Hiddenden/AegisGitea-MCP
0
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Feat/raw api dispatch #58

Merged
Latte merged 4 commits from feat/raw-api-dispatch into dev 2026-06-26 10:33:11 +00:00
Conversation 0 Commits 4 Files Changed 12
+854 -3
4 Commits
Author SHA1 Message Date
LatteandClaude Opus 4.8 7f7aaab5a6 test(raw-api): cover gitea_request handler and path parsing
docker / lint (push) Successful in 38s
Details
docker / test (push) Successful in 33s
Details
docker / test (pull_request) Successful in 32s
Details
test / test (push) Successful in 40s
Details
lint / lint (push) Successful in 42s
Details
docker / lint (pull_request) Successful in 39s
Details
test / test (pull_request) Successful in 39s
Details
lint / lint (pull_request) Successful in 40s
Details
docker / docker (pull_request) Successful in 31s
Details
docker / docker (push) Successful in 44s
Details 
Covers read allow + repository parsing, write denied without write-mode, write
allowed only for whitelisted repos, non-repo write denial, sensitive-path
denial (incl. GET) and override, cross-repo search handling, unknown-method and
traversal rejection before any network call, killswitch, response truncation,
and the raw path-parsing helpers and raw-aware extractors.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-26 12:26:57 +02:00
LatteandClaude Opus 4.8 8c84d76bd5 docs(raw-api): document gitea_request, env vars and policy examples 
Adds docs/raw-api.md (two-layer policy, sensitive denylist, env vars, write-mode
warning), links it from index and api-reference, documents RAW_API_ENABLED /
RAW_API_ALLOW_SENSITIVE in .env.example, and adds commented virtual-tool-name
deny examples to policy.yaml.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-26 12:26:57 +02:00
LatteandClaude Opus 4.8 8e41fd12af feat(raw-api): register gitea_request tool and wire server dispatch 
Registers gitea_request in AVAILABLE_TOOLS with write_operation=False
(deliberate: a static flag cannot describe a read-or-write tool; the handler
authorizes writes per-method) and maps the tool name to raw_api_request_tool in
the server handler registry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-26 12:26:56 +02:00
LatteandClaude Opus 4.8 2844c42ec8 feat(raw-api): add gitea_request schema, path parsing, client dispatch and handler 
Adds the RawApiRequestArgs schema (extra=forbid), raw path normalization/
parsing helpers, a GiteaClient.raw_request that audits method+path only (never
the body), and the raw_api_request_tool handler. The handler derives a coarse
virtual tool name (gitea_request:METHOD:topsegment) plus repository/target_path
from the path and runs them back through the policy engine, enforces an
admin/credential sensitive-path denylist, and bounds responses. Two config
flags gate it: RAW_API_ENABLED (killswitch) and RAW_API_ALLOW_SENSITIVE.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-26 12:26:26 +02:00