orangeslice 2.0.2 → 2.0.4

package/README.md

@@ -8,7 +8,31 @@ Orangeslice provides a `services.*` API for B2B research, enrichment, scraping,
 npx orangeslice
 ```
 
-The CLI copies docs to `./orangeslice-docs`, creates `./orangeslice-docs/AGENTS.md`, initializes `package.json` when missing, and installs `orangeslice` in the current directory.
+The CLI copies docs to `./orangeslice-docs`, creates `./orangeslice-docs/AGENTS.md`, initializes `package.json` when missing, installs `orangeslice` in the current directory, opens browser auth, and stores your API key in `~/.config/orangeslice/config.json`.
+
+### Auth behavior
+
+- `npx orangeslice` uses browser-based device auth and auto-provisions an API key.
+- SDK credential precedence:
+   1. `configure({ apiKey })`
+   2. `ORANGESLICE_API_KEY` env var
+   3. `~/.config/orangeslice/config.json`
+
+### CLI auth commands
+
+```bash
+# One-time setup (also runs on plain `npx orangeslice` when unauthenticated)
+npx orangeslice login
+
+# Force re-auth and replace local stored key
+npx orangeslice login --force
+
+# Remove locally stored key
+npx orangeslice logout
+
+# Show current auth source (env or config file)
+npx orangeslice auth status
+```
 
 Install as a dependency when writing app code:
 

package/dist/api.js

@@ -11,6 +11,7 @@ const DEFAULT_BASE_URL = "https://enrichly-production.up.railway.app";
 const POLL_TIMEOUT_MS = 600000;
 const DEFAULT_POLL_INTERVAL_MS = 1000;
 const DEFAULT_INLINE_WAIT_MS = 5000;
+const USER_CONFIG_PATH = ".config/orangeslice/config.json";
 const _config = {};
 function configure(opts) {
     if (opts.apiKey !== undefined)
@@ -22,7 +23,26 @@ function resolveBaseUrl() {
     return (_config.baseUrl || process.env.ORANGESLICE_BASE_URL || DEFAULT_BASE_URL).replace(/\/+$/, "");
 }
 function resolveApiKey() {
-    return _config.apiKey || process.env.ORANGESLICE_API_KEY || "";
+    return _config.apiKey || process.env.ORANGESLICE_API_KEY || readApiKeyFromConfigFile() || "";
+}
+function readApiKeyFromConfigFile() {
+    // Guard for browser-like runtimes.
+    if (!process?.versions?.node)
+        return "";
+    try {
+        const os = require("os");
+        const fs = require("fs");
+        const path = require("path");
+        const configPath = path.join(os.homedir(), USER_CONFIG_PATH);
+        if (!fs.existsSync(configPath))
+            return "";
+        const raw = fs.readFileSync(configPath, "utf8");
+        const parsed = JSON.parse(raw);
+        return typeof parsed.apiKey === "string" ? parsed.apiKey : "";
+    }
+    catch {
+        return "";
+    }
 }
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
@@ -117,7 +137,7 @@ async function post(endpoint, payload) {
     const apiKey = resolveApiKey();
     if (!apiKey) {
         throw new Error("[orangeslice] No API key configured. " +
-            "Set ORANGESLICE_API_KEY in your environment or call configure({ apiKey: 'osk_...' }).");
+            "Run `npx orangeslice`, set ORANGESLICE_API_KEY in your environment, or call configure({ apiKey: 'osk_...' }).");
     }
     const url = `${baseUrl}${endpoint}`;
     const body = JSON.stringify({ ...payload, inlineWaitMs: DEFAULT_INLINE_WAIT_MS });

package/dist/cli.js

@@ -36,11 +36,14 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
-const readline = __importStar(require("readline"));
 const LEGACY_DOCS_DIR = path.join(__dirname, "..", "docs");
 const TARGET_DIR = path.join(process.cwd(), "orangeslice-docs");
 const AGENTS_FILE = path.join(TARGET_DIR, "AGENTS.md");
+const AUTH_API_BASE_URL = "https://www.orangeslice.ai";
+const CONFIG_DIR = path.join(os.homedir(), ".config", "orangeslice");
+const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
 function isDir(p) {
     try {
         return fs.statSync(p).isDirectory();
@@ -111,75 +114,172 @@ function installOrangeslice(cwd) {
     console.log("  Installing orangeslice...");
     (0, child_process_1.execSync)("npm install orangeslice", { stdio: "inherit", cwd });
 }
-function prompt(question) {
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    return new Promise((resolve) => {
-        rl.question(question, (answer) => {
-            rl.close();
-            resolve(answer.trim());
-        });
-    });
+function readConfigFile() {
+    try {
