@getverbal/cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Verbal Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,36 @@
+# getverbal
+
+Set up Verbal AI spend tracking in one command.
+
+## Quick Start
+
+```sh
+npx getverbal init
+```
+
+That's it. Verbal auto-detects your AI tools, authenticates via browser, and configures the MCP server for usage tracking.
+
+## What It Does
+
+`getverbal init` scans your machine for supported AI tools — Claude Code, Claude Desktop, Cursor, and Codex — then authenticates your Verbal account via browser and injects the Verbal MCP server configuration into each detected tool. After setup, every LLM call is tracked automatically.
+
+## Commands
+
+| Command     | Description                                            |
+|-------------|--------------------------------------------------------|
+| `init`      | Authenticate and configure all detected AI tools       |
+| `status`    | Show current configuration and connection status       |
+| `logout`    | Remove stored credentials                              |
+| `uninstall` | Remove Verbal from all AI tools and delete credentials |
+
+## Requirements
+
+- Node.js >= 18
+
+## More Info
+
+[https://getverbal.ai](https://getverbal.ai)
+
+## License
+
+MIT

package/dist/auth/browser-auth.d.ts

@@ -0,0 +1,6 @@
+import type { Credentials } from '../types.js';
+export interface BrowserAuthOptions {
+    apiUrl: string;
+}
+export declare function browserAuth(options: BrowserAuthOptions): Promise<Credentials>;
+//# sourceMappingURL=browser-auth.d.ts.map

package/dist/auth/browser-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth.d.ts","sourceRoot":"","sources":["../../src/auth/browser-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AA4HD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2GnF"}

