agent-relay 1.1.0 → 1.2.0

package/dist/cloud/api/cli-pty-runner.js

@@ -0,0 +1,119 @@
+/**
+ * CLI PTY Runner
+ *
+ * Shared module for running CLI auth flows via PTY.
+ * Used by both production (onboarding.ts) and tests (ci-test-real-clis.ts).
+ *
+ * This module has minimal dependencies (only node-pty) so it can be
+ * used in isolated test containers without the full server stack.
+ */
+import * as pty from 'node-pty';
+// Import shared config and utilities
+import { CLI_AUTH_CONFIG, stripAnsiCodes, matchesSuccessPattern, findMatchingPrompt, validateProviderConfig, validateAllProviderConfigs as validateAllConfigs, getSupportedProviders, } from '../../shared/cli-auth-config.js';
+// Re-export everything from shared config for backward compatibility
+export { CLI_AUTH_CONFIG, stripAnsiCodes, matchesSuccessPattern, findMatchingPrompt, validateProviderConfig, getSupportedProviders, };
+// Wrapper that throws instead of returning array (backward compatible)
+export function validateAllProviderConfigs() {
+    const errors = validateAllConfigs();
+    if (errors.length > 0) {
+        throw new Error(`Invalid provider configurations:\n${errors.join('\n')}`);
+    }
+}
+/**
+ * Run CLI auth flow via PTY
+ *
+ * This is the core PTY runner used by both production and tests.
+ * It handles:
+ * - Spawning the CLI with proper TTY emulation
+ * - Auto-responding to interactive prompts
+ * - Extracting auth URLs from output
+ * - Detecting success patterns
+ *
+ * @param config - CLI auth configuration for the provider
+ * @param options - Optional callbacks and overrides
+ * @returns Promise resolving to auth result
+ */
+export async function runCLIAuthViaPTY(config, options = {}) {
+    const result = {
+        authUrl: null,
+        success: false,
+        promptsHandled: [],
+        output: '',
+        exitCode: null,
+    };
+    const respondedPrompts = new Set();
+    return new Promise((resolve) => {
+        try {
+            const proc = pty.spawn(config.command, config.args, {
+                name: 'xterm-256color',
+                cols: 120,
+                rows: 30,
+                cwd: options.cwd || process.cwd(),
+                env: {
+                    ...process.env,
+                    NO_COLOR: '1',
+                    TERM: 'xterm-256color',
+                    // Prevent CLIs from trying to open browsers
+                    BROWSER: 'echo',
+                    DISPLAY: '',
+                    ...options.env,
+                },
+            });
+            // Timeout handler
+            const timeout = setTimeout(() => {
+                proc.kill();
+                result.error = 'Timeout waiting for auth URL';
+                resolve(result);
+            }, config.waitTimeout + 5000);
+            proc.onData((data) => {
+                result.output += data;
+                options.onOutput?.(data);
+                // Check for matching prompts and auto-respond
+                const matchingPrompt = findMatchingPrompt(data, config.prompts, respondedPrompts);
+                if (matchingPrompt) {
+                    respondedPrompts.add(matchingPrompt.description);
+                    result.promptsHandled.push(matchingPrompt.description);
+                    options.onPromptHandled?.(matchingPrompt.description);
+                    const delay = matchingPrompt.delay ?? 100;
+                    setTimeout(() => {
+                        try {
+                            proc.write(matchingPrompt.response);
+                        }
+                        catch {
+                            // Process may have exited
+                        }
+                    }, delay);
+                }
+                // Look for auth URL
+                const cleanText = stripAnsiCodes(data);
+                const match = cleanText.match(config.urlPattern);
+                if (match && match[1] && !result.authUrl) {
+                    result.authUrl = match[1];
+                    options.onAuthUrl?.(result.authUrl);
+                }
+                // Check for success indicators
+                if (matchesSuccessPattern(data, config.successPatterns)) {
+                    result.success = true;
+                }
+            });
+            proc.onExit(({ exitCode }) => {
+                clearTimeout(timeout);
+                result.exitCode = exitCode;
+                // Consider it a success if we got a URL (main goal)
+                // or if exit code was 0 with success pattern
+                if (result.authUrl || (exitCode === 0 && result.success)) {
+                    result.success = true;
+                }
+                if (!result.authUrl && !result.success && !result.error) {
+                    result.error = 'Failed to extract auth URL from CLI output';
+                }
+                resolve(result);
+            });
+        }
+        catch (err) {
+            result.error = err instanceof Error ? err.message : 'Unknown error';
+            resolve(result);
+        }
+    });
+}
+//# sourceMappingURL=cli-pty-runner.js.map

