@axiomatic-labs/claudeflow 2.0.25 → 2.0.27

package/bin/cli.js

@@ -12,6 +12,16 @@ switch (command) {
   case 'version':
     require('../lib/version.js')();
     break;
+  case 'logout': {
+    const ui = require('../lib/ui.js');
+    const { clearCachedToken } = require('../lib/auth.js');
+    if (clearCachedToken()) {
+      ui.success('Token removed from ~/.claudeflow/config.json');
+    } else {
+      ui.info('No cached token found.');
+    }
+    break;
+  }
   case '--version':
   case '-v':
     console.log(`claudeflow v${require('../package.json').version}`);
@@ -25,6 +35,7 @@ switch (command) {
     console.log(`    claudeflow ${ui.CYAN}init${ui.RESET}      Install the latest template files`);
     console.log(`    claudeflow ${ui.CYAN}update${ui.RESET}    Update templates to latest version`);
     console.log(`    claudeflow ${ui.CYAN}version${ui.RESET}   Show version info`);
+    console.log(`    claudeflow ${ui.CYAN}logout${ui.RESET}    Remove cached GitHub token`);
     console.log('');
     console.log(`  ${ui.BOLD}Options:${ui.RESET}`);
     console.log(`    --version, -v   Show CLI version`);

package/lib/auth.js

@@ -1,4 +1,8 @@
 const { execSync } = require('child_process');
+const path = require('path');
+const fs = require('fs');
+const readline = require('readline');
+const https = require('https');
 
 const VALID_TOKEN_PATTERNS = [
   /^ghp_[A-Za-z0-9_]+$/,       // Personal access token
@@ -9,6 +13,9 @@ const VALID_TOKEN_PATTERNS = [
   /^[0-9a-f]{40}$/,            // Classic 40-char hex token
 ];
 
+const CONFIG_DIR = path.join(require('os').homedir(), '.claudeflow');
+const CONFIG_PATH = path.join(CONFIG_DIR, 'config.json');
+
 function sanitizeToken(raw) {
   if (!raw || typeof raw !== 'string') return null;
   const clean = raw.replace(/[\x00-\x1F\x7F]/g, '').trim();
@@ -17,6 +24,85 @@ function sanitizeToken(raw) {
   return clean;
 }
 
+function readCachedToken() {
+  try {
+    const data = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
+    return sanitizeToken(data.githubToken);
+  } catch {
+    return null;
+  }
+}
+
+function cacheToken(token) {
+  fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  fs.writeFileSync(CONFIG_PATH, JSON.stringify({ githubToken: token }, null, 2) + '\n', {
+    mode: 0o600,
+  });
+}
+
+function clearCachedToken() {
+  try {
+    fs.unlinkSync(CONFIG_PATH);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function validateToken(token) {
+  return new Promise((resolve) => {
+    const req = https.get(
+      'https://api.github.com/repos/axiomatic-labs/axiomatic-cli',
+      {
+        headers: {
+          Authorization: `token ${token}`,
+          'User-Agent': 'claudeflow-cli',
+          Accept: 'application/vnd.github.v3+json',
+        },
+      },
+      (res) => {
+        // Drain the response body so the socket can close
+        res.resume();
+        resolve(res.statusCode === 200);
+      }
+    );
+    req.on('error', () => resolve(false));
+    req.setTimeout(10000, () => {
+      req.destroy();
+      resolve(false);
+    });
+  });
+}
+
+function promptForToken() {
+  return new Promise((resolve) => {
+    const ui = require('./ui.js');
+
+    console.log('');
+    console.log(`  ${ui.YELLOW}No GitHub token found.${ui.RESET}`);
+    console.log('');
+    console.log(`  To use Claudeflow, you need a GitHub Personal Access Token`);
+    console.log(`  with access to the ${ui.BOLD}axiomatic-labs/axiomatic-cli${ui.RESET} repository.`);
+    console.log('');
+    console.log(`  Create one at: ${ui.CYAN}https://github.com/settings/tokens/new${ui.RESET}`);
+    console.log(`  Required scope: ${ui.BOLD}repo${ui.RESET} (Full control of private repositories)`);
+    console.log('');
+
+    const rl = readline.createInterface({
+      input: process.stdin,
+      output: process.stdout,
+    });
+
+    rl.question(`  Paste your token: `, (answer) => {
+      rl.close();
+      resolve(answer || null);
+    });
+
+    // Handle Ctrl+C / closed stream
+    rl.on('close', () => resolve(null));
+  });
+}
+
 function getGitHubToken() {
   // Try gh CLI first
   try {
@@ -31,21 +117,49 @@ function getGitHubToken() {
     if (token) return token;
   }
 
+  // Try cached token
+  const cached = readCachedToken();
+  if (cached) return cached;
+
   return null;
 }
 
-function requireAuth() {
+async function requireAuth() {
+  const ui = require('./ui.js');
+
+  // Fast path: gh CLI, env var, or cached token
   const token = getGitHubToken();
-  if (!token) {
-    console.error('GitHub authentication required.\n');
-    console.error('Option 1: Install the GitHub CLI and authenticate:');
-    console.error('  brew install gh && gh auth login\n');
-    console.error('Option 2: Set a GitHub Personal Access Token:');
-    console.error('  export GITHUB_TOKEN=ghp_your_token_here\n');
-    console.error('The token needs read access to axiomatic-labs/axiomatic-cli releases.');
-    process.exit(1);
+  if (token) return token;
+
+  // Interactive prompt with validation loop
+  for (let attempts = 0; attempts < 3; attempts++) {
+    const raw = await promptForToken();
+    if (!raw) {
+      // User cancelled (Ctrl+C or empty input)
+      ui.error('Authentication cancelled.');
+      process.exit(1);
+    }
+
+    const token = sanitizeToken(raw);
+    if (!token) {
+      ui.error('Invalid token format. Expected a GitHub PAT (ghp_..., github_pat_..., etc.).');
+      continue;
+    }
+
+    ui.step('Validating token...');
+    const valid = await validateToken(token);
+    if (!valid) {
+      ui.error('Token invalid or no access to the repository.');
+      continue;
+    }
+
+    cacheToken(token);
+    ui.success(`Token saved to ~/.claudeflow/config.json`);
+    return token;
   }
-  return token;
+
+  ui.error('Too many failed attempts.');
+  process.exit(1);
 }
 
-module.exports = { getGitHubToken, requireAuth };
+module.exports = { getGitHubToken, requireAuth, clearCachedToken };

package/lib/init.js

@@ -21,7 +21,7 @@ async function run() {
   ui.banner();
 
   ui.step('Authenticating with GitHub...');
-  const token = requireAuth();
+  const token = await requireAuth();
 
   ui.step('Fetching latest release...');
   const release = await getLatestRelease(token);

package/lib/update.js

@@ -19,7 +19,7 @@ async function run() {
   ui.banner(current);
 
   ui.step('Authenticating with GitHub...');
-  const token = requireAuth();
+  const token = await requireAuth();
 
   ui.step('Checking for updates...');
   const release = await getLatestRelease(token);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiomatic-labs/claudeflow",
-  "version": "2.0.25",
+  "version": "2.0.27",
   "description": "Claudeflow — AI-powered development toolkit for Claude Code. Skills, agents, hooks, and quality gates that ship production apps.",
   "bin": {
     "claudeflow": "./bin/cli.js"