unfairly 0.8.1 → 0.8.3

package/dist/pace-runtime.js

@@ -0,0 +1,67 @@
+/**
+ * The runtime bundled inside the Unfairly plugin (plugins/ai-pace/runtime), so
+ * installing the plugin from an AI client's plugin store is the whole install:
+ * no npm, no terminal. Hooks call it as `node unfairly-intelligence.mjs <command>`.
+ *
+ *   connect <source> <event>   first-run connection; prints the SessionStart message
+ *   await-approval             background: claims the credential once the person approves, then syncs
+ *   capture <source> <event>   record a hook event (reads the hook payload on stdin)
+ */
+import { spawn } from "node:child_process";
+import os from "node:os";
+import { runPaceCapture, runPaceSync } from "./cmd/pace.js";
+import { readOrCreatePaceDevice } from "./pace/device.js";
+import { acquireApprovalLock, awaitApproval, ensureEnrolled, releaseApprovalLock, sessionStartOutput } from "./pace/enroll.js";
+const DEFAULT_API = "https://app.unfairly.ai";
+const apiUrl = () => (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
+async function connect(source, event) {
+    const device = await readOrCreatePaceDevice();
+    if (device.paused)
+        return;
+    const platform = os.platform();
+    const arch = os.arch();
+    if ((platform !== "darwin" && platform !== "linux" && platform !== "win32") || (arch !== "x64" && arch !== "arm64"))
+        return;
+    const state = await ensureEnrolled({
+        apiUrl: apiUrl(),
+        installationId: device.installation_id,
+        platform,
+        arch,
+        // The calling client identifies itself; probing every installed tool is too slow for a session start.
+        clients: [source],
+        orgHint: process.env.UNFAIRLY_ORG,
+    });
+    const output = sessionStartOutput(state, event === "sessionStart" ? "sessionStart" : "SessionStart");
+    if (output)
+        process.stdout.write(`${output}\n`);
+    if (state.status === "waiting") {
+        // Watch for the approval in the background so the machine connects while
+        // this session is still open. Detached, so the session never waits on it.
+        const child = spawn(process.execPath, [process.argv[1], "await-approval"], { detached: true, stdio: "ignore", env: process.env });
+        child.on("error", () => undefined);
+        child.unref();
+    }
+}
+async function awaitApprovalAndSync() {
+    if (!(await acquireApprovalLock()))
+        return;
+    try {
+        if (await awaitApproval({ apiUrl: apiUrl() }))
+            await runPaceSync();
+    }
+    finally {
+        await releaseApprovalLock();
+    }
+}
+async function main() {
+    const [command, source = "unknown", event = "Unknown"] = process.argv.slice(2);
+    if (command === "connect")
+        await connect(source, event);
+    else if (command === "await-approval")
+        await awaitApprovalAndSync();
+    else if (command === "capture")
+        await runPaceCapture(source, event);
+}
+// Telemetry must never break the person's AI session.
+main().catch(() => undefined).finally(() => process.exit(0));
+//# sourceMappingURL=pace-runtime.js.map

package/dist/pace-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pace-runtime.js","sourceRoot":"","sources":["../src/pace-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE/H,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAEtF,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,KAAa;IAClD,MAAM,MAAM,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;QAAE,OAAO;IAC5H,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC;QACjC,MAAM,EAAE,MAAM,EAAE;QAChB,cAAc,EAAE,MAAM,CAAC,eAAe;QACtC,QAAQ;QACR,IAAI;QACJ,sGAAsG;QACtG,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACrG,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAClI,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC,CAAC,MAAM,mBAAmB,EAAE,CAAC;QAAE,OAAO;IAC3C,IAAI,CAAC;QACH,IAAI,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SACnD,IAAI,OAAO,KAAK,gBAAgB;QAAE,MAAM,oBAAoB,EAAE,CAAC;SAC/D,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,sDAAsD;AACtD,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unfairly",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "description": "CLI + stdio MCP + library SDK for the Unfairly multiplayer context layer — sync vaults, run agents, emit events",
   "keywords": [
     "unfairly",
@@ -53,7 +53,9 @@
     "build": "tsc && chmod +x dist/index.js",
     "dev": "tsx src/index.ts",
     "test": "vitest run",
-    "prepublishOnly": "npm run build"
+    "prepack": "npm run build && node scripts/bundle-plugin-runtime.mjs && node scripts/stage-intelligence-plugin.mjs",
+    "prepublishOnly": "npm run build",
+    "bundle:plugin-runtime": "node scripts/bundle-plugin-runtime.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.4",
@@ -76,6 +78,7 @@
   },
   "files": [
     "dist",
+    "plugin",
     "README.md",
     "CHANGELOG.md"
   ]

