facult 1.0.1 → 1.0.3

package/README.md

@@ -43,12 +43,6 @@ Direct binary install from GitHub Releases (macOS/Linux):
 curl -fsSL https://github.com/hack-dance/facult/releases/latest/download/facult-install.sh | bash
 ```
 
-If release assets are private, set a token first:
-
-```bash
-export FACULT_GITHUB_TOKEN="<github-token>"
-```
-
 Windows and manual installs can download the correct binary from each release page:
 `facult-<version>-<platform>-<arch>`.
 
@@ -252,8 +246,6 @@ facult <command> --help
 ### Runtime env vars
 
 - `FACULT_ROOT_DIR`: override canonical store location
-- `FACULT_GITHUB_TOKEN`: auth token for private GitHub release asset downloads
-- `GITHUB_TOKEN` / `GH_TOKEN`: fallback tokens for release asset downloads
 - `FACULT_VERSION`: version selector for `scripts/install.sh` (`latest` by default)
 - `FACULT_INSTALL_DIR`: install target dir for `scripts/install.sh` (`~/.facult/bin` by default)
 - `FACULT_INSTALL_PM`: force package manager detection for npm bootstrap launcher (`npm` or `bun`)

package/bin/facult.cjs

@@ -37,7 +37,6 @@ async function main() {
   );
   const binaryName = resolved.platform === "windows" ? "facult.exe" : "facult";
   const binaryPath = path.join(installDir, binaryName);
-  const githubToken = resolveGitHubToken();
 
   if (!(await fileExists(binaryPath))) {
     const tag = `v${version}`;
@@ -50,7 +49,6 @@ async function main() {
       await downloadWithRetry(url, tmpPath, {
         attempts: DOWNLOAD_RETRIES,
         delayMs: DOWNLOAD_RETRY_DELAY_MS,
-        token: githubToken,
       });
       if (resolved.platform !== "windows") {
         await fsp.chmod(tmpPath, 0o755);
@@ -149,48 +147,19 @@ function detectPackageManager() {
   return "npm";
 }
 
-function resolveGitHubToken() {
-  const tokenCandidates = [
-    process.env.FACULT_GITHUB_TOKEN,
-    process.env.GITHUB_TOKEN,
-    process.env.GH_TOKEN,
-  ];
-  for (const candidate of tokenCandidates) {
-    const token = String(candidate || "").trim();
-    if (token) {
-      return token;
-    }
-  }
-  return "";
-}
-
-function buildRequestHeaders(url, token) {
-  const headers = {
+function buildRequestHeaders() {
+  return {
     "user-agent": "facult-installer",
     accept: "application/octet-stream",
   };
-  if (!token) {
-    return headers;
-  }
-
-  try {
-    const hostname = new URL(url).hostname.toLowerCase();
-    if (hostname === "github.com" || hostname === "api.github.com") {
-      headers.authorization = `Bearer ${token}`;
-    }
-  } catch {
-    // Keep default headers if URL parsing fails.
-  }
-
-  return headers;
 }
 
-async function download(url, destinationPath, options = {}) {
+async function download(url, destinationPath) {
   await new Promise((resolve, reject) => {
     const request = https.get(
       url,
       {
-        headers: buildRequestHeaders(url, options.token),
+        headers: buildRequestHeaders(),
       },
       (response) => {
         if (
@@ -200,7 +169,7 @@ async function download(url, destinationPath, options = {}) {
           response.headers.location
         ) {
           response.resume();
-          download(response.headers.location, destinationPath, options)
+          download(response.headers.location, destinationPath)
             .then(resolve)
             .catch(reject);
           return;
@@ -240,7 +209,7 @@ async function downloadWithRetry(url, destinationPath, options) {
   for (let attempt = 1; attempt <= options.attempts; attempt += 1) {
     try {
       await safeUnlink(destinationPath);
-      await download(url, destinationPath, { token: options.token });
+      await download(url, destinationPath);
       return;
     } catch (error) {
       lastError = error;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "facult",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Manage coding-agent skills and MCP configs across tools.",
   "type": "module",
   "license": "MIT",