mcp-github-crunchtools 1.1.0__tar.gz → 1.2.0__tar.gz

mcp_github_crunchtools-1.2.0/.github/workflows/ashigaru.yml

@@ -0,0 +1,98 @@
+# Ashigaru — issues in, fixed bugs out. ONE file enrolls a repo.
+#
+# Drop this in at .github/workflows/ashigaru.yml. The organization supplies the
+# secrets (CLAUDE_CODE_OAUTH_TOKEN, ASHIGARU_APP_ID, ASHIGARU_APP_KEY,
+# OPENROUTER_API_KEY) and the switch (variable ASHIGARU_ENABLED = true).
+#
+# What happens:
+#   • a new issue is triaged: bug, documentation and performance issues are
+#     labeled ready-to-code and fixed; features are labeled triaged and left
+#     for you; unclear ones get needs-info
+#   • an issue from someone without write access is triaged too, but is never
+#     fixed until a maintainer adds ready-to-code
+#   • the fix arrives as a pull request from ashigaru/issue-N with auto-merge on
+#   • Gatehouse reviews it like any other; Ashigaru answers each finding
+#     (`fixed in <sha>` or `not a bug: <reason>`) for up to five rounds, then
+#     labels the pull request needs-human and stops
+#   • GitHub merges when the required checks pass. No job here can merge.
+#
+# To steer it by hand: add `ready-to-code` to have an issue fixed,
+# `ready-for-triage` to have it looked at again.
+#
+# Where the checks are. This file only routes events. The workflows it calls
+# do the checking, at the pinned release, before any agent runs:
+#   • the switch: every called workflow stops at its first job unless the
+#     organization variable ASHIGARU_ENABLED is true
+#   • who may reach an agent: scripts/guard.py asks the API for the write
+#     access of the issue's author and of whoever triggered the event
+#   • which pull requests are touched: fix.yml acts only on ashigaru/ branches
+#     in this repository, opened by the Ashigaru app
+#   • what the secrets can do: the job that runs the model gets a read-only
+#     token; the app key is used only by jobs that run no model
+#
+# Copy unchanged apart from the pins, which Dependabot keeps current.
+
+name: Ashigaru
+
+on:
+  issues:
+    types: [opened, labeled]
+  workflow_run:
+    workflows: [Gatehouse]
+    types: [completed]
+
+permissions: {}
+
+# One run at a time per issue or per pull request branch; a second event waits.
+concurrency:
+  group: ashigaru-${{ github.event.issue.number || github.event.workflow_run.head_branch }}
+  cancel-in-progress: false
+
+jobs:
+  triage:
+    name: Triage
+    if: >-
+      github.event_name == 'issues' &&
+      (github.event.action == 'opened' || github.event.label.name == 'ready-for-triage')
+    permissions:
+      contents: read
+      issues: write
+    uses: crunchtools/ashigaru/.github/workflows/triage.yml@v2
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+  code:
+    name: Code
+    needs: triage
+    # After a triage that said ready-to-code, or when a maintainer adds the label.
+    if: >-
+      always() && github.event_name == 'issues' &&
+      (needs.triage.outputs.auto_code == 'true' ||
+       (github.event.action == 'labeled' && github.event.label.name == 'ready-to-code'))
+    permissions:
+      contents: read
+      issues: read
+    uses: crunchtools/ashigaru/.github/workflows/code.yml@v2
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      ASHIGARU_APP_ID: ${{ secrets.ASHIGARU_APP_ID }}
+      ASHIGARU_APP_KEY: ${{ secrets.ASHIGARU_APP_KEY }}
+      OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+
+  fix:
+    name: Fix
+    if: >-
+      github.event_name == 'workflow_run' &&
+      github.event.workflow_run.event == 'pull_request_target' &&
+      github.event.workflow_run.head_repository.full_name == github.repository &&
+      startsWith(github.event.workflow_run.head_branch, 'ashigaru/')
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: read
+      actions: read
+    uses: crunchtools/ashigaru/.github/workflows/fix.yml@v2
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      ASHIGARU_APP_ID: ${{ secrets.ASHIGARU_APP_ID }}
+      ASHIGARU_APP_KEY: ${{ secrets.ASHIGARU_APP_KEY }}

