unfairly 0.8.0 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.8.2 — 2026-09-24
+
+- **Unfairly Intelligence collector** — `unfairly setup` installs a metadata-only collector for Claude Code, Codex, Cursor, and Gemini CLI. At session boundaries it summarizes each session from the client's own local transcript: model, token counts by type, turns, tool calls and errors, approval denials, subagent use, the approved repository, the SHAs of the session's own commits, and which published skills or company playbooks it used. Prompts, responses, code, commands, paths, branch names, and commit messages never leave the machine; skills outside the published set are counted, not named.
+- **`unfairly setup --org <id>`** — scopes the collector to an organization, for people in several orgs (also `UNFAIRLY_ORG`).
+- **`unfairly intelligence backfill --days 90`** — uploads summaries of sessions already on the machine.
+- **Approved repositories** — the collector pulls the org's approved-repository and skill catalog from the server; remotes are fingerprinted canonically (`github.com/owner/repo`) so every remote form matches.
+- **Non-blocking hooks** — capture hands off to a detached process so AI clients never wait on summarizing or uploading.
+
+## 0.8.1 — 2026-05-16
+
+- **Fix(pull resilience)** — `unfairly pull` and `unfairly init` no longer abort the entire sync when one vault fails. Each vault is now wrapped in its own try/catch; failures are collected, surfaced at the end with the slug + first error line, and the process exits with code 1 so CI can detect partial failures. Previously a single 404 (e.g. from a duplicate-slug ambiguity) on `hq` would crash the loop and silently skip every vault alphabetically after it. The server fix that triggered this (deterministic dedupe by slug in `/api/sync/{status,pull,push}`) shipped alongside.
+
 ## 0.8.0 — 2026-05-15
 
 - **`unfairly connect <urlOrId>`** — wire a shared vault from a share link in one command, no browser OAuth, no signup. POSTs the link to the new `/api/share-links/<id>/mint-token` endpoint (Phase B), receives a ≤24h read-only token, and writes it to Claude Desktop, Claude Code, and Codex as scoped MCP entries keyed by `unfairly-<org>-<room>`. Accepts the full URL, `s/<uuid>` short form, or a bare UUID. `--as <email>` and `--label <text>` flow through to the audit log. Re-connecting the same share link is idempotent — strips the old entry and writes a fresh token at the same key. Hosts that aren't installed are skipped, not errored.

package/README.md

@@ -13,6 +13,8 @@ That's it. One command — auto-detects state and:
 
 - pops a browser for OAuth (skipped if you already have a token)
 - wires Claude Desktop, Claude Code, and Codex to the Unfairly MCP server
+- installs the Unfairly Intelligence metadata collector in detected Codex, Claude Code, Cursor, and Gemini CLI clients
+- enrolls one versioned user-space runtime under `~/.unfairly` (no global npm install or admin access)
 - writes `UNFAIRLY_MCP_TOKEN` into your shell rc
 - binds `.unfairly/` to your repo (pulls all accessible vaults)
 - stitches `@.unfairly/CLAUDE.md` into your repo's `CLAUDE.md`
@@ -21,7 +23,7 @@ Re-run any time inside the repo for a daily check-in card showing what your team
 
 ### Power-user commands
 
-`unfairly setup` (machine wiring only), `unfairly init` (workspace bind only), `unfairly pull`, `unfairly push`, `unfairly status`, `unfairly watch`, `unfairly mcp`, `unfairly login`. The bare command above delegates to these — they're available when you want fine-grained control.
+`unfairly setup` (machine wiring), `unfairly intelligence install` (collector install/repair), `unfairly intelligence status`, `unfairly intelligence policy`, `unfairly intelligence pause`, `unfairly intelligence uninstall`, `unfairly init` (workspace bind only), `unfairly pull`, `unfairly push`, `unfairly status`, `unfairly watch`, `unfairly mcp`, `unfairly login`. The bare command above delegates to these — they're available when you want fine-grained control.
