@vibescore/tracker 0.1.2 → 0.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibescore/tracker",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "Codex CLI token usage tracker (macOS-first, notify-driven).",
   "license": "MIT",
   "publishConfig": {

package/src/cli.js

@@ -48,6 +48,7 @@ function printHelp() {
       '',
       'Notes:',
       '  - init installs a Codex notify hook and issues a device token (default: browser sign in/up).',
+      '  - optional: pass --link-code <code> to skip browser login when provided by Dashboard.',
       '  - when ~/.code/config.toml exists, init also installs an Every Code notify hook.',
       '  - optional: set VIBESCORE_DASHBOARD_URL (or --dashboard-url) to use a hosted landing page.',
       '  - sync parses ~/.codex/sessions/**/rollout-*.jsonl and ~/.code/sessions/**/rollout-*.jsonl (Every Code), then uploads token_count deltas.',

package/src/commands/init.js

@@ -3,6 +3,7 @@ const path = require('node:path');
 const fs = require('node:fs/promises');
 const fssync = require('node:fs');
 const cp = require('node:child_process');
+const crypto = require('node:crypto');
 
 const { ensureDir, writeFileAtomic, readJson, writeJson, chmod600IfPossible } = require('../lib/fs');
 const { prompt, promptHidden } = require('../lib/prompt');
@@ -14,7 +15,11 @@ const {
 } = require('../lib/codex-config');
 const { upsertClaudeHook, buildClaudeHookCommand } = require('../lib/claude-config');
 const { beginBrowserAuth } = require('../lib/browser-auth');
-const { issueDeviceTokenWithPassword, issueDeviceTokenWithAccessToken } = require('../lib/insforge');
+const {
+  issueDeviceTokenWithPassword,
+  issueDeviceTokenWithAccessToken,
+  issueDeviceTokenWithLinkCode
+} = require('../lib/insforge');
 
 async function cmdInit(argv) {
   const opts = parseArgs(argv);
@@ -29,6 +34,7 @@ async function cmdInit(argv) {
 
   const configPath = path.join(trackerDir, 'config.json');
   const notifyOriginalPath = path.join(trackerDir, 'codex_notify_original.json');
+  const linkCodeStatePath = path.join(trackerDir, 'link_code_state.json');
 
   const baseUrl = opts.baseUrl || process.env.VIBESCORE_INSFORGE_BASE_URL || 'https://5tmappuk.us-east.insforge.app';
   let dashboardUrl = opts.dashboardUrl || process.env.VIBESCORE_DASHBOARD_URL || null;
@@ -44,7 +50,36 @@ async function cmdInit(argv) {
 
   await installLocalTrackerApp({ appDir });
 
-  if (!deviceToken && !opts.noAuth) {
+  if (!deviceToken && opts.linkCode) {
+    const deviceName = opts.deviceName || os.hostname();
+    const platform = normalizePlatform(process.platform);
+    const linkCode = String(opts.linkCode);
+    const linkCodeHash = crypto.createHash('sha256').update(linkCode).digest('hex');
+    const existingLinkState = await readJson(linkCodeStatePath);
+    let requestId =
+      existingLinkState?.linkCodeHash === linkCodeHash && existingLinkState?.requestId
+        ? existingLinkState.requestId
+        : null;
+    if (!requestId) {
+      requestId = crypto.randomUUID();
+      await writeJson(linkCodeStatePath, {
+        linkCodeHash,
+        requestId,
+        createdAt: new Date().toISOString()
+      });
+      await chmod600IfPossible(linkCodeStatePath);
+    }
+    const issued = await issueDeviceTokenWithLinkCode({
+      baseUrl,
+      linkCode,
+      requestId,
+      deviceName,
+      platform
+    });
+    deviceToken = issued.token;
+    deviceId = issued.deviceId;
+    await fs.rm(linkCodeStatePath, { force: true });
+  } else if (!deviceToken && !opts.noAuth) {
     const deviceName = opts.deviceName || os.hostname();
 
