Function storeSecret

packages/bumpy/src/commands/ci-setup.ts:179–220

(rootDir: string, repo: string, token: string, pm: PackageManager)

// ---- Shared helpers ----

async function storeSecret(rootDir: string, repo: string, token: string, pm: PackageManager): Promise<void> {
  const hasGh = tryRunArgs(['gh', '--version']);
  if (!hasGh) {
    p.log.warn("`gh` CLI not found — you'll need to add the secret manually.");
    p.note(
      `Go to: https://github.com/${repo}/settings/secrets/actions/new\n` +
        `Name: ${pc.bold('BUMPY_GH_TOKEN')}\nValue: (the token you just created)`,
      'Add repository secret manually',
    );
    printPatWorkflowSnippet(pm);
    p.outro(pc.green('Setup complete!'));
    return;
  }

  // Check if the secret already exists
  const existingSecrets = tryRunArgs(['gh', 'secret', 'list', '--repo', repo], { cwd: rootDir });
  const isReplacing = existingSecrets?.includes('BUMPY_GH_TOKEN') ?? false;

  const spin = p.spinner();
  spin.start(
    isReplacing ? 'Replacing BUMPY_GH_TOKEN repository secret...' : 'Storing BUMPY_GH_TOKEN as a repository secret...',
  );
  try {
    // gh secret set reads from stdin and overwrites if the secret already exists
    tryRunArgs(['gh', 'secret', 'set', 'BUMPY_GH_TOKEN', '--repo', repo], {
      cwd: rootDir,
      input: token,
    } as any);
    spin.stop(isReplacing ? 'Secret replaced!' : 'Secret stored!');
  } catch {
    spin.stop('Failed to store secret');
    p.log.warn('Could not store the secret automatically.');
    p.note(
      `Go to: https://github.com/${repo}/settings/secrets/actions/new\n` +
        `Name: ${pc.bold('BUMPY_GH_TOKEN')}\nValue: (the token you just created)`,
      'Add repository secret manually',
    );
  }

  printPatWorkflowSnippet(pm);
  p.outro(pc.green('Setup complete!'));
}

function printPatWorkflowSnippet(pm: PackageManager): void {
  const runCmd = pmxCommand(pm);