@getopencrawl/cli-darwin-arm64 0.3.1 → 0.4.0

package/README.md

@@ -96,8 +96,7 @@ but its tarballs and binaries are public. Review the package allowlist with
 UNLICENSED pending the repository's separate public-license decision.
 
 Prior art: OnePatch's npm/native launcher, device login, automatic refresh and
-background upgrades; Glen's small npm entry point for agents. No query command,
-agent hooks, MCP integration or background daemon is included in this release.
+background upgrades; Glen's small npm entry point for agents.
 
 
 ### Session capture
@@ -107,3 +106,83 @@ After signing in, run `opencrawl collect install` to install Claude Code and Cod
 `opencrawl collect status --json` reports the enrolled identity, queued uploads, last receipt and errors. `collect sync` reconciles active transcripts; `collect flush` retries queued uploads; `collect uninstall` removes OpenCrawl hooks and stops collection while preserving queued data.
 
 Messages, tool arguments/results and attachments are collected with native session IDs and a stable installation ID. System/developer prompts are excluded. The hosted service derives ownership from login. Self-hosted users can supply `OPENCRAWL_SESSIONS_TOKEN` and `--api` for the portable receiver. See [capture architecture and limits](../docs/session-capture.md).
+
+### Optional history import
+
+`collect install` asks terminal users whether to import past Claude Code sessions,
+Codex sessions, both, or skip (the default). Desktop coding sessions use the same
+native transcript stores. A JSON/noninteractive install returns
+`backfill.status=decision_required` with a preview and instructions for the agent
+to ask the user. It never assumes consent. `npm install` itself reads no history.
+
+Agents must show the destination and counts, explain that messages, tool
+arguments/results and available attachments will leave the machine, and wait for
+the user's choice. The setup request alone is not consent to import history.
+
+```sh
+opencrawl collect install --backfill skip  # future collection only
+opencrawl collect backfill --dry-run --json  # local metadata only; no upload
+# Only after the user chooses a source:
+opencrawl collect backfill --harness claude-code --yes
+opencrawl collect backfill --harness codex --yes
+opencrawl collect backfill --harness all --yes
+```
+
+During setup, `collect install --backfill claude-code|codex|all` records the
+user's explicit choice in the invocation and imports immediately; `--backfill
+skip` skips without prompting. `--json` alone never grants approval. Use the
+same `--api` as collection enrollment for preview/import.
+
+Preview reports transcript-file counts and on-disk bytes, not unique sessions
+or upload size. It scans `CLAUDE_CONFIG_DIR/projects` (default `~/.claude/projects`)
+and `CODEX_HOME/{sessions,archived_sessions}` (default `~/.codex/`), including
+Codex `.jsonl.zst` compressed transcripts. Archives expand one at a time into a
+private temporary file, capped at 256 MiB; corrupt or oversized archives report
+an incomplete import and stay on disk. Temporary expanded files are removed. It follows no
+transcript symlinks and does not read conversation content. Import includes
+subagent transcripts in those directories and only records the harness saved
+locally. Cloud-only Claude chats, Cowork VM records, deleted sessions and missing
+attachments cannot be recovered by this importer.
+
+A one-time import reuses capture cursors, owner checks, attachment storage and
+durable receipts. It does not turn on recurring historical scans. Rerun the
+same approved command after an interruption; completed records are skipped.
+Failures return nonzero rather than reporting a complete import. Status still
+shows queued uploads and errors; `collect flush` retries uploads already queued.
+
+### Claude Code cloud
+
+Cloud sessions run on a fresh Linux VM. Local hooks do not transfer. The first
+setup prompt should direct hosted users to their deployment's `/capture/cloud`
+page, which issues a one-year, revocable, upload-only credential and supplies the
+exact setup script. Use a **personal** Claude environment: sessions using that
+credential are attributed to its owner, regardless of who starts them.
+
+Keep Limited/Trusted networking and allow the deployment's API hostname plus
+npm registries. Add `OPENCRAWL_SESSIONS_TOKEN` in Environment variables and append
+the provided script to Setup script. Save and start a fresh session using that
+environment. No local Claude installation is required. Human-only settings and
+a separate setup session are supported. Environment variables are visible to
+commands in that environment; don't paste the credential into the chat or repo.
+
+The installer detects `CLAUDE_CODE_REMOTE=true`, installs Claude hooks only and
+skips systemd. `--harness claude-code --no-background` also selects this explicitly.
+The setup installs the CLI at
+`$HOME/.local/share/opencrawl-cloud/node_modules/.bin/opencrawl`. After a user
+message, tool call and image, `collect status` must report a stored receipt and
+no error. Don't use manual sync as evidence that automatic hooks work. Search
+follows asynchronous indexing, not the upload acknowledgement.
+
+Cloud batches retain the native session UUID and the web session ID from the
+native `remote_session_change` attachment, and mark origin `cloud`. Internal
+prompt snapshots, environment snapshots and repeated tool/MCP listings are
+omitted. Image attachment bytes are stored separately using their digest.
+
+Self-hosted operators use the same protocol: with the configured receiver token,
+POST `/api/sessions/credentials` to obtain an upload-only delegation, store the
+returned token directly in a private file (not a transcript), then configure the
+personal environment above using their HTTPS receiver hostname. DELETE
+`/api/sessions/credentials/<id>` with the receiver token revokes it. The child
+credential cannot search/read, issue credentials or revoke credentials. The
+receiver always binds the operator's fixed tenant/user, including for delegated
+tokens. Changing that fixed identity invalidates old delegations.

package/bin/opencrawl

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/bin/opencrawl
-size: 63480784 bytes
-sha256: f614822b069fdcff24ca1e836a6ddb3c5f77ac8c4beb096ae5f491ada71863a9
+size: 63497296 bytes
+sha256: 7f299aa05bc0afa49ea9389732d5717ef8a2726126027930ddb241a725634b17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getopencrawl/cli-darwin-arm64",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "OpenCrawl binary for darwin/arm64",
   "license": "UNLICENSED",
   "repository": {