package/dist/auth/browser-auth.js

@@ -0,0 +1,202 @@
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+const PORT_START = 9876;
+const PORT_END = 9900;
+const TIMEOUT_MS = 120_000;
+async function openBrowser(url) {
+    const { exec } = await import('node:child_process');
+    const platform = process.platform;
+    const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'start' : 'xdg-open';
+    exec(`${cmd} "${url}"`);
+}
+async function findAvailablePort() {
+    for (let port = PORT_START; port <= PORT_END; port++) {
+        const available = await new Promise((resolve) => {
+            const probe = createServer();
+            probe.once('error', (err) => {
+                if (err.code === 'EADDRINUSE') {
+                    resolve(false);
+                }
+                else {
+                    resolve(false);
+                }
+            });
+            probe.once('listening', () => {
+                probe.close(() => resolve(true));
+            });
+            probe.listen(port, '127.0.0.1');
+        });
+        if (available)
+            return port;
+    }
+    throw new Error(`No available port found in range ${PORT_START}-${PORT_END}. Please free up a port and try again.`);
+}
+async function exchangeCode(apiUrl, code) {
+    const res = await fetch(`${apiUrl}/api/v1/cli/exchange`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ code }),
+    });
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? `Exchange failed: HTTP ${res.status}`);
+    }
+    const data = await res.json();
+    return {
+        api_key: data.api_key,
+        org_id: data.org_id,
+        user_email: data.user_email,
+        api_url: data.api_url,
+        ingest_url: data.ingest_url,
+        created_at: new Date().toISOString(),
+    };
+}
+const WAITING_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <title>Verbal CLI Authentication</title>
+  <style>
+    body { font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #f5f5f5; }
+    .card { background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); text-align: center; max-width: 400px; }
+    h1 { font-size: 1.25rem; color: #333; margin-bottom: 0.5rem; }
+    p { color: #666; font-size: 0.95rem; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Waiting for authentication...</h1>
+    <p>Please complete the sign-in in the browser window that was opened.</p>
+  </div>
+</body>
+</html>`;
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <title>Verbal CLI — Authenticated</title>
+  <style>
+    body { font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #f5f5f5; }
+    .card { background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); text-align: center; max-width: 400px; }
+    h1 { font-size: 1.25rem; color: #22c55e; margin-bottom: 0.5rem; }
+    p { color: #666; font-size: 0.95rem; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Authentication complete!</h1>
+    <p>You can close this tab and return to your terminal.</p>
+  </div>
+</body>
+</html>`;
+const FAILURE_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <title>Verbal CLI — Authentication Failed</title>
+  <style>
+    body { font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #f5f5f5; }
+    .card { background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); text-align: center; max-width: 400px; }
+    h1 { font-size: 1.25rem; color: #ef4444; margin-bottom: 0.5rem; }
+    p { color: #666; font-size: 0.95rem; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Authentication failed.</h1>
+    <p>Please run <code>npx getverbal init</code> again.</p>
+  </div>
+</body>
+</html>`;
+export async function browserAuth(options) {
+    const { apiUrl } = options;
+    // Step 1: Generate a 256-bit random state parameter for CSRF protection
+    const state = randomBytes(32).toString('hex');
+    // Step 2: Find an available port
+    const port = await findAvailablePort();
+    // Step 3 & 5-9: Start HTTP server and wait for callback
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let timeoutId;
+        const server = createServer((req, res) => {
+            const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
+            if (req.method !== 'GET') {
+                res.writeHead(405, { 'Content-Type': 'text/plain' });
+                res.end('Method Not Allowed');
+                return;
+            }
+            if (url.pathname === '/') {
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(WAITING_HTML);
+                return;
+            }
+            if (url.pathname === '/callback') {
+                const code = url.searchParams.get('code');
+                const receivedState = url.searchParams.get('state');
+                // Step 6: Validate state (CSRF protection)
+                if (!code || receivedState !== state) {
+                    res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end(FAILURE_HTML);
+                    if (!settled) {
+                        settled = true;
+                        if (timeoutId !== undefined)
+                            clearTimeout(timeoutId);
+                        server.close(() => {
+                            reject(new Error('Authentication failed: invalid state or missing code.'));
+                        });
+                    }
+                    return;