package/plugin/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Unfairly Intelligence: content-free organizational learning and reusable team playbooks.",
+  "author": {
+    "name": "Unfairly"
+  },
+  "skills": "./skills/"
+}

package/plugin/.codex-plugin/plugin.json

@@ -0,0 +1,21 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0+codex.20260923193801",
+  "description": "Organizational intelligence for AI-enabled work, with content-free evidence and reusable team playbooks.",
+  "author": {
+    "name": "Unfairly"
+  },
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Unfairly Intelligence",
+    "shortDescription": "See what works. Help your company learn.",
+    "longDescription": "Unfairly Intelligence captures a narrow, content-free set of workflow and approved output facts across supported AI clients, connects aggregate investment to evidence and outcomes, and returns approved methods through a company marketplace.",
+    "developerName": "Unfairly",
+    "category": "Productivity",
+    "capabilities": [
+      "Interactive"
+    ],
+    "defaultPrompt": "Show me the most relevant approved company playbooks for this work."
+  },
+  "mcpServers": "./.mcp.json"
+}

package/plugin/.cursor-plugin/plugin.json

@@ -0,0 +1,16 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Unfairly Intelligence: content-free workflow evidence and reusable company playbooks.",
+  "author": {
+    "name": "Unfairly",
+    "email": "bob@hq.unfairly.ai"
+  },
+  "homepage": "https://intelligence.unfairly.ai",
+  "repository": "https://github.com/Unfairly-AI/unfairly-app",
+  "license": "MIT",
+  "keywords": ["analytics", "developer-tools", "governance", "playbooks"],
+  "skills": "./skills/",
+  "hooks": "./hooks/cursor-hooks.json",
+  "mcpServers": "./mcp.json"
+}

package/plugin/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "unfairly": {
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.3", "mcp"]
+    }
+  }
+}

