happier-github-ops

# Happier GitHub Ops (bot `gh` wrapper) This repo provides `yarn ghops` as a thin wrapper around the GitHub CLI (`gh`) that **forces** authentication via the bot Personal Access Token. `HAPPIER_GITHUB_BOT_TOKEN` has highest priority; on macOS, the wrapper otherwise reads the validated token from Keychain service `happier/ghops`, account `happier-bot`. ## Prerequisites - `gh` is installed on the host and reachable on `PATH`. - Either environment variable `HAPPIER_GITHUB_BOT_TOKEN` is set to the bot's fine-grained PAT, or the token was stored on macOS with `yarn ghops auth store`. - Repository issue mutations require the fine-grained PAT permission **Issues: Read and write** for the target repository. The bot account's repository role and GraphQL `viewerCanUpdate` fields do not prove that the resolved token grants write operations. ## Contract / Safety - `yarn ghops ...` refuses to run if neither the environment override nor the macOS Keychain credential is available. - Runs non-interactively (`GH_PROMPT_DISABLED=1`). - Uses an isolated repo-local `GH_CONFIG_DIR` by default. - Never falls back to personal `gh`, `GH_TOKEN`, or `GITHUB_TOKEN` credentials. - Forces `GH_HOST=github.com` so an inherited host override cannot redirect the bot token. - `auth store` validates that the token belongs to `happier-bot` before persisting it. - Every ordinary invocation revalidates that the resolved token belongs to `happier-bot` before forwarding the requested command. GitHub issue bod...