@craftsamo/agent-github 0.1.0 → 0.2.0

package/dist/opencode.js

@@ -4,6 +4,13 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/entry/package-root.ts
+import { dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+function packageRoot(bundleUrl) {
+  return dirname(dirname(fileURLToPath(bundleUrl)));
+}
+
 // node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/classic/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -20204,13 +20211,13 @@ async function ensureLabel(repo, name, ctx) {
 function isTypeFailure(error62) {
   return isToolError(error62) && TYPE_FAILURE_CODES.includes(error62.code) && TYPE_MENTION.test(error62.message);
 }
-async function withKindFallback(kind, placement, attempt) {
+async function withKindFallback(kind, placement, attempt2) {
   try {
-    return { placement, result: await attempt(placement) };
+    return { placement, result: await attempt2(placement) };
   } catch (error62) {
     if (placement.via !== "type" || !isTypeFailure(error62)) throw error62;
     const fallback = labelKind(kind);
-    return { placement: fallback, result: await attempt(fallback) };
+    return { placement: fallback, result: await attempt2(fallback) };
   }
 }
 async function kindFlags(placement, repo, ctx) {
@@ -20512,6 +20519,8 @@ async function readSubIssues(parent, ctx) {
 }
 
 // src/core/refs.ts
+import { realpath } from "node:fs/promises";
+import { isAbsolute, relative, sep } from "node:path";
 var DEFAULT_HOST = "github.com";
 var SSH_ALIAS_HOST = "ssh.github.com";
 var GIT_CONFIG_ENV = ["GIT_CONFIG_GLOBAL", "GIT_CONFIG_SYSTEM", "GIT_CONFIG_NOSYSTEM"];
@@ -20595,11 +20604,25 @@ function gitEnv() {
   }
   return { ...env, GIT_TERMINAL_PROMPT: "0" };
 }
-async function repoFromOrigin(cwd, signal) {
+async function isWithin(dir, root) {
+  try {
+    const path = relative(await realpath(root), await realpath(dir));
+    return path === "" || !(path === ".." || path.startsWith(`..${sep}`) || isAbsolute(path));
+  } catch {
+    return false;
+  }
+}
+async function repoFromOrigin(cwd, signal, ownDir) {
   const env = gitEnv();
-  const unresolved = (why) => invalid(
-    `Cannot tell which repository to use: ${why}. Run the call inside a clone of a GitHub repository, or pass \`repo\` as owner/name.`
+  const unresolved = (why, advice = "") => invalid(
+    `Cannot tell which repository to use: ${why}. Run the call inside a clone of a GitHub repository, or pass \`repo\` as owner/name.${advice}`
   );
+  if (ownDir !== void 0 && await isWithin(cwd, ownDir)) {
+    throw unresolved(
+      `${cwd} is where these tools are installed, not a project`,
+      " An issue can be given as `owner/repo#N`."
+    );
+  }
   let result;
   try {
     result = await exec(["git", "remote", "get-url", "origin"], { cwd, env, signal });
@@ -20614,7 +20637,10 @@ async function repoFromOrigin(cwd, signal) {
   return repo;
 }
 async function resolveRepo(repo, ctx) {
-  return repo === void 0 || repo.trim() === "" ? repoFromOrigin(ctx.cwd, ctx.signal) : parseRepo(repo);
+  return repo === void 0 || repo.trim() === "" ? repoFromOrigin(ctx.cwd, ctx.signal, ctx.ownDir) : parseRepo(repo);
+}
+function isBareNumber(ref) {
+  return BARE_NUMBER_PATTERN.test(ref.trim());
 }
 function parseNumber(digits, ref) {
   const number4 = Number.parseInt(digits, 10);
@@ -20665,10 +20691,9 @@ async function parseNumberRef(ref, repoArg, ctx, options = {}) {
 }
 