+        if (!fs.existsSync(CONFIG_PATH))
+            return {};
+        const parsed = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf8"));
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
 }
-function readEnvFile(envPath) {
-    const entries = new Map();
-    if (!fs.existsSync(envPath))
-        return entries;
-    const lines = fs.readFileSync(envPath, "utf8").split("\n");
-    for (const line of lines) {
-        const match = line.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)/);
-        if (match)
-            entries.set(match[1], match[2]);
-    }
-    return entries;
-}
-function writeEnvVar(envPath, key, value) {
-    const entries = readEnvFile(envPath);
-    entries.set(key, value);
-    const lines = [];
-    if (fs.existsSync(envPath)) {
-        const original = fs.readFileSync(envPath, "utf8").split("\n");
-        let replaced = false;
-        for (const line of original) {
-            const match = line.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)/);
-            if (match && match[1] === key) {
-                lines.push(`${key}=${value}`);
-                replaced = true;
-            }
-            else {
-                lines.push(line);
-            }
+function saveConfigFile(config) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + "\n", { encoding: "utf8", mode: 0o600 });
+    try {
+        fs.chmodSync(CONFIG_PATH, 0o600);
+    }
+    catch { }
+}
+function clearConfigFile() {
+    try {
+        if (!fs.existsSync(CONFIG_PATH))
+            return false;
+        fs.unlinkSync(CONFIG_PATH);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function maskKey(value) {
+    if (value.length <= 12)
+        return value;
+    return `${value.slice(0, 8)}...${value.slice(-4)}`;
+}
+function getStoredApiKey() {
+    const envKey = process.env.ORANGESLICE_API_KEY;
+    if (envKey && envKey.trim())
+        return envKey.trim();
+    const fileKey = readConfigFile().apiKey;
+    return fileKey?.trim() || "";
+}
+function openBrowser(url) {
+    try {
+        if (process.platform === "darwin") {
+            (0, child_process_1.execSync)(`open "${url}"`, { stdio: "ignore" });
+            return;
         }
-        if (!replaced) {
-            if (lines.length > 0 && lines[lines.length - 1] !== "")
-                lines.push("");
-            lines.push(`${key}=${value}`);
+        if (process.platform === "win32") {
+            (0, child_process_1.execSync)(`start "" "${url}"`, { stdio: "ignore", shell: "cmd.exe" });
+            return;
         }
+        (0, child_process_1.execSync)(`xdg-open "${url}"`, { stdio: "ignore" });
     }
-    else {
-        lines.push(`${key}=${value}`, "");
+    catch {
+        console.log(`  Open this URL in your browser:\n  ${url}\n`);
     }
-    fs.writeFileSync(envPath, lines.join("\n"), "utf8");
 }
-async function setupApiKey(cwd) {
-    const envPath = path.join(cwd, ".env");
-    const existing = readEnvFile(envPath).get("ORANGESLICE_API_KEY");
-    if (existing) {
-        console.log(`  ✓ API key already configured in .env (${existing.slice(0, 12)}...)\n`);
+async function startDeviceAuth() {
+    const response = await fetch(`${AUTH_API_BASE_URL}/api/orangeslice/auth/start`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" }
+    });
+    const data = (await response.json());
+    if (!response.ok || !data.deviceCode || !data.verificationUrl) {
+        throw new Error(data.error || "Failed to start device authentication.");
+    }
+    return {
+        deviceCode: data.deviceCode,
+        verificationUrl: data.verificationUrl,
+        pollIntervalMs: data.pollIntervalMs && data.pollIntervalMs > 0 ? data.pollIntervalMs : 1000,
+        expiresIn: data.expiresIn && data.expiresIn > 0 ? data.expiresIn : 600
+    };
+}
+async function completeDeviceAuth(deviceCode, pollIntervalMs, expiresIn) {
+    const timeoutAt = Date.now() + expiresIn * 1000;
+    while (Date.now() < timeoutAt) {
+        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+        const response = await fetch(`${AUTH_API_BASE_URL}/api/orangeslice/auth/poll?deviceCode=${encodeURIComponent(deviceCode)}`, {
+            method: "GET",
+            headers: { "Content-Type": "application/json" }
+        });
+        const data = (await response.json());
