codejob_auth.go

package devflow

import (
	"fmt"
	"os"
	"strings"

	"golang.org/x/term"
)

const julesAPIKeyKey = "JULES_API_KEY"
const julesAPIKeyURL = "https://jules.google.com/settings/api"

// termLink returns an OSC 8 terminal hyperlink (supported by most modern terminals).
func termLink(text, url string) string {
	return "\x1b]8;;" + url + "\x1b\\" + text + "\x1b]8;;\x1b\\"
}

// JulesAuth manages the Jules API key via the system keyring.
// On first use it prompts the user to enter the key and stores it securely.
type JulesAuth struct {
	kr  *Keyring
	log func(...any)
}

// NewJulesAuth creates a JulesAuth with an initialized keyring.
func NewJulesAuth() (*JulesAuth, error) {
	kr, _ := NewKeyring()
	return &JulesAuth{
		kr:  kr,
		log: func(...any) {},
	}, nil
}

// SetLog sets the logging function.
func (a *JulesAuth) SetLog(fn func(...any)) {
	if fn != nil {
		a.log = fn
	}
}

// HasKey returns true if the Jules API key is already stored in the environment or keyring.
func (a *JulesAuth) HasKey() bool {
	if os.Getenv("JULES_API_KEY") != "" {
		return true
	}
	if a.kr == nil {
		return false
	}
	key, err := a.kr.Get(julesAPIKeyKey)
	return err == nil && key != ""
}

// EnsureAPIKey returns the Jules API key from the environment or keyring.
// If absent, prompts the user for it once and persists it.
func (a *JulesAuth) EnsureAPIKey() (string, error) {
	if envKey := os.Getenv("JULES_API_KEY"); envKey != "" {
		return envKey, nil
	}

	if a.kr == nil {
		return "", fmt.Errorf("keyring is unavailable and JULES_API_KEY env var is not set")
	}

	key, err := a.kr.Get(julesAPIKeyKey)
	if err == nil && key != "" {
		return key, nil
	}

	fmt.Fprintf(os.Stderr, "Jules API Key not found. Get yours at %s\nEnter it now: ",
		termLink(julesAPIKeyURL, julesAPIKeyURL))
	raw, err := term.ReadPassword(int(os.Stdin.Fd()))
	fmt.Fprintln(os.Stderr)
	if err != nil {
		return "", fmt.Errorf("could not read API key: %w", err)
	}

	key = strings.TrimSpace(string(raw))
	if key == "" {
		return "", fmt.Errorf("API key cannot be empty")
	}

	if err := a.kr.Set(julesAPIKeyKey, key); err != nil {
		a.log(fmt.Sprintf("warning: could not save API key to keyring: %v", err))
	}

	return key, nil
}