bitty-tui 0.0.20 → 0.0.22

package/dist/cli.js

@@ -8,6 +8,7 @@ import { readPackageUpSync } from "read-package-up";
 import { art } from "./theme/art.js";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { debugLogPath } from "./debug.js";
 const args = process.argv.slice(2);
 if (args.includes("--version") || args.includes("-v")) {
     const __filename = fileURLToPath(import.meta.url);
@@ -24,6 +25,7 @@ if (args.includes("--help") || args.includes("-h")) {
   Options
     --help     Show help
     --version  Show version
+    --debug    Write API debug logs to ${debugLogPath}
 `);
     process.exit(0);
 }

package/dist/clients/bw.js

@@ -19,6 +19,7 @@
  */
 import crypto from "node:crypto";
 import * as argon2 from "argon2";
+import { debugEnabled, debugLog } from "../debug.js";
 export class FetchError extends Error {
     status;
     data;
@@ -32,7 +33,26 @@ export class FetchError extends Error {
     }
 }
 const fetchApi = async (...args) => {
+    if (debugEnabled) {
+        const [input, init] = args;
+        const method = (init?.method ?? "GET").toUpperCase();
+        const url = input instanceof Request ? input.url : String(input);
+        const body = init?.body != null ? String(init.body) : "(none)";
+        const headers = new Headers(init?.headers);
+        const headersStr = [...headers.entries()]
+            .map(([k, v]) => `    ${k}: ${v}`)
+            .join("\n");
+        debugLog(`→ ${method} ${url}`);
+        debugLog(`  headers:\n${headersStr || "    (none)"}`);
+        debugLog(`  body: ${body}`);
+    }
     const response = await fetch(...args);
+    if (debugEnabled) {
+        const clone = response.clone();
+        const responseBody = await clone.text();
+        debugLog(`← ${response.status} ${response.statusText}`);
+        debugLog(`  response: ${responseBody}`);
+    }
     if (!response.ok) {
         const data = await response.text();
         throw new FetchError(response.status, data);
@@ -73,6 +93,17 @@ export var KdfType;
     KdfType[KdfType["Argon2id"] = 1] = "Argon2id";
 })(KdfType || (KdfType = {}));
 const DEVICE_IDENTIFIER = "928f9664-5559-4a7b-9853-caf5bfa5dd57";
+const DEVICE_TYPE = "9"; // ChromeBrowser → ClientName::Web in the SDK
+const CLIENT_NAME = "web";
+const CLIENT_VERSION = "2025.9.0";
+const USER_AGENT = "Bitwarden_Bitty";
+const defaultHeaders = () => ({
+    "Device-Identifier": DEVICE_IDENTIFIER,
+    "Bitwarden-Client-Name": CLIENT_NAME,
+    "Bitwarden-Client-Version": CLIENT_VERSION,
+    "Device-Type": DEVICE_TYPE,
+    "User-Agent": USER_AGENT,
+});
 class Bw {
     /**
      * Derives the master key and related keys from the user's email and password.
@@ -86,12 +117,13 @@ class Bw {
      * The encryption key will be used to decrypt the user keys.
      */
     async deriveMasterKey(email, password, prelogin) {
+        const normalizedEmail = email.trim().toLowerCase();
         let masterKey;
         if (prelogin.kdf === KdfType.PBKDF2) {
-            masterKey = this.derivePbkdf2(password, email, prelogin.kdfIterations);
+            masterKey = this.derivePbkdf2(password, normalizedEmail, prelogin.kdfIterations);
         }
         else {
-            masterKey = await this.deriveArgon2(password, email, prelogin.kdfIterations, prelogin.kdfMemory, prelogin.kdfParallelism);
+            masterKey = await this.deriveArgon2(password, normalizedEmail, prelogin.kdfIterations, prelogin.kdfMemory, prelogin.kdfParallelism);
         }
         const masterPasswordHashBytes = this.derivePbkdf2(masterKey, password, 1);
         const masterPasswordHash = Buffer.from(masterPasswordHashBytes).toString("base64");
@@ -343,8 +375,9 @@ export class Client {
     }
     setUrls(uri) {
         if (uri.baseUrl) {
-            this.apiUrl = uri.baseUrl + "/api";
-            this.identityUrl = uri.baseUrl + "/identity";
+            const base = uri.baseUrl.replace(/\/+$/, "");
+            this.apiUrl = base + "/api";
+            this.identityUrl = base + "/identity";
         }
         else {
             this.apiUrl = uri.apiUrl;
@@ -371,6 +404,8 @@ export class Client {
             const prelogin = await fetchApi(`${this.identityUrl}/accounts/prelogin`, {
                 method: "POST",
                 headers: {
+                    ...defaultHeaders(),
+                    Accept: "application/json",
                     "Content-Type": "application/json",
                 },
                 body: JSON.stringify({ email }),
@@ -379,24 +414,24 @@ export class Client {
             this.keys = keys;
         }
         const bodyParams = new URLSearchParams();
-        bodyParams.append("username", email);
-        bodyParams.append("password", keys.masterPasswordHash);
-        bodyParams.append("grant_type", "password");
-        bodyParams.append("deviceName", "chrome");
+        bodyParams.append("scope", "api offline_access");
+        bodyParams.append("client_id", "web");
         bodyParams.append("deviceType", "9");
         bodyParams.append("deviceIdentifier", DEVICE_IDENTIFIER);
-        bodyParams.append("client_id", "web");
