lastlight 0.1.15 → 0.2.1

package/dist/engine/executor.js

@@ -1,292 +0,0 @@
-import { readFileSync, readdirSync } from "fs";
-import { join, resolve } from "path";
-import { randomUUID } from "crypto";
-import { createTaskSandbox } from "../sandbox/index.js";
-import { refreshGitAuth } from "./git-auth.js";
-/** Default directory for agent context files (soul, rules, etc.) */
-const AGENT_CONTEXT_DIR = resolve("agent-context");
-const GITHUB_PERMISSION_PROFILES = {
-    read: {
-        contents: "read",
-        issues: "read",
-        pull_requests: "read",
-        metadata: "read",
-    },
-    "issues-write": {
-        contents: "read",
-        issues: "write",
-        pull_requests: "read",
-        metadata: "read",
-    },
-    "review-write": {
-        contents: "read",
-        issues: "write",
-        pull_requests: "write",
-        metadata: "read",
-    },
-    "repo-write": {
-        contents: "write",
-        issues: "write",
-        pull_requests: "write",
-        metadata: "read",
-    },
-};
-/**
- * Load all .md files from the agent-context directory and concatenate
- * them into a single system prompt string.
- */
-function loadAgentContext(dir) {
-    const contextDir = dir || AGENT_CONTEXT_DIR;
-    try {
-        const files = readdirSync(contextDir)
-            .filter((f) => f.endsWith(".md"))
-            .sort();
-        return files
-            .map((f) => readFileSync(join(contextDir, f), "utf-8"))
-            .join("\n\n---\n\n");
-    }
-    catch {
-        console.warn(`[executor] No agent context found at ${contextDir}`);
-        return "";
-    }
-}
-/**
- * Execute an agent task.
- *
- * Execution modes (automatic):
- * 1. Docker sandbox — if Docker + sandbox image available, runs `claude --print`
- *    inside an isolated container. Full sandboxing.
- * 2. Direct — runs Agent SDK query() in-process. Local dev fallback.
- */
-export async function executeAgent(prompt, config, opts) {
-    const taskId = opts?.taskId || `task-${randomUUID().slice(0, 8)}`;
-    const stateDir = config.stateDir || resolve("data");
-    // Generate a fresh GitHub App token for the sandbox so git works immediately
-    const env = {};
-    const access = opts?.githubAccess;
-    if (process.env.GITHUB_APP_ID) {
-        const allowMcpAppAuth = access?.allowMcpAppAuth === true;
-        env.ALLOW_APP_PEM = allowMcpAppAuth ? "1" : "0";
-        env.GITHUB_APP_ID = allowMcpAppAuth ? process.env.GITHUB_APP_ID : "";
-        env.GITHUB_APP_INSTALLATION_ID = allowMcpAppAuth
-            ? (process.env.GITHUB_APP_INSTALLATION_ID || "")
-            : "";
-        // sandbox-entrypoint materializes app.pem at this path only when ALLOW_APP_PEM=1
-        env.GITHUB_APP_PRIVATE_KEY_PATH = allowMcpAppAuth ? "/home/agent/.claude/app.pem" : "";
-        try {
-            const permissions = access ? GITHUB_PERMISSION_PROFILES[access.profile] : undefined;
-            const repositories = access?.repo ? [access.repo] : undefined;
-            console.log(`[executor] Minting git token: profile=${access?.profile ?? "default"}, ` +
-                `repo=${access?.repo || "(unscoped)"}, permissions=${permissions ? Object.keys(permissions).join(",") : "all"}`);
-            const { token } = await refreshGitAuth({
-                appId: process.env.GITHUB_APP_ID,
-                privateKeyPath: process.env.GITHUB_APP_PRIVATE_KEY_PATH || "",
-                installationId: process.env.GITHUB_APP_INSTALLATION_ID || "",
-                permissions,
-                repositories,
-            });
-            // Git CLI helper inside the sandbox
-            env.GIT_TOKEN = token;
-            // MCP GitHub server static-token mode
-            env.GITHUB_TOKEN = token;
-        }
-        catch (err) {
-            console.warn(`[executor] Could not generate git token (repo=${access?.repo || "none"}, ` +
-                `profile=${access?.profile ?? "default"}): ${err.message}`);
-        }
-    }
-    // Try Docker sandbox first
-    const sbx = await createTaskSandbox({
-        taskId,
-        stateDir,
-        sandboxDir: config.sandboxDir,
-        env,
-    });
-    if (sbx) {
-        return executeSandboxed(prompt, config, sbx.sandbox, taskId, sbx.cleanup, opts?.onSessionId);
-    }
