claude-mpm 5.6.4__py3-none-any.whl → 5.6.8__py3-none-any.whl

claude_mpm/VERSION

@@ -1 +1 @@
-5.6.4
+5.6.8

claude_mpm/agents/base_agent.json

@@ -28,4 +28,4 @@
       "claude-4-opus"
     ]
   }
-}
+}

claude_mpm/cli/commands/skill_source.py

@@ -11,6 +11,7 @@ for better UX. Handles errors gracefully with actionable messages.
 
 import json
 import logging
+import os
 import re
 
 from ...config.skill_sources import SkillSource, SkillSourceConfiguration
@@ -20,6 +21,33 @@ from ...services.skills.skill_discovery_service import SkillDiscoveryService
 logger = logging.getLogger(__name__)
 
 
+def _get_github_token(source: SkillSource | None = None) -> str | None:
+    """Get GitHub token with source-specific override support.
+
+    Priority: source.token > GITHUB_TOKEN > GH_TOKEN
+
+    Args:
+        source: Optional SkillSource to check for per-source token
+
+    Returns:
+        GitHub token if found, None otherwise
+
+    Security Note:
+        Token is never logged or printed to avoid exposure.
+    """
+    # Priority 1: Per-source token (env var reference or direct)
+    if source and source.token:
+        if source.token.startswith("$"):
+            # Env var reference: $VAR_NAME -> os.environ.get("VAR_NAME")
+            env_var_name = source.token[1:]
+            return os.environ.get(env_var_name)
+        # Direct token (not recommended but supported)
+        return source.token
+
+    # Priority 2-3: Global environment variables
+    return os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN")
+
+
 def _test_skill_repository_access(source: SkillSource) -> dict:
     """Test if skill repository is accessible via GitHub API.
 
@@ -58,7 +86,13 @@ def _test_skill_repository_access(source: SkillSource) -> dict:
         # Test GitHub API access
         api_url = f"https://api.github.com/repos/{owner_repo}"
 
-        response = requests.get(api_url, timeout=10)
+        # Build headers with authentication if token available
+        headers = {"Accept": "application/vnd.github+json"}
+        token = _get_github_token(source)
+        if token:
+            headers["Authorization"] = f"token {token}"
+
+        response = requests.get(api_url, headers=headers, timeout=10)
 
         if response.status_code == 200:
             return {"accessible": True, "error": None}
@@ -68,9 +102,14 @@ def _test_skill_repository_access(source: SkillSource) -> dict:
                 "error": f"Repository not found: {owner_repo}",
             }
         if response.status_code == 403:
+            error_msg = "Access denied (private repository or rate limit)"
+            if not token:
+                error_msg += (
+                    ". Try setting GITHUB_TOKEN environment variable for private repos"
+                )
             return {
                 "accessible": False,
-                "error": "Access denied (private repository or rate limit)",
+                "error": error_msg,
             }
         return {
             "accessible": False,
@@ -263,6 +302,15 @@ def handle_add_skill_source(args) -> int:
 
         # Create new source
         enabled = not args.disabled
+        token = getattr(args, "token", None)
+
+        # Security warning for direct tokens
+        if token and not token.startswith("$"):
+            print("⚠️  Warning: Direct token values in config are not recommended")
+            print("   Consider using environment variable reference instead:")
+            print("   --token $MY_PRIVATE_TOKEN")
+            print()
+
         source = SkillSource(
             id=source_id,
             type="git",
@@ -270,6 +318,7 @@ def handle_add_skill_source(args) -> int:
             branch=args.branch,
             priority=args.priority,
             enabled=enabled,
+            token=token,
         )
 
         # Determine if we should test

claude_mpm/cli/commands/skills.py

@@ -538,6 +538,7 @@ class SkillsManagementCommand(BaseCommand):
             toolchain = getattr(args, "toolchain", None)
             categories = getattr(args, "categories", None)
             force = getattr(args, "force", False)
+            deploy_all = getattr(args, "all", False)
 
             if collection:
                 console.print(
@@ -548,14 +549,15 @@ class SkillsManagementCommand(BaseCommand):
                     "\n[bold cyan]Deploying skills from default collection...[/bold cyan]\n"
                 )
 
-            # Selective deployment is ALWAYS enabled (deploy only agent-referenced skills)
-            # This ensures only skills linked to deployed agents are deployed
+            # Use selective deployment unless --all flag is provided
+            # Selective mode deploys only agent-referenced skills
+            # --all mode deploys all available skills from the collection
             result = self.skills_deployer.deploy_skills(
                 collection=collection,
                 toolchain=toolchain,
                 categories=categories,
                 force=force,
-                selective=True,  # Always use selective deployment
+                selective=not deploy_all,
             )
 