 
 ## Commands
 
@@ -33,6 +35,15 @@ Re-run any time inside the repo for a daily check-in card showing what your team
 - `unfairly watch` — opt-in fs watcher; debounced 5s auto-push on save
 - `unfairly mcp` — stdio MCP server exposing `pull_vault`, `push_vault`, `sync_status` tools to agent hosts (Claude Code, Codex, cowork)
 
+The CLI keeps its browser-authorized credential in the OS keychain (or a
+mode-`0600` fallback). Sync accepts a Supabase session JWT or a human MCP
+credential with the `sync` audience. MCP sync credentials need `read` for
+pull/status and `write` for push. Owner/admin invitation requests require a
+separate `sync-invite-admin` audience with `invite:admin` scope; bound
+organization and room scope are always enforced. Broad `desktop-control`,
+short-lived Hermes child credentials, and agent-runtime credentials cannot be
+used for sync or CLI invitation requests.
+
 ## Local store layout
 
 ```
@@ -64,7 +75,9 @@ const client = createUnfairlyClient({ apiKey: process.env.UNFAIRLY_API_KEY });
 const me = await client.me();
 
 // Search a vault
-const hits = await client.vault("growth").search("burn rate", { matchCount: 8 });
+const hits = await client
+  .vault("growth")
+  .search("burn rate", { matchCount: 8 });
 
 // Read a document
 const doc = await client.vault("growth").readDocument("operating-plan");

package/dist/auth/browser-flow.d.ts

@@ -2,7 +2,16 @@ export declare function openBrowser(url: string): void;
 export type BrowserAuthOptions = {
     tokenName?: string;
     timeoutMs?: number;
+    /** Organization ID to scope the token to; the server honours it only for a member. Falls back to UNFAIRLY_ORG. */
+    org?: string;
 };
+/** The /cli-auth page URL. An organization ID scopes the minted token to that org when the user is a member. */
+export declare function cliAuthUrl(apiUrl: string, input: {
+    cb: string;
+    state: string;
+    tokenName: string;
+    org?: string;
+}): URL;
 /**
  * OAuth handshake via loopback HTTP server. Used by `unfairly setup`,
  * `unfairly login`, and `unfairly init`.

package/dist/auth/browser-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-flow.d.ts","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAMA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc7C;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+CxB"}
+{"version":3,"file":"browser-flow.d.ts","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAMA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc7C;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kHAAkH;IAClH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,gHAAgH;AAChH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,GAAG,CAOrH;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4CxB"}

package/dist/auth/browser-flow.js

@@ -16,6 +16,16 @@ export function openBrowser(url) {
         // best-effort
     }
 }
+/** The /cli-auth page URL. An organization ID scopes the minted token to that org when the user is a member. */
+export function cliAuthUrl(apiUrl, input) {
+    const url = new URL("/cli-auth", apiUrl);
+    url.searchParams.set("cb", input.cb);
+    url.searchParams.set("state", input.state);
+    url.searchParams.set("name", input.tokenName);
+    if (input.org && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(input.org))
+        url.searchParams.set("org", input.org);
+    return url;
+}
 /**
  * OAuth handshake via loopback HTTP server. Used by `unfairly setup`,
  * `unfairly login`, and `unfairly init`.
