unfairly 0.8.2 → 0.8.4

package/dist/pace/schema.js

@@ -1,134 +1 @@
-import { z } from "zod";
-export const PaceSourceSchema = z.enum([
-    "codex", "claude_code", "cursor", "gemini_cli", "openrouter", "chatgpt",
-    "claude_desktop", "claude_web", "gemini_web", "local_filesystem", "unknown",
-]);
-export const PaceEventTypeSchema = z.enum([
-    "session.started", "session.ended", "model.completed", "tool.completed",
-    "tool.failed", "workflow.stopped", "artifact.created", "artifact.modified",
-    "desktop.activity", "unknown.observed",
-]);
-export const PaceEvidenceLevelSchema = z.enum(["exact", "correlated", "inferred"]);
-export const PaceToolCategorySchema = z.enum([
-    "file_read", "file_write", "code_search", "shell", "version_control",
-    "web", "connector", "agent", "skill", "other", "unknown",
-]);
-export const PaceBlockerCategorySchema = z.enum([
-    "authentication", "authorization_permission", "approval_required",
-    "missing_dependency_tool", "configuration", "rate_limit_quota", "tool_failure",
-    "model_provider_unavailable", "workflow_stopped", "unknown",
-]);
-export const PaceModelFamilySchema = z.enum([
-    "openai_gpt", "anthropic_claude", "google_gemini", "meta_llama",
-    "mistral", "other", "unknown",
-]);
-export const PaceApprovalModeSchema = z.enum(["none", "manual", "automatic", "unknown"]);
-export const PacePermissionModeSchema = z.enum([
-    "read_only", "workspace_write", "elevated", "unrestricted", "unknown",
-]);
-export const PaceDurationBucketSchema = z.enum([
-    "under_1s", "1s_to_10s", "10s_to_60s", "1m_to_5m", "over_5m", "unknown",
-]);
-export const PaceExitCodeBucketSchema = z.enum(["success", "failure", "signal", "unknown"]);
-const OptionalOpaqueId = z.string().trim().regex(/^[A-Za-z0-9_-]{1,128}$/).optional();
-// Legacy schemas exist only so an old local spool can be sanitized in place.
-// New collection and network upload use v3 exclusively.
-const LegacyAttributesSchema = z.object({
-    hook_event: z.string().max(128),
-    approval_mode: z.string().max(128).optional(),
-    permission_mode: z.string().max(128).optional(),
-    status: z.string().max(128).optional(),
-    success: z.boolean().optional(),
-    exit_code: z.number().int().optional(),
-    duration_ms: z.number().nonnegative().optional(),
-    input_tokens: z.number().int().nonnegative().optional(),
-    output_tokens: z.number().int().nonnegative().optional(),
-    cached_tokens: z.number().int().nonnegative().optional(),
-    error_type: z.string().max(128).optional(),
-    stop_reason: z.string().max(128).optional(),
-    root_label: z.string().max(128).optional(),
-    path_fingerprint: z.string().regex(/^[a-f0-9]{64}$/).optional(),
-    file_extension: z.string().max(32).optional(),
-    file_name: z.string().max(255).optional(),
-    size_bytes: z.number().int().nonnegative().optional(),
-    files_changed: z.number().int().nonnegative().optional(),
-    local_signal: z.enum(["approved_output", "app_state_change"]).optional(),
-    source_app: z.enum(["chatgpt", "claude_desktop", "other"]).optional(),
-}).strict();
-const LegacyEventBaseSchema = z.object({
-    event_id: z.string().uuid(),
-    installation_id: z.string().uuid().optional(),
-    occurred_at: z.string().datetime(),
-    source: PaceSourceSchema,
-    event_type: PaceEventTypeSchema,
-    evidence_level: PaceEvidenceLevelSchema,
-    session_id: z.string().trim().min(1).max(512).optional(),
-    model: z.string().trim().min(1).max(512).optional(),
-    tool: z.string().trim().min(1).max(512).optional(),
-    skill: z.string().trim().min(1).max(512).optional(),
-    cwd: z.string().trim().min(1).max(512).optional(),
-    repository: z.string().trim().min(1).max(512).optional(),
-    branch: z.string().trim().min(1).max(512).optional(),
-    commit_sha: z.string().regex(/^[a-f0-9]{7,64}$/i).optional(),