             # Display results

claude_mpm/cli/parsers/skill_source_parser.py

@@ -76,6 +76,10 @@ def add_skill_source_subparser(subparsers) -> argparse.ArgumentParser:
         dest="skip_test",
         help="Skip immediate testing (not recommended)",
     )
+    add_parser.add_argument(
+        "--token",
+        help="GitHub token or env var reference (e.g., ghp_xxx or $PRIVATE_TOKEN)",
+    )
 
     # Remove repository
     remove_parser = skill_source_subparsers.add_parser(

claude_mpm/cli/parsers/skills_parser.py

@@ -167,6 +167,11 @@ def add_skills_subparser(subparsers) -> argparse.ArgumentParser:
         action="store_true",
         help="Force redeployment of already deployed skills",
     )
+    deploy_github_parser.add_argument(
+        "--all",
+        action="store_true",
+        help="Deploy all available skills, not just agent-referenced ones",
+    )
 
     # List available GitHub skills
     list_available_parser = skills_subparsers.add_parser(

claude_mpm/config/skill_sources.py

@@ -54,6 +54,7 @@ class SkillSource:
         branch: Git branch to use (default: "main")
         priority: Priority for skill resolution (lower = higher precedence)
         enabled: Whether this source should be synced
+        token: Optional GitHub token or env var reference (e.g., "$MY_TOKEN")
 
     Priority System:
         - 0: Reserved for system repository (highest precedence)
@@ -61,6 +62,12 @@ class SkillSource:
         - 100-999: Normal priority custom sources
         - 1000+: Low priority custom sources
 
+    Token Authentication:
+        - Direct token: "ghp_xxxxx" (stored in config, not recommended)
+        - Env var reference: "$PRIVATE_REPO_TOKEN" (resolved at runtime)
+        - If None, falls back to GITHUB_TOKEN or GH_TOKEN env vars
+        - Priority: source.token > GITHUB_TOKEN > GH_TOKEN
+
     Example:
         >>> source = SkillSource(
         ...     id="system",
@@ -70,6 +77,12 @@ class SkillSource:
         ... )
         >>> source.validate()
         []
+        >>> private_source = SkillSource(
+        ...     id="private",
+        ...     type="git",
+        ...     url="https://github.com/myorg/private-skills",
+        ...     token="$PRIVATE_REPO_TOKEN"
+        ... )
     """
 
     id: str
@@ -78,6 +91,7 @@ class SkillSource:
     branch: str = "main"
     priority: int = 100
     enabled: bool = True
+    token: Optional[str] = None
 
     def __post_init__(self):
         """Validate skill source configuration after initialization.
@@ -262,6 +276,7 @@ class SkillSourceConfiguration:
                         branch=source_data.get("branch", "main"),
                         priority=source_data.get("priority", 100),
                         enabled=source_data.get("enabled", True),
+                        token=source_data.get("token"),
                     )
                     sources.append(source)
                 except (KeyError, ValueError) as e:
@@ -326,6 +341,7 @@ class SkillSourceConfiguration:
                     "branch": source.branch,
                     "priority": source.priority,
                     "enabled": source.enabled,
+                    **({"token": source.token} if source.token else {}),
                 }
                 for source in sources
             ]

claude_mpm/core/config.py

@@ -12,11 +12,10 @@ import threading
 from pathlib import Path
 from typing import Any, Dict, List, Optional, Tuple, Union
 
-import yaml
-
 from claude_mpm.core.logging_utils import get_logger
 
-from ..utils.config_manager import ConfigurationManager
+# Lazy import ConfigurationManager to avoid importing yaml at module level
+# This prevents hook errors when yaml isn't available in the execution environment
 from .exceptions import ConfigurationError, FileOperationError
 from .unified_paths import get_path_manager
 
@@ -104,6 +103,9 @@ class Config:
             Config._initialized = True
             logger.debug("Initializing Config singleton for the first time")
 
+            # Lazy import ConfigurationManager at runtime to avoid yaml import at module level
+            from ..utils.config_manager import ConfigurationManager
+
             # Initialize instance variables inside the lock to ensure thread safety
             self._config: Dict[str, Any] = {}
             self._env_prefix = env_prefix
@@ -224,21 +226,6 @@ class Config:
                             f"Response logging format: {response_logging.get('format', 'json')}"
                         )
 
