github-agent 2.4.1__py3-none-any.whl → 2.4.3__py3-none-any.whl

github_agent/__init__.py

@@ -1 +1 @@
-__version__ = "2.4.1"
+__version__ = "2.4.3"

github_agent/connectors/tool_schema_fingerprints.json

@@ -1,6 +1,6 @@
 {
   "algorithm": "agent-connector-sdk:mcp-tool-contract-compat:v2",
-  "connector": "github-agent",
+  "connector": "github-mcp",
   "schema_version": "1",
   "tools": {
     "github_get_repositories": "ec6c06fe206534df752bc4035d4cf81c952d448441a7e9271b800175357c3360"

github_agent/github_http.py

@@ -4,21 +4,23 @@ from __future__ import annotations
 
 import http.client
 import json
-import os
 import ssl
 from typing import Any
 
+from agent_connector_sdk.tls.errors import TransportSecurityError
+from agent_connector_sdk.tls.profile import ResolvedTLSProfile
+from agent_connector_sdk.tls.resolve import resolve_tls_profile
+
 GITHUB_API_HOST = "api.github.com"
 MAX_REQUEST_BYTES = 1 * 1024 * 1024
 MAX_RESPONSE_BYTES = 8 * 1024 * 1024
 
 
-def _tls_context() -> ssl.SSLContext:
-    cafile = os.environ.get("SSL_CERT_FILE") or os.environ.get("REQUESTS_CA_BUNDLE")
-    capath = os.environ.get("SSL_CERT_DIR")
+def _tls_profile() -> ResolvedTLSProfile:
+    """Resolve the GitHub TLS profile from the SDK (SDK-CONNECTOR-CONTROL-R017)."""
     try:
-        return ssl.create_default_context(cafile=cafile or None, capath=capath or None)
-    except (OSError, ssl.SSLError):
+        return resolve_tls_profile("github")
+    except TransportSecurityError:
         raise RuntimeError("runtime TLS trust configuration is invalid") from None
 
 
@@ -103,11 +105,12 @@ def github_json_request(
     _validate_token_shape(token)
     body = _encode_request_body(payload)
     headers = _request_headers(token)
+    profile = _tls_profile()
     connection = http.client.HTTPSConnection(
         GITHUB_API_HOST,
         443,
         timeout=30,
-        context=_tls_context(),
+        context=profile.ssl_context,
     )
     try:
         connection.request(method, path, body=body, headers=headers)
@@ -118,3 +121,4 @@ def github_json_request(
         raise RuntimeError("GitHub service is unavailable") from None
     finally:
         connection.close()
+        profile.cleanup()

github_agent/kg_ingest.py

@@ -35,8 +35,8 @@ from agent_connector_sdk.ingest import (
 
 logger = logging.getLogger("github_agent.kg")
 
-_ENTITY_BINDING = IngestBinding(connector="github-agent", stream="github")
-_DOCUMENT_BINDING = IngestBinding(connector="github-agent", stream="github-documents")
+_ENTITY_BINDING = IngestBinding(connector="github-mcp", stream="github")
+_DOCUMENT_BINDING = IngestBinding(connector="github-mcp", stream="github-documents")
 
 
 def _to_entity(record: dict[str, Any]) -> Entity:

github_agent/mcp_server.py

@@ -39,7 +39,7 @@ from github_agent.auth import (
 )
 from github_agent.github_response_models import PagesAlreadyEnabled, PagesNotEnabled
 
-__version__ = "2.4.1"
+__version__ = "2.4.3"
 logger = get_logger("GithubMCPServer")
 logger.setLevel(logging.INFO)
 

github_agent/ontology/certification.json

@@ -1,9 +1,9 @@
 {
   "api_version": "arbora.io/v1",
   "artifacts": {
-    "connector_manifest.yml": "412bbd8242cdac75754d89b9cc1fa81cec7c2f70e2b29f822eca336b1f725f25",
+    "connector_manifest.yml": "8c377374f2ab87e99a765d3340b269b312ae6aa971c91ebe874b3dbf8f76b358",
     "github_agent/connectors/mcp_source_presets.json": "312ec35c48d40253afcd8dba445afee9f41b5ac910e11a435d7c02ee63b5967f",
-    "github_agent/connectors/tool_schema_fingerprints.json": "c80f708a9aac0ec9dd4352be0db40295f203f734b88193ce7f03b6c41f07be6e",
+    "github_agent/connectors/tool_schema_fingerprints.json": "36982e09c3dba96cc187fc6cd99431deb4899b24399e3b8dc206f228cb980ce7",
     "github_agent/ontology/fixtures/records.json": "12f5b54b0ae98770f279f99e136788d063340042a9d6ff4bac0c22a886d2dc7b",
     "github_agent/ontology/github.ttl": "ad0ad6d295143b38725866b5b5c59a824f10bfc4219794ac2d9a2274f11bbdb5",
     "github_agent/ontology/mappings/source.yaml": "7ff7a37550f825a61fe6d0f9529206f4efe2727431e32b8ab95a39a32bdced43",
@@ -22,7 +22,7 @@
     "bundle_schema": "2",
     "epistemic_graph": ">=2.27.0,<3"
   },
-  "connector": "github-agent",
+  "connector": "github-mcp",
   "kind": "ConnectorSourceAttestation",
   "live_certified": false,
   "mode": "offline-source",

