@fractary/faber-cli 1.3.1 → 1.3.3

package/dist/lib/repo-client.d.ts

@@ -2,7 +2,10 @@
  * Repo Client
  *
  * Integrates with @fractary/core SDK for repository and work tracking operations
+ * Supports both PAT and GitHub App authentication methods.
  */
+import { WorkManager, RepoManager } from '@fractary/core';
+import type { FaberConfig } from '../types/config.js';
 interface Issue {
     id: string;
     number: number;
@@ -31,7 +34,7 @@ interface IssueUpdateOptions {
  * Repo Client - integrates with @fractary/core SDK
  *
  * Provides repository and work tracking operations using WorkManager and RepoManager
- * from the @fractary/core SDK. Replaces the previous CLI-based approach.
+ * from the @fractary/core SDK. Supports both PAT and GitHub App authentication.
  */
 export declare class RepoClient {
     private config;
@@ -39,7 +42,24 @@ export declare class RepoClient {
     private repoManager;
     private organization;
     private project;
-    constructor(config: any);
+    /**
+     * Create a RepoClient instance (async factory method)
+     *
+     * Use this method to create RepoClient instances as it supports
+     * both PAT and GitHub App authentication.
+     *
+     * @param config - FABER CLI configuration
+     * @returns Promise resolving to RepoClient instance
+     */
+    static create(config: FaberConfig): Promise<RepoClient>;
+    /**
+     * Create a RepoClient instance
+     *
+     * @param config - FABER CLI configuration
+     * @param workManager - Optional pre-initialized WorkManager (for async factory)
+     * @param repoManager - Optional pre-initialized RepoManager (for async factory)
+     */
+    constructor(config: FaberConfig, workManager?: WorkManager, repoManager?: RepoManager);
     /**
      * Fetch specific issues by ID
      *

package/dist/lib/repo-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo-client.d.ts","sourceRoot":"","sources":["../../src/lib/repo-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,GAAG;IA6BvB;;;;OAIG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAclD;;;;OAIG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAetD;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrD;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BzF;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;CA0B9D"}
+{"version":3,"file":"repo-client.d.ts","sourceRoot":"","sources":["../../src/lib/repo-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAS1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,UAAU,KAAK;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAS;IAExB;;;;;;;;OAQG;WACU,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB7D;;;;;;OAMG;gBACS,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW;IA0CrF;;;;OAIG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAclD;;;;OAIG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAetD;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrD;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BzF;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;CA0B9D"}

package/dist/lib/repo-client.js

@@ -2,29 +2,73 @@
  * Repo Client
  *
  * Integrates with @fractary/core SDK for repository and work tracking operations
+ * Supports both PAT and GitHub App authentication methods.
  */
 import { WorkManager, RepoManager } from '@fractary/core';
-import { createWorkConfig, createRepoConfig } from './sdk-config-adapter.js';
+import { createWorkConfig, createRepoConfig, createWorkConfigAsync, createRepoConfigAsync, isGitHubAppConfigured, } from './sdk-config-adapter.js';
 import { sdkIssueToCLIIssue, sdkWorktreeToCLIWorktreeResult } from './sdk-type-adapter.js';
 import os from 'os';
 /**
  * Repo Client - integrates with @fractary/core SDK
  *
  * Provides repository and work tracking operations using WorkManager and RepoManager
- * from the @fractary/core SDK. Replaces the previous CLI-based approach.
+ * from the @fractary/core SDK. Supports both PAT and GitHub App authentication.
  */
 export class RepoClient {
-    constructor(config) {
+    /**
+     * Create a RepoClient instance (async factory method)
+     *
+     * Use this method to create RepoClient instances as it supports
+     * both PAT and GitHub App authentication.
+     *
+     * @param config - FABER CLI configuration
+     * @returns Promise resolving to RepoClient instance
+     */
+    static async create(config) {
+        // Use async config methods for GitHub App support
+        const workConfig = await createWorkConfigAsync(config);
+        const repoConfig = await createRepoConfigAsync(config);
+        try {
+            const workManager = new WorkManager(workConfig);
+            const repoManager = new RepoManager(repoConfig);
+            // Create client with pre-initialized managers
+            return new RepoClient(config, workManager, repoManager);
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                throw new Error(`Failed to initialize SDK managers: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Create a RepoClient instance
+     *
+     * @param config - FABER CLI configuration
+     * @param workManager - Optional pre-initialized WorkManager (for async factory)
+     * @param repoManager - Optional pre-initialized RepoManager (for async factory)
+     */
+    constructor(config, workManager, repoManager) {
         this.config = config;
-        // Validate GitHub token
+        this.organization = config.github?.organization || 'unknown';
+        this.project = config.github?.project || 'unknown';
+        // If managers are provided (from static create), use them
+        if (workManager && repoManager) {
+            this.workManager = workManager;
+            this.repoManager = repoManager;
+            return;
+        }
+        // Synchronous initialization - only works with PAT
+        if (isGitHubAppConfigured(config)) {
+            throw new Error('GitHub App authentication requires async initialization. ' +
+                'Use RepoClient.create() instead of new RepoClient().');
+        }
+        // Validate GitHub token for PAT auth
         const token = config.github?.token;
         if (!token) {
             throw new Error('GitHub token not found. Set GITHUB_TOKEN environment variable.');
         }
-        // Extract organization and project
-        this.organization = config.github?.organization || 'unknown';
-        this.project = config.github?.project || 'unknown';
-        // Create SDK configurations
+        // Create SDK configurations (PAT only)
         const workConfig = createWorkConfig(config);
         const repoConfig = createRepoConfig(config);
         // Initialize SDK managers

package/dist/lib/sdk-config-adapter.d.ts

@@ -2,9 +2,41 @@
  * SDK Configuration Adapter
  *
  * Converts FABER CLI configuration to @fractary/core SDK configuration format
+ * Supports both PAT and GitHub App authentication methods.
  */
 import type { FaberConfig } from '../types/config.js';
 import type { WorkConfig, RepoConfig } from '@fractary/core';
+import { TokenProvider } from './github-app-auth.js';
+/**
+ * Get the current token from the provider
+ * Used internally and for SDK configuration
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to the current token
+ */
+export declare function getToken(faberConfig: FaberConfig): Promise<string>;
+/**
+ * Get the token provider for dynamic token refresh
+ * Useful for long-running operations that need fresh tokens
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns TokenProvider instance
+ */
+export declare function getTokenProviderInstance(faberConfig: FaberConfig): TokenProvider;
+/**
+ * Validate GitHub authentication configuration
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @throws Error if configuration is invalid
+ */
+export declare function validateGitHubAuth(faberConfig: FaberConfig): Promise<void>;
+/**
+ * Check if GitHub App authentication is configured
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns true if GitHub App is configured
+ */
+export declare function isGitHubAppConfigured(faberConfig: FaberConfig): boolean;
 /**
  * Create WorkConfig for WorkManager from FaberConfig
  *
@@ -13,6 +45,16 @@ import type { WorkConfig, RepoConfig } from '@fractary/core';
  * @throws Error if required fields are missing
  */
 export declare function createWorkConfig(faberConfig: FaberConfig): WorkConfig;
+/**
+ * Create WorkConfig for WorkManager from FaberConfig (async version)
+ *
+ * This version supports both PAT and GitHub App authentication.
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to WorkConfig for @fractary/core WorkManager
+ * @throws Error if required fields are missing
+ */
+export declare function createWorkConfigAsync(faberConfig: FaberConfig): Promise<WorkConfig>;
 /**
  * Create RepoConfig for RepoManager from FaberConfig
  *
@@ -21,4 +63,14 @@ export declare function createWorkConfig(faberConfig: FaberConfig): WorkConfig;
  * @throws Error if required fields are missing
  */
 export declare function createRepoConfig(faberConfig: FaberConfig): RepoConfig;
+/**
+ * Create RepoConfig for RepoManager from FaberConfig (async version)
+ *
+ * This version supports both PAT and GitHub App authentication.
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to RepoConfig for @fractary/core RepoManager
+ * @throws Error if required fields are missing
+ */
+export declare function createRepoConfigAsync(faberConfig: FaberConfig): Promise<RepoConfig>;
 //# sourceMappingURL=sdk-config-adapter.d.ts.map

