unfairly 0.8.2 → 0.8.4

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.8.4 — 2026-10-05
+
+- **Proprietary license** — the package is now licensed under Unfairly's terms instead of MIT. It ships minified, without source maps, and no longer links to the source repository. Behavior is unchanged.
+
+## 0.8.3 — 2026-09-25
+
+- **Connect in the same session** — after the person approves the machine in the browser, a detached poller claims the collector credential within seconds, so the session that showed the link starts reporting without a restart.
+- **90-day backfill on first connect** — the first sync fetches the org's approved repositories and uploads the last 90 days of session summaries with their commits.
+- **Members of several organizations** — the connect code survives the organization picker, so a member of more than one org can choose which one the machine reports to.
+
 ## 0.8.2 — 2026-09-24
 
 - **Unfairly Intelligence collector** — `unfairly setup` installs a metadata-only collector for Claude Code, Codex, Cursor, and Gemini CLI. At session boundaries it summarizes each session from the client's own local transcript: model, token counts by type, turns, tool calls and errors, approval denials, subagent use, the approved repository, the SHAs of the session's own commits, and which published skills or company playbooks it used. Prompts, responses, code, commands, paths, branch names, and commit messages never leave the machine; skills outside the published set are counted, not named.

package/LICENSE

@@ -0,0 +1,15 @@
+Copyright (c) 2026 Unfairly AI. All rights reserved.
+
+This software is proprietary and confidential. You may install and run it to
+use Unfairly services under the terms at https://unfairly.ai. No other license
+is granted to use, copy, modify, merge, publish, distribute, sublicense, or
+sell copies of this software, in whole or in part, or to reverse engineer it,
+except as expressly permitted in a separate written agreement with Unfairly AI.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -21,9 +21,11 @@ That's it. One command — auto-detects state and:
 
 Re-run any time inside the repo for a daily check-in card showing what your team's been up to.
 
+For Unfairly Intelligence alone, most people install the plugin from their AI client's plugin screen instead (see `plugins/ai-pace/README.md`). `unfairly setup --org <org-id>` enrolls a machine into a specific organization, and `unfairly intelligence backfill --days 90` uploads summaries of past local sessions.
+
 ### Power-user commands
 
-`unfairly setup` (machine wiring), `unfairly intelligence install` (collector install/repair), `unfairly intelligence status`, `unfairly intelligence policy`, `unfairly intelligence pause`, `unfairly intelligence uninstall`, `unfairly init` (workspace bind only), `unfairly pull`, `unfairly push`, `unfairly status`, `unfairly watch`, `unfairly mcp`, `unfairly login`. The bare command above delegates to these — they're available when you want fine-grained control.
+`unfairly setup` (machine wiring), `unfairly intelligence install` (collector install/repair), `unfairly intelligence status`, `unfairly intelligence backfill`, `unfairly intelligence policy`, `unfairly intelligence pause`, `unfairly intelligence uninstall`, `unfairly init` (workspace bind only), `unfairly pull`, `unfairly push`, `unfairly status`, `unfairly watch`, `unfairly mcp`, `unfairly login`. The bare command above delegates to these — they're available when you want fine-grained control.
 
 ## Commands
 

package/dist/auth/browser-flow.d.ts

@@ -22,4 +22,3 @@ export declare function cliAuthUrl(apiUrl: string, input: {
  * verifies the state echo and resolves with the token.
  */
 export declare function browserAuthFlow(apiUrl: string, opts?: BrowserAuthOptions): Promise<string | null>;
-//# sourceMappingURL=browser-flow.d.ts.map

