awarts 0.3.0 → 0.3.2

package/CODE_OF_CONDUCT.md

@@ -0,0 +1,27 @@
+# Code of Conduct
+
+## Our Pledge
+
+We are committed to making participation in this project a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+**Positive behavior includes:**
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints
+- Gracefully accepting constructive criticism
+- Focusing on what is best for the community
+
+**Unacceptable behavior includes:**
+- Trolling, insulting comments, and personal attacks
+- Harassment in any form
+- Publishing others' private information without permission
+- Other conduct which could reasonably be considered inappropriate
+
+## Enforcement
+
+Instances of abusive or unacceptable behavior may be reported by opening an issue or contacting the maintainer. All complaints will be reviewed and investigated.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.1.

package/CONTRIBUTING.md

@@ -0,0 +1,66 @@
+# Contributing to AWARTS CLI
+
+Thanks for your interest in contributing to AWARTS! Here's how to get started.
+
+## Development Setup
+
+1. Clone the repo:
+   ```bash
+   git clone https://github.com/HarshalJain-cs/AWARTS.git
+   cd AWARTS/cli
+   ```
+
+2. Install dependencies:
+   ```bash
+   npm install
+   ```
+
+3. Run in dev mode:
+   ```bash
+   npm run dev
+   ```
+
+## Project Structure
+
+```
+cli/
+  src/
+    index.ts          # CLI entry point (commander setup)
+    types.ts          # Shared TypeScript types
+    adapters/         # Provider adapters (claude, codex, gemini, antigravity)
+    commands/         # Command implementations
+    lib/              # Core libraries (auth, daemon, api, output)
+  dist/               # Built output
+  package.json
+```
+
+## Adding a New Provider Adapter
+
+1. Create `src/adapters/<provider>.ts` implementing the `Adapter` interface:
+   ```typescript
+   interface Adapter {
+     name: ProviderKey;
+     displayName: string;
+     detect(): Promise<boolean>;
+     read(): Promise<UsageEntry[]>;
+   }
+   ```
+
+2. Register it in `src/lib/detect.ts`
+
+3. Test with `awarts push --provider <name> --dry-run`
+
+## Guidelines
+
+- Write clear commit messages
+- Keep PRs focused on a single change
+- Test your changes locally before submitting
+- Don't commit API keys or credentials
+
+## Reporting Issues
+
+Open an issue at [github.com/HarshalJain-cs/AWARTS/issues](https://github.com/HarshalJain-cs/AWARTS/issues) with:
+- Node.js version (`node --version`)
+- OS and version
+- Steps to reproduce
+- Expected vs actual behavior

package/SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please email **harshaljaincs@gmail.com**.
+
+**Do NOT open a public GitHub issue for security vulnerabilities.**
+
+See the full security policy at [github.com/HarshalJain-cs/AWARTS/SECURITY.md](https://github.com/HarshalJain-cs/AWARTS/blob/main/SECURITY.md).

package/dist/index.js

@@ -4710,26 +4710,61 @@ var open_default = open;
 import fs7 from "node:fs/promises";
 import path3 from "node:path";
 import os4 from "node:os";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/lib/auth-store.ts
 import fs6 from "node:fs/promises";
 import path2 from "node:path";
 import os3 from "node:os";
+import crypto from "node:crypto";
 var AWARTS_DIR = path2.join(os3.homedir(), ".awarts");
 var AUTH_FILE = path2.join(AWARTS_DIR, "auth.json");
+function deriveKey() {
+  const material = `awarts-cli:${os3.hostname()}:${os3.userInfo().username}`;
+  return crypto.createHash("sha256").update(material).digest();
+}
+function encrypt(plaintext) {
+  const key = deriveKey();
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return {
+    version: 2,
+    iv: iv.toString("hex"),
+    tag: tag.toString("hex"),
+    ciphertext: encrypted.toString("hex")
+  };
+}
+function decrypt(file) {
+  const key = deriveKey();
+  const decipher = crypto.createDecipheriv("aes-256-gcm", key, Buffer.from(file.iv, "hex"));
+  decipher.setAuthTag(Buffer.from(file.tag, "hex"));
+  return decipher.update(file.ciphertext, "hex", "utf8") + decipher.final("utf8");
+}
 async function ensureDir() {
   await fs6.mkdir(AWARTS_DIR, { recursive: true, mode: 448 });
 }
 async function saveAuth(data) {
   await ensureDir();
-  await fs6.writeFile(AUTH_FILE, JSON.stringify(data, null, 2), { encoding: "utf-8", mode: 384 });
+  const encrypted = encrypt(JSON.stringify(data));
+  await fs6.writeFile(AUTH_FILE, JSON.stringify(encrypted, null, 2), { encoding: "utf-8", mode: 384 });
 }
 async function loadAuth() {
   try {
     const raw = await fs6.readFile(AUTH_FILE, "utf-8");
     const parsed = JSON.parse(raw);
+    if (parsed.version === 2 && parsed.ciphertext) {
+      const decrypted = JSON.parse(decrypt(parsed));
+      if (typeof decrypted.token === "string" && typeof decrypted.user_id === "string") {
+        return decrypted;
+      }
+      return null;
+    }
     if (typeof parsed.token === "string" && typeof parsed.user_id === "string") {
-      return parsed;
+      const data = parsed;
+      await saveAuth(data);
+      return data;
     }
     return null;
   } catch {
@@ -4747,6 +4782,13 @@ async function getToken() {
 }
 