 // src/core/github/issue-refs.ts
-var BARE_NUMBER = /^#?\d+$/;
 async function resolveRelatedIssue(ref, target, ctx) {
   const text = ref.trim();
-  return parseNumberRef(text, BARE_NUMBER.test(text) ? target.full : void 0, ctx, { accept: "issue" });
+  return parseNumberRef(text, isBareNumber(text) ? target.full : void 0, ctx, { accept: "issue" });
 }
 function issueLabel(issue2) {
   return `${issue2.repo.full}#${issue2.number}`;
@@ -20696,6 +20721,10 @@ function defineTool(spec) {
   if (!(spec.output instanceof external_exports.ZodObject)) {
     throw new Error(`Tool "${spec.id}" must have an object output schema, since a result is an object.`);
   }
+  const unknownTarget = Object.keys(spec.targets ?? {}).find((name) => !Object.hasOwn(spec.input.shape, name));
+  if (unknownTarget !== void 0) {
+    throw new Error(`Tool "${spec.id}" declares the target "${unknownTarget}", which is not one of its arguments.`);
+  }
   return spec;
 }
 function knownIds(setting, ids, known) {
@@ -20788,6 +20817,7 @@ var StepErrors = class {
 // src/core/issues/write-support.ts
 var REPO_DESCRIPTION = "owner/name; defaults to the working tree's repository (its origin). Used for a bare number.";
 var ISSUE_DESCRIPTION = "The issue, as 12, #12, owner/repo#12 or its URL.";
+var ISSUE_TARGETS = { issue: "issue", repo: "repo" };
 var LIST_SYNTAX = /[,"\r\n]/;
 var URL_LINE = /^https?:\/\/\S+$/;
 function invalid2(message) {
@@ -20857,6 +20887,7 @@ var issueClose = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "overwrite",
+  targets: ISSUE_TARGETS,
   input: input2,
   output: output2,
   async execute(args, ctx) {
@@ -20913,6 +20944,7 @@ var issueComment = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "add",
+  targets: ISSUE_TARGETS,
   input: input3,
   output: output3,
   async execute(args, ctx) {
@@ -21030,6 +21062,7 @@ var issueCreate = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "add",
+  targets: { repo: "repo", parent: "issue", blocked_by: "issues" },
   input: input4,
   output: output4,
   async execute(args, ctx) {
@@ -21177,6 +21210,7 @@ var issueDevelop = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "idempotent",
+  targets: { ...ISSUE_TARGETS, branch_repo: "repo" },
   input: input5,
   output: output5,
   async execute(args, ctx) {
@@ -21324,6 +21358,7 @@ var issueEdit = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "overwrite",
+  targets: ISSUE_TARGETS,
   input: input6,
   output: output6,
   async execute(args, ctx) {
@@ -21348,14 +21383,14 @@ var issueEdit = defineTool({
     if (change.removeMilestone) flags.push("--remove-milestone");
     const named = new Set([...change.addLabels, ...change.removeLabels].map((label) => label.toLowerCase()));
     const swapped = (where) => where.via === "label" ? otherKindLabels(current?.labels ?? [], where.name).filter((label) => !named.has(label.toLowerCase())).flatMap((label) => ["--remove-label", label]) : [];
-    const attempt = async (where) => editIssue(
+    const attempt2 = async (where) => editIssue(
       target,
       issue2.number,
       where ? [...flags, ...await kindFlags(where, target, ctx), ...swapped(where)] : flags,
       ctx,
       body
     );
-    const applied = kind ? await withKindFallback(kind.name, kind.placement, attempt) : { placement: void 0, result: await attempt() };
+    const applied = kind ? await withKindFallback(kind.name, kind.placement, attempt2) : { placement: void 0, result: await attempt2() };
     return {
       repo: target.full,
       issue: issue2.number,
@@ -21682,6 +21717,16 @@ var issueRelate = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "idempotent",
+  targets: {
+    ...ISSUE_TARGETS,
+    parent: "issue",
+    add_sub_issues: "issues",
+    remove_sub_issues: "issues",
+    add_blocked_by: "issues",
+    remove_blocked_by: "issues",
+    add_blocking: "issues",
+    remove_blocking: "issues"
+  },
   input: input8,
   output: output8,
   async execute(args, ctx) {
@@ -21780,6 +21825,7 @@ var issueReopen = defineTool({
   ].join(" "),
   toolset: "issues",
   class: "overwrite",
+  targets: ISSUE_TARGETS,
   input: input9,
   output: output9,
   async execute(args, ctx) {
@@ -21810,18 +21856,71 @@ var ALL_TOOLS = [
   issueDevelop
 ];
 