+        if (data.status === "pending")
+            continue;
+        if (data.status === "approved" && data.apiKey)
+            return data.apiKey;
+        if (data.status === "expired")
+            throw new Error(data.error || "Device code expired.");
+        if (data.status === "consumed")
+            throw new Error(data.error || "Device code already consumed.");
+        if (!response.ok) {
+            throw new Error(data.error || "Failed while waiting for authentication.");
+        }
+    }
+    throw new Error("Timed out waiting for browser authentication.");
+}
+async function setupApiKey(force = false) {
+    const existing = getStoredApiKey();
+    if (!force && existing) {
+        console.log(`  ✓ API key already configured (${maskKey(existing)})\n`);
         return;
     }
-    console.log("  API key required. Get one at: https://www.orangeslice.ai/dashboard/api-keys\n");
-    const key = await prompt("  Paste your API key (osk_...): ");
-    if (!key) {
-        console.log("\n  ⚠ Skipped. Set ORANGESLICE_API_KEY in .env or call configure({ apiKey }) before using the SDK.\n");
+    console.log("  Authenticating with Orange Slice...\n");
+    const start = await startDeviceAuth();
+    openBrowser(start.verificationUrl);
+    console.log("  Browser opened. Complete sign-in there, then return here.\n");
+    const apiKey = await completeDeviceAuth(start.deviceCode, start.pollIntervalMs, start.expiresIn);
+    saveConfigFile({ apiKey });
+    console.log(`  ✓ API key saved to ${CONFIG_PATH}\n`);
+}
+function printHelp() {
+    console.log("Usage:");
+    console.log("  npx orangeslice");
+    console.log("  npx orangeslice login [--force]");
+    console.log("  npx orangeslice logout");
+    console.log("  npx orangeslice auth status\n");
+}
+async function runLogin(args) {
+    const force = args.includes("--force");
+    await setupApiKey(force);
+}
+function runLogout() {
+    const removed = clearConfigFile();
+    if (removed) {
+        console.log(`  ✓ Removed local auth at ${CONFIG_PATH}`);
+    }
+    else {
+        console.log("  No local config found to remove.");
+    }
+    if (process.env.ORANGESLICE_API_KEY) {
+        console.log("  Note: ORANGESLICE_API_KEY env var is still set in this shell.");
+    }
+}
+function runAuthStatus() {
+    const envKey = process.env.ORANGESLICE_API_KEY?.trim() || "";
+    if (envKey) {
+        console.log(`  Authenticated via env var: ${maskKey(envKey)}`);
         return;
     }
-    if (!key.startsWith("osk_")) {
-        console.log("\n  ⚠ Key doesn't start with osk_ — saving anyway. Double-check it's correct.\n");
+    const fileKey = readConfigFile().apiKey?.trim() || "";
+    if (fileKey) {
+        console.log(`  Authenticated via config file (${CONFIG_PATH}): ${maskKey(fileKey)}`);
+        return;
     }
-    writeEnvVar(envPath, "ORANGESLICE_API_KEY", key);
-    console.log(`\n  ✓ API key saved to .env\n`);
+    console.log("  Not authenticated. Run `npx orangeslice login`.");
 }
 async function main() {
+    const args = process.argv.slice(2);
+    const command = args[0];
+    if (command === "login") {
+        await runLogin(args.slice(1));
+        return;
+    }
+    if (command === "logout") {
+        runLogout();
+        return;
+    }
+    if (command === "auth" && args[1] === "status") {
+        runAuthStatus();
+        return;
+    }
+    if (command && (command === "--help" || command === "-h" || command === "help")) {
+        printHelp();
+        return;
+    }
     console.log("\norangeslice\n");
     const docsDir = resolveDocsDir();
     // Copy docs
@@ -194,7 +294,7 @@ async function main() {
     installOrangeslice(cwd);
     console.log("  ✓ Package installed in current directory\n");
     // API key setup
-    await setupApiKey(cwd);
+    await setupApiKey();
     console.log("\nReady - services-style API\n");
     console.log("  import { configure, services } from 'orangeslice';\n");
     console.log("  // Option A: env var (loaded automatically from .env by your framework)");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orangeslice",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "B2B LinkedIn database prospector - 1.15B profiles, 85M companies",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",