@verboo/code 0.7.6 → 0.7.8

package/dist/cli.mjs

@@ -109959,6 +109959,7 @@ __export(exports_client, {
   getOrganizationUUID: () => getOrganizationUUID,
   fetchProfileInfo: () => fetchProfileInfo,
   fetchAndStoreUserRoles: () => fetchAndStoreUserRoles,
+  exchangeCodeForTokensWithUri: () => exchangeCodeForTokensWithUri,
   exchangeCodeForTokens: () => exchangeCodeForTokens,
   createAndStoreApiKey: () => createAndStoreApiKey,
   buildAuthUrl: () => buildAuthUrl
@@ -110021,6 +110022,17 @@ async function exchangeCodeForTokens(authorizationCode, state, codeVerifier, por
   logEvent("tengu_oauth_token_exchange_success", {});
   return response;
 }
+async function exchangeCodeForTokensWithUri(authorizationCode, codeVerifier, redirectUri) {
+  const response = await postOAuthForm({
+    grant_type: "authorization_code",
+    code: authorizationCode,
+    redirect_uri: redirectUri,
+    client_id: getOauthConfig().CLIENT_ID,
+    code_verifier: codeVerifier
+  });
+  logEvent("tengu_oauth_token_exchange_success", {});
+  return response;
+}
 function normalizeOAuthTokenResponse(data) {
   return {
     ...data,
@@ -115487,7 +115499,7 @@ function printStartupScreen(modelOverride) {
   const home = process.env.HOME || process.env.USERPROFILE || "";
   const cwd2 = process.cwd();
   const displayCwd = home && cwd2.startsWith(home) ? `~${cwd2.slice(home.length)}` : cwd2;
-  const version2 = "0.7.6";
+  const version2 = "0.7.8";
   const bold2 = `${ESC}1m`;
   const PURPLE = rgb(...ACCENT);
   const SOFT = rgb(...CREAM);
@@ -193578,7 +193590,7 @@ async function* openaiStreamToAnthropic(response, model, signal) {
             }
             yield {
               type: "content_block_delta",
-              index: contentBlockIndex,
+              index: hasClosedThinking ? contentBlockIndex - 1 : contentBlockIndex,
               delta: { type: "thinking_delta", thinking: delta.reasoning_content }
             };
           }
@@ -272206,8 +272218,10 @@ __export(exports_auth2, {
   installOAuthTokens: () => installOAuthTokens,
   authStatus: () => authStatus,
   authLogout: () => authLogout,
+  authLoginHeadless: () => authLoginHeadless,
   authLogin: () => authLogin
 });
+import * as readline from "node:readline";
 async function installOAuthTokens(tokens) {
   await performLogout({ clearOnboarding: false });
   const profile = tokens.profile ?? await getOauthProfileFromOauthToken(tokens.accessToken);
@@ -272458,6 +272472,66 @@ async function authLogout() {
 `);
   process.exit(0);
 }
+async function authLoginHeadless() {
+  const config2 = getOauthConfig();
+  const codeVerifier = generateCodeVerifier();
+  const codeChallenge = await generateCodeChallenge(codeVerifier);
+  const state = generateState();
+  const params = new URLSearchParams({
+    client_id: config2.CLIENT_ID,
+    redirect_uri: HEADLESS_REDIRECT_URI,
+    response_type: "code",
+    code_challenge: codeChallenge,
+    code_challenge_method: "S256",
+    state,
+    scope: getActiveScopes().join(" ")
+  });
+  const url3 = `${config2.CONSOLE_AUTHORIZE_URL}?${params}`;
+  process.stdout.write(`
+Abra este link em qualquer navegador:
+
+`);
+  process.stdout.write(`  ${url3}
+
+`);
+  process.stdout.write("Após autorizar, cole o código exibido e pressione Enter: ");
+  const code = (await readOneLine()).trim();
+  if (!code) {
+    process.stderr.write(`
+Código não informado. Cancelado.
+`);
+    process.exit(1);
+  }
+  try {
+    const tokenResponse = await exchangeCodeForTokensWithUri(code, codeVerifier, HEADLESS_REDIRECT_URI);
+    const tokens = {
+      accessToken: tokenResponse.access_token,
+      refreshToken: tokenResponse.refresh_token ?? null,
+      expiresAt: Date.now() + (tokenResponse.expires_in ?? 900) * 1000,
+      scopes: tokenResponse.scope?.split(" ").filter(Boolean) ?? [],
+      subscriptionType: null,
+      rateLimitTier: null
+    };
+    await installOAuthTokens(tokens);
+    process.stdout.write(`Login realizado com sucesso.
+`);
+    process.exit(0);
+  } catch (err2) {
+    process.stderr.write(`Erro ao trocar o código: ${errorMessage(err2)}
+`);
+    process.exit(1);
+  }
+}
+function readOneLine() {
+  return new Promise((resolve23) => {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    rl.once("line", (line) => {
+      rl.close();
+      resolve23(line);
+    });
+  });
+}
+var HEADLESS_REDIRECT_URI = "https://code.verboo.ai/pt/cli-auth/manual";
 var init_auth5 = __esm(() => {
   init_logout();
   init_errorUtils();
@@ -272477,6 +272551,7 @@ var init_auth5 = __esm(() => {
   init_slowOperations();
   init_status();
   init_oauth();
+  init_crypto2();
 });
 