package/dist/auth/browser-flow.js

@@ -1,81 +1,5 @@
-import http from "node:http";
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-const SUCCESS_HTML = `<!doctype html><html><head><meta charset="utf-8"><title>Unfairly CLI authorized</title><style>body{margin:0;background:#FAF5EB;font-family:system-ui;color:#1a1612;display:flex;align-items:center;justify-content:center;min-height:100vh}.card{background:#fff;border:3px solid #1a1612;border-radius:20px;box-shadow:6px 6px 0 #1a1612;padding:36px;max-width:420px;text-align:center}h1{margin:0 0 8px;font-size:28px}p{margin:0;color:rgba(26,22,18,.7)}</style></head><body><div class="card"><h1>Authorized.</h1><p>You can close this window and return to your terminal.</p></div></body></html>`;
-export function openBrowser(url) {
-    const opener = process.platform === "darwin"
-        ? "open"
-        : process.platform === "win32"
-            ? "cmd"
-            : "xdg-open";
-    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-    try {
-        spawn(opener, args, { stdio: "ignore", detached: true }).unref();
-    }
-    catch {
-        // best-effort
-    }
-}
-/** The /cli-auth page URL. An organization ID scopes the minted token to that org when the user is a member. */
-export function cliAuthUrl(apiUrl, input) {
-    const url = new URL("/cli-auth", apiUrl);
-    url.searchParams.set("cb", input.cb);
-    url.searchParams.set("state", input.state);
-    url.searchParams.set("name", input.tokenName);
-    if (input.org && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(input.org))
-        url.searchParams.set("org", input.org);
-    return url;
-}
-/**
- * OAuth handshake via loopback HTTP server. Used by `unfairly setup`,
- * `unfairly login`, and `unfairly init`.
- *
- * Flow: pop a /cli-auth page in the user's browser with a one-time `state`
- * and a `cb=http://localhost:<port>/done` callback. The page mints a
- * `mcp_*` token and redirects the browser back to `cb`. Our local server
- * verifies the state echo and resolves with the token.
- */
-export async function browserAuthFlow(apiUrl, opts = {}) {
-    const tokenName = opts.tokenName ?? "unfairly cli";
-    const timeoutMs = opts.timeoutMs ?? 5 * 60_000;
-    const state = crypto.randomBytes(16).toString("base64url");
-    return new Promise((resolve) => {
-        let resolved = false;
-        const cleanup = (val) => {
-            if (resolved)
-                return;
-            resolved = true;
-            setTimeout(() => server.close(), 500);
-            resolve(val);
-        };
-        const server = http.createServer((req, res) => {
-            const url = new URL(req.url ?? "/", "http://localhost");
-            if (url.pathname !== "/done") {
-                res.writeHead(404).end();
-                return;
-            }
-            const echoState = url.searchParams.get("state") ?? "";
-            const token = url.searchParams.get("token") ?? "";
-            if (echoState !== state || !token.startsWith("mcp_")) {
-                res.writeHead(400).end("Auth failed");
-                cleanup(null);
