fission-worker 0.2.1 → 0.3.0

package/dist/docker.d.ts

@@ -16,7 +16,7 @@ export interface PipelineJob {
 }
 /**
  * Start a pipeline session on the host machine (no Docker).
- * Clones repo to a temp workspace, runs Claude CLI directly,
+ * Clones repo to a temp workspace, runs the pipeline engine directly,
  * cleans up when done. Uses the host's Claude subscription auth.
  */
 export declare function startSession(job: PipelineJob, config: WorkerConfig, activeSessions: Map<string, ChildProcess>): void;

package/dist/docker.js

@@ -6,7 +6,7 @@ const fs_1 = require("fs");
 const path_1 = require("path");
 /**
  * Start a pipeline session on the host machine (no Docker).
- * Clones repo to a temp workspace, runs Claude CLI directly,
+ * Clones repo to a temp workspace, runs the pipeline engine directly,
  * cleans up when done. Uses the host's Claude subscription auth.
  */
 function startSession(job, config, activeSessions) {
@@ -44,45 +44,62 @@ function startSession(job, config, activeSessions) {
         return;
     }
     console.log(`[${tag}] Clone complete, starting pipeline...`);
-    // Emit initial progress to the dashboard
-    emitEvent(config, job.projectId, "phase_changed", {
-        sessionId: job.sessionId,
-        phase: "REVIEW",
-        reason: "Worker starting pipeline",
-    });
-    // Run Claude in the cloned repo — uses host's Claude subscription
-    const prompt = `You are an autonomous R&D pipeline. Analyze this codebase and do the following:\n\n` +
-        `1. REVIEW: Scan for the top 3-5 issues (bugs, security, performance, improvements)\n` +
-        `2. PLAN: For each issue, create a concrete implementation task\n` +
-        `3. BUILD: Implement the highest priority task — make the changes and commit\n` +
-        `4. REVIEW: Check your work for correctness\n\n` +
-        `Work autonomously. Make real code changes and commit them with descriptive messages.\n` +
-        `When done, report what you accomplished as JSON:\n` +
-        `{summary: string, tasksCompleted: string[], filesChanged: string[], commits: string[]}\n` +
-        `Return ONLY valid JSON.`;
-    const proc = (0, child_process_1.spawn)("claude", [
-        "-p", prompt,
-        "--output-format", "json",
-        "--verbose",
-    ], {
-        cwd: repoDir,
-        env: { ...process.env },
-        stdio: ["ignore", "pipe", "pipe"],
-    });
+    // Find the pipeline runner script (built from Fission repo)
+    const runnerScript = findRunnerScript();
+    // Environment for the pipeline process
+    const pipelineEnv = {
+        ...process.env,
+        FISSION_API_URL: config.fissionUrl,
+        FISSION_API_KEY: config.apiKey,
+        SESSION_ID: job.sessionId,
+        PROJECT_ID: job.projectId,
+        REPO_URL: repo.repoUrl,
+        REPO_BRANCH: repo.branch || "main",
+        GITHUB_TOKEN: gitToken || "",
+        // Override workspace for the runner — it clones again but we already did it
+        FISSION_REPO_PATH: repoDir,
+    };
+    let proc;
+    if (runnerScript) {
+        // Full pipeline engine — runs CTO → Tech Lead → Workers loop
+        console.log(`[${tag}] Using pipeline runner: ${runnerScript}`);
+        proc = (0, child_process_1.spawn)("node", [runnerScript], {
+            cwd: repoDir,
+            env: pipelineEnv,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+    }
+    else {
+        // Fallback — run Claude directly with a comprehensive prompt
+        console.log(`[${tag}] Pipeline runner not found, using Claude directly`);
+        const prompt = `You are an autonomous R&D pipeline. Analyze this codebase and do the following:\n\n` +
+            `1. REVIEW: Scan for the top 3-5 issues (bugs, security, performance, improvements)\n` +
+            `2. PLAN: For each issue, create a concrete implementation task\n` +
+            `3. BUILD: Implement the highest priority task — make the changes and commit\n` +
+            `4. REVIEW: Check your work for correctness\n\n` +
+            `Work autonomously. Make real code changes and commit them with descriptive messages.\n` +
+            `When done, report what you accomplished as JSON:\n` +