-    // Direct execution only if explicitly enabled — sandboxing is the default
-    if (process.env.ENABLE_DIRECT_FALLBACK === "true") {
-        console.warn(`  [executor] No sandbox available — falling back to direct execution`);
-        return executeDirect(prompt, config);
-    }
-    throw new Error("Docker sandbox not available and ENABLE_DIRECT_FALLBACK is not enabled. Install Docker and build the sandbox image (docker-compose build sandbox), or set ENABLE_DIRECT_FALLBACK=true.");
-}
-// ── Docker sandbox execution ────────────────────────────────────────
-async function executeSandboxed(prompt, config, sandbox, taskId, cleanup, onSessionId) {
-    const startTime = Date.now();
-    console.log(`  [executor] Running in sandbox (task: ${taskId})`);
-    // Track whether we've already notified the caller of the session id, so
-    // the parser doesn't fire the callback twice (init line + later result).
-    let notifiedSessionId = false;
-    try {
-        const output = await sandbox.runAgent(taskId, prompt, {
-            model: config.model,
-            onLine: (line) => {
-                if (notifiedSessionId || !onSessionId)
-                    return;
-                if (!line.startsWith("{"))
-                    return;
-                try {
-                    const msg = JSON.parse(line);
-                    if (msg.type === "system" &&
-                        msg.subtype === "init" &&
-                        typeof msg.session_id === "string") {
-                        notifiedSessionId = true;
-                        onSessionId(msg.session_id);
-                    }
-                }
-                catch { /* not a complete json line yet — ignore */ }
-            },
-        });
-        // Parse stream-json for final result, session id, and usage metrics
-        const lines = output.split("\n").filter(l => l.startsWith("{"));
-        let result = "";
-        let turns = 0;
-        let subtype = "unknown";
-        let sessionId;
-        let costUsd;
-        let inputTokens;
-        let cacheCreationInputTokens;
-        let cacheReadInputTokens;
-        let outputTokens;
-        let apiDurationMs;
-        for (const line of lines) {
-            try {
-                const msg = JSON.parse(line);
-                if (msg.type === "system" && msg.subtype === "init" && typeof msg.session_id === "string") {
-                    sessionId = msg.session_id;
-                }
-                if (msg.type === "result") {
-                    result = msg.result || "";
-                    turns = msg.num_turns || 0;
-                    subtype = msg.subtype || "unknown";
-                    if (typeof msg.total_cost_usd === "number")
-                        costUsd = msg.total_cost_usd;
-                    if (typeof msg.duration_api_ms === "number")
-                        apiDurationMs = msg.duration_api_ms;
-                    if (msg.usage) {
-                        const u = msg.usage;
-                        if (typeof u.input_tokens === "number")
-                            inputTokens = u.input_tokens;
-                        if (typeof u.cache_creation_input_tokens === "number")
-                            cacheCreationInputTokens = u.cache_creation_input_tokens;
-                        if (typeof u.cache_read_input_tokens === "number")
-                            cacheReadInputTokens = u.cache_read_input_tokens;
-                        if (typeof u.output_tokens === "number")
-                            outputTokens = u.output_tokens;
-                    }
-                }
-            }
-            catch { /* skip */ }
-        }
-        const durationMs = Date.now() - startTime;
-        const success = subtype === "success";
-        const costStr = costUsd !== undefined ? `, $${costUsd.toFixed(4)}` : "";
-        console.log(`  [executor] Result: ${subtype} (${turns} turns, ${Math.round(durationMs / 1000)}s${costStr})${sessionId ? ` [session ${sessionId}]` : ""}`);
-        if (!success) {
-            console.error(`  [executor] Error: ${result || subtype}`);
-        }
-        const metrics = {
-            sessionId,
-            costUsd,
-            inputTokens,
-            cacheCreationInputTokens,
-            cacheReadInputTokens,
-            outputTokens,
-            apiDurationMs,
