mcp-devops-assistant 0.1.0__py3-none-any.whl

devops_assistant/tools/github_read.py

@@ -0,0 +1,102 @@
+import json
+from typing import Any
+
+from fastmcp import FastMCP
+
+from ..audit import audit_tool
+from ..errors import InvalidInputError
+from ..security import limit
+from ..services.github_client import GitHubClient
+
+_MAX_RESULTS = 100
+
+
+def _validate_limit(count: int) -> int:
+    if not 1 <= count <= _MAX_RESULTS:
+        raise InvalidInputError(f"limit must be between 1 and {_MAX_RESULTS}")
+    return count
+
+
+def _validate_state(state: str) -> str:
+    if state not in {"open", "closed", "all"}:
+        raise InvalidInputError("state must be 'open', 'closed', or 'all'")
+    return state
+
+
+def _json_result(data: Any, max_chars: int) -> str:
+    return limit(json.dumps(data, ensure_ascii=True, separators=(",", ":")), max_chars)
+
+
+def register(mcp: FastMCP, client: GitHubClient) -> None:
+    @mcp.tool
+    @audit_tool
+    async def github_list_repositories(limit: int = 30) -> str:
+        """List repositories accessible to the configured GitHub token, subject to the repository allowlist."""
+        count = _validate_limit(limit)
+        return _json_result(
+            await client.list_repositories(count), client.settings.max_output_chars
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_get_repository(repository: str) -> str:
+        """Return safe metadata for an accessible owner/repository."""
+        return _json_result(
+            await client.get_repository(repository), client.settings.max_output_chars
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_list_files(
+        repository: str, path: str = "", ref: str | None = None, limit: int = 100
+    ) -> str:
+        """List files and directories at a repository path and ref, with a bounded result count."""
+        count = _validate_limit(limit)
+        return _json_result(
+            await client.list_files(repository, path, ref, count),
+            client.settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_read_file(
+        repository: str, path: str, ref: str | None = None
+    ) -> str:
+        """Read a bounded, redacted UTF-8 text file from an accessible repository."""
+        return await client.read_file(repository, path, ref)
+
+    @mcp.tool
+    @audit_tool
+    async def github_list_commits(
+        repository: str, branch: str | None = None, limit: int = 30
+    ) -> str:
+        """List recent commits for a repository and optional branch."""
+        count = _validate_limit(limit)
+        return _json_result(
+            await client.list_commits(repository, branch, count),
+            client.settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_list_issues(
+        repository: str, state: str = "open", limit: int = 30
+    ) -> str:
+        """List issues (excluding pull requests) for a repository."""
+        count = _validate_limit(limit)
+        return _json_result(
+            await client.list_issues(repository, _validate_state(state), count),
+            client.settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_list_pull_requests(
+        repository: str, state: str = "open", limit: int = 30
+    ) -> str:
+        """List pull requests for a repository."""
+        count = _validate_limit(limit)
+        return _json_result(
+            await client.list_pull_requests(repository, _validate_state(state), count),
+            client.settings.max_output_chars,
+        )