-                return;
-            }
-            res
-                .writeHead(200, { "Content-Type": "text/html; charset=utf-8" })
-                .end(SUCCESS_HTML);
-            cleanup(token);
-        });
-        const timeout = setTimeout(() => cleanup(null), timeoutMs);
-        server.on("close", () => clearTimeout(timeout));
-        server.listen(0, "127.0.0.1", () => {
-            const addr = server.address();
-            const port = typeof addr === "object" && addr ? addr.port : 0;
-            const cb = `http://localhost:${port}/done`;
-            const authUrl = cliAuthUrl(apiUrl, { cb, state, tokenName, org: opts.org ?? process.env.UNFAIRLY_ORG });
-            console.error(`\nOpening browser to authorize:\n  ${authUrl.toString()}\n(if it doesn't open, click the link above)\n`);
-            openBrowser(authUrl.toString());
-        });
-    });
-}
-//# sourceMappingURL=browser-flow.js.map
+import f from"node:http";import g from"node:crypto";import{spawn as y}from"node:child_process";const w='<!doctype html><html><head><meta charset="utf-8"><title>Unfairly CLI authorized</title><style>body{margin:0;background:#FAF5EB;font-family:system-ui;color:#1a1612;display:flex;align-items:center;justify-content:center;min-height:100vh}.card{background:#fff;border:3px solid #1a1612;border-radius:20px;box-shadow:6px 6px 0 #1a1612;padding:36px;max-width:420px;text-align:center}h1{margin:0 0 8px;font-size:28px}p{margin:0;color:rgba(26,22,18,.7)}</style></head><body><div class="card"><h1>Authorized.</h1><p>You can close this window and return to your terminal.</p></div></body></html>';function b(r){const t=process.platform==="darwin"?"open":process.platform==="win32"?"cmd":"xdg-open",e=process.platform==="win32"?["/c","start","",r]:[r];try{y(t,e,{stdio:"ignore",detached:!0}).unref()}catch{}}function x(r,t){const e=new URL("/cli-auth",r);return e.searchParams.set("cb",t.cb),e.searchParams.set("state",t.state),e.searchParams.set("name",t.tokenName),t.org&&/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(t.org)&&e.searchParams.set("org",t.org),e}async function P(r,t={}){const e=t.tokenName??"unfairly cli",h=t.timeoutMs??5*6e4,l=g.randomBytes(16).toString("base64url");return new Promise(p=>{let d=!1;const i=o=>{d||(d=!0,setTimeout(()=>n.close(),500),p(o))},n=f.createServer((o,s)=>{const a=new URL(o.url??"/","http://localhost");if(a.pathname!=="/done"){s.writeHead(404).end();return}const c=a.searchParams.get("state")??"",m=a.searchParams.get("token")??"";if(c!==l||!m.startsWith("mcp_")){s.writeHead(400).end("Auth failed"),i(null);return}s.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}).end(w),i(m)}),u=setTimeout(()=>i(null),h);n.on("close",()=>clearTimeout(u)),n.listen(0,"127.0.0.1",()=>{const o=n.address(),a=`http://localhost:${typeof o=="object"&&o?o.port:0}/done`,c=x(r,{cb:a,state:l,tokenName:e,org:t.org??process.env.UNFAIRLY_ORG});console.error(`
+Opening browser to authorize:
+  ${c.toString()}
+(if it doesn't open, click the link above)
+`),b(c.toString())})})}export{P as browserAuthFlow,x as cliAuthUrl,b as openBrowser};