@@ -62,10 +72,7 @@ export async function browserAuthFlow(apiUrl, opts = {}) {
             const addr = server.address();
             const port = typeof addr === "object" && addr ? addr.port : 0;
             const cb = `http://localhost:${port}/done`;
-            const authUrl = new URL("/cli-auth", apiUrl);
-            authUrl.searchParams.set("cb", cb);
-            authUrl.searchParams.set("state", state);
-            authUrl.searchParams.set("name", tokenName);
+            const authUrl = cliAuthUrl(apiUrl, { cb, state, tokenName, org: opts.org ?? process.env.UNFAIRLY_ORG });
             console.error(`\nOpening browser to authorize:\n  ${authUrl.toString()}\n(if it doesn't open, click the link above)\n`);
             openBrowser(authUrl.toString());
         });

package/dist/auth/browser-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-flow.js","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,2kBAA2kB,CAAC;AAEjmB,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAE,EAAE;YACrC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,GAAG;iBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;iBAC9D,GAAG,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CACX,sCAAsC,OAAO,CAAC,QAAQ,EAAE,gDAAgD,CACzG,CAAC;YACF,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"browser-flow.js","sourceRoot":"","sources":["../../src/auth/browser-flow.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,2kBAA2kB,CAAC;AAEjmB,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AASD,gHAAgH;AAChH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAqE;IAC9G,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,GAAG,IAAI,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3I,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAE,EAAE;YACrC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,GAAG;iBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;iBAC9D,GAAG,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC;YAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACxG,OAAO,CAAC,KAAK,CACX,sCAAsC,OAAO,CAAC,QAAQ,EAAE,gDAAgD,CACzG,CAAC;YACF,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cmd/invite.js

@@ -12,8 +12,8 @@ export const inviteCommand = {
         .option("persona-surface", {
         type: "string",
         demandOption: true,
-        choices: ["builder-terminal", "oracle-cowork", "player-web"],
-        describe: "Which surface they'll primarily use",
+        choices: ["builder-terminal", "player-web"],
+        describe: "Onboarding role: builder-terminal = Champion, player-web = Player",
     })
         .option("persona-workflow", {
         type: "string",

package/dist/cmd/invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../src/cmd/invite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAUlD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,KAAK;SACF,MAAM,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,qCAAqC;KAChD,CAAC;SACD,MAAM,CAAC,iBAAiB,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,kBAAkB,EAAE,eAAe,EAAE,YAAY,CAAC;QAC5D,QAAQ,EAAE,qCAAqC;KAChD,CAAC;SACD,MAAM,CAAC,kBAAkB,EAAE;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,UAAU;YACV,WAAW;YACX,qBAAqB;YACrB,eAAe;YACf,WAAW;YACX,YAAY;SACb;QACD,QAAQ,EAAE,wBAAwB;KACnC,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,2DAA2D;KACtE,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,YAAY;KACvB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,qBAAqB,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBACxC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG;aACnB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,0EAA0E,CAC3E,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../src/cmd/invite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAUlD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,sDAAsD;IAChE,OAAO,EAAE,CAAC,KAAW,EAAE,EAAE,CACvB,KAAK;SACF,MAAM,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,qCAAqC;KAChD,CAAC;SACD,MAAM,CAAC,iBAAiB,EAAE;QACzB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;QAC3C,QAAQ,EAAE,mEAAmE;KAC9E,CAAC;SACD,MAAM,CAAC,kBAAkB,EAAE;QAC1B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,UAAU;YACV,WAAW;YACX,qBAAqB;YACrB,eAAe;YACf,WAAW;YACX,YAAY;SACb;QACD,QAAQ,EAAE,wBAAwB;KACnC,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,2DAA2D;KACtE,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,YAAY;KACvB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,qBAAqB,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBACxC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG;aACnB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,0EAA0E,CAC3E,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cmd/pace.d.ts

@@ -0,0 +1,80 @@
+import { detectPaceClients } from "../pace/device.js";
+export declare const RUNTIME_VERSION = "0.8.2";
+export declare const INTELLIGENCE_POLICY: {
+    version: "metadata-v3";
+    mode: "metadata_only";
+    permitted_fields: string[];
+    prohibited_content: string[];
+};
+export declare function runPaceCapture(source: string, hookEvent: string): Promise<void>;
+/** Summarizes local sessions changed since the last sweep and queues them for upload. */