-            stopReason: subtype,
-        };
-        // Detect billing/auth errors
-        const lower = (result || "").toLowerCase();
-        if (lower.includes("credit balance") || lower.includes("rate limit") || lower.includes("unauthorized")) {
-            console.error(`  [executor] Account error: ${result}`);
-            return { success: false, output: result, turns, error: result, durationMs, ...metrics };
-        }
-        return { success, output: result, turns, durationMs, ...metrics };
-    }
-    catch (err) {
-        console.error(`  [executor] Sandbox error: ${err.message}`);
-        return {
-            success: false,
-            output: "",
-            turns: 0,
-            error: err.message,
-            durationMs: Date.now() - startTime,
-        };
-    }
-    finally {
-        await cleanup();
-    }
-}
-// ── Direct Agent SDK execution (fallback) ───────────────────────────
-async function executeDirect(prompt, config) {
-    const startTime = Date.now();
-    let turns = 0;
-    let output = "";
-    console.log(`  [executor] Running directly (no sandbox)`);
-    try {
-        const { query } = await import("@anthropic-ai/claude-agent-sdk");
-        const systemPrompt = loadAgentContext(config.agentContextDir);
-        const options = {
-            permissionMode: "bypassPermissions",
-            maxTurns: config.maxTurns || 200,
-            settingSources: [],
-        };
-        if (config.cwd)
-            options.cwd = config.cwd;
-        if (systemPrompt)
-            options.systemPrompt = systemPrompt;
-        if (config.model)
-            options.model = config.model;
-        if (config.mcpConfigPath) {
-            try {
-                const mcpConfig = JSON.parse(readFileSync(config.mcpConfigPath, "utf-8"));
-                options.mcpServers = mcpConfig.mcpServers;
-            }
-            catch (err) {
-                console.warn(`[executor] Could not load MCP config: ${err}`);
-            }
-        }
-        let sessionId = "";
-        console.log(`  [executor] Starting agent (model: ${config.model || "default"}, maxTurns: ${options.maxTurns})`);
-        for await (const message of query({ prompt, options })) {
-            const msg = message;
-            if (msg.type === "system" && msg.subtype === "init") {
-                sessionId = msg.session_id || "";
-                if (sessionId) {
-                    console.log(`  [executor] Session: ${sessionId}`);
-                    console.log(`  [executor] Log: ~/.claude/projects/*/${sessionId}.jsonl`);
-                }
-            }
-            if (msg.type === "assistant")
-                turns++;
-            if (msg.type === "result") {
-                output = msg.result || msg.subtype || "";
-                const duration = msg.duration_ms ? `${Math.round(msg.duration_ms / 1000)}s` : "";
-                console.log(`  [executor] Result: ${msg.subtype} (${turns} turns, ${duration})`);
-                if (msg.subtype !== "success") {
-                    console.error(`  [executor] Error: ${msg.error || msg.result || msg.subtype}`);
-                }
-                const lower = (output || "").toLowerCase();
-                if (lower.includes("credit balance") || lower.includes("rate limit") || lower.includes("unauthorized")) {
-                    console.error(`  [executor] Account error: ${output}`);
-                    return { success: false, output, turns, error: output, durationMs: Date.now() - startTime };
-                }
-            }
-        }
-        return { success: true, output, turns, durationMs: Date.now() - startTime, sessionId: sessionId || undefined };
-    }
-    catch (err) {
-        const errorDetail = err.stderr ? `${err.message}\nstderr: ${err.stderr}` : err.message || String(err);
-        console.error(`  [executor] Error: ${errorDetail}`);
-        return {
-            success: false,
-            output: output || errorDetail,
-            turns,
-            error: output ? `${output} (${errorDetail})` : errorDetail,
-            durationMs: Date.now() - startTime,
-        };
-    }
-}
-//# sourceMappingURL=executor.js.map

