@gh-symphony/cli 0.0.14 → 0.0.16

package/dist/chunk-JO3AXHQI.js

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+
+// src/github/gh-auth.ts
+import { execFileSync, spawnSync } from "child_process";
+var REQUIRED_SCOPES = ["repo", "read:org", "project"];
+var GhAuthError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "GhAuthError";
+  }
+};
+function checkGhInstalled(opts) {
+  const execImpl = opts?.execImpl ?? execFileSync;
+  try {
+    execImpl("gh", ["--version"], { stdio: "pipe" });
+    return true;
+  } catch (error) {
+    const execError = error;
+    if (execError.code === "ENOENT") {
+      return false;
+    }
+    throw error;
+  }
+}
+function checkGhAuthenticated(opts) {
+  const spawnImpl = opts?.spawnImpl ?? spawnSync;
+  const result = spawnImpl("gh", ["auth", "status"], {
+    encoding: "utf8",
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  if ((result.status ?? 1) !== 0) {
+    return { authenticated: false };
+  }
+  const login = parseLogin((result.stdout ?? "").toString());
+  return { authenticated: true, login };
+}
+function checkGhScopes(opts) {
+  const spawnImpl = opts?.spawnImpl ?? spawnSync;
+  const result = spawnImpl("gh", ["auth", "status"], {
+    encoding: "utf8",
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  const output = (result.stdout ?? "").toString();
+  const scopes = parseScopes(output);
+  if (scopes.length === 0) {
+    return { valid: true, missing: [], scopes: [] };
+  }
+  const normalized = scopes.map((scope) => scope.toLowerCase());
+  const missing = REQUIRED_SCOPES.filter(
+    (scope) => !normalized.includes(scope)
+  );
+  return {
+    valid: missing.length === 0,
+    missing: [...missing],
+    scopes
+  };
+}
+function getGhToken(opts) {
+  if (process.env.GITHUB_GRAPHQL_TOKEN) {
+    return process.env.GITHUB_GRAPHQL_TOKEN;
+  }
+  const execImpl = opts?.execImpl ?? execFileSync;
+  try {
+    const token = execImpl("gh", ["auth", "token"], {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).toString().trim();
+    if (!token) {
+      throw new GhAuthError(
+        "token_failed",
+        "gh auth token \uC2E4\uD328. gh auth status \uB97C \uD655\uC778\uD558\uC138\uC694."
+      );
+    }
+    return token;
+  } catch (error) {
+    if (error instanceof GhAuthError) {
+      throw error;
+    }
+    throw new GhAuthError(
+      "token_failed",
+      "gh auth token \uC2E4\uD328. gh auth status \uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+}
+function ensureGhAuth(opts) {
+  const execImpl = opts?.execImpl ?? execFileSync;
+  const spawnImpl = opts?.spawnImpl ?? spawnSync;
+  if (!checkGhInstalled({ execImpl })) {
+    throw new GhAuthError(
+      "not_installed",
+      "gh CLI\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. https://cli.github.com \uC5D0\uC11C \uC124\uCE58\uD558\uC138\uC694."
+    );
+  }
+  const auth = checkGhAuthenticated({ spawnImpl });
+  if (!auth.authenticated) {
+    throw new GhAuthError(
+      "not_authenticated",
+      "gh auth login --scopes repo,read:org,project \uB97C \uC2E4\uD589\uD558\uC138\uC694."
+    );
+  }
+  const scopeCheck = checkGhScopes({ spawnImpl });
+  if (!scopeCheck.valid) {
+    throw new GhAuthError(
+      "missing_scopes",
+      `gh auth refresh --scopes repo,read:org,project \uB97C \uC2E4\uD589\uD558\uC138\uC694. (missing: ${scopeCheck.missing.join(", ")})`
+    );
+  }
+  const token = getGhToken({ execImpl });
+  return { login: auth.login ?? "unknown", token };
+}
+function parseLogin(output) {
+  const matched = output.match(
+    /Logged in to github\.com account\s+\*?\*?([A-Za-z0-9_-]+)\*?\*?/i
+  );
+  return matched?.[1];
+}
+function parseScopes(output) {
+  const matched = output.match(/Token scopes:\s*(.+)/i);
+  if (!matched) {
+    return [];
+  }
+  return matched[1].split(",").map((scope) => scope.trim().replace(/^'+|'+$/g, "")).filter((scope) => scope.length > 0);
+}
+
+export {
+  GhAuthError,
+  getGhToken,
+  ensureGhAuth
+};