unfairly 0.8.0 → 0.8.2

package/plugin/.codex-plugin/plugin.json

@@ -0,0 +1,21 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0+codex.20260923193801",
+  "description": "Organizational intelligence for AI-enabled work, with content-free evidence and reusable team playbooks.",
+  "author": {
+    "name": "Unfairly"
+  },
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Unfairly Intelligence",
+    "shortDescription": "See what works. Help your company learn.",
+    "longDescription": "Unfairly Intelligence captures a narrow, content-free set of workflow and approved output facts across supported AI clients, connects aggregate investment to evidence and outcomes, and returns approved methods through a company marketplace.",
+    "developerName": "Unfairly",
+    "category": "Productivity",
+    "capabilities": [
+      "Interactive"
+    ],
+    "defaultPrompt": "Show me the most relevant approved company playbooks for this work."
+  },
+  "mcpServers": "./.mcp.json"
+}

package/plugin/.cursor-plugin/plugin.json

@@ -0,0 +1,16 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Unfairly Intelligence: content-free workflow evidence and reusable company playbooks.",
+  "author": {
+    "name": "Unfairly",
+    "email": "bob@hq.unfairly.ai"
+  },
+  "homepage": "https://intelligence.unfairly.ai",
+  "repository": "https://github.com/Unfairly-AI/unfairly-app",
+  "license": "MIT",
+  "keywords": ["analytics", "developer-tools", "governance", "playbooks"],
+  "skills": "./skills/",
+  "hooks": "./hooks/cursor-hooks.json",
+  "mcpServers": "./mcp.json"
+}

package/plugin/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "unfairly": {
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.2", "mcp"]
+    }
+  }
+}

package/plugin/README.md

@@ -0,0 +1,19 @@
+# Unfairly plugin for Unfairly Intelligence
+
+The Unfairly plugin is the portable workflow component for Unfairly Intelligence, backed by the existing `unfairly` CLI. Its root Agent Plugins manifest carries the shared skills and MCP definition. Codex/ChatGPT Work use the OpenAI extension, Claude Code uses the Claude compatibility manifest, Cursor uses the native Cursor overlay, and Gemini CLI loads the nested `gemini/` extension. All lifecycle hooks call the compatibility command `unfairly pace capture` and emit the same content-free event contract. Employee-facing commands use `unfairly intelligence`.
+
+The plugin intentionally contains only thin compatibility manifests. Identity, redaction, Git enrichment, durable local spooling, upload, and policy live in the shared CLI core.
+
+Employees install it through the existing one-command path:
+
+```bash
+npx unfairly@latest
+```
+
+The command places a version-pinned runtime and marketplace under `~/.unfairly`, activates every detected hook-capable client, and confirms enrollment with the Intelligence API. No global npm install or administrator permission is required. A newly installed AI client is picked up the next time the command runs. `unfairly intelligence install` is the explicit repair/reinstall command.
+
+Before activation, inspect the exact contract with `unfairly intelligence policy`. Use `unfairly intelligence status` to see enabled clients, queue depth, policy/runtime/plugin versions, attestation expiry, and last upload. Collection can be stopped without losing installation identity with `unfairly intelligence pause` and restarted with `unfairly intelligence resume`. `unfairly intelligence uninstall` removes only tracked Unfairly-managed files and local Intelligence state.
+
+It also closes the learning loop. Employees can search the organization's approved marketplace with `unfairly intelligence playbooks --query "<goal>"`, start one with `unfairly intelligence playbook-use <playbook-id> --version <version>`, and propose a content-safe learning after successful work. Playbook identity and version travel with workflow evidence so the dashboard can distinguish discovery, installation, reuse, and verified outcomes.
+
+The same runtime now includes a local evidence adapter for ChatGPT Desktop, Claude Desktop, and other closed applications. A centrally managed allowlist defines which output or app-state directories may be observed. Output roots produce content-free created/modified artifact facts; app-state roots produce one aggregated activity fact per scan. The adapter never reads file contents, silently expands beyond approved roots, or emits filenames.

