nugit-cli 0.0.1 → 0.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nugit-cli",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "description": "CLI for stacked GitHub PRs (.nugit/stack.json)",
   "type": "module",
   "bin": {

package/src/api-client.js

@@ -7,6 +7,7 @@ import {
   githubListUserRepos,
   githubRestJson,
   githubSearchIssues,
+  githubSearchRepositories,
   githubListOpenPulls
 } from "./github-rest.js";
 import {
@@ -14,6 +15,7 @@ import {
   githubDeviceFlowRequestCode
 } from "./github-device-flow.js";
 import { resolveGithubToken } from "./auth-token.js";
+import { resolveGithubOAuthClientId } from "./github-oauth-client-id.js";
 
 /** @returns {string} */
 export function getToken() {
@@ -29,15 +31,10 @@ export function withAuthHeaders(headers = {}) {
 }
 
 /**
- * Start GitHub OAuth device flow (requires GITHUB_OAUTH_CLIENT_ID).
+ * Start GitHub OAuth device flow (bundled OAuth App client id; override with GITHUB_OAUTH_CLIENT_ID).
  */
 export async function startDeviceFlow() {
-  const clientId = process.env.GITHUB_OAUTH_CLIENT_ID;
-  if (!clientId) {
-    throw new Error(
-      "Set GITHUB_OAUTH_CLIENT_ID to your GitHub OAuth App client ID (Settings → Developer settings → OAuth Apps), or use a PAT with NUGIT_USER_TOKEN."
-    );
-  }
+  const clientId = resolveGithubOAuthClientId();
   return githubDeviceFlowRequestCode(clientId, "repo read:user user:email");
 }
 
@@ -47,10 +44,7 @@ export async function startDeviceFlow() {
  * @param {number} [intervalSeconds] minimum wait before next poll (from GitHub or prior slow_down)
  */
 export async function pollDeviceFlow(deviceCode, intervalSeconds = 5) {
-  const clientId = process.env.GITHUB_OAUTH_CLIENT_ID;
-  if (!clientId) {
-    throw new Error("Set GITHUB_OAUTH_CLIENT_ID");
-  }
+  const clientId = resolveGithubOAuthClientId();
   const payload = await githubDeviceFlowPollAccessToken(clientId, deviceCode);
   if (payload.access_token) {
     return { access_token: payload.access_token, token_type: payload.token_type, scope: payload.scope };
@@ -145,6 +139,11 @@ export async function getRepoMetadata(owner, repo) {
   return githubGetRepoMetadata(owner, repo);
 }
 
+/** @param {string} query GitHub `q` syntax for /search/repositories */
+export async function searchRepositories(query, perPage = 20, page = 1) {
+  return githubSearchRepositories(query, perPage, page);
+}
+
 export async function createPullRequest(owner, repo, fields) {
   return githubCreatePullRequest(owner, repo, fields);
 }

package/src/github-device-flow.js

@@ -1,5 +1,5 @@
 /**
- * GitHub OAuth device flow (no backend). Requires GITHUB_OAUTH_CLIENT_ID.
+ * GitHub OAuth device flow (no backend). Client id from resolveGithubOAuthClientId() (bundled default or GITHUB_OAUTH_CLIENT_ID).
  * @see https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#device-flow
  */
 

package/src/github-oauth-client-id.js

@@ -0,0 +1,11 @@
+/**
+ * Default GitHub OAuth App for `nugit auth login` (device flow).
+ * Client IDs are public (not secrets). Override with env for a custom app or fork.
+ */
+export const NUGIT_BUNDLED_GITHUB_OAUTH_CLIENT_ID = "Ov23liMBQqJJvRNiO0qm";
+
+/** @returns {string} */
+export function resolveGithubOAuthClientId() {
+  const fromEnv = process.env.GITHUB_OAUTH_CLIENT_ID?.trim();
+  return fromEnv || NUGIT_BUNDLED_GITHUB_OAUTH_CLIENT_ID;
+}