+export declare function runPaceSweep(options?: {
+    sinceMs?: number;
+    collectedVia?: "hook" | "backfill";
+}): Promise<{
+    summarized: number;
+    queued: number;
+}>;
+/** Pulls the organization's approved repositories so sessions can carry repository IDs and commit SHAs. */
+export declare function refreshRepositoryPolicy(options?: {
+    force?: boolean;
+}): Promise<{
+    repositories: number;
+} | null>;
+/** Summarizes and uploads the last `days` of local sessions so Intelligence has history from day one. */
+export declare function runPaceBackfill(days: number): Promise<{
+    summarized: number;
+    uploaded: number;
+    remaining: number;
+    approved_repositories: number | null;
+}>;
+export declare function runPaceFlush(): Promise<{
+    sent: number;
+    remaining: number;
+    sessions_sent: number;
+}>;
+export declare function runPaceHeartbeat(): Promise<{
+    installation_id: string;
+    clients: Awaited<ReturnType<typeof detectPaceClients>>;
+}>;
+export declare function runPaceInstall(): Promise<{
+    runtime_entrypoint: string;
+    marketplace_root: string;
+    activations: Array<{
+        client: string;
+        status: "activated" | "skipped";
+        detail: string;
+    }>;
+    verification: {
+        heartbeat: "ok";
+        live_events: "pending_first_session";
+    };
+}>;
+export declare function runPaceStatus(): Promise<void>;
+export declare function runPaceConfig(input: {
+    outputDir: string;
+    command: string;
+    managedDir: string;
+    evidenceRoots?: string[];
+    includeFileNames?: boolean;
+}): Promise<string[]>;
+export declare function runPacePolicy(): typeof INTELLIGENCE_POLICY;
+export declare function runPacePause(paused: boolean): Promise<{
+    paused: boolean;
+}>;
+export declare function runPaceUninstall(): Promise<{
+    removed_files: number;
+    retained_global_credentials: true;
+}>;
+export declare function runPaceEvidenceScan(policyPath?: string): Promise<{
+    observed: number;
+    baseline_roots: string[];
+    queued: number;
+}>;
+export declare function runPaceEvidenceWatch(policyPath?: string): Promise<void>;
+export declare function runPacePlaybooks(query?: string): Promise<unknown[]>;
+export declare function runPacePlaybookUse(playbookId: string, playbookVersion: string): Promise<{
+    workflow_id: string;
+    queued: number;
+}>;
+//# sourceMappingURL=pace.d.ts.map

package/dist/cmd/pace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pace.d.ts","sourceRoot":"","sources":["../../src/cmd/pace.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,iBAAiB,EAIlB,MAAM,mBAAmB,CAAC;AAG3B,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC,eAAO,MAAM,mBAAmB;;;;;CAgB/B,CAAC;AAcF,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrF;AAKD,yFAAyF;AACzF,wBAAsB,YAAY,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAY1J;AAMD,2GAA2G;AAC3G,wBAAsB,uBAAuB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAezH;AAoBD,yGAAyG;AACzG,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAS9J;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CA2BxG;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;CACxD,CAAC,CAgCD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAC9C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxF,YAAY,EAAE;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,uBAAuB,CAAA;KAAE,CAAC;CACzE,CAAC,CAwBD;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAiBnD;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAMpB;AAED,wBAAgB,aAAa,IAAI,OAAO,mBAAmB,CAE1D;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAIhF;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,IAAI,CAAA;CAAE,CAAC,CA0C9G;AAED,wBAAsB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAMtI;AAED,wBAAsB,oBAAoB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe7E;AAED,wBAAsB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAWzE;AAED,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuCtI"}

package/dist/cmd/pace.js

@@ -0,0 +1,393 @@
+import { getToken } from "../sync/credentials.js";
+import fs from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import os from "node:os";
+import path from "node:path";
+import { PaceEventV3Schema } from "../pace/schema.js";
+import { normalizeHookEvent } from "../pace/normalize.js";
+import { appendPaceEvent, paceSpoolPath, readPaceEvents, removePaceEvents } from "../pace/spool.js";
+import { currentDevicePlatform, detectPaceClients, paceDevicePath, readOrCreatePaceDevice, writePaceDevice, } from "../pace/device.js";
+const DEFAULT_API = "https://app.unfairly.ai";
+export const RUNTIME_VERSION = "0.8.2";
+const PLUGIN_VERSION = "0.1.0";
+export const INTELLIGENCE_POLICY = {
+    version: "metadata-v3",
+    mode: "metadata_only",
+    permitted_fields: [
+        "event_id", "installation_id", "session_id", "workflow_id", "occurred_at",
+        "source", "event_type", "evidence_level", "model_family", "tool_category",
+        "blocker_category", "approval_mode", "permission_mode", "duration_bucket",
+        "exit_code_bucket", "token_counts", "playbook_id", "playbook_version",