+            `{summary: string, tasksCompleted: string[], filesChanged: string[], commits: string[]}\n` +
+            `Return ONLY valid JSON.`;
+        proc = (0, child_process_1.spawn)("claude", ["-p", prompt, "--output-format", "json", "--verbose"], {
+            cwd: repoDir,
+            env: pipelineEnv,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+    }
     activeSessions.set(job.sessionId, proc);
     let stdout = "";
     proc.stdout?.on("data", (chunk) => {
+        const text = chunk.toString().trim();
         stdout += chunk.toString();
+        if (text)
+            console.log(`[${tag}] ${text.slice(0, 300)}`);
     });
     proc.stderr?.on("data", (chunk) => {
         const text = chunk.toString().trim();
         if (text) {
             console.log(`[${tag}] ${text.slice(0, 200)}`);
-            // Stream Claude's activity to the dashboard
-            emitEvent(config, job.projectId, "claude_output", {
-                text,
-                phase: "BUILD",
-            });
+            emitEvent(config, job.projectId, "claude_output", { text, phase: "BUILD" });
         }
     });
     proc.on("close", (code) => {
@@ -90,9 +107,7 @@ function startSession(job, config, activeSessions) {
         activeSessions.delete(job.sessionId);
         // Push commits back to GitHub (if any were made)
         try {
-            const hasCommits = (0, child_process_1.execSync)("git log --oneline origin/HEAD..HEAD 2>/dev/null || git log --oneline @{u}..HEAD 2>/dev/null", {
-                cwd: repoDir, encoding: "utf-8",
-            }).trim();
+            const hasCommits = (0, child_process_1.execSync)("git log --oneline @{u}..HEAD 2>/dev/null || echo ''", { cwd: repoDir, encoding: "utf-8" }).trim();
             if (hasCommits) {
                 console.log(`[${tag}] Pushing ${hasCommits.split("\n").length} commit(s)...`);
                 (0, child_process_1.execSync)("git push", { cwd: repoDir, stdio: "pipe" });
@@ -102,34 +117,27 @@ function startSession(job, config, activeSessions) {
         catch (pushErr) {
             console.error(`[${tag}] Push failed: ${pushErr}`);
         }
-        // Try to parse and report results
-        try {
-            const jsonStart = stdout.indexOf("{");
-            const jsonEnd = stdout.lastIndexOf("}");
-            if (jsonStart !== -1 && jsonEnd > jsonStart) {
-                const result = JSON.parse(stdout.slice(jsonStart, jsonEnd + 1));
-                console.log(`[${tag}] Summary: ${result.summary || "No summary"}`);
-                emitEvent(config, job.projectId, "pipeline_summary", {
-                    sessionId: job.sessionId,
-                    summary: {
-                        sessionId: job.sessionId,
-                        projectName: job.project.name,
-                        duration: "unknown",
-                        tasksCompleted: (result.tasksCompleted || []).map((t) => ({ title: t })),
-                        tasksFailed: [],
-                        findingsCreated: 0,
-                        filesChanged: result.filesChanged || [],
-                        commitMessages: result.commits || [],
-                    },
-                });
-            }
-        }
-        catch { /* ignore parse errors */ }
         emitEvent(config, job.projectId, "pipeline_complete", { sessionId: job.sessionId });
         cleanup(workspaceDir);
         reportCompletion(config, job.sessionId, code ?? 1);
     });
 }
+/**
+ * Find the built pipeline-runner script on the host.
+ */
+function findRunnerScript() {
+    const candidates = [
+        // Bundled with the npm package (primary — works for all users)
+        (0, path_1.join)(__dirname, "..", "runner", "pipeline-runner", "index.js"),
+        // Dev: local Fission repo build
+        (0, path_1.join)(__dirname, "..", "..", "..", "..", "dist-runner", "pipeline-runner", "index.js"),
+    ];
+    for (const candidate of candidates) {
+        if ((0, fs_1.existsSync)(candidate))
+            return candidate;
+    }
+    return null;
+}
 function emitEvent(config, projectId, type, data) {
     fetch(`${config.fissionUrl}/api/v1/worker/events`, {
         method: "POST",