{github_agent-2.4.1.dist-info → github_agent-2.4.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 2.4.1
+Version: 2.4.3
 Summary: GitHub Agent for MCP
 Author-email: Project Maintainers <maintainers@users.noreply.github.com>
 License: MIT
@@ -14,7 +14,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: gql[requests]>=4.4.0
 Requires-Dist: requests>=2.34.2
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.5
+Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.11
 Provides-Extra: mcp
 Provides-Extra: all
 Provides-Extra: test
@@ -45,7 +45,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 2.4.1*
+*Version: 2.4.3*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > [official documentation](https://knuckles-team.github.io/github-agent/).

{github_agent-2.4.1.dist-info → github_agent-2.4.3.dist-info}/RECORD

@@ -1,14 +1,14 @@
-github_agent/__init__.py,sha256=LgDSW5laOqA_7i2VW0cZ9QumZREigUxs3ZCBzJ1EG0o,22
+github_agent/__init__.py,sha256=OPBnVa8RJVtYMGheuiuNN0f5i8tn6elz4XCmUBGelSo,22
 github_agent/__main__.py,sha256=O4Xg__fMvKfUsA6m61pLV56jlYY6EORiLhgDLlp0vJ8,92
 github_agent/api_client.py,sha256=O69YfkXBKyVd59EC8szaMlw3_ZxwEEvsLSvhWlfYnvk,1581
 github_agent/auth.py,sha256=isNd6DYbl_syB_wIbC399d_-157jqH1jqJfDmBn8h-0,4671
 github_agent/github_gql.py,sha256=GdkazLUDRwu5AKv2cikT8evpQAGHD1nBZ4f4BtJ2f84,5382
-github_agent/github_http.py,sha256=O6VJMG3f-o-rMdOglvYnSBnfrGdHOSx0XiIOHYBKyso,4203
+github_agent/github_http.py,sha256=v-H9Nny1Q45yQH-1vsDpog4GOvAUSI786XFkctmXdik,4362
 github_agent/github_input_models.py,sha256=yqqPGHb206th736MZvbnxq9F1JRsBUBODNeNVc08F3A,15568
 github_agent/github_response_models.py,sha256=mllSt0frBgzklUtfuHywJ2Ald3m99So948Xikt3H2Tc,8859
-github_agent/kg_ingest.py,sha256=tMCy8jz8bAEEld_AhTSifdgvSsnBTrp_9DKSmworsuQ,17982
+github_agent/kg_ingest.py,sha256=iH_NKpd8a6GtNxfZTp8Oah8VZkcXjI74KDf8P9NbtjA,17978
 github_agent/mcp_config.json,sha256=2OOXrwO1sDLyHQqpZwhvDHizPIe3by6YmK4KFE333gI,23
-github_agent/mcp_server.py,sha256=SxBVM--r18lGsmzamGpesP9YOWWKTXrfztwIgfv_nxA,126620
+github_agent/mcp_server.py,sha256=ChllOlIhkx8PzIJxtDwtDGzH2F6ybRTr0B5YuJmAgbg,126620
 github_agent/api/__init__.py,sha256=ntaEPqk-dsAV3HyyDLc2hYpc9nTTyG5CKI-SVDDjc24,27
 github_agent/api/api_client_base.py,sha256=tMXKrZIXg6aQ6OK4kNKBDcNc8BrM0Vml_66SwA5ZgEw,7485
 github_agent/api/api_client_branches.py,sha256=bCmqGUWQ27GFTGxcFkQ7D-ZEltKp6APVsk_Fw9wzdjY,3940
@@ -26,7 +26,7 @@ github_agent/api/api_client_search.py,sha256=zWFexkXZYFzDvWackxM33uWdEDYsA54lWlO
