@imenam/mcp-github 1.1.53 → 1.1.55

package/dist/__tests__/git-proxy/pkt-line.test.js

@@ -0,0 +1,93 @@
+import { describe, it, expect } from "vitest";
+import { buildRefusalReport, checkRefUpdates, FLUSH_PKT, GitProtocolError, parseReceivePackCommands, pktLine, } from "../../git-proxy/pkt-line.js";
+const A = "a".repeat(40);
+const B = "b".repeat(40);
+const ZERO = "0".repeat(40);
+function commands(lines, trailing = "PACK...") {
+    return Buffer.concat([...lines.map((l) => pktLine(l)), FLUSH_PKT, Buffer.from(trailing)]);
+}
+describe("parseReceivePackCommands", () => {
+    it("lit les commandes et les capacités jusqu'au flush-pkt", () => {
+        const buf = commands([
+            `${A} ${B} refs/heads/feature\0report-status side-band-64k agent=git/2.44\n`,
+            `${ZERO} ${B} refs/heads/other\n`,
+        ]);
+        const result = parseReceivePackCommands(buf);
+        expect(result).toEqual({
+            complete: true,
+            request: {
+                updates: [
+                    { oldId: A, newId: B, ref: "refs/heads/feature" },
+                    { oldId: ZERO, newId: B, ref: "refs/heads/other" },
+                ],
+                capabilities: ["report-status", "side-band-64k", "agent=git/2.44"],
+            },
+        });
+    });
+    it("rend complete: false tant que le flush-pkt n'est pas reçu", () => {
+        const full = commands([`${A} ${B} refs/heads/feature\0report-status\n`]);
+        for (let cut = 0; cut < full.length - "PACK...".length; cut++) {
+            expect(parseReceivePackCommands(full.subarray(0, cut)).complete).toBe(false);
+        }
+    });
+    it("ignore les lignes shallow", () => {
+        const buf = commands([`shallow ${A}\n`, `${A} ${B} refs/heads/feature\0report-status\n`]);
+        const result = parseReceivePackCommands(buf);
+        expect(result.complete && result.request.updates).toHaveLength(1);
+    });
+    it("accepte les identifiants SHA-256", () => {
+        const buf = commands([`${"c".repeat(64)} ${"d".repeat(64)} refs/heads/feature\0report-status\n`]);
+        const result = parseReceivePackCommands(buf);
+        expect(result.complete && result.request.updates[0].ref).toBe("refs/heads/feature");
+    });
+    it("refuse un push signé (push-cert)", () => {
+        const buf = commands(["push-cert\0report-status\n"]);
+        expect(() => parseReceivePackCommands(buf)).toThrow(GitProtocolError);
+    });
+    it("refuse un en-tête pkt-line invalide", () => {
+        expect(() => parseReceivePackCommands(Buffer.from("zzzz"))).toThrow(GitProtocolError);
+        expect(() => parseReceivePackCommands(Buffer.from("0002"))).toThrow(GitProtocolError);
+    });
+});
+describe("checkRefUpdates", () => {
+    it("autorise une mise à jour ou une création de la branche cible", () => {
+        expect(checkRefUpdates([{ oldId: A, newId: B, ref: "refs/heads/feature" }], "feature")).toEqual([]);
+        expect(checkRefUpdates([{ oldId: ZERO, newId: B, ref: "refs/heads/feature" }], "feature")).toEqual([]);
+    });
+    it("refuse toute autre branche", () => {
+        const refusals = checkRefUpdates([{ oldId: A, newId: B, ref: "refs/heads/master" }], "feature");
+        expect(refusals).toEqual([{ ref: "refs/heads/master", reason: "seule la branche feature est autorisée" }]);
+    });
+    it("refuse les tags et les refs hors refs/heads", () => {
+        expect(checkRefUpdates([{ oldId: ZERO, newId: B, ref: "refs/tags/feature" }], "feature")).toHaveLength(1);
