unfairly 0.2.0 → 0.5.0

package/dist/cmd/setup.js

@@ -0,0 +1,151 @@
+import { browserAuthFlow } from "../auth/browser-flow.js";
+import { setToken } from "../sync/credentials.js";
+import { writeShellEnv } from "../hosts/shell-env.js";
+import { configureCodex } from "../hosts/codex.js";
+import { configureClaudeCode, } from "../hosts/claude-code.js";
+const DEFAULT_API = "https://app.unfairly.ai";
+/**
+ * `unfairly setup` — one-shot agent host installer.
+ *
+ *  1. Browser OAuth → mint mcp_* token, cache in keychain.
+ *  2. Append/replace a sentinel-marked block in the user's shell rcfile
+ *     (~/.zshenv on zsh, ~/.bash_profile on bash) with UNFAIRLY_MCP_TOKEN
+ *     + UNFAIRLY_TOKEN exports.
+ *  3. Patch ~/.codex/config.toml with [mcp_servers.unfairly] including
+ *     bearer_token_env_var. Skips silently if Codex isn't installed.
+ *  4. Register with Claude Code via `claude mcp add` if the binary is
+ *     in PATH. Non-destructive — tolerates "already exists" as success.
+ *  5. Verify the new token works by calling /api/mcp with it. If the
+ *     handshake fails, print clear remediation instructions instead of
+ *     declaring victory.
+ *
+ * Idempotent — safe to re-run any time. Each write replaces in place
+ * rather than duplicating.
+ */
+export async function runSetup() {
+    const apiUrl = process.env.UNFAIRLY_API_URL ?? DEFAULT_API;
+    console.error("✦ unfairly setup");
+    console.error("");
+    // Step 1: browser auth
+    console.error("[1/4] Authorizing in browser...");
+    const token = await browserAuthFlow(apiUrl, { tokenName: "unfairly setup" });
+    if (!token) {
+        console.error("  ✗ Browser flow timed out or was cancelled. Run `unfairly setup` again.");
+        process.exit(1);
+    }
+    await setToken(token);
+    console.error("  ✓ Token minted and cached in keychain");
+    console.error("");
+    // Step 2: shell env
+    console.error("[2/4] Writing shell config...");
+    const env = await writeShellEnv(token);
+    if (env.shell === "unknown") {
+        console.error("  ⚠ Couldn't detect your shell ($SHELL is empty or non-zsh/bash).");
+        console.error("    Add this to your shell config manually:");
+        console.error(`    export UNFAIRLY_MCP_TOKEN=${token}`);
+    }
+    else {
+        console.error(`  ✓ ${env.path} (${env.action}) [${env.shell}]`);
+    }
+    console.error("");
+    // Step 3: hosts
+    console.error("[3/4] Configuring agent hosts...");
+    const codex = await configureCodex(apiUrl);
+    console.error(`  ${formatCodex(codex)}`);
+    const cc = await configureClaudeCode(apiUrl);
+    console.error(`  ${formatClaudeCode(cc)}`);
+    console.error("");
+    // Step 4: verify
+    console.error("[4/4] Verifying token works against /api/mcp...");
+    const verified = await verifyToken(apiUrl, token);
+    if (verified.ok) {
+        console.error("  ✓ MCP handshake succeeded");
+    }
+    else {
+        console.error(`  ✗ MCP handshake FAILED — ${verified.message}`);
+        console.error("    The token was saved, but something is wrong. Check that you signed in");
+        console.error("    as an internal-team member (anyone outside the allowlist gets denied).");
+        process.exit(2);
+    }
+    console.error("");
+    // Next steps
+    console.error("✓ Setup complete.");
+    console.error("");
+    console.error("Next:");
+    console.error("  1. Open a NEW terminal (existing shells don't have $UNFAIRLY_MCP_TOKEN yet).");
+    if (codex.status === "configured" || cc.status === "configured") {
+        console.error("  2. Restart any running agent host (Codex, Claude Code) so it reloads the MCP config.");
+        console.error("  3. Send any prompt — the agent will auto-fire `enter_org` and show your vaults.");
+    }
+    else {
+        console.error("  2. Install Codex or Claude Code, then re-run `unfairly setup` to wire them up.");
+    }
+    console.error("");
+    console.error("Optional — pull all vaults to local markdown for fast filesystem reads:");
+    console.error("  cd <your-workspace> && unfairly init");
+}
+function formatCodex(r) {
+    switch (r.status) {
+        case "configured":
+            return `✓ Codex (${r.path}) — ${r.action}`;
+        case "not-installed":
+            return `· Codex not detected at ${r.path} (skipped — install Codex and re-run if you want it)`;
+        case "error":
+            return `✗ Codex — ${r.message}`;
+    }
+}
+function formatClaudeCode(r) {
+    switch (r.status) {
+        case "configured":
+            return `✓ Claude Code — ${r.message}`;
+        case "already-registered":
+            return `· Claude Code — ${r.message}`;
+        case "not-installed":
+            return "· Claude Code CLI not detected (skipped)";
+        case "error":
+            return `✗ Claude Code — ${r.message}`;
+    }
+}
+/**
+ * Hit /api/mcp with the new token to confirm the full chain works:
+ * token row written, /api/mcp accepts it, handshake completes.
+ *
+ * We do an MCP `initialize` — that's the cheapest call that exercises
+ * the auth path end-to-end without touching DB-heavy tools.
+ */
+async function verifyToken(apiUrl, token) {
+    const url = `${apiUrl.replace(/\/$/, "")}/api/mcp`;
+    try {
+        const res = await fetch(url, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "Content-Type": "application/json",
+                Accept: "application/json, text/event-stream",
+            },
+            body: JSON.stringify({
+                jsonrpc: "2.0",
+                id: 1,
+                method: "initialize",
+                params: {
+                    protocolVersion: "2024-11-05",
+                    capabilities: {},
+                    clientInfo: { name: "unfairly-setup", version: "0.3.0" },
+                },
+            }),
+        });
+        if (res.status !== 200) {
+            return { ok: false, message: `HTTP ${res.status}` };
+        }
+        const text = await res.text();
+        if (!text.includes('"result"') || !text.includes("protocolVersion")) {
+            return { ok: false, message: "unexpected response shape" };
+        }
+        return { ok: true };
+    }
+    catch (e) {
+        const err = e;
+        return { ok: false, message: err.message };
+    }
+}
+//# sourceMappingURL=setup.js.map

