feat(mcp-bridge): real GitHub + GitLab API passthrough

Replace stub invocations with actual API calls using fetch():

GitHub (14 tools via boj_github_*):
  list_repos, get_repo, create_issue, list_issues, get_issue,
  comment_issue, create_pr, list_prs, get_pr, merge_pr,
  search_code, search_issues, get_file, graphql

GitLab (8 tools via boj_gitlab_*):
  list_projects, get_project, create_issue, list_issues,
  create_mr, list_mrs, list_pipelines, setup_mirror

Auth via GITHUB_TOKEN and GITLAB_TOKEN environment variables
(temporary until vault-mcp zero-knowledge proxy is production).
Rate limit headers parsed and returned with responses.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

mcp-bridge/main.js

@@ -144,6 +144,153 @@ async function fetchCartridgeInfo(name) {
   }
 }
 
+// --- Real API passthrough for high-value cartridges ---
+// These bypass the BoJ REST API and call services directly when the
+// V-lang adapter isn't running. Tokens from environment (temporary)
+// or vault-mcp zero-knowledge proxy (production).
+
+const GITHUB_TOKEN = process.env.GITHUB_TOKEN || "";
+const GITLAB_TOKEN = process.env.GITLAB_TOKEN || "";
+
+async function githubApiCall(method, path, body) {
+  if (!GITHUB_TOKEN) {
+    return { error: "GITHUB_TOKEN not set. Store in vault-mcp or export to environment." };
+  }
+  try {
+    const url = `https://api.github.com${path}`;
+    const opts = {
+      method,
+      headers: {
+        "Authorization": `Bearer ${GITHUB_TOKEN}`,
+        "Accept": "application/vnd.github+json",
+        "X-GitHub-Api-Version": "2022-11-28",
+        "User-Agent": "boj-server/0.3.0",
+      },
+    };
+    if (body && method !== "GET") {
+      opts.headers["Content-Type"] = "application/json";
+      opts.body = JSON.stringify(body);
+    }
+    const res = await fetch(url, opts);
+    const data = await res.json();
+    const rateLimit = {
+      remaining: res.headers.get("x-ratelimit-remaining"),
+      reset: res.headers.get("x-ratelimit-reset"),
+      limit: res.headers.get("x-ratelimit-limit"),
+    };
+    return { status: res.status, data, rateLimit };
+  } catch (err) {
+    return { error: `GitHub API error: ${err.message}` };
+  }
+}
+
+async function githubGraphQL(query, variables) {
+  if (!GITHUB_TOKEN) {
+    return { error: "GITHUB_TOKEN not set." };
+  }
+  try {
+    const res = await fetch("https://api.github.com/graphql", {
+      method: "POST",
+      headers: {
+        "Authorization": `Bearer ${GITHUB_TOKEN}`,
+        "Content-Type": "application/json",
+        "User-Agent": "boj-server/0.3.0",
+      },
+      body: JSON.stringify({ query, variables: variables || {} }),
+    });
+    return await res.json();
+  } catch (err) {
+    return { error: `GitHub GraphQL error: ${err.message}` };
+  }
+}
+
+async function gitlabApiCall(method, path, body) {
+  if (!GITLAB_TOKEN) {
+    return { error: "GITLAB_TOKEN not set." };
+  }
+  const baseUrl = process.env.GITLAB_URL || "https://gitlab.com";
+  try {
+    const url = `${baseUrl}/api/v4${path}`;
+    const opts = {
+      method,
+      headers: {
+        "PRIVATE-TOKEN": GITLAB_TOKEN,
+        "Accept": "application/json",
+        "User-Agent": "boj-server/0.3.0",
+      },
+    };
+    if (body && method !== "GET") {
+      opts.headers["Content-Type"] = "application/json";
+      opts.body = JSON.stringify(body);
+    }
+    const res = await fetch(url, opts);
+    const data = await res.json();
+    return { status: res.status, data };
+  } catch (err) {
+    return { error: `GitLab API error: ${err.message}` };
+  }
+}
+
+// Route GitHub API tool calls to real API
+async function handleGitHubTool(toolName, args) {