package/dist/engine/executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/engine/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAsB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAA+B,MAAM,eAAe,CAAC;AAE5E,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AA8DnD,MAAM,0BAA0B,GAAqD;IACnF,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM;QACd,aAAa,EAAE,MAAM;QACrB,QAAQ,EAAE,MAAM;KACjB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,MAAM;QACrB,QAAQ,EAAE,MAAM;KACjB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,MAAM;KACjB;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,MAAM;KACjB;CACF,CAAC;AAEF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,UAAU,GAAG,GAAG,IAAI,iBAAiB,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aAChC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;aACtD,IAAI,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,MAAsB,EACtB,IAUC;IAED,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEpD,6EAA6E;IAC7E,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAG,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;QACzD,GAAG,CAAC,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,GAAG,CAAC,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,0BAA0B,GAAG,eAAe;YAC9C,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,iFAAiF;QACjF,GAAG,CAAC,2BAA2B,GAAG,eAAe,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvF,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,MAAM,YAAY,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,EAAE,OAAO,IAAI,SAAS,IAAI;gBACzE,QAAQ,MAAM,EAAE,IAAI,IAAI,YAAY,iBAAiB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAChH,CAAC;YACF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;gBAChC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE;gBAC7D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE;gBAC5D,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;YACH,oCAAoC;YACpC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;YACtB,sCAAsC;YACtC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,iDAAiD,MAAM,EAAE,IAAI,IAAI,MAAM,IAAI;gBAC3E,WAAW,MAAM,EAAE,OAAO,IAAI,SAAS,MAAM,GAAG,CAAC,OAAO,EAAE,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;QAClC,MAAM;QACN,QAAQ;QACR,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/F,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACrF,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;AAC5M,CAAC;AAGD,uEAAuE;AAEvE,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,MAAsB,EACtB,OAAsB,EACtB,MAAc,EACd,OAA4B,EAC5B,WAAyC;IAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,0CAA0C,MAAM,GAAG,CAAC,CAAC;IAEjE,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE;YACpD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,iBAAiB,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAClC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7B,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ;wBACrB,GAAG,CAAC,OAAO,KAAK,MAAM;wBACtB,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAClC,CAAC;wBACD,iBAAiB,GAAG,IAAI,CAAC;wBACzB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;YACzD,CAAC;SACF,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,SAAS,CAAC;QACxB,IAAI,SAA6B,CAAC;QAClC,IAAI,OAA2B,CAAC;QAChC,IAAI,WAA+B,CAAC;QACpC,IAAI,wBAA4C,CAAC;QACjD,IAAI,oBAAwC,CAAC;QAC7C,IAAI,YAAgC,CAAC;QACrC,IAAI,aAAiC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC1F,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;gBAC7B,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;oBAC1B,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;oBAC3B,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;oBACnC,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;wBAAE,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC;oBACzE,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;wBAAE,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC;oBACjF,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;wBACd,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;wBACpB,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;4BAAE,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;wBACrE,IAAI,OAAO,CAAC,CAAC,2BAA2B,KAAK,QAAQ;4BAAE,wBAAwB,GAAG,CAAC,CAAC,2BAA2B,CAAC;wBAChH,IAAI,OAAO,CAAC,CAAC,uBAAuB,KAAK,QAAQ;4BAAE,oBAAoB,GAAG,CAAC,CAAC,uBAAuB,CAAC;wBACpG,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;4BAAE,YAAY,GAAG,CAAC,CAAC,aAAa,CAAC;oBAC1E,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC;QACtC,