package/dist/cmd/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/cmd/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACL,mBAAmB,GAEpB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,WAAW,CAAC;IAE3D,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,uBAAuB;IACvB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CACX,0EAA0E,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,oBAAoB;IACpB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,mEAAmE,CACpE,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,gBAAgB;IAChB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,iBAAiB;IACjB,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;QACF,OAAO,CAAC,KAAK,CACX,4EAA4E,CAC7E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,aAAa;IACb,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,KAAK,CACX,gFAAgF,CACjF,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,EAAE,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAChE,OAAO,CAAC,KAAK,CACX,wFAAwF,CACzF,CAAC;QACF,OAAO,CAAC,KAAK,CACX,mFAAmF,CACpF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACzF,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,CAAc;IACjC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7C,KAAK,eAAe;YAClB,OAAO,2BAA2B,CAAC,CAAC,IAAI,sDAAsD,CAAC;QACjG,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAmB;IAC3C,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,oBAAoB;YACvB,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,eAAe;YAClB,OAAO,0CAA0C,CAAC;QACpD,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CACxB,MAAc,EACd,KAAa;IAEb,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;aAC9C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE;iBACzD;aACF,CAAC;SACH,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAU,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/cmd/status.d.ts

@@ -0,0 +1,2 @@
+export declare function runStatus(): Promise<void>;
+//# sourceMappingURL=status.d.ts.map

package/dist/cmd/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/cmd/status.ts"],"names":[],"mappings":"AAIA,wBAAsB,SAAS,kBAqB9B"}

package/dist/cmd/status.js

@@ -23,3 +23,4 @@ export async function runStatus() {
         console.log(`${slug.padEnd(20)} pulled ${pulled} · pushed ${pushed} · modified ${modified}`);
     }
 }
+//# sourceMappingURL=status.js.map

package/dist/cmd/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/cmd/status.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG;oBAAE,QAAQ,EAAE,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC;QAC3C,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,MAAM,aAAa,MAAM,eAAe,QAAQ,EAAE,CAChF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cmd/watch.d.ts

