git-workspace-service 0.3.1 → 0.3.3

package/dist/index.cjs

@@ -324,19 +324,19 @@ var WorkspaceService = class {
       credential = parent.credential;
     } else {
       await fs3__namespace.mkdir(workspacePath, { recursive: true });
-      if (config.userCredentials) {
-        credential = await this.credentialService.getCredentials({
-          repo: config.repo,
-          access: "write",
-          context: {
-            executionId: config.execution.id,
-            taskId: config.task.id,
-            userId: config.user?.id,
-            reason: `Workspace for ${config.task.role} in ${config.execution.patternName}`
-          },
-          userProvided: config.userCredentials
-        });
-      }
+      credential = await this.credentialService.getCredentials({
+        repo: config.repo,
+        access: "write",
+        context: {
+          executionId: config.execution.id,
+          taskId: config.task.id,
+          userId: config.user?.id,
+          reason: `Workspace for ${config.task.role} in ${config.execution.patternName}`
+        },
+        userProvided: config.userCredentials,
+        // If no userCredentials provided, allow returning null for public repos
+        optional: !config.userCredentials
+      });
       if (credential) {
         await this.emitEvent({
           type: "credential:granted",
@@ -361,8 +361,8 @@ var WorkspaceService = class {
       path: workspacePath,
       repo: config.repo,
       branch: branchInfo,
-      credential,
-      // Will be set before any write operations
+      credential: credential ?? void 0,
+      // Optional for public repos
       provisionedAt: /* @__PURE__ */ new Date(),
       status: "provisioning",
       strategy,
@@ -381,32 +381,11 @@ var WorkspaceService = class {
         if (!credential) {
           const cloneResult = await this.tryUnauthenticatedClone(workspace);
           if (!cloneResult.success) {
-            this.log(
-              "info",
-              { workspaceId, error: cloneResult.error },
-              "Unauthenticated clone failed, requesting credentials"
+            throw new Error(
+              `Repository ${config.repo} requires authentication but no credentials are available. Please provide credentials or configure OAuth.`
             );
-            credential = await this.credentialService.getCredentials({
-              repo: config.repo,
-              access: "write",
-              context: {
-                executionId: config.execution.id,
-                taskId: config.task.id,
-                userId: config.user?.id,
-                reason: `Workspace for ${config.task.role} in ${config.execution.patternName}`
-              }
-            });
-            workspace.credential = credential;
-            this.workspaces.set(workspaceId, workspace);
-            await this.emitEvent({
-              type: "credential:granted",
-              workspaceId,
-              credentialId: credential.id,
-              executionId: config.execution.id,
-              timestamp: /* @__PURE__ */ new Date()
-            });
-            await this.cloneRepo(workspace, credential.token);
           }
+          this.log("info", { workspaceId }, "Cloned public repository without authentication");
         } else {
           await this.cloneRepo(workspace, credential.token);
         }
@@ -1360,7 +1339,9 @@ var CredentialService = class {
     return this.providers.get(name);
   }
   /**
-   * Request credentials for a repository
+   * Request credentials for a repository.
+   * If request.optional is true, returns null when no credentials available.
+   * Otherwise throws an error.
    */
   async getCredentials(request) {
     const provider = this.detectProvider(request.repo);
@@ -1408,6 +1389,14 @@ var CredentialService = class {
       credential = await this.getOAuthCredentialViaDeviceFlow(provider, request, ttlSeconds);
     }
     if (!credential) {
+      if (request.optional) {
+        this.log(
+          "info",
+          { repo: request.repo },
+          "No credentials available (optional request, returning null)"
+        );
+        return null;
+      }
       throw new Error(
         `No credentials available for repository: ${request.repo}. ` + (this.oauthConfig ? "OAuth device flow failed or was cancelled." : "Configure OAuth to enable interactive authentication.")
       );