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,KAAK,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1J,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG;YACd,SAAS;YACT,OAAO;YACP,WAAW;YACX,wBAAwB;YACxB,oBAAoB;YACpB,YAAY;YACZ,aAAa;YACb,UAAU,EAAE,OAAO;SACpB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvG,OAAO,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1F,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,uEAAuE;AAEvE,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,MAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,OAAO,GAA4B;YACvC,cAAc,EAAE,mBAAmB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG;YAChC,cAAc,EAAE,EAAE;SACnB,CAAC;QAEF,IAAI,MAAM,CAAC,GAAG;YAAE,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACzC,IAAI,YAAY;YAAE,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE/C,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1E,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,KAAK,IAAI,SAAS,eAAe,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAEhH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,OAAc,CAAC;YAE3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBACpD,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACjC,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;oBAClD,OAAO,CAAC,GAAG,CAAC,0CAA0C,SAAS,QAAQ,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,KAAK,EAAE,CAAC;YAEtC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,KAAK,KAAK,WAAW,QAAQ,GAAG,CAAC,CAAC;gBAEjF,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjF,CAAC;gBAED,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACvG,OAAO,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;oBACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;gBAC9F,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,CAAC;IACjH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,CAAC,KAAK,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,IAAI,WAAW;YAC7B,KAAK;YACL,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW;YAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/mcp-github-app/package.json

@@ -1,18 +0,0 @@
-{
-  "name": "mcp-github-app",
-  "version": "1.0.0",
-  "description": "MCP server for GitHub with native GitHub App authentication and automatic token refresh",
-  "type": "module",
-  "main": "src/index.js",
-  "bin": {
-    "mcp-github-app": "src/index.js"
-  },
-  "scripts": {
-    "start": "node src/index.js"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
-    "jsonwebtoken": "^9.0.2",
-    "@octokit/rest": "^21.1.1"
-  }
-}

package/mcp-github-app/src/auth.js

@@ -1,66 +0,0 @@
-import { readFileSync } from "fs";
-import { resolve } from "path";
-import jwt from "jsonwebtoken";
-
-export class GitHubAppAuth {
-  constructor({ appId, privateKeyPath, installationId }) {
-    this.appId = appId;
-    this.installationId = installationId;
-    this.privateKey = readFileSync(resolve(privateKeyPath), "utf8");
-    this._token = null;
-    this._expiresAt = null;
-  }
-
-  _generateJWT() {
-    const now = Math.floor(Date.now() / 1000);
-    return jwt.sign(
-      { iat: now - 60, exp: now + 600, iss: this.appId },
-      this.privateKey,
-      { algorithm: "RS256" }
-    );
-  }
-
-  async getToken() {
-    // Return cached token if still valid (5-min buffer)
-    if (this._token && this._expiresAt) {
-      const bufferMs = 5 * 60 * 1000;
-      if (Date.now() + bufferMs < this._expiresAt.getTime()) {
-        return this._token;
-      }
-    }
-
-    const jwtToken = this._generateJWT();
-    const res = await fetch(
-      `https://api.github.com/app/installations/${this.installationId}/access_tokens`,
-      {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${jwtToken}`,
-          Accept: "application/vnd.github+json",
-        },
-      }
-    );
-
-    if (!res.ok) {
-      const body = await res.text();
-      throw new Error(`Failed to get installation token (${res.status}): ${body}`);
-    }
-
-    const data = await res.json();
-    this._token = data.token;
-    this._expiresAt = new Date(data.expires_at);
-    return this._token;
-  }
-
-  async getAuthHeaders() {
-    const token = await this.getToken();
-    return {
-      Authorization: `token ${token}`,
-      Accept: "application/vnd.github+json",
-    };
-  }
-
-  get expiresAt() {
-    return this._expiresAt;
-  }
-}