github-agent 2.4.1__tar.gz → 2.4.3__tar.gz

{github_agent-2.4.1 → github_agent-2.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 2.4.1
+Version: 2.4.3
 Summary: GitHub Agent for MCP
 Author-email: Project Maintainers <maintainers@users.noreply.github.com>
 License: MIT
@@ -14,7 +14,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: gql[requests]>=4.4.0
 Requires-Dist: requests>=2.34.2
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.5
+Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.11
 Provides-Extra: mcp
 Provides-Extra: all
 Provides-Extra: test
@@ -45,7 +45,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 2.4.1*
+*Version: 2.4.3*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > [official documentation](https://knuckles-team.github.io/github-agent/).

{github_agent-2.4.1 → github_agent-2.4.3}/README.md

@@ -20,7 +20,7 @@
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 2.4.1*
+*Version: 2.4.3*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > [official documentation](https://knuckles-team.github.io/github-agent/).

github_agent-2.4.3/github_agent/__init__.py

@@ -0,0 +1 @@
+__version__ = "2.4.3"

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent/connectors/tool_schema_fingerprints.json

@@ -1,6 +1,6 @@
 {
   "algorithm": "agent-connector-sdk:mcp-tool-contract-compat:v2",
-  "connector": "github-agent",
+  "connector": "github-mcp",
   "schema_version": "1",
   "tools": {
     "github_get_repositories": "ec6c06fe206534df752bc4035d4cf81c952d448441a7e9271b800175357c3360"

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent/github_http.py

@@ -4,21 +4,23 @@ from __future__ import annotations
 
 import http.client
 import json
-import os
 import ssl
 from typing import Any
 
+from agent_connector_sdk.tls.errors import TransportSecurityError
+from agent_connector_sdk.tls.profile import ResolvedTLSProfile
+from agent_connector_sdk.tls.resolve import resolve_tls_profile
+
 GITHUB_API_HOST = "api.github.com"
 MAX_REQUEST_BYTES = 1 * 1024 * 1024
 MAX_RESPONSE_BYTES = 8 * 1024 * 1024
 
 
-def _tls_context() -> ssl.SSLContext:
-    cafile = os.environ.get("SSL_CERT_FILE") or os.environ.get("REQUESTS_CA_BUNDLE")
-    capath = os.environ.get("SSL_CERT_DIR")
+def _tls_profile() -> ResolvedTLSProfile:
+    """Resolve the GitHub TLS profile from the SDK (SDK-CONNECTOR-CONTROL-R017)."""
     try:
-        return ssl.create_default_context(cafile=cafile or None, capath=capath or None)
-    except (OSError, ssl.SSLError):
+        return resolve_tls_profile("github")
+    except TransportSecurityError:
         raise RuntimeError("runtime TLS trust configuration is invalid") from None
 
 
@@ -103,11 +105,12 @@ def github_json_request(
     _validate_token_shape(token)
     body = _encode_request_body(payload)
     headers = _request_headers(token)
+    profile = _tls_profile()
     connection = http.client.HTTPSConnection(
         GITHUB_API_HOST,
         443,
         timeout=30,
-        context=_tls_context(),
+        context=profile.ssl_context,
     )
     try:
         connection.request(method, path, body=body, headers=headers)
@@ -118,3 +121,4 @@ def github_json_request(
         raise RuntimeError("GitHub service is unavailable") from None
     finally:
         connection.close()
+        profile.cleanup()

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent/kg_ingest.py

@@ -35,8 +35,8 @@ from agent_connector_sdk.ingest import (
 
 logger = logging.getLogger("github_agent.kg")
 
-_ENTITY_BINDING = IngestBinding(connector="github-agent", stream="github")
-_DOCUMENT_BINDING = IngestBinding(connector="github-agent", stream="github-documents")
+_ENTITY_BINDING = IngestBinding(connector="github-mcp", stream="github")
+_DOCUMENT_BINDING = IngestBinding(connector="github-mcp", stream="github-documents")
 
 
 def _to_entity(record: dict[str, Any]) -> Entity:

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent/mcp_server.py

@@ -39,7 +39,7 @@ from github_agent.auth import (
 )
 from github_agent.github_response_models import PagesAlreadyEnabled, PagesNotEnabled
 
-__version__ = "2.4.1"
+__version__ = "2.4.3"
 logger = get_logger("GithubMCPServer")
 logger.setLevel(logging.INFO)
 

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent/ontology/certification.json