+        expect(checkRefUpdates([{ oldId: ZERO, newId: B, ref: "feature" }], "feature")).toHaveLength(1);
+    });
+    it("refuse la suppression de la branche cible", () => {
+        const refusals = checkRefUpdates([{ oldId: A, newId: ZERO, ref: "refs/heads/feature" }], "feature");
+        expect(refusals[0].reason).toContain("suppression");
+    });
+    it("refuse tout le push si une seule commande est interdite", () => {
+        const refusals = checkRefUpdates([
+            { oldId: A, newId: B, ref: "refs/heads/feature" },
+            { oldId: A, newId: B, ref: "refs/heads/master" },
+        ], "feature");
+        expect(refusals.map((r) => r.ref)).toEqual(["refs/heads/feature", "refs/heads/master"]);
+    });
+});
+describe("buildRefusalReport", () => {
+    const refusals = [{ ref: "refs/heads/master", reason: "interdit" }];
+    it("rend null si le client n'a pas demandé de rapport", () => {
+        expect(buildRefusalReport(refusals, ["side-band-64k"])).toBeNull();
+    });
+    it("produit un rapport report-status brut", () => {
+        const report = buildRefusalReport(refusals, ["report-status"]);
+        expect(report.toString()).toBe("000eunpack ok\n0022ng refs/heads/master interdit\n0000");
+    });
+    it("encapsule le rapport dans la bande 1 quand side-band-64k est négocié", () => {
+        const report = buildRefusalReport(refusals, ["report-status", "side-band-64k"]);
+        const inner = "000eunpack ok\n0022ng refs/heads/master interdit\n0000";
+        const expected = Buffer.concat([pktLine(Buffer.concat([Buffer.from([1]), Buffer.from(inner)])), FLUSH_PKT]);
+        expect(report.equals(expected)).toBe(true);
+    });
+});
+//# sourceMappingURL=pkt-line.test.js.map

package/dist/__tests__/git-proxy/pkt-line.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkt-line.test.js","sourceRoot":"","sources":["../../../src/__tests__/git-proxy/pkt-line.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,OAAO,GACR,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5B,SAAS,QAAQ,CAAC,KAAe,EAAE,QAAQ,GAAG,SAAS;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,mEAAmE;YAC5E,GAAG,IAAI,IAAI,CAAC,qBAAqB;SAClC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE;oBACjD,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE;iBACnD;gBACD,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC;aACnE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACzE,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9D,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAChG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACpG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE;YACjD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE;SACjD,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,QAAQ,GAAG,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAEpE,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,CAAE,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,CAAE,CAAC;QACjF,MAAM,KAAK,GAAG,wDAAwD,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/git-proxy/proxy.e2e.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proxy.e2e.test.d.ts.map

package/dist/__tests__/git-proxy/proxy.e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.e2e.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/git-proxy/proxy.e2e.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/git-proxy/proxy.e2e.test.js

@@ -0,0 +1,206 @@
+/**
+ * Proxy git de bout en bout : un vrai client git parle au proxy, qui relaie vers un
+ * faux GitHub (`git http-backend` servi en CGI) hébergeant owner/repo.git.