-        bodyParams.append("scope", "api offline_access");
+        bodyParams.append("deviceName", "firefox");
+        bodyParams.append("grant_type", "password");
+        bodyParams.append("username", email);
+        bodyParams.append("password", keys.masterPasswordHash);
         for (const [key, value] of Object.entries(opts || {})) {
             bodyParams.append(key, value);
         }
         const identityReq = await fetchApi(`${this.identityUrl}/connect/token`, {
             method: "POST",
             headers: {
-                accept: "*/*",
-                "accept-language": "en-US",
-                "bitwarden-client-name": "web",
-                "bitwarden-client-version": "2025.9.0",
+                ...defaultHeaders(),
+                Accept: "application/json",
+                "Cache-Control": "no-store",
+                Pragma: "no-cache",
                 "Content-Type": "application/x-www-form-urlencoded; charset=utf-8",
             },
             body: bodyParams.toString(),
@@ -419,6 +454,8 @@ export class Client {
         return fetchApi(`${this.apiUrl}/two-factor/send-email-login`, {
             method: "POST",
             headers: {
+                ...defaultHeaders(),
+                Accept: "application/json",
                 "Content-Type": "application/json",
             },
             body: JSON.stringify({
@@ -437,12 +474,20 @@ export class Client {
             if (!this.refreshToken) {
                 throw new Error("No refresh token available. Please login first.");
             }
+            const bodyParams = new URLSearchParams();
+            bodyParams.append("grant_type", "refresh_token");
+            bodyParams.append("refresh_token", this.refreshToken);
+            bodyParams.append("client_id", "web");
             const identityReq = await fetchApi(`${this.identityUrl}/connect/token`, {
                 method: "POST",
                 headers: {
-                    "Content-Type": "application/x-www-form-urlencoded",
+                    ...defaultHeaders(),
+                    Accept: "application/json",
+                    "Cache-Control": "no-store",
+                    Pragma: "no-cache",
+                    "Content-Type": "application/x-www-form-urlencoded; charset=utf-8",
                 },
-                body: `refresh_token=${this.refreshToken}&grant_type=refresh_token&client_id=web&scope=api%20offline_access`,
+                body: bodyParams.toString(),
             }).then((r) => r.json());
             this.token = identityReq.access_token;
             this.refreshToken = identityReq.refresh_token;
@@ -459,8 +504,9 @@ export class Client {
         this.syncCache = await fetchApi(`${this.apiUrl}/sync?excludeDomains=true`, {
             method: "GET",
             headers: {
+                ...defaultHeaders(),
+                Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
-                "bitwarden-client-version": "2025.9.0",
             },
         }).then((r) => r.json());
         this.decryptOrgKeys();
@@ -631,6 +677,8 @@ export class Client {
         const s = await fetchApi(url, {
             method: "POST",
             headers: {
+                // ...defaultHeaders(),
+                // Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
                 "Content-Type": "application/json",
             },
@@ -678,6 +726,8 @@ export class Client {
         const s = await fetchApi(`${this.apiUrl}/ciphers/${id}`, {
             method: "PUT",
             headers: {
+                // ...defaultHeaders(),
+                // Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
                 "Content-Type": "application/json",
             },
@@ -692,6 +742,8 @@ export class Client {
         await fetchApi(`${this.apiUrl}/ciphers/${id}`, {
             method: "DELETE",
             headers: {
+                // ...defaultHeaders(),
+                // Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
             },
         });
@@ -715,6 +767,8 @@ export class Client {
         const s = await fetchApi(`${this.apiUrl}/ciphers/${id}/share`, {
             method: "PUT",
             headers: {
+                // ...defaultHeaders(),
+                // Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
                 "Content-Type": "application/json",
             },
@@ -732,6 +786,8 @@ export class Client {
         const s = await fetchApi(`${this.apiUrl}/ciphers/${id}/collections_v2`, {
             method: "PUT",
             headers: {
+                // ...defaultHeaders(),
+                // Accept: "application/json",
                 Authorization: `Bearer ${this.token}`,
                 "Content-Type": "application/json",
             },

package/dist/components/TextInput.js

@@ -87,7 +87,7 @@ export const TextInput = ({ id, placeholder, value, isPassword, showPasswordOnFo
                 onCopy(value);
             }
             else {
-                clipboard.writeSync(value);
+                clipboard.write(value);
                 showStatusMessage("📋 Copied to clipboard!", "success");
             }
         }