package/dist/docker.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":";;AAoBA,oCA0IC;AA9JD,iDAA8D;AAC9D,2BAAuC;AACvC,+BAA4B;AAa5B;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,GAAgB,EAChB,MAAoB,EACpB,cAAyC;IAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;QACrE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAE3C,mBAAmB;IACnB,IAAA,cAAS,EAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,iBAAiB;IACjB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,0BAA0B,QAAQ,GAAG,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,QAAQ,GAAG,0BAA0B,QAAQ,eAAe,IAAI,CAAC,OAAO,MAAM,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,MAAM,IAAI,MAAM,MAAM,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,IAAA,wBAAQ,EACN,2BAA2B,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,MAAM,OAAO,GAAG,EAC7E,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,wCAAwC,CAAC,CAAC;IAE7D,yCAAyC;IACzC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE;QAChD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,0BAA0B;KACnC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,MAAM,GACV,qFAAqF;QACrF,sFAAsF;QACtF,kEAAkE;QAClE,+EAA+E;QAC/E,gDAAgD;QAChD,wFAAwF;QACxF,oDAAoD;QACpD,0FAA0F;QAC1F,yBAAyB,CAAC;IAE5B,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,MAAM;QACZ,iBAAiB,EAAE,MAAM;QACzB,WAAW;KACZ,EAAE;QACD,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,4CAA4C;YAC5C,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE;gBAChD,IAAI;gBACJ,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAErC,iDAAiD;QACjD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAA,wBAAQ,EAAC,6FAA6F,EAAE;gBACzH,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO;aAChC,CAAC,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;gBAC9E,IAAA,wBAAQ,EAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,cAAc,MAAM,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;gBACnE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,kBAAkB,EAAE;oBACnD,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE;wBACP,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;wBAC7B,QAAQ,EAAE,SAAS;wBACnB,cAAc,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;wBAChF,WAAW,EAAE,EAAE;wBACf,eAAe,EAAE,CAAC;wBAClB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;wBACvC,cAAc,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAErC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,MAAoB,EACpB,SAAiB,EACjB,IAAY,EACZ,IAAa;IAEb,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,uBAAuB,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;YACxC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,OAAO,CAAC,YAAoB;IACnC,IAAI,CAAC;QACH,IAAA,WAAM,EAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB,EAAE,SAAiB,EAAE,QAAgB;IACjF,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,2BAA2B,SAAS,WAAW,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;YACxC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;KACnC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC"}
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":";;AAoBA,oCAqIC;AAzJD,iDAA8D;AAC9D,2BAAmD;AACnD,+BAA4B;AAa5B;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,GAAgB,EAChB,MAAoB,EACpB,cAAyC;IAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;QACrE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAE3C,mBAAmB;IACnB,IAAA,cAAS,EAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,iBAAiB;IACjB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,0BAA0B,QAAQ,GAAG,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,QAAQ,GAAG,0BAA0B,QAAQ,eAAe,IAAI,CAAC,OAAO,MAAM,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,MAAM,IAAI,MAAM,MAAM,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,IAAA,wBAAQ,EACN,2BAA2B,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,MAAM,OAAO,GAAG,EAC7E,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,wCAAwC,CAAC,CAAC;IAE7D,4DAA4D;IAC5D,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IAExC,uCAAuC;IACvC,MAAM,WAAW,GAAG;QAClB,GAAG,OAAO,CAAC,GAAG;QACd,eAAe,EAAE,MAAM,CAAC,UAAU;QAClC,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,OAAO;QACtB,WAAW,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;QAClC,YAAY,EAAE,QAAQ,IAAI,EAAE;QAC5B,4EAA4E;QAC5E,iBAAiB,EAAE,OAAO;KAC3B,CAAC;IAEF,IAAI,IAAkB,CAAC;IAEvB,IAAI,YAAY,EAAE,CAAC;QACjB,6DAA6D;QAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,4BAA4B,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;YACnC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,6DAA6D;QAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,oDAAoD,CAAC,CAAC;QACzE,MAAM,MAAM,GACV,qFAAqF;YACrF,sFAAsF;YACtF,kEAAkE;YAClE,+EAA+E;YAC/E,gDAAgD;YAChD,wFAAwF;YACxF,oDAAoD;YACpD,0FAA0F;YAC1F,yBAAyB,CAAC;QAE5B,IAAI,GAAG,IAAA,qBAAK,EAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;YAC7E,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAErC,iDAAiD;QACjD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAA,wBAAQ,EACzB,qDAAqD,EACrD,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CACpC,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;gBAC9E,IAAA,wBAAQ,EAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB;IACvB,MAAM,UAAU,GAAG;QACjB,+DAA+D;QAC/D,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAC9D,gCAAgC;QAChC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,CAAC;KACtF,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,SAAiB,EAAE,IAAY,EAAE,IAAa;IACrF,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,uBAAuB,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;YACxC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,OAAO,CAAC,YAAoB;IACnC,IAAI,CAAC;QACH,IAAA,WAAM,EAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB,EAAE,SAAiB,EAAE,QAAgB;IACjF,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,2BAA2B,SAAS,WAAW,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;YACxC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;KACnC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fission-worker",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Fission Worker Agent — polls Fission API for pipeline jobs, runs them in Docker containers",
   "main": "dist/index.js",
   "bin": {
@@ -8,13 +8,14 @@
   },
   "scripts": {
     "build": "tsc",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "npm run build && npm run bundle-runner",
+    "bundle-runner": "rm -rf runner && mkdir -p runner && cp -r ../../dist-runner/* runner/",
     "start": "node dist/index.js start",
     "dev": "tsx src/index.ts start"
   },
   "keywords": ["fission", "pipeline", "worker", "docker", "claude"],
   "license": "MIT",
-  "files": ["dist", "README.md"],
+  "files": ["dist", "runner", "README.md"],
   "dependencies": {
     "commander": "^13.0.0",
     "inquirer": "^12.0.0"