+ */
+import { describe, it, expect, vi, beforeAll, afterAll } from "vitest";
+vi.mock("../../logger.js", () => ({ logToFile: vi.fn() }));
+import http from "http";
+import fs from "fs";
+import os from "os";
+import path from "path";
+import { spawn } from "child_process";
+import { createGitProxyServer } from "../../git-proxy/server.js";
+const TOKEN = "ghp_secret_du_proxy";
+/** git en asynchrone : le proxy et le faux GitHub tournent dans ce même process. */
+function git(cwd, ...args) {
+    return new Promise((resolve) => {
+        const child = spawn("git", ["-c", "user.name=test", "-c", "user.email=test@example.com", ...args], {
+            cwd,
+            env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (c) => { stdout += c; });
+        child.stderr.on("data", (c) => { stderr += c; });
+        child.on("close", (status) => resolve({ status, stdout, stderr }));
+    });
+}
+async function gitOk(cwd, ...args) {
+    const result = await git(cwd, ...args);
+    if (result.status !== 0)
+        throw new Error(`git ${args.join(" ")} : ${result.stderr}`);
+    return result.stdout.trim();
+}
+/** Faux GitHub : chaque requête est confiée à `git http-backend` (CGI). */
+function startFakeGitHub(projectRoot, calls) {
+    const server = http.createServer((req, res) => {
+        const url = new URL(req.url ?? "/", "http://github.local");
+        calls.push({ method: req.method ?? "", path: url.pathname, authorization: req.headers.authorization });
+        if (req.headers.authorization !== `Basic ${Buffer.from(`x-access-token:${TOKEN}`).toString("base64")}`) {
+            req.resume();
+            res.writeHead(401, { "www-authenticate": 'Basic realm="GitHub"' });
+            res.end();
+            return;
+        }
+        const env = {
+            ...process.env,
+            GIT_PROJECT_ROOT: projectRoot,
+            GIT_HTTP_EXPORT_ALL: "1",
+            REMOTE_USER: "test",
+            PATH_INFO: url.pathname,
+            QUERY_STRING: url.search.slice(1),
+            REQUEST_METHOD: req.method ?? "GET",
+            CONTENT_TYPE: req.headers["content-type"] ?? "",
+        };
+        if (req.headers["content-length"])
+            env.CONTENT_LENGTH = req.headers["content-length"];
+        if (req.headers["content-encoding"])
+            env.HTTP_CONTENT_ENCODING = req.headers["content-encoding"];
+        if (req.headers["git-protocol"])
+            env.GIT_PROTOCOL = req.headers["git-protocol"];
+        const cgi = spawn("git", ["http-backend"], { env });
+        req.pipe(cgi.stdin);
+        let head = Buffer.alloc(0);
+        let headersDone = false;
+        cgi.stdout.on("data", (chunk) => {
+            if (headersDone)
+                return void res.write(chunk);
+            head = Buffer.concat([head, chunk]);
+            const end = head.indexOf("\r\n\r\n");
+            if (end < 0)
+                return;
+            headersDone = true;
+            let status = 200;
+            const headers = {};
+            for (const line of head.subarray(0, end).toString("latin1").split("\r\n")) {
+                const colon = line.indexOf(":");
+                const key = line.slice(0, colon).trim();
+                const value = line.slice(colon + 1).trim();
+                if (key.toLowerCase() === "status")
+                    status = parseInt(value, 10);
+                else
+                    headers[key] = value;
+            }
+            res.writeHead(status, headers);
+            res.write(head.subarray(end + 4));
+        });
+        cgi.on("close", () => res.end());
+    });
+    return new Promise((resolve) => server.listen(0, "127.0.0.1", () => resolve(server)));
+}
+function listen(server) {
+    return new Promise((resolve) => server.listen(0, "127.0.0.1", () => resolve(server.address().port)));
+}
+describe("proxy git (bout en bout)", () => {
+    let root;
+    let bare;
+    let upstream;
+    let proxy;
+    let proxyUrl;
+    let work;
+    const calls = [];
+    const config = {
+        GITHUB_TOKEN: TOKEN,
+        TARGET_REPO: "owner/repo",
+        TARGET_BRANCH: "feature",
+        BASE_BRANCH: "main",
+        READ_ONLY: false,
+    };
+    beforeAll(async () => {
+        root = fs.mkdtempSync(path.join(os.tmpdir(), "git-proxy-e2e-"));
+        bare = path.join(root, "github", "owner", "repo.git");
+        fs.mkdirSync(bare, { recursive: true });
+        await gitOk(bare, "init", "--bare", "--initial-branch=main");
+        await gitOk(bare, "config", "http.receivepack", "true");
+        const seed = path.join(root, "seed");
+        fs.mkdirSync(seed);
