octo-dev 0.7.1 → 0.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "octo-dev",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Build orchestration, semantic versioning, and local infrastructure management for repository workspaces",
   "type": "module",
   "license": "MIT",

package/src/cli/index.ts

@@ -11,7 +11,7 @@ const program = new Command();
 program
   .name('octo')
   .description('Build orchestration, semantic versioning, and local infrastructure management for repository workspaces')
-  .version('0.7.1');
+  .version('0.7.2');
 
 program
   .command('init')

package/src/shared/git-auth.ts

@@ -1,17 +1,17 @@
-import { ask } from './prompt.js';
+import { askSecret } from './prompt.js';
 
 let cachedToken: string | undefined;
 
 /**
  * Acquires a GitHub Personal Access Token for git HTTPS operations.
- * Prompts the user once and caches in memory for the process lifetime.
- * The token is never persisted to disk.
+ * Prompts the user once (input hidden) and caches in memory for the process lifetime.
+ * The token is never persisted to disk or echoed to the terminal.
  *
  * @returns The PAT string, or undefined if the user provides empty input (skip).
  */
 export async function acquireGitToken(): Promise<string | undefined> {
   if (cachedToken) return cachedToken;
-  const input = await ask('GitHub token (PAT): ');
+  const input = await askSecret('GitHub token (PAT): ');
   cachedToken = input || undefined;
   return cachedToken;
 }

package/src/shared/prompt.ts

@@ -16,6 +16,47 @@ export function ask(message: string): Promise<string> {
   });
 }
 
+/**
+ * Prompts the user for sensitive input (e.g. tokens, passwords).
+ * Input is not echoed to the terminal.
+ *
+ * @param message - The prompt message displayed to the user.
+ * @returns The trimmed secret string.
+ */
+export function askSecret(message: string): Promise<string> {
+  return new Promise((resolve) => {
+    process.stdout.write(message);
+
+    const stdin = process.stdin;
+    const wasRaw = stdin.isRaw;
+    if (stdin.isTTY) stdin.setRawMode(true);
+    stdin.resume();
+    stdin.setEncoding('utf-8');
+
+    let input = '';
+
+    const onData = (char: string) => {
+      if (char === '\n' || char === '\r') {
+        stdin.removeListener('data', onData);
+        if (stdin.isTTY) stdin.setRawMode(wasRaw ?? false);
+        stdin.pause();
+        process.stdout.write('\n');
+        resolve(input.trim());
+      } else if (char === '\u0003') {
+        // Ctrl+C
+        process.exit(130);
+      } else if (char === '\u007F' || char === '\b') {
+        // Backspace
+        input = input.slice(0, -1);
+      } else {
+        input += char;
+      }
+    };
+
+    stdin.on('data', onData);
+  });
+}
+
 /**
  * Prompts the user with a yes/no question via stdin.
  * Accepts 'y', 'Y', 's', 'S' as affirmative responses.

package/src/shared/sync.ts

@@ -25,7 +25,7 @@ export async function ensureRepositories(manifest: OctoManifest, rootDir: string
 
   if (pending.length === 0) return 0;
 
-  logger.info(`${pending.length} repository(ies) to clone.`);
+  logger.info(`${pending.length} repository(ies) to clone.\n`);
 
   // Acquire token once for all clones
   const token = await acquireGitToken();