package/dist/cmd/connect.d.ts

@@ -58,4 +58,3 @@ export declare const connectCommand: {
     handler: (args: ConnectArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=connect.d.ts.map

package/dist/cmd/connect.js

@@ -1,164 +1 @@
-import { parseShareInput } from "./parse-share-input.js";
-import { addScopedClaudeDesktopEntry, } from "../hosts/claude-desktop.js";
-import { addScopedClaudeCodeEntry } from "../hosts/claude-code.js";
-import { addScopedCodexEntry, } from "../hosts/codex.js";
-const API_DEFAULT = "https://app.unfairly.ai";
-/**
- * Map a mint endpoint error code to a user-facing message.
- */
-function describeMintError(status, code) {
-    if (status === 404 || code === "not_found") {
-        return "share link not found — double-check the URL or ask the sender to issue a new one.";
-    }
-    if (status === 410 || code === "revoked_or_expired") {
-        return "share link expired or was revoked — ask the sender for a fresh one.";
-    }
-    if (status === 429 || code === "rate_limited") {
-        return "rate limited (10 mints / hour per link) — try again in an hour.";
-    }
-    if (status === 400 || code === "no_room") {
-        return "invalid share link — it isn't bound to a vault.";
-    }
-    return `server error while minting (${status} ${code}).`;
-}
-/**
- * Pure-ish implementation. Tests inject `deps` to drive without hitting
- * the network or touching real config files.
- */
-export async function runConnect(args, deps) {
-    let parsed;
-    try {
-        parsed = parseShareInput(args.urlOrId);
-    }
-    catch (err) {
-        deps.errLog(`✗ ${err.message}`);
-        return { ok: false, exitCode: 1 };
-    }
-    const apiOrigin = args.api ?? parsed.origin ?? API_DEFAULT;
-    const mintUrl = `${apiOrigin.replace(/\/$/, "")}/api/share-links/${parsed.shareId}/mint-token`;
-    const body = {};
-    if (args.as)
-        body.email = args.as;
-    if (args.label)
-        body.label = args.label;
-    deps.log("✦ Minting a 24-hour vault token…");
-    let res;
-    try {
-        res = await deps.fetch(mintUrl, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify(body),
-        });
-    }
-    catch (err) {
-        deps.errLog(`✗ network error reaching ${apiOrigin}: ${err.message}`);
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    if (!res.ok) {
-        let parsedErr = { error: "unknown" };
-        try {
-            parsedErr = (await res.json());
-        }
-        catch {
-            // body wasn't JSON — fall through with default
-        }
-        const message = describeMintError(res.status, parsedErr.error ?? "unknown");
-        deps.errLog(`✗ ${message}`);
-        return {
-            ok: false,
-            exitCode: 1,
-            shareId: parsed.shareId,
-            errorCode: parsedErr.error,
-        };
-    }
-    let mint;
-    try {
-        mint = (await res.json());
-    }
-    catch (err) {
-        deps.errLog(`✗ mint endpoint returned non-JSON: ${err.message}`);
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    if (!mint.token || !mint.mcp_url) {
-        deps.errLog("✗ mint endpoint response missing token or mcp_url");
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    const input = {
-        orgSlug: mint.org_slug,
-        roomSlug: mint.room_slug,
-        shareLinkId: parsed.shareId,
-        token: mint.token,
-        mcpUrl: mint.mcp_url,
-    };
-    const [claudeDesktop, claudeCode, codex] = await Promise.all([
-        deps.addClaudeDesktop(input),
-        deps.addClaudeCode(input),
-        deps.addCodex(input),
-    ]);
-    // Per-host success line.
-    const reportHost = (name, result) => {
-        if (result.status === "configured") {
-            const verb = "replaced" in result && result.replaced ? "Updated" : "Wired";
-            deps.log(`✓ ${verb} ${name} · ${result.key}`);
-        }
-        else if (result.status === "not-installed") {
-            deps.log(`  (${name} not installed — skipped)`);
-        }
-        else {
-            deps.errLog(`✗ ${name}: ${result.message ?? "unknown error"}`);
-        }
-    };
-    reportHost("Claude Desktop", claudeDesktop);
-    reportHost("Claude Code", claudeCode);
-    reportHost("Codex", codex);
-    deps.log("");
-    deps.log("→ Open your AI host. Ask: \"what's in this vault?\"");
-    if (mint.expires_at) {
-        deps.log(`  Token expires at ${mint.expires_at} (≤24h).`);
-    }
-    else {
-        deps.log("  Token expires in 24h.");
-    }
-    return {
-        ok: true,
-        exitCode: 0,
-        shareId: parsed.shareId,
-        hosts: { claudeDesktop, claudeCode, codex },
-        mint,
-    };
-}