+  switch (toolName) {
+    case "boj_github_list_repos":
+      return githubApiCall("GET", `/user/repos?per_page=${args.per_page || 30}&sort=${args.sort || "updated"}`);
+    case "boj_github_get_repo":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}`);
+    case "boj_github_create_issue":
+      return githubApiCall("POST", `/repos/${args.owner}/${args.repo}/issues`, { title: args.title, body: args.body, labels: args.labels });
+    case "boj_github_list_issues":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}/issues?state=${args.state || "open"}&per_page=${args.per_page || 30}`);
+    case "boj_github_get_issue":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}/issues/${args.issue_number}`);
+    case "boj_github_comment_issue":
+      return githubApiCall("POST", `/repos/${args.owner}/${args.repo}/issues/${args.issue_number}/comments`, { body: args.body });
+    case "boj_github_create_pr":
+      return githubApiCall("POST", `/repos/${args.owner}/${args.repo}/pulls`, { title: args.title, body: args.body, head: args.head, base: args.base || "main" });
+    case "boj_github_list_prs":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}/pulls?state=${args.state || "open"}`);
+    case "boj_github_get_pr":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}/pulls/${args.pull_number}`);
+    case "boj_github_merge_pr":
+      return githubApiCall("PUT", `/repos/${args.owner}/${args.repo}/pulls/${args.pull_number}/merge`, { merge_method: args.method || "merge" });
+    case "boj_github_search_code":
+      return githubApiCall("GET", `/search/code?q=${encodeURIComponent(args.query)}`);
+    case "boj_github_search_issues":
+      return githubApiCall("GET", `/search/issues?q=${encodeURIComponent(args.query)}`);
+    case "boj_github_get_file":
+      return githubApiCall("GET", `/repos/${args.owner}/${args.repo}/contents/${args.path}?ref=${args.ref || "main"}`);
+    case "boj_github_graphql":
+      return githubGraphQL(args.query, args.variables);
+    default:
+      return { error: `Unknown GitHub tool: ${toolName}` };
+  }
+}
+
+// Route GitLab API tool calls to real API
+async function handleGitLabTool(toolName, args) {
+  switch (toolName) {
+    case "boj_gitlab_list_projects":
+      return gitlabApiCall("GET", `/projects?owned=true&per_page=${args.per_page || 20}`);
+    case "boj_gitlab_get_project":
+      return gitlabApiCall("GET", `/projects/${encodeURIComponent(args.project_id)}`);
+    case "boj_gitlab_create_issue":
+      return gitlabApiCall("POST", `/projects/${encodeURIComponent(args.project_id)}/issues`, { title: args.title, description: args.description });
+    case "boj_gitlab_list_issues":
+      return gitlabApiCall("GET", `/projects/${encodeURIComponent(args.project_id)}/issues?state=${args.state || "opened"}`);
+    case "boj_gitlab_create_mr":
+      return gitlabApiCall("POST", `/projects/${encodeURIComponent(args.project_id)}/merge_requests`, { title: args.title, source_branch: args.source, target_branch: args.target || "main" });
+    case "boj_gitlab_list_mrs":
+      return gitlabApiCall("GET", `/projects/${encodeURIComponent(args.project_id)}/merge_requests?state=${args.state || "opened"}`);
+    case "boj_gitlab_list_pipelines":
+      return gitlabApiCall("GET", `/projects/${encodeURIComponent(args.project_id)}/pipelines`);
+    case "boj_gitlab_setup_mirror":
+      return gitlabApiCall("POST", `/projects/${encodeURIComponent(args.project_id)}/remote_mirrors`, { url: args.target_url, enabled: true });
+    default:
+      return { error: `Unknown GitLab tool: ${toolName}` };
+  }
+}
+
 // --- Build MCP tool list from BoJ cartridges ---
 
