Hiddenden/AegisGitea-MCP
5
0 Fork 0
Code Issues 2 Pull Requests Actions Packages Projects 1 Releases 1 Wiki Activity

Commit Graph

  • d7213b37ad Merge pull request 'Dev' (#72) from dev into main main Latte 2026-10-14 17:52:22 +00:00
  • a4800951ef Merge pull request 'feat!: full-access Gitea MCP server (1.0.0): full API coverage, stdio + streamable HTTP, admin and per-user OAuth' (#71) from feat/full-api-coverage into dev dev Latte 2026-10-14 17:25:24 +00:00
  • 3fead4e121 ci: keep the publish workflow comment free of em dashes Latte 2026-10-14 18:23:51 +02:00
  • 79bce1d210 test: regenerate the coverage report and the sweep baseline, document the baseline and the runner policy Latte 2026-10-14 18:17:11 +02:00
  • d1b9a4845e test: write failure paths, expired OAuth token, non-admin admin-tool refusals and webhook credential leak checks Latte 2026-10-14 18:14:44 +02:00
  • 84fa29e380 test: merged-commit lookup, scheduled auto-merge cancel and repository transfer answers Latte 2026-10-14 18:12:46 +02:00
  • 7dc749d7cd test: manage runners at every scope, rerun and delete a completed run, fail when the runner is required Latte 2026-10-14 18:09:17 +02:00
  • 9e51f72ec9 test: pin the sweep outcome per tool in a baseline, seed a GPG key, fail loudly when seeding finds no run Latte 2026-10-14 18:06:29 +02:00
  • 84b361962e docs: describe the per-run build tag and the push gate Latte 2026-10-14 18:02:49 +02:00
  • 4e108771f8 ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job Latte 2026-10-14 18:02:43 +02:00
  • 8ff67f5859 docs: describe the write-ahead audit model and bring the contract files up to date Latte 2026-10-14 18:01:55 +02:00
  • 59d0e43aae docs: fix the claude mcp add form, pin the package index, document known limitations Latte 2026-10-14 18:01:19 +02:00
  • 8786502b8c test: sweep checks the audit trail and keeps the unit test free of em dashes Latte 2026-10-14 17:30:30 +02:00
  • 446ec11954 test: integration coverage report, suite docs and harness isolation fix Latte 2026-10-14 17:28:06 +02:00
  • ae6d83c3bd test: setup command against the live instance Latte 2026-10-14 17:24:43 +02:00
  • fed75b17c8 test: per-user OAuth mode against the live instance Latte 2026-10-14 17:24:01 +02:00
  • 303bd9aa21 test: sweep every tool through the MCP server against a seeded Gitea Latte 2026-10-14 17:22:45 +02:00
  • 22c8157ca4 test: Actions run scenario on an act_runner container Latte 2026-10-14 17:04:10 +02:00
  • 29b12bfe0d test: admin, sudo, notification, user and package scenarios Latte 2026-10-14 17:00:53 +02:00
  • 825c3c93e2 test: issue, pull request, release, secret, variable and webhook scenarios Latte 2026-10-14 16:58:57 +02:00
  • 51c766b231 test: integration helpers and org, team and repo scenarios through the MCP server Latte 2026-10-14 16:54:26 +02:00
  • f86b9b529c docs: record S2 results, mark findings fixed or waived, update the security model Latte 2026-10-14 17:55:59 +02:00
  • d7cac91175 ci: raise the coverage gate to 90 percent; docs: reconcile OAuth docs with the implementation Latte 2026-10-14 17:53:58 +02:00
  • 0f5f5cdd95 fix: do not echo setting values in configuration errors; test: stdio and config redaction Latte 2026-10-14 17:52:07 +02:00
  • 984673e8cf fix: reject a trailing newline in sudo; test: malformed input suite Latte 2026-10-14 17:49:37 +02:00
  • 421a6507c0 fix: redact a data field in Action secret responses; test: secret echo suite Latte 2026-10-14 17:46:11 +02:00
  • fef80a5b21 test: security suite for auth, startup, redaction; fix: mask secrets in object keys Latte 2026-10-14 17:44:20 +02:00
  • 766968fa42 ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16) Latte 2026-10-14 17:40:16 +02:00
  • 6f7a3c0e5b fix: refuse a token store directory owned by another user or left writable (SEC-13) Latte 2026-10-14 17:36:21 +02:00
  • d96c3ac604 fix: reject whitespace and control characters in base URLs and warn on plain http Gitea (SEC-10) Latte 2026-10-14 17:34:15 +02:00
  • 87f048cc4d fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09) Latte 2026-10-14 17:32:03 +02:00
  • f57c237bed fix: rate limit /token and /revoke, bucket IPv6 by /64 and warn about untrusted forwarded headers (SEC-08) Latte 2026-10-14 17:29:12 +02:00