package/src/github-pr-social.js

@@ -124,3 +124,45 @@ export async function githubListAssignableUsers(owner, repo) {
   const r = encodeURIComponent(repo);
   return githubGetAllPages(`/repos/${o}/${r}/assignees`);
 }
+
+/**
+ * All pull reviews (paginated).
+ * @param {string} owner
+ * @param {string} repo
+ * @param {number} pullNumber
+ */
+export async function githubListPullReviewsAll(owner, repo, pullNumber) {
+  const o = encodeURIComponent(owner);
+  const r = encodeURIComponent(repo);
+  const n = encodeURIComponent(String(pullNumber));
+  return githubGetAllPages(`/repos/${o}/${r}/pulls/${n}/reviews`);
+}
+
+/**
+ * Post a single line-linked review comment on a PR (creates a new review thread).
+ *
+ * @param {string} owner
+ * @param {string} repo
+ * @param {number} pullNumber
+ * @param {{ body: string, commit_id: string, path: string, line: number, side?: "LEFT" | "RIGHT" }} payload
+ */
+export async function githubPostPullReviewLineComment(owner, repo, pullNumber, payload) {
+  const o = encodeURIComponent(owner);
+  const r = encodeURIComponent(repo);
+  const n = encodeURIComponent(String(pullNumber));
+  return githubRestJson("POST", `/repos/${o}/${r}/pulls/${n}/comments`, payload);
+}
+
+/**
+ * Submit a PR review (approve, comment, request changes).
+ * @param {string} owner
+ * @param {string} repo
+ * @param {number} pullNumber
+ * @param {{ event: string, body?: string, commit_id?: string }} payload
+ */
+export async function githubPostPullReview(owner, repo, pullNumber, payload) {
+  const o = encodeURIComponent(owner);
+  const r = encodeURIComponent(repo);
+  const n = encodeURIComponent(String(pullNumber));
+  return githubRestJson("POST", `/repos/${o}/${r}/pulls/${n}/reviews`, payload);
+}

package/src/github-rest.js

@@ -26,16 +26,30 @@ export function useDirectGithub() {
  */
 export async function githubRestJson(method, path, jsonBody, tokenOverride) {
   const token = tokenOverride ?? getGithubPat();
-  if (!token) {
+  const methodUpper = String(method).toUpperCase();
+  const unauthDisabled =
+    process.env.NUGIT_GITHUB_UNAUTHENTICATED === "0" ||
+    process.env.NUGIT_GITHUB_UNAUTHENTICATED === "false";
+  const allowUnauthenticatedGet =
+    !unauthDisabled &&
+    !token &&
+    (methodUpper === "GET" || methodUpper === "HEAD");
+
+  if (!token && !allowUnauthenticatedGet) {
     throw new Error(
-      "Set NUGIT_USER_TOKEN or STACKPR_USER_TOKEN (GitHub PAT or OAuth token with repo scope)"
+      "GitHub authentication required for this request. Run `nugit auth login` or `nugit auth pat --token …`, " +
+        "or set NUGIT_USER_TOKEN / STACKPR_USER_TOKEN. " +
+        "Some read-only public GETs work without a token (low rate limits); set NUGIT_GITHUB_UNAUTHENTICATED=0 to disable that."
     );
   }
   const headers = {
-    Authorization: `Bearer ${token}`,
     Accept: "application/vnd.github+json",
-    "X-GitHub-Api-Version": "2022-11-28"
+    "X-GitHub-Api-Version": "2022-11-28",
+    "User-Agent": "nugit-cli"
   };
+  if (token) {
+    headers.Authorization = `Bearer ${token}`;
+  }
   if (jsonBody !== undefined) {
     headers["Content-Type"] = "application/json";
   }
@@ -147,19 +161,90 @@ export async function githubCreatePullRequest(owner, repo, fields) {
 /**
  * @param {number} page
  */
-export async function githubListUserRepos(page = 1) {
+/**
+ * @param {number} [page]
+ * @param {number} [perPage] max 100
+ */
+export async function githubListUserRepos(page = 1, perPage = 100) {
+  const pp = Math.min(100, Math.max(1, perPage));
+  const p = Math.max(1, page);
   return githubRestJson(
     "GET",
-    `/user/repos?page=${encodeURIComponent(String(page))}&per_page=30`
+    `/user/repos?page=${encodeURIComponent(String(p))}&per_page=${encodeURIComponent(String(pp))}&sort=full_name`
   );
 }
 