 github_agent/api/api_client_workflows.py,sha256=Y6iHgLujZksI9jAZb1tkFnEv3f-l4bd-fiUtSu3vVw4,5799
 github_agent/connectors/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 github_agent/connectors/mcp_source_presets.json,sha256=MS7DXEjUAlOvzY26RFr-6fQbWskQ4RpDXXwC7mO1ln8,699
-github_agent/connectors/tool_schema_fingerprints.json,sha256=yA9wipqsDsndQ1K-DbQClfID9zS4gZPOfwO2xB8Hvm4,241
+github_agent/connectors/tool_schema_fingerprints.json,sha256=NpguCcPbqWzBh_xs2ZQx3rSJmyQ5njuNwgbyKMuYDOc,239
 github_agent/mcp/__init__.py,sha256=mO-LvCC1TIs-T9f7oDToOq7LsZUMx04Aa3h0LjIi6eA,1290
 github_agent/mcp/mcp_action.py,sha256=oz3CcAMw8Uc_MC7us_pUn4nbwdNqR_ePIjDzckID5Wo,9583
 github_agent/mcp/mcp_branch.py,sha256=lACUOIPRPiLD9lv4DzKJ2n9IvOsq97mHk8lxTat1zWk,4785
@@ -41,7 +41,7 @@ github_agent/mcp/mcp_release.py,sha256=WnuZ2wjcTBVl8Jzog_4a9HjbxDAh6aXdN-mdzDUZt
 github_agent/mcp/mcp_repo.py,sha256=ny5GdawCFZxlbjpOc3ttnn-NIs9QDQLAxRdAWEWLUdc,18344
 github_agent/mcp/mcp_search.py,sha256=3ZBGNKkVu5oBXgN9MBWd-ve4NDCzcwP9sY22bp4hqKs,2963
 github_agent/ontology/__init__.py,sha256=-qc7ZPSgdaCLrD1AH_7TFXWikEpSH9rVmBciCC9gtCY,552
-github_agent/ontology/certification.json,sha256=Fisfx2auUAisXHeN8AiNxMj9LHZOoGhqve5baWnSc9I,1666
+github_agent/ontology/certification.json,sha256=nUT_C-AtTjtb4bDAs3cDT2vlk7kK_8RPFfbyIWXCMw0,1664
 github_agent/ontology/github.ttl,sha256=socWm6ST7jnTqZFxurxYdNIY1Ivx6JaW7MiJiX3-onk,9154
 github_agent/ontology/fixtures/records.json,sha256=EvW1Swrph3DyefmeE2eI0GM0AEKp1v9LrAwiqIbS3Hs,543
 github_agent/ontology/mappings/source.yaml,sha256=f_ejdVD4JaYf5tD5UpIG9O_icnQx4yuKuVo5oyvc7UM,533
@@ -92,7 +92,7 @@ github_agent/skills/github-triage-resolver/WORKFLOW.md,sha256=orvcRmaV-qb_JKoGSw
 github_agent/skills/github-triage-resolver/references/resolution-rules.md,sha256=lGPvfLCSHpNIeh2rKWcH2k_2lla3ovgBxzwvtMmyQ-0,4133
 github_agent/skills/github-triage-resolver/scripts/classify_safe.py,sha256=8BhcDF9Q8rjJIEVOmdyO-dO-eHBjW7T-bzaYC16uY5I,9556
 github_agent/skills/github-triage-resolver/scripts/gh_write.py,sha256=SL5oA1A3lFRLepNri4CzEcuEsg9D5WKJ1000fCRKBEM,4125
-github_agent-2.4.1.dist-info/licenses/LICENSE,sha256=5ALbh4fIALWVsUhO7q1nFT1bQb-CL9sWKf7p3GgLEG8,1070
+github_agent-2.4.3.dist-info/licenses/LICENSE,sha256=5ALbh4fIALWVsUhO7q1nFT1bQb-CL9sWKf7p3GgLEG8,1070
 scripts/security_sanitizer.py,sha256=gE65xtYMGx43oYUnK0kozBm73Hx97mCdrQUM7GGzIbk,9449
 scripts/verify_api_integration.py,sha256=3AK8HKW52o1yxCDaEUtXngnh7CjYw6NiG9Eb3EIoXNE,10256