  • 782d416e46 fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19) Latte 2026-10-14 17:26:52 +02:00
  • 8be859243d fix: add OAUTH_REDIRECT_ALLOWLIST for client registration and waive the open default (SEC-05) Latte 2026-10-14 17:24:41 +02:00
  • 79aa4f7fc0 fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04) Latte 2026-10-14 17:22:29 +02:00
  • 7307214ab6 fix: create the audit log 0600 in a 0700 directory and refuse symlinks (SEC-11) Latte 2026-10-14 17:18:18 +02:00
  • fd5e4b71f3 fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18) Latte 2026-10-14 17:14:13 +02:00
  • 43eebd3089 fix: write-ahead audit entry so calls stop when the audit log stops accepting writes (SEC-03) Latte 2026-10-14 17:11:53 +02:00
  • 5b622e64e2 fix: redact stored webhook authorization headers and other secret fields by key name (SEC-02) Latte 2026-10-14 17:08:59 +02:00
  • d5ca530db3 fix: cap and type-check the unauthenticated consent POST body (SEC-01) Latte 2026-10-14 17:07:06 +02:00
  • 5baf73f38b docs: security threat model and review findings Latte 2026-10-14 17:04:47 +02:00
  • ce5ae6caa5 fix: redact identity secrets through a public hook and mask issued agm_ tokens Latte 2026-10-14 16:45:36 +02:00
  • e02cede9f2 fix: drop the obsolete OAuth-unavailable startup warning test Latte 2026-10-14 16:44:04 +02:00
  • 7286440d64 test: cover the per-user OAuth flow, threat cases, store and startup Latte 2026-10-14 16:39:38 +02:00
  • 566d0b65dd feat: add per-user OAuth mode proxying sign-in to Gitea Latte 2026-10-14 16:39:38 +02:00
  • 5e144772b2 test: add MCP smoke tests over stdio and streamable HTTP, from source and from the built image Latte 2026-10-14 16:18:29 +02:00
  • cfbf1fb893 fix: keep the embedded env template in sync with .env.example Latte 2026-10-14 16:25:37 +02:00
  • cf3d2e17d3 fix: fail closed on an unwritable audit log, bound the rate limiter and harden startup Latte 2026-10-14 16:24:51 +02:00
  • a3222d5ebe fix: report an invalid --port with a short message instead of listing every choice Latte 2026-10-14 16:24:51 +02:00
  • c73a7cc3ce fix: serialize the admin login lookup so concurrent first calls send one request Latte 2026-10-14 16:24:51 +02:00
  • e139ae826f docs: regenerate tool inventory after annotation overrides Latte 2026-10-14 16:13:57 +02:00
  • 7c7cfc05ff docs: rewrite README and docs for the full-access design, generate tool inventory Latte 2026-10-14 16:05:49 +02:00
  • 68bd8700dc feat: add docs drift check Latte 2026-10-14 16:05:49 +02:00
  • c9e2c481e7 feat: add MCP server core, stdio and streamable HTTP transports and serve command Latte 2026-10-14 16:10:23 +02:00
  • 581ca67bf8 docs: correct the module lists in AGENTS.md and CLAUDE.md Latte 2026-10-14 16:12:51 +02:00
  • 10c8b21cf5 docs: document result redaction, credential-issuing operations and path encoding Latte 2026-10-14 16:12:51 +02:00
  • 72462105f5 fix: keep the harness admin password out of the docker exec argv Latte 2026-10-14 16:11:46 +02:00
  • 517c675048 fix: harden setup against plain http, untrusted output and unsafe values Latte 2026-10-14 16:11:01 +02:00
  • 6c9b2b74ca test: satisfy lint in catalog override test Latte 2026-10-14 16:10:04 +02:00
  • 6b11d29919 fix: annotate POST render endpoints read-only and irreversible POSTs destructive Latte 2026-10-14 16:09:59 +02:00
  • 156e963e21 fix: key slash encoding on route, redact more request secrets, bound JSON depth and uploads Latte 2026-10-14 16:08:42 +02:00
  • 1a039e32ab ci: single Gitea Actions pipeline, uv-based image, scoped docker cleanup Latte 2026-10-14 15:58:12 +02:00
  • 9e50859133 feat: add Gitea request executor with result envelope, pagination and redaction Latte 2026-10-14 15:55:02 +02:00
  • 041b3ea7ff feat: generate the tool catalog from the pinned swagger Latte 2026-10-14 15:50:27 +02:00
  • a807a70556 test: fix integration harness lint findings Latte 2026-10-14 15:50:43 +02:00
  • 1d223e6799 feat: add the aegis-gitea-mcp setup command Latte 2026-10-14 15:49:40 +02:00
  • 465a365d89 test: add live-Gitea integration harness (opt-in, Docker) Latte 2026-10-14 15:48:49 +02:00
  • c246f5c267 docs: rewrite contributor contract for the full-access model Latte 2026-10-14 15:40:37 +02:00