+/**
+ * @returns {Promise<unknown[]>}
+ */
+export async function githubListAllUserRepos() {
+  /** @type {unknown[]} */
+  const all = [];
+  let page = 1;
+  for (;;) {
+    const chunk = await githubListUserRepos(page, 100);
+    if (!Array.isArray(chunk) || chunk.length === 0) {
+      break;
+    }
+    all.push(...chunk);
+    if (chunk.length < 100) {
+      break;
+    }
+    page += 1;
+  }
+  return all;
+}
+
+/**
+ * @param {string} owner
+ * @param {string} repo
+ * @param {string} base
+ * @param {string} head
+ */
+export async function githubCompareRefs(owner, repo, base, head) {
+  const o = encodeURIComponent(owner);
+  const r = encodeURIComponent(repo);
+  const bh = `${base}...${head}`;
+  return githubRestJson("GET", `/repos/${o}/${r}/compare/${encodeURIComponent(bh)}`);
+}
+
+/**
+ * @param {string} owner
+ * @param {string} repo
+ * @param {string} treeSha commit or tree sha
+ * @param {boolean} [recursive]
+ */
+export async function githubGetGitTree(owner, repo, treeSha, recursive = false) {
+  const o = encodeURIComponent(owner);
+  const r = encodeURIComponent(repo);
+  const sha = encodeURIComponent(treeSha);
+  const q = recursive ? "?recursive=1" : "";
+  return githubRestJson("GET", `/repos/${o}/${r}/git/trees/${sha}${q}`);
+}
+
 /**
  * Search issues (includes PRs). `q` is GitHub search query syntax.
  * @param {string} q
  * @param {number} [perPage] max 100
  * @param {number} [page] 1-based
  */
+/**
+ * GitHub repository search (`q` uses GitHub search syntax, e.g. `todo language:python` or `user:orgname`).
+ * @param {string} q
+ * @param {number} [perPage]
+ * @param {number} [page]
+ */
+export async function githubSearchRepositories(q, perPage = 20, page = 1) {
+  const pp = Math.min(100, Math.max(1, perPage));
+  const p = Math.max(1, page);
+  const query = new URLSearchParams({
+    q,
+    per_page: String(pp),
+    page: String(p)
+  });
+  return githubRestJson("GET", `/search/repositories?${query.toString()}`);
+}
+
 export async function githubSearchIssues(q, perPage = 30, page = 1) {
   const pp = Math.min(100, Math.max(1, perPage));
   const p = Math.max(1, page);
@@ -189,6 +274,29 @@ export async function githubListOpenPulls(owner, repo, page = 1, perPage = 30) {
   );
 }
 
+/**
+ * @param {string} owner
+ * @param {string} repo
+ * @returns {Promise<unknown[]>}
+ */
+export async function githubListAllOpenPulls(owner, repo) {
+  /** @type {unknown[]} */
+  const all = [];
+  let page = 1;
+  for (;;) {
+    const chunk = await githubListOpenPulls(owner, repo, page, 100);
+    if (!Array.isArray(chunk) || chunk.length === 0) {
+      break;
+    }
+    all.push(...chunk);
+    if (chunk.length < 100) {
+      break;
+    }
+    page += 1;
+  }
+  return all;
+}
+
 /**
  * @param {string} owner
  * @param {string} repo

package/src/nugit-stack.js

@@ -204,6 +204,26 @@ export function writeStackFile(root, doc) {
   fs.writeFileSync(stackJsonPath(root), JSON.stringify(doc, null, 2) + "\n");
 }
 
+/**
+ * Minimal stack doc for viewer-only flows (inferred stacks, no .nugit on disk).
+ * @param {string} repoFullName
+ * @param {string} createdBy
+ * @param {number[]} prNumbersBottomToTop
+ */
+export function createInferredStackDoc(repoFullName, createdBy, prNumbersBottomToTop) {
+  const prs = prNumbersBottomToTop.map((n, i) => ({
+    pr_number: n,
+    position: i + 1
+  }));
+  return {
+    version: 1,
+    repo_full_name: repoFullName,
+    created_by: createdBy,
+    prs,
+    inferred: true
+  };
+}
+
 export function createInitialStackDoc(repoFullName, createdBy) {
   return {
     version: 1,

