@traisetech/autopilot 2.1.0 → 2.1.1

package/CHANGELOG.md

@@ -3,6 +3,35 @@
 All notable changes to this project will be documented in this file.
 This project follows [Semantic Versioning](https://semver.org).
 
+## [2.1.1] - 2026-02-11
+
+### Added
+- **Global Leaderboard Sync**:
+  - New `autopilot leaderboard --sync` command to share productivity metrics with the global community.
+  - Implemented secure, anonymized data transmission (metrics only, no code).
+- **Dynamic Leaderboard Dashboard**:
+  - Completely redesigned `autopilot-docs` leaderboard with real-time analytics.
+  - Real-time aggregation of global commits, focus hours, and active streaks.
+  - Premium glassmorphism UI with live ranking updates.
+
+### Improved
+- **CLI Aesthetics**:
+  - Integrated full ANSI color support for the `logger` utility for more professional output.
+  - Improved visual hierarchy with bold section headers and color-coded status icons.
+- **Diagnostics**:
+  - Enhanced `doctor` command to intelligently check for `credential.helper` validation on HTTPS remotes.
+- **Insights Portability**:
+  - Refined Git log parsing to be more robust across different Git versions and configurations.
+
+### Fixed
+- **Dashboard Stability**:
+  - Fixed "Duplicate Key" warning in the interactive React Ink dashboard.
+  - Added TTY-detection to prevent crashes in non-interactive environments (CI/CD, background).
+  - Fixed ESM/CommonJS compatibility issues using dynamic `import()` for the dashboard.
+- **Test Integrity**:
+  - Implemented `AUTOPILOT_TEST_MODE` bypass for automated dashboard verification.
+  - Fixed cross-test contamination and EBUSY errors on Windows platforms.
+
 ## [2.1.0] - 2026-02-08
 
 ### Added

package/docs/DESIGN_PRINCIPLES.md

@@ -40,19 +40,75 @@ All automation is **reversible** via `autopilot undo`.
 - **AI (Gemini / Grok)** is an assistant, never an authority.
 - AI output must be reviewable, overridable, and optional.
 
+## Privacy & Local-First Design
+
+**Privacy Guarantees:**
+- Your source code **never** leaves your machine
+- No code diffs are transmitted externally
+- No file contents are sent to remote servers
+- AI commit message generation happens with metadata only (file paths, line counts, not actual code)
+
+**Local-First Architecture:**
+- Works 100% offline (except for git push operations)
+- No authentication to external services required
+- All data stored locally in your project
+- Configuration is local and version-controllable
+
 ## Leaderboard & Metrics
 
 - Metrics are derived **only** from local Git activity created by Autopilot.
 - **No raw code, diffs, or file contents are ever transmitted.**
 - Leaderboard data is:
-  - opt-in
+  - opt-in (disabled by default)
   - anonymized or pseudonymous
   - explainable (users know exactly what is counted)
+  - aggregate only (commit counts, focus time, streak days)
+
+**What gets synced (if opted in):**
+- ✅ Commit counts
+- ✅ Focus time duration
+- ✅ Streak days
+- ✅ Anonymized username/identifier
+
+**What never gets synced:**
+- ❌ Source code
+- ❌ File names or paths
+- ❌ Commit messages
+- ❌ Repository names
+- ❌ File diffs or changes
+
+## User Experience Philosophy
+
+**When in Doubt: Pause, Explain, Wait**
+
+- Ambiguous situations should trigger clear, actionable error messages
+- Users should always understand what Autopilot is doing and why
+- Status messages should be informative without being verbose
+- Configuration should have sensible defaults but be fully customizable
+
+**Trust Through Transparency:**
+- Every action Autopilot takes should be logged
+- Users should be able to audit what happened and when
+- The system should explain its decisions in plain language
+- Documentation should be honest about limitations
+
+## Development Guidelines
+
+**For Contributors:**
+- Any feature must pass the "trust test" - would you trust this with your production code?
+- Prefer explicit over implicit behavior
+- Add clear error messages for every failure case
+- Document why, not just what
+- Test edge cases extensively, especially around git state
+
+**For AI Integration:**
+- AI should enhance, not replace, developer judgment
+- All AI suggestions must be reviewable before commit
+- Provide escape hatches for AI-generated content
+- Log AI usage for transparency
+- Allow disabling AI features entirely
 
-## Philosophy
+---
 
-- Autopilot exists to protect developer flow, not replace developer judgment.
-- **When in doubt: pause, explain, wait.**
+*Any feature (including Grok or leaderboards) must pass this test: Does it maintain developer trust, safety, and control?*
 
