@vibe-cafe/vibe-usage 0.14.0 → 0.14.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-cafe/vibe-usage",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "Track your AI coding tool token usage and sync to vibecafe.ai",
   "type": "module",
   "scripts": {

package/src/config.js

@@ -1,6 +1,7 @@
 import { readFileSync, writeFileSync, chmodSync, mkdirSync, existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+import { moveDirectoryOutOfFilePath } from './path-repair.js';
 
 // VIBE_USAGE_CONFIG_DIR overrides the dir (test hook).
 const CONFIG_DIR = process.env.VIBE_USAGE_CONFIG_DIR?.trim() || join(homedir(), '.vibe-usage');
@@ -22,6 +23,9 @@ export function loadConfig() {
 
 export function saveConfig(config) {
   mkdirSync(CONFIG_DIR, { recursive: true });
+  // A directory sitting where the config file belongs would make this write
+  // throw EISDIR forever; move it aside so the run can save.
+  moveDirectoryOutOfFilePath(CONFIG_FILE);
   // The file holds the vbu_ API key — never leave it group/world-readable.
   // mode only applies at file creation, so chmod explicitly for pre-existing
   // files written before this hardening.

package/src/init.js

@@ -21,7 +21,16 @@ function prompt(question) {
 }
 
 function openBrowser(url) {
-  const cmds = { darwin: 'open', linux: 'xdg-open', win32: 'start' };
+  // `start` is a cmd.exe builtin, not an executable: execFile('start', …) fails
+  // outright on Windows, so the device-flow login never opened a tab and the
+  // user was left staring at the code with no browser to type it into. Go
+  // through cmd, and escape a bare `&` (present in verificationUriComplete's
+  // query string) or cmd would read it as a command separator.
+  if (platform() === 'win32') {
+    execFile('cmd', ['/c', 'start', '', url.replace(/&/g, '^&')], { windowsHide: true }, () => {});
+    return;
+  }
+  const cmds = { darwin: 'open', linux: 'xdg-open' };
   const cmd = cmds[platform()] || cmds.linux;
   // Use execFile with args array to avoid shell injection via VIBE_USAGE_API_URL
   execFile(cmd, [url], () => {});

package/src/opencode-roots.js

@@ -24,10 +24,21 @@ export function openCodeStore(root) {
   return null;
 }
 
+// XDG first, then the Windows per-user store. A root that does not resolve is
+// skipped by the caller, so probing costs nothing when it is absent.
+function defaultOpenCodeRoots() {
+  const xdg = join(homedir(), '.local', 'share', 'opencode');
+  const localAppData = process.env.LOCALAPPDATA?.trim();
+  if (process.platform === 'win32' && localAppData) {
+    return [xdg, join(localAppData, 'opencode')];
+  }
+  return [xdg];
+}
+
 export function getOpenCodeStores({ extraRoots = [], onWarning = () => {} } = {}) {
   const override = process.env.VIBE_USAGE_OPENCODE_DIRS?.trim();
   const defaults = override ? override.split(delimiter).map(p => p.trim()).filter(Boolean)
-    : [join(homedir(), '.local', 'share', 'opencode')];
+    : defaultOpenCodeRoots();
   const seen = new Set(), stores = [];
   for (const root of [...defaults, ...extraRoots]) {
     try {

package/src/parsers/amp.js

@@ -3,9 +3,17 @@ import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { aggregateToBuckets, extractSessions } from './aggregate.js';
 
-function resolveThreadsDir() {
+/** Threads directory, XDG first and %LOCALAPPDATA% on Windows. Exported so the
+ *  Windows branch can be exercised from a POSIX test host. */
+export function resolveThreadsDir() {
   if (process.env.AMP_DATA_DIR) return process.env.AMP_DATA_DIR;
   if (process.env.XDG_DATA_HOME) return join(process.env.XDG_DATA_HOME, 'amp', 'threads');
+  // Amp on Windows keeps its threads under %LOCALAPPDATA%; without this the
+  // source silently collected nothing there.
+  if (process.platform === 'win32' && process.env.LOCALAPPDATA) {
+    const winDir = join(process.env.LOCALAPPDATA, 'amp', 'threads');
+    if (existsSync(winDir)) return winDir;
+  }
   return join(homedir(), '.local', 'share', 'amp', 'threads');
 }
 

package/src/parsers/codex.js

@@ -104,7 +104,9 @@ function extractProject(meta) {
     const match = meta.git.repository_url.match(/([^/]+\/[^/]+?)(?:\.git)?$/);
     if (match) return match[1];
   }
-  if (meta.cwd) return meta.cwd.split('/').pop() || 'unknown';
+  // Windows reports cwd with backslashes, so splitting on '/' alone yields the
+  // whole path as the "project".
+  if (meta.cwd) return meta.cwd.split(/[\\/]/).pop() || 'unknown';
   return 'unknown';
 }
 

package/src/parsers/qwen-code.js

@@ -40,7 +40,9 @@ function findSessionFiles(baseDir) {
 
 function extractProject(cwd, filePath) {
   if (cwd) {
-    const parts = cwd.split('/').filter(Boolean);
+    // Windows reports cwd with backslashes; split on both separators so the
+    // project is the last path segment rather than the whole path.
+    const parts = cwd.split(/[\\/]/).filter(Boolean);
     if (parts.length > 0) return parts[parts.length - 1];
   }
   const tmpPrefix = QWEN_TMP_DIR + sep;

package/src/path-repair.js

@@ -0,0 +1,27 @@
+import { statSync, renameSync } from 'node:fs';
+
+/**
+ * Move a directory that is occupying a path we need as a file.
+ *
+ * Both the config file and the state file are written by this CLI, and a
+ * customer hit a layout where the *file* path had become a directory (the store
+ * was created by a different tool, or an earlier run was interrupted between
+ * mkdir and open). `writeFileSync` then fails with EISDIR and the CLI is stuck:
+ * every later run reads nothing, and the save that would fix it is the one that
+ * throws.
+ *
+ * Renaming it aside keeps whatever the user's data was — never delete it, the
+ * directory may hold real content — while letting the current run write a fresh
+ * file. Absence is not a repair, so ENOENT stays silent; anything else (a
+ * permission error, a read-only volume) is the caller's to report rather than
+ * something to swallow.
+ */
+export function moveDirectoryOutOfFilePath(path) {
+  try {
+    if (statSync(path).isDirectory()) {
+      renameSync(path, `${path}.directory-backup-${Date.now()}`);
+    }
+  } catch (err) {
+    if (err?.code !== 'ENOENT') throw err;
+  }
+}

package/src/state.js

@@ -2,6 +2,7 @@ import { readFileSync, writeFileSync, unlinkSync, mkdirSync, existsSync, renameS
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { createHash, randomBytes } from 'node:crypto';
+import { moveDirectoryOutOfFilePath } from './path-repair.js';
 
 // Persisted sync state, kept next to config.js's files (same dir + dev split).
 // Maps a stable item key -> hash of its mutable fields, recording what we have
@@ -79,6 +80,9 @@ export function loadState(identity) {
 
 export function saveState(state, identity) {
   mkdirSync(STATE_DIR, { recursive: true });
+  // Same EISDIR repair as config: a directory where the state file belongs
+  // would block every save, and with it every incremental sync.
+  moveDirectoryOutOfFilePath(STATE_FILE);
   // Only the durable fields are written: `identityChanged` is loadState()'s
   // one-run signal, not state. A CLI older than 0.11.1 reads just
   // buckets/sessions, so the extra top-level `identity` key is ignored there —