Merge branch 'main' into feat/dotenv-support

Author: demetrio.marino

.devcontainer/devcontainer.json

@@ -1,9 +1,9 @@
 {
   "name": "Node.js",
-  "image": "mcr.microsoft.com/devcontainers/javascript-node:1-22-bookworm",
+  "image": "mcr.microsoft.com/devcontainers/javascript-node:3-22-bookworm",
   "features": {
     "ghcr.io/devcontainers/features/docker-in-docker:2": {
-      "moby": true,
+      "moby": false,
       "installDockerComposeSwitch": false
     }
   },

.github/workflows/build-and-test.yaml

@@ -78,18 +78,18 @@ jobs:
       with:
         show-progress: false
     - name: Docker Login to GitHub Repository
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: Docker Login to DockerHub
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
       with:
         username: ${{ secrets.BOT_DOCKER_USERNAME }}
         password: ${{ secrets.BOT_DOCKER_TOKEN }}
     - name: Docker Login to Mia registry
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
       with:
         registry: nexus.mia-platform.eu
         username: ${{ secrets.NEXUS_USER }}
@@ -100,7 +100,7 @@ jobs:
         platforms: amd64,arm64
     - name: Configure Docker Metadata
       id: meta
-      uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+      uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
       env:
         DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
       with:
@@ -139,7 +139,7 @@ jobs:
         cache-from: type=gha
         cache-to: type=gha,mode=max
     - name: Install Cosign
-      uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
+      uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
       if: github.ref_type == 'tag'
     - name: GCP Auth
       uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
@@ -149,7 +149,7 @@ jobs:
         workload_identity_provider: ${{ secrets.MIA_PLATFORM_WIF }}
         create_credentials_file: true
     - name: Generate SBOM
-      uses: anchore/sbom-action@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # v0.20.2
+      uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
       if: github.ref_type == 'tag'
       with:
         artifact-name: mcp-server-sbom.spdx.json

.github/workflows/codeql.yaml

@@ -27,8 +27,8 @@ jobs:
       with:
         show-progress: false
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+      uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
       with:
         languages: javascript-typescript
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+      uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0

.github/workflows/depedency-review.yaml

@@ -21,7 +21,7 @@ jobs:
       with:
         show-progress: false
     - name: Dependency Review
-      uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
+      uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
       with:
         fail-on-severity: high
         fail-on-scopes: development,runtime,unknown

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22.17.1-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59 AS builder
+FROM node:22.19.0-alpine@sha256:67bb653363ee5f3aa8b132cb3f800f202bb5fb244f7cf0669225737ee84d30cd AS builder
 
 WORKDIR /app
 
@@ -13,7 +13,7 @@ RUN npm run build
 RUN --mount=type=cache,target=/root/.npm npm ci --omit=dev --ignore-scripts
 RUN rm -fr src tsconfig.* package-lock.json
 
-FROM node:22.17.1-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59
+FROM node:22.19.0-alpine@sha256:67bb653363ee5f3aa8b132cb3f800f202bb5fb244f7cf0669225737ee84d30cd
 
 WORKDIR /app
 

docs/20_setup.md

@@ -5,13 +5,24 @@
 ### Prerequisites
 
 1. To run the server in a container, you will need to have [Docker] installed.
-2. Once Docker is installed, you will also need to ensure Docker is running.
-3. Pull the docker image `docker pull ghcr.io/mia-platform/console-mcp-server`
-4. Login to Mia-Platform. You have two options:
-  - (a) *User Authentication* - Use miactl authentication: if you have [`miactl`][miactl] installed you can login and
-     the same session will then be used by the mcp server to authenticate. To login just type `miactl company list`, or any other miactl command, the browser will be opened and you can use your credentatials to login. You will be able to access to all companies and projects that have been granted to your user.
-  - (b) *Service Account* - [Create a Mia-Platform Service Account] with `Client Secret Basic` authorization mode (the only one supported at this time) the `Client Secret Basic` one. In that case you can access to just one company at a time.
-    
+1. Once Docker is installed, you will also need to ensure Docker is running.
+1. Pull the docker image `docker pull ghcr.io/mia-platform/console-mcp-server`
+1. Login to Mia-Platform. You have two options:
+    - (a) *User Authentication* - Use miactl authentication: if you have [`miactl`][miactl] installed you can login and
+      the same session will then be used by the mcp server to authenticate. To login just type `miactl company list`,
+      or any other miactl command, the browser will be opened and you can use your credentials to login. You will be
+      able to access to all companies and projects that have been granted to your user.
+    - (b) *Service Account* - [Create a Mia-Platform Service Account] with `Client Secret Basic` authorization mode
+      (the only one supported at this time) the `Client Secret Basic` one. In that case you can access to just one
+      company at a time.
+
+> [!WARNING]
+> When using miactl session, auto-refresh by the MCP Server is not currently supported,
+> once the session created with miactl expires you have to refresh it with miactl again.
+---
+> [!IMPORTANT]
+> When using miactl session, the host you provide to the MCP Server **MUST** be the exact same as the one
+> you have logged in with miactl, including scheme and any possible trailing slash.
 
 ### VS Code
 
@@ -26,7 +37,7 @@ The `mcp` key is not needed in the `.vscode/mcp.json` file.
 Also note that you can change the host of the Console instance to your custom installation
 :::
 
-This is the configuration if you are using mictl (a)
+This is the configuration if you are using miactl (a)
 
 ```json
 {
@@ -52,7 +63,6 @@ This is the configuration if you are using mictl (a)
 }
 ```
 
-
 This is the configuration if you are using Service Account (b)
 
 ```json
@@ -139,6 +149,41 @@ More about using MCP server tools in [VS Code's agent mode documentation].
 }
 ```
 
+### Gemini CLI
+
+Add `mia-platform-console` in `mcpServers` in file `~/.gemini/settings.json`.
+
+```json
+{
+  "mcpServers": {
+    "mia-platform-console": {
+      "command": "docker",
+      "args": [
+        "run",
+        "-i",
+        "--rm",
+        "-e",
+        "MIA_PLATFORM_CLIENT_ID",
+        "-e",
+        "MIA_PLATFORM_CLIENT_SECRET",
+        "ghcr.io/mia-platform/console-mcp-server",
+        "mcp-server",
+        "start",
+        "--stdio",
+        "--host=https://console.cloud.mia-platform.eu"
+      ],
+      "env": {
+        "MIA_PLATFORM_CLIENT_ID": "<YOUR_CLIENT_ID>",
+        "MIA_PLATFORM_CLIENT_SECRET": "<YOUR_CLIEND_SECRET>"
+      }
+    }
+    ...
+  }
+  ...
+}
+```
+
 [Docker]: https://www.docker.com/
 [miactl]: https://github.com/mia-platform/miactl
 [VS Code's agent mode documentation]: https://code.visualstudio.com/docs/copilot/chat/mcp-servers
+[Create a Mia-Platform Service Account]: https://docs.mia-platform.eu/docs/development_suite/identity-and-access-management/manage-service-accounts

eslint.config.mjs

@@ -64,7 +64,7 @@ export default tseslint.config(
         'error',
         'single',
         {
-          allowTemplateLiterals: true,
+          allowTemplateLiterals: "always",
         },
       ],
       '@stylistic/quote-props': [