package/dist/lib/sdk-config-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-config-adapter.d.ts","sourceRoot":"","sources":["../../src/lib/sdk-config-adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE7D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAuBrE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAiBrE"}
+{"version":3,"file":"sdk-config-adapter.d.ts","sourceRoot":"","sources":["../../src/lib/sdk-config-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAEL,aAAa,EAGd,MAAM,sBAAsB,CAAC;AA2D9B;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAEhF;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAGvE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAmCrE;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBzF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAyBrE;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAYzF"}

package/dist/lib/sdk-config-adapter.js

@@ -2,7 +2,107 @@
  * SDK Configuration Adapter
  *
  * Converts FABER CLI configuration to @fractary/core SDK configuration format
+ * Supports both PAT and GitHub App authentication methods.
  */
+import { GitHubAppAuth, StaticTokenProvider, GitHubAppTokenProvider, } from './github-app-auth.js';
+// Singleton token provider for reuse across SDK instances
+let tokenProvider = null;
+let tokenProviderConfig = null;
+/**
+ * Get or create a token provider based on configuration
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns TokenProvider instance
+ */
+function getTokenProvider(faberConfig) {
+    const appConfig = faberConfig.github?.app;
+    const patToken = faberConfig.github?.token;
+    // Determine which auth method to use
+    // GitHub App takes precedence over PAT if configured
+    if (appConfig?.id && appConfig?.installation_id) {
+        // Check if we can reuse existing provider
+        if (tokenProvider && tokenProviderConfig === appConfig) {
+            return tokenProvider;
+        }
+        // Create new GitHub App token provider
+        const auth = new GitHubAppAuth(appConfig);
+        tokenProvider = new GitHubAppTokenProvider(auth);
+        tokenProviderConfig = appConfig;
+        return tokenProvider;
+    }
+    // Fall back to PAT
+    if (patToken) {
+        // Check if we can reuse existing provider
+        if (tokenProvider && tokenProviderConfig === patToken) {
+            return tokenProvider;
+        }
+        tokenProvider = new StaticTokenProvider(patToken);
+        tokenProviderConfig = patToken;
+        return tokenProvider;
+    }
+    throw new Error('GitHub authentication not configured. Either:\n' +
+        '  1. Set GITHUB_TOKEN environment variable, or\n' +
+        '  2. Configure GitHub App in .fractary/settings.json:\n' +
+        '     {\n' +
+        '       "github": {\n' +
+        '         "app": {\n' +
+        '           "id": "<app-id>",\n' +
+        '           "installation_id": "<installation-id>",\n' +
+        '           "private_key_path": "~/.github/your-app.pem"\n' +
+        '         }\n' +
+        '       }\n' +
+        '     }');
+}
+/**
+ * Get the current token from the provider
+ * Used internally and for SDK configuration
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to the current token
+ */
+export async function getToken(faberConfig) {
+    const provider = getTokenProvider(faberConfig);
+    return provider.getToken();
+}
+/**
+ * Get the token provider for dynamic token refresh
+ * Useful for long-running operations that need fresh tokens
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns TokenProvider instance
+ */
+export function getTokenProviderInstance(faberConfig) {
+    return getTokenProvider(faberConfig);
+}
+/**
+ * Validate GitHub authentication configuration
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @throws Error if configuration is invalid
+ */
+export async function validateGitHubAuth(faberConfig) {
+    const appConfig = faberConfig.github?.app;
+    if (appConfig?.id && appConfig?.installation_id) {
+        // Validate GitHub App configuration
+        const auth = new GitHubAppAuth(appConfig);
+        await auth.validate();
+        return;
+    }
+    // Validate PAT
+    if (!faberConfig.github?.token) {