  • b82e2866cb feat: new settings, CLI skeleton and interface skeletons Latte 2026-10-14 15:40:37 +02:00
  • 4ac9626eb5 refactor!: remove legacy adapters, policy engine and API-key auth Latte 2026-10-14 15:40:37 +02:00
  • c0b22c531e build: switch to uv, hatchling and ruff-only tooling Latte 2026-10-14 15:40:30 +02:00
  • 8b7bb7205c docs: phase 0 audit, chunk plan, ADRs and pinned Gitea 28.1.0 swagger Latte 2026-10-14 15:34:48 +02:00
  • 2b99644ec5 Merge pull request 'Merge pull request 'Main' (#67) from main into dev' (#68) from dev into main v0.2.0 Latte 2026-06-27 14:17:38 +00:00
  • 5999e14e4b Merge pull request 'Main' (#67) from main into dev Latte 2026-06-27 14:17:22 +00:00
  • 524cc1773d Merge pull request 'Promote dev to main: publish stable aegis-gitea-mcp 0.2.0' (#66) from dev into main Latte 2026-06-27 14:16:33 +00:00
  • 64611d9c53 Merge pull request 'ci: fix package publishing + add dev/main packages' (#65) from fix/package-publishing into dev Bartender 2026-06-27 14:03:00 +00:00
  • 45641f8e2c docs: document dev and stable package channels Latte 2026-06-27 15:59:37 +02:00
  • e5dfba208e ci: publish package on merge to dev/main with separate dev and stable packages Latte 2026-06-27 15:59:30 +02:00
  • 83e5a0df14 Merge pull request 'release: v0.2.0 — local stdio package, safe full-API coverage & resource-type authz' (#63) from dev into main Latte 2026-06-27 13:43:55 +00:00
  • 2bb74807bc Merge pull request 'feat: harden local stdio MCP, CI package smoke, CLAUDE.md conventions' (#64) from feat/local-mcp-hardening-and-ci into dev Latte 2026-06-27 13:29:09 +00:00
  • 4db37d200e ci: stop artifact upload from failing the build on Gitea runners Latte 2026-06-27 15:26:56 +02:00
  • 3d527f8690 ci: build the package and smoke-test both install profiles Latte 2026-06-27 15:19:43 +02:00
  • d79ff2d476 docs: forbid AI attribution and document the stdio transport in CLAUDE.md Latte 2026-06-27 15:19:42 +02:00
  • 5d4a98d06e feat(stdio): harden local MCP transport and add end-to-end tests Latte 2026-06-27 15:19:42 +02:00
  • f660fa32c1 Merge pull request 'ci: reuse existing REGISTRY_TOKEN secret for package publish' (#62) from feat/local-package-and-full-coverage into dev Latte 2026-06-27 13:05:18 +00:00
  • 83c7416677 Merge branch 'dev' into feat/local-package-and-full-coverage Latte 2026-06-27 13:02:10 +00:00
  • da66200be7 Merge pull request 'ci: reuse existing REGISTRY_TOKEN secret for package publish' (#60) from feat/publish-reuse-registry-token into dev Latte 2026-06-27 12:49:17 +00:00
  • 1ca5bcbc6b ci: reuse existing REGISTRY_TOKEN secret for package publish LatteandClaude Opus 4.8 2026-06-27 14:39:10 +02:00
  • c551b3cfc3 ci: reuse existing REGISTRY_TOKEN secret for package publish LatteandClaude Opus 4.8 2026-06-27 14:39:10 +02:00
  • cf19a320b0 Merge pull request 'feat: local stdio package + safe full-API coverage' (#59) from feat/local-package-and-full-coverage into dev Latte 2026-06-27 12:23:31 +00:00
  • 499bf98d92 ci: build and publish package to Gitea registry on tag LatteandClaude Opus 4.8 2026-06-27 11:18:07 +02:00
  • 385b442b6f docs: local vs server quickstart, authz model, packaging LatteandClaude Opus 4.8 2026-06-27 11:17:01 +02:00
  • 2859a7f917 style: apply ruff/black formatting to stdio_app LatteandClaude Opus 4.8 2026-06-27 11:10:14 +02:00
  • 1636ae1501 test: stdio adapter dispatch, owner resolution and local env bootstrap LatteandClaude Opus 4.8 2026-06-27 11:10:05 +02:00
  • 3392d8f69b feat(security): resource-type-aware authorization with fail-closed defaults LatteandClaude Opus 4.8 2026-06-27 11:09:50 +02:00
  • 2d7f12d0d0 feat: safe full-API coverage via classified gitea_request dispatch LatteandClaude Opus 4.8 2026-06-27 11:09:30 +02:00
  • 8902c4f642 feat: add local stdio adapter and uv-installable package with extras LatteandClaude Opus 4.8 2026-06-27 10:56:16 +02:00
  • 7da0c46de8 refactor: extract transport-agnostic core and shared tool registry LatteandClaude Opus 4.8 2026-06-27 10:49:46 +02:00
  • dd253f87e5 chore: add PLAN.md and branch for local package + full coverage LatteandClaude Opus 4.8 2026-06-27 10:44:06 +02:00
  • aefb243a05 Merge pull request 'Feat/raw api dispatch' (#58) from feat/raw-api-dispatch into dev Latte 2026-06-26 10:33:10 +00:00