@storyclaw/talenthub 0.3.2 → 0.3.4

package/dist/cli.js

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
 import dns from "node:dns";
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 // IPv6 is unreachable on many networks (especially behind NAT/China);
 // try IPv4 first to avoid EHOSTUNREACH delays on every fetch.
 dns.setDefaultResultOrder("ipv4first");
@@ -13,12 +16,18 @@ import { agentUnpublish } from "./commands/agent-unpublish.js";
 import { agentUpdate } from "./commands/agent-update.js";
 import { login } from "./commands/login.js";
 import { logout } from "./commands/logout.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(resolve(__dirname, "../package.json"), "utf-8"));
 const program = new Command();
 program
     .name("talenthub")
     .description("Manage StoryClaw AI agents")
-    .version("0.1.0");
-program.command("login").description("Authenticate with StoryClaw").action(login);
+    .version(pkg.version);
+program
+    .command("login")
+    .description("Authenticate with StoryClaw")
+    .option("-t, --token <token>", "Authenticate directly with an sc_token")
+    .action(login);
 program.command("logout").description("Remove stored credentials").action(logout);
 const agent = program.command("agent").description("Agent management commands");
 agent

package/dist/commands/login.d.ts

@@ -1 +1,3 @@
-export declare function login(): Promise<void>;
+export declare function login(options: {
+    token?: string;
+}): Promise<void>;

package/dist/commands/login.js

@@ -1,5 +1,5 @@
 import { execSync } from "node:child_process";
-import { readAuth, requestDeviceCode, pollForToken, writeAuth } from "../lib/auth.js";
+import { readAuth, requestDeviceCode, pollForToken, exchangeToken, writeAuth } from "../lib/auth.js";
 function openUrl(url) {
     try {
         const cmd = process.platform === "darwin"
@@ -13,7 +13,22 @@ function openUrl(url) {
         // Browser open is best-effort
     }
 }
-export async function login() {
+export async function login(options) {
+    // Direct token exchange: skip device-code flow entirely
+    if (options.token) {
+        console.log("Exchanging token...");
+        try {
+            const { access_token, user_id, expires_at } = await exchangeToken(options.token);
+            writeAuth({ token: access_token, user_id, expires_at });
+            console.log(`✓ Logged in successfully.`);
+            console.log(`  User ID: ${user_id}`);
+        }
+        catch (err) {
+            console.error(`✗ Login failed: ${err instanceof Error ? err.message : err}`);
+            process.exit(1);
+        }
+        return;
+    }
     const existing = readAuth();
     if (existing) {
         console.log("Already logged in.");

package/dist/lib/auth.d.ts

@@ -20,4 +20,8 @@ export type TokenResponse = {
     user_id: string;
     expires_at: string;
 };
+/**
+ * Exchange an sc_token (web session cookie) for a CLI-compatible th_* token.
+ */
+export declare function exchangeToken(scToken: string): Promise<TokenResponse>;
 export declare function pollForToken(deviceCode: string, interval: number, maxWaitMs: number): Promise<TokenResponse>;

package/dist/lib/auth.js

@@ -48,6 +48,22 @@ export async function requestDeviceCode() {
     }
     return res.json();
 }
+/**
+ * Exchange an sc_token (web session cookie) for a CLI-compatible th_* token.
+ */
+export async function exchangeToken(scToken) {
+    const base = getRegistryBaseUrl();
+    const res = await fetchRetry(`${base}/api/talenthub/auth/token-exchange`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ token: scToken }),
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({ error: "unknown" }));
+        throw new Error(`Token exchange failed (${res.status}): ${body.error ?? "unknown error"}`);
+    }
+    return res.json();
+}
 export async function pollForToken(deviceCode, interval, maxWaitMs) {
     const base = getRegistryBaseUrl();
     const deadline = Date.now() + maxWaitMs;

package/dist/lib/registry.js

@@ -1,12 +1,19 @@
-import { getRegistryBaseUrl } from "./auth.js";
+import { getRegistryBaseUrl, readAuth } from "./auth.js";
 import { fetchRetry } from "./fetch.js";
 function apiUrl(path) {
     const base = getRegistryBaseUrl().replace(/\/$/, "");
     return `${base}/api/talenthub/registry${path}`;
 }
+function authHeaders() {
+    const auth = readAuth();
+    if (auth?.token) {
+        return { Authorization: `Bearer ${auth.token}` };
+    }
+    return {};
+}
 export async function fetchCatalog() {
     const url = apiUrl("/catalog");
-    const res = await fetchRetry(url);
+    const res = await fetchRetry(url, { headers: authHeaders() });
     if (!res.ok) {
         throw new Error(`Failed to fetch catalog: ${res.status} ${res.statusText}`);
     }
@@ -14,7 +21,7 @@ export async function fetchCatalog() {
 }
 export async function fetchManifest(agentId) {
     const url = apiUrl(`/${agentId}`);
-    const res = await fetchRetry(url);
+    const res = await fetchRetry(url, { headers: authHeaders() });
     if (!res.ok) {
         throw new Error(`Agent "${agentId}" not found in registry (${res.status})`);
     }