----
-*Any feature (including Grok or leaderboards) must pass this test.*

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@traisetech/autopilot",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "publishConfig": {
     "access": "public"
   },
@@ -66,4 +66,4 @@
     "prop-types": "^15.8.1",
     "react": "^19.2.4"
   }
-}
+}

package/src/commands/dashboard.mjs

@@ -19,7 +19,7 @@ const e = React.createElement;
 const Dashboard = () => {
   const { exit } = useApp();
   const root = process.cwd();
-  
+
   const [status, setStatus] = useState('loading');
   const [pid, setPid] = useState(null);
   const [lastCommit, setLastCommit] = useState(null);
@@ -34,18 +34,18 @@ const Dashboard = () => {
         // 1. Check process status
         const currentPid = await getRunningPid(root);
         setPid(currentPid);
-        
+
         // 2. Check Paused State
         const stateManager = new StateManager(root);
         if (stateManager.isPaused()) {
-           setStatus('paused');
-           setPausedState(stateManager.getState());
+          setStatus('paused');
+          setPausedState(stateManager.getState());
         } else if (currentPid) {
-           setStatus('running');
-           setPausedState(null);
+          setStatus('running');
+          setPausedState(null);
         } else {
-           setStatus('stopped');
-           setPausedState(null);
+          setStatus('stopped');
+          setPausedState(null);
         }
 
         // 3. Last Commit
@@ -56,7 +56,7 @@ const Dashboard = () => {
         // 4. Pending Files
         const statusObj = await git.getPorcelainStatus(root);
         if (statusObj.ok) {
-           setPendingFiles(statusObj.files);
+          setPendingFiles(statusObj.files);
         }
 
         // 5. Today Stats (Simple count from history)
@@ -126,10 +126,10 @@ const Dashboard = () => {
     e(Box, { flexDirection: "column", marginBottom: 1 },
       e(Text, { underline: true }, `Pending Changes (${pendingFiles.length})`),
       e(Box, { flexDirection: "column" },
-        pendingFiles.length === 0 ? 
+        pendingFiles.length === 0 ?
           e(Text, { color: "gray" }, "No pending changes") :
-          pendingFiles.slice(0, 5).map((f) => 
-            e(Text, { key: f.file, color: "yellow" }, ` ${f.status} ${f.file}`)
+          pendingFiles.slice(0, 5).map((f, idx) =>
+            e(Text, { key: `${f.file}-${idx}`, color: "yellow" }, ` ${f.status} ${f.file}`)
           )
       ),
       pendingFiles.length > 5 && e(Text, { color: "gray" }, ` ...and ${pendingFiles.length - 5} more`)
@@ -143,5 +143,9 @@ const Dashboard = () => {
 };
 
 export default function runDashboard() {
+  if (!process.stdin.isTTY && !process.env.AUTOPILOT_TEST_MODE) {
+    console.error('Error: Dashboard requires an interactive terminal (TTY).');
+    process.exit(1);
+  }
   render(e(Dashboard));
 }

package/src/commands/doctor.js

@@ -13,7 +13,7 @@ const git = require('../core/git');
 const doctor = async () => {
   const repoPath = process.cwd();
   let issues = 0;
-  
+
   logger.section('Autopilot Doctor');
   logger.info('Diagnosing environment...');
 
@@ -50,7 +50,17 @@ const doctor = async () => {
 
     // Check remote type
     if (remoteUrl.startsWith('http')) {
-      logger.warn('Remote uses HTTPS. Ensure credential helper is configured for non-interactive push.');
+      let hasHelper = false;
+      try {
+        const { stdout: helper } = await execa('git', ['config', '--get', 'credential.helper'], { cwd: repoPath });
+        if (helper.trim()) hasHelper = true;
+      } catch (e) { /* ignore */ }
+
+      if (hasHelper) {
+        logger.success('Remote uses HTTPS with credential helper configured.');
+      } else {
+        logger.warn('Remote uses HTTPS. Ensure credential helper is configured for non-interactive push.');
+      }
     } else if (remoteUrl.startsWith('git@') || remoteUrl.startsWith('ssh://')) {
       logger.success('Remote uses SSH (recommended).');
     } else {
@@ -102,8 +112,8 @@ const doctor = async () => {
         logger.success('Branch is up to date with remote.');
       }
     } else {
-       // Could be no upstream configured, which is fine for local-only initially
-       logger.info('Could not check remote status (upstream might not be set).');
+      // Could be no upstream configured, which is fine for local-only initially
+      logger.info('Could not check remote status (upstream might not be set).');
     }
   } catch (error) {
     logger.info('Skipping remote status check.');

package/src/commands/insights.js

@@ -6,86 +6,52 @@ const { createObjectCsvWriter } = require('csv-writer');
 
 async function getGitStats(repoPath) {
   try {
-    // Get commit log with stats
-    // We use custom delimiters to safely parse multi-line bodies and stats
     const { stdout } = await git.runGit(repoPath, [
       'log',
-      '--pretty=format:====COMMIT====%n%H|%an|%ad|%s|%b%n====BODY_END====',
+      '--pretty=format:===C===%H|%an|%ad|%s|%b===E===',
       '--date=iso',
       '--numstat'
     ]);
 
