language-model-common 2.0.77__tar.gz → 2.0.78__tar.gz

{language_model_common-2.0.77/language_model_common.egg-info → language_model_common-2.0.78}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: language-model-common
-Version: 2.0.77
+Version: 2.0.78
 Summary: Provides the underlying framework to enhance langchain and add loading configurations
 Author-email: Imran Qureshi <imran.qureshi@bwell.com>
 License: Apache-2.0
@@ -21,7 +21,7 @@ Requires-Dist: openai>=2.5.0
 Requires-Dist: langchain-openai>=1.1.6
 Requires-Dist: langgraph>=1.0.0
 Requires-Dist: pydantic<3.0.0,>=2.0
-Requires-Dist: mcp>=1.11.0
+Requires-Dist: mcp>=1.27.2
 Requires-Dist: langgraph-checkpoint>=3.0.0
 Requires-Dist: langgraph-checkpoint-mongodb>=0.3.1
 Requires-Dist: langgraph-store-mongodb>=0.1.0
@@ -35,6 +35,7 @@ Requires-Dist: fsspec>=2026.2.0
 Requires-Dist: authlib>=1.6.5
 Requires-Dist: langchain-google-genai>=4.1.3
 Requires-Dist: py-key-value-aio>=0.4.4
+Requires-Dist: PyJWT[crypto]>=2.8.0
 Dynamic: license-file
 
 # language-model-common

language_model_common-2.0.78/VERSION

@@ -0,0 +1 @@
+2.0.78

{language_model_common-2.0.77 → language_model_common-2.0.78/language_model_common.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: language-model-common
-Version: 2.0.77
+Version: 2.0.78
 Summary: Provides the underlying framework to enhance langchain and add loading configurations
 Author-email: Imran Qureshi <imran.qureshi@bwell.com>
 License: Apache-2.0
@@ -21,7 +21,7 @@ Requires-Dist: openai>=2.5.0
 Requires-Dist: langchain-openai>=1.1.6
 Requires-Dist: langgraph>=1.0.0
 Requires-Dist: pydantic<3.0.0,>=2.0
-Requires-Dist: mcp>=1.11.0
+Requires-Dist: mcp>=1.27.2
 Requires-Dist: langgraph-checkpoint>=3.0.0
 Requires-Dist: langgraph-checkpoint-mongodb>=0.3.1
 Requires-Dist: langgraph-store-mongodb>=0.1.0
@@ -35,6 +35,7 @@ Requires-Dist: fsspec>=2026.2.0
 Requires-Dist: authlib>=1.6.5
 Requires-Dist: langchain-google-genai>=4.1.3
 Requires-Dist: py-key-value-aio>=0.4.4
+Requires-Dist: PyJWT[crypto]>=2.8.0
 Dynamic: license-file
 
 # language-model-common

{language_model_common-2.0.77 → language_model_common-2.0.78}/language_model_common.egg-info/SOURCES.txt

@@ -64,6 +64,8 @@ languagemodelcommon/file_managers/file_manager.py
 languagemodelcommon/file_managers/file_manager_factory.py
 languagemodelcommon/file_managers/file_writer.py
 languagemodelcommon/file_managers/local_file_manager.py
+languagemodelcommon/github/__init__.py
+languagemodelcommon/github/token_provider.py
 languagemodelcommon/graph/__init__.py
 languagemodelcommon/graph/graph_builder.py
 languagemodelcommon/history/__init__.py

{language_model_common-2.0.77 → language_model_common-2.0.78}/language_model_common.egg-info/requires.txt

@@ -8,7 +8,7 @@ openai>=2.5.0
 langchain-openai>=1.1.6
 langgraph>=1.0.0
 pydantic<3.0.0,>=2.0
-mcp>=1.11.0
+mcp>=1.27.2
 langgraph-checkpoint>=3.0.0
 langgraph-checkpoint-mongodb>=0.3.1
 langgraph-store-mongodb>=0.1.0
@@ -22,3 +22,4 @@ fsspec>=2026.2.0
 authlib>=1.6.5
 langchain-google-genai>=4.1.3
 py-key-value-aio>=0.4.4
+PyJWT[crypto]>=2.8.0

{language_model_common-2.0.77 → language_model_common-2.0.78}/languagemodelcommon/configs/config_reader/github_directory_helper.py

@@ -16,6 +16,7 @@ from urllib.parse import unquote, urlsplit, urlunsplit
 
 from key_value.aio.protocols.key_value import AsyncKeyValueProtocol
 
+from languagemodelcommon.github.token_provider import GitHubTokenProvider
 from languagemodelcommon.utilities.environment.language_model_common_environment_variables import (
     LanguageModelCommonEnvironmentVariables,
 )
@@ -43,9 +44,11 @@ class GitHubDirectoryHelper:
         *,
         environment_variables: LanguageModelCommonEnvironmentVariables | None = None,
         store: AsyncKeyValueProtocol | None = None,
+        token_provider: GitHubTokenProvider | None = None,
     ) -> None:
         self._environment_variables = environment_variables
         self._store = store
+        self._token_provider = token_provider
 
