lex-github 0.3.0 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 528c32f26f0baa590aa8084482cf2c006633669ed182df0e2288198fb509deb4
-  data.tar.gz: 453260cf722e2b8463816e4b9227ac2e6c70996063f68886f062e9710b01eda0
+  metadata.gz: 8ea69decf68b91f650186b1719a7e29646ce4f7308bd2d90eebeadcd6048718d
+  data.tar.gz: 3bdf52e0d20f137e7efb2f7c7330905de6b924d184edb4007c616435d679f44a
 SHA512:
-  metadata.gz: 4060b46c5f83856954a7c49e542351558202f855fe0d471a1984d59522e4d178fe78c2bfcc58d8a254b52bff4e763ff3ec233b16a8d2046fbbeb2b44cf089f4c
-  data.tar.gz: 7d148064e9e9b5225589f6c0d73e30938bc2d56beea9d4f89f2cb0443a2cc03d71f48fbe0b14a8a74ff150e44c4e94450185877c2539127da9ca2daa99507e2a
+  metadata.gz: 2cc5f719ed57a84ebc740a0009a0836fecfcfaa162794e64806e9770dc653e2368ac37d44ef3655d29bd132ed1957148be691dd4544fadb05e969250949144ce
+  data.tar.gz: 9bccdb81c9b7f52348c623b19473db41bc36f3d5539680789eceb7d50997136abafe3d42dcccb3010dacb57db8fb7c53998b1ea0374adfedab54e0414b7364af

data/CHANGELOG.md

@@ -2,40 +2,18 @@
 
 ## [Unreleased]
 
+## [0.3.2] - 2026-03-31
+
 ### Added
-- GitHub App authentication (JWT generation, installation tokens, manifest flow)
-- OAuth delegated authentication (Authorization Code + PKCE, device code fallback)
-- Scope-aware credential resolution chain (8 sources, rate limit + scope fallback)
-- `ScopeRegistry` for caching credential-to-owner/repo authorization status
-- `CredentialFallback` Faraday middleware (transparent 403/429 retry with next credential)
-- `RateLimit` Faraday middleware with automatic credential exhaustion tracking
-- `ScopeProbe` Faraday middleware for passive scope learning from API responses
-- `Helpers::Cache` for two-tier API response caching (global Redis + local in-memory)
-- `Helpers::TokenCache` for token lifecycle management with per-installation keying
-- `App::Runners::Auth` (JWT generation, installation token exchange)
-- `App::Runners::Webhooks` (signature verification, event parsing, scope invalidation)
-- `App::Runners::Manifest` (GitHub App manifest flow)
-- `App::Runners::Installations` (list, get, suspend, unsuspend, delete)
-- `App::Runners::CredentialStore` (Vault persistence after manifest flow)
-- `OAuth::Runners::Auth` (authorize_url, exchange_code, refresh, device_code, revoke)
-- `Runners::Actions` (GitHub Actions workflow management)
-- `Runners::Checks` (check runs and check suites)
-- `Runners::Releases` (release and asset management)
-- `Runners::Deployments` (deployment and status management)
-- `Runners::RepositoryWebhooks` (programmatic webhook management)
-- `Helpers::CallbackServer` for standalone OAuth redirect handling
-- `Helpers::BrowserAuth` for browser-based OAuth with PKCE
-- `CLI::Auth` for `legion lex exec github auth login/status`
-- `CLI::App` for `legion lex exec github app setup`
-- `RateLimitError`, `AuthorizationError`, `ScopeDeniedError` error classes
-- `jwt` (~> 2.7) and `base64` (>= 0.1) runtime dependencies
+- CLI command registration: `legionio lex exec github auth status|login` and `legionio lex exec github app setup|complete_setup`
+- `CLI::AuthRunner` and `CLI::AppRunner` wrapper classes for `lex exec` dispatch
+- Self-registering CLI manifest at `~/.legionio/cache/cli/lex-github.json` (written on first require)
+- Require redirect `lib/lex/github.rb` for `lex exec` compatibility
+
+## [0.3.1] - 2026-03-30
 
 ### Changed
-- `Helpers::Client` now uses scope-aware credential resolution (`owner:`, `repo:` context)
-- All existing runners forward `owner:` and `repo:` to `connection()` for scope-aware resolution
-- All existing runners now include `Helpers::Cache` for two-tier API response caching
-- `Client` class includes App and OAuth runner modules
-- Version bump to 0.3.0
+- Unpin jwt dependency from `~> 2.7` to `>= 2.7` to resolve conflict with jwt 3.x
 
 ## [0.3.0] - 2026-03-30
 

data/lex-github.gemspec

@@ -28,7 +28,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'base64', '>= 0.1'
   spec.add_dependency 'faraday', '>= 2.0'
-  spec.add_dependency 'jwt', '~> 2.7'
+  spec.add_dependency 'jwt', '>= 2.7'
   spec.add_dependency 'legion-cache',     '>= 1.3.11'
   spec.add_dependency 'legion-crypt',     '>= 1.4.9'
   spec.add_dependency 'legion-data',      '>= 1.4.17'

