tracehub-mcp 0.2.0__tar.gz

tracehub_mcp-0.2.0/.cz.toml

@@ -0,0 +1,18 @@
+[tool.commitizen]
+name = "cz_conventional_commits"
+version = "0.2.0"
+tag_format = "v$version"
+update_changelog_on_bump = true
+major_version_zero = true
+version_scheme = "pep440"
+
+# Files where Commitizen will update the version
+version_files = [
+    "pyproject.toml:version",
+    "src/opentelemetry_mcp/__init__.py:__version__"
+]
+
+# Changelog configuration
+[tool.commitizen.changelog]
+# Categorize commits by type
+file = "CHANGELOG.md"

tracehub_mcp-0.2.0/.dockerignore

@@ -0,0 +1,56 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+*.egg-info/
+dist/
+build/
+*.egg
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+env/
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+.mypy_cache/
+.ruff_cache/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Git
+.git/
+.gitignore
+
+# Documentation
+*.md
+!README.md
+docs/
+
+# CI/CD
+.github/
+
+# Environment files (include these at runtime instead)
+.env
+.env.local
+.env.*.local
+
+# UV cache
+.uv/
+
+# macOS
+.DS_Store
+
+# Tests
+tests/

tracehub_mcp-0.2.0/.env.example

@@ -0,0 +1,43 @@
+# Backend Configuration
+# Supported backends: jaeger, tempo, traceloop, datadog, sentry
+BACKEND_TYPE=jaeger
+
+# Backend URL (required)
+# Examples:
+#   Jaeger: http://localhost:16686
+#   Tempo: http://localhost:3200
+#   Traceloop: https://api.traceloop.com/v2
+#   Datadog (US): https://api.datadoghq.com
+#   Datadog (EU): https://api.datadoghq.eu
+#   Sentry (SaaS): https://sentry.io
+#   Sentry (self-hosted): https://sentry.your-company.com
+BACKEND_URL=http://localhost:16686
+
+# Optional: API key for authenticated backends (mainly for Traceloop, required
+# for Datadog and Sentry - for Sentry this is an auth token with trace/event
+# read permissions)
+BACKEND_API_KEY=
+
+# Required for Datadog backend only: Application key, in addition to BACKEND_API_KEY
+BACKEND_APP_KEY=
+
+# Required for Sentry backend only: organization slug (every Sentry API
+# endpoint this backend uses is organization-scoped).
+BACKEND_SENTRY_ORG=
+
+# Optional for Sentry backend: project slug to narrow queries to. When
+# omitted, queries span every project the auth token can access.
+BACKEND_SENTRY_PROJECT=
+
+# Optional: Comma-separated list of environments for Traceloop backend (default: production)
+# Only used when BACKEND_TYPE=traceloop
+BACKEND_ENVIRONMENTS=production
+
+# Optional: Request timeout in seconds (default: 30)
+BACKEND_TIMEOUT=30
+
+# Optional: Logging level (DEBUG, INFO, WARNING, ERROR)
+LOG_LEVEL=INFO
+
+# Optional: Maximum traces per query (default: 100, max: 1000)
+MAX_TRACES_PER_QUERY=100

tracehub_mcp-0.2.0/.github/dependabot.yml

@@ -0,0 +1,30 @@
+# Dependabot configuration
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  # Python dependencies (pyproject.toml)
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps)"
+    labels:
+      - "dependencies"
+      - "python"
+    open-pull-requests-limit: 10
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    commit-message:
+      prefix: "chore(deps)"
+    labels:
+      - "dependencies"
+      - "github-actions"
+    open-pull-requests-limit: 5