package/dist/cloud/api/cli-pty-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-pty-runner.js","sourceRoot":"","sources":["../../../src/cloud/api/cli-pty-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,qCAAqC;AACrC,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,IAAI,kBAAkB,EAChD,qBAAqB,GAGtB,MAAM,iCAAiC,CAAC;AAEzC,qEAAqE;AACrE,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GAGtB,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,0BAA0B;IACxC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AA8BD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,UAA0B,EAAE;IAE5B,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;gBAClD,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBACjC,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,QAAQ,EAAE,GAAG;oBACb,IAAI,EAAE,gBAAgB;oBACtB,4CAA4C;oBAC5C,OAAO,EAAE,MAAM;oBACf,OAAO,EAAE,EAAE;oBACX,GAAG,OAAO,CAAC,GAAG;iBACW;aAC5B,CAAC,CAAC;YAEH,kBAAkB;YAClB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,GAAG,8BAA8B,CAAC;gBAC9C,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;gBAC3B,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;gBACtB,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;gBAEzB,8CAA8C;gBAC9C,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;gBAClF,IAAI,cAAc,EAAE,CAAC;oBACnB,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBACjD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBACvD,OAAO,CAAC,eAAe,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBAEtD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,IAAI,GAAG,CAAC;oBAC1C,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC;4BACH,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;wBACtC,CAAC;wBAAC,MAAM,CAAC;4BACP,0BAA0B;wBAC5B,CAAC;oBACH,CAAC,EAAE,KAAK,CAAC,CAAC;gBACZ,CAAC;gBAED,oBAAoB;gBACpB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACjD,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC1B,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAE3B,oDAAoD;gBACpD,6CAA6C;gBAC7C,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACxB,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACxD,MAAM,CAAC,KAAK,GAAG,4CAA4C,CAAC;gBAC9D,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACpE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cloud/api/generic-webhooks.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generic Webhooks API Routes
+ *
+ * Provides endpoints for receiving webhooks from any configured source.
+ * Routes: POST /api/webhooks/:source
+ */
+export declare const genericWebhooksRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=generic-webhooks.d.ts.map

package/dist/cloud/api/generic-webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-webhooks.d.ts","sourceRoot":"","sources":["../../../src/cloud/api/generic-webhooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,eAAO,MAAM,qBAAqB,4CAAW,CAAC"}