package/dist/dashboard/DashboardView.js

@@ -138,7 +138,7 @@ export function DashboardView({ onLogout }) {
         setShowDetails(true);
         setTimeout(focusNext, 50);
     }, [showDetails]);
-    return (_jsxs(Box, { flexDirection: "column", width: "100%", height: stdout.rows - 2, children: [_jsx(Box, { borderStyle: "double", borderColor: primary, paddingX: 2, justifyContent: "center", flexShrink: 0, children: _jsx(Text, { bold: true, color: primary, children: "BiTTY" }) }), _jsxs(Box, { children: [_jsx(Box, { width: "40%", children: _jsx(TextInput, { id: "search", placeholder: focusedComponent === "search" ? "" : "[/] Search in vault", value: searchQuery, isActive: false, onChange: setSearchQuery, onSubmit: () => {
+    return (_jsxs(Box, { flexDirection: "column", width: "100%", height: stdout.rows - 2, children: [_jsx(Box, { borderStyle: "double", borderColor: primary, paddingX: 2, justifyContent: "center", flexShrink: 0, children: _jsx(Text, { bold: true, color: primary, children: "BiTTY" }) }), _jsxs(Box, { flexShrink: 0, children: [_jsx(Box, { width: "40%", children: _jsx(TextInput, { id: "search", placeholder: focusedComponent === "search" ? "" : "[/] Search in vault", value: searchQuery, isActive: false, onChange: setSearchQuery, onSubmit: () => {
                                 setFocusedComponent("list");
                                 focusNext();
                             } }) }), _jsxs(Box, { width: "60%", paddingX: 1, justifyContent: "space-between", children: [statusMessage ? (_jsx(Box, { padding: 1, flexShrink: 1, children: _jsx(Text, { color: statusMessageColor, children: statusMessage }) })) : (_jsx(Box, {})), selectedCipher && (_jsxs(Box, { gap: 1, flexShrink: 0, children: [_jsx(TabButton, { active: false, onClick: async () => {

package/dist/dashboard/components/VaultList.js

@@ -38,7 +38,8 @@ export function VaultList({ filteredCiphers, isFocused, selected, onSelect, }) {
     });
     useInput((input, key) => {
         const cipher = selected !== null ? filteredCiphers[selected] : null;
-        let field, fldName;
+        let field;
+        let fldName;
         if (key.ctrl && input === "y") {
             switch (cipher?.type) {
                 case CipherType.Login:
@@ -74,7 +75,7 @@ export function VaultList({ filteredCiphers, isFocused, selected, onSelect, }) {
             }
         }
         if (field) {
-            clipboard.writeSync(field);
+            clipboard.write(field);
             showStatusMessage(`📋 Copied ${fldName} to clipboard!`, "success");
         }
     }, { isActive: isFocused });

package/dist/debug.d.ts

@@ -0,0 +1,3 @@
+export declare const debugEnabled: boolean;
+export declare const debugLogPath: string;
+export declare function debugLog(message: string): void;

package/dist/debug.js

@@ -0,0 +1,15 @@
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+export const debugEnabled = process.argv.includes("--debug");
+const logDir = path.join(os.homedir(), ".config", "bitty");
+export const debugLogPath = path.join(logDir, "debug.log");
+if (debugEnabled) {
+    fs.mkdirSync(logDir, { recursive: true });
+    fs.writeFileSync(debugLogPath, `--- debug session started ${new Date().toISOString()} ---\n`);
+}
+export function debugLog(message) {
+    if (!debugEnabled)
+        return;
+    fs.appendFileSync(debugLogPath, `[${new Date().toISOString()}] ${message}\n`);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bitty-tui",
-  "version": "0.0.20",
+  "version": "0.0.22",
   "license": "MIT",
   "repository": "https://github.com/mceck/bitty",
   "keywords": [
@@ -32,18 +32,18 @@
     "argon2": "^0.44.0",
     "chalk": "^5.6.2",
     "clipboardy": "^5.3.1",
-    "ink": "^6.3.0",
-    "otplib": "^13.3.0",
-    "react": "^19.1.0",
+    "ink": "^6.8.0",
+    "otplib": "^13.4.0",
+    "react": "^19.2.5",
     "read-package-up": "^12.0.0"
   },
   "devDependencies": {
-    "@sindresorhus/tsconfig": "^8.0.1",
-    "@types/node": "^24.5.2",
-    "@types/react": "^19.1.13",
-    "eslint-plugin-react": "^7.32.2",
+    "@sindresorhus/tsconfig": "^8.1.0",
+    "@types/node": "^24.12.2",
+    "@types/react": "^19.2.14",
+    "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^5.2.0",
     "ink-testing-library": "^4.0.0",
-    "typescript": "^5.0.3"
+    "typescript": "^5.9.3"
   }
 }