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.github/workflows/ci.yml

@@ -40,7 +40,7 @@ jobs:
 
   gourmand:
     name: Code Quality (Gourmand)
-    uses: crunchtools/gatehouse/.github/workflows/gourmand.yml@v0.15.3
+    uses: crunchtools/gatehouse/.github/workflows/gourmand.yml@v0
 
   build-container:
     runs-on: ubuntu-latest

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.github/workflows/constitution.yml

@@ -18,4 +18,4 @@ permissions:
 jobs:
   constitution:
     name: Constitution
-    uses: crunchtools/constitution/.github/workflows/validate.yml@v1.22.0
+    uses: crunchtools/constitution/.github/workflows/validate.yml@v1.24.0

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.github/workflows/dependabot-automerge.yml

@@ -15,4 +15,4 @@ permissions:
 jobs:
   automerge:
     name: Dependabot
-    uses: crunchtools/constitution/.github/workflows/dependabot-automerge.yml@v1.22.0
+    uses: crunchtools/constitution/.github/workflows/dependabot-automerge.yml@v1.24.0

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.github/workflows/gatehouse-retriage.yml

@@ -20,4 +20,4 @@ jobs:
     if: github.event.workflow_run.event == 'pull_request_review_comment'
     permissions:
       actions: write   # re-run the triage job; nothing else
-    uses: crunchtools/gatehouse/.github/workflows/retriage.yml@v0.15.3
+    uses: crunchtools/gatehouse/.github/workflows/retriage.yml@v0

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.github/workflows/gatehouse.yml

@@ -90,7 +90,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: crunchtools/gatehouse/.github/workflows/review.yml@v0.15.3
+    uses: crunchtools/gatehouse/.github/workflows/review.yml@v0
     # Advisory by default — findings post as comments, the check always passes.
     # Uncomment to let critical/high findings fail the check (still not required):
     #   with:
@@ -107,4 +107,4 @@ jobs:
     if: always()
     permissions:
       pull-requests: read
-    uses: crunchtools/gatehouse/.github/workflows/triage.yml@v0.15.3
+    uses: crunchtools/gatehouse/.github/workflows/triage.yml@v0

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.pre-commit-config.yaml

@@ -12,7 +12,7 @@ repos:
         types: [python]
         stages: [pre-commit, pre-merge-commit]
   - repo: https://github.com/crunchtools/constitution
-    rev: v1.22.0
+    rev: v1.24.0
     hooks:
       - id: validate-constitution
 

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/.specify/memory/constitution.md

@@ -1,10 +1,10 @@
 # mcp-github-crunchtools Constitution
 
-> **Version:** 1.1.0
+> **Version:** 1.2.0
 > **Ratified:** 2026-06-14
-> **Amended:** 2026-10-02
+> **Amended:** 2026-10-12
 > **Status:** Active
-> **Inherits:** [crunchtools/constitution](https://github.com/crunchtools/constitution) v1.22.0
+> **Inherits:** [crunchtools/constitution](https://github.com/crunchtools/constitution) v1.24.0
 > **Profile:** MCP Server
 