package/dist/cloud/api/generic-webhooks.js

@@ -0,0 +1,129 @@
+/**
+ * Generic Webhooks API Routes
+ *
+ * Provides endpoints for receiving webhooks from any configured source.
+ * Routes: POST /api/webhooks/:source
+ */
+import { Router } from 'express';
+import { processWebhook, getWebhookConfig } from '../webhooks/index.js';
+export const genericWebhooksRouter = Router();
+/**
+ * POST /api/webhooks/:source
+ * Receive a webhook from any configured source
+ */
+genericWebhooksRouter.post('/:source', async (req, res) => {
+    const { source } = req.params;
+    // For Slack URL verification challenge
+    if (source === 'slack' && req.body?.type === 'url_verification') {
+        return res.json({ challenge: req.body.challenge });
+    }
+    try {
+        // Get raw body for signature verification
+        // Note: This requires express.raw() middleware or similar
+        const rawBody = typeof req.body === 'string'
+            ? req.body
+            : JSON.stringify(req.body);
+        const result = await processWebhook(source, rawBody, req.headers);
+        if (!result.success && result.responses[0]?.error === 'Invalid signature') {
+            return res.status(401).json({ error: 'Invalid signature' });
+        }
+        if (!result.success && result.responses[0]?.error?.includes('Unknown webhook source')) {
+            return res.status(404).json({ error: `Unknown webhook source: ${source}` });
+        }
+        console.log(`[webhooks] Processed ${source} webhook: ${result.eventType} (${result.matchedRules.length} rules matched)`);
+        res.json({
+            success: result.success,
+            eventId: result.eventId,
+            eventType: result.eventType,
+            matchedRules: result.matchedRules,
+            actionsExecuted: result.actions.length,
+        });
+    }
+    catch (error) {
+        console.error(`[webhooks] Error processing ${source} webhook:`, error);
+        res.status(500).json({
+            error: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+});
+/**
+ * GET /api/webhooks/config
+ * Get the current webhook configuration (for debugging)
+ */
+genericWebhooksRouter.get('/config', (_req, res) => {
+    const config = getWebhookConfig();
+    res.json({
+        sources: Object.entries(config.sources).map(([id, source]) => ({
+            id,
+            name: source.name,
+            enabled: source.enabled,
+            parser: source.parser,
+            responder: source.responder,
+        })),
+        rules: config.rules.map(rule => ({
+            id: rule.id,
+            name: rule.name,
+            enabled: rule.enabled,
+            source: rule.source,
+            eventType: rule.eventType,
+            condition: rule.condition,
+            actionType: rule.action.type,
+            priority: rule.priority,
+        })),
+    });
+});
+/**
+ * GET /api/webhooks/sources
+ * List available webhook sources with their setup instructions
+ */
+genericWebhooksRouter.get('/sources', (_req, res) => {
+    const baseUrl = process.env.PUBLIC_URL || 'https://your-domain.com';
+    res.json({
+        sources: [
+            {
+                id: 'github',
+                name: 'GitHub',
+                webhookUrl: `${baseUrl}/api/webhooks/github`,
+                setupInstructions: [
+                    '1. Go to your repository Settings > Webhooks > Add webhook',
+                    `2. Set Payload URL to: ${baseUrl}/api/webhooks/github`,
+                    '3. Set Content type to: application/json',
+                    '4. Set Secret to your GITHUB_WEBHOOK_SECRET value',
+                    '5. Select events: Check runs, Issues, Issue comments, Pull request review comments',
+                ],
+                requiredEnvVars: ['GITHUB_WEBHOOK_SECRET'],
+                events: ['check_run', 'issues', 'issue_comment', 'pull_request_review_comment'],
+            },
+            {
+                id: 'linear',
+                name: 'Linear',
+                webhookUrl: `${baseUrl}/api/webhooks/linear`,
+                setupInstructions: [
+                    '1. Go to Linear Settings > API > Webhooks',
+                    '2. Create a new webhook',
+                    `3. Set URL to: ${baseUrl}/api/webhooks/linear`,
+                    '4. Copy the signing secret to LINEAR_WEBHOOK_SECRET',
+                    '5. Select events: Issues, Comments',
+                ],
+                requiredEnvVars: ['LINEAR_WEBHOOK_SECRET', 'LINEAR_API_KEY'],
+                events: ['Issue', 'Comment', 'IssueLabel'],
+            },
+            {
+                id: 'slack',
+                name: 'Slack',
+                webhookUrl: `${baseUrl}/api/webhooks/slack`,
+                setupInstructions: [
+                    '1. Create a Slack App at api.slack.com/apps',
+                    '2. Enable Event Subscriptions',
+                    `3. Set Request URL to: ${baseUrl}/api/webhooks/slack`,
+                    '4. Subscribe to bot events: app_mention, message.channels',
+                    '5. Copy Signing Secret to SLACK_SIGNING_SECRET',
+                    '6. Install the app to your workspace',
+                ],
+                requiredEnvVars: ['SLACK_SIGNING_SECRET', 'SLACK_BOT_TOKEN'],
+                events: ['app_mention', 'message', 'reaction_added'],
+            },
+        ],
+    });
+});
+//# sourceMappingURL=generic-webhooks.js.map