 tests/conftest.py,sha256=kgpOLUp_q8IZaI6Xd7F1tbFuio81-_l5Gd4jaGiMrnY,3636
@@ -101,10 +101,11 @@ tests/test_api_client_endpoints.py,sha256=Hbw0vssQU5Up-KvJmUDLDCP4t2u8pU-xPfWAhF
 tests/test_api_validation.py,sha256=CRZq7kfc1U8CLZJRTGusBhTN2Tlfc1FIeDqIm895XoI,3301
 tests/test_auth_client_edge_cases.py,sha256=QjQAtjd7vDDsSSvIZuUXbd9Z58te8Xp9giPFmwJTBsA,6470
 tests/test_comment_crud.py,sha256=mHA0scds_0W0oND-VI0QMvNaYarYkHjiXd4H9-9d5kE,27341
+tests/test_fleet_name.py,sha256=qCLzYTPuiaS3y0I0NLuMRloXlf_o0sue0aVH-Sn-tYQ,1893
 tests/test_github_agent_api_brute_force_coverage.py,sha256=5jWW6oVU7cmXL2sS3OZ-3gbYGhyjlYPIWqH2rsdF2fw,7347
 tests/test_github_agent_brute_force_coverage.py,sha256=Z_voXtChOYRqaNEmNzMfzvwQMj2xFBn1m8mXx5ubUe8,4849
 tests/test_github_gql.py,sha256=mpn814s9UhN4jnlp1TB8XE3OZ04adR9nhfPM9j0Gpyc,1892
-tests/test_github_http.py,sha256=HcWWZsQ7ATdcWpQCTJdNDJkiwiwgujO4JgjNE1Ls64U,6977
+tests/test_github_http.py,sha256=uuSMrot71Kj8WQf-QyazO4rWzpWSucRTQ1tt5wRvC_E,9563
 tests/test_hardening.py,sha256=sdlKmtk7B5yncc-r1LuFgoJfro6wNlCqY0xI73IVC4M,3710
 tests/test_init_dynamics.py,sha256=fPE_4M-bONKiqvtWLn12A0q18CUlzQhdx1UoXYkbbPk,1839
 tests/test_kg_ingest.py,sha256=TeHjWz74LiuSxpI7N6HHrdj0H1mRsJHceQDNYvre4To,9462
@@ -122,8 +123,8 @@ tests/test_skill_org_remediation_classify_fix_risk.py,sha256=0Y8289lhxtJ3pxYUHzO
 tests/test_skill_pr_review_sweep_summarize_prs.py,sha256=NrNaucQvM7K-k1WBcOBKtTGjxJbW16VgTHbC7dSsjm4,3821
 tests/test_skill_triage_resolver_classify_safe.py,sha256=B-aDeVmsKTsxYO8TwMEx-cmpVSmZdlKXw5993Da2ubc,9489
 tests/test_startup.py,sha256=Ix_g69k0tsZbY0-Vkeh8ADWojUdbYwTwwmnM4_hVuCc,1245
-github_agent-2.4.1.dist-info/METADATA,sha256=1muMJ5mRCN3ZLJzPowZSkg7uCSkW89eNccuz7gb4ccQ,34535
-github_agent-2.4.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-github_agent-2.4.1.dist-info/entry_points.txt,sha256=HGhTmPWGQVM2uJ-RfkiYdIYasr4coyzet1qKhR4AcOg,308
-github_agent-2.4.1.dist-info/top_level.txt,sha256=53Ecr8n7o_EMIqZClc11PBU07uQIggYZOk5WnvBbeOQ,50
-github_agent-2.4.1.dist-info/RECORD,,
+github_agent-2.4.3.dist-info/METADATA,sha256=p61ZwVHzoGYvHKxzHWA7ulhSIKJhb9w1ofIF_LneNBU,34536
+github_agent-2.4.3.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+github_agent-2.4.3.dist-info/entry_points.txt,sha256=Wi6GhziOqmJl-22qTYkjfVuIHEHKRrBvyyloc7NqV80,367
+github_agent-2.4.3.dist-info/top_level.txt,sha256=53Ecr8n7o_EMIqZClc11PBU07uQIggYZOk5WnvBbeOQ,50
+github_agent-2.4.3.dist-info/RECORD,,