@@ -1,9 +1,9 @@
 {
   "api_version": "arbora.io/v1",
   "artifacts": {
-    "connector_manifest.yml": "412bbd8242cdac75754d89b9cc1fa81cec7c2f70e2b29f822eca336b1f725f25",
+    "connector_manifest.yml": "8c377374f2ab87e99a765d3340b269b312ae6aa971c91ebe874b3dbf8f76b358",
     "github_agent/connectors/mcp_source_presets.json": "312ec35c48d40253afcd8dba445afee9f41b5ac910e11a435d7c02ee63b5967f",
-    "github_agent/connectors/tool_schema_fingerprints.json": "c80f708a9aac0ec9dd4352be0db40295f203f734b88193ce7f03b6c41f07be6e",
+    "github_agent/connectors/tool_schema_fingerprints.json": "36982e09c3dba96cc187fc6cd99431deb4899b24399e3b8dc206f228cb980ce7",
     "github_agent/ontology/fixtures/records.json": "12f5b54b0ae98770f279f99e136788d063340042a9d6ff4bac0c22a886d2dc7b",
     "github_agent/ontology/github.ttl": "ad0ad6d295143b38725866b5b5c59a824f10bfc4219794ac2d9a2274f11bbdb5",
     "github_agent/ontology/mappings/source.yaml": "7ff7a37550f825a61fe6d0f9529206f4efe2727431e32b8ab95a39a32bdced43",
@@ -22,7 +22,7 @@
     "bundle_schema": "2",
     "epistemic_graph": ">=2.27.0,<3"
   },
-  "connector": "github-agent",
+  "connector": "github-mcp",
   "kind": "ConnectorSourceAttestation",
   "live_certified": false,
   "mode": "offline-source",

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-agent
-Version: 2.4.1
+Version: 2.4.3
 Summary: GitHub Agent for MCP
 Author-email: Project Maintainers <maintainers@users.noreply.github.com>
 License: MIT
@@ -14,7 +14,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: gql[requests]>=4.4.0
 Requires-Dist: requests>=2.34.2
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.5
+Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.3.11
 Provides-Extra: mcp
 Provides-Extra: all
 Provides-Extra: test
@@ -45,7 +45,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/github-agent)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/github-agent)
 
-*Version: 2.4.1*
+*Version: 2.4.3*
 
 > **Documentation** — Installation, deployment, and usage across the MCP, API, and
 > [official documentation](https://knuckles-team.github.io/github-agent/).

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent.egg-info/SOURCES.txt

@@ -109,6 +109,7 @@ tests/test_api_client_endpoints.py
 tests/test_api_validation.py
 tests/test_auth_client_edge_cases.py
 tests/test_comment_crud.py
+tests/test_fleet_name.py
 tests/test_github_agent_api_brute_force_coverage.py
 tests/test_github_agent_brute_force_coverage.py
 tests/test_github_gql.py

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent.egg-info/entry_points.txt

@@ -1,3 +1,6 @@
+[agent_connector_sdk.connector]
+github-mcp = github_agent
+
 [agent_connector_sdk.ontology_providers]
 github-agent = github_agent.ontology
 

{github_agent-2.4.1 → github_agent-2.4.3}/github_agent.egg-info/requires.txt

@@ -1,6 +1,6 @@
 gql[requests]>=4.4.0
 requests>=2.34.2
-agent-connector-sdk[mcp]<1.0.0,>=0.3.5
+agent-connector-sdk[mcp]<1.0.0,>=0.3.11
 
 [all]
 

{github_agent-2.4.1 → github_agent-2.4.3}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "github-agent"
-version = "2.4.1"
+version = "2.4.3"
 readme = "README.md"
 description = "GitHub Agent for MCP"
 requires-python = ">=3.12"
 classifiers = [ "Development Status :: 5 - Production/Stable", "License :: Public Domain", "Environment :: Console", "Operating System :: POSIX :: Linux", "Programming Language :: Python :: 3",]
-dependencies = [ "gql[requests]>=4.4.0", "requests>=2.34.2", "agent-connector-sdk[mcp]>=0.3.5,<1.0.0",]
+dependencies = [ "gql[requests]>=4.4.0", "requests>=2.34.2", "agent-connector-sdk[mcp]>=0.3.11,<1.0.0",]
 [[project.authors]]
 name = "Project Maintainers"
 email = "maintainers@users.noreply.github.com"
@@ -35,6 +35,10 @@ github-agent = "github_agent.ontology"
 [project.entry-points."agent_connector_sdk.source_connector_providers"]
 github-agent = "github_agent.connectors"
 
+# The one declared connector identity: the fleet name (SDK-CONNECTOR-CONTROL-R071).
+[project.entry-points."agent_connector_sdk.connector"]
+github-mcp = "github_agent"
+
 [tool.uv.workspace]
 members = ["."]
 