-// src/entry/permission.ts
-var ANY_RESOURCE = "*";
-async function permissionResource(args, ctx) {
-  const repo = typeof args === "object" && args !== null ? args.repo : void 0;
-  if (repo !== void 0 && typeof repo !== "string") return ANY_RESOURCE;
+// src/core/targets.ts
+var ANY_TARGET = "*";
+var ISSUE_ARGUMENT = "issue";
+async function attempt(fn) {
   try {
-    return (await resolveRepo(repo, ctx)).full.toLowerCase();
+    return await fn();
   } catch (error62) {
     if (isAbortError(error62)) throw error62;
-    return ANY_RESOURCE;
+    return void 0;
   }
 }
+function isBlank(value) {
+  return typeof value === "string" && value.trim() === "";
+}
+function ownRepository(spec, args, ctx) {
+  const repo = args.repo;
+  const issue2 = args[ISSUE_ARGUMENT];
+  let pending;
+  async function resolve2() {
+    if (spec.targets?.[ISSUE_ARGUMENT] === "issue" && typeof issue2 === "string" && !isBareNumber(issue2)) {
+      const named = await attempt(() => parseNumberRef(issue2, void 0, ctx, { accept: "issue" }));
+      if (named) return named.repo;
+    }
+    if (repo !== void 0 && typeof repo !== "string") return void 0;
+    return attempt(() => resolveRepo(repo, ctx));
+  }
+  return () => pending ??= resolve2();
+}
+async function issueRepository(value, own2, ctx) {
+  if (typeof value !== "string") return void 0;
+  const bare = isBareNumber(value);
+  const repoArg = bare ? (await own2())?.full : void 0;
+  if (bare && repoArg === void 0) return void 0;
+  return attempt(async () => (await parseNumberRef(value, repoArg, ctx, { accept: "issue" })).repo);
+}
+async function targetRepository(kind, value, own2, ctx) {
+  if (kind !== "repo") return issueRepository(value, own2, ctx);
+  return typeof value === "string" ? attempt(() => parseRepo(value)) : void 0;
+}
+async function writeTargets(spec, args, ctx) {
+  const given3 = typeof args === "object" && args !== null ? args : {};
+  const own2 = ownRepository(spec, given3, ctx);
+  const found = /* @__PURE__ */ new Set();
+  const add = (repo) => found.add(repo ? repo.full.toLowerCase() : ANY_TARGET);
+  add(await own2());
+  for (const [name, kind] of Object.entries(spec.targets ?? {})) {
+    const value = given3[name];
+    if (value === void 0) continue;
+    if (kind === "issues" && !Array.isArray(value)) {
+      add(void 0);
+      continue;
+    }
+    for (const item of kind === "issues" ? value : [value]) {
+      if (!isBlank(item)) add(await targetRepository(kind, item, own2, ctx));
+    }
+  }
+  const repos = [...found].filter((repo) => repo !== ANY_TARGET).sort();
+  return found.has(ANY_TARGET) ? [...repos, ANY_TARGET] : repos;
+}
+
+// src/entry/permission.ts
+var ANY_RESOURCE = ANY_TARGET;
+function permissionResources(spec, args, ctx) {
+  return writeTargets(spec, args, ctx);
+}
 
 // src/entry/settings.ts
 var ALL_TOOLSETS = "all";
@@ -21910,11 +22009,14 @@ function settingsFromOptions(options, env) {
 }
 