+        throw new Error('GitHub token not found. Set GITHUB_TOKEN environment variable or configure in .fractary/settings.json');
+    }
+}
+/**
+ * Check if GitHub App authentication is configured
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns true if GitHub App is configured
+ */
+export function isGitHubAppConfigured(faberConfig) {
+    const appConfig = faberConfig.github?.app;
+    return !!(appConfig?.id && appConfig?.installation_id);
+}
 /**
  * Create WorkConfig for WorkManager from FaberConfig
  *
@@ -11,15 +111,49 @@
  * @throws Error if required fields are missing
  */
 export function createWorkConfig(faberConfig) {
-    const token = faberConfig.github?.token;
     const owner = faberConfig.github?.organization;
     const repo = faberConfig.github?.project;
-    if (!token) {
-        throw new Error('GitHub token not found. Set GITHUB_TOKEN environment variable or configure in .fractary/settings.json');
+    if (!owner || !repo) {
+        throw new Error('GitHub organization and project must be configured in .fractary/settings.json');
+    }
+    // Get token provider (validates auth config)
+    const provider = getTokenProvider(faberConfig);
+    // For SDK config, we need a synchronous token
+    // The SDK will use this initially; for long-running operations,
+    // use createWorkConfigAsync or the token provider directly
+    let token;
+    if (provider instanceof StaticTokenProvider) {
+        // For PAT, we can get token synchronously via internal access
+        token = faberConfig.github?.token || '';
     }
+    else {
+        // For GitHub App, throw helpful error - use async version
+        throw new Error('GitHub App authentication requires async initialization. ' +
+            'Use createWorkConfigAsync() instead of createWorkConfig().');
+    }
+    return {
+        platform: 'github',
+        owner,
+        repo,
+        token,
+    };
+}
+/**
+ * Create WorkConfig for WorkManager from FaberConfig (async version)
+ *
+ * This version supports both PAT and GitHub App authentication.
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to WorkConfig for @fractary/core WorkManager
+ * @throws Error if required fields are missing
+ */
+export async function createWorkConfigAsync(faberConfig) {
+    const owner = faberConfig.github?.organization;
+    const repo = faberConfig.github?.project;
     if (!owner || !repo) {
         throw new Error('GitHub organization and project must be configured in .fractary/settings.json');
     }
+    const token = await getToken(faberConfig);
     return {
         platform: 'github',
         owner,
@@ -35,12 +169,39 @@ export function createWorkConfig(faberConfig) {
  * @throws Error if required fields are missing
  */
 export function createRepoConfig(faberConfig) {
-    const token = faberConfig.github?.token;
     const owner = faberConfig.github?.organization;
     const repo = faberConfig.github?.project;
-    if (!token) {
-        throw new Error('GitHub token not found. Set GITHUB_TOKEN environment variable or configure in .fractary/settings.json');
+    // Get token provider (validates auth config)
+    const provider = getTokenProvider(faberConfig);
+    // For SDK config, we need a synchronous token
+    let token;
+    if (provider instanceof StaticTokenProvider) {
+        token = faberConfig.github?.token || '';
     }
+    else {
+        throw new Error('GitHub App authentication requires async initialization. ' +
+            'Use createRepoConfigAsync() instead of createRepoConfig().');
+    }
+    return {
+        platform: 'github',
+        owner,
+        repo,
+        token,
+    };
+}
+/**
+ * Create RepoConfig for RepoManager from FaberConfig (async version)
+ *
+ * This version supports both PAT and GitHub App authentication.
+ *
+ * @param faberConfig - FABER CLI configuration
+ * @returns Promise resolving to RepoConfig for @fractary/core RepoManager
+ * @throws Error if required fields are missing
+ */
+export async function createRepoConfigAsync(faberConfig) {
+    const owner = faberConfig.github?.organization;
+    const repo = faberConfig.github?.project;
+    const token = await getToken(faberConfig);
     return {
         platform: 'github',
         owner,