package/plugin/README.md

@@ -0,0 +1,15 @@
+# Unfairly plugin for Unfairly Intelligence
+
+The Unfairly plugin is the portable workflow component for Unfairly Intelligence, backed by the existing `unfairly` CLI. Its root Agent Plugins manifest carries the shared skills and MCP definition. Codex/ChatGPT Work use the OpenAI extension, Claude Code uses the Claude compatibility manifest, Cursor uses the native Cursor overlay, and Gemini CLI loads the nested `gemini/` extension. All lifecycle hooks call the compatibility command `unfairly pace capture` and emit the same content-free event contract. Employee-facing commands use `unfairly intelligence`.
+
+The plugin carries its own bundled runtime (`runtime/unfairly-intelligence.mjs`, generated from `cli/src/pace-runtime.ts` by `npm run bundle:plugin-runtime` in `cli/`), so installing the plugin is the whole install. Hooks call `scripts/capture.cjs`, which prefers the bundled runtime and falls back to a runtime placed by `npx unfairly` or a global `unfairly`. Identity, redaction, Git enrichment, durable local spooling, upload, and policy live in the shared CLI core.
+
+Employees install it from their AI client's plugin screen, using the public marketplace `Unfairly-AI/unfairly-intelligence` (built from this directory by `scripts/build-intelligence-marketplace.mjs`). An administrator sends them `https://intelligence.unfairly.ai/install?org=<org-id>`, which walks through each client and shows the Claude managed-settings snippet for pushing it to everyone. On the first session start the plugin prints a link; the employee approves the machine in the browser (choosing the organization if they belong to several), and the machine receives its own revocable collector credential. A background poller picks up the approval within a few seconds, so the same session connects, and the first sync uploads the last 90 days of sessions after fetching the approved-repository list. After that, session summaries upload at every session start and end.
+
+The terminal path still works: `npx unfairly@latest setup --org <org-id>` installs and enrolls, and `unfairly intelligence backfill --days 90` uploads past sessions from the local transcripts.
+
+Before activation, inspect the exact contract with `unfairly intelligence policy`. Use `unfairly intelligence status` to see enabled clients, queue depth, policy/runtime/plugin versions, attestation expiry, and last upload. Collection can be stopped without losing installation identity with `unfairly intelligence pause` and restarted with `unfairly intelligence resume`. `unfairly intelligence uninstall` removes only tracked Unfairly-managed files and local Intelligence state.
+
+It also closes the learning loop. Employees can search the organization's approved marketplace with `unfairly intelligence playbooks --query "<goal>"`, start one with `unfairly intelligence playbook-use <playbook-id> --version <version>`, and propose a content-safe learning after successful work. Playbook identity and version travel with workflow evidence so the dashboard can distinguish discovery, installation, reuse, and verified outcomes.
+
+The same runtime now includes a local evidence adapter for ChatGPT Desktop, Claude Desktop, and other closed applications. A centrally managed allowlist defines which output or app-state directories may be observed. Output roots produce content-free created/modified artifact facts; app-state roots produce one aggregated activity fact per scan. The adapter never reads file contents, silently expands beyond approved roots, or emits filenames.

package/plugin/deploy/README.md

@@ -0,0 +1,30 @@
+# Centrally managed deployment
+
+The portable plugin is the employee-facing package. The `unfairly` runtime is the managed enforcement and telemetry component.
+
+Generate vendor configuration from the same shared event definition:
+
+```bash
+unfairly intelligence config \
+  --output ./ai-pace-managed \
+  --command /usr/local/bin/unfairly \
+  --managed-dir /usr/local/lib/ai-pace \
+  --evidence-root "/Users/Shared/AI Outputs"
+```
+
+Deploy the generated files through Jamf, Kandji, Intune, Fleet, or an equivalent endpoint manager:
+
+- `codex-requirements.toml` to `/etc/codex/requirements.toml` on macOS/Linux or `%ProgramData%\OpenAI\Codex\requirements.toml` on Windows.
+- Merge `claude-settings.json` into the organization-managed Claude Code settings layer.
+- Deploy `cursor-hooks.json` as the Cursor enterprise/team hook configuration, or to `~/.cursor/hooks.json` for a pilot user.
+- Merge `gemini-settings.json` into `/Library/Application Support/GeminiCli/settings.json`, `/etc/gemini-cli/settings.json`, or `C:\ProgramData\gemini-cli\settings.json` according to platform.
+- Install the `unfairly` executable at the exact absolute command path used during generation.
+- Schedule `unfairly intelligence heartbeat` at login and every five minutes. It reports coverage and refreshes the short-lived device attestation.
+- Deploy `evidence-policy.json` to a root-owned managed path, then run `unfairly intelligence evidence-watch --policy <managed-path>` as a user launch agent or managed background process.
+- Populate `repository-policy.json` only with SHA-256 remote fingerprints and organization-issued repository UUIDs, then deploy it to the managed path named by `UNFAIRLY_PACE_REPOSITORY_POLICY`. The collector compares remotes locally and never emits a remote, path, repository name, or branch.
+
+The generated policy treats every `--evidence-root` as an approved work-output directory. Administrators may also add an `app_state` root with `source_app` set to `chatgpt` or `claude_desktop`. App-state roots emit aggregate change activity only; they do not expose cache filenames or contents. File basenames are never emitted.
+
+Do not place API keys, employee tokens, provider credentials, prompt logging, response logging, home-directory-wide roots, or unreviewed application caches in managed configuration. Authentication remains in the employee OS keychain.
+
+Validate each enrolled machine with `unfairly intelligence policy`, `unfairly intelligence status`, and one explicit `unfairly intelligence flush`. To stop collection temporarily, use the local pause command or set the installation to paused in Governance. Revoke an installation when its token or device is no longer trusted. Uninstall removes only the managed files recorded in local installation state; the endpoint manager remains responsible for removing centrally deployed copies.

