Skip to content

Simplify private cases and add Dokploy GitHub retrieval - #2

Merged
tanglearncode merged 2 commits into
mainfrom
feat/simplify-private-case
Jul 24, 2026
Merged

tanglearncode merged 2 commits into
mainfrom
feat/simplify-private-case

Conversation

@tanglearncode

Copy link
Copy Markdown
Contributor

Summary

  • reduce each private investigation case to one best-effort case.md file
  • add an explicitly installed, read-only NeatContext extension for public Dokploy/dokploy evidence
  • retrieve issues/comments, pull requests/files, releases, commits, comparisons, and version-pinned source line ranges
  • bind the Dokploy domain profile to the extension's exact read capabilities
  • document the trust boundary, unauthenticated GitHub rate limit, and step-by-step setup
  • validate the extension package and private single-file boundary in CI

Safety

  • hardcodes https://api.github.com and Dokploy/dokploy
  • sends GET requests only and has no credential connection
  • rejects cross-repository URLs, path traversal, unsafe refs, oversized responses, and binary/oversized source files
  • keeps Team Library extension source inert until the user explicitly trusts and installs a managed snapshot
  • labels retrieved GitHub content as untrusted evidence

Validation

  • npm test — 16 tests pass; Team Library validator passes
  • NeatContext native profile.inspect accepts profiles/dokploy.md
  • packaged MCP process passes initialize and tools/list smoke test (8 tools)
  • live smoke test retrieves issue #4898 and application.ts lines 94–100 at v0.29.13

@tanglearncode
tanglearncode merged commit 3aca42e into main Jul 24, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant