claude-issue-solver 1.24.1 → 1.24.3

package/README.md

@@ -279,6 +279,8 @@ Claude auto-detects whether you're reviewing your own PR or someone else's:
 cis config bot-token    # Interactive setup with instructions
 ```
 
+> **Note**: For private repos, use a **Classic Token** with `repo` scope. Fine-grained tokens don't work well for collaborator access to repos you don't own.
+
 ## Tips
 
 - PRs are created automatically when Claude makes commits - no need to wait until the end

package/dist/commands/config.js

@@ -81,6 +81,18 @@ function validateToken(token) {
         return { valid: false, error: error.message };
     }
 }
+function getCurrentUser() {
+    try {
+        const output = (0, child_process_1.execSync)('gh api user --jq .login', {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return output.trim();
+    }
+    catch {
+        return null;
+    }
+}
 async function configCommand(action, value) {
     // Handle clear action
     if (action === '--clear' || action === 'clear') {
@@ -186,16 +198,20 @@ ${chalk_1.default.bold('You have two options:')}\n`);
     }
     // Open GitHub token page
     console.log(chalk_1.default.bold('\n🔑 Creating a Personal Access Token\n'));
-    console.log(`I'll open GitHub's token creation page. Create a token with:
+    console.log(`I'll open GitHub's token creation page.
 
-${chalk_1.default.bold('Settings:')}
-  • Token name: ${chalk_1.default.cyan('claude-issue-solver-bot')}
-  • Expiration: ${chalk_1.default.cyan('90 days')} (or your preference)
-  • Repository access: ${chalk_1.default.cyan('Only select repositories')} (pick your repos)
+${chalk_1.default.bold.yellow('⚠️  Use a Classic Token for private repos you don\'t own!')}
+Fine-grained tokens don't work well for collaborator access.
 
-${chalk_1.default.bold('Permissions needed:')}
-  • ${chalk_1.default.cyan('Pull requests')}: Read and write
-  • ${chalk_1.default.cyan('Contents')}: Read (to see PR diffs)
+${chalk_1.default.bold('Option 1: Classic Token')} ${chalk_1.default.green('(recommended for private repos)')}
+  • Click "${chalk_1.default.cyan('Generate new token (classic)')}"
+  • Note: ${chalk_1.default.cyan('claude-issue-solver-bot')}
+  • Expiration: ${chalk_1.default.cyan('90 days')}
+  • Scope: ${chalk_1.default.cyan('repo')} (full control of private repositories)
+
+${chalk_1.default.bold('Option 2: Fine-grained Token')} ${chalk_1.default.dim('(only for repos the bot owns)')}
+  • Repository access: ${chalk_1.default.cyan('All repositories')}
+  • Permissions: ${chalk_1.default.cyan('Pull requests')} (Read/write), ${chalk_1.default.cyan('Contents')} (Read)
 `);
     const { openBrowser } = await inquirer_1.default.prompt([
         {
@@ -206,7 +222,7 @@ ${chalk_1.default.bold('Permissions needed:')}
         },
     ]);
     if (openBrowser) {
-        const tokenUrl = 'https://github.com/settings/personal-access-tokens/new';
+        const tokenUrl = 'https://github.com/settings/tokens';
         try {
             if (process.platform === 'darwin') {
                 (0, child_process_1.execSync)(`open "${tokenUrl}"`, { stdio: 'pipe' });
@@ -244,6 +260,21 @@ async function promptForToken() {
     console.log(chalk_1.default.dim('\nValidating token...'));
     const result = validateToken(token);
     if (result.valid) {
+        // Check if token belongs to the same user as current gh auth
+        const currentUser = getCurrentUser();
+        if (currentUser && result.login === currentUser) {
+            console.log(chalk_1.default.red(`\n❌ This token belongs to your current account (${currentUser}).`));
+            console.log(chalk_1.default.yellow('\n⚠️  To approve your own PRs, you need a DIFFERENT account.'));
+            console.log(chalk_1.default.dim('\nGitHub doesn\'t allow approving your own PRs, even with a different token.'));
+            console.log(chalk_1.default.dim('The bot must be a separate GitHub account.\n'));
+            console.log('Steps to create a bot account:');
+            console.log(chalk_1.default.dim('  1. Sign out of GitHub (or use incognito)'));
+            console.log(chalk_1.default.dim(`  2. Create new account (e.g., ${currentUser}-bot)`));
+            console.log(chalk_1.default.dim('  3. Add the bot as collaborator to your repos'));
+            console.log(chalk_1.default.dim('  4. Create a token from the bot account'));
+            console.log(chalk_1.default.dim('  5. Run `cis config bot-token` again\n'));
+            return;
+        }
         const config = getConfig();
         config.botToken = token;
         saveConfig(config);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-issue-solver",
-  "version": "1.24.1",
+  "version": "1.24.3",
   "description": "Automatically solve GitHub issues using Claude Code",
   "main": "dist/index.js",
   "bin": {