@dotta/xc 0.1.0

package/README.md

@@ -0,0 +1,348 @@
+# xc — X API CLI
+
+CLI client for the [X API v2](https://docs.x.com/x-api/introduction). Pay-per-use, no cookie scraping. Built on the official [@xdevplatform/xdk](https://github.com/xdevplatform/xdk) SDK with OAuth 2.0 PKCE.
+
+## Install
+
+```bash
+npm install -g @dotta/xc
+```
+
+Requires Node.js >= 18.
+
+## Agent Skill
+
+xc includes an [agent skill](skills/xc-cli/SKILL.md) so your agent can use `xc` on your behalf.
+
+```bash
+npx skills add https://github.com/cryppadotta/xc --skill xc-cli
+```
+
+## Quick Start
+
+Get a Bearer Token from [console.x.com](https://console.x.com) and start reading immediately:
+
+```bash
+xc auth token <BEARER_TOKEN>
+xc get https://x.com/dotta/status/1612500057768755201
+```
+
+Bearer tokens are read-only. For posting, liking, following, and other write operations, see [Full OAuth Setup](#full-oauth-setup) below.
+
+## Commands
+
+### Reading
+
+```bash
+xc get <post-id>                 # Get a post by ID
+xc get https://x.com/dotta/status/1612500057768755201  # Or by URL
+xc search "typescript"           # Search recent posts (last 7 days)
+xc search "from:dotta" -n 20    # Search by author
+xc search "AI" --archive         # Full archive search (if your plan supports it)
+xc user dotta                    # Look up a user by @username
+xc usersearch "keyword"          # Search for users by keyword
+xc timeline                      # Your home timeline
+xc timeline dotta                # A specific user's posts
+xc mentions                      # Your mentions
+xc mentions dotta                # Another user's mentions
+xc whoami                        # Show authenticated user
+```
+
+### Posting
+
+```bash
+xc post "Hello world"            # Create a post
+xc post "Reply" --reply 123456   # Reply to a post
+xc post "Check this" --quote 123 # Quote a post
+xc post "First" --thread "Second" "Third"  # Post a thread
+xc post "Photo" --media photo.jpg          # Post with media attachment
+xc post "text" --json            # Show raw response
+xc delete 1234567890             # Delete a post
+```
+
+### Likes & Reposts
+
+```bash
+xc like 1234567890               # Like a post by ID
+xc unlike 1234567890             # Unlike a post
+xc repost 1234567890             # Repost a post
+xc unrepost 1234567890           # Undo a repost
+```
+
+### Engagement Lookups
+
+```bash
+xc quotes 1234567890             # List quote tweets of a post
+xc likes 1234567890              # List users who liked a post
+xc reposts 1234567890            # List users who reposted a post
+xc liked                         # Posts you've liked
+xc liked username                # Posts liked by a user
+```
+
+### Reply Moderation
+
+```bash
+xc hide 1234567890               # Hide a reply on your post
+xc unhide 1234567890             # Unhide a reply
+```
+
+### Bookmarks
+
+```bash
+xc bookmarks                     # List your bookmarks
+xc bookmark 1234567890           # Bookmark a post
+xc unbookmark 1234567890         # Remove bookmark
+```
+
+### Blocks & Mutes
+
+```bash
+xc block username                # Block a user
+xc unblock username              # Unblock a user
+xc blocked                       # List blocked users
+xc blocked --json                # JSON output
+xc mute username                 # Mute a user
+xc unmute username               # Unmute a user
+xc muted                         # List muted users
+```
+
+### Lists
+
+```bash
+xc lists                         # List your owned lists