-export const connectCommand = {
-    command: "connect <urlOrId>",
-    describe: "Connect to a shared vault via share link — mints a 24h token, wires all hosts",
-    builder: (yargs) => yargs
-        .positional("urlOrId", {
-        type: "string",
-        demandOption: true,
-        describe: "Share link URL (https://app.unfairly.ai/s/<uuid>), short form (s/<uuid>), or bare UUID",
-    })
-        .option("as", {
-        type: "string",
-        describe: "Email to attribute the token to (audit only)",
-    })
-        .option("label", {
-        type: "string",
-        describe: "Human label for the audit log (≤100 chars)",
-    })
-        .option("api", {
-        type: "string",
-        describe: "Override the API origin (defaults to the URL's origin or app.unfairly.ai)",
-    }),
-    handler: async (args) => {
-        const outcome = await runConnect(args, {
-            fetch: globalThis.fetch.bind(globalThis),
-            addClaudeDesktop: addScopedClaudeDesktopEntry,
-            addClaudeCode: addScopedClaudeCodeEntry,
-            addCodex: addScopedCodexEntry,
-            log: (line) => console.log(line),
-            errLog: (line) => console.error(line),
-        });
-        if (!outcome.ok)
-            process.exit(outcome.exitCode);
-    },
-};
-//# sourceMappingURL=connect.js.map
+import{parseShareInput as g}from"./parse-share-input.js";import{addScopedClaudeDesktopEntry as f}from"../hosts/claude-desktop.js";import{addScopedClaudeCodeEntry as C}from"../hosts/claude-code.js";import{addScopedCodexEntry as y}from"../hosts/codex.js";const b="https://app.unfairly.ai";function x(r,e){return r===404||e==="not_found"?"share link not found \u2014 double-check the URL or ask the sender to issue a new one.":r===410||e==="revoked_or_expired"?"share link expired or was revoked \u2014 ask the sender for a fresh one.":r===429||e==="rate_limited"?"rate limited (10 mints / hour per link) \u2014 try again in an hour.":r===400||e==="no_room"?"invalid share link \u2014 it isn't bound to a vault.":`server error while minting (${r} ${e}).`}async function I(r,e){let o;try{o=g(r.urlOrId)}catch(t){return e.errLog(`\u2717 ${t.message}`),{ok:!1,exitCode:1}}const u=r.api??o.origin??b,k=`${u.replace(/\/$/,"")}/api/share-links/${o.shareId}/mint-token`,s={};r.as&&(s.email=r.as),r.label&&(s.label=r.label),e.log("\u2726 Minting a 24-hour vault token\u2026");let a;try{a=await e.fetch(k,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)})}catch(t){return e.errLog(`\u2717 network error reaching ${u}: ${t.message}`),{ok:!1,exitCode:1,shareId:o.shareId}}if(!a.ok){let t={error:"unknown"};try{t=await a.json()}catch{}const i=x(a.status,t.error??"unknown");return e.errLog(`\u2717 ${i}`),{ok:!1,exitCode:1,shareId:o.shareId,errorCode:t.error}}let n;try{n=await a.json()}catch(t){return e.errLog(`\u2717 mint endpoint returned non-JSON: ${t.message}`),{ok:!1,exitCode:1,shareId:o.shareId}}if(!n.token||!n.mcp_url)return e.errLog("\u2717 mint endpoint response missing token or mcp_url"),{ok:!1,exitCode:1,shareId:o.shareId};const d={orgSlug:n.org_slug,roomSlug:n.room_slug,shareLinkId:o.shareId,token:n.token,mcpUrl:n.mcp_url},[h,c,p]=await Promise.all([e.addClaudeDesktop(d),e.addClaudeCode(d),e.addCodex(d)]),l=(t,i)=>{if(i.status==="configured"){const m="replaced"in i&&i.replaced?"Updated":"Wired";e.log(`\u2713 ${m} ${t} \xB7 ${i.key}`)}else i.status==="not-installed"?e.log(`  (${t} not installed \u2014 skipped)`):e.errLog(`\u2717 ${t}: ${i.message??"unknown error"}`)};return l("Claude Desktop",h),l("Claude Code",c),l("Codex",p),e.log(""),e.log(`\u2192 Open your AI host. Ask: "what's in this vault?"`),n.expires_at?e.log(`  Token expires at ${n.expires_at} (\u226424h).`):e.log("  Token expires in 24h."),{ok:!0,exitCode:0,shareId:o.shareId,hosts:{claudeDesktop:h,claudeCode:c,codex:p},mint:n}}const v={command:"connect <urlOrId>",describe:"Connect to a shared vault via share link \u2014 mints a 24h token, wires all hosts",builder:r=>r.positional("urlOrId",{type:"string",demandOption:!0,describe:"Share link URL (https://app.unfairly.ai/s/<uuid>), short form (s/<uuid>), or bare UUID"}).option("as",{type:"string",describe:"Email to attribute the token to (audit only)"}).option("label",{type:"string",describe:"Human label for the audit log (\u2264100 chars)"}).option("api",{type:"string",describe:"Override the API origin (defaults to the URL's origin or app.unfairly.ai)"}),handler:async r=>{const e=await I(r,{fetch:globalThis.fetch.bind(globalThis),addClaudeDesktop:f,addClaudeCode:C,addCodex:y,log:o=>console.log(o),errLog:o=>console.error(o)});e.ok||process.exit(e.exitCode)}};export{v as connectCommand,I as runConnect};