+    if (!stdout) return [];
+
     const commits = [];
-    const rawCommits = stdout.split('====COMMIT====');
+    const rawCommits = stdout.split('===C===').filter(Boolean);
 
     for (const raw of rawCommits) {
-      if (!raw.trim()) continue;
-
-      const [metadataPart, statsPart] = raw.split('====BODY_END====');
-      if (!metadataPart) continue;
-
-      const lines = metadataPart.trim().split('\n');
-      const header = lines[0]; // hash|author|date|subject|body_start...
-      // The body might continue on next lines if %b has newlines.
-      // Actually, my format puts %b starting on the first line.
-      // But let's be safer: split header by | first 4 times only.
-      
-      // header format: hash|author|date|subject|rest...
-      // But wait, if body has newlines, "lines" array has them.
-      
-      // Let's reconstruct the full message body
-      const fullMetadata = metadataPart.trim();
-      const firstPipe = fullMetadata.indexOf('|');
-      const secondPipe = fullMetadata.indexOf('|', firstPipe + 1);
-      const thirdPipe = fullMetadata.indexOf('|', secondPipe + 1);
-      const fourthPipe = fullMetadata.indexOf('|', thirdPipe + 1);
-      
-      if (firstPipe === -1 || fourthPipe === -1) continue;
-
-      const hash = fullMetadata.substring(0, firstPipe);
-      const author = fullMetadata.substring(firstPipe + 1, secondPipe);
-      const dateStr = fullMetadata.substring(secondPipe + 1, thirdPipe);
-      const subject = fullMetadata.substring(thirdPipe + 1, fourthPipe);
-      const body = fullMetadata.substring(fourthPipe + 1);
-
-      // TRUST VERIFICATION
-      // Check for Autopilot trailers
-      if (!body.includes('Autopilot-Commit: true')) {
-        continue; // Skip non-autopilot commits
-      }
+      const [metadataPlusBody, ...statsParts] = raw.split('===E===');
+      if (!metadataPlusBody) continue;
+
+      const [hash, author, dateStr, subject, ...bodyParts] = metadataPlusBody.trim().split('|');
+      const body = bodyParts.join('|'); // Rejoin in case body had pipes
 
-      // TODO: Verify Signature (Optional but recommended for strict mode)
-      // const signature = extractTrailer(body, 'Autopilot-Signature');
-      // if (!verifySignature(signature, ...)) continue;
+      // Trust Verification: Only process autopilot commits
+      if (!body.includes('Autopilot-Commit: true')) continue;
 
       const commit = {
         hash,
         author,
         date: new Date(dateStr),
-        message: subject + '\n' + body,
+        message: `${subject}\n${body}`.trim(),
         files: [],
         additions: 0,
         deletions: 0
       };
 
-      // Parse Stats
-      if (statsPart) {
-        const statLines = statsPart.trim().split('\n');
-        for (const statLine of statLines) {
-          if (!statLine.trim()) continue;
-          const parts = statLine.split(/\s+/);
-          if (parts.length >= 3) {
-            const additions = parseInt(parts[0]) || 0;
-            const deletions = parseInt(parts[1]) || 0;
-            const file = parts.slice(2).join(' '); // handle spaces in filenames
-            
+      const statsText = statsParts.join('===E===').trim();
+      if (statsText) {
+        const statLines = statsText.split('\n');
+        for (const line of statLines) {
+          const [add, del, file] = line.trim().split(/\s+/);
+          if (file) {
+            const additions = parseInt(add) || 0;
+            const deletions = parseInt(del) || 0;
             commit.files.push({ file, additions, deletions });
             commit.additions += additions;
             commit.deletions += deletions;
           }
         }
       }
-
       commits.push(commit);
     }
 