 function cartridgeToTools(cartridges) {
@@ -378,6 +525,42 @@ function cartridgeToTools(cartridges) {
     },
   });
 
+  // GitHub API (real passthrough)
+  const ghTools = [
+    { name: "boj_github_list_repos", desc: "List your GitHub repositories", props: { per_page: { type: "number" }, sort: { type: "string", enum: ["updated", "created", "pushed", "full_name"] } } },
+    { name: "boj_github_get_repo", desc: "Get a GitHub repository", props: { owner: { type: "string" }, repo: { type: "string" } }, req: ["owner", "repo"] },
+    { name: "boj_github_create_issue", desc: "Create an issue on a GitHub repo", props: { owner: { type: "string" }, repo: { type: "string" }, title: { type: "string" }, body: { type: "string" }, labels: { type: "array", items: { type: "string" } } }, req: ["owner", "repo", "title"] },
+    { name: "boj_github_list_issues", desc: "List issues on a GitHub repo", props: { owner: { type: "string" }, repo: { type: "string" }, state: { type: "string", enum: ["open", "closed", "all"] }, per_page: { type: "number" } }, req: ["owner", "repo"] },
+    { name: "boj_github_get_issue", desc: "Get a specific issue", props: { owner: { type: "string" }, repo: { type: "string" }, issue_number: { type: "number" } }, req: ["owner", "repo", "issue_number"] },
+    { name: "boj_github_comment_issue", desc: "Comment on an issue", props: { owner: { type: "string" }, repo: { type: "string" }, issue_number: { type: "number" }, body: { type: "string" } }, req: ["owner", "repo", "issue_number", "body"] },
+    { name: "boj_github_create_pr", desc: "Create a pull request", props: { owner: { type: "string" }, repo: { type: "string" }, title: { type: "string" }, body: { type: "string" }, head: { type: "string" }, base: { type: "string" } }, req: ["owner", "repo", "title", "head"] },
+    { name: "boj_github_list_prs", desc: "List pull requests", props: { owner: { type: "string" }, repo: { type: "string" }, state: { type: "string", enum: ["open", "closed", "all"] } }, req: ["owner", "repo"] },
+    { name: "boj_github_get_pr", desc: "Get a specific pull request", props: { owner: { type: "string" }, repo: { type: "string" }, pull_number: { type: "number" } }, req: ["owner", "repo", "pull_number"] },
+    { name: "boj_github_merge_pr", desc: "Merge a pull request", props: { owner: { type: "string" }, repo: { type: "string" }, pull_number: { type: "number" }, method: { type: "string", enum: ["merge", "squash", "rebase"] } }, req: ["owner", "repo", "pull_number"] },
+    { name: "boj_github_search_code", desc: "Search code on GitHub", props: { query: { type: "string" } }, req: ["query"] },
+    { name: "boj_github_search_issues", desc: "Search issues and PRs on GitHub", props: { query: { type: "string" } }, req: ["query"] },
+    { name: "boj_github_get_file", desc: "Get file contents from a repo", props: { owner: { type: "string" }, repo: { type: "string" }, path: { type: "string" }, ref: { type: "string" } }, req: ["owner", "repo", "path"] },
+    { name: "boj_github_graphql", desc: "Execute a GitHub GraphQL query", props: { query: { type: "string" }, variables: { type: "object" } }, req: ["query"] },
+  ];
+  for (const t of ghTools) {
+    tools.push({ name: t.name, description: t.desc, inputSchema: { type: "object", properties: t.props, required: t.req || [] } });
+  }
+
+  // GitLab API (real passthrough)
+  const glTools = [
+    { name: "boj_gitlab_list_projects", desc: "List your GitLab projects", props: { per_page: { type: "number" } } },
+    { name: "boj_gitlab_get_project", desc: "Get a GitLab project", props: { project_id: { type: "string", description: "Project ID or URL-encoded path" } }, req: ["project_id"] },
+    { name: "boj_gitlab_create_issue", desc: "Create a GitLab issue", props: { project_id: { type: "string" }, title: { type: "string" }, description: { type: "string" } }, req: ["project_id", "title"] },
+    { name: "boj_gitlab_list_issues", desc: "List GitLab project issues", props: { project_id: { type: "string" }, state: { type: "string", enum: ["opened", "closed", "all"] } }, req: ["project_id"] },
+    { name: "boj_gitlab_create_mr", desc: "Create a merge request", props: { project_id: { type: "string" }, title: { type: "string" }, source: { type: "string" }, target: { type: "string" } }, req: ["project_id", "title", "source"] },
+    { name: "boj_gitlab_list_mrs", desc: "List merge requests", props: { project_id: { type: "string" }, state: { type: "string", enum: ["opened", "closed", "merged", "all"] } }, req: ["project_id"] },
+    { name: "boj_gitlab_list_pipelines", desc: "List CI/CD pipelines", props: { project_id: { type: "string" } }, req: ["project_id"] },
+    { name: "boj_gitlab_setup_mirror", desc: "Set up a push mirror", props: { project_id: { type: "string" }, target_url: { type: "string" } }, req: ["project_id", "target_url"] },
+  ];
+  for (const t of glTools) {
+    tools.push({ name: t.name, description: t.desc, inputSchema: { type: "object", properties: t.props, required: t.req || [] } });
+  }
+
   // Research
   tools.push({
     name: "boj_research",
@@ -515,6 +698,36 @@ async function handleMessage(line) {
           sendResult(id, { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] });
           break;
         }
+        case "boj_github_list_repos":
+        case "boj_github_get_repo":
+        case "boj_github_create_issue":
+        case "boj_github_list_issues":
+        case "boj_github_get_issue":
+        case "boj_github_comment_issue":
+        case "boj_github_create_pr":
+        case "boj_github_list_prs":
+        case "boj_github_get_pr":
+        case "boj_github_merge_pr":
+        case "boj_github_search_code":
+        case "boj_github_search_issues":
+        case "boj_github_get_file":
+        case "boj_github_graphql": {
+          const result = await handleGitHubTool(toolName, args);
+          sendResult(id, { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] });
+          break;
+        }
+        case "boj_gitlab_list_projects":
+        case "boj_gitlab_get_project":
+        case "boj_gitlab_create_issue":
+        case "boj_gitlab_list_issues":
+        case "boj_gitlab_create_mr":
+        case "boj_gitlab_list_mrs":
+        case "boj_gitlab_list_pipelines":
+        case "boj_gitlab_setup_mirror": {
+          const result = await handleGitLabTool(toolName, args);
+          sendResult(id, { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] });
+          break;
+        }
         case "boj_research": {
           const result = await invokeCartridge("research-mcp", args);
           sendResult(id, { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] });