@meridiona/meridian-darwin-arm64 1.31.3 → 1.32.0

package/.env.example

@@ -68,18 +68,20 @@
 # PM_WORKLOG_SYNTH_TIMEOUT_S=300
 
 # ---------------------------------------------------------------------------
-# GitHub (GITHUB_TOKEN + GITHUB_ORG required to enable the GitHub connector)
-# Syncs the OPEN issues assigned to you under GITHUB_ORG; logs worklogs as
-# structured issue comments (GitHub has no native time tracking).
-# Token: Settings > Developer settings > Personal access tokens. A classic token
-# with the `repo` scope is simplest (works for personal + org issues); a
-# fine-grained token needs Issues: Read and write on the relevant repos.
-# GITHUB_ORG is the issue owner — an org slug OR your own username.
+# GitHub (GITHUB_TOKEN required; GITHUB_PROJECT_IDS selects which Projects sync)
+# Syncs the OPEN issues assigned to you from the listed GitHub Projects v2 (read
+# via the GraphQL API); logs worklogs as structured issue comments (GitHub has no
+# native time tracking).
+# Token: easiest is the gh CLI — `meridian setup` runs `gh auth token` and adds
+# the read:project scope for you (no PAT). Otherwise create a classic PAT with
+# the `repo`, `read:org`, `read:project` scopes (read:project reads Projects;
+# repo posts worklog comments).
+# GITHUB_PROJECT_IDS: comma-separated Projects v2 node IDs (PVT_xxx). Find them:
+#   gh api graphql -f query='{ viewer { projectsV2(first:10){nodes{id title}} } }'
 # ---------------------------------------------------------------------------
 
 # GITHUB_TOKEN=ghp_your_personal_access_token
-# GITHUB_ORG=your-org
-# GITHUB_REPOS=your-org/api,your-org/web  # optional — comma-separated owner/repo; empty = all repos under the owner
+# GITHUB_PROJECT_IDS=PVT_xxx,PVT_yyy
 
 # ---------------------------------------------------------------------------
 # Linear (LINEAR_API_KEY required to enable the Linear connector)

package/VERSION

@@ -1 +1 @@
-1.31.3
+1.32.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meridiona/meridian-darwin-arm64",
-  "version": "1.31.3",
+  "version": "1.32.0",
   "description": "Prebuilt Meridian app for macOS arm64 (daemon binary + dashboard + Python services). Installed via @meridiona/meridian.",
   "homepage": "https://github.com/Meridiona/meridian",
   "repository": {

package/scripts/install-from-bundle.sh

@@ -94,9 +94,16 @@ collect_credentials() {
     fi
     echo >&2
     if prompt_category "GitHub"; then
-        prompt_env_var "GITHUB_TOKEN" "GitHub personal access token" 1 "$env_file"
-        prompt_env_var "GITHUB_ORG"   "GitHub organization (or your username)" 0 "$env_file"
-        prompt_env_var "GITHUB_REPOS" "GitHub repos (optional, comma-sep owner/repo)" 0 "$env_file"
+        if ! _try_gh_token "$env_file"; then
+            echo >&2
+            echo "    Alternatively, create a personal access token (classic) at:" >&2
+            echo "      https://github.com/settings/tokens/new" >&2
+            echo "    Required scopes: repo, read:org, read:project" >&2
+            echo "    (read:project lets meridian read your GitHub Projects; repo posts worklog comments)" >&2
+            echo >&2
+            prompt_env_var "GITHUB_TOKEN" "GitHub personal access token" 1 "$env_file"
+        fi
+        _pick_github_projects "$env_file"
     fi
     echo >&2
     if prompt_category "Linear"; then
@@ -106,6 +113,9 @@ collect_credentials() {
     ok "Credential collection complete"
 }
 
+# GitHub setup helpers — shared with install.sh.
+source "${APP_ROOT}/scripts/lib-github-setup.sh"
+
 GUI_TARGET="gui/$(id -u)"
 LAUNCH_AGENTS="${HOME}/Library/LaunchAgents"
 