{github_agent-2.4.1.dist-info → github_agent-2.4.3.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (84.0.0)
+Generator: setuptools (84.2.1)
 Root-Is-Purelib: true
 Tag: py3-none-any
 

{github_agent-2.4.1.dist-info → github_agent-2.4.3.dist-info}/entry_points.txt

@@ -1,3 +1,6 @@
+[agent_connector_sdk.connector]
+github-mcp = github_agent
+
 [agent_connector_sdk.ontology_providers]
 github-agent = github_agent.ontology
 

tests/test_fleet_name.py

@@ -0,0 +1,53 @@
+"""CONN-GITHUB-AGENT-CONNECTOR-IDENTITY-R001: the connector is filed under its fleet name, github-mcp."""
+
+from __future__ import annotations
+
+import ast
+import json
+import re
+import tomllib
+from pathlib import Path
+
+import pytest
+
+ROOT = Path(__file__).resolve().parents[1]
+PACKAGE = ROOT / "github_agent"
+FLEET = "github-mcp"
+
+
+def _call_connectors(path: Path) -> list[str]:
+    names = []
+    for node in ast.walk(ast.parse(path.read_text(encoding="utf-8"))):
+        if isinstance(node, ast.Call) and getattr(
+            node.func, "id", getattr(node.func, "attr", "")
+        ) in {
+            "IngestBinding",
+            "ConnectorContent",
+        }:
+            names += [
+                str(k.value.value)
+                for k in node.keywords
+                if k.arg == "connector" and isinstance(k.value, ast.Constant)
+            ]
+    return names
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-CONNECTOR-IDENTITY-R001")
+def test_connector_name_is_the_fleet_name() -> None:
+    pyproject = tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
+    assert pyproject["project"]["entry-points"]["agent_connector_sdk.connector"] == {
+        FLEET: "github_agent"
+    }
+    manifest_path = PACKAGE / "connector_manifest.yml"
+    if not manifest_path.is_file():
+        manifest_path = ROOT / "connector_manifest.yml"
+    manifest = manifest_path.read_text(encoding="utf-8")
+    match = re.search(r'^\s*"?connector"?\s*:\s*"?([^"\s,]+)', manifest, re.MULTILINE)
+    assert match is not None and match.group(1) == FLEET
+    fingerprints = PACKAGE / "connectors" / "tool_schema_fingerprints.json"
+    if fingerprints.is_file():
+        assert (
+            json.loads(fingerprints.read_text(encoding="utf-8"))["connector"] == FLEET
+        )
+    for module in sorted(PACKAGE.glob("*.py")):
+        assert all(name == FLEET for name in _call_connectors(module)), module.name

tests/test_github_http.py

@@ -163,3 +163,68 @@ def test_github_json_request_encodes_payload_as_compact_json():
     assert value == {"created": True}
     sent_kwargs = connection.request.call_args.kwargs
     assert sent_kwargs["body"] == json.dumps({"title": "hi"}, separators=(",", ":")).encode()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_request_uses_sdk_tls_profile_context():
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: the connection uses the profile's context."""
+    connection, _ = _mock_connection()
+    profile = MagicMock()
+    with (
+        patch("github_agent.github_http.resolve_tls_profile", return_value=profile) as resolve,
+        patch("github_agent.github_http.http.client.HTTPSConnection", return_value=connection) as conn_cls,
+    ):
+        github_json_request("GET", "/repos/x/y", "tok")
+    resolve.assert_called_once_with("github")
+    assert conn_cls.call_args.kwargs["context"] is profile.ssl_context
+    profile.cleanup.assert_called_once()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_private_ca_is_carried_through_the_profile(tmp_path, monkeypatch):
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: a configured CA bundle reaches the profile."""
+    from cryptography import x509
+    from cryptography.hazmat.primitives import hashes, serialization
+    from cryptography.hazmat.primitives.asymmetric import ec
+    import datetime
+
+    from github_agent.github_http import _tls_profile
+
+    key = ec.generate_private_key(ec.SECP256R1())
+    name = x509.Name([x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "test-ca")])
+    now = datetime.datetime.now(datetime.timezone.utc)
+    cert = (
+        x509.CertificateBuilder()
+        .subject_name(name)
+        .issuer_name(name)
+        .public_key(key.public_key())
+        .serial_number(1)
+        .not_valid_before(now)
+        .not_valid_after(now + datetime.timedelta(days=1))
+        .add_extension(x509.BasicConstraints(ca=True, path_length=None), critical=True)
+        .sign(key, hashes.SHA256())
+    )
+    ca = tmp_path / "ca.pem"
+    ca.write_bytes(cert.public_bytes(serialization.Encoding.PEM))
+    monkeypatch.setenv("GITHUB_CA_BUNDLE", str(ca))
+    profile = _tls_profile()
+    try:
+        assert profile.ca_bundle_path == ca
+        assert profile.verify_enabled
+    finally:
+        profile.cleanup()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_no_hand_built_ssl_context_remains():
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: no package code builds its own context."""
+    from pathlib import Path
+
+    import github_agent
+
+    root = Path(github_agent.__file__).parent
+    for path in root.rglob("*.py"):
+        text = path.read_text(encoding="utf-8")
+        assert "create_default_context" not in text, path
+        assert "verify=False" not in text, path
+        assert "disable_warnings" not in text, path