 This file holds what is specific to mcp-github. The fleet rules and the MCP
@@ -19,13 +19,22 @@ restated here.
   the environment only. `GitHubApiError` scrubs it from messages, and
   `Config.__repr__()`/`__str__()` never expose it.
 - **Input limits:** Pydantic models with `extra="forbid"`; issue and PR
-  states are allowlisted (`open`, `closed`, `all`); owner and repo names are
+  states are allowlisted (`open`, `closed`, `all`), as are merge methods
+  (`merge`, `squash`, `rebase`); owner and repo names are
   checked for injection characters; git refs follow check-ref-format
-  rules (no `..`, `//` or leading/trailing `.` or `/`). `NotFoundError`
+  rules (no `..`, `//` or leading/trailing `.` or `/`); an expected head SHA
+  is a full 40 or 64 character hex SHA. `NotFoundError`
   truncates long identifiers.
 - **API:** `Authorization: Bearer` header, never the URL; the
   `X-GitHub-Api-Version` header is pinned to `2022-11-28`; path parameters
   are URL-encoded; requests time out after 30s; responses are capped at 10MB.
+- **Redirects:** the API client follows none. A job log, which GitHub serves
+  as a redirect to a pre-signed storage URL, is fetched by a separate client
+  that has no token, over HTTPS to a named host only, streamed, with only its
+  tail kept. The signed URL is never logged or put in an error message.
+- **Result caps:** tools that gather several pages say when they cut:
+  300 items per kind for pull request comments, 300 jobs per run, and for
+  failed-job logs 1000 lines per job, 5 jobs and 256 KiB per result.
 - **Surface:** pure API wrappers. No filesystem access, shell execution or
   code evaluation.
 
@@ -42,8 +51,9 @@ The server works with github.com and GitHub Enterprise Server:
 
 ## Tool Groups
 
-Issues, pull requests, Actions, files and search. Client error handling is
-tested for 401, 404, 429 and 204 responses in `TestClientErrorHandling`.
+Issues, pull requests, Actions, releases, files and search: 25 tools, of which
+14 only read. Client error handling is tested for 401, 404, 429 and 204
+responses in `TestClientErrorHandling`.
 
 ## Instance
 
@@ -62,3 +72,4 @@ tested for 401, 404, 429 and 204 responses in `TestClientErrorHandling`.
 | 1.0.0 | 2026-06-14 | Initial constitution (ported from mcp-gitlab-crunchtools) |
 | 1.0.1 | 2026-09-25 | Inherit constitution v1.17.0 (Gatehouse gates) |
 | 1.1.0 | 2026-10-02 | Manifest under constitution v1.18.0: profile restatement removed, mcp-github specifics kept; `..` rule moved from file paths to git refs to match the code |
+| 1.2.0 | 2026-10-12 | Seven tools for pull requests, Actions runs and logs, and releases (spec 001): redirect handling, result caps, merge-method and SHA validation, releases tool group |