package/dist/cloud/api/generic-webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-webhooks.js","sourceRoot":"","sources":["../../../src/cloud/api/generic-webhooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,EAAE,CAAC;AAE9C;;;GAGG;AACH,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAE9B,uCAAuC;IACvC,IAAI,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,CAAC;QACH,0CAA0C;QAC1C,0DAA0D;QAC1D,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,IAAI;YACV,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,OAAO,EACP,GAAG,CAAC,OAAwD,CAC7D,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,mBAAmB,EAAE,CAAC;YAC1E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACtF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,aAAa,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAEzH,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,MAAM,WAAW,EAAE,KAAK,CAAC,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACpE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,GAAG,CAAC,IAAI,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,yBAAyB,CAAC;IAEpE,GAAG,CAAC,IAAI,CAAC;QACP,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,GAAG,OAAO,sBAAsB;gBAC5C,iBAAiB,EAAE;oBACjB,4DAA4D;oBAC5D,0BAA0B,OAAO,sBAAsB;oBACvD,0CAA0C;oBAC1C,mDAAmD;oBACnD,oFAAoF;iBACrF;gBACD,eAAe,EAAE,CAAC,uBAAuB,CAAC;gBAC1C,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,6BAA6B,CAAC;aAChF;YACD;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,GAAG,OAAO,sBAAsB;gBAC5C,iBAAiB,EAAE;oBACjB,2CAA2C;oBAC3C,yBAAyB;oBACzB,kBAAkB,OAAO,sBAAsB;oBAC/C,qDAAqD;oBACrD,oCAAoC;iBACrC;gBACD,eAAe,EAAE,CAAC,uBAAuB,EAAE,gBAAgB,CAAC;gBAC5D,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC;aAC3C;YACD;gBACE,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,GAAG,OAAO,qBAAqB;gBAC3C,iBAAiB,EAAE;oBACjB,6CAA6C;oBAC7C,+BAA+B;oBAC/B,0BAA0B,OAAO,qBAAqB;oBACtD,2DAA2D;oBAC3D,gDAAgD;oBAChD,sCAAsC;iBACvC;gBACD,eAAe,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;gBAC5D,MAAM,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,gBAAgB,CAAC;aACrD;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cloud/api/git.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Git Gateway API Routes
+ *
+ * Provides fresh GitHub tokens to workspace containers for git operations.
+ * This gateway pattern ensures tokens are always valid (Nango handles refresh).
+ */
+export declare const gitRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=git.d.ts.map

package/dist/cloud/api/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/cloud/api/git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,eAAO,MAAM,SAAS,4CAAW,CAAC"}