package/dist/types/config.d.ts

@@ -6,11 +6,23 @@
 export interface AnthropicConfig {
     api_key?: string;
 }
+/**
+ * GitHub App authentication configuration
+ */
+export interface GitHubAppConfig {
+    id: string;
+    installation_id: string;
+    private_key_path?: string;
+    private_key_env_var?: string;
+    created_via?: 'manifest-flow' | 'manual';
+    created_at?: string;
+}
 export interface GitHubConfig {
     token?: string;
     organization?: string;
     project?: string;
     repo?: string;
+    app?: GitHubAppConfig;
 }
 export interface WorktreeConfig {
     location?: string;

package/dist/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,eAAe,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH"}

package/dist/utils/github-manifest.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Helper utilities for GitHub App Manifest flow
+ */
+/**
+ * Parse code parameter from GitHub redirect URL or direct code input
+ *
+ * @param input - Either a full GitHub URL or just the code
+ * @returns The extracted code, or null if invalid
+ */
+export declare function parseCodeFromUrl(input: string): string | null;
+/**
+ * Validate manifest code format
+ *
+ * GitHub manifest codes are typically long alphanumeric strings
+ * with underscores and hyphens, at least 20 characters long.
+ *
+ * @param code - The code to validate
+ * @returns true if code appears valid
+ */
+export declare function validateManifestCode(code: string): boolean;
+/**
+ * Detect GitHub context from git remote
+ *
+ * Parses the git remote URL to extract organization and repository names.
+ * Supports both HTTPS and SSH URL formats.
+ *
+ * @returns Object with org and repo, or null if not detectable
+ */
+export declare function detectGitHubContext(): {
+    org: string;
+    repo: string;
+} | null;
+/**
+ * Validate if current directory is a git repository
+ *
+ * @returns true if current directory is a git repository
+ */
+export declare function isGitRepository(): boolean;
+//# sourceMappingURL=github-manifest.d.ts.map

package/dist/utils/github-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-manifest.d.ts","sourceRoot":"","sources":["../../src/utils/github-manifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoB7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAqB1E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAQzC"}

package/dist/utils/github-manifest.js

@@ -0,0 +1,84 @@
+/**
+ * Helper utilities for GitHub App Manifest flow
+ */
+import { Git } from '@fractary/faber';
+/**
+ * Parse code parameter from GitHub redirect URL or direct code input
+ *
+ * @param input - Either a full GitHub URL or just the code
+ * @returns The extracted code, or null if invalid
+ */
+export function parseCodeFromUrl(input) {
+    const trimmed = input.trim();
+    // Try to parse as URL first
+    try {
+        const url = new URL(trimmed);
+        const code = url.searchParams.get('code');
+        if (code) {
+            return code;
+        }
+    }
+    catch {
+        // Not a valid URL, check if it's just the code itself
+    }
+    // Check if input looks like a code (alphanumeric, underscores, hyphens)
+    if (/^[a-zA-Z0-9_-]+$/.test(trimmed)) {
+        return trimmed;
+    }
+    return null;
+}
+/**
+ * Validate manifest code format
+ *
+ * GitHub manifest codes are typically long alphanumeric strings
+ * with underscores and hyphens, at least 20 characters long.
+ *
+ * @param code - The code to validate
+ * @returns true if code appears valid
+ */
+export function validateManifestCode(code) {
+    return /^[a-zA-Z0-9_-]{20,}$/.test(code);
+}
+/**
+ * Detect GitHub context from git remote
+ *
+ * Parses the git remote URL to extract organization and repository names.
+ * Supports both HTTPS and SSH URL formats.
+ *
+ * @returns Object with org and repo, or null if not detectable
+ */
+export function detectGitHubContext() {
+    try {
+        const git = new Git();
+        const remoteUrl = git.exec('remote get-url origin').trim();
+        // Parse various GitHub URL formats
+        // HTTPS: https://github.com/org/repo.git
+        // SSH: git@github.com:org/repo.git
+        const match = remoteUrl.match(/github\.com[/:]([^/]+)\/([^/]+?)(\.git)?$/);
+        if (match) {
+            const org = match[1];
+            const repo = match[2].replace(/\.git$/, '');
+            return { org, repo };
+        }
+        return null;
+    }
+    catch {
+        // Not a git repository or no origin remote
+        return null;
+    }
+}
+/**
+ * Validate if current directory is a git repository
+ *
+ * @returns true if current directory is a git repository
+ */
+export function isGitRepository() {
+    try {
+        const git = new Git();
+        git.exec('rev-parse --git-dir');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fractary/faber-cli",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "FABER CLI - Command-line interface for FABER development toolkit",
   "main": "dist/index.js",
   "bin": {
@@ -38,11 +38,14 @@
   "dependencies": {
     "@fractary/core": "^0.2.0",
     "@fractary/faber": "^2.1.1",
+    "ajv": "^8.12.0",
     "chalk": "^5.0.0",
-    "commander": "^12.0.0"
+    "commander": "^12.0.0",
+    "jsonwebtoken": "^9.0.0"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
+    "@types/jsonwebtoken": "^9.0.0",
     "@types/node": "^20.19.26",
     "@typescript-eslint/eslint-plugin": "^6.19.0",
     "@typescript-eslint/parser": "^6.19.0",