+                }
+                // State is valid — send success response immediately so the browser gets feedback
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(SUCCESS_HTML);
+                if (!settled) {
+                    settled = true;
+                    if (timeoutId !== undefined)
+                        clearTimeout(timeoutId);
+                    // Step 7: Exchange code for credentials, then close server
+                    exchangeCode(apiUrl, code)
+                        .then((credentials) => {
+                        server.close(() => resolve(credentials));
+                    })
+                        .catch((err) => {
+                        server.close(() => {
+                            const message = err instanceof Error ? err.message : String(err);
+                            reject(new Error(`Code exchange failed: ${message}`));
+                        });
+                    });
+                }
+                return;
+            }
+            // All other routes — 404
+            res.writeHead(404, { 'Content-Type': 'text/plain' });
+            res.end('Not Found');
+        });
+        server.on('error', (err) => {
+            if (!settled) {
+                settled = true;
+                if (timeoutId !== undefined)
+                    clearTimeout(timeoutId);
+                reject(new Error(`Server error: ${err.message}`));
+            }
+        });
+        // Step 3: Start server on 127.0.0.1 only
+        server.listen(port, '127.0.0.1', () => {
+            // Step 8 (timeout): Close server if no callback within 120 seconds
+            timeoutId = setTimeout(() => {
+                if (!settled) {
+                    settled = true;
+                    server.close(() => {
+                        reject(new Error('Authentication timed out after 120 seconds. Please run `npx getverbal init` again.'));
+                    });
+                }
+            }, TIMEOUT_MS);
+            // Step 4: Open browser
+            const authUrl = `${apiUrl}/cli/auth?state=${state}&port=${port}`;
+            openBrowser(authUrl).catch(() => {
+                // Non-fatal: user may open browser manually
+            });
+        });
+    });
+}
+//# sourceMappingURL=browser-auth.js.map

package/dist/auth/browser-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth.js","sourceRoot":"","sources":["../../src/auth/browser-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GACP,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/E,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,KAAK,IAAI,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBACjD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;gBAC3B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,IAAI,QAAQ,wCAAwC,CACnG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY;IACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,sBAAsB,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,yBAAyB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAM1B,CAAC;IACF,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;QAkBb,CAAC;AAET,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;QAkBb,CAAC;AAET,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;QAkBb,CAAC;AAET,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,iCAAiC;IACjC,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEvC,wDAAwD;IACxD,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAqC,CAAC;QAE1C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAEhE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAEpD,2CAA2C;gBAC3C,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;oBACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAEtB,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,GAAG,IAAI,CAAC;wBACf,IAAI,SAAS,KAAK,SAAS;4BAAE,YAAY,CAAC,SAAS,CAAC,CAAC;wBACrD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;4BAChB,MAAM,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;wBAC7E,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,kFAAkF;gBAClF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAEtB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,SAAS,KAAK,SAAS;wBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;oBAErD,2DAA2D;oBAC3D,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;yBACvB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;wBACpB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC3C,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACtB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;4BAChB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BACjE,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC,CAAC;wBACxD,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO;YACT,CAAC;YAED,yBAAyB;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,SAAS,KAAK,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yCAAyC;QACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,mEAAmE;YACnE,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;wBAChB,MAAM,CACJ,IAAI,KAAK,CACP,oFAAoF,CACrF,CACF,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,EAAE,UAAU,CAAC,CAAC;YAEf,uBAAuB;YACvB,MAAM,OAAO,GAAG,GAAG,MAAM,mBAAmB,KAAK,SAAS,IAAI,EAAE,CAAC;YACjE,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC9B,4CAA4C;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/credentials.d.ts

