gitspace 0.2.0-rc.20 → 0.2.0-rc.21

package/src/commands/auth.ts

@@ -1,369 +0,0 @@
-/**
- * Authentication commands for gitspace.sh
- *
- * Handles 'gssh auth login', 'gssh auth logout', 'gssh auth status'
- */
-
-import open from 'open';
-import os from 'os';
-import { getSecret, setSecret, deleteSecret } from '../utils/secrets.js';
-import { loadKeypair, keypairExists, getPublicKeyWithoutPassword } from '../core/identity.js';
-import { sign, serializeIdentity } from '../lib/tmux-lite/crypto/identity.js';
-import { promptPassword } from '../utils/prompts.js';
-import { logger } from '../utils/logger.js';
-import { NoIdentityError, SpacesError } from '../types/errors.js';
-import { syncHostConfig } from './host.js';
-
-// API Configuration
-const API_BASE = process.env.GITSPACE_API_URL || 'https://api.gitspace.sh';
-
-/**
- * Fetch GitHub Client ID from the API
- */
-async function getGitHubClientId(): Promise<string> {
-  const res = await fetch(`${API_BASE}/config`);
-  if (!res.ok) {
-    throw new SpacesError('Failed to fetch config from API', 'SYSTEM_ERROR');
-  }
-  const config = await res.json() as { github_client_id: string };
-  if (!config.github_client_id) {
-    throw new SpacesError('GitHub Client ID not configured on server', 'SYSTEM_ERROR');
-  }
-  return config.github_client_id;
-}
-
-// ============================================================================
-// Types
-// ============================================================================
-
-interface DeviceCodeResponse {
-  device_code: string;
-  user_code: string;
-  verification_uri: string;
-  expires_in: number;
-  interval: number;
-}
-
-interface GitHubTokenResponse {
-  access_token?: string;
-  token_type?: string;
-  scope?: string;
-  error?: string;
-  error_description?: string;
-}
-
-interface GitspaceAuthResponse {
-  token: string;
-  user: {
-    id: string;
-    github_username: string;
-    email: string | null;
-    name: string | null;
-    avatar_url: string | null;
-  };
-}
-
-// ============================================================================
-// Login Command
-// ============================================================================
-
-/**
- * Login to gitspace.sh using GitHub Device Flow
- */
-export async function authLogin(): Promise<void> {
-  // Check if identity exists
-  if (!keypairExists()) {
-    throw new NoIdentityError();
-  }
-
-  // Load identity (requires password for signing)
-  logger.info('Loading identity...');
-  const password = await promptPassword('Enter identity password:');
-  if (!password) {
-    logger.info('Cancelled');
-    return;
-  }
-
-  let identity;
-  try {
-    identity = await loadKeypair(password);
-  } catch (error) {
-    if (error instanceof SpacesError) {
-      throw error;
-    }
-    throw new SpacesError('Failed to load identity', 'USER_ERROR');
-  }
-
-  // Step 1: Get GitHub Client ID from API
-  logger.info('Starting GitHub authentication...');
-  const githubClientId = await getGitHubClientId();
-
-  // Step 2: Request device code from GitHub
-  const deviceRes = await fetch('https://github.com/login/device/code', {
-    method: 'POST',
-    headers: {
-      Accept: 'application/json',
-      'Content-Type': 'application/json',
-    },
-    body: JSON.stringify({
-      client_id: githubClientId,
-      scope: 'read:user user:email',
-    }),
-  });
-
-  if (!deviceRes.ok) {
-    throw new SpacesError(
-      `GitHub device flow failed: ${await deviceRes.text()}`,
-      'SYSTEM_ERROR'
-    );
-  }
-
-  const deviceData: DeviceCodeResponse = await deviceRes.json();
-  const { device_code, user_code, verification_uri, interval } = deviceData;
-
-  // Step 2: Display code and open browser
-  logger.log('');
-  logger.bold(`! First, copy your one-time code: ${user_code}`);
-  logger.log('');
-
-  // Try to open browser, with fallback for headless/SSH environments
-  const canOpenBrowser = process.stdout.isTTY && !process.env.SSH_CLIENT;
-
-  if (canOpenBrowser) {
-    logger.log(`Press Enter to open ${verification_uri} in your browser...`);
-    await waitForEnter();
-
-    try {
-      await open(verification_uri);
-      logger.info('Browser opened. Waiting for authorization...');
-    } catch {
-      // Browser open failed (WSL, headless, etc.)
-      logger.log('');
-      logger.log(`Could not open browser automatically.`);
-      logger.log(`Please open this URL manually: ${verification_uri}`);
-      logger.log('');
-      logger.info('Waiting for authorization...');
-    }
-  } else {
-    // Headless environment (SSH, CI, etc.)