data/lib/legion/extensions/github/cli/runner.rb

@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+
+require 'legion/extensions/github/cli/auth'
+require 'legion/extensions/github/cli/app'
+require 'legion/extensions/github/app/runners/credential_store'
+
+module Legion
+  module Extensions
+    module Github
+      module CLI
+        class AuthRunner
+          include Legion::Logging::Helper if defined?(Legion::Logging::Helper)
+          include Github::CLI::Auth
+          include Github::App::Runners::CredentialStore
+
+          def credential_fingerprint(auth_type:, identifier:)
+            "#{auth_type}:#{identifier}"
+          end
+
+          def vault_get(path)
+            return nil unless defined?(Legion::Crypt)
+
+            ::Legion::Crypt.get(path)
+          rescue StandardError => e
+            log.warn("[lex-github] vault_get failed: #{e.message}")
+            nil
+          end
+
+          def cache_connected?
+            defined?(Legion::Cache) && ::Legion::Cache.connected?
+          rescue StandardError => e
+            log.debug("[lex-github] cache_connected? check failed: #{e.message}")
+            false
+          end
+
+          def local_cache_connected?
+            defined?(Legion::Cache::Local) && ::Legion::Cache::Local.connected?
+          rescue StandardError => e
+            log.debug("[lex-github] local_cache_connected? check failed: #{e.message}")
+            false
+          end
+
+          def cache_get(key)
+            ::Legion::Cache.get(key)
+          rescue StandardError => e
+            log.debug("[lex-github] cache_get failed: #{e.message}")
+            nil
+          end
+
+          def local_cache_get(key)
+            ::Legion::Cache::Local.get(key)
+          rescue StandardError => e
+            log.debug("[lex-github] local_cache_get failed: #{e.message}")
+            nil
+          end
+
+          def cache_set(key, value, ttl: 300)
+            ::Legion::Cache.set(key, value, ttl)
+          rescue StandardError => e
+            log.debug("[lex-github] cache_set failed: #{e.message}")
+            nil
+          end
+
+          def local_cache_set(key, value, ttl: 300)
+            ::Legion::Cache::Local.set(key, value, ttl)
+          rescue StandardError => e
+            log.debug("[lex-github] local_cache_set failed: #{e.message}")
+            nil
+          end
+        end
+
+        class AppRunner
+          include Legion::Logging::Helper if defined?(Legion::Logging::Helper)
+          include Github::CLI::App
+          include Github::App::Runners::CredentialStore
+
+          def credential_fingerprint(auth_type:, identifier:)
+            "#{auth_type}:#{identifier}"
+          end
+
+          def vault_get(path)
+            return nil unless defined?(Legion::Crypt)
+
+            ::Legion::Crypt.get(path)
+          rescue StandardError => e
+            log.warn("[lex-github] vault_get failed: #{e.message}")
+            nil
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/github/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Github
-      VERSION = '0.3.0'
+      VERSION = '0.3.2'
     end
   end
 end

data/lib/legion/extensions/github.rb

@@ -37,11 +37,48 @@ require 'legion/extensions/github/runners/releases'
 require 'legion/extensions/github/runners/deployments'
 require 'legion/extensions/github/runners/repository_webhooks'
 require 'legion/extensions/github/client'
+require 'legion/extensions/github/cli/runner'
 
 module Legion
   module Extensions
     module Github
       extend Legion::Extensions::Core if Legion::Extensions.const_defined? :Core, false
+
+      CLI_COMMANDS = {
+        'auth' => {
+          class_name: 'Legion::Extensions::Github::CLI::AuthRunner',
+          methods:    {
+            'login'  => { desc: 'Authenticate with GitHub via OAuth browser flow', args: '' },
+            'status' => { desc: 'Show current GitHub authentication status', args: '' }
+          }
+        },
+        'app'  => {
+          class_name: 'Legion::Extensions::Github::CLI::AppRunner',
+          methods:    {
+            'setup'          => { desc: 'Create a new GitHub App via manifest flow', args: '' },
+            'complete_setup' => { desc: 'Complete GitHub App setup with authorization code', args: '' }
+          }
+        }
+      }.freeze
+
+      begin
+        manifest_dir = ::File.expand_path('~/.legionio/cache/cli')
+        manifest_path = ::File.join(manifest_dir, 'lex-github.json')
+        unless ::File.exist?(manifest_path) && ::File.read(manifest_path).include?(VERSION)
+          require 'fileutils'
+          ::FileUtils.mkdir_p(manifest_dir)
+          serialized = CLI_COMMANDS.transform_values do |cmd|
+            { 'class'   => cmd[:class_name],
+              'methods' => cmd[:methods].transform_values { |m| { 'desc' => m[:desc], 'args' => m[:args] } } }
+          end
+          ::File.write(manifest_path, ::JSON.pretty_generate(
+                                        'gem' => 'lex-github', 'version' => VERSION,
+                                        'alias' => 'github', 'commands' => serialized
+                                      ))
+        end
+      rescue StandardError => e
+        warn "[lex-github] CLI manifest write skipped: #{e.message}" if ENV['LEGION_DEBUG']
+      end
     end
   end
 end

data/lib/lex/github.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+# Redirect for `require 'lex/github'` (used by `legionio lex exec`)
+require 'legion/extensions/github'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-github
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.2
 platform: ruby
 authors:
 - Esity
@@ -41,14 +41,14 @@ dependencies:
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.7'
 - !ruby/object:Gem::Dependency
@@ -185,6 +185,7 @@ files:
 - lib/legion/extensions/github/app/transport/queues/webhooks.rb
 - lib/legion/extensions/github/cli/app.rb
 - lib/legion/extensions/github/cli/auth.rb
+- lib/legion/extensions/github/cli/runner.rb
 - lib/legion/extensions/github/client.rb
 - lib/legion/extensions/github/errors.rb
 - lib/legion/extensions/github/helpers/browser_auth.rb
@@ -219,6 +220,7 @@ files:
 - lib/legion/extensions/github/runners/search.rb
 - lib/legion/extensions/github/runners/users.rb
 - lib/legion/extensions/github/version.rb
+- lib/lex/github.rb
 homepage: https://github.com/LegionIO/lex-github
 licenses:
 - MIT