@ghx-dev/core 0.2.2 → 0.3.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ghx",
   "description": "GitHub execution router for AI agents — 70 capabilities with deterministic routing and normalized output",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "author": {
     "name": "Arye Kogan"
   },

package/dist/{chunk-T3L2VDOS.js → chunk-7A73AXLY.js}

@@ -180,9 +180,97 @@ function createSafeCliCommandRunner(options) {
   };
 }
 
+// src/core/auth/resolve-token.ts
+import { statSync } from "fs";
+import { mkdir, readFile, rename, unlink, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { join } from "path";
+var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+var GH_AUTH_TIMEOUT_MS = 5e3;
+function resolveHostname() {
+  return process.env.GH_HOST || "github.com";
+}
+function resolveCacheDir() {
+  const base = process.env.XDG_CACHE_HOME || join(homedir(), ".cache");
+  return join(base, "ghx", "tokens");
+}
+function resolveCachePath() {
+  return join(resolveCacheDir(), resolveHostname());
+}
+async function readCachedToken() {
+  const cachePath = resolveCachePath();
+  try {
+    const stat = statSync(cachePath);
+    if (Date.now() - stat.mtimeMs > CACHE_TTL_MS) {
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  try {
+    const content = await readFile(cachePath, "utf8");
+    const trimmed = content.trim();
+    return trimmed.length > 0 ? trimmed : null;
+  } catch {
+    return null;
+  }
+}
+async function writeCachedToken(token) {
+  const cacheDir = resolveCacheDir();
+  const cachePath = resolveCachePath();
+  const tmpPath = `${cachePath}.${process.pid}.tmp`;
+  await mkdir(cacheDir, { recursive: true, mode: 448 });
+  await writeFile(tmpPath, token, { mode: 384 });
+  await rename(tmpPath, cachePath);
+}
+async function resolveFromGhCli() {
+  const runner = createSafeCliCommandRunner();
+  const hostname = resolveHostname();
+  const args = hostname === "github.com" ? ["auth", "token"] : ["auth", "token", "--hostname", hostname];
+  try {
+    const result = await runner.run("gh", args, GH_AUTH_TIMEOUT_MS);
+    if (result.exitCode !== 0) {
+      return null;
+    }
+    const token = result.stdout.trim();
+    return token.length > 0 ? token : null;
+  } catch {
+    return null;
+  }
+}
+async function resolveGithubToken() {
+  const githubToken = process.env.GITHUB_TOKEN?.trim();
+  if (githubToken && githubToken.length > 0) {
+    return { token: githubToken, source: "env" };
+  }
+  const ghToken = process.env.GH_TOKEN?.trim();
+  if (ghToken && ghToken.length > 0) {
+    return { token: ghToken, source: "env" };
+  }
+  const cached = await readCachedToken();
+  if (cached !== null) {
+    return { token: cached, source: "cache" };
+  }
+  const ghCliToken = await resolveFromGhCli();
+  if (ghCliToken !== null) {
+    await writeCachedToken(ghCliToken).catch(() => {
+    });
+    return { token: ghCliToken, source: "gh-cli" };
+  }
+  throw new Error(
+    "GitHub token not found. Set GITHUB_TOKEN or GH_TOKEN environment variable, or authenticate with: gh auth login"
+  );
+}
+async function invalidateTokenCache() {
+  try {
+    await unlink(resolveCachePath());
+  } catch {
+  }
+}
+
 // src/core/registry/index.ts
 import { readdirSync, readFileSync } from "fs";
-import { dirname, extname, join } from "path";
+import { dirname, extname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 import { load as parseYaml } from "js-yaml";
 
@@ -381,7 +469,7 @@ var operationCardSchema = {
 var validateCard = ajv.compile(operationCardSchema);
 function cardDirectory() {
   const currentDir = dirname(fileURLToPath(import.meta.url));
-  return join(currentDir, "cards");
+  return join2(currentDir, "cards");
 }
 function loadCardsFromYaml() {
   const directory = cardDirectory();
@@ -472,7 +560,7 @@ function loadCardsFromYaml() {
     return a.localeCompare(b);
   });
   return entries.map((entry) => {
-    const filePath = join(directory, entry);
+    const filePath = join2(directory, entry);
     const raw = readFileSync(filePath, "utf8");
     const parsed = parseYaml(raw);
     const validation = validateOperationCard(parsed);
@@ -745,7 +833,7 @@ function createLogger(config) {
   }
   function write(level, msg, ctx) {
     if (levelIndex(level) < minIndex) return;
-    const version = true ? "0.2.2" : "unknown";
+    const version = true ? "0.3.0" : "unknown";
     const entry = {
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       pid: config.pid,
@@ -6116,6 +6204,8 @@ function createGithubClient(transport) {
 
 export {
   createSafeCliCommandRunner,
+  resolveGithubToken,
+  invalidateTokenCache,
   listOperationCards,
   getOperationCard,
   extractArrayItemHints,
@@ -6129,4 +6219,4 @@ export {
   createGithubClientFromToken,
   createGithubClient
 };
-//# sourceMappingURL=chunk-T3L2VDOS.js.map
+//# sourceMappingURL=chunk-7A73AXLY.js.map