+xc list view 1234567890          # View posts in a list
+xc list create "My List"         # Create a new list
+xc list create "Secret" --private --description "My private list"
+xc list update 123 --name "New Name" --description "Updated"
+xc list update 123 --public      # Make public
+xc list delete 1234567890        # Delete a list
+xc list members 1234567890       # List members
+xc list add 123 username         # Add a member
+xc list remove 123 username      # Remove a member
+xc list follow 1234567890        # Follow a list
+xc list unfollow 1234567890      # Unfollow a list
+xc list pin 1234567890           # Pin a list
+xc list unpin 1234567890         # Unpin a list
+```
+
+### Followers
+
+```bash
+xc followers dotta            # List followers of a user
+xc followers dotta --limit 50
+xc following dotta            # List who a user follows
+xc follow dotta               # Follow a user
+xc unfollow dotta             # Unfollow a user
+```
+
+### Trends
+
+```bash
+xc trends                        # Personalized trending topics
+xc trends --global               # Worldwide trends
+xc trends 2459115                # Trends by location (WOEID)
+xc trends --json                 # JSON output
+```
+
+### Direct Messages
+
+```bash
+xc dm list                       # List recent DM conversations
+xc dm history username           # View DM history with a user
+xc dm send username "Hello"      # Send a DM
+```
+
+### Media
+
+```bash
+xc media upload photo.jpg        # Upload media, returns media_id
+# Then use with post:
+xc post "Check this out" --media photo.jpg
+```
+
+### Streaming
+
+```bash
+xc stream rules                  # List current stream rules
+xc stream add "AI OR LLM"       # Add a filtered stream rule
+xc stream remove <rule-id>      # Remove a rule by ID
+xc stream clear                  # Remove all rules
+xc stream connect                # Connect to stream (outputs posts in real-time)
+xc stream connect --json         # Raw JSON stream output
+```
+
+## Full OAuth Setup
+
+For write operations (posting, liking, following, DMs, etc.), you need OAuth 2.0 with PKCE.
+
+### Getting a Client ID
+
+1. Go to [developer.x.com](https://developer.x.com) (existing apps) or [console.x.com](https://console.x.com) (new projects)
+2. Create or select an app
+3. Under **OAuth 2.0 settings**, copy your **Client ID** (and optionally your **Client Secret** for confidential clients)
+4. Set the **Callback URL** to `http://127.0.0.1:3391/callback`
+5. Enable the required scopes (xc requests all of these automatically):
+   - `tweet.read`, `tweet.write` — read/write posts
+   - `tweet.moderate.write` — hide/unhide replies
+   - `users.read` — look up users
+   - `follows.read`, `follows.write` — manage follows
+   - `like.read`, `like.write` — manage likes
+   - `list.read`, `list.write` — manage lists
+   - `bookmark.read`, `bookmark.write` — manage bookmarks
+   - `block.read`, `block.write` — manage blocks
+   - `mute.read`, `mute.write` — manage mutes
+   - `dm.read`, `dm.write` — read/send DMs
+   - `media.write` — upload media
+   - `offline.access` — refresh tokens
+
+### Login
+
+```bash
+# Interactive OAuth login (opens browser)
+xc auth login --client-id <YOUR_CLIENT_ID>
+
+# With client secret (for confidential apps — enables token refresh)
+xc auth login --client-id <YOUR_CLIENT_ID> --client-secret <YOUR_SECRET>
+
+# Check auth status
+xc auth status
+
+# Logout
+xc auth logout
+```
+
+### Multiple Accounts