@@ -0,0 +1,6 @@
+import type { Credentials } from '../types.js';
+export declare function getCredentialsDir(): string;
+export declare function readCredentials(): Promise<Credentials | null>;
+export declare function writeCredentials(credentials: Credentials): Promise<void>;
+export declare function clearCredentials(): Promise<void>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/auth/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/auth/credentials.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAkBnE;AAED,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B9E;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAYtD"}

package/dist/auth/credentials.js

@@ -0,0 +1,78 @@
+import { readFileSync, writeFileSync, rmSync, mkdirSync, chmodSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { randomBytes } from 'node:crypto';
+const APP_DIR = 'getverbal';
+const CREDENTIALS_FILE = 'credentials.json';
+export function getCredentialsDir() {
+    const xdgConfigHome = process.env['XDG_CONFIG_HOME'];
+    if (xdgConfigHome && xdgConfigHome.trim() !== '') {
+        return join(xdgConfigHome, APP_DIR);
+    }
+    return join(homedir(), '.config', APP_DIR);
+}
+function getCredentialsPath() {
+    return join(getCredentialsDir(), CREDENTIALS_FILE);
+}
+export async function readCredentials() {
+    const credPath = getCredentialsPath();
+    try {
+        const content = readFileSync(credPath, 'utf-8');
+        const parsed = JSON.parse(content);
+        return parsed;
+    }
+    catch (err) {
+        const nodeErr = err;
+        // File doesn't exist — not an error condition
+        if (nodeErr.code === 'ENOENT') {
+            return null;
+        }
+        // Malformed JSON or other read error — treat as missing to avoid crashing CLI
+        if (err instanceof SyntaxError) {
+            return null;
+        }
+        throw err;
+    }
+}
+export async function writeCredentials(credentials) {
+    const dir = getCredentialsDir();
+    const credPath = getCredentialsPath();
+    // Create directory (and parents) if needed
+    mkdirSync(dir, { recursive: true });
+    const content = JSON.stringify(credentials, null, 2);
+    // Atomic write: write to temp file then rename
+    const tmpPath = join(dir, `.credentials-${randomBytes(8).toString('hex')}.tmp`);
+    try {
+        writeFileSync(tmpPath, content, { encoding: 'utf-8', mode: 0o600 });
+        // Ensure permissions are set correctly (in case umask altered them)
+        chmodSync(tmpPath, 0o600);
+        renameSync(tmpPath, credPath);
+    }
+    catch (err) {
+        // Clean up temp file if rename failed
+        try {
+            rmSync(tmpPath, { force: true });
+        }
+        catch {
+            // Ignore cleanup error
+        }
+        throw err;
+    }
+    // Ensure final file has correct permissions
+    chmodSync(credPath, 0o600);
+}
+export async function clearCredentials() {
+    const credPath = getCredentialsPath();
+    try {
+        rmSync(credPath, { force: true });
+    }
+    catch (err) {
+        const nodeErr = err;
+        if (nodeErr.code === 'ENOENT') {
+            // File already gone — not an error
+            return;
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/auth/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/auth/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,OAAO,GAAG,WAAW,CAAC;AAC5B,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAM,UAAU,iBAAiB;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,iBAAiB,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAA4B,CAAC;QAC7C,8CAA8C;QAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,8EAA8E;QAC9E,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAwB;IAC7D,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAEtC,2CAA2C;IAC3C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAErD,+CAA+C;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,oEAAoE;QACpE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,4CAA4C;IAC5C,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAA4B,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,mCAAmC;YACnC,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+import pc from 'picocolors';
+import { runInit } from './commands/init.js';
+import { runStatus } from './commands/status.js';
+import { runLogout } from './commands/logout.js';
+import { runUninstall } from './commands/uninstall.js';
+const VERSION = '0.1.0';
+const HELP = `
+${pc.bold('getverbal')} — Set up Verbal AI spend tracking in one command
+
+${pc.bold('Usage:')}
+  getverbal <command>
+
+${pc.bold('Commands:')}
+  init        Authenticate and configure all detected AI tools
+  status      Show current configuration and connection status
+  logout      Remove stored credentials
+  uninstall   Remove Verbal from all AI tools and delete credentials
+
+${pc.bold('Options:')}
+  --help, -h      Show this help message
+  --version, -v   Show version number
+
+${pc.bold('Examples:')}
+  npx getverbal init
+  getverbal status
+  getverbal logout
+`.trim();
+async function main() {
+    const command = process.argv[2];
+    if (!command || command === '--help' || command === '-h') {
+        console.log(HELP);
+        process.exit(0);
+    }
+    if (command === '--version' || command === '-v') {
+        console.log(VERSION);
+        process.exit(0);
+    }
+    try {
+        switch (command) {
+            case 'init':
+                await runInit();
+                break;
+            case 'status':
+                await runStatus();
+                break;
+            case 'logout':
+                await runLogout();
+                break;
+            case 'uninstall':
+                await runUninstall();
+                break;
+            default:
+                console.error(pc.red(`Unknown command: ${command}`));
+                console.error(`Run ${pc.cyan('getverbal --help')} to see available commands.`);
+                process.exit(1);
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(pc.red(`Error: ${message}`));
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,IAAI,GAAG;EACX,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;;EAEpB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;;;EAGjB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;;;;;;EAMpB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;;;;EAInB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;;;;CAIrB,CAAC,IAAI,EAAE,CAAC;AAET,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,MAAM,OAAO,EAAE,CAAC;gBAChB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,SAAS,EAAE,CAAC;gBAClB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,SAAS,EAAE,CAAC;gBAClB,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,YAAY,EAAE,CAAC;gBACrB,MAAM;YACR;gBACE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,2 @@
+export declare function runInit(): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAgEA,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAqK7C"}

