projecta-rrr 1.24.1 → 1.24.3

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to RRR will be documented in this file.
 
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.24.3] - 2026-05-12
+
+### Fixed
+- **Sprite GitHub auth** — live provisioning now passes a local `GITHUB_TOKEN`, `GH_TOKEN`, or `gh auth token` into every Git/GitHub Sprite command without writing the token into `.planning`.
+- **Sprite checkout** — branch checkout now configures GitHub CLI's Git credential helper inside the same token-scoped command before running `git fetch`.
+- **Sprite checkpoints** — provisioning only creates the clean-ready checkpoint after clone, checkout, RRR install, and setup all pass.
+
+## [1.24.2] - 2026-05-12
+
+### Fixed
+- **Sprite exec apply path** — provisioning now inserts `--` before remote commands so Sprite does not parse `bash -lc`, `npx --global`, or setup flags as Sprite CLI flags.
+
 ## [1.24.1] - 2026-05-12
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "projecta-rrr",
-  "version": "1.24.1",
+  "version": "1.24.3",
   "description": "A meta-prompting, context engineering and spec-driven development system for Claude Code by Projecta.ai",
   "bin": {
     "projecta-rrr": "bin/install.js",

package/rrr/lib/team-mode/manager.js

@@ -213,7 +213,7 @@ function buildSpriteProvisionPlan(projectRoot, options) {
     const cloneCommand = repo
       ? `gh repo clone ${repo} ${workdir}`
       : `git clone <repo-url> ${workdir}`;
-    const checkoutCommand = `git fetch origin && git checkout -B ${teamConfig.branch} origin/${config.github.base_branch}`;
+    const checkoutCommand = `gh auth setup-git >/dev/null 2>&1 || true; git fetch origin && git checkout -B ${teamConfig.branch} origin/${config.github.base_branch}`;
 
     rows.push({
       team,
@@ -227,11 +227,12 @@ function buildSpriteProvisionPlan(projectRoot, options) {
       checks,
       commands: [
         `sprite create ${teamConfig.sprite} --skip-console`,
-        `sprite exec -s ${teamConfig.sprite} mkdir -p /home/sprite/work`,
-        `sprite exec -s ${teamConfig.sprite} bash -lc 'test -d ${workdir}/.git || ${cloneCommand}'`,
-        `sprite exec -s ${teamConfig.sprite} --dir ${workdir} bash -lc '${checkoutCommand}'`,
-        `sprite exec -s ${teamConfig.sprite} --dir ${workdir} npx projecta-rrr@latest --global --yes`,
-        ...setup.map(cmd => `sprite exec -s ${teamConfig.sprite} --dir ${workdir} bash -lc '${cmd}'`),
+        `sprite exec -s ${teamConfig.sprite} -- mkdir -p /home/sprite/work`,
+        `sprite exec -s ${teamConfig.sprite} --env GITHUB_TOKEN=$GITHUB_TOKEN -- bash -lc 'gh auth status || echo "Run gh auth login in this Sprite, or apply provisioning from a machine with GITHUB_TOKEN/GH_TOKEN/gh auth token"'`,
+        `sprite exec -s ${teamConfig.sprite} --env GITHUB_TOKEN=$GITHUB_TOKEN -- bash -lc 'test -d ${workdir}/.git || ${cloneCommand}'`,
+        `sprite exec -s ${teamConfig.sprite} --dir ${workdir} --env GITHUB_TOKEN=$GITHUB_TOKEN -- bash -lc '${checkoutCommand}'`,
+        `sprite exec -s ${teamConfig.sprite} --dir ${workdir} -- npx projecta-rrr@latest --global --yes`,
+        ...setup.map(cmd => `sprite exec -s ${teamConfig.sprite} --dir ${workdir} -- bash -lc '${cmd}'`),
         `sprite checkpoint create -s ${teamConfig.sprite} --comment "rrr clean-ready ${config.milestone} ${team}"`
       ]
     });
@@ -316,32 +317,85 @@ function execCapture(command, args, options) {
   }
 }
 