tracehub_mcp-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,154 @@
+name: CI
+
+on:
+    push:
+        branches: ["main"]
+    pull_request:
+        types: [opened, synchronize]
+
+permissions:
+  contents: read
+
+jobs:
+    lint:
+        name: Lint
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v6
+            - name: Setup UV
+              uses: astral-sh/setup-uv@v7
+              with:
+                  version: "latest"
+                  enable-cache: true
+            - name: Setup Python
+              uses: actions/setup-python@v6
+              with:
+                  python-version: "3.13"
+            - name: Install dependencies
+              run: uv sync --dev
+            - name: Lint with Ruff
+              run: uv run ruff check --output-format=github
+            - name: Lint with Mypy
+              run: uv run mypy .
+    test:
+        name: Test
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v6
+            - name: Setup UV
+              uses: astral-sh/setup-uv@v7
+              with:
+                  version: "latest"
+                  enable-cache: true
+            - name: Setup Python
+              uses: actions/setup-python@v6
+              with:
+                  python-version: "3.13"
+            - name: Install dependencies
+              run: uv sync --dev
+            - name: Test with pytest
+              run: uv run pytest
+    build-test:
+        needs: test
+        runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            actions: read
+            pull-requests: write
+            security-events: write
+        strategy:
+            matrix:
+                platform: [amd64, arm64]
+                include:
+                    - platform: amd64
+                      runs-on: ubuntu-latest
+                      docker-platform: linux/amd64
+                    - platform: arm64
+                      runs-on: ubuntu-24.04-arm
+                      docker-platform: linux/arm64
+        steps:
+            - uses: actions/checkout@v6
+
+            - name: Set up Docker Buildx
+              uses: docker/setup-buildx-action@v3
+
+            - name: Docker Build
+              uses: docker/build-push-action@v6
+              with:
+                  platforms: ${{ matrix.docker-platform }}
+                  context: .
+                  load: true
+                  push: false
+                  tags: tracehub-mcp-server:${{ github.sha }}-${{ matrix.platform }}
+            - name: Cache Trivy
+              uses: actions/cache@v4
+              with:
+                  path: ~/.cache/trivy
+                  key: trivy-${{ runner.os }}-${{ matrix.platform }}
+                  restore-keys: |
+                      trivy-${{ runner.os }}-
+            - name: Trivy scan (JSON)
+              uses: aquasecurity/trivy-action@v0.35.0
+              with:
+                  image-ref: tracehub-mcp-server:${{ github.sha }}-${{ matrix.platform }}
+                  scanners: secret,vuln
+                  exit-code: "0"
+                  severity: CRITICAL,HIGH
+                  format: json
+                  output: trivy-results-${{ matrix.platform }}.json
+            - name: Convert to table
+              run: trivy convert --format table --output trivy-results-${{ matrix.platform }}.txt trivy-results-${{ matrix.platform }}.json
+            - name: Convert to SARIF
+              if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
+              run: trivy convert --format sarif --output trivy-results-${{ matrix.platform }}.sarif trivy-results-${{ matrix.platform }}.json
+            - name: Upload SARIF to GitHub Security
+              if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
+              uses: github/codeql-action/upload-sarif@v4
+              with:
+                  sarif_file: trivy-results-${{ matrix.platform }}.sarif
+                  category: container-security-tracehub-mcp-server-${{ matrix.platform }}
+            - name: Log Trivy results
+              run: |
+                  echo "::group::Trivy Scan Results (tracehub-mcp-server-${{ matrix.platform }})"
+                  if [ -s "trivy-results-${{ matrix.platform }}.txt" ]; then
+                    cat "trivy-results-${{ matrix.platform }}.txt"
+                  else
+                    echo "No issues found!"
+                  fi
+                  echo "::endgroup::"
+            - name: Prepare PR comment
+              if: github.event_name == 'pull_request'
+              run: |
+                  MAX_CHARS=60000
+                  RESULTS_FILE="trivy-results-${{ matrix.platform }}.txt"
+                  COMMENT_FILE="trivy-comment-${{ matrix.platform }}.md"
+                  FILE_SIZE=$(wc -c < "$RESULTS_FILE" || echo "0")
+                  {
+                    echo "## Container Security Scan (tracehub-mcp-server-${{ matrix.platform }})"
+                    echo ""
+                    if [ ! -s "$RESULTS_FILE" ]; then
+                      echo "**No vulnerabilities found!**"
+                    else
+                      echo "<details>"
+                      echo "<summary>Click to expand results</summary>"
+                      echo ""
+                      echo '```'
+                      if [ "$FILE_SIZE" -gt "$MAX_CHARS" ]; then
+                        head -c "$MAX_CHARS" "$RESULTS_FILE"
+                        echo ""
+                        echo "... (output truncated - exceeded ${MAX_CHARS} characters)"
+                        echo "See full results in workflow logs"
+                      else
+                        cat "$RESULTS_FILE"
+                      fi
+                      echo '```'
+                      echo ""
+                      echo "</details>"
+                    fi
+                  } > "$COMMENT_FILE"
+            - name: Post PR comment
+              if: github.event_name == 'pull_request'
+              uses: marocchino/sticky-pull-request-comment@v2
+              with:
+                  header: trivy-scan-tracehub-mcp-server-${{ matrix.platform }}
+                  path: trivy-comment-${{ matrix.platform }}.md