 // src/opencode/shared.ts
-function permissionMessage(spec, resource) {
-  return resource === ANY_RESOURCE ? spec.title : `${spec.title} on ${resource}`;
+function permissionMessage(spec, resources) {
+  return resources.length === 1 && resources[0] === ANY_RESOURCE ? spec.title : `${spec.title} on ${resources.join(", ")}`;
+}
+function persistableResources(resources) {
+  return resources.filter((resource) => resource !== ANY_RESOURCE);
 }
-function permissionMetadata(spec, args, resource) {
-  return { arguments: args, class: spec.class, message: permissionMessage(spec, resource) };
+function permissionMetadata(spec, args, resources) {
+  return { arguments: args, class: spec.class, message: permissionMessage(spec, resources) };
 }
 function needsPermission(spec) {
   return spec.class !== "read";
@@ -21952,19 +22054,19 @@ ${lines.join("\n")}` : "";
 function workingDir(context) {
   return context.worktree && context.worktree !== "/" ? context.worktree : context.directory;
 }
-function v1Tool(spec) {
+function v1Tool(spec, ownDir) {
   return {
     description: `${spec.description}${describeArguments(spec)}`,
     args: spec.input.shape,
     async execute(args, context) {
-      const ctx = { cwd: workingDir(context), signal: context.abort };
+      const ctx = { cwd: workingDir(context), ownDir, signal: context.abort };
       if (needsPermission(spec)) {
-        const resource = await permissionResource(args, ctx);
+        const resources = await permissionResources(spec, args, ctx);
         await context.ask({
           permission: spec.id,
-          patterns: [resource],
-          always: [resource],
-          metadata: permissionMetadata(spec, args, resource)
+          patterns: resources,
+          always: persistableResources(resources),
+          metadata: permissionMetadata(spec, args, resources)
         });
       }
       const result = await runTool(spec, args, ctx);
@@ -21975,7 +22077,7 @@ function v1Tool(spec) {
 function createV1Server(specs, deps = {}) {
   return async function server(_input, options) {
     const tool = {};
-    for (const spec of selectedTools(specs, options, deps.env)) tool[spec.id] = v1Tool(spec);
+    for (const spec of selectedTools(specs, options, deps.env)) tool[spec.id] = v1Tool(spec, deps.ownDir);
     return { tool };
   };
 }
@@ -21983,7 +22085,7 @@ function createV1Server(specs, deps = {}) {
 // src/opencode/skills.ts
 import { readFile, readdir } from "node:fs/promises";
 import { join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var SKILL_FILE = "SKILL.md";
 var FRONTMATTER = /^---[ \t]*\r?\n([\s\S]*?\r?\n)?---[ \t]*(?:\r?\n|$)/;
 var KEY_LINE = /^(name|description)[ \t]*:[ \t]*(.*?)[ \t]*$/;
@@ -22043,7 +22145,7 @@ async function readSkillFile(path) {
   }
 }
 async function loadSkills(dir) {
-  const root = resolve(typeof dir === "string" ? dir : fileURLToPath(dir));
+  const root = resolve(typeof dir === "string" ? dir : fileURLToPath2(dir));
   let entries;
   try {
     entries = (await readdir(root, { withFileTypes: true })).filter((entry) => !entry.isFile()).map((entry) => entry.name);
@@ -22070,7 +22172,7 @@ async function sessionDirectory(ctx, sessionID) {
     return void 0;
   }
 }
-function v2Tool(ctx, spec) {
+function v2Tool(ctx, spec, ownDir) {
   return {
     name: spec.id,
     description: spec.description,
@@ -22084,23 +22186,23 @@ function v2Tool(ctx, spec) {
             `invalid_argument: The session's directory could not be read, so ${spec.id} cannot tell which repository it changes; pass \`repo\` as owner/name or retry.`
           );
         }
-        const resource = await permissionResource(input10, { cwd: directory, signal });
+        const resources = await permissionResources(spec, input10, { cwd: directory, ownDir, signal });
         await ctx.permission.assert({
           action: spec.id,
-          resources: [resource],
-          save: [resource],
-          metadata: permissionMetadata(spec, input10, resource),
+          resources,
+          save: persistableResources(resources),
+          metadata: permissionMetadata(spec, input10, resources),
           sessionID
         });
       }
-      const result = await runTool(spec, input10, { cwd: directory ?? process.cwd(), signal });
+      const result = await runTool(spec, input10, { cwd: directory ?? process.cwd(), ownDir, signal });
       return { content: JSON.stringify(result), output: result };
     }
   };
 }
 function createV2Setup(specs, deps = {}) {
   return async function setup(ctx) {
-    const tools = selectedTools(specs, ctx.options, deps.env).map((spec) => v2Tool(ctx, spec));
+    const tools = selectedTools(specs, ctx.options, deps.env).map((spec) => v2Tool(ctx, spec, deps.ownDir));
     const skills = deps.skillsDir === void 0 ? [] : await loadSkills(deps.skillsDir);
     if (tools.length > 0) {
       await ctx.tool.transform((editor) => {
@@ -22118,10 +22220,11 @@ function createV2Setup(specs, deps = {}) {
 // src/opencode/index.ts
 var PLUGIN_ID = "agent-github";
 var SKILLS_DIR = new URL("../skills/", import.meta.url);
+var OWN_DIR = packageRoot(import.meta.url);
 var plugin = {
   id: PLUGIN_ID,
-  setup: createV2Setup(ALL_TOOLS, { skillsDir: SKILLS_DIR }),
-  server: createV1Server(ALL_TOOLS)
+  setup: createV2Setup(ALL_TOOLS, { skillsDir: SKILLS_DIR, ownDir: OWN_DIR }),
+  server: createV1Server(ALL_TOOLS, { ownDir: OWN_DIR })
 };
 var index_default = plugin;
 export {