package/src/nugit-start.js

@@ -179,14 +179,14 @@ export function runStart(opts) {
  */
 export async function runStartHub() {
   console.error("nugit start — choose:");
-  console.error("  1) Stack view");
+  console.error("  1) View stacks (`nugit view` — search GitHub or this directory’s remote)");
   console.error("  2) Split a PR");
-  console.error("  3) Open shell");
+  console.error("  3) Open shell (needs `nugit config init`)");
   const ans = (await questionLine("Enter 1–3 [3]: ")).trim();
   const choice = ans || "3";
   if (choice === "1") {
-    const { runStackViewCommand } = await import("./stack-view/run-stack-view.js");
-    await runStackViewCommand({});
+    const { runNugitViewEntry } = await import("./stack-view/run-view-entry.js");
+    await runNugitViewEntry(undefined, undefined, {});
     process.exit(0);
   }
   if (choice === "2") {

package/src/nugit.js

@@ -29,7 +29,7 @@ import {
 } from "./nugit-stack.js";
 import { runStackPropagate } from "./stack-propagate.js";
 import { registerStackExtraCommands } from "./stack-extra-commands.js";
-import { runStackViewCommand } from "./stack-view/run-stack-view.js";
+import { runNugitViewEntry } from "./stack-view/run-view-entry.js";
 import {
   printJson,
   formatWhoamiHuman,
@@ -88,7 +88,9 @@ program
       const me = await authMe();
       user = me.login;
       if (!user) {
-        throw new Error("Could not resolve login; pass --user or set NUGIT_USER_TOKEN / STACKPR_USER_TOKEN");
+        throw new Error(
+          "Could not resolve login; pass --user or run `nugit auth login` / set NUGIT_USER_TOKEN"
+        );
       }
       console.error(`Using GitHub login: ${user}`);
     }
@@ -120,7 +122,7 @@ const auth = new Command("auth").description("GitHub authentication");
 auth
   .command("login")
   .description(
-    "OAuth device flow: opens browser (pre-filled code), waits for approval, saves token to ~/.config/nugit/github-token. Needs GITHUB_OAUTH_CLIENT_ID. Env NUGIT_USER_TOKEN still overrides the file."
+    "OAuth device flow: opens browser (pre-filled code), waits for approval, saves token to ~/.config/nugit/github-token. Uses bundled OAuth App client id unless GITHUB_OAUTH_CLIENT_ID is set. NUGIT_USER_TOKEN still overrides the saved file."
   )
   .option("--no-browser", "Do not launch a browser (open the printed URL yourself)", false)
   .option(
@@ -333,7 +335,7 @@ program
   )
   .option(
     "--shell",
-    "Open the configured shell immediately (skip the TTY hub menu: stack view / split / shell)",
+    "Open the configured shell immediately (skip the TTY hub menu: view / split / shell)",
     false
   )
   .action(async (opts) => {
@@ -378,6 +380,37 @@ program
     });
   });
 
+program
+  .command("view")
+  .description(
+    "Interactive stack viewer (GitHub). Pass owner/repo and optional ref, or run with no args on a TTY to search/pick a repo (and [c] for this directory’s remote)."
+  )
+  .argument("[repo]", "owner/repo")
+  .argument("[ref]", "branch or sha (default: GitHub default branch)")
+  .option("--no-tui", "Print stack + comment counts to stdout (no Ink UI)", false)
+  .option("--repo <owner/repo>", "Same as [repo] (for scripts)")
+  .option("--ref <branch>", "Same as [ref]")
+  .option("--file <path>", "Load stack.json from this path")
+  .action(async (repoArg, refArg, opts) => {
+    await runNugitViewEntry(repoArg, refArg, opts);
+  });
+
+program
+  .command("review")
+  .description(
+    "Review hub: repos you can access (OAuth or PAT), pending review requests first; open inferred PR stacks in the TUI. See docs/stack-view.md."
+  )
+  .option("--no-tui", "Print repo list (sorted by pending reviews) instead of Ink picker", false)
+  .option(
+    "--auto-apply",
+    "After loading a stack, auto-approve allowlisted PRs when stale approval + merge-only delta (review-autoapprove.json)",
+    false
+  )
+  .action(async (opts) => {
+    const { runReviewHub } = await import("./review-hub/run-review-hub.js");
+    await runReviewHub({ noTui: opts.noTui, autoApply: opts.autoApply });
+  });
+
 program
   .command("env")
   .description(
@@ -759,24 +792,6 @@ function addPropagateOptions(cmd) {
     );
 }
 