package/dist/cmd/init.d.ts

@@ -6,4 +6,3 @@ export type InitOptions = {
     assumeAuthed?: boolean;
 };
 export declare function runInit(opts?: InitOptions): Promise<void>;
-//# sourceMappingURL=init.d.ts.map

package/dist/cmd/init.js

@@ -1,138 +1,2 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import readline from "node:readline/promises";
-import { stdin as input, stdout as output } from "node:process";
-import { SyncClient } from "../sync/api.js";
-import { emptyManifest, writeManifest } from "../sync/manifest.js";
-import { getToken, setToken } from "../sync/credentials.js";
-import { browserAuthFlow } from "../auth/browser-flow.js";
-import { runPull } from "./pull.js";
-import { findRepoRoot } from "../sync/repo-root.js";
-import { stitchClaudeMd } from "../sync/stitch-claude-md.js";
-import { banner, stepHeader, result, divider, defaultOpts } from "../ui/screens.js";
-const DEFAULT_API = "https://app.unfairly.ai";
-function isTty() {
-    return Boolean(process.stdin.isTTY);
-}
-export async function runInit(opts = {}) {
-    const cwd = process.cwd();
-    const target = path.join(cwd, ".unfairly");
-    const apiUrl = process.env.UNFAIRLY_API_URL ?? DEFAULT_API;
-    const ui = defaultOpts();
-    const write = (s) => process.stderr.write(`${s}\n`);
-    if (!opts.assumeAuthed) {
-        write(banner(ui));
-        write("");
-    }
-    // Confirm overwrite if .unfairly/ already exists
-    try {
-        await fs.access(target);
-        if (!opts.yes) {
-            if (!isTty()) {
-                write(result("err", ".unfairly/ already exists — re-run with --yes to overwrite (non-TTY).", ui));
-                process.exit(1);
-            }
-            const rl = readline.createInterface({ input, output });
-            const ans = await rl.question(`.unfairly/ already exists. Re-initialize? [y/N] `);
-            rl.close();
-            if (ans.trim().toLowerCase() !== "y") {
-                write(result("skip", "aborted", ui));
-                return;
-            }
-        }
-    }
-    catch {
-        // didn't exist; fine
-    }
-    // Resolve token (flag → env → keychain → browser → paste)
-    let token = opts.token ?? process.env.UNFAIRLY_TOKEN ?? (await getToken());
-    if (!token) {
-        if (!isTty()) {
-            write(result("err", "No token. Pass --token or set UNFAIRLY_TOKEN (non-TTY).", ui));
-            process.exit(1);
-        }
-        if (!opts.noBrowser) {
-            const fromBrowser = await browserAuthFlow(apiUrl);
-            if (fromBrowser)
-                token = fromBrowser;
-        }
-        if (!token) {
-            const rl = readline.createInterface({ input, output });
-            token = (await rl.question("Paste mcp_* token: ")).trim();
-            rl.close();
-        }
-    }
-    if (!token || !token.startsWith("mcp_")) {
-        write(result("err", "Token must start with mcp_", ui));
-        process.exit(1);
-    }
-    await setToken(token);
-    // Verify + list vaults
-    const client = new SyncClient(apiUrl, token);
-    write(stepHeader(1, 3, "VAULT INVENTORY", ui));
-    let status;
-    try {
-        status = await client.status();
-    }
-    catch (err) {
-        write(result("err", `failed to reach ${apiUrl}/api/sync/status — ${err.message}`, ui));
-        process.exit(1);
-    }
-    if (status.vaults.length === 0) {
-        write(result("err", "no accessible vaults. Ask an admin to grant you access.", ui));
-        process.exit(1);
-    }
-    for (const v of status.vaults.slice(0, 6)) {
-        write(result("ok", `${v.name.padEnd(20)} · ${v.doc_count} docs${v.track_in_git ? "" : "  (gitignored)"}`, ui));
-    }
-    if (status.vaults.length > 6) {
-        const remaining = status.vaults.length - 6;
-        const totalDocs = status.vaults.reduce((s, v) => s + v.doc_count, 0);
-        write(result("skip", `… ${remaining} more vaults · ${totalDocs} docs total`, ui));
-    }
-    write("");
-    // Seed manifest + pull
-    write(stepHeader(2, 3, "PULL", ui));
-    await fs.mkdir(target, { recursive: true });
-    const manifest = emptyManifest(apiUrl);
-    for (const v of status.vaults) {
-        manifest.vaults[v.slug] = {
-            id: v.id,
-            slug: v.slug,
-            name: v.name,
-            track_in_git: v.track_in_git,