     # ------------------------------------------------------------------
     # Pure / static helpers — no env vars or instance state needed
@@ -164,7 +167,14 @@ class GitHubDirectoryHelper:
 
         cache_dir.mkdir(parents=True, exist_ok=True)
 
-        github_token = env.github_token if env else os.environ.get("GITHUB_TOKEN")
+        github_token: str | None = None
+        if self._token_provider is not None:
+            github_token = await self._token_provider.get_token()
+        elif env:
+            github_token = env.github_token
+        else:
+            github_token = os.environ.get("GITHUB_TOKEN")
+
         downloader = GithubDirectoryDownloader()
         result = await downloader.download(
             source_uri=github_uri,

{language_model_common-2.0.77 → language_model_common-2.0.78}/languagemodelcommon/container/container_factory.py

@@ -1,3 +1,4 @@
+import logging
 from typing import Any
 
 from simple_container.container.simple_container import SimpleContainer
@@ -8,6 +9,11 @@ from languagemodelcommon.configs.config_reader.github_directory_helper import (
     GitHubDirectoryHelper,
 )
 from languagemodelcommon.configs.config_reader.mcp_json_fetcher import McpJsonFetcher
+from languagemodelcommon.github.token_provider import (
+    GitHubAppTokenProvider,
+    GitHubTokenProvider,
+    StaticTokenProvider,
+)
 from languagemodelcommon.configs.prompt_library.prompt_library_manager import (
     PromptLibraryManager,
 )
@@ -50,6 +56,34 @@ from languagemodelcommon.utilities.tool_display_name_mapper import (
     ToolDisplayNameMapper,
 )
 
+_logger = logging.getLogger(__name__)
+
+
+def _build_github_token_provider(
+    *,
+    env: LanguageModelCommonEnvironmentVariables,
+) -> GitHubTokenProvider | None:
+    """Build GitHub token provider: App credentials > static PAT > None."""
+    app_id = env.github_app_id
+    private_key = env.github_app_private_key
+    installation_id = env.github_app_installation_id
+
+    if app_id and private_key and installation_id:
+        _logger.info("GitHub authentication: using GitHub App (app_id=%s)", app_id)
+        return GitHubAppTokenProvider(
+            app_id=app_id,
+            private_key=private_key,
+            installation_id=installation_id,
+        )
+
+    token = env.github_token
+    if token:
+        _logger.info("GitHub authentication: using static token (PAT)")
+        return StaticTokenProvider(token=token)
+
+    _logger.info("GitHub authentication: not configured")
+    return None
+
 
 class LanguageModelCommonContainerFactory:
     @staticmethod
@@ -82,6 +116,12 @@ class LanguageModelCommonContainerFactory:
                 ).model_config_cache_collection_name,
             ),
         )
+        container.singleton(
+            service_type=GitHubTokenProvider,
+            factory=lambda c: _build_github_token_provider(
+                env=c.resolve(LanguageModelCommonEnvironmentVariables),
+            ),
+        )
         container.singleton(
             service_type=GitHubDirectoryHelper,
             factory=lambda c: GitHubDirectoryHelper(
@@ -89,6 +129,7 @@ class LanguageModelCommonContainerFactory:
                     LanguageModelCommonEnvironmentVariables
                 ),
                 store=c.resolve(KeyValueBaseStore),
+                token_provider=c.resolve(GitHubTokenProvider),
             ),
         )
 