     if (opts.email || opts.password) {
@@ -171,6 +206,7 @@ function parseArgs(argv) {
     email: null,
     password: null,
     deviceName: null,
+    linkCode: null,
     noAuth: false,
     noOpen: false
   };
@@ -182,6 +218,7 @@ function parseArgs(argv) {
     else if (a === '--email') out.email = argv[++i] || null;
     else if (a === '--password') out.password = argv[++i] || null;
     else if (a === '--device-name') out.deviceName = argv[++i] || null;
+    else if (a === '--link-code') out.linkCode = argv[++i] || null;
     else if (a === '--no-auth') out.noAuth = true;
     else if (a === '--no-open') out.noOpen = true;
     else throw new Error(`Unknown option: ${a}`);
@@ -194,6 +231,13 @@ function maskSecret(s) {
   return `${s.slice(0, 4)}…${s.slice(-4)}`;
 }
 
+function normalizePlatform(value) {
+  if (value === 'darwin') return 'macos';
+  if (value === 'win32') return 'windows';
+  if (value === 'linux') return 'linux';
+  return 'unknown';
+}
+
 function buildNotifyHandler({ trackerDir, packageName }) {
   // Keep this file dependency-free: Node built-ins only.
   // It must never block Codex; it spawns sync in the background and exits 0.
@@ -377,7 +421,7 @@ async function installLocalTrackerApp({ appDir }) {
 
 function spawnInitSync({ trackerBinPath, packageName }) {
   const fallbackPkg = packageName || '@vibescore/tracker';
-  const argv = ['sync'];
+  const argv = ['sync', '--drain'];
   const hasLocalRuntime = typeof trackerBinPath === 'string' && fssync.existsSync(trackerBinPath);
   const cmd = hasLocalRuntime
     ? [process.execPath, trackerBinPath, ...argv]

package/src/lib/insforge.js

@@ -1,4 +1,4 @@
-const { issueDeviceToken, signInWithPassword } = require('./vibescore-api');
+const { exchangeLinkCode, issueDeviceToken, signInWithPassword } = require('./vibescore-api');
 
 async function issueDeviceTokenWithPassword({ baseUrl, email, password, deviceName }) {
   const accessToken = await signInWithPassword({ baseUrl, email, password });
@@ -11,7 +11,13 @@ async function issueDeviceTokenWithAccessToken({ baseUrl, accessToken, deviceNam
   return issued;
 }
 
+async function issueDeviceTokenWithLinkCode({ baseUrl, linkCode, requestId, deviceName, platform }) {
+  const issued = await exchangeLinkCode({ baseUrl, linkCode, requestId, deviceName, platform });
+  return { token: issued.token, deviceId: issued.deviceId };
+}
+
 module.exports = {
   issueDeviceTokenWithPassword,
-  issueDeviceTokenWithAccessToken
+  issueDeviceTokenWithAccessToken,
+  issueDeviceTokenWithLinkCode
 };

package/src/lib/vibescore-api.js

@@ -35,6 +35,33 @@ async function issueDeviceToken({ baseUrl, accessToken, deviceName, platform = '
   return { token, deviceId };
 }
 
+async function exchangeLinkCode({ baseUrl, linkCode, requestId, deviceName, platform = 'macos' }) {
+  const data = await invokeFunction({
+    baseUrl,
+    accessToken: null,
+    slug: 'vibescore-link-code-exchange',
+    method: 'POST',
+    body: {
+      link_code: linkCode,
+      request_id: requestId,
+      device_name: deviceName,
+      platform
+    },
+    errorPrefix: 'Link code exchange failed'
+  });
+
+  const token = data?.token;
+  const deviceId = data?.device_id;
+  if (typeof token !== 'string' || token.length === 0) {
+    throw new Error('Link code exchange failed: missing token');
+  }
+  if (typeof deviceId !== 'string' || deviceId.length === 0) {
+    throw new Error('Link code exchange failed: missing device_id');
+  }
+
+  return { token, deviceId, userId: data?.user_id || null };
+}
+
 async function ingestHourly({ baseUrl, deviceToken, hourly }) {
   const data = await invokeFunctionWithRetry({
     baseUrl,
@@ -72,6 +99,7 @@ async function syncHeartbeat({ baseUrl, deviceToken }) {
 module.exports = {
   signInWithPassword,
   issueDeviceToken,
+  exchangeLinkCode,
   ingestHourly,
   syncHeartbeat
 };