package/scripts/lib-github-setup.sh

@@ -0,0 +1,125 @@
+#!/usr/bin/env bash
+# meridian — normalises screenpipe activity into structured app sessions
+#
+# Shared GitHub setup helpers, sourced by both install.sh (source installs) and
+# scripts/install-from-bundle.sh (bundle installs). The sourcing script must
+# already define: info, ok, warn, get_env_value, set_env_value (resolved at
+# call time, so definition order across files does not matter).
+
+# Obtain a GitHub token from the gh CLI — no PAT needed. meridian needs two
+# scopes: `repo` (post worklog / task-update issue comments) and `read:project`
+# (read Projects v2 via GraphQL). gh's default web-login grants repo + read:org
+# but not read:project, so add whatever is missing through the same browser flow,
+# then write the OAuth token to GITHUB_TOKEN. Returns non-zero if gh is missing,
+# unauthenticated, or the scope refresh fails, so the caller can fall back to a
+# manual PAT prompt. An existing GITHUB_TOKEN is kept untouched.
+_try_gh_token() {
+    local env_file="$1"
+    [[ -n "$(get_env_value GITHUB_TOKEN "$env_file")" ]] && {
+        ok "GITHUB_TOKEN already set — keeping"; return 0
+    }
+    command -v gh >/dev/null 2>&1 || return 1
+    gh auth status >/dev/null 2>&1 || return 1
+
+    # Add any missing scope through gh's browser flow. `project` (write) satisfies
+    # the read:project requirement too, so accept either.
+    local status; status="$(gh auth status 2>&1)"
+    local want=()
+    grep -q "'repo'" <<< "$status" || want+=("repo")
+    grep -qE "'read:project'|'project'" <<< "$status" || want+=("read:project")
+    if (( ${#want[@]} > 0 )); then
+        local joined; printf -v joined '%s,' "${want[@]}"; joined="${joined%,}"
+        info "  Granting the ${joined} scope(s) to your gh login (opens a browser)…"
+        gh auth refresh -h github.com -s "$joined" >&2 || {
+            warn "  Could not extend gh scopes — use a personal access token instead"
+            return 1
+        }
+    fi
+
+    local token
+    token="$(gh auth token 2>/dev/null)" || return 1
+    [[ -z "$token" ]] && return 1
+    set_env_value GITHUB_TOKEN "$token" "$env_file"
+    ok "GITHUB_TOKEN set from gh CLI (no PAT needed)"
+}
+
+# Interactively pick GitHub Projects and write their node IDs to GITHUB_PROJECT_IDS.
+# Lists both personal and org projects via GraphQL. No-op if already set or if
+# the gh CLI is unavailable or unauthenticated.
+_pick_github_projects() {
+    local env_file="$1"
+    [[ -n "$(get_env_value GITHUB_PROJECT_IDS "$env_file")" ]] && {
+        ok "GITHUB_PROJECT_IDS already set — keeping"; return 0
+    }
+    command -v gh >/dev/null 2>&1 || return 0
+    gh auth status >/dev/null 2>&1 || return 0
+
+    local raw
+    raw="$(gh api graphql -f query='
+      { viewer {
+          projectsV2(first: 20) { nodes { id title } }
+          organizations(first: 20) {
+            nodes { login projectsV2(first: 20) { nodes { id title } } }
+          }
+      } }' 2>/dev/null)" || {
+        warn "Could not list GitHub Projects — add GITHUB_PROJECT_IDS to the config manually if needed"
+        return 0
+    }
+
+    # One python3 pass emits "id<TAB>label" per project (personal + org). python3
+    # is always present on macOS.
+    local pairs_raw
+    pairs_raw="$(printf '%s' "$raw" | python3 -c "
+import json, sys
+d = json.load(sys.stdin).get('data', {}).get('viewer', {})
+for n in d.get('projectsV2', {}).get('nodes', []):
+    print('%s\t%s' % (n['id'], n['title']))
+for org in d.get('organizations', {}).get('nodes', []):
+    for n in org.get('projectsV2', {}).get('nodes', []):
+        print('%s\t%s / %s' % (n['id'], org['login'], n['title']))
+" 2>/dev/null)" || true
+
+    # Split each "id<TAB>label" line into parallel arrays (bash 3.2 — no mapfile).
+    local _ids=() _labels=()
+    local _id _label
+    while IFS=$'\t' read -r _id _label; do
+        [[ -z "$_id" ]] && continue
+        _ids+=("$_id"); _labels+=("$_label")
+    done <<< "$pairs_raw"
+    local count=${#_ids[@]}
+    (( count == 0 )) && { warn "No GitHub Projects found for your account"; return 0; }
+
+    echo >&2
+    echo "    Your GitHub Projects:" >&2
+    local i=0
+    while (( i < count )); do
+        printf "      %d. %s\n" "$((i+1))" "${_labels[$i]}" >&2
+        i=$((i+1))
+    done
+    echo >&2
+
+    local selection
+    read -r -p "    Enter project numbers (comma-sep, e.g. 1,2) or Enter to skip: " selection
+    [[ -z "$selection" ]] && { info "  (skipped GITHUB_PROJECT_IDS)"; return 0; }
+
+    local selected_ids=()
+    local IFS_save="$IFS"
+    IFS=',' read -ra nums <<< "$selection"
+    IFS="$IFS_save"
+    local n
+    for n in "${nums[@]}"; do
+        n="${n//[[:space:]]/}"
+        if [[ "$n" =~ ^[0-9]+$ ]] && (( n >= 1 && n <= count )); then
+            selected_ids+=("${_ids[$((n-1))]}")
+        fi
+    done
+
+    if [[ ${#selected_ids[@]} -eq 0 ]]; then
+        info "  (no valid selection — skipped GITHUB_PROJECT_IDS)"; return 0
+    fi
+
+    local joined
+    printf -v joined '%s,' "${selected_ids[@]}"
+    set_env_value GITHUB_PROJECT_IDS "${joined%,}" "$env_file"
+    ok "GITHUB_PROJECT_IDS set (${#selected_ids[@]} project(s))"
+}

package/services/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meridian-agents"
-version = "1.31.3"
+version = "1.32.0"
 description = "Meridian agents — hermes task linking and Jira progress updates for meridian.db"
 requires-python = ">=3.11"
 authors = [{ name = "Meridiona" }]