tracehub_mcp-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,109 @@
+name: Release
+
+on:
+  workflow_dispatch:  # Manual trigger via GitHub Actions UI
+
+permissions:
+  contents: write      # Required for pushing commits, tags, and creating releases
+  id-token: write      # Required for PyPI OIDC (Trusted Publishing)
+
+jobs:
+  bump-version:
+    name: Bump Version & Create Release
+    runs-on: ubuntu-latest
+    outputs:
+      new_version: ${{ steps.cz.outputs.version }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0  # Full history required for Commitizen
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - name: Install Commitizen
+        run: pip install commitizen
+
+      - name: Bump version
+        id: cz
+        uses: commitizen-tools/commitizen-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          changelog_increment_filename: body.md
+          # The action's own entrypoint runs `git config --local user.name/email`
+          # unconditionally using these inputs (default: github-actions[bot]) --
+          # a standalone `git config` step earlier in this job has no effect,
+          # since this overwrites it right before the bump commit is made.
+          git_name: "sairam0424"
+          git_email: "uggesairam0000@gmail.com"
+
+      - name: Print version info
+        run: |
+          echo "New version: ${{ steps.cz.outputs.version }}"
+          echo "Version bump: ${{ steps.cz.outputs.version }}"
+
+      - name: Create GitHub Release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "${{ steps.cz.outputs.version }}" \
+            --title "Release ${{ steps.cz.outputs.version }}" \
+            --notes-file "body.md"
+
+  build-and-publish:
+    name: Build and Publish to PyPI
+    needs: bump-version
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # Required for PyPI OIDC
+    steps:
+      - name: Checkout code (with new version)
+        uses: actions/checkout@v6
+        with:
+          ref: main  # Get the version-bumped code
+
+      - name: Setup UV
+        uses: astral-sh/setup-uv@v7
+        with:
+          version: "latest"
+          enable-cache: true
+
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - name: Build package
+        run: |
+          uv build --wheel --sdist
+          ls -lh dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        # No credentials needed - uses OIDC/Trusted Publishing!
+
+  test-installation:
+    name: Test PyPI Installation
+    needs: [bump-version, build-and-publish]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - name: Wait for package availability
+        run: sleep 60  # Wait for PyPI to index the package
+
+      - name: Test installation from PyPI
+        run: |
+          pip install tracehub-mcp==${{ needs.bump-version.outputs.new_version }}
+          python -c "import opentelemetry_mcp; print(f'Installed version: {opentelemetry_mcp.__version__}')"
+          tracehub-mcp --help
+
+      - name: Installation successful
+        run: echo "✅ Package successfully published and verified on PyPI!"