 // src/services/oauth/verbooStartupAuth.ts
@@ -376716,7 +376791,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-04-29T17:24:37.768Z").getTime();
+  const buildTime = new Date("2026-04-29T18:34:52.579Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -417243,7 +417318,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.7.6"
+    value: "0.7.8"
   }, {
     label: "Session name",
     value: nameValue
@@ -485193,7 +485268,7 @@ var init_bridge_kick = __esm(() => {
 var call60 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-04-29T17:24:37.768Z"})`
+    value: `${"99.0.0"} (built ${"2026-04-29T18:34:52.579Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -487686,6 +487761,26 @@ async function validateModel(model) {
   if (!normalizedModel) {
     return { valid: false, error: "Model name cannot be empty" };
   }
+  if (isVerbooMode()) {
+    const verbooModels = getCachedVerbooModels();
+    if (verbooModels && verbooModels.length > 0) {
+      const found = verbooModels.some((m) => m.id === normalizedModel);
+      if (found) {
+        validModelCache.set(normalizedModel, true);
+        return { valid: true };
+      }
+      const MAX_SHOWN = 5;
+      const names = verbooModels.map((m) => m.id);
+      const shown = names.slice(0, MAX_SHOWN).join(", ");
+      const suffix = names.length > MAX_SHOWN ? ` e mais ${names.length - MAX_SHOWN}` : "";
+      return {
+        valid: false,
+        error: `Modelo '${normalizedModel}' não disponível. Disponíveis: ${shown}${suffix}`
+      };
+    }
+    validModelCache.set(normalizedModel, true);
+    return { valid: true };
+  }
   if (getAPIProvider() === "openai" && isOllamaProvider()) {
     const ollamaModels = getCachedOllamaModelOptions();
     const found = ollamaModels.some((m) => m.value === normalizedModel);
@@ -487833,6 +487928,8 @@ var init_validateModel = __esm(() => {
   init_ollamaModels();
   init_nvidiaNimModels();
   init_minimaxModels();
+  init_oauth();
+  init_verbooModels();
   validModelCache = new Map;
 });
 
@@ -509891,7 +509988,7 @@ function preconnectAnthropicApi() {
   if (process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ANTHROPIC_UNIX_SOCKET || process.env.CLAUDE_CODE_CLIENT_CERT || process.env.CLAUDE_CODE_CLIENT_KEY) {
     return;
   }
-  const baseUrl = process.env.ANTHROPIC_BASE_URL || getOauthConfig().BASE_API_URL;
+  const baseUrl = isVerbooMode() ? getOauthConfig().BASE_API_URL : process.env.ANTHROPIC_BASE_URL || getOauthConfig().BASE_API_URL;
   fetch(baseUrl, {
     method: "HEAD",
     signal: AbortSignal.timeout(1e4)
@@ -560829,7 +560926,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.7.6",
+              "0.7.8",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -561016,7 +561113,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.7.6",
+            "0.7.8",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -561232,7 +561329,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.7.6",
+          "0.7.8",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -561441,7 +561538,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.7.6",
+        "0.7.8",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -579469,7 +579566,7 @@ __export(exports_update, {
 async function update() {
   if (getAPIProvider() !== "firstParty") {
     writeToStdout(source_default.yellow(`Auto-update is not available for third-party provider builds.
-`) + `Current version: ${"0.7.6"}
+`) + `Current version: ${"0.7.8"}
 