package/dist/cloud/api/git.js

@@ -0,0 +1,131 @@
+/**
+ * Git Gateway API Routes
+ *
+ * Provides fresh GitHub tokens to workspace containers for git operations.
+ * This gateway pattern ensures tokens are always valid (Nango handles refresh).
+ */
+import crypto from 'crypto';
+import { Router } from 'express';
+import { db } from '../db/index.js';
+import { nangoService } from '../services/nango.js';
+import { getConfig } from '../config.js';
+export const gitRouter = Router();
+/**
+ * Generate expected workspace token using HMAC
+ */
+function generateExpectedToken(workspaceId) {
+    const config = getConfig();
+    return crypto
+        .createHmac('sha256', config.sessionSecret)
+        .update(`workspace:${workspaceId}`)
+        .digest('hex');
+}
+/**
+ * Verify workspace access token
+ * Workspaces authenticate with a secret passed at provisioning time
+ */
+function verifyWorkspaceToken(req, workspaceId) {
+    const authHeader = req.get('authorization');
+    if (!authHeader?.startsWith('Bearer ')) {
+        return false;
+    }
+    const providedToken = authHeader.slice(7);
+    const expectedToken = generateExpectedToken(workspaceId);
+    // Use timing-safe comparison to prevent timing attacks
+    try {
+        return crypto.timingSafeEqual(Buffer.from(providedToken), Buffer.from(expectedToken));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * GET /api/git/token
+ * Get a fresh GitHub token for git operations
+ *
+ * Query params:
+ *   - workspaceId: The workspace requesting the token
+ *
+ * Returns: { token: string, expiresAt?: string }
+ *
+ * This endpoint is called by the git credential helper in workspace containers.
+ * It fetches a fresh GitHub App installation token via Nango.
+ */
+gitRouter.get('/token', async (req, res) => {
+    const { workspaceId } = req.query;
+    if (!workspaceId || typeof workspaceId !== 'string') {
+        return res.status(400).json({ error: 'workspaceId is required' });
+    }
+    // Verify the request is from a valid workspace
+    if (!verifyWorkspaceToken(req, workspaceId)) {
+        return res.status(401).json({ error: 'Invalid workspace token' });
+    }
+    try {
+        // Get workspace to find the user
+        const workspace = await db.workspaces.findById(workspaceId);
+        if (!workspace) {
+            return res.status(404).json({ error: 'Workspace not found' });
+        }
+        const userId = workspace.userId;
+        // Find a repository with a Nango connection for this user
+        const repos = await db.repositories.findByUserId(userId);
+        const repoWithConnection = repos.find(r => r.nangoConnectionId);
+        if (!repoWithConnection?.nangoConnectionId) {
+            return res.status(404).json({
+                error: 'No GitHub App connection found',
+                hint: 'Connect a repository via the GitHub App to enable git operations',
+            });
+        }
+        // Get fresh token from Nango (auto-refreshes if needed)
+        const token = await nangoService.getGithubAppToken(repoWithConnection.nangoConnectionId);
+        // GitHub App installation tokens expire after 1 hour
+        const expiresAt = new Date(Date.now() + 55 * 60 * 1000).toISOString(); // 55 min buffer
+        res.json({
+            token,
+            expiresAt,
+            username: 'x-access-token', // GitHub App tokens use this as username
+        });
+    }
+    catch (error) {
+        console.error('[git] Error getting token:', error);
+        res.status(500).json({ error: 'Failed to get GitHub token' });
+    }
+});
+/**
+ * POST /api/git/token
+ * Same as GET but accepts body params (for compatibility with some git credential helpers)
+ */
+gitRouter.post('/token', async (req, res) => {
+    const workspaceId = req.body.workspaceId || req.query.workspaceId;
+    if (!workspaceId || typeof workspaceId !== 'string') {
+        return res.status(400).json({ error: 'workspaceId is required' });
+    }
+    if (!verifyWorkspaceToken(req, workspaceId)) {
+        return res.status(401).json({ error: 'Invalid workspace token' });
+    }
+    try {
+        const workspace = await db.workspaces.findById(workspaceId);
+        if (!workspace) {
+            return res.status(404).json({ error: 'Workspace not found' });
+        }
+        const repos = await db.repositories.findByUserId(workspace.userId);
+        const repoWithConnection = repos.find(r => r.nangoConnectionId);
+        if (!repoWithConnection?.nangoConnectionId) {
+            return res.status(404).json({
+                error: 'No GitHub App connection found',
+            });
+        }
+        const token = await nangoService.getGithubAppToken(repoWithConnection.nangoConnectionId);
+        const expiresAt = new Date(Date.now() + 55 * 60 * 1000).toISOString();
+        res.json({
+            token,
+            expiresAt,
+            username: 'x-access-token',
+        });
+    }
+    catch (error) {
+        console.error('[git] Error getting token:', error);
+        res.status(500).json({ error: 'Failed to get GitHub token' });
+    }
+});
+//# sourceMappingURL=git.js.map

package/dist/cloud/api/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/cloud/api/git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;AAElC;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC;SAC1C,MAAM,CAAC,aAAa,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAY,EAAE,WAAmB;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAEzD,uDAAuD;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAC1B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAC3B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC5D,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IAElC,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAEhC,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,gCAAgC;gBACvC,IAAI,EAAE,kEAAkE;aACzE,CAAC,CAAC;QACL,CAAC;QAED,wDAAwD;QACxD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAEzF,qDAAqD;QACrD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,gBAAgB;QAEvF,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,SAAS;YACT,QAAQ,EAAE,gBAAgB,EAAE,yCAAyC;SACtE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;IAElE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,gCAAgC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAEtE,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,SAAS;YACT,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/cloud/api/github-app.d.ts

