jaitus 0.3.18 → 0.3.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jaitus",
-  "version": "0.3.18",
+  "version": "0.3.19",
   "description": "Jaitus — a coding agent in your terminal.",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "test": "node tests/source-sanity.js && node tests/react-build.js && node tests/stalls.js && node tests/clipboard-write.js && node tests/rewind-images.js && node tests/rules.js && node tests/run.js && node tests/commands.js && node tests/login.js && node tests/session.js && node tests/openUrl.js && node tests/ink-tui.js && node tests/tui-render.js && node tests/mouse-e2e.js && node tests/environment.js && node tests/update.js && node tests/service-notices.js && node tests/continuation.js && node tests/steps.js && node tests/files.js && node tests/processes.js && node tests/security.js && node tests/context-budget.js && node tests/context-trim.js && node tests/compaction.js && node tests/copy-clean.js && node tests/parallel-tools.js && node tests/plan-percent.js",
+    "test": "node tests/source-sanity.js && node tests/react-build.js && node tests/stalls.js && node tests/clipboard-write.js && node tests/rewind-images.js && node tests/rules.js && node tests/run.js && node tests/commands.js && node tests/login.js && node tests/session.js && node tests/openUrl.js && node tests/ink-tui.js && node tests/tui-render.js && node tests/mouse-e2e.js && node tests/environment.js && node tests/update.js && node tests/service-notices.js && node tests/continuation.js && node tests/steps.js && node tests/files.js && node tests/processes.js && node tests/security.js && node tests/context-budget.js && node tests/context-trim.js && node tests/compaction.js && node tests/copy-clean.js && node tests/parallel-tools.js && node tests/plan-percent.js && node tests/project-identity.js",
     "preview": "node scripts/tui-preview.js",
     "prepublishOnly": "npm test"
   },

package/src/machine.js

@@ -11,6 +11,7 @@
 //      folder), each restoring the other
 //   n  the address of each physical network adapter (virtual and randomised ones are
 //      skipped: they change by themselves)
+//   r  the first commit of the git project the CLI runs in (and its regular authors, as g)
 //   g  the git identity this computer commits as (global user.email) — the same on
 //      every computer one person sets up, so it recognises the person, not the machine
 //
@@ -154,6 +155,35 @@ function gitIdentity() {
   } catch { return null; }
 }
 
+// Commit authors that are services, not people.
+const BOT_EMAIL = /(\[bot\]|noreply@github\.com$|^actions@|dependabot|renovate|github-actions|@users\.noreply\.gitlab\.com$|^git@)/i;
+
+/**
+ * The project this CLI runs in, if it is a git repository:
+ *   roots   its first commit(s) — the same on every clone, on every computer
+ *   authors the people who commit to it most (last 300 commits), so a person is known by
+ *           the work they come back to even after changing the global git identity
+ * The server treats a project or author seen on many unrelated accounts as public (an
+ * open-source repository cloned by strangers) and links nobody through it.
+ */
+export function projectIdentity(cwd = process.cwd()) {
+  const git = (args) => {
+    try {
+      const r = spawnSync('git', args, { cwd, encoding: 'utf8', timeout: 2000, windowsHide: true });
+      return r.status === 0 ? String(r.stdout || '') : '';
+    } catch { return ''; }
+  };
+  const roots = git(['rev-list', '--max-parents=0', 'HEAD']).split(/\s+/).filter((s) => /^[0-9a-f]{40,64}$/.test(s)).sort().slice(0, 2);
+  const counts = new Map();
+  for (const line of git(['log', '-n', '300', '--format=%ae']).split('\n')) {
+    const e = line.trim().toLowerCase();
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e) || PLACEHOLDER_EMAIL.test(e) || BOT_EMAIL.test(e)) continue;
+    counts.set(e, (counts.get(e) || 0) + 1);
+  }
+  const authors = [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3).map(([e]) => e);
+  return { roots, authors };
+}
+
 /**
  * Where the install id's second copy lives: outside ~/.jaitus, in the OS's app-data
  * folder. Always under os.homedir() (not LOCALAPPDATA / XDG_DATA_HOME), so a test run
@@ -215,6 +245,11 @@ export function machineHeader() {
     if (soft) parts.push(`s=${hash('s', soft)}`);
     const git = gitIdentity();
     if (git) parts.push(`g=${hash('g', git)}`);
+    // r: the project's first commit; its regular authors are git identities like the one
+    // above (same kind, same hash), so they match a git identity seen on another computer.
+    const project = projectIdentity();
+    for (const root of project.roots) parts.push(`r=${hash('r', root)}`);
+    for (const a of project.authors) if (a !== git) parts.push(`g=${hash('g', a)}`);
     if (m && cache.m !== m) writeCache({ ...cache, m, ...(h ? { h } : {}) });
   } catch { /* whatever was gathered */ }
   header = parts.join(',');