+        "repository_id", "commit_sha", "artifact_type", "outcome_state",
+    ],
+    prohibited_content: [
+        "prompts", "responses", "source code", "file contents", "screenshots",
+        "keystrokes", "clipboard", "raw commands", "arguments", "tool output",
+        "stdout", "stderr", "paths", "filenames", "repository names", "branches",
+        "URLs", "titles", "secrets", "arbitrary errors",
+    ],
+};
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return {};
+    let raw = "";
+    for await (const chunk of process.stdin)
+        raw += String(chunk);
+    if (!raw.trim())
+        return {};
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+export async function runPaceCapture(source, hookEvent) {
+    const device = await readOrCreatePaceDevice();
+    if (device.paused)
+        return;
+    const event = normalizeHookEvent({
+        source,
+        hookEvent,
+        payload: await readStdin(),
+        installationId: device.installation_id,
+    });
+    await appendPaceEvent(event);
+    const boundary = event.event_type === "session.started" || event.event_type === "session.ended" || event.event_type === "workflow.stopped";
+    if (boundary) {
+        // Session summaries (model, tokens, commits) come from the client's own
+        // transcript, which hook payloads do not carry. Summarize whatever changed
+        // since the last sweep; a failure here must never break the AI workflow.
+        await runPaceSweep().catch(() => undefined);
+    }
+    if (process.env.UNFAIRLY_PACE_NO_FLUSH !== "1" && boundary) {
+        // A telemetry outage must never break the employee's AI workflow. Keep the
+        // durable queue and retry on the next session boundary or explicit flush.
+        await runPaceFlush().catch(() => undefined);
+    }
+}
+const SWEEP_OVERLAP_MS = 15 * 60_000;
+const FIRST_SWEEP_LOOKBACK_MS = 2 * 86_400_000;
+/** Summarizes local sessions changed since the last sweep and queues them for upload. */
+export async function runPaceSweep(options = {}) {
+    const { sweepLocalSessions } = await import("../pace/session-summary.js");
+    const device = await readOrCreatePaceDevice();
+    const startedAt = Date.now();
+    const last = device.last_session_sweep_at ? Date.parse(device.last_session_sweep_at) : startedAt - FIRST_SWEEP_LOOKBACK_MS;
+    const result = await sweepLocalSessions({
+        since: options.sinceMs ?? last - SWEEP_OVERLAP_MS,
+        installationId: device.installation_id,
+        collectedVia: options.collectedVia ?? "hook",
+    });
+    await writePaceDevice({ ...(await readOrCreatePaceDevice()), last_session_sweep_at: new Date(startedAt).toISOString() });
+    return result;
+}
+function apiBase() {
+    return (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+}
+/** Pulls the organization's approved repositories so sessions can carry repository IDs and commit SHAs. */
+export async function refreshRepositoryPolicy(options = {}) {
+    const device = await readOrCreatePaceDevice();
+    const fresh = device.repository_policy_refreshed_at && Date.now() - Date.parse(device.repository_policy_refreshed_at) < 3_600_000;
+    if (fresh && !options.force)
+        return null;
+    const token = await getToken();
+    if (!token)
+        return null;
+    const response = await fetch(`${apiBase()}/api/ai-pace/repository-policy`, { headers: { Authorization: `Bearer ${token}` } });
+    if (!response.ok)
+        return null;
+    const { parseRepositoryPolicy, repositoryPolicyPath } = await import("../pace/repository.js");
+    const policy = parseRepositoryPolicy(await response.json());
+    const file = repositoryPolicyPath();
+    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    await fs.writeFile(file, `${JSON.stringify(policy, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+    await writePaceDevice({ ...(await readOrCreatePaceDevice()), repository_policy_refreshed_at: new Date().toISOString() });
+    return { repositories: policy.mappings.length };
+}
+async function uploadSessionSummaries(token) {
+    const { readSessionSpool, removeSessionSummaries } = await import("../pace/session-summary.js");
+    let sent = 0;
+    for (let round = 0; round < 50; round += 1) {
+        const pending = Object.values(await readSessionSpool()).slice(0, 100);
+        if (!pending.length)
+            break;
+        const response = await fetch(`${apiBase()}/api/ai-pace/sessions`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+            body: JSON.stringify({ sessions: pending }),
+        });
+        if (!response.ok)
+            throw new Error(`Unfairly Intelligence session upload failed (${response.status})`);
+        await removeSessionSummaries(pending);
+        sent += pending.length;
+    }
+    return { sent, remaining: Object.keys(await readSessionSpool()).length };
+}
+/** Summarizes and uploads the last `days` of local sessions so Intelligence has history from day one. */
+export async function runPaceBackfill(days) {
+    const policy = await refreshRepositoryPolicy({ force: true }).catch(() => null);
+    // Uploads are only accepted from a registered, active installation.