@@ -130,7 +96,7 @@ function calculateMetrics(commits) {
     // Time analysis
     const dateStr = c.date.toISOString().split('T')[0];
     const hour = c.date.getHours();
-    
+
     stats.commitsByDay[dateStr] = (stats.commitsByDay[dateStr] || 0) + 1;
     stats.commitsByHour[hour] = (stats.commitsByHour[hour] || 0) + 1;
     dates.add(dateStr);
@@ -145,7 +111,7 @@ function calculateMetrics(commits) {
   // Calculate Averages
   stats.totalFilesCount = stats.totalFilesChanged.size;
   stats.quality.avgLength = commits.length ? Math.round(totalMessageLength / commits.length) : 0;
-  
+
   // Calculate Score (0-100)
   // 40% Conventional, 30% Message Length (>30 chars), 30% Consistency
   const convScore = commits.length ? (stats.quality.conventional / commits.length) * 40 : 0;
@@ -165,7 +131,7 @@ function calculateMetrics(commits) {
       currentStreak = 1;
     } else {
       const diffTime = Math.abs(d - lastDate);
-      const diffDays = Math.ceil(diffTime / (1000 * 60 * 60 * 24)); 
+      const diffDays = Math.ceil(diffTime / (1000 * 60 * 60 * 24));
       if (diffDays === 1) {
         currentStreak++;
       } else {
@@ -176,12 +142,12 @@ function calculateMetrics(commits) {
     lastDate = d;
   });
   stats.streak.max = Math.max(maxStreak, currentStreak);
-  
+
   // Check if streak is active (last commit today or yesterday)
   const today = new Date().toISOString().split('T')[0];
   const yesterday = new Date(Date.now() - 86400000).toISOString().split('T')[0];
   const lastCommitDate = sortedDates[sortedDates.length - 1];
-  
+
   if (lastCommitDate === today || lastCommitDate === yesterday) {
     stats.streak.current = currentStreak;
   } else {
@@ -217,10 +183,10 @@ async function insights(options) {
     console.log(`Lines Added:      ${metrics.totalAdditions}`);
     console.log(`Lines Deleted:    ${metrics.totalDeletions}`);
     console.log(`Current Streak:   ${metrics.streak.current} days (Max: ${metrics.streak.max})`);
-    
+
     // Find most productive hour
     const productiveHour = Object.entries(metrics.commitsByHour)
-      .sort(([,a], [,b]) => b - a)[0];
+      .sort(([, a], [, b]) => b - a)[0];
     console.log(`Peak Productivity: ${productiveHour ? productiveHour[0] + ':00' : 'N/A'}`);
 
     console.log('');
@@ -241,12 +207,12 @@ async function insights(options) {
       const csvWriter = createObjectCsvWriter({
         path: csvPath,
         header: [
-          {id: 'hash', title: 'Hash'},
-          {id: 'date', title: 'Date'},
-          {id: 'author', title: 'Author'},
-          {id: 'message', title: 'Message'},
-          {id: 'additions', title: 'Additions'},
-          {id: 'deletions', title: 'Deletions'}
+          { id: 'hash', title: 'Hash' },
+          { id: 'date', title: 'Date' },
+          { id: 'author', title: 'Author' },
+          { id: 'message', title: 'Message' },
+          { id: 'additions', title: 'Additions' },
+          { id: 'deletions', title: 'Deletions' }
         ]
       });
 

package/src/commands/leaderboard.js

@@ -2,7 +2,6 @@ const fs = require('fs-extra');
 const path = require('path');
 const { getGitStats, calculateMetrics } = require('./insights');
 const logger = require('../utils/logger');
-const open = require('open');
 const crypto = require('crypto');
 
 // Default API URL (can be overridden by config)
@@ -16,7 +15,7 @@ async function calculateFocusTime(repoPath) {
     const content = await fs.readFile(logPath, 'utf8');
     const lines = content.split('\n').filter(l => l.trim());
     let totalMs = 0;
-    
+
     for (const line of lines) {
       try {
         const entry = JSON.parse(line);
@@ -27,7 +26,7 @@ async function calculateFocusTime(repoPath) {
         // ignore bad lines
       }
     }
-    
+
     return Math.round(totalMs / 60000); // minutes
   } catch (error) {
     logger.warn(`Failed to parse autopilot.log: ${error.message}`);
@@ -59,15 +58,15 @@ async function syncLeaderboard(apiUrl, options) {
     }
 
     const metrics = calculateMetrics(commits);
-    
+
     // Get user info (git config)
     const git = require('../core/git');
     const { stdout: username } = await git.runGit(repoPath, ['config', 'user.name']);
     const { stdout: email } = await git.runGit(repoPath, ['config', 'user.email']);
-    
+
     const userEmail = email.trim() || 'unknown';
     const userName = username.trim() || 'Anonymous';
-    
+
     // Anonymize ID using hash
     const userId = crypto.createHash('sha256').update(userEmail).digest('hex').substring(0, 12);
 
