@brainfile/cli 0.11.2 → 0.12.0

package/dist/commands/auth.js

@@ -0,0 +1,141 @@
+"use strict";
+/**
+ * Authentication commands for Brainfile CLI
+ *
+ * Commands:
+ * - brainfile auth github [--token <token>]
+ * - brainfile auth linear --token <token>
+ * - brainfile auth status
+ * - brainfile auth logout <provider>
+ *
+ * @packageDocumentation
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.githubAuthCommand = githubAuthCommand;
+exports.linearAuthCommand = linearAuthCommand;
+exports.authStatusCommand = authStatusCommand;
+exports.authLogoutCommand = authLogoutCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const auth_store_1 = require("../utils/auth-store");
+const github_auth_1 = require("../utils/github-auth");
+const linear_auth_1 = require("../utils/linear-auth");
+const errorHandler_1 = require("../utils/errorHandler");
+async function githubAuthCommand(options) {
+    try {
+        const result = await (0, github_auth_1.authenticateGitHub)({
+            token: options.token,
+            usePAT: !!options.token,
+        });
+        if (!result.success) {
+            console.log(chalk_1.default.red('✗') + ` Authentication failed: ${result.error}`);
+            process.exit(1);
+        }
+        console.log('');
+        console.log(chalk_1.default.green('GitHub authentication complete!'));
+    }
+    catch (error) {
+        (0, errorHandler_1.handleError)(error);
+    }
+}
+async function linearAuthCommand(options) {
+    try {
+        if (!options.token) {
+            console.log('');
+            console.log('Linear authentication requires an API key.');
+            console.log('');
+            console.log(`Get your API key from: ${chalk_1.default.underline('https://linear.app/settings/api')}`);
+            console.log('');
+            console.log('Then run:');
+            console.log(chalk_1.default.cyan('  brainfile auth linear --token <your-api-key>'));
+            console.log('');
+            return;
+        }
+        const result = await (0, linear_auth_1.authenticateLinear)({
+            token: options.token,
+        });
+        if (!result.success) {
+            console.log(chalk_1.default.red('✗') + ` Authentication failed: ${result.error}`);
+            process.exit(1);
+        }
+        console.log('');
+        console.log(chalk_1.default.green('Linear authentication complete!'));
+    }
+    catch (error) {
+        (0, errorHandler_1.handleError)(error);
+    }
+}
+// ============================================================================
+// Status Command
+// ============================================================================
+async function authStatusCommand() {
+    try {
+        const status = await auth_store_1.authStore.getStatus();
+        console.log('');
+        console.log(chalk_1.default.bold('Authentication Status'));
+        console.log('');
+        // GitHub
+        if (status.github.authenticated) {
+            const source = status.github.source;
+            const username = status.github.username ? ` as ${chalk_1.default.cyan('@' + status.github.username)}` : '';
+            console.log(chalk_1.default.green('✓') +
+                ` GitHub: authenticated${username} ${chalk_1.default.gray(`(${source})`)}`);
+        }
+        else {
+            console.log(chalk_1.default.red('✗') + ' GitHub: not configured');
+        }
+        // Linear
+        if (status.linear.authenticated) {
+            const source = status.linear.source;
+            const username = status.linear.username ? ` as ${chalk_1.default.cyan(status.linear.username)}` : '';
+            console.log(chalk_1.default.green('✓') +
+                ` Linear: authenticated${username} ${chalk_1.default.gray(`(${source})`)}`);
+        }
+        else {
+            console.log(chalk_1.default.red('✗') + ' Linear: not configured');
+        }
+        console.log('');
+    }
+    catch (error) {
+        (0, errorHandler_1.handleError)(error);
+    }
+}
+async function authLogoutCommand(provider, options) {
+    try {
+        if (options?.all || provider === 'all') {
+            await (0, github_auth_1.logoutGitHub)();
+            await (0, linear_auth_1.logoutLinear)();
+            console.log(chalk_1.default.green('✓') + ' Logged out from all providers');
+            return;
+        }
+        if (!provider) {
+            console.log('');
+            console.log('Usage:');
+            console.log('  brainfile auth logout github');
+            console.log('  brainfile auth logout linear');
+            console.log('  brainfile auth logout --all');
+            console.log('');
+            return;
+        }
+        switch (provider.toLowerCase()) {
+            case 'github':
+                await (0, github_auth_1.logoutGitHub)();
+                console.log(chalk_1.default.green('✓') + ' Logged out from GitHub');
+                break;
+            case 'linear':
+                await (0, linear_auth_1.logoutLinear)();
+                console.log(chalk_1.default.green('✓') + ' Logged out from Linear');
+                break;
+            default:
+                console.log(chalk_1.default.red('✗') + ` Unknown provider: ${provider}`);
+                console.log('Valid providers: github, linear');
+                process.exit(1);
+        }
+    }
+    catch (error) {
+        (0, errorHandler_1.handleError)(error);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;AAgBH,8CAiBC;AAUD,8CA4BC;AAMD,8CAoCC;AAUD,8CAoCC;AA7JD,kDAA0B;AAC1B,oDAAgD;AAChD,sDAAwE;AACxE,sDAAwE;AACxE,wDAAoD;AAU7C,KAAK,UAAU,iBAAiB,CAAC,OAA0B;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAkB,EAAC;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,2BAA2B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAUM,KAAK,UAAU,iBAAiB,CAAC,OAA0B;IAChE,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B,eAAK,CAAC,SAAS,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAkB,EAAC;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,2BAA2B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAExE,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,sBAAS,CAAC,SAAS,EAAE,CAAC;QAE3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,SAAS;QACT,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,eAAK,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACd,yBAAyB,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CACnE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,SAAS;QACT,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACd,yBAAyB,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CACnE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAUM,KAAK,UAAU,iBAAiB,CAAC,QAAiB,EAAE,OAAuB;IAChF,IAAI,CAAC;QACH,IAAI,OAAO,EAAE,GAAG,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,IAAA,0BAAY,GAAE,CAAC;YACrB,MAAM,IAAA,0BAAY,GAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,gCAAgC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,QAAQ;gBACX,MAAM,IAAA,0BAAY,GAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAC;gBAC1D,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,IAAA,0BAAY,GAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAC;gBAC1D,MAAM;YACR;gBACE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,QAAQ,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/utils/auth-store.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Authentication token storage for Brainfile CLI
+ *
+ * Stores tokens with the following priority:
+ * 1. System keychain (via keytar, if available)
+ * 2. Config file (~/.config/brainfile/auth.json)
+ * 3. Environment variables (read-only)
+ *
+ * @packageDocumentation
+ */
+export type AuthProvider = 'github' | 'linear';
+export interface StoredToken {
+    token: string;
+    savedAt: string;
+    username?: string;
+    workspace?: string;
+}
+/**
+ * Try to get GitHub token from gh CLI
+ * @returns Token from gh CLI, or null if not available
+ */
+export declare function getGitHubCLIToken(): string | null;
+/**
+ * Check if gh CLI is installed and authenticated
+ */
+export declare function isGitHubCLIAvailable(): boolean;
+export declare class AuthStore {
+    /**
+     * Get a token for a provider
+     * Checks: env vars → keychain → config file → gh CLI (for github)
+     */
+    get(provider: AuthProvider): Promise<string | null>;
+    /**
+     * Get stored token info (includes metadata like username)
+     */
+    getTokenInfo(provider: AuthProvider): Promise<StoredToken | null>;
+    /**
+     * Store a token for a provider
+     * Stores in: keychain (if available) AND config file (for metadata)
+     */
+    set(provider: AuthProvider, token: string, metadata?: {
+        username?: string;
+        workspace?: string;
+    }): Promise<void>;
+    /**
+     * Clear a token for a provider
+     */
+    clear(provider: AuthProvider): Promise<void>;
+    /**
+     * Check if a provider is authenticated
+     */
+    isAuthenticated(provider: AuthProvider): Promise<boolean>;
+    /**
+     * Get authentication status for all providers
+     */
+    getStatus(): Promise<Record<AuthProvider, {
+        authenticated: boolean;
+        source?: string;
+        username?: string;
+    }>>;
+    private getFromEnv;
+    private loadAuthFile;
+    private saveAuthFile;
+    private getFromFile;
+    private saveToFile;
+    private removeFromFile;
+}
+export declare const authStore: AuthStore;
+//# sourceMappingURL=auth-store.d.ts.map

package/dist/utils/auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../../src/utils/auth-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmDD;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAejD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAMD,qBAAa,SAAS;IACpB;;;OAGG;IACG,GAAG,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkCzD;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAMvE;;;OAGG;IACG,GAAG,CACP,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAelD;;OAEG;IACG,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAK/D;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAyDhH,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,cAAc;CAKvB;AAGD,eAAO,MAAM,SAAS,WAAkB,CAAC"}

package/dist/utils/auth-store.js

@@ -0,0 +1,308 @@
+"use strict";
+/**
+ * Authentication token storage for Brainfile CLI
+ *
+ * Stores tokens with the following priority:
+ * 1. System keychain (via keytar, if available)
+ * 2. Config file (~/.config/brainfile/auth.json)
+ * 3. Environment variables (read-only)
+ *
+ * @packageDocumentation
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authStore = exports.AuthStore = void 0;
+exports.getGitHubCLIToken = getGitHubCLIToken;
+exports.isGitHubCLIAvailable = isGitHubCLIAvailable;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const config_1 = require("./config");
+// ============================================================================
+// Constants
+// ============================================================================
+const SERVICE_NAME = 'brainfile';
+const AUTH_FILE = path.join((0, config_1.getConfigDir)(), 'auth.json');
+const ENV_VAR_MAP = {
+    github: ['GITHUB_TOKEN', 'GH_TOKEN'],
+    linear: ['LINEAR_API_KEY', 'LINEAR_TOKEN'],
+};
+// ============================================================================
+// Keytar Integration (Optional)
+// ============================================================================
+let keytar = null;
+let keytarChecked = false;
+/**
+ * Try to load keytar (system keychain integration)
+ * Returns null if keytar is not available
+ */
+function getKeytar() {
+    if (keytarChecked) {
+        return keytar;
+    }
+    keytarChecked = true;
+    try {
+        // Dynamic require to make keytar optional
+        keytar = require('keytar');
+        return keytar;
+    }
+    catch {
+        // keytar not installed or native module not built
+        return null;
+    }
+}
+// ============================================================================
+// GitHub CLI Integration
+// ============================================================================
+/**
+ * Try to get GitHub token from gh CLI
+ * @returns Token from gh CLI, or null if not available
+ */
+function getGitHubCLIToken() {
+    try {
+        const token = (0, child_process_1.execSync)('gh auth token', {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        if (token && token.length > 0) {
+            return token;
+        }
+    }
+    catch {
+        // gh CLI not installed or not authenticated
+    }
+    return null;
+}
+/**
+ * Check if gh CLI is installed and authenticated
+ */
+function isGitHubCLIAvailable() {
+    return getGitHubCLIToken() !== null;
+}
+// ============================================================================
+// Auth Store Class
+// ============================================================================
+class AuthStore {
+    /**
+     * Get a token for a provider
+     * Checks: env vars → keychain → config file → gh CLI (for github)
+     */
+    async get(provider) {
+        // 1. Check environment variables
+        const envToken = this.getFromEnv(provider);
+        if (envToken) {
+            return envToken;
+        }
+        // 2. Check system keychain
+        const kt = getKeytar();
+        if (kt) {
+            try {
+                const keychainToken = await kt.getPassword(SERVICE_NAME, provider);
+                if (keychainToken) {
+                    return keychainToken;
+                }
+            }
+            catch {
+                // Keychain access failed, continue to next option
+            }
+        }
+        // 3. Check config file
+        const fileToken = this.getFromFile(provider);
+        if (fileToken) {
+            return fileToken;
+        }
+        // 4. For GitHub, check gh CLI as last resort
+        if (provider === 'github') {
+            return getGitHubCLIToken();
+        }
+        return null;
+    }
+    /**
+     * Get stored token info (includes metadata like username)
+     */
+    async getTokenInfo(provider) {
+        // Check config file for metadata
+        const authData = this.loadAuthFile();
+        return authData[provider] || null;
+    }
+    /**
+     * Store a token for a provider
+     * Stores in: keychain (if available) AND config file (for metadata)
+     */
+    async set(provider, token, metadata) {
+        const storedToken = {
+            token,
+            savedAt: new Date().toISOString(),
+            ...metadata,
+        };
+        // 1. Try to store in keychain
+        const kt = getKeytar();
+        if (kt) {
+            try {
+                await kt.setPassword(SERVICE_NAME, provider, token);
+            }
+            catch {
+                // Keychain storage failed, will fall back to file
+            }
+        }
+        // 2. Store in config file (always, for metadata)
+        this.saveToFile(provider, storedToken);
+    }
+    /**
+     * Clear a token for a provider
+     */
+    async clear(provider) {
+        // 1. Remove from keychain
+        const kt = getKeytar();
+        if (kt) {
+            try {
+                await kt.deletePassword(SERVICE_NAME, provider);
+            }
+            catch {
+                // Ignore errors
+            }
+        }
+        // 2. Remove from config file
+        this.removeFromFile(provider);
+    }
+    /**
+     * Check if a provider is authenticated
+     */
+    async isAuthenticated(provider) {
+        const token = await this.get(provider);