+    await runPaceHeartbeat();
+    const sweep = await runPaceSweep({ sinceMs: Date.now() - days * 86_400_000, collectedVia: "backfill" });
+    const token = await getToken();
+    if (!token)
+        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
+    const upload = await uploadSessionSummaries(token);
+    return { summarized: sweep.summarized, uploaded: upload.sent, remaining: upload.remaining, approved_repositories: policy?.repositories ?? null };
+}
+export async function runPaceFlush() {
+    const token = await getToken();
+    if (!token)
+        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
+    await refreshRepositoryPolicy().catch(() => null);
+    const sessions = await uploadSessionSummaries(token);
+    const events = await readPaceEvents();
+    if (!events.length)
+        return { sent: 0, remaining: 0, sessions_sent: sessions.sent };
+    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+    const device = await readOrCreatePaceDevice();
+    const attributedEvents = events.map((event) => ({
+        ...event,
+        installation_id: event.installation_id ?? device.installation_id,
+    }));
+    const response = await fetch(`${apiUrl}/api/ai-pace/events`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+            ...(device.attestation ? { "X-AI-Pace-Attestation": device.attestation } : {}),
+        },
+        body: JSON.stringify({ events: attributedEvents }),
+    });
+    if (!response.ok)
+        throw new Error(`Unfairly Intelligence upload failed (${response.status})`);
+    await removePaceEvents(new Set(events.map((event) => event.event_id)));
+    const remaining = (await readPaceEvents()).length;
+    await writePaceDevice({ ...(await readOrCreatePaceDevice()), last_upload_at: new Date().toISOString(), collection_policy_version: "metadata-v3" });
+    return { sent: events.length, remaining, sessions_sent: sessions.sent };
+}
+export async function runPaceHeartbeat() {
+    const token = await getToken();
+    if (!token)
+        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
+    const device = await readOrCreatePaceDevice();
+    const clients = await detectPaceClients();
+    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+    const response = await fetch(`${apiUrl}/api/ai-pace/heartbeat`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            installation_id: device.installation_id,
+            agent_version: RUNTIME_VERSION,
+            runtime_version: RUNTIME_VERSION,
+            plugin_version: PLUGIN_VERSION,
+            collection_policy_version: "metadata-v3",
+            ...currentDevicePlatform(),
+            clients,
+        }),
+    });
+    if (!response.ok)
+        throw new Error(`Unfairly Intelligence heartbeat failed (${response.status})`);
+    const body = await response.json();
+    if (!body.attestation || !body.expires_at)
+        throw new Error("Unfairly Intelligence heartbeat returned no attestation");
+    await writePaceDevice({
+        ...device,
+        attestation: body.attestation,
+        attestation_expires_at: body.expires_at,
+        collection_policy_version: "metadata-v3",
+    });
+    return { installation_id: device.installation_id, clients };
+}
+export async function runPaceInstall() {
+    const clients = await detectPaceClients();
+    const { installIntelligence } = await import("../pace/install.js");
+    const installed = await installIntelligence({ version: RUNTIME_VERSION, clients });
+    const device = await readOrCreatePaceDevice();
+    await writePaceDevice({
+        ...device,
+        collection_policy_version: "metadata-v3",
+        intelligence_install: {
+            version: RUNTIME_VERSION,
+            runtime_entrypoint: installed.runtime_entrypoint,
+            marketplace_root: installed.marketplace_root,
+            owned_paths: installed.owned_paths,
+            activated_clients: installed.activations.filter((item) => item.status === "activated").map((item) => item.client),