+        await gitOk(seed, "init", "--initial-branch=main");
+        fs.writeFileSync(path.join(seed, "README.md"), "hello\n");
+        await gitOk(seed, "add", ".");
+        await gitOk(seed, "commit", "-m", "initial");
+        await gitOk(seed, "push", bare, "main");
+        upstream = await startFakeGitHub(path.join(root, "github"), calls);
+        const upstreamPort = upstream.address().port;
+        proxy = createGitProxyServer({ getConfig: () => config, upstreamOrigin: `http://127.0.0.1:${upstreamPort}` });
+        proxyUrl = `http://127.0.0.1:${await listen(proxy)}`;
+        work = path.join(root, "work");
+    }, 30_000);
+    afterAll(async () => {
+        await new Promise((r) => proxy.close(r));
+        await new Promise((r) => upstream.close(r));
+        fs.rmSync(root, { recursive: true, force: true });
+    });
+    it("clone toujours TARGET_REPO, quel que soit le chemin demandé, avec le token", async () => {
+        await gitOk(root, "clone", `${proxyUrl}/autre-owner/autre-depot.git`, work);
+        expect(fs.readFileSync(path.join(work, "README.md"), "utf8").trimEnd()).toBe("hello");
+        expect(calls.length).toBeGreaterThan(0);
+        expect(calls.every((c) => c.path.startsWith("/owner/repo.git/"))).toBe(true);
+        const expectedAuth = `Basic ${Buffer.from(`x-access-token:${TOKEN}`).toString("base64")}`;
+        expect(calls.every((c) => c.authorization === expectedAuth)).toBe(true);
+    }, 30_000);
+    it("laisse passer un push vers TARGET_BRANCH (création puis mise à jour)", async () => {
+        await gitOk(work, "checkout", "-b", "feature");
+        fs.writeFileSync(path.join(work, "a.txt"), "1\n");
+        await gitOk(work, "add", ".");
+        await gitOk(work, "commit", "-m", "a");
+        await gitOk(work, "push", "origin", "feature");
+        fs.writeFileSync(path.join(work, "a.txt"), "2\n");
+        await gitOk(work, "commit", "-am", "a2");
+        await gitOk(work, "push", "origin", "feature");
+        expect(await gitOk(bare, "rev-parse", "refs/heads/feature")).toBe(await gitOk(work, "rev-parse", "HEAD"));
+    }, 30_000);
+    it("refuse un push vers une autre branche, sans contacter GitHub", async () => {
+        const mainBefore = await gitOk(bare, "rev-parse", "refs/heads/main");
+        const receivePackCalls = () => calls.filter((c) => c.path.endsWith("/git-receive-pack")).length;
+        const before = receivePackCalls();
+        const result = await git(work, "push", "origin", "HEAD:main");
+        expect(result.status).not.toBe(0);
+        expect(result.stderr).toContain("remote rejected");
+        expect(result.stderr).toContain("seule la branche feature est autorisée");
+        expect(await gitOk(bare, "rev-parse", "refs/heads/main")).toBe(mainBefore);
+        expect(receivePackCalls()).toBe(before);
+    }, 30_000);
+    it("refuse la suppression de TARGET_BRANCH", async () => {
+        const result = await git(work, "push", "origin", "--delete", "feature");
+        expect(result.status).not.toBe(0);
+        expect(result.stderr).toContain("remote rejected");
+        expect(await gitOk(bare, "rev-parse", "refs/heads/feature")).toBe(await gitOk(work, "rev-parse", "HEAD"));
+    }, 30_000);
+    it("refuse un tag, même nommé comme la branche cible", async () => {
+        const result = await git(work, "push", "origin", "HEAD:refs/tags/feature");
+        expect(result.status).not.toBe(0);
+        expect((await git(bare, "rev-parse", "--verify", "refs/tags/feature")).status).not.toBe(0);
+    }, 30_000);
+    it("refuse tout push quand l'instance est en lecture seule", async () => {
+        config.READ_ONLY = true;
+        try {
+            fs.writeFileSync(path.join(work, "a.txt"), "3\n");
+            await gitOk(work, "commit", "-am", "a3");
+            const result = await git(work, "push", "origin", "feature");
+            expect(result.status).not.toBe(0);
+            expect(await gitOk(bare, "rev-parse", "refs/heads/feature")).not.toBe(await gitOk(work, "rev-parse", "HEAD"));
+        }
+        finally {
+            config.READ_ONLY = false;
+        }
+    }, 30_000);
+    it("rend un token refusé par GitHub comme une erreur du proxy, sans demande d'identifiants", async () => {
+        config.GITHUB_TOKEN = "ghp_revoque";
+        try {
+            const response = await fetch(`${proxyUrl}/repo.git/info/refs?service=git-upload-pack`);
+            expect(response.status).toBe(502);
+            expect(response.headers.get("www-authenticate")).toBeNull();
+            const result = await git(work, "fetch", "origin");
+            expect(result.status).not.toBe(0);