package/mcp.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
   "mcpServers": {
-    "github": {
+    "agent-github": {
       "type": "stdio",
       "command": "node",
       "args": ["${PLUGIN_ROOT}/dist/mcp.js"]

package/mcp_config.json

@@ -1,6 +1,6 @@
 {
   "mcpServers": {
-    "github": {
+    "agent-github": {
       "command": "node",
       "args": ["${PLUGIN_ROOT}/dist/mcp.js"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@craftsamo/agent-github",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "GitHub tools for coding agents: issues, project boards, pull requests, repositories, releases and Actions.",
   "author": "craftsamo",
   "license": "MIT",
@@ -26,6 +26,7 @@
     "skills",
     "plugin.json",
     "mcp.json",
+    ".mcp.json",
     ".claude-plugin",
     ".agents/plugins",
     ".antigravity-plugin",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "agent-github",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "GitHub tools for coding agents: issues, project boards, pull requests, repositories, releases and Actions.",
   "author": {
     "name": "craftsamo",

package/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-github
-version: 0.1.0
+version: 0.2.0
 description: "GitHub tools for coding agents: issues, project boards, pull requests, repositories, releases and Actions."
 manifest_version: 1
 requires_hermes: ">=0.22"

package/src/hermes/agent_github_hermes/approval.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import uuid
 from collections.abc import Callable
 from typing import Any
 
@@ -13,25 +14,27 @@ from .runtime import Runtime, agent_cwd
 #: How long ``target`` may take, in seconds. Hermes stops a ``pre_tool_call`` hook after 30 s and blocks the call.
 TARGET_TIMEOUT_SECONDS = 20
 
-#: What an approval rule matches when the repository a call targets cannot be told.
+#: What an approval rule matches when a repository a call writes to cannot be told.
 ANY_RESOURCE = "*"
 
 #: The Hermes hook that can hold a tool call for the person's approval.
 HOOK_NAME = "pre_tool_call"
 
 
-def resolve_target(runtime: Runtime, tool_id: str, args: Any) -> str:
-    """The repository a call acts on, in lowercase, or ``*`` when it cannot be told."""
+def resolve_resources(runtime: Runtime, tool_id: str, args: Any) -> list[str]:
+    """The repositories a call writes to, in lowercase, or ``["*"]`` when they cannot be told."""
     try:
         result = runtime.run(
             ["target", tool_id, "--cwd", agent_cwd()],
             stdin=json.dumps(args if isinstance(args, dict) else {}),
             timeout=TARGET_TIMEOUT_SECONDS,
         )
-        resource = json.loads(result.stdout).get("resource") if result.code == 0 else None
-    except Exception:  # an approval is asked for either way; only its resource is lost
-        return ANY_RESOURCE
-    return resource if isinstance(resource, str) and resource else ANY_RESOURCE
+        resources = json.loads(result.stdout).get("resources") if result.code == 0 else None
+    except Exception:  # an approval is asked for either way; only its resources are lost
+        return [ANY_RESOURCE]
+    if isinstance(resources, list) and resources and all(isinstance(item, str) and item for item in resources):
+        return resources
+    return [ANY_RESOURCE]
 
 
 def make_hook(runtime: Runtime, tools: list[ToolInfo]) -> Callable[..., dict[str, str] | None]:
@@ -46,13 +49,14 @@ def make_hook(runtime: Runtime, tools: list[ToolInfo]) -> Callable[..., dict[str
         tool = by_id.get(tool_name)
         if tool is None or tool.write_class == READ_CLASS:
             return None
-        resource = resolve_target(runtime, tool.id, args)
-        subject = tool.title if resource == ANY_RESOURCE else f"{tool.title} on {resource}"
-        return {
-            "action": "approve",
-            "message": f"{subject} ({tool.id})",
-            "rule_key": f"agent-github:{tool.id}:{resource}",
-        }
+        resources = resolve_resources(runtime, tool.id, args)
+        subject = tool.title if resources == [ANY_RESOURCE] else f"{tool.title} on {', '.join(resources)}"
+        rule_key = f"agent-github:{tool.id}:{','.join(resources)}"
+        if ANY_RESOURCE in resources:
+            # Hermes falls back to the bare tool name for a missing rule_key, which an "always" would turn into a
+            # grant for every repository; a key no later call repeats leaves nothing reusable.
+            rule_key = f"{rule_key}:once-{uuid.uuid4().hex}"
+        return {"action": "approve", "message": f"{subject} ({tool.id})", "rule_key": rule_key}
 
     return hook