-            last_pulled_at: null,
-            last_pushed_at: null,
-            docs: {},
-        };
-    }
-    await writeManifest(cwd, manifest);
-    await runPull(undefined);
-    write(result("ok", "wrote .unfairly/CLAUDE.md (auto-loader for Claude Code)", ui));
-    write("");
-    // Stitch repo's root CLAUDE.md
-    write(stepHeader(3, 3, "STITCH", ui));
-    const repoRoot = await findRepoRoot(cwd);
-    if (!repoRoot) {
-        write(result("skip", "not in a git repo — skipping CLAUDE.md stitch", ui));
-    }
-    else {
-        const stitch = await stitchClaudeMd(repoRoot);
-        if (stitch.action === "created") {
-            write(result("ok", `created ${stitch.path} with @.unfairly/CLAUDE.md`, ui));
-        }
-        else if (stitch.action === "appended") {
-            write(result("ok", `appended @.unfairly/CLAUDE.md to ${stitch.path}`, ui));
-        }
-        else if (stitch.action === "noop") {
-            write(result("skip", `${stitch.path} already references the autoloader`, ui));
-        }
-        else if (stitch.action === "error") {
-            write(result("warn", `couldn't stitch ${stitch.path} — ${stitch.message}`, ui));
-        }
-    }
-    write("");
-    write(divider(ui));
-    write("");
-}
-//# sourceMappingURL=init.js.map
+import{promises as m}from"node:fs";import v from"node:path";import w from"node:readline/promises";import{stdin as h,stdout as k}from"node:process";import{SyncClient as A}from"../sync/api.js";import{emptyManifest as L,writeManifest as $}from"../sync/manifest.js";import{getToken as U,setToken as C}from"../sync/credentials.js";import{browserAuthFlow as I}from"../auth/browser-flow.js";import{runPull as E}from"./pull.js";import{findRepoRoot as N}from"../sync/repo-root.js";import{stitchClaudeMd as R}from"../sync/stitch-claude-md.js";import{banner as x,stepHeader as u,result as o,divider as Y,defaultOpts as D}from"../ui/screens.js";const P="https://app.unfairly.ai";function y(){return!!process.stdin.isTTY}async function W(a={}){const c=process.cwd(),p=v.join(c,".unfairly"),n=process.env.UNFAIRLY_API_URL??P,s=D(),e=t=>process.stderr.write(`${t}
+`);a.assumeAuthed||(e(x(s)),e(""));try{if(await m.access(p),!a.yes){y()||(e(o("err",".unfairly/ already exists \u2014 re-run with --yes to overwrite (non-TTY).",s)),process.exit(1));const t=w.createInterface({input:h,output:k}),l=await t.question(".unfairly/ already exists. Re-initialize? [y/N] ");if(t.close(),l.trim().toLowerCase()!=="y"){e(o("skip","aborted",s));return}}}catch{}let r=a.token??process.env.UNFAIRLY_TOKEN??await U();if(!r){if(y()||(e(o("err","No token. Pass --token or set UNFAIRLY_TOKEN (non-TTY).",s)),process.exit(1)),!a.noBrowser){const t=await I(n);t&&(r=t)}if(!r){const t=w.createInterface({input:h,output:k});r=(await t.question("Paste mcp_* token: ")).trim(),t.close()}}(!r||!r.startsWith("mcp_"))&&(e(o("err","Token must start with mcp_",s)),process.exit(1)),await C(r);const _=new A(n,r);e(u(1,3,"VAULT INVENTORY",s));let i;try{i=await _.status()}catch(t){e(o("err",`failed to reach ${n}/api/sync/status \u2014 ${t.message}`,s)),process.exit(1)}i.vaults.length===0&&(e(o("err","no accessible vaults. Ask an admin to grant you access.",s)),process.exit(1));for(const t of i.vaults.slice(0,6))e(o("ok",`${t.name.padEnd(20)} \xB7 ${t.doc_count} docs${t.track_in_git?"":"  (gitignored)"}`,s));if(i.vaults.length>6){const t=i.vaults.length-6,l=i.vaults.reduce((g,T)=>g+T.doc_count,0);e(o("skip",`\u2026 ${t} more vaults \xB7 ${l} docs total`,s))}e(""),e(u(2,3,"PULL",s)),await m.mkdir(p,{recursive:!0});const f=L(n);for(const t of i.vaults)f.vaults[t.slug]={id:t.id,slug:t.slug,name:t.name,track_in_git:t.track_in_git,last_pulled_at:null,last_pushed_at:null,docs:{}};await $(c,f),await E(void 0),e(o("ok","wrote .unfairly/CLAUDE.md (auto-loader for Claude Code)",s)),e(""),e(u(3,3,"STITCH",s));const d=await N(c);if(!d)e(o("skip","not in a git repo \u2014 skipping CLAUDE.md stitch",s));else{const t=await R(d);t.action==="created"?e(o("ok",`created ${t.path} with @.unfairly/CLAUDE.md`,s)):t.action==="appended"?e(o("ok",`appended @.unfairly/CLAUDE.md to ${t.path}`,s)):t.action==="noop"?e(o("skip",`${t.path} already references the autoloader`,s)):t.action==="error"&&e(o("warn",`couldn't stitch ${t.path} \u2014 ${t.message}`,s))}e(""),e(Y(s)),e("")}export{W as runInit};