+
+```bash
+# Login with a named account
+xc auth login --account work --client-id <CLIENT_ID>
+
+# Switch default account
+xc auth switch work
+
+# Use a specific account for one command
+xc search "query" --account work
+```
+
+Credentials are stored in `~/.xc/config.json` (or `$XC_CONFIG_DIR/config.json`). Legacy `~/.config/xc/` configs are auto-migrated.
+
+## Cost Tracking
+
+Every API call is logged to `~/.xc/usage.jsonl` with timestamp, endpoint, method, and estimated cost. A cost footer is appended to every command's output.
+
+```bash
+xc cost                          # Cost summary (1h, 24h, 7d, 30d)
+xc cost --daily                  # Day-by-day breakdown
+xc cost --json                   # Machine-readable summary
+xc cost log                      # Raw request log (last 20)
+xc cost log --limit 50           # More entries
+xc cost log --json               # Raw JSON log
+```
+
+Suppress the per-command cost footer with `--quiet`:
+
+```bash
+xc search "query" --quiet
+```
+
+### API Usage Stats
+
+```bash
+xc usage                         # X API usage stats (tweet caps, etc.)
+xc usage --json
+```
+
+## Budget Enforcement
+
+Set daily spending limits to avoid surprise costs. Budget config lives in `~/.xc/budget.json`.
+
+### Setting a Budget
+
+```bash
+xc budget set --daily 2.00                    # Warn when over $2/day
+xc budget set --daily 5.00 --action block     # Block requests over $5/day
+xc budget set --daily 1.00 --action confirm   # Ask for confirmation when over
+```
+
+**Actions:**
+- `warn` (default) — print a warning but allow the request
+- `block` — reject the request with an error
+- `confirm` — prompt interactively before proceeding
+
+### Viewing Budget Status
+
+```bash
+xc budget show
+# Budget:
+#
+#   Daily limit: $2.00
+#   Today spent: $0.45 (22%)
+#   Remaining:   $1.55
+#   Action:      warn
+#   Locked:      no
+```
+
+### Password Protection
+
+Lock your budget so it can't be changed without a password:
+
+```bash
+xc budget lock --password mysecret
+
+# Now set/reset require --password
+xc budget set --daily 10.00 --password mysecret
+xc budget reset --password mysecret
+
+# Remove the lock
+xc budget unlock --password mysecret
+```
+
+`show` and `cost` never require a password — only `set` and `reset` do.
+
+### Removing Budget
+
+```bash
+xc budget reset                  # Remove budget config
+xc budget reset --password pass  # If locked
+```
+
+## Config
+
+All configuration is stored in `~/.xc/` (or `$XC_CONFIG_DIR`):
+
+| File | Contents |
+|------|----------|
+| `config.json` | Auth credentials (OAuth tokens, accounts) |
+| `budget.json` | Budget limits and password lock |
+| `usage.jsonl` | API request cost log (append-only) |
+
+Legacy `~/.config/xc/` configs are auto-migrated on first run.
+
+## Development
+
+```bash
+git clone https://github.com/cryppadotta/xc.git
+cd xc
+pnpm install
+pnpm build
+npm link             # makes `xc` available globally
+
+pnpm dev -- <command>    # Run without building
+pnpm build               # Compile TypeScript
+pnpm lint                # Type check
+pnpm test                # Run tests (vitest)
+```
+
+## Global Flags
+
+| Flag | Description |
+|------|-------------|
+| `--quiet` | Suppress cost footer |
+| `--json` | Raw JSON output (most commands) |
+| `--account <name>` | Use a specific named account |
+| `-V, --version` | Show version |
+| `-h, --help` | Show help |
+
+## License
+
+MIT — forked from [jalehman/xc](https://github.com/jalehman/xc).