+            expect(result.stderr).toContain("502");
+        }
+        finally {
+            config.GITHUB_TOKEN = TOKEN;
+        }
+    }, 30_000);
+    it("fetch à travers le proxy", async () => {
+        await gitOk(work, "fetch", "origin");
+        expect(await gitOk(work, "rev-parse", "origin/main")).toBe(await gitOk(bare, "rev-parse", "refs/heads/main"));
+    }, 30_000);
+});
+//# sourceMappingURL=proxy.e2e.test.js.map

package/dist/__tests__/git-proxy/proxy.e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.e2e.test.js","sourceRoot":"","sources":["../../../src/__tests__/git-proxy/proxy.e2e.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAQpC,oFAAoF;AACpF,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,IAAI,CAAC,EAAE;YACjG,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAW,EAAE,GAAG,IAAc;IACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,2EAA2E;AAC3E,SAAS,eAAe,CAAC,WAAmB,EAAE,KAAqB;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACvG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACvG,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAsB;YAC7B,GAAG,OAAO,CAAC,GAAG;YACd,gBAAgB,EAAE,WAAW;YAC7B,mBAAmB,EAAE,GAAG;YACxB,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,cAAc,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;YACnC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE;SAChD,CAAC;QACF,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtF,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAAE,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAW,CAAC;QAE1F,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEpB,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACtC,IAAI,WAAW;gBAAE,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO;YACpB,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ;oBAAE,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;;oBAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC5B,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAE,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,IAAY,CAAC;IACjB,IAAI,QAAqB,CAAC;IAC1B,IAAI,KAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,IAAY,CAAC;IACjB,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG;QACb,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,YAAY;QACzB,aAAa,EAAE,SAAS;QACxB,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,KAAK;KACP,CAAC;IAEZ,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAC7D,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACnD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAExC,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,YAAY,GAAI,QAAQ,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QAC9D,KAAK,GAAG,oBAAoB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,oBAAoB,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9G,QAAQ,GAAG,oBAAoB,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAE5E,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE/C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE/C,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5G,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACrE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5G,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAChH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,CAAC,YAAY,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,6CAA6C,CAAC,CAAC;YACvF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAChH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/dist/__tests__/handlers/agent-git.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-git.test.d.ts.map

package/dist/__tests__/handlers/agent-git.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-git.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/handlers/agent-git.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/handlers/agent-git.test.js

@@ -0,0 +1,124 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+vi.mock("../../logger.js", () => ({ logToFile: vi.fn() }));
+vi.mock("../../utils/config.js", () => ({ getConfig: vi.fn() }));
+import { getConfig } from "../../utils/config.js";
+import { EXEC_ARG, EXEC_META } from "../../gateway-exec/session.js";
+import { handleAgentGitTool } from "../../handlers/agent-git.js";
+const mockGetConfig = vi.mocked(getConfig);
+const makeConfig = (overrides = {}) => ({
+    GITHUB_TOKEN: "ghp_secret",
+    TARGET_REPO: "owner/repo",
+    TARGET_BRANCH: "feature",
+    BASE_BRANCH: "main",
+    READ_ONLY: false,
+    REPO_PATH: "",
+    ...overrides,
+});
+/**
+ * Faux relais agent : répond à chaque étape avec `answer`, rappelle l'outil jusqu'au
+ * résultat final et rend toutes les étapes demandées.
