embertime 0.1.3 → 0.1.4

package/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "ember",
   "description": "Ember coding-time tracker: records Claude Code sessions, prompts and file edits as anonymised Ember heartbeats (no prompt text, file contents or paths are sent).",
-  "version": "0.1.3"
+  "version": "0.1.4"
 }

package/cli.mjs

@@ -193,6 +193,7 @@ function uninstall(o) {
 const HELP = `embertime: track coding time across editors and AI agents
 
   npx embertime setup --key <ember_key> [--api-url <url>] [--vsix <file>] [--skip-editors]
+  npx embertime setup                     re-run with the key you already saved
   npx embertime status
   npx embertime uninstall [--purge]
 

package/ember-hook.mjs

@@ -9,7 +9,8 @@
 //   * never writes to stdout for Claude Code / Codex (they may interpret it); for
 //     Cursor it prints the minimal JSON reply Cursor expects. Always exits 0
 //   * never sends file contents, raw paths or prompt text: files are reduced
-//     to sha1(absolute path) and the project to the git root's basename
+//     to an HMAC of the absolute path, keyed with a random per-machine secret
+//     (~/.ember/entity.key), and the project to the git root's basename
 //   * heartbeats are appended to ~/.ember/queue.jsonl before any network I/O,
 //     so nothing is lost when the server is down
 //
@@ -21,7 +22,7 @@ import path from 'node:path';
 import crypto from 'node:crypto';
 import { fileURLToPath } from 'node:url';
 
-export const VERSION = '0.1.3';
+export const VERSION = '0.1.4';
 export const AGENTS = ['claude-code', 'codex', 'cursor-agent'];
 
 /** Events whose heartbeats are throttled: they fire on every tool call or file edit. */
@@ -59,6 +60,7 @@ function paths(home) {
     state: path.join(home, 'hook-state.json'),
     log: path.join(home, 'hook.log'),
     lastError: path.join(home, 'last_error'),
+    entityKey: path.join(home, 'entity.key'),
   };
 }
 
@@ -409,8 +411,57 @@ export function extractFilePath(toolInput, cwd) {
   return path.resolve(cwd || process.cwd(), p);
 }
 
-export function sha1(text) {
-  return crypto.createHash('sha1').update(text).digest('hex');
+/**
+ * File identity sent as `entity`: HMAC-SHA256 of the absolute path under the
+ * per-machine key, cut to the 40 hex characters the server accepts. A plain hash
+ * of a path could be reversed by guessing likely paths; without the key it can't.
+ */
+export function entityHash(key, file) {
+  return crypto.createHmac('sha256', key).update(file).digest('hex').slice(0, 40);
+}
+
+const ENTITY_KEY_RE = /^[a-f0-9]{64}$/;
+
+function readEntityKey(file) {
+  try {
+    const key = fs.readFileSync(file, 'utf8').trim();
+    return ENTITY_KEY_RE.test(key) ? key : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * The random key shared by every collector on this machine (mode 0600), created
+ * on first use. Concurrent first runs agree on one key: the first hard link wins.
+ * If it can't be stored, a one-off key is used: entities then differ between runs,
+ * which only weakens de-duplication, never privacy.
+ */
+export function loadEntityKey(home) {
+  const file = paths(home).entityKey;
+  const existing = readEntityKey(file);
+  if (existing) return existing;
+  const key = crypto.randomBytes(32).toString('hex');
+  const tmp = `${file}.${process.pid}.${crypto.randomBytes(4).toString('hex')}.tmp`;
+  try {
+    fs.mkdirSync(home, { recursive: true, mode: 0o700 });
+    fs.writeFileSync(tmp, `${key}\n`, { mode: 0o600 });
+    try {
+      fs.linkSync(tmp, file);
+      return key;
+    } catch (e) {
+      if (e.code !== 'EEXIST') throw e;
+      const winner = readEntityKey(file);
+      if (winner) return winner;
+      fs.renameSync(tmp, file); // existing file is corrupt: replace it
+      return key;
+    }
+  } catch (e) {
+    log(home, 'warn', `could not store entity key: ${e.message}`);
+    return key;
+  } finally {
+    fs.rmSync(tmp, { force: true });
+  }
 }
 
 export function parsePayload(text) {
@@ -427,7 +478,7 @@ export function parsePayload(text) {
  * Build exactly one heartbeat from a hook payload. Only derived, non-sensitive
  * fields are copied: never prompt text, tool output, file contents or paths.
  */
-export function buildHeartbeat(payload, { agent, now = Date.now() / 1000, env = process.env } = {}) {
+export function buildHeartbeat(payload, { agent, now = Date.now() / 1000, env = process.env, entityKey } = {}) {
   // Claude Code and Codex send `cwd`; Cursor sends `workspace_roots` (and sets CURSOR_PROJECT_DIR).
   const roots = Array.isArray(payload.workspace_roots) ? payload.workspace_roots.filter((r) => typeof r === 'string' && r) : [];
   const cwd =
@@ -450,7 +501,7 @@ export function buildHeartbeat(payload, { agent, now = Date.now() / 1000, env =
     extractFilePath(payload.tool_input, cwd) ||
     (typeof payload.file_path === 'string' && payload.file_path.trim() ? path.resolve(cwd, payload.file_path.trim()) : undefined);
   if (file) {
-    hb.entity = sha1(file);
+    hb.entity = entityHash(entityKey ?? loadEntityKey(emberHome(env)), file);
     const language = languageForPath(file);
     if (language) hb.language = language;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "embertime",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Connect VS Code, Cursor, Windsurf, Claude Code and Codex to Ember in one command. Tracks coding time, never code or prompts.",
   "type": "module",
   "bin": {
@@ -9,6 +9,7 @@
   "files": [
     "cli.mjs",
     "editors.mjs",
+    "postinstall.mjs",
     "ember-hook.mjs",
     "install.mjs",
     "hooks",
@@ -30,7 +31,8 @@
     "heatmap"
   ],
   "scripts": {
-    "test": "node --test test/*.test.mjs"
+    "test": "node --test test/*.test.mjs",
+    "postinstall": "node postinstall.mjs"
   },
   "repository": {
     "type": "git",

package/postinstall.mjs

@@ -0,0 +1,20 @@
+// Runs after `npm install -g embertime` (and upgrades). If Ember was already set
+// up on this machine, refresh the hook copy in ~/.ember/agent-hook so agents run
+// the new version straight away. Your key in ~/.ember/config.json is untouched.
+// Best effort: it never fails the install and does nothing on a fresh machine.
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+try {
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  const dest = path.join(process.env.EMBER_HOME || path.join(os.homedir(), '.ember'), 'agent-hook');
+  if (fs.existsSync(path.join(dest, 'ember-hook.mjs'))) {
+    for (const f of ['ember-hook.mjs', 'install.mjs', 'package.json']) fs.copyFileSync(path.join(here, f), path.join(dest, f));
+    console.log('embertime: updated the hook in ~/.ember/agent-hook (your key is unchanged).');
+  }
+} catch {
+  /* never block an install */
+}