-    logger.log(`Open this URL in your browser: ${verification_uri}`);
-    logger.log(`Enter the code: ${user_code}`);
-    logger.log('');
-    logger.info('Waiting for authorization...');
-  }
-
-  // Step 3: Poll GitHub for access token
-  const githubToken = await pollForGitHubToken(device_code, interval, githubClientId);
-
-  // Step 4: Exchange GitHub token for gitspace.sh token with signature
-  logger.info('Completing authentication...');
-
-  const authTimestamp = Date.now();
-  const authMessage = `gitspace-device-auth:${authTimestamp}`;
-  const messageBytes = new TextEncoder().encode(authMessage);
-  const signatureBytes = sign(messageBytes, identity.signing.secretKey);
-  const authSignature = Buffer.from(signatureBytes).toString('base64');
-
-  const serialized = serializeIdentity(identity);
-
-  const response = await fetch(`${API_BASE}/auth/github/device`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({
-      github_token: githubToken,
-      machine_pubkey: serialized.signingPublicKey,
-      device_name: os.hostname(),
-      auth_timestamp: authTimestamp,
-      auth_signature: authSignature,
-    }),
-  });
-
-  if (!response.ok) {
-    const error = await response.json().catch(() => ({ error: 'Unknown error' }));
-    throw new SpacesError(
-      `Authentication failed: ${error.error || response.statusText}`,
-      'USER_ERROR'
-    );
-  }
-
-  const { token, user }: GitspaceAuthResponse = await response.json();
-
-  // Step 5: Save token to keychain
-  await setSecret('GITSPACE_TOKEN', token);
-
-  logger.log('');
-  logger.success('Authentication complete');
-  logger.success(`Logged in as ${user.github_username}`);
-  logger.success('Token saved to keychain');
-
-  // Step 6: Sync host config (fetches existing subdomains from API)
-  // Interactive mode will prompt user to select primary or reserve a subdomain
-  await syncHostConfig(true);
-}
-
-// ============================================================================
-// Logout Command
-// ============================================================================
-
-/**
- * Logout from gitspace.sh (clear local credentials)
- */
-export async function authLogout(): Promise<void> {
-  const token = await getSecret('GITSPACE_TOKEN');
-
-  if (!token) {
-    logger.log('Not logged in');
-    return;
-  }
-
-  await deleteSecret('GITSPACE_TOKEN');
-  logger.success('Logged out');
-}
-
-// ============================================================================
-// Status Command
-// ============================================================================
-
-/**
- * Show current authentication status
- */
-export async function authStatus(): Promise<void> {
-  const token = await getSecret('GITSPACE_TOKEN');
-
-  if (!token) {
-    logger.log('Not logged in');
-    logger.dim('Run: gssh auth login');
-    return;
-  }
-
-  // Verify token with API
-  try {
-    const deviceFingerprint = getDeviceFingerprint();
-    if (!deviceFingerprint) {
-      logger.log('Identity not found. Run: gssh identity init');
-      return;
-    }
-
-    const res = await fetch(`${API_BASE}/me`, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        'X-Device-Fingerprint': deviceFingerprint,
-      },
-    });
-
-    if (!res.ok) {
-      logger.log('Session expired or invalid');
-      logger.dim('Run: gssh auth login');
-      return;
-    }
-
-    const user = await res.json();
-    logger.log(`Logged in as: ${user.github_username}`);
-    logger.log(`Email: ${user.email || '(not set)'}`);
-    if (user.name) {
-      logger.log(`Name: ${user.name}`);
-    }
-  } catch {
-    logger.log('Could not verify session (API unreachable)');
-    logger.dim('Token is saved locally');
-  }
-}
-
-// ============================================================================
-// Helper Functions
-// ============================================================================
-
-function getDeviceFingerprint(): string | null {
-  try {
-    const identity = getPublicKeyWithoutPassword();
-    return identity?.signingPublicKey ?? null;
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Wait for Enter key press
- */
-function waitForEnter(): Promise<void> {
-  return new Promise((resolve) => {
-    if (process.stdin.isTTY) {
-      process.stdin.setRawMode(true);
-      process.stdin.resume();
-      process.stdin.once('data', () => {
-        process.stdin.setRawMode(false);
-        process.stdin.pause(); // Release the event loop
-        resolve();
-      });
-    } else {
-      resolve();