@@ -0,0 +1,2 @@
+export declare function runWatch(): Promise<void>;
+//# sourceMappingURL=watch.d.ts.map

package/dist/cmd/watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/cmd/watch.ts"],"names":[],"mappings":"AAIA,wBAAsB,QAAQ,kBA0B7B"}

package/dist/cmd/watch.js

@@ -23,3 +23,4 @@ export async function runWatch() {
         .on("add", debouncePush);
     await new Promise(() => { }); // keep alive until SIGINT
 }
+//# sourceMappingURL=watch.js.map

package/dist/cmd/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/cmd/watch.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,mBAAmB,CAAC,CAAC;IAEhD,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,CACpC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CACzC,CAAC;QACJ,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,QAAQ;SACL,KAAK,CAAC,GAAG,EAAE;QACV,OAAO,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,SAAS,CAAC;QACxD,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,IAAI;KACjB,CAAC;SACD,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;SAC1B,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAE3B,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B;AACzD,CAAC"}

package/dist/hosts/claude-code.d.ts

@@ -0,0 +1,23 @@
+export type ClaudeCodeResult = {
+    status: "configured";
+    message: string;
+} | {
+    status: "already-registered";
+    message: string;
+} | {
+    status: "not-installed";
+} | {
+    status: "error";
+    message: string;
+};
+/**
+ * Register Unfairly with Claude Code via `claude mcp add`. Non-destructive:
+ * if a server named `unfairly` already exists we don't remove it (the user
+ * may have a custom config). Instead we tolerate the "already exists" error
+ * and report `already-registered`.
+ *
+ * Skips silently if the `claude` binary is not in PATH (most CLI users have
+ * one host installed, not both).
+ */
+export declare function configureClaudeCode(apiUrl: string): Promise<ClaudeCodeResult>;
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/hosts/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/hosts/claude-code.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}

package/dist/hosts/claude-code.js

@@ -0,0 +1,44 @@
+import { spawnSync } from "node:child_process";
+/**
+ * Register Unfairly with Claude Code via `claude mcp add`. Non-destructive:
+ * if a server named `unfairly` already exists we don't remove it (the user
+ * may have a custom config). Instead we tolerate the "already exists" error
+ * and report `already-registered`.
+ *
+ * Skips silently if the `claude` binary is not in PATH (most CLI users have
+ * one host installed, not both).
+ */
+export async function configureClaudeCode(apiUrl) {
+    const url = `${apiUrl.replace(/\/$/, "")}/api/mcp`;
+    const result = spawnSync("claude", ["mcp", "add", "unfairly", "--transport", "http", url], { encoding: "utf-8" });
+    if (result.error) {
+        const e = result.error;
+        if (e.code === "ENOENT") {
+            return { status: "not-installed" };
+        }
+        return { status: "error", message: e.message };
+    }
+    const stderr = (result.stderr ?? "").toString();
+    const stdout = (result.stdout ?? "").toString();
+    const combined = `${stderr}\n${stdout}`.toLowerCase();
+    if (result.status === 0) {
+        return {
+            status: "configured",
+            message: "registered (Claude Code will pop OAuth on first call)",
+        };
+    }
+    // Claude CLI exits non-zero with a stderr message containing "already
+    // exists" (or similar) when the server name is taken. Don't destroy the
+    // user's existing config — surface as already-registered.
+    if (/already exists|already configured|duplicate/.test(combined)) {
+        return {
+            status: "already-registered",
+            message: "already registered (left as-is)",
+        };
+    }
+    return {
+        status: "error",
+        message: stderr.trim() || `claude mcp add exited ${result.status}`,
+    };
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/hosts/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/hosts/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAQ/C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc;IAEd,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;IACnD,MAAM,MAAM,GAAG,SAAS,CACtB,QAAQ,EACR,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,EACtD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,CAAC,KAA8B,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,uDAAuD;SACjE,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,0DAA0D;IAC1D,IACE,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,iCAAiC;SAC3C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,yBAAyB,MAAM,CAAC,MAAM,EAAE;KACnE,CAAC;AACJ,CAAC"}