mcp_github_crunchtools-1.2.0/.specify/specs/001-pr-merge-logs-release/spec.md

@@ -0,0 +1,141 @@
+# Specification: Pull Request, Run Log and Release Tools
+
+> **Spec ID:** 001-pr-merge-logs-release
+> **Status:** Implemented
+> **Version:** 1.2.0
+> **Author:** crunchtools.com
+> **Date:** 2026-10-12
+
+## Overview
+
+An agent that takes a change from a branch to a release needs to open the pull
+request, read what reviewers and CI said about it, answer them, merge, and
+publish. Until now it did the missing steps with the `gh` CLI, which hands it
+other people's text with no gateway in between. These seven tools close that
+gap so the whole loop runs through the MCP server.
+
+---
+
+## New Tools
+
+| Tool | Method | Endpoint | Description |
+|------|--------|----------|-------------|
+| `create_pull_request_tool` | POST | `/repos/{owner}/{repo}/pulls` | Open a pull request (write) |
+| `merge_pull_request_tool` | PUT | `/repos/{owner}/{repo}/pulls/{pull_number}/merge` | Merge, squash or rebase; optional expected head SHA (write) |
+| `list_pull_request_comments_tool` | GET | `.../issues/{n}/comments` + `.../pulls/{n}/comments` + `.../pulls/{n}/reviews` | One list of everything said on a PR |
+| `reply_to_review_comment_tool` | POST | `/repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies` | Reply in a review thread (write) |
+| `get_workflow_run_tool` | GET | `/repos/{owner}/{repo}/actions/runs/{run_id}` + `.../jobs` | Run status and jobs, no logs |
+| `get_failed_job_logs_tool` | GET | `.../actions/runs/{run_id}/jobs` + `.../actions/jobs/{job_id}/logs` | Tail of each failed job's log |
+| `create_release_tool` | POST | `/repos/{owner}/{repo}/releases` | Create a release and its tag (write) |
+
+The three GET tools publish `readOnlyHint`. Not in scope: creating or forking
+repositories, deleting packages, further search tools.
+
+### Result shapes and caps
+
+| Tool | Cap | How the result reports it |
+|------|-----|---------------------------|
+| `list_pull_request_comments_tool` | 300 items per kind, read oldest first (at most 9 requests) | `truncated`, `truncated_kinds` |
+| `get_workflow_run_tool` | 300 jobs | `jobs_truncated` |
+| `get_failed_job_logs_tool` | `tail_lines` at most 1000 (default 200); 5 failed jobs; 256 KiB of log text per result, split evenly between jobs; 20 MB per download | `tail_lines` (value used), `failed_jobs_omitted`, per-job and overall `truncated` |
+
+A job is failed when its conclusion is `failure` or `timed_out`. Cancelled
+jobs are left out: in a failed run they are mostly siblings stopped by
+fail-fast, and their logs say nothing about the cause.
+
+---
+
+## Security Considerations
+
+### Layer 1 — Token Protection
+
+- GitHub serves a job log as a 302 to a pre-signed URL on a storage host. The
+  API client is created with `follow_redirects=False`; the redirect target is
+  fetched by a second client that has no default headers, so the token is not
+  sent there.
+- The signed URL is a short-lived credential. It is not logged, not put in an
+  error message, and not kept in an exception chain.
+
+### Layer 2 — Input Validation
+
+- `MERGE_METHODS` allowlist; `validate_commit_sha` for the expected head;
+  `validate_head` for `branch` or `owner:branch`; `validate_ref` for base,
+  tag and target.
+- `CreateReleaseInput` for the release title and notes. Pull request title
+  and body reuse `CreateIssueInput`, and a review reply reuses
+  `CreateIssueCommentInput`: the limits are the same.
+- Blank optional values (`sha`, `target_commitish`, `name`) mean "not given".
+
+### Layer 3 — API Hardening
+
+- The redirect target must be HTTPS, name a host rather than an IP address,
+  and carry no embedded credentials. It is not redirected further and must
+  answer 200. The host is not held to a list of names: GitHub documents no
+  stable set of log-storage hosts, and GHES storage is the operator's.
+- The download is streamed with a rolling 256 KiB tail and abandoned past
+  20 MB. Paging loops are bounded by a page count, not by what the server
+  says.
+
+### Layer 4 — Dangerous Operation Prevention
+
+- No filesystem, shell or code evaluation. Logs are held in memory only.
+- Comments, reviews and logs are text written by others. The server returns
+  them as data and bounds their size; it does not interpret them.
+
+---
+
+## Module Changes
+
+### New Files
+
+| File | Purpose |
+|------|---------|
+| `tools/releases.py` | `create_release` |
+
+### Modified Files
+
+| File | Changes |
+|------|---------|
+| `client.py` | `_send` split out of `_request`; `get_redirected_tail`; `follow_redirects=False` |
+| `models.py` | `MERGE_METHODS`, `validate_head`, `validate_commit_sha`, `CreateReleaseInput` |
+| `tools/pull_requests.py` | `create_pull_request`, `merge_pull_request`, `list_pull_request_comments`, `reply_to_review_comment` |
+| `tools/actions.py` | `get_workflow_run`, `get_failed_job_logs` |
+| `tools/__init__.py` | Exports |
+| `server.py` | Seven `@mcp.tool` wrappers |
+
+---
+
+## Testing Requirements
+
+### Mocked API Tests
+
+- [x] Happy path, validation refusal and GitHub error path for each tool
+- [x] Caps: comments per kind, jobs per run, `tail_lines`, bytes, failed jobs
+- [x] The storage request carries no `Authorization` header (real httpx
+      client over a mock transport, so the assertion is on the request as sent)
+- [x] Redirects that are not HTTPS, carry credentials or address an IP are
+      refused; storage errors and transport failures do not expose the
+      signed URL
+
+### Input Validation Tests
+
+- [x] `validate_head`, `validate_commit_sha`, `CreateReleaseInput`
+
+### Tool Count Update
+
+- [x] `test_tool_count` is 25; `READ_ONLY` and `WRITES` updated
+
+---
+
+## Dependencies
+
+- Depends on: 000-baseline
+- Blocks: none
+
+---
+
+## Changelog
+
+| Version | Date | Changes |
+|---------|------|---------|
+| 1.2.0 | 2026-10-12 | Implemented |

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/CHANGELOG.md

@@ -6,6 +6,38 @@ All notable changes to this project are documented here. The format follows
 
 ## [Unreleased]
 
+## [1.2.0] - 2026-10-12
+
+### Added
+
+- `create_pull_request_tool`: open a pull request, optionally as a draft; the
+  head may be `owner:branch` for a fork.
+- `merge_pull_request_tool`: merge, squash or rebase a pull request. `sha` is
+  the expected head commit; GitHub refuses the merge if the branch has moved.
+- `list_pull_request_comments_tool`: conversation comments, diff comments and
+  reviews in one chronological list, each tagged with its kind, author and id.
+  Each kind is capped at 300 items and the result says when one was cut.
+- `reply_to_review_comment_tool`: reply in the thread of a diff comment.
+- `get_workflow_run_tool`: one run's status, conclusion, head SHA and branch,
+  event and jobs, without logs.
+- `get_failed_job_logs_tool`: the last lines of the log of each failed job in
+  a run, with ANSI escapes and timestamps removed. Bounded to 1000 lines per
+  job, 5 jobs and 256 KiB per result; the result says when something was cut.
+- `create_release_tool`: create a release and, if needed, its tag.
+- README and SECURITY.md list the fine-grained token permission each tool
+  needs.
+
+### Security
+
+- The API client is created with `follow_redirects=False`. GitHub redirects a
+  job log to a pre-signed storage URL; that URL is fetched by a separate
+  client that has no token, over HTTPS only, and is never logged or put in an
+  error message.
+
+### Changed
+
+- README lists all 25 tools; it had stopped at the first eleven.
+
 ## [1.1.0] - 2026-10-10
 
 ### Added

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/CLAUDE.md

@@ -1,6 +1,6 @@
 # Claude Code Instructions
 
-Secure MCP server for the GitHub REST API with 11 MVP tools across issues, pull requests, files, and search. Works with github.com and GitHub Enterprise Server.
+Secure MCP server for the GitHub REST API with 25 tools across issues, pull requests, Actions, releases, files, and search. Works with github.com and GitHub Enterprise Server.
 
 ## Quick Start
 
@@ -32,8 +32,12 @@ claude mcp add mcp-github-crunchtools \
 
 1. Go to https://github.com/settings/tokens
 2. Create a fine-grained or classic PAT named `mcp-github-crunchtools`
-3. Grant read access to repository contents, issues, and pull requests
-   (add write to issues/PRs only if you need `create_issue_comment_tool`)
+3. Grant read access to repository contents, issues, pull requests, and
+   Actions. Add write only for the write tools you use: Issues and Pull
+   requests for commenting, opening and updating; Contents for
+   `merge_pull_request_tool` and `create_release_tool`; Actions for
+   `trigger_workflow_tool` and `rerun_*`. The per-tool table is in README.md
+   under "Token permissions".
 4. Copy the token immediately (shown only once)
 
 ## Environment Variables
@@ -46,28 +50,38 @@ claude mcp add mcp-github-crunchtools \
 | `SSL_CERT_FILE` | No | — | Custom CA bundle for self-hosted instances |
 | `GITHUB_SSL_VERIFY` | No | `true` | Set `false` to disable SSL verification |
 
