@supercorks/skills-installer 1.8.0 → 1.9.0

package/lib/github-auth.js

@@ -0,0 +1,72 @@
+/**
+ * Helpers for authenticated GitHub API requests.
+ * Uses env tokens first, then falls back to `gh auth token` when available.
+ */
+
+import { execFileSync } from 'child_process';
+
+let cachedToken = '';
+let tokenResolved = false;
+
+function normalizeToken(raw) {
+  if (!raw || typeof raw !== 'string') return '';
+  return raw.trim();
+}
+
+function readTokenFromGhCli() {
+  try {
+    const token = execFileSync('gh', ['auth', 'token'], {
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'ignore']
+    });
+    return normalizeToken(token);
+  } catch {
+    return '';
+  }
+}
+
+/**
+ * Returns a GitHub token if available.
+ * Resolution order: GITHUB_TOKEN -> GH_TOKEN -> gh auth token.
+ * Value is cached for process lifetime.
+ * @returns {string}
+ */
+export function getGitHubAuthToken() {
+  if (tokenResolved) return cachedToken;
+
+  tokenResolved = true;
+  cachedToken =
+    normalizeToken(process.env.GITHUB_TOKEN) ||
+    normalizeToken(process.env.GH_TOKEN) ||
+    readTokenFromGhCli() ||
+    '';
+
+  return cachedToken;
+}
+
+/**
+ * Build GitHub API headers with optional auth.
+ * @param {string} [userAgent='@supercorks/skills-installer']
+ * @returns {Record<string, string>}
+ */
+export function getGitHubHeaders(userAgent = '@supercorks/skills-installer') {
+  const headers = {
+    Accept: 'application/vnd.github.v3+json',
+    'User-Agent': userAgent
+  };
+
+  const token = getGitHubAuthToken();
+  if (token) {
+    headers.Authorization = `Bearer ${token}`;
+  }
+
+  return headers;
+}
+
+/**
+ * Test-only cache reset helper.
+ */
+export function __resetGitHubAuthCacheForTests() {
+  cachedToken = '';
+  tokenResolved = false;
+}

package/lib/skills.js

@@ -2,6 +2,8 @@
  * Fetch and parse available skills from the GitHub repository
  */
 
+import { getGitHubHeaders } from './github-auth.js';
+
 const REPO_OWNER = 'supercorks';
 const REPO_NAME = 'agent-skills';
 const GITHUB_API = 'https://api.github.com';
@@ -26,10 +28,7 @@ export async function fetchAvailableSkills() {
   const repoUrl = `${GITHUB_API}/repos/${REPO_OWNER}/${REPO_NAME}/contents`;
   
   const response = await fetch(repoUrl, {
-    headers: {
-      'Accept': 'application/vnd.github.v3+json',
-      'User-Agent': '@supercorks/skills-installer'
-    }
+    headers: getGitHubHeaders()
   });
 
   if (!response.ok) {
@@ -61,10 +60,7 @@ export async function fetchSkillMetadata(skillFolder) {
   
   try {
     const response = await fetch(skillMdUrl, {
-      headers: {
-        'Accept': 'application/vnd.github.v3+json',
-        'User-Agent': '@supercorks/skills-installer'
-      }
+      headers: getGitHubHeaders()
     });
 
     if (!response.ok) {

package/lib/subagents.js

@@ -2,6 +2,8 @@
  * Fetch and parse available subagents from the GitHub repository
  */
 
+import { getGitHubHeaders } from './github-auth.js';
+
 const SUBAGENTS_REPO_OWNER = 'supercorks';
 const SUBAGENTS_REPO_NAME = 'subagents';
 const GITHUB_API = 'https://api.github.com';
@@ -24,10 +26,7 @@ export async function fetchAvailableSubagents() {
   const repoUrl = `${GITHUB_API}/repos/${SUBAGENTS_REPO_OWNER}/${SUBAGENTS_REPO_NAME}/contents`;
   
   const response = await fetch(repoUrl, {
-    headers: {
-      'Accept': 'application/vnd.github.v3+json',
-      'User-Agent': '@supercorks/skills-installer'
-    }
+    headers: getGitHubHeaders()
   });
 
   if (!response.ok) {
@@ -59,10 +58,7 @@ export async function fetchSubagentMetadata(filename) {
   
   try {
     const response = await fetch(fileUrl, {
-      headers: {
-        'Accept': 'application/vnd.github.v3+json',
-        'User-Agent': '@supercorks/skills-installer'
-      }
+      headers: getGitHubHeaders()
     });
 
     if (!response.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supercorks/skills-installer",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Interactive CLI installer for AI agent skills and subagents",
   "type": "module",
   "bin": {