+ */
+async function drive(name, args, answer, gatewayToken = true) {
+    const announcement = { version: 1, cwd: "/agent", gatewayToken };
+    const steps = [];
+    let payload = { ...args, [EXEC_ARG]: announcement };
+    for (let round = 0; round < 20; round++) {
+        const result = await handleAgentGitTool(name, payload, getConfig());
+        const request = result._meta?.[EXEC_META];
+        if (!request)
+            return { result, steps };
+        const results = [];
+        for (const step of request.steps) {
+            steps.push(step);
+            const r = answer(step);
+            results.push(r);
+            if (r.code !== 0)
+                break;
+        }
+        payload = { [EXEC_ARG]: { ...announcement, continuation: { id: request.id, results } } };
+    }
+    throw new Error("trop d'allers-retours");
+}
+const ok = (stdout = "") => ({ code: 0, stdout, stderr: "" });
+/** Dépôt existant sur la branche `branch`, toutes les autres commandes réussissent. */
+function repoOn(branch) {
+    return (step) => {
+        if (step.args.includes("--git-dir"))
+            return ok(".git\n");
+        if (step.args.includes("--show-current"))
+            return ok(`${branch}\n`);
+        if (step.args.includes("--porcelain"))
+            return ok(" M a.txt\n");
+        return ok();
+    };
+}
+const saved = process.env.MCP_SERVER_ROUTE;
+beforeEach(() => {
+    vi.clearAllMocks();
+    process.env.MCP_SERVER_ROUTE = "/github";
+    mockGetConfig.mockReturnValue(makeConfig());
+});
+afterEach(() => {
+    if (saved === undefined)
+        delete process.env.MCP_SERVER_ROUTE;
+    else
+        process.env.MCP_SERVER_ROUTE = saved;
+});
+describe("outils git du rôle remote", () => {
+    it("pousse HEAD vers TARGET_BRANCH, par le proxy du gateway", async () => {
+        const { result, steps } = await drive("push", {}, repoOn("feature"));
+        expect(result.isError).toBeUndefined();
+        const push = steps.find((s) => s.args.includes("push"));
+        expect(push.command).toBe("git");
+        expect(push.args).toEqual(["-C", "repo", "push", "{{GATEWAY_URL}}/github/http/repo.git", "HEAD:feature"]);
+    });
+    it("passe le jeton du gateway par l'environnement, limité aux URL du gateway", async () => {
+        const { steps } = await drive("push", {}, repoOn("feature"));
+        for (const step of steps) {
+            expect(step.env).toMatchObject({
+                GIT_TERMINAL_PROMPT: "0",
+                GIT_CONFIG_COUNT: "1",
+                GIT_CONFIG_KEY_0: "http.{{GATEWAY_URL}}/.extraHeader",
+                GIT_CONFIG_VALUE_0: "Authorization: Bearer {{GATEWAY_TOKEN}}",
+            });
+            expect(JSON.stringify(step)).not.toContain("ghp_secret");
+        }
+    });
+    it("n'ajoute aucun en-tête quand le relais agent n'a pas de jeton", async () => {
+        const { steps } = await drive("push", {}, repoOn("feature"), false);
+        for (const step of steps)
+            expect(step.env).toEqual({ GIT_TERMINAL_PROMPT: "0" });
+    });
+    it("refuse de pousser depuis une autre branche que TARGET_BRANCH", async () => {
+        await expect(drive("push", {}, repoOn("main"))).rejects.toThrow('Branch mismatch: current branch is "main"');
+    });
+    it("refuse d'écrire en lecture seule, sans rien exécuter", async () => {
+        mockGetConfig.mockReturnValue(makeConfig({ READ_ONLY: true }));
+        await expect(drive("commit_and_push", { message: "m" }, repoOn("feature"))).rejects.toThrow("read-only");
+    });
+    it("refuse un dossier qui n'est pas la racine d'un dépôt", async () => {
+        const answer = (step) => (step.args.includes("--git-dir") ? ok("/agent/.git\n") : ok());
+        await expect(drive("check_status", {}, answer)).rejects.toThrow("You must call 'clone' first");
+    });
+    it("transmet le message de commit comme un argument, sans shell", async () => {
+        const message = 'fix "quotes" && rm -rf / $HOME';
+        const { steps } = await drive("commit", { message }, repoOn("feature"));
+        const commit = steps.find((s) => s.args.includes("commit"));
+        expect(commit.args).toEqual(["-C", "repo", "commit", "-m", message]);
+    });
+    it("clone dans REPO_PATH quand il est configuré", async () => {
+        mockGetConfig.mockReturnValue(makeConfig({ REPO_PATH: "D:\\work\\depot" }));
+        const answer = (step) => (step.args.includes("--git-dir") ? { code: 128, stdout: "", stderr: "not a repo" } : ok());
+        const { result, steps } = await drive("clone", {}, answer);
+        const clone = steps.find((s) => s.args[0] === "clone");
+        expect(clone.args).toEqual(["clone", "{{GATEWAY_URL}}/github/http/repo.git", "D:\\work\\depot"]);
+        expect(result.content[0].text).toContain("D:\\work\\depot");
+    });
+    it("crée et pousse TARGET_BRANCH quand elle n'existe pas encore (ls-remote : code 2)", async () => {