 ` + `To update, reinstall from npm:
 ` + source_default.bold(`  npm install -g ${"@verboo/code"}@latest`) + `
@@ -579480,7 +579577,7 @@ async function update() {
     await gracefulShutdown(0);
   }
   logEvent("tengu_update_check", {});
-  writeToStdout(`Current version: ${"0.7.6"}
+  writeToStdout(`Current version: ${"0.7.8"}
 `);
   const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
   writeToStdout(`Checking for updates to ${channel} version...
@@ -579565,8 +579662,8 @@ async function update() {
       writeToStdout(`Claude is managed by Homebrew.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.6", latest)) {
-        writeToStdout(`Update available: ${"0.7.6"} → ${latest}
+      if (latest && !gte("0.7.8", latest)) {
+        writeToStdout(`Update available: ${"0.7.8"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579582,8 +579679,8 @@ async function update() {
       writeToStdout(`Claude is managed by winget.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.6", latest)) {
-        writeToStdout(`Update available: ${"0.7.6"} → ${latest}
+      if (latest && !gte("0.7.8", latest)) {
+        writeToStdout(`Update available: ${"0.7.8"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579599,8 +579696,8 @@ async function update() {
       writeToStdout(`Claude is managed by apk.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.6", latest)) {
-        writeToStdout(`Update available: ${"0.7.6"} → ${latest}
+      if (latest && !gte("0.7.8", latest)) {
+        writeToStdout(`Update available: ${"0.7.8"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579665,11 +579762,11 @@ async function update() {
 `);
         await gracefulShutdown(1);
       }
-      if (result.latestVersion === "0.7.6") {
-        writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.6"})`) + `
+      if (result.latestVersion === "0.7.8") {
+        writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.8"})`) + `
 `);
       } else {
-        writeToStdout(source_default.green(`Successfully updated from ${"0.7.6"} to version ${result.latestVersion}`) + `
+        writeToStdout(source_default.green(`Successfully updated from ${"0.7.8"} to version ${result.latestVersion}`) + `
 `);
         await regenerateCompletionCache();
       }
@@ -579729,12 +579826,12 @@ async function update() {
 `);
     await gracefulShutdown(1);
   }
-  if (latestVersion === "0.7.6") {
-    writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.6"})`) + `
+  if (latestVersion === "0.7.8") {
+    writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.8"})`) + `
 `);
     await gracefulShutdown(0);
   }
-  writeToStdout(`New version available: ${latestVersion} (current: ${"0.7.6"})
+  writeToStdout(`New version available: ${latestVersion} (current: ${"0.7.8"})
 `);
   writeToStdout(`Installing update...
 `);
@@ -579779,7 +579876,7 @@ async function update() {
   logForDebugging2(`update: Installation status: ${status2}`);
   switch (status2) {
     case "success":
-      writeToStdout(source_default.green(`Successfully updated from ${"0.7.6"} to version ${latestVersion}`) + `
+      writeToStdout(source_default.green(`Successfully updated from ${"0.7.8"} to version ${latestVersion}`) + `
 `);
       await regenerateCompletionCache();
       break;
@@ -580384,7 +580481,7 @@ ${getTmuxInstallInstructions2()}
       const files2 = parseFileSpecs(fileSpecs);
       if (files2.length > 0) {
         const config3 = {
-          baseUrl: process.env.ANTHROPIC_BASE_URL || getOauthConfig().BASE_API_URL,
+          baseUrl: isVerbooMode() ? getOauthConfig().BASE_API_URL : process.env.ANTHROPIC_BASE_URL || getOauthConfig().BASE_API_URL,
           oauthToken: sessionToken,
           sessionId: fileSessionId
         };
@@ -581832,7 +581929,7 @@ Usage: verboo --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version(`0.7.6 (${cliDesc})`, "-v, --version", "Output the version number");
+  }).version(`0.7.8 (${cliDesc})`, "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -581927,15 +582024,21 @@ Usage: verboo --remote "your task description"`, () => gracefulShutdown(1));
   if (false) {}
   if (false) {}
   const auth2 = program2.command("auth").description("Manage authentication").configureHelp(createSortedHelpConfig());
-  auth2.command("login").description("Sign in to your Verboo account").option("--email <email>", "Pre-populate email address on the login page").option("--sso", "Force SSO login flow").option("--console", "Use Verboo Console (API usage billing) instead of subscription").option("--claudeai", "Use Verboo subscription (default)").action(async ({
+  auth2.command("login").description("Sign in to your Verboo account").option("--email <email>", "Pre-populate email address on the login page").option("--sso", "Force SSO login flow").option("--console", "Use Verboo Console (API usage billing) instead of subscription").option("--claudeai", "Use Verboo subscription (default)").option("--headless", "Login sem navegador: exibe URL para abrir em outro dispositivo e solicita código (ideal para servidores/CI)").action(async ({
     email: email3,
     sso,
     console: useConsole,
-    claudeai
+    claudeai,
+    headless
   }) => {
     const {
-      authLogin: authLogin2
+      authLogin: authLogin2,
+      authLoginHeadless: authLoginHeadless2
     } = await Promise.resolve().then(() => (init_auth5(), exports_auth2));
+    if (headless) {
+      await authLoginHeadless2();
+      return;
+    }
     await authLogin2({
       email: email3,
       sso,
@@ -582388,7 +582491,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.7.6"} (Verboo Code)`);
+    console.log(`${"0.7.8"} (Verboo Code)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -582543,4 +582646,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=4AD8E3B8240FB15564756E2164756E21
+//# debugId=58E0B8809DA3D6DE64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verboo/code",
-  "version": "0.7.6",
+  "version": "0.7.8",
   "description": "Verboo Code — coding agent for the Verboo platform",
   "type": "module",
   "bin": {
@@ -10,10 +10,12 @@
     "bin/verboo",
     "bin/import-specifier.mjs",
     "dist/cli.mjs",
+    "scripts/postinstall.mjs",
     "README.md"
   ],
   "scripts": {
     "build": "bun run scripts/build.ts",
+    "postinstall": "node scripts/postinstall.mjs || true",
     "dev": "bun run build && node dist/cli.mjs",
     "dev:profile": "bun run scripts/provider-launch.ts",
     "dev:profile:fast": "bun run scripts/provider-launch.ts auto --fast --bare",