package/plugin/gemini/GEMINI.md

@@ -0,0 +1,3 @@
+# Unfairly Intelligence
+
+The Unfairly plugin is installed by your organization so teams can learn from content-free workflow evidence, connect AI investment to outcomes, and share reusable methods. Use the Unfairly MCP server for approved organizational context and playbooks. Never send prompt bodies, response bodies, file contents, secrets, or raw command output to telemetry.

package/plugin/gemini/gemini-extension.json

@@ -0,0 +1,12 @@
+{
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Managed, content-safe AI usage telemetry and reusable team playbooks.",
+  "contextFileName": "GEMINI.md",
+  "mcpServers": {
+    "unfairly": {
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.3", "mcp"]
+    }
+  }
+}

package/plugin/gemini/hooks/hooks.json

@@ -0,0 +1,52 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-session-start",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event SessionStart"
+          }
+        ]
+      }
+    ],
+    "AfterTool": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-after-tool",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event AfterTool"
+          }
+        ]
+      }
+    ],
+    "AfterModel": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-after-model",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event AfterModel"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "name": "ai-pace-session-end",
+            "type": "command",
+            "command": "unfairly pace capture --source gemini_cli --event SessionEnd"
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/hooks/cursor-hooks.json

@@ -0,0 +1,25 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" sessionStart"
+      }
+    ],
+    "postToolUse": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" postToolUse"
+      }
+    ],
+    "postToolUseFailure": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" postToolUseFailure"
+      }
+    ],
+    "sessionEnd": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/scripts/capture.cjs\" sessionEnd"
+      }
+    ]
+  }
+}

package/plugin/hooks/hooks.json

@@ -0,0 +1,56 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" SessionStart"
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" PostToolUse"
+          }
+        ]
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" PostToolUseFailure"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" Stop"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/capture.cjs\" SessionEnd"
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "unfairly": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "unfairly@0.8.3", "mcp"]
+    }
+  }
+}

package/plugin/plugin.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "ai-pace",
+  "version": "0.1.0",
+  "description": "Unfairly Intelligence: content-free workflow evidence and reusable company playbooks across AI coding agents.",
+  "author": {
+    "name": "Unfairly",
+    "email": "bob@hq.unfairly.ai",
+    "url": "https://unfairly.ai"
+  },
+  "homepage": "https://intelligence.unfairly.ai",
+  "repository": "https://github.com/Unfairly-AI/unfairly-app",
+  "license": "MIT",
+  "keywords": ["analytics", "developer-tools", "governance", "playbooks"],
+  "extensions": {
+    "com.openai": {
+      "hooks": "./hooks/hooks.json",
+      "interface": {
+        "displayName": "Unfairly Intelligence",
+        "shortDescription": "See what works. Help your company learn.",
+        "longDescription": "Collect content-free workflow evidence across supported coding agents and return approved company playbooks to employees.",
+        "developerName": "Unfairly",
+        "category": "Productivity",
+        "capabilities": ["Interactive"],
+        "websiteURL": "https://intelligence.unfairly.ai",
+        "defaultPrompt": [
+          "Show me the most relevant approved company playbooks for this work."
+        ]
+      }
+    }
+  }
+}