+            installed_at: new Date().toISOString(),
+        },
+    });
+    await runPaceHeartbeat();
+    return {
+        runtime_entrypoint: installed.runtime_entrypoint,
+        marketplace_root: installed.marketplace_root,
+        activations: installed.activations,
+        verification: { heartbeat: "ok", live_events: "pending_first_session" },
+    };
+}
+export async function runPaceStatus() {
+    const queued = (await readPaceEvents()).length;
+    const device = await readOrCreatePaceDevice();
+    const clients = await detectPaceClients();
+    process.stdout.write(JSON.stringify({
+        enabled: !device.paused,
+        paused: Boolean(device.paused),
+        installation_id: device.installation_id,
+        attestation_expires_at: device.attestation_expires_at ?? null,
+        last_upload_at: device.last_upload_at ?? null,
+        runtime_version: RUNTIME_VERSION,
+        plugin_version: PLUGIN_VERSION,
+        collection_policy_version: device.collection_policy_version ?? INTELLIGENCE_POLICY.version,
+        queued,
+        spool: paceSpoolPath(),
+        clients,
+    }, null, 2) + "\n");
+}
+export async function runPaceConfig(input) {
+    const { writeManagedConfigs } = await import("../pace/managed-config.js");
+    const files = await writeManagedConfigs(input);
+    const device = await readOrCreatePaceDevice();
+    await writePaceDevice({ ...device, managed_files: files, collection_policy_version: "metadata-v3" });
+    return files;
+}
+export function runPacePolicy() {
+    return INTELLIGENCE_POLICY;
+}
+export async function runPacePause(paused) {
+    const device = await readOrCreatePaceDevice();
+    await writePaceDevice({ ...device, paused });
+    return { paused };
+}
+export async function runPaceUninstall() {
+    const device = await readOrCreatePaceDevice();
+    const activated = new Set(device.intelligence_install?.activated_clients ?? []);
+    const { spawnSync } = await import("node:child_process");
+    if (activated.has("codex")) {
+        spawnSync("codex", ["plugin", "remove", "ai-pace@unfairly-intelligence", "--json"], { encoding: "utf8", timeout: 30_000 });
+        spawnSync("codex", ["plugin", "marketplace", "remove", "unfairly-intelligence"], { encoding: "utf8", timeout: 30_000 });
+    }
+    if (activated.has("claude_code")) {
+        spawnSync("claude", ["plugin", "uninstall", "ai-pace@unfairly-intelligence", "--scope", "user"], { encoding: "utf8", timeout: 30_000 });
+        spawnSync("claude", ["plugin", "marketplace", "remove", "unfairly-intelligence", "--scope", "user"], { encoding: "utf8", timeout: 30_000 });
+    }
+    const permitted = new Set([
+        "codex-requirements.toml", "claude-settings.json", "gemini-settings.json",
+        "evidence-policy.json", "repository-policy.json",
+    ]);
+    let removed = 0;
+    for (const file of device.managed_files ?? []) {
+        const name = file.split(/[\\/]/).at(-1);
+        if (!name || !permitted.has(name))
+            continue;
+        await fs.unlink(file).then(() => { removed += 1; }).catch((error) => {
+            if (error.code !== "ENOENT")
+                throw error;
+        });
+    }
+    const safeOwnedRoots = [
+        path.join(os.homedir(), ".unfairly"),
+        path.join(os.homedir(), ".cursor", "plugins", "local", "ai-pace"),
+        path.join(os.homedir(), ".gemini", "extensions", "unfairly-intelligence"),
+    ];
+    for (const ownedPath of device.intelligence_install?.owned_paths ?? []) {
+        const resolved = path.resolve(ownedPath);
+        if (!safeOwnedRoots.some((root) => resolved === root || resolved.startsWith(`${root}${path.sep}`)))
+            continue;
+        await fs.rm(resolved, { recursive: true, force: true });
+        removed += 1;
+    }
+    await fs.unlink(paceSpoolPath()).catch((error) => {
+        if (error.code !== "ENOENT")
+            throw error;
+    });
+    await fs.unlink(paceDevicePath()).catch((error) => {