package/dist/cmd/invite.d.ts

@@ -23,4 +23,3 @@ export declare const inviteCommand: {
     handler: (args: InviteArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=invite.d.ts.map

package/dist/cmd/invite.js

@@ -1,73 +1,4 @@
-import { getToken } from "../sync/credentials.js";
-const API_DEFAULT = "https://app.unfairly.ai";
-export const inviteCommand = {
-    command: "invite",
-    describe: "Generate a persona-tagged invite link for a teammate",
-    builder: (yargs) => yargs
-        .option("email", {
-        type: "string",
-        demandOption: true,
-        describe: "Email of the person you're inviting",
-    })
-        .option("persona-surface", {
-        type: "string",
-        demandOption: true,
-        choices: ["builder-terminal", "player-web"],
-        describe: "Onboarding role: builder-terminal = Champion, player-web = Player",
-    })
-        .option("persona-workflow", {
-        type: "string",
-        choices: [
-            "strategy",
-            "synthesis",
-            "clinical-operations",
-            "credentialing",
-            "technical",
-            "recruiting",
-        ],
-        describe: "What workflow they own",
-    })
-        .option("org", {
-        type: "string",
-        describe: "Org slug or id (required for CLI; web infers from cookie)",
-    })
-        .option("api", {
-        type: "string",
-        default: API_DEFAULT,
-        describe: "API origin",
-    }),
-    handler: async (args) => {
-        const token = await getToken();
-        if (!token) {
-            console.error("Not signed in. Run `unfairly login` first, then re-run `unfairly invite`.");
-            process.exit(1);
-        }
-        const res = await fetch(`${args.api}/api/onboard/invite`, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify({
-                email: args.email,
-                persona_surface: args["persona-surface"],
-                persona_workflow: args["persona-workflow"],
-                org_slug: args.org,
-            }),
-        });
-        if (!res.ok) {
-            const err = await res.text();
-            console.error(`Failed to create invite: ${res.status} ${err}`);
-            process.exit(1);
-        }
-        const data = await res.json();
-        console.log(`\n✦ Invite ready for ${data.target_email}`);
-        console.log(`   Surface:  ${data.persona_surface}`);
-        if (data.persona_workflow) {
-            console.log(`   Workflow: ${data.persona_workflow}`);
-        }
-        console.log(`\n   ${data.url}\n`);
-        console.log(`Send that to them. They'll paste-run \`npx unfairly join\` from there.\n`);
-    },
-};
-//# sourceMappingURL=invite.js.map
+import{getToken as t}from"../sync/credentials.js";const a="https://app.unfairly.ai",l={command:"invite",describe:"Generate a persona-tagged invite link for a teammate",builder:e=>e.option("email",{type:"string",demandOption:!0,describe:"Email of the person you're inviting"}).option("persona-surface",{type:"string",demandOption:!0,choices:["builder-terminal","player-web"],describe:"Onboarding role: builder-terminal = Champion, player-web = Player"}).option("persona-workflow",{type:"string",choices:["strategy","synthesis","clinical-operations","credentialing","technical","recruiting"],describe:"What workflow they own"}).option("org",{type:"string",describe:"Org slug or id (required for CLI; web infers from cookie)"}).option("api",{type:"string",default:a,describe:"API origin"}),handler:async e=>{const n=await t();n||(console.error("Not signed in. Run `unfairly login` first, then re-run `unfairly invite`."),process.exit(1));const r=await fetch(`${e.api}/api/onboard/invite`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n}`},body:JSON.stringify({email:e.email,persona_surface:e["persona-surface"],persona_workflow:e["persona-workflow"],org_slug:e.org})});if(!r.ok){const i=await r.text();console.error(`Failed to create invite: ${r.status} ${i}`),process.exit(1)}const o=await r.json();console.log(`
+\u2726 Invite ready for ${o.target_email}`),console.log(`   Surface:  ${o.persona_surface}`),o.persona_workflow&&console.log(`   Workflow: ${o.persona_workflow}`),console.log(`
+   ${o.url}
+`),console.log("Send that to them. They'll paste-run `npx unfairly join` from there.\n")}};export{l as inviteCommand};

package/dist/cmd/join.d.ts

@@ -17,4 +17,3 @@ export declare const joinCommand: {
     handler: (args: JoinArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=join.d.ts.map