 // src/lib/api.ts
+var __dirname3 = path3.dirname(fileURLToPath2(import.meta.url));
+var _cliVersion = "0.0.0";
+try {
+  const pkgPath = path3.resolve(__dirname3, "..", "package.json");
+  const pkg = JSON.parse(await fs7.readFile(pkgPath, "utf-8"));
+  _cliVersion = pkg.version ?? "0.0.0";
+} catch {}
 var DEFAULT_API_URL = "https://honorable-bee-242.convex.site";
 async function readConfigUrl() {
   try {
@@ -4781,7 +4823,7 @@ async function apiRequest(method, endpoint, body) {
   const token = await getToken();
   const headers = {
     "Content-Type": "application/json",
-    "User-Agent": "awarts-cli/0.1.0"
+    "User-Agent": `awarts-cli/${_cliVersion}`
   };
   if (token) {
     headers["Authorization"] = `Bearer ${token}`;
@@ -4808,7 +4850,7 @@ async function postUnauthenticated(endpoint, body) {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
-      "User-Agent": "awarts-cli/0.1.0"
+      "User-Agent": `awarts-cli/${_cliVersion}`
     },
     body: body != null ? JSON.stringify(body) : undefined
   });
@@ -5990,7 +6032,7 @@ import os7 from "node:os";
 var KEYS_PATH = path6.join(os7.homedir(), ".awarts", "keys.json");
 async function ensureDir3() {
   const dir = path6.dirname(KEYS_PATH);
-  await fs10.mkdir(dir, { recursive: true });
+  await fs10.mkdir(dir, { recursive: true, mode: 448 });
 }
 async function loadKeys() {
   try {
@@ -7376,12 +7418,12 @@ async function daemonRunLoop(intervalMs) {
 
 // src/lib/version-check.ts
 import { readFileSync } from "node:fs";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { dirname, join } from "node:path";
-var __dirname3 = dirname(fileURLToPath2(import.meta.url));
+var __dirname4 = dirname(fileURLToPath3(import.meta.url));
 function getLocalVersion() {
   try {
-    const pkg = JSON.parse(readFileSync(join(__dirname3, "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync(join(__dirname4, "..", "package.json"), "utf-8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -7408,7 +7450,7 @@ async function checkForUpdates() {
 
 // src/index.ts
 var program2 = new Command;
-program2.name("awarts").description("Track your AI coding spend across Claude, Codex, Gemini & Antigravity").version("0.3.0").hook("preAction", () => checkForUpdates());
+program2.name("awarts").description("Track your AI coding spend across Claude, Codex, Gemini & Antigravity").version("0.3.1").hook("preAction", () => checkForUpdates());
 program2.command("login").description("Authenticate with your AWARTS account via device auth").option("--force", "Re-authenticate even if already logged in").action(async (opts) => {
   try {
     if (opts.force) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "awarts",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Track your AI coding across Claude, Codex, Gemini & Antigravity",
   "type": "module",
   "license": "MIT",
@@ -34,7 +34,10 @@
   "files": [
     "dist",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "CONTRIBUTING.md",
+    "CODE_OF_CONDUCT.md",
+    "SECURITY.md"
   ],
   "sideEffects": false,
   "scripts": {