+        return token !== null;
+    }
+    /**
+     * Get authentication status for all providers
+     */
+    async getStatus() {
+        const result = {
+            github: { authenticated: false },
+            linear: { authenticated: false },
+        };
+        for (const provider of ['github', 'linear']) {
+            // Check env first
+            if (this.getFromEnv(provider)) {
+                result[provider] = { authenticated: true, source: 'environment' };
+                continue;
+            }
+            // Check keychain
+            const kt = getKeytar();
+            if (kt) {
+                try {
+                    const token = await kt.getPassword(SERVICE_NAME, provider);
+                    if (token) {
+                        const info = await this.getTokenInfo(provider);
+                        result[provider] = {
+                            authenticated: true,
+                            source: 'keychain',
+                            username: info?.username,
+                        };
+                        continue;
+                    }
+                }
+                catch {
+                    // Continue to next check
+                }
+            }
+            // Check config file
+            const fileToken = this.getFromFile(provider);
+            if (fileToken) {
+                const info = await this.getTokenInfo(provider);
+                result[provider] = {
+                    authenticated: true,
+                    source: 'config',
+                    username: info?.username,
+                };
+                continue;
+            }
+            // For GitHub, check gh CLI
+            if (provider === 'github' && getGitHubCLIToken()) {
+                result[provider] = { authenticated: true, source: 'gh-cli' };
+            }
+        }
+        return result;
+    }
+    // ============================================================================
+    // Private Methods
+    // ============================================================================
+    getFromEnv(provider) {
+        const vars = ENV_VAR_MAP[provider];
+        for (const varName of vars) {
+            const value = process.env[varName];
+            if (value && value.length > 0) {
+                return value;
+            }
+        }
+        return null;
+    }
+    loadAuthFile() {
+        try {
+            if (fs.existsSync(AUTH_FILE)) {
+                const content = fs.readFileSync(AUTH_FILE, 'utf-8');
+                return JSON.parse(content);
+            }
+        }
+        catch {
+            // File corrupted or unreadable
+        }
+        return {};
+    }
+    saveAuthFile(data) {
+        (0, config_1.ensureConfigDir)();
+        fs.writeFileSync(AUTH_FILE, JSON.stringify(data, null, 2), {
+            encoding: 'utf-8',
+            mode: 0o600, // Owner read/write only
+        });
+    }
+    getFromFile(provider) {
+        const data = this.loadAuthFile();
+        return data[provider]?.token || null;
+    }
+    saveToFile(provider, tokenInfo) {
+        const data = this.loadAuthFile();
+        data[provider] = tokenInfo;
+        this.saveAuthFile(data);
+    }
+    removeFromFile(provider) {
+        const data = this.loadAuthFile();
+        delete data[provider];
+        this.saveAuthFile(data);
+    }
+}
+exports.AuthStore = AuthStore;
+// Export singleton instance
+exports.authStore = new AuthStore();
+//# sourceMappingURL=auth-store.js.map

package/dist/utils/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/utils/auth-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEH,8CAeC;AAKD,oDAEC;AA7FD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AACzC,qCAAyD;AAoBzD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,qBAAY,GAAE,EAAE,WAAW,CAAC,CAAC;AAEzD,MAAM,WAAW,GAAmC;IAClD,MAAM,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC,MAAM,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;CAC3C,CAAC;AAEF,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,IAAI,MAAM,GAAQ,IAAI,CAAC;AACvB,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,SAAS,SAAS;IAChB,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,GAAG,IAAI,CAAC;IAErB,IAAI,CAAC;QACH,0CAA0C;QAC1C,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,wBAAQ,EAAC,eAAe,EAAE;YACtC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,OAAO,iBAAiB,EAAE,KAAK,IAAI,CAAC;AACtC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAa,SAAS;IACpB;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,QAAsB;QAC9B,iCAAiC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,2BAA2B;QAC3B,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACnE,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,aAAa,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,6CAA6C;QAC7C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAsB;QACvC,iCAAiC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CACP,QAAsB,EACtB,KAAa,EACb,QAAoD;QAEpD,MAAM,WAAW,GAAgB;YAC/B,KAAK;YACL,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,GAAG,QAAQ;SACZ,CAAC;QAEF,8BAA8B;QAC9B,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAsB;QAChC,0BAA0B;QAC1B,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAsB;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAyF;YACnG,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;YAChC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;SACjC,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAmB,EAAE,CAAC;YAC9D,kBAAkB;YAClB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,iBAAiB;YACjB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;oBAC3D,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAC/C,MAAM,CAAC,QAAQ,CAAC,GAAG;4BACjB,aAAa,EAAE,IAAI;4BACnB,MAAM,EAAE,UAAU;4BAClB,QAAQ,EAAE,IAAI,EAAE,QAAQ;yBACzB,CAAC;wBACF,SAAS;oBACX,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM,CAAC,QAAQ,CAAC,GAAG;oBACjB,aAAa,EAAE,IAAI;oBACnB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,IAAI,EAAE,QAAQ;iBACzB,CAAC;gBACF,SAAS;YACX,CAAC;YAED,2BAA2B;YAC3B,IAAI,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,EAAE,EAAE,CAAC;gBACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAEvE,UAAU,CAAC,QAAsB;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAa,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,YAAY,CAAC,IAAc;QACjC,IAAA,wBAAe,GAAE,CAAC;QAClB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACzD,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,KAAK,EAAE,wBAAwB;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,QAAsB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IACvC,CAAC;IAEO,UAAU,CAAC,QAAsB,EAAE,SAAsB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,cAAc,CAAC,QAAsB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAlND,8BAkNC;AAED,4BAA4B;AACf,QAAA,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/utils/config.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Configuration file management for Brainfile CLI
+ *
+ * Handles reading/writing ~/.config/brainfile/config.json for:
+ * - Archive destination defaults
+ * - GitHub connection details (owner, repo)
+ * - Linear connection details (teamId)
+ * - User preferences
+ *
+ * @packageDocumentation
+ */
+export interface GitHubConfig {
+    /** GitHub repository owner (username or org) */
+    owner?: string;
+    /** GitHub repository name */
+    repo?: string;
+    /** Extra labels to add to archived issues */
+    labels?: string[];
+}
+export interface LinearConfig {
+    /** Linear team ID */
+    teamId?: string;
+    /** Linear project ID (optional) */
+    projectId?: string;
+}
+export interface ArchiveConfig {
+    /** Default archive destination: 'local' | 'github' | 'linear' */
+    default?: 'local' | 'github' | 'linear';
+    /** GitHub-specific settings */
+    github?: GitHubConfig;
+    /** Linear-specific settings */
+    linear?: LinearConfig;
+}
+export interface BrainfileConfig {
+    /** Archive configuration */
+    archive?: ArchiveConfig;
+}
+/**
+ * Get the path to the config directory
+ */
+export declare function getConfigDir(): string;
+/**
+ * Get the path to the config file
+ */
+export declare function getConfigPath(): string;
+/**
+ * Ensure the config directory exists
+ */
+export declare function ensureConfigDir(): void;
+/**
+ * Load the config file
+ * @returns Config object, or empty object if file doesn't exist
+ */
+export declare function loadConfig(): BrainfileConfig;
+/**
+ * Save the config file
+ * @param config - Config object to save
+ */
+export declare function saveConfig(config: BrainfileConfig): void;
+/**
+ * Update specific config values (merges with existing)
+ * @param updates - Partial config to merge
+ */
+export declare function updateConfig(updates: Partial<BrainfileConfig>): BrainfileConfig;
+/**
+ * Get archive configuration with defaults
+ */
+export declare function getArchiveConfig(): ArchiveConfig;
+/**
+ * Set archive default destination
+ */
+export declare function setArchiveDefault(destination: 'local' | 'github' | 'linear'): void;
+/**
+ * Set GitHub configuration
+ */
+export declare function setGitHubConfig(github: GitHubConfig): void;
+/**
+ * Set Linear configuration
+ */
+export declare function setLinearConfig(linear: LinearConfig): void;
+/**
+ * Get the effective archive destination
+ * Priority: brainfile.md archive.destination > config default > 'local'
+ *
+ * @param brainfileDestination - Destination from brainfile.md (if any)
+ * @returns The effective destination
+ */
+export declare function getEffectiveArchiveDestination(brainfileDestination?: string): 'local' | 'github' | 'linear';
+//# sourceMappingURL=config.d.ts.map

package/dist/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACxC,+BAA+B;IAC/B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAaD;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAItC;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,eAAe,CAW5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAMxD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAK/E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAGhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAKlF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAK1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAK1D;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAc/B"}