@@ -0,0 +1,11 @@
+/**
+ * GitHub App API Routes
+ *
+ * Repo operations via Nango's github-app-oauth connection:
+ * - Get clone token for repositories
+ * - Create issues, PRs, and comments
+ *
+ * Auth flow is handled by nango-auth.ts
+ */
+export declare const githubAppRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=github-app.d.ts.map

package/dist/cloud/api/github-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-app.d.ts","sourceRoot":"","sources":["../../../src/cloud/api/github-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,eAAO,MAAM,eAAe,4CAAW,CAAC"}

package/dist/cloud/api/github-app.js

@@ -0,0 +1,189 @@
+/**
+ * GitHub App API Routes
+ *
+ * Repo operations via Nango's github-app-oauth connection:
+ * - Get clone token for repositories
+ * - Create issues, PRs, and comments
+ *
+ * Auth flow is handled by nango-auth.ts
+ */
+import { Router } from 'express';
+import { requireAuth } from './auth.js';
+import { db } from '../db/index.js';
+import { nangoService, NANGO_INTEGRATIONS } from '../services/nango.js';
+export const githubAppRouter = Router();
+// All routes require authentication
+githubAppRouter.use(requireAuth);
+/**
+ * GET /api/github-app/status
+ * Check if Nango GitHub App OAuth is configured
+ */
+githubAppRouter.get('/status', (_req, res) => {
+    res.json({
+        configured: true,
+        integrations: NANGO_INTEGRATIONS,
+        connectUrl: '/connect-repos',
+    });
+});
+/**
+ * GET /api/github-app/repos
+ * List repositories the user has connected via Nango
+ */
+githubAppRouter.get('/repos', async (req, res) => {
+    const userId = req.session.userId;
+    try {
+        const repos = await db.repositories.findByUserId(userId);
+        res.json({
+            repositories: repos.map((r) => ({
+                id: r.id,
+                fullName: r.githubFullName,
+                isPrivate: r.isPrivate,
+                defaultBranch: r.defaultBranch,
+                syncStatus: r.syncStatus,
+                hasNangoConnection: !!r.nangoConnectionId,
+                lastSyncedAt: r.lastSyncedAt,
+            })),
+        });
+    }
+    catch (error) {
+        console.error('Error listing repos:', error);
+        res.status(500).json({ error: 'Failed to list repositories' });
+    }
+});
+/**
+ * GET /api/github-app/clone-token
+ * Get a clone token for a repository
+ * Used by workspace provisioner to clone private repos
+ */
+githubAppRouter.get('/clone-token', async (req, res) => {
+    const userId = req.session.userId;
+    const { repo } = req.query;
+    if (!repo || typeof repo !== 'string') {
+        return res.status(400).json({ error: 'Repository name is required (owner/repo)' });
+    }
+    try {
+        // Find the repository in our database
+        const userRepos = await db.repositories.findByUserId(userId);
+        const repository = userRepos.find((r) => r.githubFullName === repo);
+        if (!repository) {
+            return res.status(404).json({ error: 'Repository not found' });
+        }
+        if (!repository.nangoConnectionId) {
+            return res.status(400).json({
+                error: 'Repository not connected via Nango',
+                hint: 'Connect your GitHub repos through the Nango flow first',
+            });
+        }
+        // Get token from Nango connection
+        const token = await nangoService.getGithubAppToken(repository.nangoConnectionId);
+        const cloneUrl = `https://x-access-token:${token}@github.com/${repo}.git`;
+        res.json({
+            token,
+            cloneUrl,
+            expiresIn: '1 hour',
+        });
+    }
+    catch (error) {
+        console.error('Error getting clone token:', error);
+        res.status(500).json({ error: 'Failed to get clone token' });
+    }
+});
+/**
+ * POST /api/github-app/repos/:id/issues
+ * Create an issue on a repository
+ */
+githubAppRouter.post('/repos/:id/issues', async (req, res) => {
+    const userId = req.session.userId;
+    const { id } = req.params;
+    const { title, body, labels } = req.body;
+    if (!title || typeof title !== 'string') {
+        return res.status(400).json({ error: 'Issue title is required' });
+    }
+    try {
+        // Find the repository
+        const repository = await db.repositories.findById(id);
+        if (!repository || repository.userId !== userId) {
+            return res.status(404).json({ error: 'Repository not found' });
+        }
+        if (!repository.nangoConnectionId) {
+            return res.status(400).json({ error: 'Repository not connected via Nango' });
+        }
+        // Create issue via Nango Proxy (handles token injection automatically)
+        const [owner, repo] = repository.githubFullName.split('/');
+        const issue = await nangoService.createGithubIssue(repository.nangoConnectionId, owner, repo, { title, body: body || '', labels });
+        res.json({
+            number: issue.number,
+            url: issue.html_url,
+        });
+    }
+    catch (error) {
+        console.error('Error creating issue:', error);
+        res.status(500).json({ error: 'Failed to create issue' });
+    }
+});
+/**
+ * POST /api/github-app/repos/:id/pulls
+ * Create a pull request on a repository
+ */
+githubAppRouter.post('/repos/:id/pulls', async (req, res) => {
+    const userId = req.session.userId;
+    const { id } = req.params;
+    const { title, body, head, base } = req.body;
+    if (!title || !head || !base) {
+        return res.status(400).json({ error: 'title, head, and base are required' });
+    }
+    try {
+        // Find the repository
+        const repository = await db.repositories.findById(id);
+        if (!repository || repository.userId !== userId) {
+            return res.status(404).json({ error: 'Repository not found' });
+        }
+        if (!repository.nangoConnectionId) {
+            return res.status(400).json({ error: 'Repository not connected via Nango' });
+        }
+        // Create PR via Nango Proxy (handles token injection automatically)
+        const [owner, repo] = repository.githubFullName.split('/');
+        const pr = await nangoService.createGithubPullRequest(repository.nangoConnectionId, owner, repo, { title, body: body || '', head, base });
+        res.json({
+            number: pr.number,
+            url: pr.html_url,
+        });
+    }
+    catch (error) {
+        console.error('Error creating PR:', error);
+        res.status(500).json({ error: 'Failed to create pull request' });
+    }
+});
+/**
+ * POST /api/github-app/repos/:id/comments
+ * Add a comment to an issue or PR
+ */
+githubAppRouter.post('/repos/:id/comments', async (req, res) => {
+    const userId = req.session.userId;
+    const { id } = req.params;
+    const { issueNumber, body } = req.body;
+    if (!issueNumber || !body) {
+        return res.status(400).json({ error: 'issueNumber and body are required' });
+    }
+    try {
+        const repository = await db.repositories.findById(id);
+        if (!repository || repository.userId !== userId) {
+            return res.status(404).json({ error: 'Repository not found' });
+        }
+        if (!repository.nangoConnectionId) {
+            return res.status(400).json({ error: 'Repository not connected via Nango' });
+        }
+        // Add comment via Nango Proxy (handles token injection automatically)
+        const [owner, repo] = repository.githubFullName.split('/');
+        const comment = await nangoService.addGithubIssueComment(repository.nangoConnectionId, owner, repo, issueNumber, body);
+        res.json({
+            id: comment.id,
+            url: comment.html_url,
+        });
+    }
+    catch (error) {
+        console.error('Error adding comment:', error);
+        res.status(500).json({ error: 'Failed to add comment' });
+    }
+});
+//# sourceMappingURL=github-app.js.map