package/runner/common/decorators/current-user.decorator.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentUser = void 0;
+const common_1 = require("@nestjs/common");
+exports.CurrentUser = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    if (data)
+        return request.user?.[data];
+    return request.user;
+});

package/runner/common/decorators/public.decorator.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Public = exports.IS_PUBLIC_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.IS_PUBLIC_KEY = "isPublic";
+const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
+exports.Public = Public;

package/runner/common/decorators/roles.decorator.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Roles = exports.ROLES_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.ROLES_KEY = "roles";
+const Roles = (...roles) => (0, common_1.SetMetadata)(exports.ROLES_KEY, roles);
+exports.Roles = Roles;

package/runner/common/services/activity-log.service.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var ActivityLogService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActivityLogService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../../prisma/prisma.service");
+let ActivityLogService = ActivityLogService_1 = class ActivityLogService {
+    prisma;
+    logger = new common_1.Logger(ActivityLogService_1.name);
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    /**
+     * Write an audit log entry. Never throws — log failures are swallowed
+     * so they cannot disrupt the parent operation.
+     */
+    async log(action, entityType, entityId, userId, details, ipAddress) {
+        try {
+            await this.prisma.activityLog.create({
+                data: {
+                    action,
+                    entityType,
+                    entityId,
+                    userId: userId ?? null,
+                    details: (details ?? undefined),
+                    ipAddress: ipAddress ?? null,
+                },
+            });
+        }
+        catch (error) {
+            this.logger.error(`Failed to write activity log [${action} ${entityType}/${entityId}]: ${error}`);
+        }
+    }
+};
+exports.ActivityLogService = ActivityLogService;
+exports.ActivityLogService = ActivityLogService = ActivityLogService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], ActivityLogService);

package/runner/common/services/event-bus.service.js

@@ -0,0 +1,38 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var EventBusService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventBusService = void 0;
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const operators_1 = require("rxjs/operators");
+let EventBusService = EventBusService_1 = class EventBusService {
+    logger = new common_1.Logger(EventBusService_1.name);
+    subject = new rxjs_1.Subject();
+    /**
+     * Emit an event for a project. All SSE subscribers for that project
+     * will receive it.
+     */
+    emit(projectId, type, data) {
+        this.logger.debug(`Event [${type}] for project ${projectId}`);
+        this.subject.next({ projectId, type, data });
+    }
+    /**
+     * Get an observable stream of MessageEvents filtered to a specific project.
+     * Each emitted value conforms to NestJS's MessageEvent interface for SSE.
+     */
+    getStream(projectId) {
+        return this.subject.pipe((0, operators_1.filter)((e) => e.projectId === projectId), (0, operators_1.map)((e) => ({
+            data: JSON.stringify({ type: e.type, data: e.data }),
+        })));
+    }
+};
+exports.EventBusService = EventBusService;
+exports.EventBusService = EventBusService = EventBusService_1 = __decorate([
+    (0, common_1.Injectable)()
+], EventBusService);

