@mcp-use/cli 3.5.2-canary.2 → 3.5.2-canary.4

package/dist/index.js

@@ -1550,37 +1550,51 @@ var McpUseAPI = class _McpUseAPI {
       }))
     };
   }
-  async getGitHubRepos(_refresh) {
-    const orgId = await this.resolveOrganizationId();
-    const installResp = await this.request(`/github/installations?organizationId=${orgId}`);
-    if (installResp.installations.length === 0) {
-      return { user: { login: "", id: 0, avatar_url: "" }, repos: [] };
+  /**
+   * Returns true if the GitHub App can access `${owner}/${repo}` via any of the
+   * organization's installations.
+   *
+   * An organization can have multiple GitHub installations (e.g. a personal
+   * account and one or more GitHub orgs), so we check across all of them.
+   *
+   * Each check is a single authoritative backend call (`repos.get` with the
+   * installation token) rather than listing repos. The old listing approach
+   * only returned the first page — so a repo on a later page was wrongly
+   * reported inaccessible — and fully paginating it hung on very large orgs.
+   * We try the installation whose account matches the repo owner first to
+   * minimize GitHub calls.
+   */
+  async checkGitHubRepoAccess(owner, repo) {
+    const status = await this.getGitHubConnectionStatus();
+    const installations = status.installations ?? [];
+    if (installations.length === 0) return false;
+    const ownerLower = owner.toLowerCase();
+    const ordered = [...installations].sort((a, b) => {
+      const aMatch = a.account_login.toLowerCase() === ownerLower ? 0 : 1;
+      const bMatch = b.account_login.toLowerCase() === ownerLower ? 0 : 1;
+      return aMatch - bMatch;
+    });
+    for (const installation of ordered) {
+      const hasAccess = await this.installationCanAccessRepo(
+        installation.installation_id,
+        owner,
+        repo
+      );
+      if (hasAccess) return true;
+    }
+    return false;
+  }
+  async installationCanAccessRepo(installationId, owner, repo) {
+    try {
+      const resp = await this.request(
+        `/github/installations/${installationId}/repos/${encodeURIComponent(
+          owner
+        )}/${encodeURIComponent(repo)}/access`
+      );
+      return resp.hasAccess;
+    } catch {
+      return false;
     }
-    const inst = installResp.installations[0];
-    const repoLists = await Promise.all(
-      installResp.installations.map(async (installation) => {
-        try {
-          const reposResp = await this.request(`/github/installations/${installation.installationId}/repos`);
-          return reposResp.repos;
-        } catch {
-          return [];
-        }
-      })
-    );
-    return {
-      user: {
-        login: inst.account?.login ?? "",
-        id: 0,
-        avatar_url: inst.account?.avatar_url ?? ""
-      },
-      repos: repoLists.flat().map((r) => ({
-        id: r.id,
-        name: r.name,
-        full_name: r.fullName,
-        private: r.private,
-        owner: { login: r.fullName.split("/")[0] ?? "" }
-      }))
-    };
   }
   async getGitHubAppName() {
     if (process.env.MCP_GITHUB_APP_NAME) return process.env.MCP_GITHUB_APP_NAME;
@@ -5236,12 +5250,7 @@ async function getGitHubConnectionStatusWith401Retry(api, options, orgIdToRestor
   throw new Error("Unreachable");
 }
 async function checkRepoAccess(api, owner, repo) {
-  try {
-    const resp = await api.getGitHubRepos(true);
-    return resp.repos.some((r) => r.full_name === `${owner}/${repo}`);
-  } catch {
-    return false;
-  }
+  return api.checkGitHubRepoAccess(owner, repo);
 }
 async function promptGitHubInstallation(api, reason, repoName, opts) {
   const yes = !!opts?.yes;