@@ -87,7 +86,7 @@ async function syncLeaderboard(apiUrl, options) {
 
     logger.info(`Syncing stats for ${stats.username} (ID: ${userId})...`);
     logger.info('Note: Only metrics are shared. No code or file contents are transmitted.');
-    
+
     const response = await fetch(`${apiUrl}/api/leaderboard/sync`, {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },

package/src/core/git.js

@@ -42,13 +42,14 @@ async function getPorcelainStatus(root) {
   try {
     const { stdout } = await execa('git', ['status', '--porcelain'], { cwd: root });
     const raw = stdout.trim();
-    
+
     if (!raw) {
       return { ok: true, files: [], raw: '' };
     }
 
     const files = raw
       .split(/\r?\n/)
+      .filter(line => line.trim().length > 0)
       .map(line => {
         const status = line.slice(0, 2).trim();
         const file = line.slice(3).trim();
@@ -134,7 +135,7 @@ async function isRemoteAhead(root) {
 
     const { stdout } = await execa('git', ['rev-list', '--left-right', '--count', `${branch}...origin/${branch}`], { cwd: root });
     const [aheadCount, behindCount] = stdout.trim().split(/\s+/).map(Number);
-    
+
     return {
       ok: true,
       ahead: aheadCount > 0,
@@ -259,10 +260,10 @@ async function isMergeInProgress(root) {
       'REVERT_HEAD',
       'BISECT_LOG'
     ];
-    
+
     // Check if .git/rebase-merge or .git/rebase-apply exists (directory check)
-    if (await fs.pathExists(path.join(gitDir, 'rebase-merge')) || 
-        await fs.pathExists(path.join(gitDir, 'rebase-apply'))) {
+    if (await fs.pathExists(path.join(gitDir, 'rebase-merge')) ||
+      await fs.pathExists(path.join(gitDir, 'rebase-apply'))) {
       return true;
     }
 

package/src/index.js

@@ -8,7 +8,6 @@ const { doctor } = require('./commands/doctor');
 const { insights } = require('./commands/insights');
 const pauseCommand = require('./commands/pause');
 const resumeCommand = require('./commands/resume');
-const runDashboard = require('./commands/dashboard');
 const { leaderboard } = require('./commands/leaderboard');
 const pkg = require('../package.json');
 
@@ -65,7 +64,14 @@ function run() {
   program
     .command('dashboard')
     .description('View real-time Autopilot dashboard')
-    .action(runDashboard);
+    .action(async () => {
+      try {
+        const { default: runDashboard } = await import('./commands/dashboard.mjs');
+        runDashboard();
+      } catch (error) {
+        console.error('Failed to launch dashboard:', error);
+      }
+    });
 
   program
     .command('doctor')

package/src/utils/logger.js

@@ -18,7 +18,7 @@ const logger = {
    * @param {string} message - Message to log
    */
   info: (message) => {
-    console.log(`ℹ️  ${message}`);
+    console.log(`${logger.colors.cyan('ℹ️')}  ${message}`);
   },
 
   /**
@@ -27,7 +27,7 @@ const logger = {
    */
   debug: (message) => {
     if (process.env.DEBUG) {
-      console.log(`🔍 ${message}`);
+      console.log(`${logger.colors.blue('🔍')} ${message}`);
     }
   },
 
@@ -36,7 +36,7 @@ const logger = {
    * @param {string} message - Message to log
    */
   success: (message) => {
-    console.log(`✅ ${message}`);
+    console.log(`${logger.colors.green('✅')} ${message}`);
   },
 
   /**
@@ -44,7 +44,7 @@ const logger = {
    * @param {string} message - Message to log
    */
   warn: (message) => {
-    console.warn(`⚠️  ${message}`);
+    console.warn(`${logger.colors.yellow('⚠️')}  ${message}`);
   },
 
   /**
@@ -52,7 +52,7 @@ const logger = {
    * @param {string} message - Message to log
    */
   error: (message) => {
-    console.error(`❌ ${message}`);
+    console.error(`${logger.colors.red('❌')} ${message}`);
   },
 
   /**
@@ -60,8 +60,8 @@ const logger = {
    * @param {string} title - Section title
    */
   section: (title) => {
-    console.log(`\n${title}`);
-    console.log('─'.repeat(50));
+    console.log(`\n${logger.colors.bold(logger.colors.cyan(title))}`);
+    console.log(logger.colors.cyan('─'.repeat(50)));
   },
 };