+        const answer = (step) => step.args.includes("ls-remote") ? { code: 2, stdout: "", stderr: "" } : repoOn("main")(step);
+        const { result, steps } = await drive("init_working_dir", {}, answer);
+        expect(result.content[0].text).toContain('Created and pushed new branch "feature"');
+        expect(steps.at(-1).args).toEqual(["-C", "repo", "push", "-u", "origin", "feature"]);
+    });
+});
+//# sourceMappingURL=agent-git.test.js.map

package/dist/__tests__/handlers/agent-git.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-git.test.js","sourceRoot":"","sources":["../../../src/__tests__/handlers/agent-git.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAkC,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAE3C,MAAM,UAAU,GAAG,CAAC,YAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,SAAS;IACxB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,EAAE;IACb,GAAG,SAAS;CACb,CAAQ,CAAC;AAEV;;;GAGG;AACH,KAAK,UAAU,KAAK,CAClB,IAAY,EACZ,IAA6B,EAC7B,MAAsC,EACtC,YAAY,GAAG,IAAI;IAEnB,MAAM,YAAY,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACjE,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAQ,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAmB,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAE1E,uFAAuF;AACvF,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,CAAC,IAAc,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,OAAO,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC/D,OAAO,EAAE,EAAE,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAC3C,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACzC,aAAa,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;;QACxD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAE7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;gBAC7B,mBAAmB,EAAE,GAAG;gBACxB,gBAAgB,EAAE,GAAG;gBACrB,gBAAgB,EAAE,mCAAmC;gBACrD,kBAAkB,EAAE,yCAAyC;aAC9D,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAC/G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClG,MAAM,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,gCAAgC,CAAC;QACjD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAE,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9H,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAE,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,sCAAsC,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,EAAE,CAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,kBAAkB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAEtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/utils/git.test.js

@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 vi.mock("../../logger.js", () => ({ logToFile: vi.fn() }));
 vi.mock("../../utils/config.js", () => ({
     getConfig: vi.fn(),
@@ -73,7 +73,14 @@ describe("execGitSecure", () => {
         mockGetConfig.mockReturnValue(makeConfig({ GITHUB_TOKEN: null }));
         mockExecSync.mockReturnValue(Buffer.from("output"));
         execGitSecure("status", { cwd: "/repo" });
-        expect(mockExecSync).toHaveBeenCalledWith("git -c safe.directory='*' status", { cwd: "/repo" });
+        expect(mockExecSync).toHaveBeenCalledWith("git -c safe.directory='*' status", expect.objectContaining({ cwd: "/repo" }));
+    });
+    it("interdit à git toute demande d'identifiants (GIT_TERMINAL_PROMPT=0)", () => {
+        mockGetConfig.mockReturnValue(makeConfig());
+        mockExecSync.mockReturnValue(Buffer.from(""));
+        execGitSecure("status", { cwd: "/repo" });
+        const options = mockExecSync.mock.calls[0][1];
+        expect(options.env.GIT_TERMINAL_PROMPT).toBe("0");
     });
 });
 describe("performClone", () => {

package/dist/__tests__/utils/git.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.test.js","sourceRoot":"","sources":["../../../src/__tests__/utils/git.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;CACpD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;CAClB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,MAAM;YACT,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;SACnB;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnF,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9C,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3C,MAAM,iBAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAEnD,MAAM,UAAU,GAAG,CAAC,YAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,YAAY;IACzB,SAAS,EAAE,SAAS;IACpB,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,KAAK;IAChB,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QACzE,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAQ,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAW,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAW,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,wBAAwB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1G,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;QACvE,YAAY,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QACzE,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAQ,CAAC,CAAC;QAE3D,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,kCAAkC,EAClC,EAAE,GAAG,EAAE,OAAO,EAAE,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QAEzE,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,cAAc;aACX,mBAAmB,CAAC,KAAK,CAAC,CAAC,wCAAwC;aACnE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,4CAA4C;QAC3E,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,MAAM,YAAY,EAAE,CAAC;QAErB,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"git.test.js","sourceRoot":"","sources":["../../../src/__tests__/utils/git.