language_model_common-2.0.78/languagemodelcommon/github/token_provider.py

@@ -0,0 +1,119 @@
+from __future__ import annotations
+
+import asyncio
+import logging
+import time
+from datetime import datetime
+from typing import Protocol, runtime_checkable
+
+import httpx
+import jwt
+
+logger = logging.getLogger(__name__)
+
+_GITHUB_API_BASE = "https://api.github.com"
+_TOKEN_EXPIRY_BUFFER_SECONDS = 300
+
+
+@runtime_checkable
+class GitHubTokenProvider(Protocol):
+    """Protocol for providing GitHub authentication tokens."""
+
+    async def get_token(self) -> str: ...
+
+    def get_token_sync(self) -> str: ...
+
+
+class StaticTokenProvider:
+    """Returns a pre-configured token (PAT or pre-minted installation token)."""
+
+    def __init__(self, *, token: str) -> None:
+        self._token = token
+
+    async def get_token(self) -> str:
+        return self._token
+
+    def get_token_sync(self) -> str:
+        return self._token
+
+
+class GitHubAppTokenProvider:
+    """Mints short-lived installation tokens via GitHub App credentials.
+
+    Tokens are cached and automatically refreshed 5 minutes before expiry.
+    The async path is serialized via asyncio.Lock to prevent duplicate mints.
+    """
+
+    def __init__(
+        self,
+        *,
+        app_id: str,
+        private_key: str,
+        installation_id: str,
+    ) -> None:
+        self._app_id = app_id
+        self._private_key = private_key
+        self._installation_id = installation_id
+        self._cached_token: str | None = None
+        self._cached_expires_at: float = 0.0
+        self._lock = asyncio.Lock()
+
+    async def get_token(self) -> str:
+        async with self._lock:
+            if self._is_token_valid():
+                return self._cached_token  # type: ignore[return-value]
+            return await self._mint_token()
+
+    def get_token_sync(self) -> str:
+        if self._is_token_valid():
+            return self._cached_token  # type: ignore[return-value]
+        return self._mint_token_sync()
+
+    def _is_token_valid(self) -> bool:
+        return (
+            self._cached_token is not None
+            and time.time() < self._cached_expires_at - _TOKEN_EXPIRY_BUFFER_SECONDS
+        )
+
+    def _build_jwt(self) -> str:
+        now = int(time.time())
+        payload = {
+            "iat": now - 60,
+            "exp": now + 600,
+            "iss": self._app_id,
+        }
+        return jwt.encode(payload, self._private_key, algorithm="RS256")
+
+    def _request_url(self) -> str:
+        return f"{_GITHUB_API_BASE}/app/installations/{self._installation_id}/access_tokens"
+
+    def _request_headers(self) -> dict[str, str]:
+        return {
+            "Authorization": f"Bearer {self._build_jwt()}",
+            "Accept": "application/vnd.github+json",
+        }
+
+    def _cache_response(self, *, data: dict[str, str]) -> str:
+        self._cached_token = data["token"]
+        self._cached_expires_at = datetime.fromisoformat(
+            data["expires_at"].replace("Z", "+00:00")
+        ).timestamp()
+        logger.debug(
+            "Minted new GitHub App installation token (expires %s)",
+            data["expires_at"],
+        )
+        return self._cached_token
+
+    async def _mint_token(self) -> str:
+        async with httpx.AsyncClient() as client:
+            response = await client.post(
+                self._request_url(), headers=self._request_headers()
+            )
+        response.raise_for_status()
+        return self._cache_response(data=response.json())
+
+    def _mint_token_sync(self) -> str:
+        with httpx.Client() as client:
+            response = client.post(self._request_url(), headers=self._request_headers())
+        response.raise_for_status()
+        return self._cache_response(data=response.json())

{language_model_common-2.0.77 → language_model_common-2.0.78}/languagemodelcommon/utilities/environment/language_model_common_environment_variables.py

@@ -359,6 +359,18 @@ class LanguageModelCommonEnvironmentVariables(
     def github_token(self) -> Optional[str]:
         return os.environ.get("GITHUB_TOKEN")
 
+    @property
+    def github_app_id(self) -> Optional[str]:
+        return os.environ.get("GITHUB_APP_ID")
+
+    @property
+    def github_app_private_key(self) -> Optional[str]:
+        return os.environ.get("GITHUB_APP_PRIVATE_KEY")
+
+    @property
+    def github_app_installation_id(self) -> Optional[str]:
+        return os.environ.get("GITHUB_APP_INSTALLATION_ID")
+
     @property
     def plugins_mcp_server(self) -> Optional[str]:
         """URL of the MCP server that returns plugin MCP configs.

{language_model_common-2.0.77 → language_model_common-2.0.78}/pyproject.toml

@@ -28,7 +28,7 @@ dependencies = [
     "langchain-openai>=1.1.6",
     "langgraph>=1.0.0",
     "pydantic>=2.0,<3.0.0",
-    "mcp>=1.11.0",
+    "mcp>=1.27.2",
     "langgraph-checkpoint>=3.0.0",
     "langgraph-checkpoint-mongodb>=0.3.1",
     "langgraph-store-mongodb>=0.1.0",
@@ -41,7 +41,8 @@ dependencies = [
     "fsspec>=2026.2.0",
     "authlib>=1.6.5",
     "langchain-google-genai>=4.1.3",
-    "py-key-value-aio>=0.4.4"
+    "py-key-value-aio>=0.4.4",
+    "PyJWT[crypto]>=2.8.0"
 ]
 
 [project.urls]

language_model_common-2.0.77/VERSION

@@ -1 +0,0 @@
-2.0.77