package/runner/modules/github/github.controller.js

@@ -0,0 +1,155 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var GithubController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GithubController = void 0;
+const common_1 = require("@nestjs/common");
+const throttler_1 = require("@nestjs/throttler");
+const prisma_service_1 = require("../../prisma/prisma.service");
+const public_decorator_1 = require("../../common/decorators/public.decorator");
+const github_service_1 = require("./github.service");
+let GithubController = GithubController_1 = class GithubController {
+    github;
+    prisma;
+    logger = new common_1.Logger(GithubController_1.name);
+    constructor(github, prisma) {
+        this.github = github;
+        this.prisma = prisma;
+    }
+    /**
+     * GET /github/install?projectId=xxx
+     * Redirects the user to GitHub to install the Fission Pipeline app.
+     * The projectId is passed as state so we can link the installation on callback.
+     */
+    async install(projectId, res) {
+        const url = this.github.getInstallUrl(projectId);
+        res.status(302).header("Location", url).send();
+    }
+    /**
+     * GET /github/callback?installation_id=xxx&setup_action=install&state=projectId
+     * GitHub redirects here after the user installs the app.
+     * We store the installation ID on the project's repositories.
+     */
+    async callback(installationId, setupAction, state, res) {
+        this.logger.log(`GitHub callback: installation_id=${installationId} action=${setupAction} state=${state}`);
+        if (setupAction === "install" && installationId && state) {
+            const installId = parseInt(installationId, 10);
+            const projectId = state;
+            // Get the list of repos this installation has access to
+            try {
+                const repos = await this.github.getInstallationRepos(installId);
+                // Update all matching repositories for this project
+                const projectRepos = await this.prisma.repository.findMany({
+                    where: { projectId },
+                });
+                for (const projRepo of projectRepos) {
+                    // Match by comparing the repoUrl with the GitHub repo full_name
+                    const match = repos.find((r) => {
+                        const fullName = r.full_name.toLowerCase();
+                        return (projRepo.repoUrl.toLowerCase().includes(fullName) ||
+                            fullName.includes(projRepo.name.toLowerCase()));
+                    });
+                    if (match) {
+                        const [owner, repo] = match.full_name.split("/");
+                        await this.prisma.repository.update({
+                            where: { id: projRepo.id },
+                            data: {
+                                githubInstallationId: installId,
+                                githubOwner: owner,
+                                githubRepo: repo,
+                            },
+                        });
+                        this.logger.log(`Linked repo ${projRepo.name} → ${match.full_name} (installation: ${installId})`);
+                    }
+                }
+                // If no existing repos matched, store installation on all project repos
+                if (projectRepos.length > 0) {
+                    await this.prisma.repository.updateMany({
+                        where: { projectId, githubInstallationId: null },
+                        data: { githubInstallationId: installId },
+                    });
+                }
+            }
+            catch (err) {
+                this.logger.error(`Failed to process GitHub installation: ${err}`);
+            }
+        }
+        // Redirect back to the project page in the dashboard
+        const redirectUrl = state
+            ? `/projects/${state}`
+            : "/projects";
+        res.status(302).header("Location", redirectUrl).send();
+    }
+    /**
+     * GET /github/repos/:installationId
+     * List repositories accessible to a GitHub App installation.
+     */
+    async listRepos(installationId) {
+        const repos = await this.github.getInstallationRepos(parseInt(installationId, 10));
+        return {
+            data: repos.map((r) => ({
+                fullName: r.full_name,
+                private: r.private,
+                cloneUrl: r.clone_url,
+                defaultBranch: r.default_branch,
+            })),
+        };
+    }
+    /**
+     * GET /github/status
+     * Check if GitHub App is configured.
+     */
+    async status() {
+        return { data: { configured: this.github.isConfigured() } };
+    }
+};
+exports.GithubController = GithubController;
+__decorate([
+    (0, common_1.Get)("install"),
+    __param(0, (0, common_1.Query)("projectId")),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], GithubController.prototype, "install", null);
+__decorate([
+    (0, common_1.Get)("callback"),
+    __param(0, (0, common_1.Query)("installation_id")),
+    __param(1, (0, common_1.Query)("setup_action")),
+    __param(2, (0, common_1.Query)("state")),
+    __param(3, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], GithubController.prototype, "callback", null);
+__decorate([
+    (0, common_1.Get)("repos/:installationId"),
+    __param(0, (0, common_1.Param)("installationId")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], GithubController.prototype, "listRepos", null);
+__decorate([
+    (0, common_1.Get)("status"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], GithubController.prototype, "status", null);
+exports.GithubController = GithubController = GithubController_1 = __decorate([
+    (0, common_1.Controller)("github"),
+    (0, public_decorator_1.Public)(),
+    (0, throttler_1.SkipThrottle)({ global: true }),
+    __metadata("design:paramtypes", [github_service_1.GithubService,
+        prisma_service_1.PrismaService])
+], GithubController);