-stack
-  .command("view")
-  .description(
-    "Interactive stack viewer (GitHub API): PR chain, comments, open links, reply, request reviewers"
-  )
-  .option("--no-tui", "Print stack + comment counts to stdout (no Ink UI)", false)
-  .option("--repo <owner/repo>", "With --ref: load stack from GitHub instead of local file")
-  .option("--ref <branch>", "Branch/sha for .nugit/stack.json on GitHub")
-  .option("--file <path>", "Path to stack.json (skip local .nugit lookup)")
-  .action(async (opts) => {
-    await runStackViewCommand({
-      noTui: opts.noTui,
-      repo: opts.repo,
-      ref: opts.ref,
-      file: opts.file
-    });
-  });
-
 addPropagateOptions(
   stack
     .command("propagate")

package/src/review-hub/review-autoapprove.js

@@ -0,0 +1,95 @@
+import fs from "fs";
+import path from "path";
+import { getConfigPath } from "../user-config.js";
+
+/**
+ * @typedef {{ owner: string, repo: string, head_ref_glob?: string, default_branch_only?: boolean }} AutoapproveRule
+ * @typedef {{ rules?: AutoapproveRule[], version?: number }} AutoapproveConfig
+ */
+
+/**
+ * @returns {AutoapproveConfig | null}
+ */
+export function loadReviewAutoapproveConfig() {
+  const base = path.dirname(getConfigPath());
+  const p = path.join(base, "review-autoapprove.json");
+  if (!fs.existsSync(p)) {
+    return null;
+  }
+  try {
+    const raw = fs.readFileSync(p, "utf8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * @param {AutoapproveRule} rule
+ * @param {string} owner
+ * @param {string} repo
+ * @param {string} headRef
+ */
+function matchRule(rule, owner, repo, headRef) {
+  if (String(rule.owner) !== owner || String(rule.repo) !== repo) {
+    return false;
+  }
+  const glob = rule.head_ref_glob;
+  if (glob) {
+    const re = new RegExp(
+      "^" +
+        String(glob)
+          .replace(/[.+^${}()|[\]\\]/g, "\\$&")
+          .replace(/\*/g, ".*") +
+        "$"
+    );
+    if (!re.test(headRef)) {
+      return false;
+    }
+  }
+  return true;
+}
+
+/**
+ * @param {AutoapproveConfig | null} cfg
+ * @param {string} owner
+ * @param {string} repo
+ * @param {string} headRef
+ */
+export function isRepoHeadAutoapproveEligible(cfg, owner, repo, headRef) {
+  if (!cfg || !Array.isArray(cfg.rules)) {
+    return false;
+  }
+  return cfg.rules.some((r) => r && matchRule(r, owner, repo, headRef));
+}
+
+/**
+ * Heuristic: commits between base and head look like merge-only from default branch (best-effort).
+ * @param {Record<string, unknown>} comparePayload from githubCompareRefs
+ * @param {string} defaultBranch
+ */
+export function compareLooksLikeMainMergesOnly(comparePayload, defaultBranch) {
+  const commits = Array.isArray(comparePayload.commits) ? comparePayload.commits : [];
+  if (commits.length === 0) {
+    return true;
+  }
+  const safeDefault = String(defaultBranch || "main");
+  for (const c of commits) {
+    if (!c || typeof c !== "object") continue;
+    const commit = /** @type {Record<string, unknown>} */ (c).commit;
+    const msg =
+      commit && typeof commit === "object"
+        ? String(/** @type {Record<string, unknown>} */ (commit).message || "").split("\n")[0]
+        : "";
+    const mergePat = new RegExp(`^Merge branch ['"]?${safeDefault}['"]?`, "i");
+    const ghMerge = /^Merge pull request #\d+ from /i;
+    if (mergePat.test(msg) || ghMerge.test(msg)) {
+      continue;
+    }
+    if (/^Merge branch/i.test(msg) || /^Merge remote-tracking branch/i.test(msg)) {
+      continue;
+    }
+    return false;
+  }
+  return true;
+}

package/src/review-hub/review-hub-back.js

@@ -0,0 +1,10 @@
+/**
+ * Thrown when the user presses Backspace / Esc from the stack picker
+ * to return to the review-hub repository list (`nugit review` only).
+ */
+export class ReviewHubBackError extends Error {
+  constructor() {
+    super("Back to review hub");
+    this.name = "ReviewHubBackError";
+  }
+}