package/dist/hosts/codex.d.ts

@@ -0,0 +1,39 @@
+export type CodexResult = {
+    status: "configured";
+    path: string;
+    action: "created" | "appended" | "replaced";
+} | {
+    status: "not-installed";
+    path: string;
+} | {
+    status: "error";
+    path: string;
+    message: string;
+};
+/**
+ * Build the canonical [mcp_servers.unfairly] block. We own this whole
+ * section — anything inside it gets overwritten on re-runs.
+ */
+export declare function buildCodexBlock(apiUrl: string): string;
+/**
+ * Strip ALL existing `[mcp_servers.unfairly]` blocks from a TOML string.
+ * "Block" = the section header through (but not including) the next
+ * top-level `[...]` table header at column 0, or end-of-file. This also
+ * removes any trailing blank lines we previously left.
+ *
+ * Robust against: duplicate blocks from prior bad runs, CRLF input,
+ * blocks at end-of-file with no trailing newline.
+ */
+export declare function stripUnfairlyBlocks(toml: string): string;
+/**
+ * Patch ~/.codex/config.toml to register the Unfairly MCP server with
+ * bearer-token wiring. Idempotent: removes any existing managed block(s)
+ * first, then appends one canonical block. Safe against duplicate sections
+ * left over from prior bad runs.
+ *
+ * If ~/.codex/config.toml does not exist, returns {status: "not-installed"}
+ * — don't create a Codex config out of thin air for a user who may not
+ * have Codex installed.
+ */
+export declare function configureCodex(apiUrl: string): Promise<CodexResult>;
+//# sourceMappingURL=codex.d.ts.map

package/dist/hosts/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/hosts/codex.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,GACnF;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAIvD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmBxD;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAiDzE"}

package/dist/hosts/codex.js

@@ -0,0 +1,97 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const SECTION_HEADER = "[mcp_servers.unfairly]";
+/**
+ * Build the canonical [mcp_servers.unfairly] block. We own this whole
+ * section — anything inside it gets overwritten on re-runs.
+ */
+export function buildCodexBlock(apiUrl) {
+    const url = `${apiUrl.replace(/\/$/, "")}/api/mcp`;
+    return [
+        SECTION_HEADER,
+        `url = "${url}"`,
+        `bearer_token_env_var = "UNFAIRLY_MCP_TOKEN"`,
+    ].join("\n");
+}
+/**
+ * Strip ALL existing `[mcp_servers.unfairly]` blocks from a TOML string.
+ * "Block" = the section header through (but not including) the next
+ * top-level `[...]` table header at column 0, or end-of-file. This also
+ * removes any trailing blank lines we previously left.
+ *
+ * Robust against: duplicate blocks from prior bad runs, CRLF input,
+ * blocks at end-of-file with no trailing newline.
+ */
+export function stripUnfairlyBlocks(toml) {
+    // Normalize CRLF for matching; we'll use the same normalized form for
+    // output. (Codex writes LF on macOS / Linux anyway.)
+    const normalized = toml.replace(/\r\n/g, "\n");
+    // Match each block: header line, then everything up to next top-level
+    // [section] header or end-of-string. Multiline mode anchors `^[` to
+    // line start. Use `g` to clean up duplicates.
+    const blockRe = /^\[mcp_servers\.unfairly\]\s*\n[\s\S]*?(?=^\[|\Z)/gm;
+    // Note: `\Z` not supported in JS regex. Substitute with `(?=^\[|$(?![\s\S]))`.
+    const jsBlockRe = /^\[mcp_servers\.unfairly\]\s*\n[\s\S]*?(?=^\[|$(?![\s\S]))/gm;
+    void blockRe; // documentation only
+    let stripped = normalized.replace(jsBlockRe, "");
+    // Collapse runs of 3+ blank lines that the strip may have left behind.
+    stripped = stripped.replace(/\n{3,}/g, "\n\n");
+    return stripped;
+}
+/**
+ * Patch ~/.codex/config.toml to register the Unfairly MCP server with
+ * bearer-token wiring. Idempotent: removes any existing managed block(s)
+ * first, then appends one canonical block. Safe against duplicate sections
+ * left over from prior bad runs.
+ *
+ * If ~/.codex/config.toml does not exist, returns {status: "not-installed"}
+ * — don't create a Codex config out of thin air for a user who may not
+ * have Codex installed.
+ */
+export async function configureCodex(apiUrl) {
+    const home = os.homedir();
+    const filePath = path.join(home, ".codex", "config.toml");
+    let existing;
+    try {
+        existing = await fs.readFile(filePath, "utf-8");
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "ENOENT") {
+            return { status: "not-installed", path: filePath };
+        }
+        return {
+            status: "error",
+            path: filePath,
+            message: `Could not read ${filePath}: ${e.message}`,
+        };
+    }
+    const hadExistingBlock = /^\[mcp_servers\.unfairly\]/m.test(existing.replace(/\r\n/g, "\n"));
+    const stripped = stripUnfairlyBlocks(existing);
+    const block = buildCodexBlock(apiUrl);
+    // Append, ensuring exactly one blank line of separation if the file is
+    // non-empty.
+    const trimmedTail = stripped.replace(/\n+$/, "");
+    const next = trimmedTail.length === 0
+        ? `${block}\n`
+        : `${trimmedTail}\n\n${block}\n`;
+    try {
+        await fs.writeFile(filePath, next, "utf-8");
+    }
+    catch (err) {
+        const e = err;
+        return {
+            status: "error",
+            path: filePath,
+            message: `Could not write ${filePath}: ${e.message}`,
+        };
+    }
+    const action = hadExistingBlock
+        ? "replaced"
+        : existing.length === 0
+            ? "created"
+            : "appended";
+    return { status: "configured", path: filePath, action };
+}
+//# sourceMappingURL=codex.js.map

