Skip to content

feat(mcp): adds WebSocket relay hybrid MCP server (Option D)#57

Merged
wgordon17 merged 10 commits intogordon-code:mainfrom
wgordon17:worktree-mcp-server-option-d
Apr 8, 2026
Merged

feat(mcp): adds WebSocket relay hybrid MCP server (Option D)#57
wgordon17 merged 10 commits intogordon-code:mainfrom
wgordon17:worktree-mcp-server-option-d

Conversation

@wgordon17
Copy link
Copy Markdown
Member

Summary

  • Implements a WebSocket relay hybrid MCP server with 6 tools, 2 resources, and Octokit fallback for when the SPA is closed
  • Extracts shared types, schemas, and utilities to src/shared/ with TypeScript project references for the Node.js/browser compilation boundary
  • Adds SPA relay client with Settings toggle, CSP updates, and config sync over JSON-RPC 2.0

- Aligns fine-grained PAT permissions across all 4 doc surfaces
- Documents direct API mode limitations for failing/approved filters
- Adds owner/repo format note, scope default, GITHUB_TOKEN safety net
- Fixes needs_review filter in direct mode (review-requested: qualifier)
- Parallelizes dashboard summary API calls with Promise.allSettled
- Adds VALID_TRACKED_LOGIN regex validation to TrackedUserSchema
- Widens CSP connect-src to ws://127.0.0.1:* for configurable ports
- Improves publish workflow with job-level permissions (least privilege)
- Fixes relay snapshot effect to track lastRefreshedAt (excludes hot poll)
- Removes BUG/FIX/PERF/SEC/UI comment labels throughout MCP codebase
- Adds unit tests for octokit client and MCP resources
@wgordon17 wgordon17 force-pushed the worktree-mcp-server-option-d branch from 679be73 to 514e6d3 Compare April 8, 2026 00:28
- replaces softprops/action-gh-release with gh CLI
- switches npm publish to OIDC trusted publishing
- updates workflow trigger to match pnpm version tag format
- deduplicates MCP docs from root README into mcp/README.md
- uses claude mcp add CLI instead of manual JSON editing
- adds npx @latest for cached version freshness
- documents release process and first-publish setup
- adds MCP opt-in callout to user guide
- removes Metadata (read) from fine-grained PAT docs
- drops ws://localhost:* from CSP (relay binds 127.0.0.1 only)
- removes empty pnpm config from package.json
@wgordon17 wgordon17 merged commit 5965ecf into gordon-code:main Apr 8, 2026
1 check passed
@wgordon17 wgordon17 deleted the worktree-mcp-server-option-d branch April 8, 2026 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant