@autonomee/gohub 0.8.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,57 @@
+# `gohub`
+
+Go Hub CLI — install, update, search, and publish agent skills as folders.
+
+## Install
+
+```bash
+# From this repo (shortcut script at repo root)
+bun gohub --help
+
+# Once published to npm
+# npm i -g gohub
+```
+
+## Auth (publish)
+
+```bash
+gohub login
+# or
+gohub auth login
+
+# Headless / token paste
+# or (token paste / headless)
+gohub login --token clh_...
+```
+
+Notes:
+
+- Browser login opens `https://hub.autonomee.ai/cli/auth` and completes via a loopback callback.
+- Token stored in `~/Library/Application Support/gohub/config.json` on macOS (override via `GOHUB_CONFIG_PATH`).
+
+## Examples
+
+```bash
+gohub search "postgres backups"
+gohub install my-skill-pack
+gohub update --all
+gohub update --all --no-input --force
+gohub publish ./my-skill-pack --slug my-skill-pack --name "My Skill Pack" --version 1.2.0 --changelog "Fixes + docs"
+```
+
+## Sync (upload local skills)
+
+```bash
+# Start anywhere; scans workdir first, then Autonomee workspace if configured.
+gohub sync
+
+# Explicit roots + non-interactive dry-run
+gohub sync --root ../autonomee/skills --all --dry-run
+```
+
+## Defaults
+
+- Site: `https://hub.autonomee.ai` (override via `--site` or `GOHUB_SITE`)
+- Registry: discovered from `/.well-known/gohub.json` on the site (override via `--registry` or `GOHUB_REGISTRY`)
+- Workdir: current directory (falls back to Autonomee workspace if configured; override via `--workdir` or `GOHUB_WORKDIR`)
+- Install dir: `./skills` under workdir (override via `--dir`)

package/bin/clawdhub.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import('../dist/cli.js')

package/bin/gohub.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import('../dist/cli.js')

package/dist/browserAuth.d.ts

@@ -0,0 +1,20 @@
+export type LoopbackAuthResult = {
+    token: string;
+    registry?: string;
+    state?: string;
+};
+export declare function buildCliAuthUrl(params: {
+    siteUrl: string;
+    redirectUri: string;
+    label?: string;
+    state: string;
+}): string;
+export declare function isAllowedLoopbackRedirectUri(value: string): boolean;
+export declare function startLoopbackAuthServer(params?: {
+    timeoutMs?: number;
+}): Promise<{
+    redirectUri: string;
+    state: string;
+    waitForResult: () => Promise<LoopbackAuthResult>;
+    close: () => import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+}>;

package/dist/browserAuth.js

@@ -0,0 +1,156 @@
+import { createServer } from 'node:http';
+export function buildCliAuthUrl(params) {
+    const url = new URL('/cli/auth', params.siteUrl);
+    url.searchParams.set('redirect_uri', params.redirectUri);
+    if (params.label)
+        url.searchParams.set('label_b64', encodeBase64Url(params.label));
+    url.searchParams.set('state', params.state);
+    return url.toString();
+}
+export function isAllowedLoopbackRedirectUri(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== 'http:')
+        return false;
+    const host = url.hostname.toLowerCase();
+    if (host !== '127.0.0.1' && host !== 'localhost' && host !== '::1' && host !== '[::1]') {
+        return false;
+    }
+    return true;
+}
+export async function startLoopbackAuthServer(params) {
+    const timeoutMs = params?.timeoutMs ?? 5 * 60_000;
+    const expectedState = generateState();
+    let resolveToken = null;
+    let rejectToken = null;
+    const tokenPromise = new Promise((resolve, reject) => {
+        resolveToken = resolve;
+        rejectToken = reject;
+    });
+    const server = createServer((req, res) => {
+        const method = req.method ?? 'GET';
+        const url = req.url ?? '/';
+        if (method === 'GET' && (url === '/' || url.startsWith('/callback'))) {
+            res.statusCode = 200;
+            res.setHeader('Content-Type', 'text/html; charset=utf-8');
+            res.end(CALLBACK_HTML);
+            return;
+        }
+        if (method === 'POST' && url === '/token') {
+            const chunks = [];
+            req.on('data', (chunk) => chunks.push(chunk));
+            req.on('end', () => {
+                try {
+                    const raw = Buffer.concat(chunks).toString('utf8');
+                    const parsed = JSON.parse(raw);
+                    if (!parsed || typeof parsed !== 'object')
+                        throw new Error('invalid payload');
+                    const token = parsed.token;
+                    const registry = parsed.registry;
+                    const state = parsed.state;
+                    if (typeof token !== 'string' || !token.trim())
+                        throw new Error('token required');
+                    if (typeof state !== 'string' || state !== expectedState) {
+                        throw new Error('state mismatch');
+                    }
+                    res.statusCode = 200;
+                    res.setHeader('Content-Type', 'application/json');
+                    res.end(JSON.stringify({ ok: true }));
+                    resolveToken?.({
+                        token: token.trim(),
+                        registry: typeof registry === 'string' ? registry : undefined,
+                        state,
+                    });
+                }
+                catch (error) {
+                    res.statusCode = 400;
+                    res.setHeader('Content-Type', 'application/json');
+                    res.end(JSON.stringify({ ok: false }));
+                    const message = error instanceof Error ? error.message : 'invalid payload';
+                    rejectToken?.(new Error(message));
+                }
+                finally {
+                    server.close();
+                }
+            });
+            return;
+        }
+        res.statusCode = 404;
+        res.setHeader('Content-Type', 'text/plain; charset=utf-8');
+        res.end('Not found');
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => resolve());
+    });
+    const address = server.address();
+    if (!address) {
+        server.close();
+        throw new Error('Failed to bind loopback server');
+    }
+    const redirectUri = `http://127.0.0.1:${address.port}/callback`;
+    const timeout = setTimeout(() => {
+        server.close();
+        rejectToken?.(new Error('Timed out waiting for browser login'));
+    }, timeoutMs);
+    tokenPromise.finally(() => clearTimeout(timeout)).catch(() => { });
+    return {
+        redirectUri,
+        state: expectedState,
+        waitForResult: () => tokenPromise,
+        close: () => server.close(),
+    };
+}
+const CALLBACK_HTML = `<!doctype html>
+<html lang="en">
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Go Hub CLI Login</title>
+  <style>
+    :root { color-scheme: light dark; }
+    body { font-family: ui-sans-serif, system-ui, -apple-system, Segoe UI, sans-serif; padding: 24px; }
+    .card { max-width: 560px; margin: 40px auto; padding: 18px 16px; border: 1px solid rgba(127,127,127,.35); border-radius: 12px; }
+    code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+  </style>
+  <body>
+    <div class="card">
+      <h1 style="margin: 0 0 10px; font-size: 18px;">Completing login…</h1>
+      <p id="status" style="margin: 0; opacity: .8;">Waiting for token.</p>
+    </div>
+    <script>
+      const statusEl = document.getElementById('status')
+      const params = new URLSearchParams(location.hash.replace(/^#/, ''))
+      const token = params.get('token')
+      const registry = params.get('registry')
+      const state = params.get('state')
+      if (!token) {
+        statusEl.textContent = 'Missing token in URL. You can close this tab and try again.'
+      } else if (!state) {
+        statusEl.textContent = 'Missing state in URL. You can close this tab and try again.'
+      } else {
+        fetch('/token', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ token, registry, state }),
+        }).then(() => {
+          statusEl.textContent = 'Logged in. You can close this tab.'
+          setTimeout(() => window.close(), 250)
+        }).catch(() => {
+          statusEl.textContent = 'Failed to send token to CLI. You can close this tab and try again.'
+        })
+      }
+    </script>
+  </body>
+</html>`;
+function encodeBase64Url(value) {
+    return Buffer.from(value, 'utf8').toString('base64url');
+}
+function generateState() {
+    return Buffer.from(crypto.getRandomValues(new Uint8Array(16))).toString('hex');
+}
+//# sourceMappingURL=browserAuth.js.map

package/dist/browserAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuth.js","sourceRoot":"","sources":["../src/browserAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AASxC,MAAM,UAAU,eAAe,CAAC,MAK/B;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAClF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IACvC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA+B;IAC3E,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,CAAC,GAAG,MAAM,CAAA;IACjD,MAAM,aAAa,GAAG,aAAa,EAAE,CAAA;IAErC,IAAI,YAAY,GAAiD,IAAI,CAAA;IACrE,IAAI,WAAW,GAAoC,IAAI,CAAA;IACvD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvE,YAAY,GAAG,OAAO,CAAA;QACtB,WAAW,GAAG,MAAM,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAA;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;QAE1B,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACzD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAA;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;oBACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;oBAC7E,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAA;oBACnD,MAAM,QAAQ,GAAI,MAAiC,CAAC,QAAQ,CAAA;oBAC5D,MAAM,KAAK,GAAI,MAA8B,CAAC,KAAK,CAAA;oBACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;oBACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;wBACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;oBACnC,CAAC;oBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;oBACjD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;oBACrC,YAAY,EAAE,CAAC;wBACb,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;wBACnB,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;wBAC7D,KAAK;qBACN,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;oBACjD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAA;oBAC1E,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;gBACnC,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,KAAK,EAAE,CAAA;gBAChB,CAAC;YACH,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;QACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAA;QAC1D,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,WAAW,CAAA;IAE/D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;IACjE,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAEjE,OAAO;QACL,WAAW;QACX,KAAK,EAAE,aAAa;QACpB,aAAa,EAAE,GAAG,EAAE,CAAC,YAAY;QACjC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAA;AACH,CAAC;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwCd,CAAA;AAER,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC"}

package/dist/browserAuth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/browserAuth.test.js

@@ -0,0 +1,83 @@
+/* @vitest-environment node */
+import { describe, expect, it } from 'vitest';
+import { buildCliAuthUrl, isAllowedLoopbackRedirectUri, startLoopbackAuthServer, } from './browserAuth';
+describe('browserAuth', () => {
+    it('builds auth url', () => {
+        const url = buildCliAuthUrl({
+            siteUrl: 'https://example.com',
+            redirectUri: 'http://127.0.0.1:1234/callback',
+            label: 'CLI token',
+            state: 'state123',
+        });
+        expect(url).toContain('https://example.com/cli/auth?');
+        expect(url).toContain('redirect_uri=');
+        expect(url).toContain('label_b64=');
+        expect(url).toContain('state=');
+    });
+    it('builds auth url without label', () => {
+        const url = buildCliAuthUrl({
+            siteUrl: 'https://example.com',
+            redirectUri: 'http://127.0.0.1:1234/callback',
+            state: 'state123',
+        });
+        expect(url).toContain('https://example.com/cli/auth?');
+        expect(url).not.toContain('label_b64=');
+    });
+    it('accepts only loopback http redirect uris', () => {
+        expect(isAllowedLoopbackRedirectUri('http://127.0.0.1:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('http://localhost:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('http://[::1]:1234/callback')).toBe(true);
+        expect(isAllowedLoopbackRedirectUri('https://127.0.0.1:1234/callback')).toBe(false);
+        expect(isAllowedLoopbackRedirectUri('http://evil.com/callback')).toBe(false);
+        expect(isAllowedLoopbackRedirectUri('not a url')).toBe(false);
+    });
+    it('receives token via loopback server', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        const payload = {
+            token: 'clh_test',
+            registry: 'https://example.convex.site',
+            state: server.state,
+        };
+        await fetch(server.redirectUri.replace('/callback', '/token'), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(payload),
+        });
+        await expect(server.waitForResult()).resolves.toEqual(payload);
+    });
+    it('serves callback html', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        const response = await fetch(server.redirectUri);
+        expect(response.status).toBe(200);
+        const text = await response.text();
+        expect(text).toContain('Go Hub CLI Login');
+        server.close();
+    });
+    it('returns 404 for unknown routes', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        const response = await fetch(server.redirectUri.replace('/callback', '/nope'));
+        expect(response.status).toBe(404);
+        server.close();
+    });
+    it('rejects invalid json payloads', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        const tokenUrl = server.redirectUri.replace('/callback', '/token');
+        const response = await fetch(tokenUrl, { method: 'POST', body: '{' });
+        expect(response.status).toBe(400);
+        await expect(server.waitForResult()).rejects.toThrow();
+    });
+    it('rejects state mismatches', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 2000 });
+        await fetch(server.redirectUri.replace('/callback', '/token'), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ token: 'clh_test', registry: 'https://example.com', state: 'nope' }),
+        });
+        await expect(server.waitForResult()).rejects.toThrow(/state mismatch/i);
+    });
+    it('times out waiting for login', async () => {
+        const server = await startLoopbackAuthServer({ timeoutMs: 25 });
+        await expect(server.waitForResult()).rejects.toThrow(/timed out waiting for browser login/i);
+    });
+});
+//# sourceMappingURL=browserAuth.test.js.map

package/dist/browserAuth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserAuth.test.js","sourceRoot":"","sources":["../src/browserAuth.test.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,eAAe,CAAA;AAEtB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,GAAG,GAAG,eAAe,CAAC;YAC1B,OAAO,EAAE,qBAAqB;YAC9B,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,eAAe,CAAC;YAC1B,OAAO,EAAE,qBAAqB;YAC9B,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,UAAU;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,4BAA4B,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7E,MAAM,CAAC,4BAA4B,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnF,MAAM,CAAC,4BAA4B,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5E,MAAM,CAAC,4BAA4B,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,6BAA6B;YACvC,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAA;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAChD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9E,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC5F,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;QAC/D,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/cli/authToken.d.ts

@@ -0,0 +1,2 @@
+export declare function getOptionalAuthToken(): Promise<string | undefined>;
+export declare function requireAuthToken(): Promise<string>;

package/dist/cli/authToken.js

@@ -0,0 +1,13 @@
+import { readGlobalConfig } from '../config.js';
+import { fail } from './ui.js';
+export async function getOptionalAuthToken() {
+    const cfg = await readGlobalConfig();
+    return cfg?.token ?? undefined;
+}
+export async function requireAuthToken() {
+    const token = await getOptionalAuthToken();
+    if (!token)
+        fail('Not logged in. Run: gohub login');
+    return token;
+}
+//# sourceMappingURL=authToken.js.map

package/dist/cli/authToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.js","sourceRoot":"","sources":["../../src/cli/authToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE9B,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;IACpC,OAAO,GAAG,EAAE,KAAK,IAAI,SAAS,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,EAAE,CAAA;IAC1C,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACnD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/cli/autonomeeConfig.d.ts

@@ -0,0 +1 @@
+export { resolveAutonomeeDefaultWorkspace, resolveAutonomeeSkillRoots, type AutonomeeSkillRoots, } from './clawdbotConfig.js';

package/dist/cli/autonomeeConfig.js

@@ -0,0 +1,2 @@
+export { resolveAutonomeeDefaultWorkspace, resolveAutonomeeSkillRoots, } from './clawdbotConfig.js';
+//# sourceMappingURL=autonomeeConfig.js.map

package/dist/cli/autonomeeConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomeeConfig.js","sourceRoot":"","sources":["../../src/cli/autonomeeConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAE3B,MAAM,qBAAqB,CAAA"}

package/dist/cli/buildInfo.d.ts

@@ -0,0 +1,3 @@
+export declare function getCliCommit(): string | null;
+export declare function getCliVersion(): string;
+export declare function getCliBuildLabel(): string;

package/dist/cli/buildInfo.js

@@ -0,0 +1,104 @@
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+function readPackageVersion() {
+    try {
+        const path = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
+        const raw = readFileSync(path, 'utf8');
+        const pkg = JSON.parse(raw);
+        return typeof pkg.version === 'string' ? pkg.version : '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+function shortCommit(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    if (trimmed.length <= 8)
+        return trimmed;
+    return trimmed.slice(0, 8);
+}
+export function getCliCommit() {
+    const candidates = [
+        process.env.GOHUB_COMMIT,
+        process.env.CLAWDHUB_COMMIT,
+        process.env.VERCEL_GIT_COMMIT_SHA,
+        process.env.GITHUB_SHA,
+        process.env.COMMIT_SHA,
+    ];
+    for (const candidate of candidates) {
+        if (!candidate)
+            continue;
+        const short = shortCommit(candidate);
+        if (short)
+            return short;
+    }
+    return readGitCommitFromCwd();
+}
+export function getCliVersion() {
+    return readPackageVersion();
+}
+export function getCliBuildLabel() {
+    const version = getCliVersion();
+    const commit = getCliCommit();
+    return commit ? `v${version} (${commit})` : `v${version}`;
+}
+function readGitCommitFromCwd() {
+    try {
+        const gitDir = findGitDir(process.cwd());
+        if (!gitDir)
+            return null;
+        const headPath = join(gitDir, 'HEAD');
+        if (!existsSync(headPath))
+            return null;
+        const head = readFileSync(headPath, 'utf8').trim();
+        if (!head)
+            return null;
+        if (!head.startsWith('ref:'))
+            return shortCommit(head);
+        const ref = head.replace(/^ref:\s*/, '').trim();
+        if (!ref)
+            return null;
+        const refPath = join(gitDir, ref);
+        if (!existsSync(refPath))
+            return null;
+        const sha = readFileSync(refPath, 'utf8').trim();
+        return shortCommit(sha);
+    }
+    catch {
+        return null;
+    }
+}
+function findGitDir(start) {
+    let current = resolve(start);
+    for (;;) {
+        const dotGit = join(current, '.git');
+        if (existsSync(dotGit)) {
+            try {
+                const stat = statSync(dotGit);
+                if (stat.isDirectory())
+                    return dotGit;
+            }
+            catch {
+                // ignore
+            }
+            try {
+                const content = readFileSync(dotGit, 'utf8').trim();
+                const match = content.match(/^gitdir:\s*(.+)$/);
+                if (match?.[1])
+                    return resolve(current, match[1]);
+            }
+            catch {
+                return dotGit;
+            }
+            return dotGit;
+        }
+        const parent = resolve(current, '..');
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+//# sourceMappingURL=buildInfo.js.map

package/dist/cli/buildInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildInfo.js","sourceRoot":"","sources":["../../src/cli/buildInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAChF,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAA;QAC1C,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACvC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU;KACvB,CAAA;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS;YAAE,SAAQ;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;QACpC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,oBAAoB,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,kBAAkB,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;IAC7B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QACrC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5B,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACpC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,OAAO,MAAM,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;gBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAA;YACf,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QACnC,OAAO,GAAG,MAAM,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/clawdbotConfig.d.ts

@@ -0,0 +1,6 @@
+export type AutonomeeSkillRoots = {
+    roots: string[];
+    labels: Record<string, string>;
+};
+export declare function resolveAutonomeeSkillRoots(): Promise<AutonomeeSkillRoots>;
+export declare function resolveAutonomeeDefaultWorkspace(): Promise<string | null>;