+        if (error.code !== "ENOENT" && error.code !== "EISDIR")
+            throw error;
+    });
+    return { removed_files: removed, retained_global_credentials: true };
+}
+export async function runPaceEvidenceScan(policyPath) {
+    const { scanLocalEvidence } = await import("../pace/local-evidence.js");
+    const device = await readOrCreatePaceDevice();
+    const result = await scanLocalEvidence({ policyPath, installationId: device.installation_id });
+    await Promise.all(result.events.map((event) => appendPaceEvent(event)));
+    return { observed: result.events.length, baseline_roots: result.baselineRoots, queued: (await readPaceEvents()).length };
+}
+export async function runPaceEvidenceWatch(policyPath) {
+    const { readLocalEvidencePolicy } = await import("../pace/local-evidence.js");
+    const policy = await readLocalEvidencePolicy(policyPath);
+    process.stdout.write(`Unfairly Intelligence is watching ${policy.roots.length} approved local evidence root(s).\n`);
+    const scan = async () => {
+        const result = await runPaceEvidenceScan(policyPath);
+        if (result.observed)
+            await runPaceFlush().catch(() => undefined);
+    };
+    await scan();
+    await new Promise((resolve) => {
+        const timer = setInterval(() => { void scan(); }, policy.scan_interval_seconds * 1000);
+        const stop = () => { clearInterval(timer); resolve(); };
+        process.once("SIGINT", stop);
+        process.once("SIGTERM", stop);
+    });
+}
+export async function runPacePlaybooks(query) {
+    const token = await getToken();
+    if (!token)
+        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
+    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+    const params = query?.trim() ? `?q=${encodeURIComponent(query.trim())}` : "";
+    const response = await fetch(`${apiUrl}/api/ai-pace/playbooks${params}`, {
+        headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
+    });
+    if (!response.ok)
+        throw new Error(`Unfairly Intelligence playbooks failed (${response.status})`);
+    const body = await response.json();
+    return body.playbooks ?? [];
+}
+export async function runPacePlaybookUse(playbookId, playbookVersion) {
+    const token = await getToken();
+    if (!token)
+        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
+    const device = await readOrCreatePaceDevice();
+    if (device.paused)
+        throw new Error("Unfairly Intelligence is paused. Run `unfairly intelligence resume` first.");
+    const workflowId = randomUUID();
+    const sourceRecordId = randomUUID();
+    const event = PaceEventV3Schema.parse({
+        schema_version: 3,
+        collection_policy_version: "metadata-v3",
+        event_id: randomUUID(),
+        installation_id: device.installation_id,
+        occurred_at: new Date().toISOString(),
+        source: "unknown",
+        event_type: "session.started",
+        evidence_level: "exact",
+        session_id: sourceRecordId,
+        workflow_id: workflowId,
+        playbook_id: playbookId,
+        playbook_version: playbookVersion,
+        attributes: { client_event: "session_start" },
+    });
+    await appendPaceEvent(event);
+    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+    const response = await fetch(`${apiUrl}/api/ai-pace/playbooks`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+        body: JSON.stringify({
+            action: "record",
+            playbook_id: playbookId,
+            playbook_version: Number(playbookVersion),
+            event_type: "started",
+            source_record_id: sourceRecordId,
+            workflow_id: workflowId,
+        }),
+    });
+    // The event remains safely spooled when the marketplace endpoint is offline.
+    if (!response.ok && response.status < 500)
+        throw new Error(`Unfairly Intelligence playbook use failed (${response.status})`);
+    return { workflow_id: workflowId, queued: (await readPaceEvents()).length };
+}
+//# sourceMappingURL=pace.js.map