hub-launch 1.22.0 → 1.23.0

package/dist/utils/provider-credentials.js

@@ -0,0 +1,83 @@
+import { LlmProviderTypeSchema } from '../types/config.schema.js';
+/** The three valid provider types, for error messages. */
+const VALID_PROVIDER_TYPES = LlmProviderTypeSchema.options;
+/**
+ * Per-provider token format validation. Returns an error string when the token
+ * does not match the provider's expected format, or `null` when it is
+ * acceptable. `claude` and `openrouter` enforce a prefix (which catches
+ * cross-provider paste mistakes before any network call); `openai` only
+ * requires a non-empty string (formats vary — live validation catches bad keys).
+ */
+export function validateTokenFormat(providerType, authToken) {
+    switch (providerType) {
+        case 'claude':
+            if (!authToken.startsWith('sk-ant-')) {
+                return 'Claude credential must be a subscription OAuth token (sk-ant-oat01-…, from https://claude.ai/settings) or an Anthropic API key (sk-ant-api03-…, from https://platform.claude.com).';
+            }
+            return null;
+        case 'openrouter':
+            if (!authToken.startsWith('sk-or-')) {
+                return 'OpenRouter key must start with sk-or- (create one at https://openrouter.ai/settings/keys).';
+            }
+            return null;
+        case 'openai':
+            if (authToken.length === 0) {
+                return 'OpenAI API key required (create one at https://platform.openai.com/api-keys).';
+            }
+            return null;
+    }
+}
+/**
+ * Resolve the ephemeral LLM provider credential required to launch a hula-server
+ * sandbox, via a single precedence chain shared by every command that POSTs to
+ * the sandbox APIs.
+ *
+ * Provider type (highest precedence first):
+ *   1. explicit CLI flag (--provider)
+ *   2. .hublaunch/hublaunch.config.js (config.provider.type)
+ *   3. default 'claude'
+ *
+ * Credential (highest precedence first):
+ *   1. explicit CLI flag (--provider-key)
+ *   2. .hublaunch/hublaunch.config.js (config.provider.apiKey)
+ *   3. environment variable (PROVIDER_AUTH_TOKEN)
+ *
+ * Pure and side-effect free: returns the resolved values plus a list of
+ * human-readable error strings. Callers choose how to present errors (logger,
+ * chalk) and whether to exit. This keeps resolution + validation in ONE place
+ * (DRY) while leaving presentation to each command. Never echoes secret values.
+ */
+export function resolveProviderCredentials(options, config) {
+    const errors = [];
+    // --- Provider type resolution ---
+    const rawProvider = options.provider ?? config.provider?.type ?? 'claude';
+    const parsedType = LlmProviderTypeSchema.safeParse(rawProvider);
+    if (!parsedType.success) {
+        errors.push(`Unknown provider '${rawProvider}'. Valid providers are: ${VALID_PROVIDER_TYPES.join(', ')}.`);
+        // Return early with a safe default type; the token is not meaningful yet.
+        return {
+            providerType: 'claude',
+            authToken: '',
+            errors,
+            missingToken: false,
+        };
+    }
+    const providerType = parsedType.data;
+    // --- Credential resolution ---
+    const authToken = options.providerKey ||
+        config.provider?.apiKey ||
+        process.env.PROVIDER_AUTH_TOKEN ||
+        '';
+    const missingToken = !authToken;
+    if (!authToken) {
+        errors.push(`No credential found for provider '${providerType}'. Pass --provider-key, set provider.apiKey in .hublaunch/hublaunch.config.js, or export PROVIDER_AUTH_TOKEN.`);
+    }
+    else {
+        const formatError = validateTokenFormat(providerType, authToken);
+        if (formatError) {
+            errors.push(formatError);
+        }
+    }
+    return { providerType, authToken, errors, missingToken };
+}
+//# sourceMappingURL=provider-credentials.js.map

package/dist/utils/provider-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-credentials.js","sourceRoot":"","sources":["../../src/utils/provider-credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AA0BlE,0DAA0D;AAC1D,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,OAAO,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAA6B,EAC7B,SAAiB;IAEjB,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,oLAAoL,CAAC;YAC9L,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,YAAY;YACf,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO,4FAA4F,CAAC;YACtG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,+EAA+E,CAAC;YACzF,CAAC;YACD,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAkC,EAClC,MAAc;IAEd,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,QAAQ,CAAC;IAC1E,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CACT,qBAAqB,WAAW,2BAA2B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9F,CAAC;QACF,0EAA0E;QAC1E,OAAO;YACL,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,EAAE;YACb,MAAM;YACN,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;IAErC,gCAAgC;IAChC,MAAM,SAAS,GACb,OAAO,CAAC,WAAW;QACnB,MAAM,CAAC,QAAQ,EAAE,MAAM;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,EAAE,CAAC;IACL,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC;IAEhC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,qCAAqC,YAAY,+GAA+G,CACjK,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hub-launch",
-  "version": "1.22.0",
+  "version": "1.23.0",
   "description": "GitHub Issue and PR automation CLI tool with plugin/hook system for project-specific customizations",
   "type": "module",
   "main": "./dist/index.js",
@@ -18,7 +18,7 @@
     "url": "https://github.com/NoStackApp/hub-launch/issues"
   },
   "scripts": {
-    "build": "tsc && shx chmod +x dist/index.js && npm run copy-templates",
+    "build": "tsc && shx chmod +x dist/index.js && npm run copy-templates && shx echo Build complete",
     "postbuild": "node scripts/postinstall.mjs",
     "postinstall": "node scripts/postinstall.mjs",
     "copy-templates": "shx mkdir -p dist/templates && shx cp src/templates/*.md dist/templates/ && shx mkdir -p dist/templates/skills && shx cp -r src/templates/skills/* dist/templates/skills/",