package/plugin/deploy/README.md

@@ -0,0 +1,30 @@
+# Centrally managed deployment
+
+The portable plugin is the employee-facing package. The `unfairly` runtime is the managed enforcement and telemetry component.
+
+Generate vendor configuration from the same shared event definition:
+
+```bash
+unfairly intelligence config \
+  --output ./ai-pace-managed \
+  --command /usr/local/bin/unfairly \
+  --managed-dir /usr/local/lib/ai-pace \
+  --evidence-root "/Users/Shared/AI Outputs"
+```
+
+Deploy the generated files through Jamf, Kandji, Intune, Fleet, or an equivalent endpoint manager:
+
+- `codex-requirements.toml` to `/etc/codex/requirements.toml` on macOS/Linux or `%ProgramData%\OpenAI\Codex\requirements.toml` on Windows.
+- Merge `claude-settings.json` into the organization-managed Claude Code settings layer.
+- Deploy `cursor-hooks.json` as the Cursor enterprise/team hook configuration, or to `~/.cursor/hooks.json` for a pilot user.
+- Merge `gemini-settings.json` into `/Library/Application Support/GeminiCli/settings.json`, `/etc/gemini-cli/settings.json`, or `C:\ProgramData\gemini-cli\settings.json` according to platform.
+- Install the `unfairly` executable at the exact absolute command path used during generation.
+- Schedule `unfairly intelligence heartbeat` at login and every five minutes. It reports coverage and refreshes the short-lived device attestation.
+- Deploy `evidence-policy.json` to a root-owned managed path, then run `unfairly intelligence evidence-watch --policy <managed-path>` as a user launch agent or managed background process.
+- Populate `repository-policy.json` only with SHA-256 remote fingerprints and organization-issued repository UUIDs, then deploy it to the managed path named by `UNFAIRLY_PACE_REPOSITORY_POLICY`. The collector compares remotes locally and never emits a remote, path, repository name, or branch.
+
+The generated policy treats every `--evidence-root` as an approved work-output directory. Administrators may also add an `app_state` root with `source_app` set to `chatgpt` or `claude_desktop`. App-state roots emit aggregate change activity only; they do not expose cache filenames or contents. File basenames are never emitted.
+
+Do not place API keys, employee tokens, provider credentials, prompt logging, response logging, home-directory-wide roots, or unreviewed application caches in managed configuration. Authentication remains in the employee OS keychain.
+
+Validate each enrolled machine with `unfairly intelligence policy`, `unfairly intelligence status`, and one explicit `unfairly intelligence flush`. To stop collection temporarily, use the local pause command or set the installation to paused in Governance. Revoke an installation when its token or device is no longer trusted. Uninstall removes only the managed files recorded in local installation state; the endpoint manager remains responsible for removing centrally deployed copies.

package/plugin/gemini/GEMINI.md

@@ -0,0 +1,3 @@
+# Unfairly Intelligence
+
+The Unfairly plugin is installed by your organization so teams can learn from content-free workflow evidence, connect AI investment to outcomes, and share reusable methods. Use the Unfairly MCP server for approved organizational context and playbooks. Never send prompt bodies, response bodies, file contents, secrets, or raw command output to telemetry.

package/plugin/gemini/gemini-extension.json

@@ -0,0 +1,12 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Managed, content-safe AI usage telemetry and reusable team playbooks.",
+  "contextFileName": "GEMINI.md",
+  "mcpServers": {
+    "unfairly": {
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.2", "mcp"]
+    }
+  }
+}

package/plugin/gemini/hooks/hooks.json

@@ -0,0 +1,52 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-session-start",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event SessionStart"
+          }
+        ]
+      }
+    ],
+    "AfterTool": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-after-tool",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event AfterTool"
+          }
+        ]
+      }
+    ],
+    "AfterModel": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-after-model",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event AfterModel"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-session-end",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event SessionEnd"
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/hooks/cursor-hooks.json

@@ -0,0 +1,25 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" sessionStart"
+      }
+    ],
+    "postToolUse": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" postToolUse"
+      }
+    ],
+    "postToolUseFailure": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" postToolUseFailure"
+      }
+    ],
+    "sessionEnd": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" sessionEnd"
+      }
+    ]
+  }
+}

package/plugin/hooks/hooks.json

@@ -0,0 +1,56 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" SessionStart"
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" PostToolUse"
+          }
+        ]
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" PostToolUseFailure"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" Stop"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" SessionEnd"
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "unfairly": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.2", "mcp"]
+    }
+  }
+}