devops_assistant/tools/write.py

@@ -0,0 +1,161 @@
+import asyncio
+
+from fastmcp import FastMCP
+
+from ..actions import action_manager
+from ..audit import audit_tool
+from ..config import Settings
+from ..errors import InvalidInputError, PolicyDeniedError
+from ..security import redact
+from ..services.docker_client import DockerClient
+from ..services.github_client import GitHubClient
+
+
+def register(
+    mcp: FastMCP,
+    settings: Settings,
+    github: GitHubClient,
+    docker: DockerClient,
+) -> None:
+    if not settings.enable_write_tools:
+        return
+
+    @mcp.tool
+    @audit_tool
+    async def github_create_branch(
+        repository: str, branch: str, base_branch: str
+    ) -> str:
+        """Stage creation of an allowlisted GitHub branch; confirmation is required to create it."""
+        github.require_write_token()
+        details = await github.prepare_branch_creation(repository, branch, base_branch)
+        description = (
+            f"Create branch {details['branch']} in {details['repository']} "
+            f"from {details['base_branch']} ({details['base_sha']})"
+        )
+
+        async def execute() -> dict:
+            return await github.create_branch(repository, branch, details["base_sha"])
+
+        return action_manager.stage(
+            "github_create_branch",
+            f"{repository}:{branch}",
+            description,
+            {
+                "repository": repository,
+                "branch": branch,
+                "base_branch": base_branch,
+                "base_commit": details["base_sha"],
+            },
+            execute,
+            settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_commit_file(
+        repository: str,
+        branch: str,
+        path: str,
+        content: str,
+        message: str,
+    ) -> str:
+        """Stage one file create/update on an allowlisted prefixed branch; exact content is shown for confirmation."""
+        github.require_write_token()
+        if redact(message) != message:
+            raise PolicyDeniedError("Commit message appears to contain a secret")
+        details = await github.prepare_file_update(
+            repository, path, branch, content, message
+        )
+        operation = "Update" if details["sha"] else "Create"
+        description = (
+            f"{operation} {details['path']} in {repository} on branch {branch}"
+        )
+
+        async def execute() -> dict:
+            return await github.commit_file(
+                repository,
+                details["path"],
+                branch,
+                content,
+                message,
+                details["sha"],
+            )
+
+        return action_manager.stage(
+            "github_commit_file",
+            f"{repository}:{branch}:{path}",
+            description,
+            {
+                "repository": repository,
+                "branch": branch,
+                "path": details["path"],
+                "commit_message": message,
+                "existing_file": details["sha"] is not None,
+                "proposed_content": content,
+            },
+            execute,
+            settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def github_create_pull_request(
+        repository: str,
+        head: str,
+        base: str,
+        title: str,
+        body: str = "",
+    ) -> str:
+        """Stage a pull request from an allowlisted prefixed branch for human review; no merge operation is available."""
+        github.require_write_token()
+        if not title.strip() or len(title) > 256:
+            raise InvalidInputError(
+                "Pull request title must contain 1 to 256 characters"
+            )
+        if len(body) > settings.max_output_chars // 2:
+            raise InvalidInputError(
+                "Pull request body is too large to show in the confirmation response"
+            )
+        if redact(title) != title or redact(body) != body:
+            raise PolicyDeniedError("Pull request details appear to contain a secret")
+        await github.validate_write_branch(repository, head)
+        await github.get_branch_sha(repository, base)
+        description = f"Open pull request in {repository}: {head} -> {base} ({title})"
+
+        async def execute() -> dict:
+            return await github.create_pull_request(repository, head, base, title, body)
+
+        return action_manager.stage(
+            "github_create_pull_request",
+            f"{repository}:{head}->{base}",
+            description,
+            {
+                "repository": repository,
+                "head": head,
+                "base": base,
+                "title": title,
+                "body": body,
+            },
+            execute,
+            settings.max_output_chars,
+        )
+
+    @mcp.tool
+    @audit_tool
+    async def docker_restart_container(name: str) -> str:
+        """Stage restart of an explicitly allowlisted non-production container; confirmation is required."""
+        details = await asyncio.to_thread(docker.prepare_container_restart, name)
+        description = f"Restart allowlisted development container {details['name']}"
+        return action_manager.stage(
+            "docker_restart_container",
+            details["name"],
+            description,
+            details,
+            lambda: docker.restart_container(name),
+            settings.max_output_chars,
+        )
+
+    @mcp.tool
+    async def confirm_action(token: str) -> str:
+        """Perform exactly one staged action if its confirmation token is valid and unexpired."""
+        return await action_manager.confirm(token, settings.enable_write_tools)