package/dist/utils/ephemeral-credentials.d.ts

@@ -1,32 +0,0 @@
-import type { Config } from '../types/index.js';
-export interface EphemeralCredentialOptions {
-    anthropicKey?: string;
-}
-export interface ResolvedEphemeralCredentials {
-    anthropicApiKey?: string;
-    /** Human-readable error strings. Empty when the credential is valid. */
-    errors: string[];
-    /**
-     * True only when no token was supplied at all (via flag, config, or env) —
-     * NOT for the wrong-prefix case. Lets interactive callers (e.g. `hula
-     * launch`) distinguish "prompt the user for a key" from other errors. Purely
-     * additive: `errors` behavior is unchanged, so non-interactive callers such
-     * as `hula schedule` are unaffected.
-     */
-    missingAnthropicKey: boolean;
-}
-/**
- * Resolve the ephemeral Anthropic OAuth token required to launch a hula-server
- * sandbox via a single precedence chain shared by every command that POSTs to
- * the sandbox APIs:
- *   1. explicit CLI flag (--anthropic-key)
- *   2. .hublaunch/hublaunch.config.js (config.anthropicApiKey)
- *   3. environment variable (ANTHROPIC_API_KEY)
- *
- * Pure and side-effect free: returns the resolved value plus a list of
- * human-readable error strings. Callers choose how to present errors (logger,
- * chalk) and whether to exit. This keeps resolution + validation in ONE place
- * (DRY) while leaving presentation to each command. Never echoes secret values.
- */
-export declare function resolveEphemeralCredentials(options: EphemeralCredentialOptions, config: Config): ResolvedEphemeralCredentials;
-//# sourceMappingURL=ephemeral-credentials.d.ts.map

package/dist/utils/ephemeral-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ephemeral-credentials.d.ts","sourceRoot":"","sources":["../../src/utils/ephemeral-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;OAMG;IACH,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,MAAM,GACb,4BAA4B,CAiB9B"}

package/dist/utils/ephemeral-credentials.js

@@ -1,26 +0,0 @@
-/**
- * Resolve the ephemeral Anthropic OAuth token required to launch a hula-server
- * sandbox via a single precedence chain shared by every command that POSTs to
- * the sandbox APIs:
- *   1. explicit CLI flag (--anthropic-key)
- *   2. .hublaunch/hublaunch.config.js (config.anthropicApiKey)
- *   3. environment variable (ANTHROPIC_API_KEY)
- *
- * Pure and side-effect free: returns the resolved value plus a list of
- * human-readable error strings. Callers choose how to present errors (logger,
- * chalk) and whether to exit. This keeps resolution + validation in ONE place
- * (DRY) while leaving presentation to each command. Never echoes secret values.
- */
-export function resolveEphemeralCredentials(options, config) {
-    const errors = [];
-    const anthropicApiKey = options.anthropicKey || config.anthropicApiKey || process.env.ANTHROPIC_API_KEY;
-    const missingAnthropicKey = !anthropicApiKey;
-    if (!anthropicApiKey) {
-        errors.push('No Anthropic OAuth token configured. Set anthropicApiKey in .hublaunch/hublaunch.config.js, use --anthropic-key, or set ANTHROPIC_API_KEY. Get a token at https://claude.ai/settings (requires a paid Claude.ai plan — Pro or Max).');
-    }
-    else if (!anthropicApiKey.startsWith('sk-ant-oat')) {
-        errors.push('Anthropic credential must be an OAuth token (starts with sk-ant-oat01-…). Standard API keys (sk-ant-api03-…) are not supported — the container requires CLAUDE_CODE_OAUTH_TOKEN.');
-    }
-    return { anthropicApiKey, errors, missingAnthropicKey };
-}
-//# sourceMappingURL=ephemeral-credentials.js.map

package/dist/utils/ephemeral-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ephemeral-credentials.js","sourceRoot":"","sources":["../../src/utils/ephemeral-credentials.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAmC,EACnC,MAAc;IAEd,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAClF,MAAM,mBAAmB,GAAG,CAAC,eAAe,CAAC;IAC7C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CACT,qOAAqO,CACtO,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CACT,kLAAkL,CACnL,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC1D,CAAC"}