-    }
-  });
-}
-
-/**
- * Poll GitHub for access token (Device Flow)
- */
-async function pollForGitHubToken(
-  deviceCode: string,
-  interval: number,
-  clientId: string
-): Promise<string> {
-  const maxAttempts = 60; // ~5 minutes with default 5s interval
-  let currentInterval = interval;
-
-  for (let i = 0; i < maxAttempts; i++) {
-    await Bun.sleep(currentInterval * 1000);
-
-    // Show polling indicator
-    process.stdout.write('.');
-
-    const res = await fetch('https://github.com/login/oauth/access_token', {
-      method: 'POST',
-      headers: {
-        Accept: 'application/json',
-        'Content-Type': 'application/json',
-      },
-      body: JSON.stringify({
-        client_id: clientId,
-        device_code: deviceCode,
-        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
-      }),
-    });
-
-    const data: GitHubTokenResponse = await res.json();
-
-    if (data.access_token) {
-      return data.access_token;
-    }
-
-    if (data.error === 'authorization_pending') {
-      // User hasn't authorized yet, keep polling
-      continue;
-    }
-
-    if (data.error === 'slow_down') {
-      // Rate limited, increase interval
-      currentInterval += 5;
-      continue;
-    }
-
-    if (data.error === 'expired_token') {
-      throw new SpacesError(
-        'Authorization expired. Please try again.',
-        'USER_ERROR'
-      );
-    }
-
-    if (data.error === 'access_denied') {
-      throw new SpacesError('Authorization denied by user.', 'USER_ERROR');
-    }
-
-    throw new SpacesError(
-      `GitHub auth error: ${data.error_description || data.error}`,
-      'SYSTEM_ERROR'
-    );
-  }
-
-  throw new SpacesError('Authorization timeout. Please try again.', 'USER_ERROR');
-}

package/src/commands/bundle.ts

@@ -1,232 +0,0 @@
-/**
- * Bundle CLI commands
- *
- * Commands for managing bundle configuration and refresh.
- */
-
-import { exec } from 'child_process';
-import { promisify } from 'util';
-import { logger } from '../utils/logger.js';
-import { SpacesError } from '../types/errors.js';
-import { getCurrentProject, getGitspaceDir, getProjectBaseDir, getProjectWorkspacesDir } from '../core/config.js';
-import {
-  detectBundleChanges,
-  formatBundleChangeDetails,
-  refreshBundle,
-  type BundleRefreshOptions,
-} from '../core/bundle-refresh.js';
-import { join } from 'path';
-import { existsSync } from 'fs';
-import { detectWorkspaceContextFromCwd } from '../utils/workspace-id.js';
-
-const execAsync = promisify(exec);
-
-/**
- * Options for bundle refresh command
- */
-export interface BundleRefreshCommandOptions {
-  /** Force refresh even if no changes detected */
-  force?: boolean;
-  /** Project name (defaults to current project) */
-  project?: string;
-}
-
-/**
- * Options for bundle status command
- */
-export interface BundleStatusOptions {
-  /** Project name (defaults to current project) */
-  project?: string;
-}
-
-/**
- * Detect if the current working directory is inside a workspace
- * Returns the workspace path if found, undefined otherwise
- */
-function detectWorkspaceFromCwd(projectName: string): string | undefined {
-  const workspacesDir = getProjectWorkspacesDir(projectName);
-
-  const context = detectWorkspaceContextFromCwd(process.cwd(), getGitspaceDir());
-  if (!context || context.projectName !== projectName) {
-    return undefined;
-  }
-
-  const workspacePath = join(workspacesDir, context.workspaceName);
-  if (existsSync(workspacePath)) {
-    return workspacePath;
-  }
-
-  return undefined;
-}
-
-/**
- * Pull latest changes in the base directory
- */
-async function pullBaseRepo(baseDir: string): Promise<void> {
-  logger.info('Pulling latest changes in base repository...');
-
-  try {
-    await execAsync('git fetch origin', { cwd: baseDir });
-
-    // Get current branch
-    const { stdout: branchOutput } = await execAsync('git rev-parse --abbrev-ref HEAD', { cwd: baseDir });
-    const currentBranch = branchOutput.trim();
-
-    // Pull current branch
-    await execAsync(`git pull origin ${currentBranch}`, { cwd: baseDir });
-
-    logger.success('Base repository updated');
-  } catch (error) {
-    logger.warning(`Could not pull latest changes: ${error instanceof Error ? error.message : 'Unknown error'}`);
-    logger.dim('Continuing with existing bundle state...');
-  }
-}
-
-/**
- * Refresh bundle onboarding for the current project
- *
- * Re-runs onboarding steps with previous values as defaults.
- * Useful when bundle.json has been updated with new configuration.