tracehub_mcp-0.2.0/.github/workflows/security.yml

@@ -0,0 +1,126 @@
+name: Security Scan
+
+on:
+  workflow_dispatch: # Manual trigger
+  schedule:
+    - cron: "0 10 * * *" # Daily at 10 AM UTC
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  pull-requests: write
+
+jobs:
+  image-scan:
+    strategy:
+      fail-fast: false
+      matrix:
+        platform: [amd64, arm64]
+        include:
+          - platform: amd64
+            runs-on: ubuntu-latest
+            docker-platform: linux/amd64
+          - platform: arm64
+            runs-on: ubuntu-24.04-arm
+            docker-platform: linux/arm64
+    runs-on: ${{ matrix.runs-on }}
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Cache Trivy
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/trivy
+          key: trivy-${{ runner.os }}-${{ matrix.platform }}
+          restore-keys: |
+            trivy-${{ runner.os }}-
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build image
+        run: |
+          docker buildx build \
+            --load \
+            --platform "${{ matrix.docker-platform }}" \
+            -t "tracehub-mcp-server:${{ github.sha }}-${{ matrix.platform }}" \
+            .
+
+      - name: Trivy scan (JSON)
+        uses: aquasecurity/trivy-action@v0.35.0
+        with:
+          image-ref: tracehub-mcp-server:${{ github.sha }}-${{ matrix.platform }}
+          format: json
+          output: trivy-results-${{ matrix.platform }}.json
+          scanners: vuln,secret,license
+          vuln-type: os,library
+          severity: CRITICAL,HIGH,MEDIUM,LOW
+
+      - name: Convert Trivy results
+        run: |
+          set -euo pipefail
+          PREFIX="trivy-results-${{ matrix.platform }}"
+
+          trivy convert --format table --output "${PREFIX}.txt" "${PREFIX}.json"
+
+          if [[ "${{ github.event_name }}" != "pull_request" && "${{ github.ref }}" == "refs/heads/main" ]]; then
+            trivy convert --format sarif --output "${PREFIX}.sarif" "${PREFIX}.json"
+          fi
+
+      - name: Upload SARIF to GitHub Security
+        if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: trivy-results-${{ matrix.platform }}.sarif
+          category: container-security-tracehub-mcp-server-${{ matrix.platform }}
+
+      - name: Log full Trivy results
+        run: |
+          echo "::group::Full Trivy Scan Results (tracehub-mcp-server - ${{ matrix.platform }})"
+          RESULTS_FILE="trivy-results-${{ matrix.platform }}.txt"
+          if [ -s "$RESULTS_FILE" ]; then
+            cat "$RESULTS_FILE"
+          else
+            echo "✅ No vulnerabilities found!"
+          fi
+          echo "::endgroup::"
+
+      - name: Prepare PR comment
+        if: github.event_name == 'pull_request'
+        run: |
+          RESULTS_FILE="trivy-results-${{ matrix.platform }}.txt"
+          COMMENT_FILE="trivy-comment-${{ matrix.platform }}.md"
+          MAX_CHARS=60000
+          FILE_SIZE=$(wc -c < "$RESULTS_FILE")
+
+          {
+            echo "## 🔒 Container Vulnerability Scan (tracehub-mcp-server - ${{ matrix.platform }})"
+            echo ""
+            if [ ! -s "$RESULTS_FILE" ]; then
+              echo "✅ **No vulnerabilities found!**"
+            else
+              echo "<details>"
+              echo "<summary>Click to expand results</summary>"
+              echo ""
+              echo '```'
+              if [ "$FILE_SIZE" -gt "$MAX_CHARS" ]; then
+                head -c "$MAX_CHARS" "$RESULTS_FILE"
+                echo ""
+                echo "... (output truncated - exceeded ${MAX_CHARS} characters)"
+                echo "See full results in the 'Full Trivy Scan Results' step above"
+              else
+                cat "$RESULTS_FILE"
+              fi
+              echo '```'
+              echo ""
+              echo "</details>"
+            fi
+          } > "$COMMENT_FILE"
+
+      - name: Post PR comment
+        if: github.event_name == 'pull_request'
+        uses: marocchino/sticky-pull-request-comment@v2
+        with:
+          header: trivy-scan-tracehub-mcp-server-${{ matrix.platform }}
+          path: trivy-comment-${{ matrix.platform }}.md