c7fa6aeb7f
把 Gitea (git.zhengchentao.win) 通过 MCP 暴露给 Claude.ai:列 repo、读代码、看 commits / issues / PR / orgs / packages / actions。 设计文档见 vault Coding/gitea-mcp/gitea-mcp 设计.md。 代码模板复用 obsidian-mcp(.NET 10 + ModelContextProtocol SDK + JwtBearer)。 19 个只读 Tool(全部 scope=read:gitea): Repo / 文件: - list_repos / read_repo - list_tree(max_entries=500 防爆) - read_file(max_bytes=1MB,超出 truncated=true) - search_code(走 /repos/search-code,indexer 未启用时返回结构化错误说明) 分支 / 提交: - list_branches / list_commits / read_commit(diff 文件数限 50) Issue / PR: - list_issues / read_issue(含评论) - list_pulls / read_pull(含评论 + 改动文件列表) Org / Package(用户额外授权 read:organization + read:package): - list_orgs / read_org - list_packages / read_package Gitea Actions(运维友好): - list_workflow_runs / read_run_log 技术栈: - .NET 10 + ModelContextProtocol SDK 1.0 - HttpClientFactory + Microsoft.Extensions.Http.Resilience(指数 backoff,5xx/429/网络错误重试) - JwtBearer (HS256, Current+Previous fallback, MapInboundClaims=false) - aud=gitea, scope=read:gitea, iss=https://auth.zhengchentao.win Gitea API client: - Authorization: token <PAT> (admin PAT,仅 read scope) - BaseUrl=https://git.zhengchentao.win - 错误映射:401/403 → UnauthorizedAccessException,404 → KeyNotFoundException,5xx → InvalidOperationException - RepoBlacklist 黑名单(owner/repo 精确匹配,默认空) 部署: - Dockerfile multi-stage,COPY --chown,non-root user - .gitea/workflows/build-image.yml:build + deploy 双 job,buildkit v0.13.2 - 容器内 :8080,宿主端口 9092 - 子域名 git-mcp.zhengchentao.win(区别于 Gitea 本体 git.zhengchentao.win) 测试:6/6 单测过(GiteaRepoFilter 黑名单匹配) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
46 lines
1.6 KiB
C#
46 lines
1.6 KiB
C#
using GiteaMcp.Config;
|
||
using GiteaMcp.Services.Models;
|
||
using Microsoft.Extensions.Options;
|
||
|
||
namespace GiteaMcp.Services;
|
||
|
||
/// <summary>
|
||
/// 仓库黑名单过滤器。
|
||
/// 配置项 Gitea:RepoBlacklist 为逗号分隔的 "owner/repo" 列表,默认空(全开放)。
|
||
/// 所有返回仓库列表的 Tool 都经过此过滤器,防止意外暴露不希望 Claude 看到的仓库。
|
||
/// </summary>
|
||
public class GiteaRepoFilter
|
||
{
|
||
private readonly HashSet<string> _blacklist;
|
||
|
||
public GiteaRepoFilter(IOptions<GiteaOptions> opts)
|
||
{
|
||
var raw = opts.Value.RepoBlacklist ?? string.Empty;
|
||
|
||
// 解析 "owner/repo,owner2/repo2" 格式,大小写不敏感
|
||
_blacklist = raw
|
||
.Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries)
|
||
.Select(s => s.ToLowerInvariant())
|
||
.ToHashSet();
|
||
}
|
||
|
||
/// <summary>
|
||
/// 判断单个仓库是否在黑名单内。
|
||
/// full_name 格式为 "owner/repo"(Gitea API 返回的 full_name 字段)。
|
||
/// </summary>
|
||
public bool IsBlocked(string fullName)
|
||
=> _blacklist.Contains(fullName.ToLowerInvariant());
|
||
|
||
/// <summary>
|
||
/// 从列表中过滤掉黑名单仓库,返回新列表(不修改原列表)。
|
||
/// </summary>
|
||
public List<GiteaRepo> Filter(List<GiteaRepo> repos)
|
||
{
|
||
if (_blacklist.Count == 0) return repos;
|
||
return repos.Where(r => !IsBlocked(r.FullName)).ToList();
|
||
}
|
||
|
||
/// <summary>当前黑名单项数,用于日志 / 测试断言</summary>
|
||
public int BlacklistCount => _blacklist.Count;
|
||
}
|