mcp-github-crunchtools 1.3.0__tar.gz → 1.3.2__tar.gz

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/CHANGELOG.md

@@ -6,6 +6,22 @@ All notable changes to this project are documented here. The format follows
 
 ## [Unreleased]
 
+## [1.3.2] - 2026-10-17
+
+### Fixed
+
+- The integer ID parameters of the read tools (`issue_number`, `pull_number`,
+  `run_id`) now publish `minimum: 1` in their schema, so `0` and negative IDs
+  are rejected.
+
+## [1.3.1] - 2026-10-16
+
+### Fixed
+
+- A primary rate limit reported GitHub's `x-ratelimit-reset` epoch as the
+  wait ("Retry after 1792152901 seconds"). It now reports the seconds left
+  until the reset.
+
 ## [1.3.0] - 2026-10-14
 
 ### Added

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/Containerfile

@@ -27,7 +27,7 @@ FROM quay.io/hummingbird/python:latest
 
 # Labels for container metadata
 LABEL name="mcp-github-crunchtools" \
-      version="1.3.0" \
+      version="1.3.2" \
       summary="Secure MCP server for GitHub issues, pull requests, Actions, releases, files, and search" \
       description="A security-focused MCP server for GitHub built on Red Hat UBI" \
       maintainer="crunchtools.com" \

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mcp-github-crunchtools
-Version: 1.3.0
+Version: 1.3.2
 Summary: Secure MCP server for GitHub issues, pull requests, Actions, releases, files, and search
 Author: crunchtools.com
 License-Expression: AGPL-3.0-or-later

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mcp-github-crunchtools"
-version = "1.3.0"
+version = "1.3.2"
 description = "Secure MCP server for GitHub issues, pull requests, Actions, releases, files, and search"
 requires-python = ">=3.10"
 license = "AGPL-3.0-or-later"

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/src/mcp_github_crunchtools/__init__.py

@@ -29,7 +29,7 @@ import argparse
 
 from .server import mcp
 
-__version__ = "1.3.0"
+__version__ = "1.3.2"
 __all__ = ["main", "mcp"]
 
 

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/src/mcp_github_crunchtools/client.py

@@ -7,6 +7,7 @@ All requests go through this client to ensure consistent security practices.
 import ipaddress
 import logging
 import re
+import time
 from typing import Any
 from urllib.parse import urlparse
 
@@ -25,6 +26,23 @@ from .errors import (
 
 logger = logging.getLogger(__name__)
 
+
+def _retry_after_seconds(headers: httpx.Headers) -> int | None:
+    """Seconds until a rate-limited call may be retried.
+
+    ``retry-after`` is already a duration; ``x-ratelimit-reset`` is the UTC
+    epoch second the window resets, so it is converted to a duration.
+    """
+    try:
+        if (retry_after := headers.get("retry-after")) is not None:
+            return max(0, int(retry_after))
+        if (reset := headers.get("x-ratelimit-reset")) is not None:
+            return max(0, int(reset) - int(time.time()))
+    except ValueError:
+        return None
+    return None
+
+
 MAX_RESPONSE_SIZE = 10 * 1024 * 1024
 # A job log is streamed and only its tail is kept, so it may be larger than a
 # buffered API response; past this the download is abandoned.
@@ -302,10 +320,7 @@ class GitHubClient:
         rate_remaining = response.headers.get("x-ratelimit-remaining")
 
         if status_code == 429 or (status_code == 403 and rate_remaining == "0"):
-            retry_after = response.headers.get("retry-after")
-            if retry_after is None:
-                retry_after = response.headers.get("x-ratelimit-reset")
-            raise RateLimitError(int(retry_after) if retry_after else None)
+            raise RateLimitError(_retry_after_seconds(response.headers))
 
         if status_code == 401:
             raise PermissionDeniedError("Valid token with required scopes")

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/src/mcp_github_crunchtools/server.py