package/dist/cloud/api/github-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-app.js","sourceRoot":"","sources":["../../../src/cloud/api/github-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAExE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC;AAExC,oCAAoC;AACpC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAEjC;;;GAGG;AACH,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC9D,GAAG,CAAC,IAAI,CAAC;QACP,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,kBAAkB;QAChC,UAAU,EAAE,gBAAgB;KAC7B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAClE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEzD,GAAG,CAAC,IAAI,CAAC;YACP,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,QAAQ,EAAE,CAAC,CAAC,cAAc;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;gBACzC,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,eAAe,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IAE3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC;QACH,sCAAsC;QACtC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;QAEpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,oCAAoC;gBAC3C,IAAI,EAAE,wDAAwD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,0BAA0B,KAAK,eAAe,IAAI,MAAM,CAAC;QAE1E,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,eAAe,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAEzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,uEAAuE;QACvE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAChD,UAAU,CAAC,iBAAiB,EAC5B,KAAK,EACL,IAAI,EACJ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,CACpC,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,eAAe,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,oEAAoE;QACpE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,uBAAuB,CACnD,UAAU,CAAC,iBAAiB,EAC5B,KAAK,EACL,IAAI,EACJ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CACxC,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,EAAE,EAAE,CAAC,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,eAAe,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAEvC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,sEAAsE;QACtE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,qBAAqB,CACtD,UAAU,CAAC,iBAAiB,EAC5B,KAAK,EACL,IAAI,EACJ,WAAW,EACX,IAAI,CACL,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,GAAG,EAAE,OAAO,CAAC,QAAQ;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC,CAAC"}