- */
-export async function bundleRefresh(options: BundleRefreshCommandOptions): Promise<void> {
-  const projectName = options.project || getCurrentProject();
-
-  if (!projectName) {
-    throw new SpacesError(
-      'No project selected. Use "gssh switch project" or specify --project',
-      'USER_ERROR',
-      1
-    );
-  }
-
-  logger.info(`Checking bundle for project: ${projectName}`);
-
-  // First, try to detect if user is in a workspace directory
-  let workspacePath = detectWorkspaceFromCwd(projectName);
-
-  if (workspacePath) {
-    logger.dim(`Using current workspace: ${workspacePath}`);
-  } else {
-    // Fall back to base directory after pulling latest
-    const baseDir = getProjectBaseDir(projectName);
-
-    if (!existsSync(baseDir)) {
-      throw new SpacesError(
-        `Project base directory not found: ${baseDir}`,
-        'USER_ERROR',
-        1
-      );
-    }
-
-    // Pull latest to ensure we have current bundle.json
-    await pullBaseRepo(baseDir);
-    workspacePath = baseDir;
-    logger.dim('Using base repository (no workspace detected in current directory)');
-  }
-
-  const refreshOptions: BundleRefreshOptions = {
-    force: options.force,
-  };
-
-  const result = await refreshBundle(projectName, workspacePath, refreshOptions);
-
-  if (result.error) {
-    throw new SpacesError(result.error, 'USER_ERROR', 1);
-  }
-
-  if (result.refreshed) {
-    logger.success('Bundle configuration updated');
-
-    if (result.newValues && Object.keys(result.newValues).length > 0) {
-      logger.log('\nUpdated values:');
-      for (const key of Object.keys(result.newValues)) {
-        logger.log(`  - ${key}`);
-      }
-    }
-
-    if (result.newSecretKeys && result.newSecretKeys.length > 0) {
-      logger.log('\nSecrets configured:');
-      for (const key of result.newSecretKeys) {
-        logger.log(`  - ${key}`);
-      }
-    }
-  } else {
-    logger.info('No changes to apply');
-  }
-}
-
-/**
- * Show bundle status for the current project
- *
- * Displays information about the current bundle configuration.
- */
-export async function bundleStatus(options: BundleStatusOptions): Promise<void> {
-  const projectName = options.project || getCurrentProject();
-
-  if (!projectName) {
-    throw new SpacesError(
-      'No project selected. Use "gssh switch project" or specify --project',
-      'USER_ERROR',
-      1
-    );
-  }
-
-  // First, try to detect if user is in a workspace directory
-  let workspacePath = detectWorkspaceFromCwd(projectName);
-
-  if (!workspacePath) {
-    // Fall back to base directory after pulling latest
-    const baseDir = getProjectBaseDir(projectName);
-
-    if (!existsSync(baseDir)) {
-      throw new SpacesError(
-        `Project base directory not found: ${baseDir}`,
-        'USER_ERROR',
-        1
-      );
-    }
-
-    // Pull latest to ensure we have current bundle.json
-    await pullBaseRepo(baseDir);
-    workspacePath = baseDir;
-  }
-
-  const changes = detectBundleChanges(projectName, workspacePath);
-
-  logger.bold(`\nBundle Status: ${projectName}\n`);
-
-  if (!changes.hasBundle) {
-    if (changes.parseError) {
-      logger.error('Bundle file exists but could not be parsed:');
-      logger.log(`  ${changes.parseError}`);
-    } else {
-      logger.log('No bundle found in this project');
-      logger.dim('Bundles are defined in .gitspace/bundle.json');
-    }
-    return;
-  }
-
-  const bundle = changes.currentBundle!;
-  logger.log(`Bundle: ${bundle.name}`);
-  logger.log(`Version: ${bundle.version}`);
-  logger.log(`Path: ${changes.bundlePath}`);
-  logger.log(`Source: ${changes.bundleSource === 'workspace' ? 'workspace .gitspace/bundle.json' : 'base .gitspace/bundle.json'}`);
-
-  if (bundle.onboarding && bundle.onboarding.length > 0) {
-    logger.log(`Onboarding steps: ${bundle.onboarding.length}`);
-  }
-
-  logger.log('');
-
-  if (changes.hasChanged) {
-    logger.warning('Bundle has changed since last applied');
-    const details = formatBundleChangeDetails(changes)
-      .split('\n')
-      .map((line) => `  - ${line}`)
-      .join('\n');
-    logger.log(details);
-    logger.log('Run "gssh bundle refresh" to update configuration');
-  } else {
-    logger.success('Bundle is up to date');
-  }
-}