-        except yaml.YAMLError as e:
-            logger.error(f"YAML syntax error in {file_path}: {e}")
-            if hasattr(e, "problem_mark"):
-                mark = e.problem_mark
-                logger.error(f"Error at line {mark.line + 1}, column {mark.column + 1}")
-            logger.info(
-                "TIP: Validate your YAML at https://www.yamllint.com/ or run: python scripts/validate_configuration.py"
-            )
-            logger.info(
-                "TIP: Common issue - YAML requires spaces, not tabs. Fix with: sed -i '' 's/\t/    /g' "
-                + str(file_path)
-            )
-            # Store error for later retrieval
-            self._config["_load_error"] = str(e)
-
         except json.JSONDecodeError as e:
             logger.error(f"JSON syntax error in {file_path}: {e}")
             logger.error(f"Error at line {e.lineno}, column {e.colno}")
@@ -255,7 +242,28 @@ class Config:
                 },
             ) from e
         except Exception as e:
-            # Catch any remaining unexpected errors and wrap them as configuration errors
+            # Handle YAML errors without importing yaml at module level
+            # ConfigurationManager.load_yaml raises yaml.YAMLError, but we don't want to import yaml
+            # Check if it's a YAML error by class name to avoid import
+            if e.__class__.__name__ == "YAMLError":
+                logger.error(f"YAML syntax error in {file_path}: {e}")
+                if hasattr(e, "problem_mark"):
+                    mark = e.problem_mark
+                    logger.error(
+                        f"Error at line {mark.line + 1}, column {mark.column + 1}"
+                    )
+                logger.info(
+                    "TIP: Validate your YAML at https://www.yamllint.com/ or run: python scripts/validate_configuration.py"
+                )
+                logger.info(
+                    "TIP: Common issue - YAML requires spaces, not tabs. Fix with: sed -i '' 's/\t/    /g' "
+                    + str(file_path)
+                )
+                # Store error for later retrieval
+                self._config["_load_error"] = str(e)
+                return  # Don't re-raise, we handled it
+
+            # Not a YAML error, wrap as configuration error
             raise ConfigurationError(
                 f"Unexpected error loading configuration from {file_path}: {e}",
                 context={

claude_mpm/dashboard/static/svelte-build/_app/env.js

@@ -1 +1 @@
-export const env={}
+export const env={}

claude_mpm/dashboard/static/svelte-build/_app/immutable/chunks/BQaXIfA_.js

@@ -43,10 +43,10 @@ https://github.com/jquery/jquery/blob/master/src/event.js
       vec2 v = ab*vec2(-cs.y,cs.x);
       w = w + dot(p-u,v)/(dot(p-u,u)+dot(v,v));
     }
-    
+
     // compute final point and distance
     float d = length(p-ab*vec2(cos(w),sin(w)));
-    
+
     // return signed distance
     return (dot(p/ab,p/ab)>1.0) ? d : -d;
   }
@@ -55,16 +55,16 @@ https://github.com/jquery/jquery/blob/master/src/event.js
 
       uniform mat3 uPanZoomMatrix;
       uniform int  uAtlasSize;
-      
+
       // instanced
       in vec2 aPosition; // a vertex from the unit square
-      
+
       in mat3 aTransform; // used to transform verticies, eg into a bounding box
       in int aVertType; // the type of thing we are rendering
 
       // the z-index that is output when using picking mode
       in vec4 aIndex;
-      
+
       // For textures
       in int aAtlasId; // which shader unit/atlas to use
       in vec4 aTex; // x/y/w/h of texture in atlas
@@ -84,7 +84,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
       out vec4 vColor;
       out vec2 vPosition;
       // flat values are not interpolated
-      flat out int vAtlasId; 
+      flat out int vAtlasId;
       flat out int vVertType;
       flat out vec2 vTopRight;
       flat out vec2 vBotLeft;
@@ -92,7 +92,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
       flat out vec4 vBorderColor;
       flat out vec2 vBorderWidth;
       flat out vec4 vIndex;
-      
+
       void main(void) {
         int vid = gl_VertexID;
         vec2 position = aPosition; // TODO make this a vec3, simplifies some code below
@@ -115,7 +115,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
 
           gl_Position = vec4(uPanZoomMatrix * aTransform * vec3(position, 1.0), 1.0);
         }
-        else if(aVertType == `).concat(_t," || aVertType == ").concat(pa,` 
+        else if(aVertType == `).concat(_t," || aVertType == ").concat(pa,`
              || aVertType == `).concat(sn," || aVertType == ").concat(ga,`) { // simple shapes
 