package/scripts/postinstall.mjs

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+/**
+ * Postinstall: garante que o binário `verboo` fique disponível no fish shell.
+ *
+ * O npm instala globalmente no prefixo retornado por `npm prefix -g` (ex:
+ * /usr/local ou ~/.npm-global). Shells bash/zsh geralmente já têm esse bin no
+ * PATH via .bashrc/.zshrc, mas o fish não herda essas configs — é preciso
+ * chamar `fish_add_path` explicitamente.
+ */
+
+import { execFileSync, spawnSync } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+
+function isFishShell() {
+  const shell = process.env.SHELL ?? ''
+  const parent = process.env.FISH_VERSION // set by fish itself
+  return shell.endsWith('/fish') || parent !== undefined
+}
+
+function getNpmGlobalBin() {
+  try {
+    const prefix = execFileSync('npm', ['prefix', '-g'], { encoding: 'utf8' }).trim()
+    return join(prefix, 'bin')
+  } catch {
+    return null
+  }
+}
+
+function fishAddPath(dir) {
+  const result = spawnSync('fish', ['-c', `fish_add_path ${dir}`], {
+    stdio: 'inherit',
+    timeout: 5000,
+  })
+  return result.status === 0
+}
+
+if (isFishShell()) {
+  const binDir = getNpmGlobalBin()
+  if (binDir && existsSync(binDir)) {
+    const ok = fishAddPath(binDir)
+    if (ok) {
+      process.stdout.write(`[verboo] fish_add_path ${binDir} — feito.\n`)
+    } else {
+      process.stdout.write(
+        `[verboo] Não foi possível adicionar ${binDir} ao fish automaticamente.\n` +
+        `         Execute manualmente: fish_add_path ${binDir}\n`,
+      )
+    }
+  }
+}