@@ -4,9 +4,10 @@ This module creates and configures the MCP server with all tools.
 """
 
 import logging
-from typing import Any
+from typing import Annotated, Any
 
 from fastmcp import FastMCP
+from pydantic import Field
 
 from .tools import (
     create_issue,
@@ -44,7 +45,7 @@ READ_ONLY = {"readOnlyHint": True}
 
 mcp = FastMCP(
     name="mcp-github",
-    version="1.3.0",
+    version="1.3.2",
     instructions=(
         "Secure MCP server for GitHub repositories: issues, pull requests "
         "(open, review discussion, diffs, CI checks, merge), Actions runs and "
@@ -89,7 +90,7 @@ async def list_issues_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_issue_tool(
     repo: str,
-    issue_number: int,
+    issue_number: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """Get a single GitHub issue by number.
@@ -222,7 +223,7 @@ async def list_pull_requests_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_pull_request_tool(
     repo: str,
-    pull_number: int,
+    pull_number: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """Get a single GitHub pull request by number.
@@ -241,7 +242,7 @@ async def get_pull_request_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_pull_request_diff_tool(
     repo: str,
-    pull_number: int,
+    pull_number: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """Get the unified diff for a GitHub pull request.
@@ -260,7 +261,7 @@ async def get_pull_request_diff_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_pull_request_checks_tool(
     repo: str,
-    pull_number: int,
+    pull_number: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """Get a CI verdict for a PR that distinguishes skipped from failed.
@@ -399,7 +400,7 @@ async def merge_pull_request_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def list_pull_request_comments_tool(
     repo: str,
-    pull_number: int,
+    pull_number: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """List everything said on a GitHub pull request, in one list.
@@ -650,7 +651,7 @@ async def rerun_failed_jobs_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_workflow_run_tool(
     repo: str,
-    run_id: int,
+    run_id: Annotated[int, Field(ge=1)],
     owner: str | None = None,
 ) -> dict[str, Any]:
     """Get one GitHub Actions workflow run and its jobs (no logs).
@@ -670,7 +671,7 @@ async def get_workflow_run_tool(
 @mcp.tool(annotations=READ_ONLY)
 async def get_failed_job_logs_tool(
     repo: str,
-    run_id: int,
+    run_id: Annotated[int, Field(ge=1)],
     tail_lines: int = 200,
     owner: str | None = None,
 ) -> dict[str, Any]:

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/tests/test_tools.py

@@ -6,6 +6,7 @@ Integration tests with a real GitHub account should be run separately.
 
 import base64
 import os
+import time
 
 import httpx
 import pytest
@@ -139,6 +140,20 @@ class TestReadOnlyAnnotation:
     def test_every_read_only_tool_has_call_arguments(self) -> None:
         assert set(READ_ONLY_CALLS) == READ_ONLY
 
+    @pytest.mark.asyncio
+    async def test_read_tool_integer_ids_publish_minimum_one(self) -> None:
+        from mcp_github_crunchtools.server import mcp
+
+        found = 0
+        for tool in await mcp.list_tools():
+            if tool.name not in READ_ONLY:
+                continue
+            for field in ("issue_number", "pull_number", "run_id"):
+                if field in tool.parameters["properties"]:
+                    found += 1
+                    assert tool.parameters["properties"][field]["minimum"] == 1
+        assert found == 7
+
     @pytest.mark.asyncio
     @pytest.mark.parametrize("name", sorted(READ_ONLY))
     async def test_read_only_tool_sends_only_get(self, name: str) -> None:
@@ -1909,6 +1924,28 @@ class TestClientErrorHandling:
         with _patch_client(resp), pytest.raises(RateLimitError):
             await get_issue(owner="o", repo="r", issue_number=1)
 
+    @pytest.mark.asyncio
+    async def test_403_rate_limit_reset_is_a_duration(self) -> None:
+        """x-ratelimit-reset is an epoch second; the error reports the wait,
+        not the timestamp."""
+        from mcp_github_crunchtools.errors import RateLimitError
+        from mcp_github_crunchtools.tools import get_issue
+
+        resp = _mock_response(
+            status_code=403,
+            json_data={"message": "API rate limit exceeded"},
+            headers={
+                "x-ratelimit-remaining": "0",
+                "x-ratelimit-reset": str(int(time.time()) + 600),
+            },
+        )
+
+        with _patch_client(resp), pytest.raises(RateLimitError) as exc_info:
+            await get_issue(owner="o", repo="r", issue_number=1)
+
+        seconds = int(str(exc_info.value).split("Retry after ")[1].split()[0])
+        assert 590 <= seconds <= 600
+
     @pytest.mark.asyncio
     async def test_403_preserves_github_message_when_not_rate_limited(
         self,

{mcp_github_crunchtools-1.3.0 → mcp_github_crunchtools-1.3.2}/uv.lock

@@ -922,7 +922,7 @@ wheels = [
 
 [[package]]
 name = "mcp-github-crunchtools"
-version = "1.3.0"
+version = "1.3.2"
 source = { editable = "." }
 dependencies = [
     { name = "fastmcp" },