package/dist/__tests__/bookmarks.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Tests for bookmarks commands with mocked SDK client.
+ */
+export {};

package/dist/__tests__/bookmarks.test.js

@@ -0,0 +1,104 @@
+/**
+ * Tests for bookmarks commands with mocked SDK client.
+ */
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { Command } from "commander";
+import { registerBookmarksCommand, registerBookmarkCommand, registerUnbookmarkCommand, } from "../commands/bookmarks.js";
+vi.mock("../lib/api.js", () => ({
+    getClient: vi.fn(),
+}));
+vi.mock("../lib/resolve.js", () => ({
+    resolveAuthenticatedUserId: vi.fn(),
+    resolveUserId: vi.fn(),
+}));
+vi.mock("../lib/cost.js", () => ({
+    logApiCall: vi.fn(),
+    formatCostFooter: vi.fn(() => ""),
+    estimateCost: vi.fn(() => 0),
+    loadUsageLog: vi.fn(() => []),
+    computeTodaySpend: vi.fn(() => 0),
+}));
+vi.mock("../lib/budget.js", () => ({
+    checkBudget: vi.fn(),
+    loadBudget: vi.fn(() => ({ action: "warn" })),
+}));
+import { getClient } from "../lib/api.js";
+import { resolveAuthenticatedUserId } from "../lib/resolve.js";
+describe("bookmarks command", () => {
+    let program;
+    beforeEach(() => {
+        program = new Command();
+        program.exitOverride();
+        registerBookmarksCommand(program);
+        vi.clearAllMocks();
+    });
+    it("lists bookmarks", async () => {
+        vi.mocked(resolveAuthenticatedUserId).mockResolvedValue("myid");
+        const mockGetBookmarks = vi.fn().mockResolvedValue({
+            data: [
+                {
+                    id: "t1",
+                    text: "bookmarked post",
+                    authorId: "u1",
+                    createdAt: "2025-01-01T00:00:00Z",
+                },
+            ],
+            includes: {
+                users: [{ id: "u1", username: "alice", name: "Alice" }],
+            },
+        });
+        vi.mocked(getClient).mockResolvedValue({
+            users: { getBookmarks: mockGetBookmarks },
+        });
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await program.parseAsync(["node", "xc", "bookmarks"]);
+        expect(mockGetBookmarks).toHaveBeenCalledWith("myid", expect.objectContaining({
+            maxResults: 20,
+        }));
+        expect(logSpy).toHaveBeenCalledWith("Bookmarks:\n");
+        logSpy.mockRestore();
+    });
+});
+describe("bookmark command", () => {
+    let program;
+    beforeEach(() => {
+        program = new Command();
+        program.exitOverride();
+        registerBookmarkCommand(program);
+        vi.clearAllMocks();
+    });
+    it("adds a bookmark", async () => {
+        vi.mocked(resolveAuthenticatedUserId).mockResolvedValue("myid");
+        const mockCreate = vi.fn().mockResolvedValue({ data: { bookmarked: true } });
+        vi.mocked(getClient).mockResolvedValue({
+            users: { createBookmark: mockCreate },
+        });
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await program.parseAsync(["node", "xc", "bookmark", "12345"]);
+        expect(mockCreate).toHaveBeenCalledWith("myid", { tweetId: "12345" });
+        expect(logSpy).toHaveBeenCalledWith("Bookmarked post 12345");
+        logSpy.mockRestore();
+    });
+});
+describe("unbookmark command", () => {
+    let program;
+    beforeEach(() => {
+        program = new Command();
+        program.exitOverride();
+        registerUnbookmarkCommand(program);
+        vi.clearAllMocks();
+    });
+    it("removes a bookmark", async () => {
+        vi.mocked(resolveAuthenticatedUserId).mockResolvedValue("myid");
+        const mockDelete = vi.fn().mockResolvedValue({ data: { bookmarked: false } });
+        vi.mocked(getClient).mockResolvedValue({
+            users: { deleteBookmark: mockDelete },
+        });
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await program.parseAsync(["node", "xc", "unbookmark", "12345"]);
+        expect(mockDelete).toHaveBeenCalledWith("myid", "12345");
+        expect(logSpy).toHaveBeenCalledWith("Unbookmarked post 12345");
+        logSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=bookmarks.test.js.map

package/dist/__tests__/bookmarks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bookmarks.test.js","sourceRoot":"","sources":["../../src/__tests__/bookmarks.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,0BAA0B,EAAE,EAAE,CAAC,EAAE,EAAE;IACnC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;CACvB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IACjC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IAC7B,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC9C,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,OAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClC,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACjD,IAAI,EAAE;gBACJ;oBACE,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,sBAAsB;iBAClC;aACF;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aACxD;SACF,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE;SACU,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAEtD,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAC5E,UAAU,EAAE,EAAE;SACf,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,OAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjC,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAE7E,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE;SACc,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,yBAAyB,CAAC,OAAO,CAAC,CAAC;QACnC,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QAClC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAE9E,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC;YACrC,KAAK,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE;SACc,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC/D,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/budget.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Tests for budget lib: password locking, hashing, verification.
+ * Uses vi.resetModules() + dynamic import so the config module's
+ * CONFIG_DIR constant picks up the temp dir from process.env.
+ */
+export {};