mcp_devops_assistant-0.1.0.dist-info/METADATA

@@ -0,0 +1,15 @@
+Metadata-Version: 2.4
+Name: mcp-devops-assistant
+Version: 0.1.0
+Summary: DevOps Assistant MCP Server for GitHub and Docker
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+Requires-Dist: fastmcp
+Requires-Dist: httpx
+Requires-Dist: docker
+Requires-Dist: python-dotenv
+Provides-Extra: dev
+Requires-Dist: pytest; extra == "dev"
+Requires-Dist: pytest-asyncio; extra == "dev"
+Requires-Dist: respx; extra == "dev"
+Requires-Dist: ruff; extra == "dev"

mcp_devops_assistant-0.1.0.dist-info/RECORD

@@ -0,0 +1,21 @@
+devops_assistant/__init__.py,sha256=66QmS-kBOMDgWObLUqYAKliDhZUYZcwcBFvty5d1OQI,118
+devops_assistant/actions.py,sha256=3O_zrJ0zIPGXLwkFcM6_59sBx38GAfSplFi3_Iz662M,4826
+devops_assistant/app.py,sha256=qBWkdAccUmfrZ33064qakMmfo2i0BB4Q2BKCTIkzF60,3400
+devops_assistant/audit.py,sha256=ZmoLWTT4h-lna08vMQ1ykJGs8HpAryGOOkZGQpxwOGc,3984
+devops_assistant/config.py,sha256=UNiqc2B2MhA37GJHLHCeMkzewVzdZf-iO8AHyYtwNNE,3202
+devops_assistant/errors.py,sha256=g5sv2z-j6VhS7r13BZ_SNSUM3PTXID58SLbVPl5fgx8,496
+devops_assistant/prompts.py,sha256=A4wigi6kL0bAw_CPd2ZkLw2hPQ8lSpjLVFVSXNB50Xg,1502
+devops_assistant/resources.py,sha256=I8pUSmVkKWB42rTFsdvakLdfdRfRtAYE1W2yxV5qcUY,3245
+devops_assistant/security.py,sha256=oCbk_NVMLsBtbK9YjQQkJ29-Gwh7k660HYi8sFZIoJg,717
+devops_assistant/services/__init__.py,sha256=0eSIcwATTcCxDTAL4oFgXAGgymBbMzOJsfTSLTCmEds,32
+devops_assistant/services/docker_client.py,sha256=R4-CB6T-ds5PxVP1YkAplhqCZGkydiRUUJU1mVz6Yzs,10296
+devops_assistant/services/github_client.py,sha256=WNgbD08b9KPr7khjbJC_F9_Ge6OAtCOkSJ9T-bPHDhM,23886
+devops_assistant/tools/__init__.py,sha256=rWBcpxTQpLyH29xIrTwZN8C8y4Bci7_l7y2N7j1jGKA,30
+devops_assistant/tools/docker_read.py,sha256=oKmf8EelwyXJdfD8OUZjFZDzkW9RPS7LuVJw3GkAvPI,2047
+devops_assistant/tools/github_read.py,sha256=oIcIOzwn1y4wkIT4LzXawlJNE2ASClwPPEzL46GntUQ,3422
+devops_assistant/tools/write.py,sha256=7gC2DkVIlqLWVICNNt3JBW0JHNoW8ilkBdZb5zIwHJg,5573
+mcp_devops_assistant-0.1.0.dist-info/METADATA,sha256=2vrHvr9HFpUtFG22q-rKxiq9_nqurgl_99FZqUiFYuE,459
+mcp_devops_assistant-0.1.0.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+mcp_devops_assistant-0.1.0.dist-info/entry_points.txt,sha256=5UREWGO_j1p_D83R-5ZoNdCTPP4Ip2TDvhztTmWZDxQ,112
+mcp_devops_assistant-0.1.0.dist-info/top_level.txt,sha256=OMFbE8auoO2VIZ91S70-MRAi7gg3800JUvbY_dOHgv4,17
+mcp_devops_assistant-0.1.0.dist-info/RECORD,,

mcp_devops_assistant-0.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.2.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

mcp_devops_assistant-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+devops-assistant = devops_assistant.app:main
+mcp-devops-assistant = devops_assistant.app:main

mcp_devops_assistant-0.1.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+devops_assistant