package/dist/hosts/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/hosts/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;IACnD,OAAO;QACL,cAAc;QACd,UAAU,GAAG,GAAG;QAChB,6CAA6C;KAC9C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,sEAAsE;IACtE,qDAAqD;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE/C,sEAAsE;IACtE,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,OAAO,GACX,qDAAqD,CAAC;IACxD,+EAA+E;IAC/E,MAAM,SAAS,GACb,8DAA8D,CAAC;IACjE,KAAK,OAAO,CAAC,CAAC,qBAAqB;IACnC,IAAI,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEjD,uEAAuE;IACvE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE1D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,IAAI,CACzD,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAChC,CAAC;IACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEtC,uEAAuE;IACvE,aAAa;IACb,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,CAAC,GAAG,KAAK,IAAI;QACd,CAAC,CAAC,GAAG,WAAW,OAAO,KAAK,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB;QAC7B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/hosts/shell-env.d.ts

@@ -0,0 +1,16 @@
+export declare const ENV_BLOCK_START = "# === unfairly cli (auto-managed \u2014 do not edit) ===";
+export declare const ENV_BLOCK_END = "# === end unfairly cli ===";
+export type ShellEnvResult = {
+    path: string;
+    shell: "zsh" | "bash" | "unknown";
+    action: "created" | "appended" | "replaced";
+};
+/**
+ * Idempotent shell-env writer. Replaces any existing managed block in
+ * place; appends one if none exists. Tolerates CRLF input by normalizing
+ * before matching, then preserves the host file's existing line ending
+ * convention on write.
+ */
+export declare function writeShellEnvFile(rcPath: string, token: string): Promise<"created" | "appended" | "replaced">;
+export declare function writeShellEnv(token: string): Promise<ShellEnvResult>;
+//# sourceMappingURL=shell-env.d.ts.map

package/dist/hosts/shell-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-env.d.ts","sourceRoot":"","sources":["../../src/hosts/shell-env.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,eAAe,6DAAwD,CAAC;AACrF,eAAO,MAAM,aAAa,+BAA+B,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;CAC7C,CAAC;AA+BF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC,CAmC9C;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAO1E"}

package/dist/hosts/shell-env.js

@@ -0,0 +1,81 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+export const ENV_BLOCK_START = "# === unfairly cli (auto-managed — do not edit) ===";
+export const ENV_BLOCK_END = "# === end unfairly cli ===";
+/**
+ * Detect the user's shell + the right rcfile to write env exports to.
+ * Returns null path for unknown shells so the caller can print a manual
+ * fallback instead of guessing.
+ */
+function detectShell() {
+    const shellEnv = process.env.SHELL ?? "";
+    const home = os.homedir();
+    if (shellEnv.endsWith("zsh")) {
+        return { shell: "zsh", rcPath: path.join(home, ".zshenv") };
+    }
+    if (shellEnv.endsWith("bash")) {
+        return { shell: "bash", rcPath: path.join(home, ".bash_profile") };
+    }
+    return { shell: "unknown", rcPath: null };
+}
+/**
+ * Build the canonical sentinel block. Used both for writing and matching.
+ */
+function buildBlock(token) {
+    return [
+        ENV_BLOCK_START,
+        `export UNFAIRLY_MCP_TOKEN=${token}`,
+        `export UNFAIRLY_TOKEN=${token}`,
+        ENV_BLOCK_END,
+    ].join("\n");
+}
+/**
+ * Idempotent shell-env writer. Replaces any existing managed block in
+ * place; appends one if none exists. Tolerates CRLF input by normalizing
+ * before matching, then preserves the host file's existing line ending
+ * convention on write.
+ */
+export async function writeShellEnvFile(rcPath, token) {
+    const block = buildBlock(token);
+    let existing = "";
+    let fileExists = true;
+    try {
+        existing = await fs.readFile(rcPath, "utf-8");
+    }
+    catch {
+        fileExists = false;
+    }
+    const normalized = existing.replace(/\r\n/g, "\n");
+    const blockRe = new RegExp(`${escapeRegex(ENV_BLOCK_START)}[\\s\\S]*?${escapeRegex(ENV_BLOCK_END)}\\n?`, "g");
+    let next;
+    let action;
+    if (blockRe.test(normalized)) {
+        blockRe.lastIndex = 0;
+        next = normalized.replace(blockRe, block + "\n");
+        action = "replaced";
+    }
+    else if (!fileExists || normalized.length === 0) {
+        next = block + "\n";
+        action = "created";
+    }
+    else {
+        const sep = normalized.endsWith("\n") ? "" : "\n";
+        next = `${normalized}${sep}\n${block}\n`;
+        action = "appended";
+    }
+    await fs.writeFile(rcPath, next, "utf-8");
+    return action;
+}
+export async function writeShellEnv(token) {
+    const { shell, rcPath } = detectShell();
+    if (!rcPath) {
+        return { path: "", shell, action: "created" };
+    }
+    const action = await writeShellEnvFile(rcPath, token);
+    return { path: rcPath, shell, action };
+}
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=shell-env.js.map

package/dist/hosts/shell-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-env.js","sourceRoot":"","sources":["../../src/hosts/shell-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,eAAe,GAAG,qDAAqD,CAAC;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAQ1D;;;;GAIG;AACH,SAAS,WAAW;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO;QACL,eAAe;QACf,6BAA6B,KAAK,EAAE;QACpC,yBAAyB,KAAK,EAAE;QAChC,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAAa;IAEb,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,GAAG,WAAW,CAAC,eAAe,CAAC,aAAa,WAAW,CAAC,aAAa,CAAC,MAAM,EAC5E,GAAG,CACJ,CAAC;IAEF,IAAI,IAAY,CAAC;IACjB,IAAI,MAA2C,CAAC;IAEhD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;SAAM,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;QACpB,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,IAAI,GAAG,GAAG,UAAU,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC;QACzC,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -4,6 +4,10 @@ import { hideBin } from "yargs/helpers";
 await yargs(hideBin(process.argv))
     .scriptName("unfairly")
     .usage("$0 <cmd> [args]")
+    .command("setup", "One-shot: authorize, write shell env, configure Codex + Claude Code", () => { }, async () => {
+    const { runSetup } = await import("./cmd/setup.js");
+    await runSetup();
+})
     .command("login", "Authorize via browser; print export lines for ~/.zshenv (Codex / scripts)", (y) => y.option("quiet", {
     type: "boolean",
     alias: "q",
@@ -64,3 +68,4 @@ await yargs(hideBin(process.argv))
     .strict()
     .help()
     .parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/B,UAAU,CAAC,UAAU,CAAC;KACtB,KAAK,CAAC,iBAAiB,CAAC;KACxB,OAAO,CACN,OAAO,EACP,qEAAqE,EACrE,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,QAAQ,EAAE,CAAC;AACnB,CAAC,CACF;KACA,OAAO,CACN,OAAO,EACP,2EAA2E,EAC3E,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE;IAChB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,GAAG;IACV,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,0CAA0C;CACrD,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAgB,EAAE,CAAC,CAAC;AACnD,CAAC,CACF;KACA,OAAO,CACN,MAAM,EACN,6DAA6D,EAC7D,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;KACE,MAAM,CAAC,OAAO,EAAE;IACf,IAAI,EAAE,QAAQ;IACd,QAAQ,EACN,0FAA0F;CAC7F,CAAC;KACD,MAAM,CAAC,KAAK,EAAE;IACb,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,GAAG;IACV,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,4CAA4C;CACvD,CAAC;KACD,MAAM,CAAC,YAAY,EAAE;IACpB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK;IACd,QAAQ,EACN,oEAAoE;CACvE,CAAC,EACN,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,OAAO,CAAC;QACZ,KAAK,EAAE,IAAI,CAAC,KAA2B;QACvC,GAAG,EAAE,IAAI,CAAC,GAAc;QACxB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAY;KACzC,CAAC,CAAC;AACL,CAAC,CACF;KACA,OAAO,CACN,cAAc,EACd,0BAA0B,EAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAChD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,OAAO,CAAC,IAAI,CAAC,KAA2B,CAAC,CAAC;AAClD,CAAC,CACF;KACA,OAAO,CACN,cAAc,EACd,2BAA2B,EAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAChD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,OAAO,CAAC,IAAI,CAAC,KAA2B,CAAC,CAAC;AAClD,CAAC,CACF;KACA,OAAO,CACN,QAAQ,EACR,iCAAiC,EACjC,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CACF;KACA,OAAO,CACN,gBAAgB,EAChB,oCAAoC,EACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EACnE,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;AACxC,CAAC,CACF;KACA,OAAO,CACN,OAAO,EACP,4CAA4C,EAC5C,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,QAAQ,EAAE,CAAC;AACnB,CAAC,CACF;KACA,OAAO,CACN,KAAK,EACL,wDAAwD,EACxD,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAChD,MAAM,MAAM,EAAE,CAAC;AACjB,CAAC,CACF;KACA,aAAa,CAAC,CAAC,CAAC;KAChB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,EAAE,CAAC"}

