")
+    assert "rdfs:subClassOf core:PipelineRun" in _block("CheckRun")
 
 
 def test_no_mapping_has_a_null_ontology_class() -> None:

tests/test_destructive_declaration.py

@@ -0,0 +1,86 @@
+"""CONN-GITHUB-AGENT-CONNECTOR-CONTENT-R008: destructive operations use the SDK's one declaration and guard."""
+
+from __future__ import annotations
+
+import asyncio
+import importlib
+from unittest.mock import patch
+
+import pytest
+import requests
+from fastmcp import Client, FastMCP
+
+pytestmark = pytest.mark.spec("CONN-GITHUB-AGENT-CONNECTOR-CONTENT-R008")
+
+DECLARED = {
+    "github_merge_pull_request",
+    "github_update_dependabot_alert",
+    "github_pulls_enable_auto_merge",
+}
+CLASSIFIED = {"github_delete_repository", "github_delete_branch"}
+
+
+def _server() -> FastMCP:
+    module = importlib.import_module("github_agent.mcp_server")
+    with patch(
+        "sys.argv", ["github-mcp", "--transport", "stdio", "--auth-type", "none"]
+    ):
+        result = module.get_mcp_instance()
+    if isinstance(result, FastMCP):
+        return result
+    return next(value for value in result if isinstance(value, FastMCP))
+
+
+def test_declared_and_classified_operations_are_destructive_tools_that_ask_first(
+    monkeypatch,
+):
+    monkeypatch.delenv("SCION_ALLOW_DESTRUCTIVE", raising=False)
+
+    async def _run():
+        async with Client(_server()) as client:
+            tools = {t.name: t for t in await client.list_tools()}
+            for name in DECLARED | CLASSIFIED:
+                assert tools[name].annotations.destructive_hint is True, name
+                assert "confirm" in tools[name].input_schema["properties"], name
+            for name, tool in tools.items():
+                assert "allow_destructive" not in tool.input_schema["properties"], name
+
+    asyncio.run(_run())
+
+
+@pytest.mark.parametrize(
+    "name,arguments",
+    [
+        (
+            "github_merge_pull_request",
+            {"owner": "o", "repo": "r", "number": 1},
+        ),
+        (
+            "github_delete_branch",
+            {"owner": "o", "repo": "r", "branch": "b"},
+        ),
+    ],
+)
+def test_unconfirmed_call_sends_no_request(name, arguments, monkeypatch):
+    monkeypatch.delenv("SCION_ALLOW_DESTRUCTIVE", raising=False)
+    monkeypatch.setenv("GITHUB_TOKEN", "test-token")
+    sent: list[str] = []
+
+    def record(self, method, url, **kwargs):
+        sent.append(f"{method} {url}")
+        raise AssertionError("no request may be made without confirmation")
+
+    monkeypatch.setattr(requests.Session, "request", record)
+
+    async def _run():
+        async with Client(_server()) as client:
+            refused = await client.call_tool(name, arguments, raise_on_error=False)
+            assert refused.structured_content["cancelled"] is True
+
+    asyncio.run(_run())
+    assert sent == []
+
+
+def test_no_connector_local_knob_remains():
+    auth = importlib.import_module("github_agent.auth")
+    assert not hasattr(auth, "allow_destructive_default")

tests/test_ontology_parent_link.py

@@ -30,6 +30,11 @@ PARENT_CLASSES = frozenset(
         "http://knuckles.team/kg#Workflow",
     )
 )
+# The core ontology is addressed under its one HTTPS base; a pack class rolls up to a core class by that IRI.
+CORE_BASE = "https://knuckles-team.github.io/ontology/core#"
+PARENT_CLASSES = PARENT_CLASSES | frozenset(
+    CORE_BASE + iri.rsplit("#", 1)[1] for iri in PARENT_CLASSES
+)
 # Classes for which the parent ontology has no fitting class yet. Each is a candidate for a new
 # parent class (see the orphan mapping report); a class leaves this set when it gains a parent.
 PENDING_NEW_PARENT: frozenset[str] = frozenset()