           // the bounding box is needed by the fragment shader
@@ -145,7 +145,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
 
           gl_Position = vec4(uPanZoomMatrix * vec3(point, 1.0), 1.0);
           vColor = aColor;
-        } 
+        }
         else if(aVertType == `).concat(Xl,`) {
           vec2 pointA = aPointAPointB.xy;
           vec2 pointB = aPointAPointB.zw;
@@ -194,7 +194,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
           }
 
           vColor = aColor;
-        } 
+        }
         else if(aVertType == `).concat(Ts,` && vid < 3) {
           // massage the first triangle into an edge arrow
           if(vid == 0)
@@ -246,16 +246,16 @@ https://github.com/jquery/jquery/blob/master/src/event.js
       `).concat(vm,`
 
       vec4 blend(vec4 top, vec4 bot) { // blend colors with premultiplied alpha
-        return vec4( 
+        return vec4(
           top.rgb + (bot.rgb * (1.0 - top.a)),
-          top.a   + (bot.a   * (1.0 - top.a)) 
+          top.a   + (bot.a   * (1.0 - top.a))
         );
       }
 
       vec4 distInterp(vec4 cA, vec4 cB, float d) { // interpolate color using Signed Distance
         // scale to the zoom level so that borders don't look blurry when zoomed in
         // note 1.5 is an aribitrary value chosen because it looks good
-        return mix(cA, cB, 1.0 - smoothstep(0.0, 1.5 / uZoom, abs(d))); 
+        return mix(cA, cB, 1.0 - smoothstep(0.0, 1.5 / uZoom, abs(d)));
       }
 
       void main(void) {
@@ -263,7 +263,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
           // look up the texel from the texture unit
           `).concat(i.map(function(u){return"if(vAtlasId == ".concat(u,") outColor = texture(uTexture").concat(u,", vTexCoord);")}).join(`
 	else `),`
-        } 
+        }
         else if(vVertType == `).concat(Ts,`) {
           // mimics how canvas renderer uses context.globalCompositeOperation = 'destination-out';
           outColor = blend(vColor, uBGColor);
@@ -272,7 +272,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
         else if(vVertType == `).concat(_t,` && vBorderWidth == vec2(0.0)) { // simple rectangle with no border
           outColor = vColor; // unit square is already transformed to the rectangle, nothing else needs to be done
         }
-        else if(vVertType == `).concat(_t," || vVertType == ").concat(pa,` 
+        else if(vVertType == `).concat(_t," || vVertType == ").concat(pa,`
           || vVertType == `).concat(sn," || vVertType == ").concat(ga,`) { // use SDF
 
           float outerBorder = vBorderWidth[0];
@@ -307,7 +307,7 @@ https://github.com/jquery/jquery/blob/master/src/event.js
               vec4 outerColor = outerBorder == 0.0 ? vec4(0) : vBorderColor;
               vec4 innerBorderColor = blend(vBorderColor, vColor);
               outColor = distInterp(innerBorderColor, outerColor, d);
-            } 
+            }
             else {
               vec4 outerColor;
               if(innerBorder == 0.0 && outerBorder == 0.0) {

claude_mpm/hooks/claude_hooks/auto_pause_handler.py

@@ -22,7 +22,7 @@ USAGE:
         threshold_crossed = auto_pause.on_usage_update(metadata["usage"])
         if threshold_crossed:
             warning = auto_pause.emit_threshold_warning(threshold_crossed)
-            print(f"\n⚠️  {warning}", file=sys.stderr)
+            _log(f"\n⚠️  {warning}")
 
     # Record actions during pause mode
     if auto_pause.is_pause_active():
@@ -34,7 +34,6 @@ USAGE:
 """
 
 import os
-import sys
 from datetime import datetime, timezone
 from pathlib import Path
 from typing import Any, Dict, Optional
@@ -45,6 +44,15 @@ from claude_mpm.services.infrastructure.context_usage_tracker import (
     ContextUsageTracker,
 )
 
+# Try to import _log from hook_handler, fall back to no-op
+try:
+    from claude_mpm.hooks.claude_hooks.hook_handler import _log
+except ImportError:
+
+    def _log(msg: str) -> None:
+        pass  # Silent fallback
+
+
 logger = get_logger(__name__)
 
 # Debug mode
@@ -100,11 +108,10 @@ class AutoPauseHandler:
             self._previous_threshold = current_state.threshold_reached
 
             if DEBUG:
-                print(
+                _log(
                     f"AutoPauseHandler initialized: "
                     f"{current_state.percentage_used:.1f}% context used, "
-                    f"threshold: {current_state.threshold_reached}",
-                    file=sys.stderr,
+                    f"threshold: {current_state.threshold_reached}"
                 )
         except Exception as e:
             logger.error(f"Failed to initialize AutoPauseHandler: {e}")
@@ -169,10 +176,9 @@ class AutoPauseHandler:
                     self._previous_threshold = current_threshold
 
                     if DEBUG:
-                        print(
+                        _log(
                             f"Context threshold crossed: {current_threshold} "
-                            f"({state.percentage_used:.1f}%)",
-                            file=sys.stderr,
+                            f"({state.percentage_used:.1f}%)"
                         )
 