package/dist/lib/client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `createUnfairlyClient` — public factory for the agent runtime SDK.
+ *
+ * Resolves API base URL + token from explicit options or env vars. The
+ * default base URL is the hosted Unfairly app; self-hosters override it.
+ *
+ * The returned client is fluent-ish: `client.vault("slug").search(...)`
+ * mirrors how the MCP tools read in the wild. Stays HTTP-only — there's
+ * no Supabase or admin client in this package. Server work happens at
+ * `/api/sdk/v1/*` and reuses the shared `src/lib/vault/*` helpers.
+ */
+import { type FetchLike, type TransportFn } from "./transport.js";
+import { makeVaultSearch } from "./vault/search.js";
+import { makeVaultRead } from "./vault/read.js";
+import { makeVaultCheckpoint } from "./vault/checkpoint.js";
+import { makeEmit } from "./events/emit.js";
+import type { MeResponse } from "./types/index.js";
+export type UnfairlyClientOptions = {
+    /** MCP token (`mcp_xxx...`). Falls back to `process.env.UNFAIRLY_API_KEY`. */
+    apiKey?: string;
+    /** Override the API base URL (self-hosted / preview). */
+    baseUrl?: string;
+    /** Optional fetch impl override (mostly for tests). */
+    fetchImpl?: FetchLike;
+    /** Per-request timeout in ms. Default 30s. */
+    timeoutMs?: number;
+};
+export type VaultClient = {
+    search: ReturnType<typeof makeVaultSearch>;
+    readDocument: ReturnType<typeof makeVaultRead>;
+    checkpoint: ReturnType<typeof makeVaultCheckpoint>;
+};
+export type UnfairlyClient = {
+    /** Identify the token owner + the vaults you can reach. */
+    me(): Promise<MeResponse>;
+    /** Per-vault scoped helpers. */
+    vault(slug: string): VaultClient;
+    /** Emit a closed-allowlist event into the Unfairly Inngest queue. */
+    event: {
+        emit: ReturnType<typeof makeEmit>;
+    };
+    /** Escape hatch for callers that need to call an arbitrary route. */
+    raw: TransportFn;
+};
+export declare function createUnfairlyClient(opts?: UnfairlyClientOptions): UnfairlyClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,MAAM,qBAAqB,GAAG;IAClC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IAC3C,YAAY,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IAC/C,UAAU,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,2DAA2D;IAC3D,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1B,gCAAgC;IAChC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IACjC,qEAAqE;IACrE,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAA;KAAE,CAAC;IAC7C,qEAAqE;IACrE,GAAG,EAAE,WAAW,CAAC;CAClB,CAAC;AAyBF,wBAAgB,oBAAoB,CAClC,IAAI,GAAE,qBAA0B,GAC/B,cAAc,CA0BhB"}