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3D,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;CACpD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;CAClB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,MAAM;YACT,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;SACnB;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnF,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9C,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3C,MAAM,iBAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAEnD,MAAM,UAAU,GAAG,CAAC,YAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,YAAY;IACzB,SAAS,EAAE,SAAS;IACpB,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,KAAK;IAChB,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QACzE,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAQ,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAW,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE5B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAW,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,wBAAwB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1G,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;QACvE,YAAY,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QACzE,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAQ,CAAC,CAAC;QAE3D,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,kCAAkC,EAClC,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAQ,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IAErC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAQ,CAAC,CAAC;QAEzE,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QAEpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,aAAa,CAAC,eAAe,CAAC,UAAU,EAAS,CAAC,CAAC;QACnD,cAAc;aACX,mBAAmB,CAAC,KAAK,CAAC,CAAC,wCAAwC;aACnE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,4CAA4C;QAC3E,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAQ,CAAC,CAAC;QAErD,MAAM,YAAY,EAAE,CAAC;QAErB,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/config-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-server.d.ts","sourceRoot":"","sources":["../src/config-server.ts"],"names":[],"mappings":"AAwEA;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIzD;AAED,wBAAsB,iBAAiB,kBAwftC"}
+{"version":3,"file":"config-server.d.ts","sourceRoot":"","sources":["../src/config-server.ts"],"names":[],"mappings":"AAyEA;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIzD;AAED,wBAAsB,iBAAiB,kBA+ftC"}

package/dist/config-server.js

@@ -6,6 +6,7 @@ import { Octokit } from "octokit";
 import { NodeSSH } from "node-ssh";
 import { ProxyClient } from "@imenam/mcp-gui-interface";
 import { logToFile } from "./logger.js";
+import { getRole } from "./utils/role.js";
 import { getConfig, updateEnvFile, safeSend, migrateFromLegacyEnv, getAllConfigNames, getConfigByName, saveConfiguration, deleteConfiguration, setCurrentConfiguration, getCurrentConfigName, } from "./utils/config.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -107,6 +108,7 @@ export async function startConfigServer() {
                 SSH_KEY_PATH: config.SSH_KEY_PATH,
                 SSH_REMOTE_PATH: config.SSH_REMOTE_PATH,
                 TEST_COMMAND: config.TEST_COMMAND,
+                ROLE: getRole(),
             });
         }
         catch (error) {
@@ -118,6 +120,9 @@ export async function startConfigServer() {
     app.post("/api/delete-working-dir", async (req, res) => {
         logToFile("[GUI] POST /api/delete-working-dir called");
         try {
+            if (getRole() === "remote") {
+                return res.status(409).json({ error: "En rôle remote, la copie de travail est sur la machine de l'agent : cette action n'est pas disponible ici." });
+            }
             const config = getConfig();
             const repoPath = config.REPO_PATH;
             if (repoPath && fs.existsSync(repoPath)) {
@@ -144,6 +149,9 @@ export async function startConfigServer() {
     app.post("/api/clone", async (req, res) => {
         logToFile("[GUI] POST /api/clone called");
         try {
+            if (getRole() === "remote") {
+                return res.status(409).json({ error: "En rôle remote, la copie de travail est sur la machine de l'agent : cette action n'est pas disponible ici." });
+            }
             const config = getConfig();
             if (!config.TARGET_REPO) {
                 return res.status(400).json({ error: "TARGET_REPO non défini." });