package/plugin/plugin.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Unfairly Intelligence: content-free workflow evidence and reusable company playbooks across AI coding agents.",
+  "author": {
+    "name": "Unfairly",
+    "email": "bob@hq.unfairly.ai",
+    "url": "https://unfairly.ai"
+  },
+  "homepage": "https://intelligence.unfairly.ai",
+  "repository": "https://github.com/Unfairly-AI/unfairly-app",
+  "license": "MIT",
+  "keywords": ["analytics", "developer-tools", "governance", "playbooks"],
+  "extensions": {
+    "com.openai": {
+      "hooks": "./hooks/hooks.json",
+      "interface": {
+        "displayName": "Unfairly Intelligence",
+        "shortDescription": "See what works. Help your company learn.",
+        "longDescription": "Collect content-free workflow evidence across supported coding agents and return approved company playbooks to employees.",
+        "developerName": "Unfairly",
+        "category": "Productivity",
+        "capabilities": ["Interactive"],
+        "websiteURL": "https://intelligence.unfairly.ai",
+        "defaultPrompt": [
+          "Show me the most relevant approved company playbooks for this work."
+        ]
+      }
+    }
+  }
+}

package/plugin/scripts/capture.cjs

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+const { spawn } = require("node:child_process");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const event = process.argv[2] || process.env.HOOK_EVENT_NAME || "Unknown";
+const source = process.env.GEMINI_CLI_HOME
+  ? "gemini_cli"
+  : process.env.CURSOR_PLUGIN_ROOT || process.env.CURSOR_PROJECT_DIR
+    ? "cursor"
+  : process.env.PLUGIN_ROOT
+    ? "codex"
+    : "claude_code";
+
+let command = "unfairly";
+let args = ["pace", "capture", "--source", source, "--event", event];
+try {
+  const pointer = JSON.parse(fs.readFileSync(path.join(os.homedir(), ".unfairly", "runtime", "current.json"), "utf8"));
+  if (typeof pointer.node === "string" && typeof pointer.entrypoint === "string") {
+    command = pointer.node;
+    args = [pointer.entrypoint, ...args];
+  }
+} catch {
+  // Compatibility fallback for existing global installs.
+}
+
+// Read the hook payload, hand it to a detached runtime process, and return at
+// once: summarizing transcripts and uploading must never make the AI client wait.
+const chunks = [];
+process.stdin.on("data", (chunk) => chunks.push(chunk));
+process.stdin.on("error", () => process.exit(0));
+process.stdin.on("end", () => {
+  let child;
+  try {
+    child = spawn(command, args, { stdio: ["pipe", "ignore", "ignore"], env: process.env, detached: true });
+  } catch {
+    process.exit(0);
+  }
+  child.on("error", () => process.exit(0));
+  child.stdin.on("error", () => undefined);
+  child.stdin.end(Buffer.concat(chunks), () => {
+    child.unref();
+    process.exit(0);
+  });
+});

package/plugin/skills/find-company-playbook/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: find-company-playbook
+description: Find and apply an approved company playbook when an employee asks how the organization handles a task, wants a reusable workflow, or starts work that may match an existing method.
+---
+
+# Find a company playbook
+
+Search the approved Unfairly Intelligence marketplace with `unfairly intelligence playbooks --query "<employee goal>"` before inventing a new workflow. Prefer a published playbook; label a pilot-ready playbook as a pilot.
+
+Show the employee the playbook title, intended outcome, owner, source requirements, and ordered steps. Ask before taking consequential actions. When the playbook is used, preserve its identifier and version in Unfairly Intelligence workflow context so reuse and downstream outcomes can be measured.
+
+Never expose another employee's prompts, responses, files, source code, or private session history. If no playbook matches, complete the work normally and offer to propose the successful method as a new learning.

package/plugin/skills/publish-learning/SKILL.md

@@ -0,0 +1,8 @@
+---
+name: publish-learning
+description: Propose a reusable, content-safe team playbook from a successful workflow when the user asks to share or publish a learning.
+---
+
+# Publish an Unfairly Intelligence learning
+
+Summarize the reusable workflow, not the private work product. Include the goal, tools and skills used, ordered steps, verification method, common failures, and resulting artifact type. Exclude prompts, responses, secrets, source code, customer data, file contents, and raw command output. Ask the employee to approve the proposed playbook before publishing it through Unfairly.