@mcp-use/cli 3.5.2-canary.2 → 3.5.2-canary.4

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,SAAS,EACV,MAAM,iBAAiB,CAAC;AAgGzB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,GAC1D,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAiC/C;AA0CD,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA8nBD,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2xBzE"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,SAAS,EACV,MAAM,iBAAiB,CAAC;AAgGzB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,GAC1D,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAiC/C;AA0CD,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAynBD,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2xBzE"}

package/dist/index.cjs

@@ -1570,37 +1570,51 @@ var McpUseAPI = class _McpUseAPI {
       }))
     };
   }
-  async getGitHubRepos(_refresh) {
-    const orgId = await this.resolveOrganizationId();
-    const installResp = await this.request(`/github/installations?organizationId=${orgId}`);
-    if (installResp.installations.length === 0) {
-      return { user: { login: "", id: 0, avatar_url: "" }, repos: [] };
+  /**
+   * Returns true if the GitHub App can access `${owner}/${repo}` via any of the
+   * organization's installations.
+   *
+   * An organization can have multiple GitHub installations (e.g. a personal
+   * account and one or more GitHub orgs), so we check across all of them.
+   *
+   * Each check is a single authoritative backend call (`repos.get` with the
+   * installation token) rather than listing repos. The old listing approach
+   * only returned the first page — so a repo on a later page was wrongly
+   * reported inaccessible — and fully paginating it hung on very large orgs.
+   * We try the installation whose account matches the repo owner first to
+   * minimize GitHub calls.
+   */
+  async checkGitHubRepoAccess(owner, repo) {
+    const status = await this.getGitHubConnectionStatus();
+    const installations = status.installations ?? [];
+    if (installations.length === 0) return false;
+    const ownerLower = owner.toLowerCase();
+    const ordered = [...installations].sort((a, b) => {
+      const aMatch = a.account_login.toLowerCase() === ownerLower ? 0 : 1;
+      const bMatch = b.account_login.toLowerCase() === ownerLower ? 0 : 1;
+      return aMatch - bMatch;
+    });
+    for (const installation of ordered) {
+      const hasAccess = await this.installationCanAccessRepo(
+        installation.installation_id,
+        owner,
+        repo
+      );
+      if (hasAccess) return true;
+    }
+    return false;
+  }
+  async installationCanAccessRepo(installationId, owner, repo) {
+    try {
+      const resp = await this.request(
+        `/github/installations/${installationId}/repos/${encodeURIComponent(
+          owner
+        )}/${encodeURIComponent(repo)}/access`
+      );
+      return resp.hasAccess;
+    } catch {
+      return false;
     }
-    const inst = installResp.installations[0];
-    const repoLists = await Promise.all(
-      installResp.installations.map(async (installation) => {
-        try {
-          const reposResp = await this.request(`/github/installations/${installation.installationId}/repos`);
-          return reposResp.repos;
-        } catch {
-          return [];
-        }
-      })
-    );
-    return {
-      user: {
-        login: inst.account?.login ?? "",
-        id: 0,
-        avatar_url: inst.account?.avatar_url ?? ""
-      },
-      repos: repoLists.flat().map((r) => ({
-        id: r.id,
-        name: r.name,
-        full_name: r.fullName,
-        private: r.private,
-        owner: { login: r.fullName.split("/")[0] ?? "" }
-      }))
-    };
   }
   async getGitHubAppName() {
     if (process.env.MCP_GITHUB_APP_NAME) return process.env.MCP_GITHUB_APP_NAME;
@@ -5251,12 +5265,7 @@ async function getGitHubConnectionStatusWith401Retry(api, options, orgIdToRestor
   throw new Error("Unreachable");
 }
 async function checkRepoAccess(api, owner, repo) {
-  try {
-    const resp = await api.getGitHubRepos(true);
-    return resp.repos.some((r) => r.full_name === `${owner}/${repo}`);
-  } catch {
-    return false;
-  }
+  return api.checkGitHubRepoAccess(owner, repo);
 }
 async function promptGitHubInstallation(api, reason, repoName, opts) {
   const yes = !!opts?.yes;