github_agent-2.4.3/tests/test_fleet_name.py

@@ -0,0 +1,53 @@
+"""CONN-GITHUB-AGENT-CONNECTOR-IDENTITY-R001: the connector is filed under its fleet name, github-mcp."""
+
+from __future__ import annotations
+
+import ast
+import json
+import re
+import tomllib
+from pathlib import Path
+
+import pytest
+
+ROOT = Path(__file__).resolve().parents[1]
+PACKAGE = ROOT / "github_agent"
+FLEET = "github-mcp"
+
+
+def _call_connectors(path: Path) -> list[str]:
+    names = []
+    for node in ast.walk(ast.parse(path.read_text(encoding="utf-8"))):
+        if isinstance(node, ast.Call) and getattr(
+            node.func, "id", getattr(node.func, "attr", "")
+        ) in {
+            "IngestBinding",
+            "ConnectorContent",
+        }:
+            names += [
+                str(k.value.value)
+                for k in node.keywords
+                if k.arg == "connector" and isinstance(k.value, ast.Constant)
+            ]
+    return names
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-CONNECTOR-IDENTITY-R001")
+def test_connector_name_is_the_fleet_name() -> None:
+    pyproject = tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
+    assert pyproject["project"]["entry-points"]["agent_connector_sdk.connector"] == {
+        FLEET: "github_agent"
+    }
+    manifest_path = PACKAGE / "connector_manifest.yml"
+    if not manifest_path.is_file():
+        manifest_path = ROOT / "connector_manifest.yml"
+    manifest = manifest_path.read_text(encoding="utf-8")
+    match = re.search(r'^\s*"?connector"?\s*:\s*"?([^"\s,]+)', manifest, re.MULTILINE)
+    assert match is not None and match.group(1) == FLEET
+    fingerprints = PACKAGE / "connectors" / "tool_schema_fingerprints.json"
+    if fingerprints.is_file():
+        assert (
+            json.loads(fingerprints.read_text(encoding="utf-8"))["connector"] == FLEET
+        )
+    for module in sorted(PACKAGE.glob("*.py")):
+        assert all(name == FLEET for name in _call_connectors(module)), module.name

{github_agent-2.4.1 → github_agent-2.4.3}/tests/test_github_http.py

@@ -163,3 +163,68 @@ def test_github_json_request_encodes_payload_as_compact_json():
     assert value == {"created": True}
     sent_kwargs = connection.request.call_args.kwargs
     assert sent_kwargs["body"] == json.dumps({"title": "hi"}, separators=(",", ":")).encode()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_request_uses_sdk_tls_profile_context():
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: the connection uses the profile's context."""
+    connection, _ = _mock_connection()
+    profile = MagicMock()
+    with (
+        patch("github_agent.github_http.resolve_tls_profile", return_value=profile) as resolve,
+        patch("github_agent.github_http.http.client.HTTPSConnection", return_value=connection) as conn_cls,
+    ):
+        github_json_request("GET", "/repos/x/y", "tok")
+    resolve.assert_called_once_with("github")
+    assert conn_cls.call_args.kwargs["context"] is profile.ssl_context
+    profile.cleanup.assert_called_once()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_private_ca_is_carried_through_the_profile(tmp_path, monkeypatch):
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: a configured CA bundle reaches the profile."""
+    from cryptography import x509
+    from cryptography.hazmat.primitives import hashes, serialization
+    from cryptography.hazmat.primitives.asymmetric import ec
+    import datetime
+
+    from github_agent.github_http import _tls_profile
+
+    key = ec.generate_private_key(ec.SECP256R1())
+    name = x509.Name([x509.NameAttribute(x509.oid.NameOID.COMMON_NAME, "test-ca")])
+    now = datetime.datetime.now(datetime.timezone.utc)
+    cert = (
+        x509.CertificateBuilder()
+        .subject_name(name)
+        .issuer_name(name)
+        .public_key(key.public_key())
+        .serial_number(1)
+        .not_valid_before(now)
+        .not_valid_after(now + datetime.timedelta(days=1))
+        .add_extension(x509.BasicConstraints(ca=True, path_length=None), critical=True)
+        .sign(key, hashes.SHA256())
+    )
+    ca = tmp_path / "ca.pem"
+    ca.write_bytes(cert.public_bytes(serialization.Encoding.PEM))
+    monkeypatch.setenv("GITHUB_CA_BUNDLE", str(ca))
+    profile = _tls_profile()
+    try:
+        assert profile.ca_bundle_path == ca
+        assert profile.verify_enabled
+    finally:
+        profile.cleanup()
+
+
+@pytest.mark.spec("CONN-GITHUB-AGENT-TRANSPORT-TLS-R001")
+def test_no_hand_built_ssl_context_remains():
+    """CONN-GITHUB-AGENT-TRANSPORT-TLS-R001: no package code builds its own context."""
+    from pathlib import Path
+
+    import github_agent
+
+    root = Path(github_agent.__file__).parent
+    for path in root.rglob("*.py"):
+        text = path.read_text(encoding="utf-8")
+        assert "create_default_context" not in text, path
+        assert "verify=False" not in text, path
+        assert "disable_warnings" not in text, path

github_agent-2.4.1/github_agent/__init__.py

@@ -1 +0,0 @@
-__version__ = "2.4.1"