Fix local MCP GitHub token authorization #80
- KC
## Summary - authorize hosted MCP repository operations from the caller bearer token so standard `gh auth token` credentials work - keep browser, WebSocket, and hosted Planner authorization constrained by GitHub App installations - distinguish repository denials, expired credentials, and GitHub availability or rate-limit failures, with regression coverage and updated documentation
## Testing - `bun test apps/server/src/github/client.test.ts apps/server/src/mcp/hosted.test.ts apps/server/src/mcp/routes.test.ts apps/server/src/auth/routes.test.ts` (41 passed) - `bun test` (833 passed, 2 skipped) - `bun run types` - `bun run ci` - `git diff --check` - local MCP route smoke test with the configured `GH_TOKEN` (`status=200 documents=0`)
Krzysztof-Cieslakmerged 4085210d1f392 months ago on GitHub
Krzysztof-Cieslakhead-ref-deleted2 months ago on GitHub
lavaman131referenced this in Support device-flow sign-in for local instances with persistent credentials #157last month on GitHub
lavaman131referenced this in Make the agent harness pluggable with AI SDK Harnesses #181last month on GitHub