package/runner/modules/github/github.module.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GithubModule = void 0;
+const common_1 = require("@nestjs/common");
+const github_service_1 = require("./github.service");
+const github_controller_1 = require("./github.controller");
+let GithubModule = class GithubModule {
+};
+exports.GithubModule = GithubModule;
+exports.GithubModule = GithubModule = __decorate([
+    (0, common_1.Module)({
+        controllers: [github_controller_1.GithubController],
+        providers: [github_service_1.GithubService],
+        exports: [github_service_1.GithubService],
+    })
+], GithubModule);

package/runner/modules/github/github.service.js

@@ -0,0 +1,104 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var GithubService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GithubService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const fs_1 = require("fs");
+const jsonwebtoken_1 = require("jsonwebtoken");
+let GithubService = GithubService_1 = class GithubService {
+    config;
+    logger = new common_1.Logger(GithubService_1.name);
+    appId;
+    privateKey;
+    constructor(config) {
+        this.config = config;
+        this.appId = this.config.get("GITHUB_APP_ID", "");
+        const keyPath = this.config.get("GITHUB_PRIVATE_KEY_PATH", "");
+        try {
+            this.privateKey = keyPath ? (0, fs_1.readFileSync)(keyPath, "utf-8") : "";
+        }
+        catch {
+            this.logger.warn("GitHub App private key not found — GitHub integration disabled");
+            this.privateKey = "";
+        }
+    }
+    /** Whether the GitHub App is configured. */
+    isConfigured() {
+        return !!(this.appId && this.privateKey);
+    }
+    /**
+     * Generate a JWT for authenticating as the GitHub App.
+     * Valid for 10 minutes (GitHub max).
+     */
+    generateAppJwt() {
+        const now = Math.floor(Date.now() / 1000);
+        return (0, jsonwebtoken_1.sign)({
+            iat: now - 60, // 60 seconds in the past for clock drift
+            exp: now + 10 * 60, // 10 minutes
+            iss: this.appId,
+        }, this.privateKey, { algorithm: "RS256" });
+    }
+    /**
+     * Generate a short-lived installation access token for a specific installation.
+     * This token can clone/push to repos the installation has access to.
+     */
+    async getInstallationToken(installationId) {
+        const jwt = this.generateAppJwt();
+        const res = await fetch(`https://api.github.com/app/installations/${installationId}/access_tokens`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${jwt}`,
+                Accept: "application/vnd.github+json",
+                "X-GitHub-Api-Version": "2022-11-28",
+            },
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            throw new Error(`GitHub installation token failed: ${res.status} ${body}`);
+        }
+        const data = (await res.json());
+        return data.token;
+    }
+    /**
+     * List repositories accessible to an installation.
+     */
+    async getInstallationRepos(installationId) {
+        const token = await this.getInstallationToken(installationId);
+        const res = await fetch("https://api.github.com/installation/repositories?per_page=100", {
+            headers: {
+                Authorization: `Bearer ${token}`,
+                Accept: "application/vnd.github+json",
+                "X-GitHub-Api-Version": "2022-11-28",
+            },
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            throw new Error(`GitHub list repos failed: ${res.status} ${body}`);
+        }
+        const data = (await res.json());
+        return data.repositories;
+    }
+    /**
+     * Get the installation URL for the GitHub App.
+     * Redirect users here to install the app on their repos.
+     */
+    getInstallUrl(state) {
+        const base = `https://github.com/apps/fission-pipeline/installations/new`;
+        return state ? `${base}?state=${encodeURIComponent(state)}` : base;
+    }
+};
+exports.GithubService = GithubService;
+exports.GithubService = GithubService = GithubService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], GithubService);