git-workspace-service 0.3.0 → 0.3.2

package/dist/index.cjs

@@ -333,15 +333,19 @@ var WorkspaceService = class {
           userId: config.user?.id,
           reason: `Workspace for ${config.task.role} in ${config.execution.patternName}`
         },
-        userProvided: config.userCredentials
-      });
-      await this.emitEvent({
-        type: "credential:granted",
-        workspaceId,
-        credentialId: credential.id,
-        executionId: config.execution.id,
-        timestamp: /* @__PURE__ */ new Date()
+        userProvided: config.userCredentials,
+        // If no userCredentials provided, allow returning null for public repos
+        optional: !config.userCredentials
       });
+      if (credential) {
+        await this.emitEvent({
+          type: "credential:granted",
+          workspaceId,
+          credentialId: credential.id,
+          executionId: config.execution.id,
+          timestamp: /* @__PURE__ */ new Date()
+        });
+      }
     }
     const branchInfo = createBranchInfo(
       {
@@ -357,7 +361,8 @@ var WorkspaceService = class {
       path: workspacePath,
       repo: config.repo,
       branch: branchInfo,
-      credential,
+      credential: credential ?? void 0,
+      // Optional for public repos
       provisionedAt: /* @__PURE__ */ new Date(),
       status: "provisioning",
       strategy,
@@ -373,7 +378,17 @@ var WorkspaceService = class {
     try {
       if (strategy === "clone") {
         this.updateProgress(workspace, "cloning", "Cloning repository");
-        await this.cloneRepo(workspace, credential.token);
+        if (!credential) {
+          const cloneResult = await this.tryUnauthenticatedClone(workspace);
+          if (!cloneResult.success) {
+            throw new Error(
+              `Repository ${config.repo} requires authentication but no credentials are available. Please provide credentials or configure OAuth.`
+            );
+          }
+          this.log("info", { workspaceId }, "Cloned public repository without authentication");
+        } else {
+          await this.cloneRepo(workspace, credential.token);
+        }
         this.updateProgress(workspace, "creating_branch", "Creating branch");
         await this.createBranch(workspace);
       } else {
@@ -594,7 +609,7 @@ var WorkspaceService = class {
         });
       }
     }
-    if (workspace.strategy === "clone") {
+    if (workspace.strategy === "clone" && workspace.credential) {
       await this.credentialService.revokeCredential(workspace.credential.id);
       await this.emitEvent({
         type: "credential:revoked",
@@ -630,6 +645,36 @@ var WorkspaceService = class {
   // ─────────────────────────────────────────────────────────────
   // Private Methods
   // ─────────────────────────────────────────────────────────────
+  /**
+   * Try to clone a public repository without authentication
+   */
+  async tryUnauthenticatedClone(workspace) {
+    let cloneUrl = workspace.repo;
+    if (cloneUrl.startsWith("git@github.com:")) {
+      cloneUrl = cloneUrl.replace("git@github.com:", "https://github.com/");
+    }
+    if (!cloneUrl.endsWith(".git")) {
+      cloneUrl = `${cloneUrl}.git`;
+    }
+    if (!cloneUrl.startsWith("https://")) {
+      cloneUrl = `https://${cloneUrl}`;
+    }
+    try {
+      await this.execInDir(
+        workspace.path,
+        `git clone --depth 1 --branch ${workspace.branch.baseBranch} ${cloneUrl} .`
+      );
+      this.log("info", { workspaceId: workspace.id }, "Public repository cloned without authentication");
+      return { success: true };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      const isAuthError = errorMessage.includes("401") || errorMessage.includes("403") || errorMessage.includes("Authentication failed") || errorMessage.includes("could not read Username") || errorMessage.includes("terminal prompts disabled");
+      if (isAuthError) {
+        return { success: false, error: "Authentication required" };
+      }
+      throw error;
+    }
+  }
   async cloneRepo(workspace, token) {
     const cloneUrl = token ? this.buildAuthenticatedUrl(workspace.repo, token) : workspace.repo;
     await this.execInDir(
@@ -653,11 +698,11 @@ var WorkspaceService = class {
   async configureGit(workspace) {
     await this.execInDir(workspace.path, 'git config user.name "Workspace Agent"');
     await this.execInDir(workspace.path, 'git config user.email "agent@workspace.local"');
-    if (!workspace.credential.token) {
+    if (!workspace.credential || !workspace.credential.token) {
       this.log(
         "debug",
         { workspaceId: workspace.id },
-        "Using SSH authentication, skipping credential helper"
+        workspace.credential ? "Using SSH authentication, skipping credential helper" : "No credentials (public repo), skipping credential helper"
       );
       return;
     }
@@ -683,9 +728,19 @@ var WorkspaceService = class {
     );
   }
   async pushBranch(workspace) {
+    if (!workspace.credential) {
+      throw new Error(
+        "Push requires authentication. This workspace was cloned from a public repository without credentials."
+      );
+    }
     await this.execInDir(workspace.path, `git push -u origin ${workspace.branch.name}`);
   }
   async createPullRequest(workspace, config) {
+    if (!workspace.credential) {
+      throw new Error(
+        "Pull request creation requires authentication. This workspace was cloned from a public repository without credentials."
+      );
+    }
     const repoInfo = this.parseRepo(workspace.repo);
     if (!repoInfo) {
       throw new Error(`Invalid repository format: ${workspace.repo}`);
@@ -1284,7 +1339,9 @@ var CredentialService = class {
     return this.providers.get(name);
   }
   /**
-   * Request credentials for a repository
+   * Request credentials for a repository.
+   * If request.optional is true, returns null when no credentials available.
+   * Otherwise throws an error.
    */
   async getCredentials(request) {
     const provider = this.detectProvider(request.repo);
@@ -1332,6 +1389,14 @@ var CredentialService = class {
       credential = await this.getOAuthCredentialViaDeviceFlow(provider, request, ttlSeconds);
     }
     if (!credential) {
+      if (request.optional) {
+        this.log(
+          "info",
+          { repo: request.repo },
+          "No credentials available (optional request, returning null)"
+        );
+        return null;
+      }
       throw new Error(
         `No credentials available for repository: ${request.repo}. ` + (this.oauthConfig ? "OAuth device flow failed or was cancelled." : "Configure OAuth to enable interactive authentication.")
       );