package/dist/commands/init.js

@@ -0,0 +1,188 @@
+import pc from 'picocolors';
+import { createInterface } from 'node:readline/promises';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { browserAuth } from '../auth/browser-auth.js';
+import { readCredentials, writeCredentials } from '../auth/credentials.js';
+import { detectAll } from '../detect/index.js';
+import { configureAll } from '../configure/index.js';
+import { verifyConnection } from '../verify.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+async function confirm(rl, message, defaultYes) {
+    const hint = defaultYes ? '(Y/n)' : '(y/N)';
+    const answer = await rl.question(`${message} ${hint} `);
+    const trimmed = answer.trim().toLowerCase();
+    if (trimmed === '')
+        return defaultYes;
+    return trimmed === 'y' || trimmed === 'yes';
+}
+/**
+ * Best-effort check — only matches exact lines, not glob patterns like *.json
+ * or **\/.mcp.json. A false negative (missing the pattern) just means we skip
+ * the "already gitignored" hint, which is acceptable.
+ */
+function isInGitignore(filename) {
+    const gitignorePath = join(process.cwd(), '.gitignore');
+    if (!existsSync(gitignorePath))
+        return false;
+    try {
+        const content = readFileSync(gitignorePath, 'utf-8');
+        return content.split('\n').some((line) => line.trim() === filename);
+    }
+    catch {
+        return false;
+    }
+}
+function toolDisplayName(tool) {
+    switch (tool) {
+        case 'claude-code':
+            return 'Claude Code';
+        case 'claude-desktop':
+            return 'Claude Desktop';
+        case 'cursor':
+            return 'Cursor';
+        case 'codex':
+            return 'Codex';
+        default: {
+            const _exhaustive = tool;
+            return String(_exhaustive);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Main command
+// ---------------------------------------------------------------------------
+export async function runInit() {
+    // ── 1. Banner ─────────────────────────────────────────────────────────────
+    console.log();
+    console.log(pc.bold('Verbal — AI Spend Tracker'));
+    console.log();
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    let credentials = null;
+    try {
+        // ── 2. Check for existing credentials ──────────────────────────────────
+        const existing = await readCredentials();
+        if (existing !== null) {
+            console.log(pc.dim(`Already authenticated as ${pc.bold(existing.user_email)}.`));
+            const reauth = await confirm(rl, 'Re-authenticate?', false);
+            if (!reauth) {
+                credentials = existing;
+            }
+        }
+        // ── 3. Browser auth (if not reusing existing) ──────────────────────────
+        if (credentials === null) {
+            console.log(pc.cyan('Opening browser to sign up or log in...'));
+            console.log(pc.dim('If your browser does not open, visit:'), pc.underline('https://www.getverbal.ai/cli/auth'));
+            console.log();
+            try {
+                const creds = await browserAuth({ apiUrl: 'https://www.getverbal.ai' });
+                await writeCredentials(creds);
+                console.log(pc.green(`✓ Authenticated as ${pc.bold(creds.user_email)}`));
+                console.log();
+                credentials = creds;
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                console.error(pc.red(`✗ Authentication failed: ${message}`));
+                process.exit(1);
+            }
+        }
+        // ── 4. Detect tools ────────────────────────────────────────────────────
+        console.log(pc.bold('Detecting AI tools...'));
+        const detections = await detectAll();
+        for (const d of detections) {
+            const name = toolDisplayName(d.tool);
+            if (d.detected) {
+                console.log(pc.green(`  ✓ ${name}`) + pc.dim(` (${d.details})`));
+            }
+            else {
+                console.log(pc.dim(`  ✗ ${name} (not found)`));
+            }
+        }
+        console.log();
+        const detected = detections.filter((d) => d.detected);
+        if (detected.length === 0) {
+            console.log(pc.yellow('⚠  No supported AI tools detected. Skipping configuration.'));
+            console.log();
+        }
+        // ── 5. Per-tool confirmation ────────────────────────────────────────────
+        const confirmed = [];
+        for (const d of detected) {
+            const name = toolDisplayName(d.tool);
+            if (d.existingConfig) {
+                console.log(pc.dim(`  ${name} is already configured.`));
+                const overwrite = await confirm(rl, `  Overwrite ${name} config?`, false);
+                if (overwrite) {
+                    confirmed.push(d);
+                }
+                else {
+                    console.log(pc.dim(`  Skipping ${name}.`));
+                }
+            }
+            else {
+                const configure = await confirm(rl, `  Configure ${name}?`, true);
+                if (configure) {
+                    confirmed.push(d);
+                }
+                else {
+                    console.log(pc.dim(`  Skipping ${name}.`));
+                }
+            }
+        }
+        if (confirmed.length > 0) {
+            console.log();
+        }
+        // ── 6. Configure confirmed tools ───────────────────────────────────────
+        if (confirmed.length > 0) {
+            console.log(pc.bold('Configuring tools...'));
+            const results = await configureAll(confirmed, credentials);
+            for (const r of results) {
+                const d = confirmed.find((det) => det.tool === r.tool);
+                const name = toolDisplayName(r.tool);
+                const configPath = d?.configPath ?? '';
+                if (r.success) {
+                    console.log(pc.green(`  ✓ ${name}`) + (configPath ? pc.dim(` ${configPath}`) : ''));
+                }
+                else {
+                    console.log(pc.red(`  ✗ ${name}: ${r.error ?? 'unknown error'}`));
+                }
+            }
+            console.log();
+        }
+        // ── 7. Verify connection ───────────────────────────────────────────────
+        process.stdout.write(pc.dim('Verifying connection...'));
+        try {
+            await verifyConnection(credentials);
+            console.log(' ' + pc.green('✓ test event received'));
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            console.log();
+            console.log(pc.yellow(`⚠  Verification warning: ${message}`));
+        }
+        console.log();
+        // ── 8. Post-install warnings ───────────────────────────────────────────
+        const mcpJsonPath = join(process.cwd(), '.mcp.json');
+        if (existsSync(mcpJsonPath) && !isInGitignore('.mcp.json')) {
+            console.log(pc.yellow('⚠  .mcp.json contains your API key. Add it to .gitignore to avoid leaking credentials:'));
+            console.log(pc.dim('     echo ".mcp.json" >> .gitignore'));
+            console.log();
+        }
+        const needsRestart = confirmed.some((d) => d.tool === 'claude-desktop' || d.tool === 'cursor');
+        if (needsRestart) {
+            console.log(pc.yellow('⚠  Restart Claude Desktop and Cursor to activate Verbal.'));
+            console.log();
+        }
+        // ── 9. Done ────────────────────────────────────────────────────────────
+        console.log(pc.bold('Done!') +
+            pc.dim(' Dashboard → ') +
+            pc.cyan('https://www.getverbal.ai/dashboard'));
+        console.log();
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=init.js.map