package/dist/lib/skills.d.ts

@@ -3,7 +3,9 @@ export type SkillSpec = {
     skill: string;
 };
 /**
- * Parse a fully-qualified skill string ("owner/repo@skill") into its parts.
+ * Parse a skill URL string into repo source and skill name.
+ * Accepts "https://github.com/owner/repo@skill" (preferred) and
+ * legacy "owner/repo@skill" format.
  * Returns undefined if the string is not in the expected format.
  */
 export declare function parseSkillSpec(entry: string): SkillSpec | undefined;
@@ -22,7 +24,7 @@ export declare function isSkillInstalled(name: string): boolean;
  * Install a single skill via `skills add` into the shared directory,
  * then symlink it into the agent workspace.
  *
- * @param entry Fully-qualified skill string ("owner/repo@skill")
+ * @param entry Skill URL string ("https://github.com/owner/repo@skill")
  * @param workspaceDir Agent workspace directory
  * Returns true on success, false on failure (logged, non-fatal).
  */
@@ -32,7 +34,7 @@ export declare function installSkill(entry: string, workspaceDir: string): boole
  * missing skills grouped by repo (one clone per repo), then symlink
  * everything into the workspace.
  *
- * @param skills Array of fully-qualified skill strings ("owner/repo@skill")
+ * @param skills Array of skill URL strings ("https://github.com/owner/repo@skill")
  * Returns { installed, skipped, failed } counts.
  */
 export declare function installAllSkills(skills: string[], workspaceDir: string): {

package/dist/lib/skills.js

@@ -20,7 +20,9 @@ function resolveSkillsBin() {
 }
 const SKILLS_BIN = resolveSkillsBin();
 /**
- * Parse a fully-qualified skill string ("owner/repo@skill") into its parts.
+ * Parse a skill URL string into repo source and skill name.
+ * Accepts "https://github.com/owner/repo@skill" (preferred) and
+ * legacy "owner/repo@skill" format.
  * Returns undefined if the string is not in the expected format.
  */
 export function parseSkillSpec(entry) {
@@ -80,14 +82,14 @@ function installSkillsFromRepo(repo, skillNames) {
  * Install a single skill via `skills add` into the shared directory,
  * then symlink it into the agent workspace.
  *
- * @param entry Fully-qualified skill string ("owner/repo@skill")
+ * @param entry Skill URL string ("https://github.com/owner/repo@skill")
  * @param workspaceDir Agent workspace directory
  * Returns true on success, false on failure (logged, non-fatal).
  */
 export function installSkill(entry, workspaceDir) {
     const spec = parseSkillSpec(entry);
     if (!spec) {
-        console.error(`  Warning: invalid skill spec "${entry}" — expected "owner/repo@skill"`);
+        console.error(`  Warning: invalid skill spec "${entry}" — expected "https://github.com/owner/repo@skill"`);
         return false;
     }
     if (!isSkillInstalled(spec.skill)) {
@@ -129,7 +131,7 @@ function linkSkillToWorkspace(name, workspaceDir) {
  * missing skills grouped by repo (one clone per repo), then symlink
  * everything into the workspace.
  *
- * @param skills Array of fully-qualified skill strings ("owner/repo@skill")
+ * @param skills Array of skill URL strings ("https://github.com/owner/repo@skill")
  * Returns { installed, skipped, failed } counts.
  */
 export function installAllSkills(skills, workspaceDir) {
@@ -142,7 +144,7 @@ export function installAllSkills(skills, workspaceDir) {
     for (const entry of skills) {
         const spec = parseSkillSpec(entry);
         if (!spec) {
-            console.error(`  Warning: invalid skill spec "${entry}" — expected "owner/repo@skill"`);
+            console.error(`  Warning: invalid skill spec "${entry}" — expected "https://github.com/owner/repo@skill"`);
             failed++;
             continue;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@storyclaw/talenthub",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "CLI tool to manage StoryClaw AI agents",
   "type": "module",
   "bin": {