                     # Trigger auto-pause if threshold reached
@@ -184,7 +190,7 @@ class AutoPauseHandler:
         except Exception as e:
             logger.error(f"Failed to update usage: {e}")
             if DEBUG:
-                print(f"❌ Usage update failed: {e}", file=sys.stderr)
+                _log(f"❌ Usage update failed: {e}")
             # Don't propagate error - auto-pause is optional
             return None
 
@@ -220,12 +226,12 @@ class AutoPauseHandler:
             )
 
             if DEBUG:
-                print(f"Recorded tool call during pause: {tool_name}", file=sys.stderr)
+                _log(f"Recorded tool call during pause: {tool_name}")
 
         except Exception as e:
             logger.error(f"Failed to record tool call: {e}")
             if DEBUG:
-                print(f"❌ Failed to record tool call: {e}", file=sys.stderr)
+                _log(f"❌ Failed to record tool call: {e}")
 
     def on_assistant_response(self, response_summary: str) -> None:
         """Record an assistant response if auto-pause is active.
@@ -257,15 +263,14 @@ class AutoPauseHandler:
             )
 
             if DEBUG:
-                print(
-                    f"Recorded assistant response during pause (length: {len(summary)})",
-                    file=sys.stderr,
+                _log(
+                    f"Recorded assistant response during pause (length: {len(summary)})"
                 )
 
         except Exception as e:
             logger.error(f"Failed to record assistant response: {e}")
             if DEBUG:
-                print(f"❌ Failed to record assistant response: {e}", file=sys.stderr)
+                _log(f"❌ Failed to record assistant response: {e}")
 
     def on_user_message(self, message_summary: str) -> None:
         """Record a user message if auto-pause is active.
@@ -297,15 +302,12 @@ class AutoPauseHandler:
             )
 
             if DEBUG:
-                print(
-                    f"Recorded user message during pause (length: {len(summary)})",
-                    file=sys.stderr,
-                )
+                _log(f"Recorded user message during pause (length: {len(summary)})")
 
         except Exception as e:
             logger.error(f"Failed to record user message: {e}")
             if DEBUG:
-                print(f"❌ Failed to record user message: {e}", file=sys.stderr)
+                _log(f"❌ Failed to record user message: {e}")
 
     def on_session_end(self) -> Optional[Path]:
         """Called when session ends. Finalizes any active pause.
@@ -318,7 +320,7 @@ class AutoPauseHandler:
         """
         if not self.is_pause_active():
             if DEBUG:
-                print("No active pause to finalize", file=sys.stderr)
+                _log("No active pause to finalize")
             return None
 
         try:
@@ -326,14 +328,14 @@ class AutoPauseHandler:
             session_path = self.pause_manager.finalize_pause(create_full_snapshot=True)
 
             if session_path and DEBUG:
-                print(f"✅ Session finalized: {session_path.name}", file=sys.stderr)
+                _log(f"✅ Session finalized: {session_path.name}")
 
             return session_path
 
         except Exception as e:
             logger.error(f"Failed to finalize pause session: {e}")
             if DEBUG:
-                print(f"❌ Failed to finalize pause: {e}", file=sys.stderr)
+                _log(f"❌ Failed to finalize pause: {e}")
             raise
 
     def is_pause_active(self) -> bool:
@@ -417,9 +419,7 @@ class AutoPauseHandler:
             # Check if pause is already active
             if self.is_pause_active():
                 if DEBUG:
-                    print(
-                        "Auto-pause already active, skipping trigger", file=sys.stderr
-                    )
+                    _log("Auto-pause already active, skipping trigger")
                 return
 
             # Start incremental pause
@@ -429,16 +429,15 @@ class AutoPauseHandler:
             )
 
             if DEBUG:
-                print(
+                _log(
                     f"✅ Auto-pause triggered: {session_id} "
-                    f"({state.percentage_used:.1f}% context used)",
-                    file=sys.stderr,
+                    f"({state.percentage_used:.1f}% context used)"
                 )
 
         except Exception as e:
             logger.error(f"Failed to trigger auto-pause: {e}")
             if DEBUG:
-                print(f"❌ Failed to trigger auto-pause: {e}", file=sys.stderr)
+                _log(f"❌ Failed to trigger auto-pause: {e}")
             # Don't propagate - auto-pause is optional
 
     def _summarize_dict(