package/dist/__tests__/budget.test.js

@@ -0,0 +1,105 @@
+/**
+ * Tests for budget lib: password locking, hashing, verification.
+ * Uses vi.resetModules() + dynamic import so the config module's
+ * CONFIG_DIR constant picks up the temp dir from process.env.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+let origConfigDir;
+let tmpDir;
+let budget;
+beforeEach(async () => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "xc-budget-test-"));
+    origConfigDir = process.env.XC_CONFIG_DIR;
+    process.env.XC_CONFIG_DIR = tmpDir;
+    vi.resetModules();
+    budget = await import("../lib/budget.js");
+});
+afterEach(() => {
+    if (origConfigDir !== undefined) {
+        process.env.XC_CONFIG_DIR = origConfigDir;
+    }
+    else {
+        delete process.env.XC_CONFIG_DIR;
+    }
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+describe("budget basics", () => {
+    it("returns defaults when no budget file exists", () => {
+        const b = budget.loadBudget();
+        expect(b.action).toBe("warn");
+        expect(b.daily).toBeUndefined();
+    });
+    it("saves and loads budget config", () => {
+        budget.saveBudget({ daily: 5.0, action: "block" });
+        const b = budget.loadBudget();
+        expect(b.daily).toBe(5.0);
+        expect(b.action).toBe("block");
+    });
+    it("resets budget by removing file", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        expect(fs.existsSync(budget.getBudgetPath())).toBe(true);
+        budget.resetBudget();
+        expect(fs.existsSync(budget.getBudgetPath())).toBe(false);
+    });
+});
+describe("password hashing", () => {
+    it("produces consistent hashes with same salt", () => {
+        const salt = "abcdef1234567890";
+        const h1 = budget.hashPassword("mypassword", salt);
+        const h2 = budget.hashPassword("mypassword", salt);
+        expect(h1).toBe(h2);
+    });
+    it("produces different hashes with different salts", () => {
+        const h1 = budget.hashPassword("mypassword", "salt1");
+        const h2 = budget.hashPassword("mypassword", "salt2");
+        expect(h1).not.toBe(h2);
+    });
+    it("produces different hashes for different passwords", () => {
+        const salt = "samesalt";
+        const h1 = budget.hashPassword("password1", salt);
+        const h2 = budget.hashPassword("password2", salt);
+        expect(h1).not.toBe(h2);
+    });
+});
+describe("budget locking", () => {
+    it("reports unlocked when no password set", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        expect(budget.isLocked()).toBe(false);
+    });
+    it("locks budget with password", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        budget.lockBudget("secret123");
+        expect(budget.isLocked()).toBe(true);
+    });
+    it("verifies correct password", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        budget.lockBudget("secret123");
+        expect(budget.verifyPassword("secret123")).toBe(true);
+    });
+    it("rejects incorrect password", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        budget.lockBudget("secret123");
+        expect(budget.verifyPassword("wrong")).toBe(false);
+    });
+    it("unlocks budget and removes password", () => {
+        budget.saveBudget({ daily: 5.0, action: "warn" });
+        budget.lockBudget("secret123");
+        expect(budget.isLocked()).toBe(true);
+        budget.unlockBudget();
+        expect(budget.isLocked()).toBe(false);
+        expect(budget.verifyPassword("anything")).toBe(true);
+    });
+    it("preserves budget config when locking", () => {
+        budget.saveBudget({ daily: 10.0, action: "block" });
+        budget.lockBudget("mypass");
+        const b = budget.loadBudget();
+        expect(b.daily).toBe(10.0);
+        expect(b.action).toBe("block");
+        expect(b.passwordHash).toBeDefined();
+        expect(b.passwordSalt).toBeDefined();
+    });
+});
+//# sourceMappingURL=budget.test.js.map

package/dist/__tests__/budget.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.test.js","sourceRoot":"","sources":["../../src/__tests__/budget.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAIzB,IAAI,aAAiC,CAAC;AACtC,IAAI,MAAc,CAAC;AACnB,IAAI,MAAoB,CAAC;AAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC;IAEnC,EAAE,CAAC,YAAY,EAAE,CAAC;IAClB,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACnC,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE5B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/dm.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Tests for DM command registration and mock SDK interactions.
+ */
+export {};