+function normalizeCreateResult(result) {
+  if (!result.ok && /already exists/i.test(result.output || '')) {
+    return { ...result, ok: true, output: result.output || 'sprite already exists' };
+  }
+  return result;
+}
+
+function localGitHubToken(projectRoot) {
+  if (process.env.GITHUB_TOKEN) return process.env.GITHUB_TOKEN;
+  if (process.env.GH_TOKEN) return process.env.GH_TOKEN;
+  const token = execCapture('gh', ['auth', 'token'], { cwd: projectRoot });
+  return token.ok && token.output ? token.output.trim() : '';
+}
+
+function githubTokenEnvArgs(token) {
+  return token ? ['--env', `GITHUB_TOKEN=${token}`] : [];
+}
+
+function githubAuthStep(row, token) {
+  if (token) {
+    return execCapture('sprite', [
+      'exec',
+      '-s',
+      row.sprite,
+      ...githubTokenEnvArgs(token),
+      '--',
+      'gh',
+      'auth',
+      'status'
+    ]);
+  }
+  return execCapture('sprite', ['exec', '-s', row.sprite, '--', 'gh', 'auth', 'status']);
+}
+
+function gitExecArgs(row, token) {
+  return [
+    'exec',
+    '-s',
+    row.sprite,
+    ...githubTokenEnvArgs(token)
+  ];
+}
+
+function gitExecArgsInWorkdir(row, token) {
+  return [
+    'exec',
+    '-s',
+    row.sprite,
+    '--dir',
+    row.workdir,
+    ...githubTokenEnvArgs(token)
+  ];
+}
+
 function applySpriteProvisionPlan(projectRoot, options) {
   const plan = buildSpriteProvisionPlan(projectRoot, options);
   const results = [];
   for (const row of plan.rows) {
+    const token = localGitHubToken(projectRoot);
     const teamResults = [];
-    const create = execCapture('sprite', ['create', row.sprite, '--skip-console']);
+    const create = normalizeCreateResult(execCapture('sprite', ['create', row.sprite, '--skip-console']));
     teamResults.push({ step: 'create', ...create });
-    execCapture('sprite', ['exec', '-s', row.sprite, 'mkdir', '-p', '/home/sprite/work']);
+    execCapture('sprite', ['exec', '-s', row.sprite, '--', 'mkdir', '-p', '/home/sprite/work']);
+    const auth = githubAuthStep(row, token);
+    teamResults.push({ step: 'github-auth', ...auth, output: auth.ok ? 'authenticated' : auth.output });
     const clone = execCapture('sprite', [
-      'exec',
-      '-s',
-      row.sprite,
+      ...gitExecArgs(row, token),
+      '--',
       'bash',
       '-lc',
       `test -d ${row.workdir}/.git || gh repo clone ${row.repo} ${row.workdir}`
     ]);
     teamResults.push({ step: 'clone', ...clone });
     const checkout = execCapture('sprite', [
-      'exec',
-      '-s',
-      row.sprite,
-      '--dir',
-      row.workdir,
+      ...gitExecArgsInWorkdir(row, token),
+      '--',
       'bash',
       '-lc',
-      `git fetch origin && git checkout -B ${row.branch} origin/${plan.config.github.base_branch}`
+      `gh auth setup-git >/dev/null 2>&1 || true; git fetch origin && git checkout -B ${row.branch} origin/${plan.config.github.base_branch}`
     ]);
     teamResults.push({ step: 'checkout', ...checkout });
     const rrr = execCapture('sprite', [
@@ -350,6 +404,7 @@ function applySpriteProvisionPlan(projectRoot, options) {
       row.sprite,
       '--dir',
       row.workdir,
+      '--',
       'npx',
       'projecta-rrr@latest',
       '--global',
@@ -357,17 +412,20 @@ function applySpriteProvisionPlan(projectRoot, options) {
     ]);
     teamResults.push({ step: 'rrr-install', ...rrr });
     for (const command of row.setup || []) {
-      const setup = execCapture('sprite', ['exec', '-s', row.sprite, '--dir', row.workdir, 'bash', '-lc', command]);
+      const setup = execCapture('sprite', ['exec', '-s', row.sprite, '--dir', row.workdir, '--', 'bash', '-lc', command]);
       teamResults.push({ step: `setup: ${command}`, ...setup });
     }
-    const checkpoint = execCapture('sprite', [
-      'checkpoint',
-      'create',
-      '-s',
-      row.sprite,
-      '--comment',
-      `rrr clean-ready ${plan.config.milestone} ${row.team}`
-    ]);
+    const readyForCheckpoint = teamResults.every(result => result.ok);
+    const checkpoint = readyForCheckpoint
+      ? execCapture('sprite', [
+        'checkpoint',
+        'create',
+        '-s',
+        row.sprite,
+        '--comment',
+        `rrr clean-ready ${plan.config.milestone} ${row.team}`
+      ])
+      : { ok: false, output: 'skipped because bootstrap failed' };
     teamResults.push({ step: 'checkpoint', ...checkpoint });
     results.push({ team: row.team, sprite: row.sprite, results: teamResults });
   }
@@ -402,6 +460,7 @@ function readSpriteStatus(projectRoot, options) {
         row.sprite,
         '--dir',
         row.workdir,
+        '--',
         'bash',
         '-lc',
         'printf "branch="; git branch --show-current; printf "\\nhead="; git rev-parse --short HEAD; printf "\\nclaude="; claude --version 2>/dev/null || true; printf "\\ngsd="; gsd-browser --version 2>/dev/null || true'