-## Available Tools (18)
+## Available Tools (25)
 
 | Category | Tools |
 |----------|-------|
 | Issues | `list_issues_tool`, `get_issue_tool`, `create_issue_tool`, `create_issue_comment_tool`, `update_issue_tool` |
-| Pull Requests | `list_pull_requests_tool`, `get_pull_request_tool`, `get_pull_request_diff_tool`, `get_pull_request_checks_tool`, `update_pull_request_tool` |
+| Pull Requests | `list_pull_requests_tool`, `get_pull_request_tool`, `get_pull_request_diff_tool`, `get_pull_request_checks_tool`, `list_pull_request_comments_tool`, `create_pull_request_tool`, `update_pull_request_tool`, `reply_to_review_comment_tool`, `merge_pull_request_tool` |
 | Files | `get_file_content_tool`, `list_repo_tree_tool` |
 | Search | `search_code_tool`, `search_issues_tool` |
-| Actions | `list_workflow_runs_tool`, `trigger_workflow_tool`, `rerun_workflow_run_tool`, `rerun_failed_jobs_tool` |
+| Actions | `list_workflow_runs_tool`, `get_workflow_run_tool`, `get_failed_job_logs_tool`, `trigger_workflow_tool`, `rerun_workflow_run_tool`, `rerun_failed_jobs_tool` |
+| Releases | `create_release_tool` |
 
-Write tools (`create_issue*`, `update_*`, `trigger_workflow_tool`, `rerun_*`)
+Write tools (`create_*`, `update_*`, `merge_pull_request_tool`,
+`reply_to_review_comment_tool`, `trigger_workflow_tool`, `rerun_*`)
 are scoped per-profile by the gateway. `trigger_workflow_tool` dispatches a
 fresh run (via `workflow_dispatch`) and is the way to *force* a build —
 `rerun_*` only re-run an existing run and GitHub rejects runs older than 30
 days.
 
+`get_failed_job_logs_tool` is the one tool that talks to a host other than the
+API: GitHub redirects a job log to a storage URL. `GitHubClient.get_redirected_tail`
+follows it with a separate client that has no token. Keep it that way.
+
 ## Example Usage
 
 ```
 List open issues for crunchtools/mcp-github
 Get the diff for PR #5 in crunchtools/mcp-github
 Show CI checks for pull request 5
+Show the failed job logs for run 123456
+List the review comments on PR 5 and reply to the first one
+Squash-merge PR 5 in crunchtools/mcp-github
+Create release v1.2.0 for crunchtools/mcp-github
 Read src/server.py from crunchtools/mcp-github
 Search code for "FastMCP" in repo:crunchtools/mcp-github
 Search issues for "is:open label:bug org:crunchtools"

{mcp_github_crunchtools-1.1.0 → mcp_github_crunchtools-1.2.0}/Containerfile

@@ -27,15 +27,15 @@ FROM quay.io/hummingbird/python:latest
 
 # Labels for container metadata
 LABEL name="mcp-github-crunchtools" \
-      version="1.1.0" \
-      summary="Secure MCP server for GitHub issues, pull requests, files, and search" \
+      version="1.2.0" \
+      summary="Secure MCP server for GitHub issues, pull requests, Actions, releases, files, and search" \
       description="A security-focused MCP server for GitHub built on Red Hat UBI" \
       maintainer="crunchtools.com" \
       url="https://github.com/crunchtools/mcp-github" \
       io.k8s.display-name="MCP GitHub CrunchTools" \
       io.openshift.tags="mcp,github,devops" \
       org.opencontainers.image.source="https://github.com/crunchtools/mcp-github" \
-      org.opencontainers.image.description="Secure MCP server for GitHub issues, pull requests, files, and search" \
+      org.opencontainers.image.description="Secure MCP server for GitHub issues, pull requests, Actions, releases, files, and search" \
       org.opencontainers.image.licenses="AGPL-3.0-or-later"
 
 WORKDIR /app