-    artifact_type: z.enum([
-        "code", "pull_request", "document", "deck", "spreadsheet", "analysis",
-        "workflow", "decision", "other",
-    ]).optional(),
-    attributes: LegacyAttributesSchema,
-});
-export const PaceEventV1Schema = LegacyEventBaseSchema.extend({ schema_version: z.literal(1) }).strict();
-export const PaceEventV2Schema = LegacyEventBaseSchema.extend({
-    schema_version: z.literal(2),
-    workflow_id: z.string().uuid().optional(),
-    initiative_id: z.string().trim().min(1).max(512).optional(),
-    playbook_id: z.string().trim().min(1).max(512).optional(),
-    playbook_version: z.string().trim().min(1).max(512).optional(),
-}).strict();
-export const PaceEventV3Schema = z.object({
-    schema_version: z.literal(3),
-    collection_policy_version: z.literal("metadata-v3"),
-    event_id: z.string().uuid(),
-    installation_id: z.string().uuid().optional(),
-    occurred_at: z.string().datetime(),
-    source: PaceSourceSchema,
-    event_type: PaceEventTypeSchema,
-    evidence_level: PaceEvidenceLevelSchema,
-    session_id: OptionalOpaqueId,
-    workflow_id: z.string().uuid().optional(),
-    initiative_id: OptionalOpaqueId,
-    playbook_id: OptionalOpaqueId,
-    playbook_version: OptionalOpaqueId,
-    repository_id: z.string().uuid().optional(),
-    commit_sha: z.string().regex(/^[a-f0-9]{40}$/i).optional(),
-    model_family: PaceModelFamilySchema.optional(),
-    tool_category: PaceToolCategorySchema.optional(),
-    blocker_category: PaceBlockerCategorySchema.optional(),
-    artifact_type: z.enum([
-        "code", "pull_request", "document", "deck", "spreadsheet", "analysis",
-        "workflow", "decision", "other",
-    ]).optional(),
-    attributes: z.object({
-        client_event: z.enum([
-            "session_start", "session_end", "before_agent", "after_agent", "stop",
-            "tool_success", "tool_failure", "model_complete", "local_output", "local_activity", "unknown",
-        ]),
-        approval_mode: PaceApprovalModeSchema.optional(),
-        permission_mode: PacePermissionModeSchema.optional(),
-        success: z.boolean().optional(),
-        exit_code_bucket: PaceExitCodeBucketSchema.optional(),
-        duration_bucket: PaceDurationBucketSchema.optional(),
-        input_tokens: z.number().int().nonnegative().optional(),
-        output_tokens: z.number().int().nonnegative().optional(),
-        cached_tokens: z.number().int().nonnegative().optional(),
-        files_changed_bucket: z.enum(["one", "two_to_five", "six_to_twenty", "over_twenty", "unknown"]).optional(),
-        local_signal: z.enum(["approved_output", "app_state_change"]).optional(),
-    }).strict(),
-}).strict().superRefine((event, context) => {
-    if (event.commit_sha && !event.repository_id) {
-        context.addIssue({ code: z.ZodIssueCode.custom, path: ["commit_sha"], message: "commit_sha requires an approved repository_id" });
-    }
-});
-export const PaceLegacyEventSchema = z.discriminatedUnion("schema_version", [PaceEventV1Schema, PaceEventV2Schema]);
-export const PaceEventSchema = PaceEventV3Schema;
-export const PaceBatchSchema = z.object({ events: z.array(PaceEventV3Schema).min(1).max(250) }).strict();
-//# sourceMappingURL=schema.js.map
+import{z as e}from"zod";const n=e.enum(["codex","claude_code","cursor","gemini_cli","openrouter","chatgpt","claude_desktop","claude_web","gemini_web","local_filesystem","unknown"]),i=e.enum(["session.started","session.ended","model.completed","tool.completed","tool.failed","workflow.stopped","artifact.created","artifact.modified","desktop.activity","unknown.observed"]),a=e.enum(["exact","correlated","inferred"]),l=e.enum(["file_read","file_write","code_search","shell","version_control","web","connector","agent","skill","other","unknown"]),m=e.enum(["authentication","authorization_permission","approval_required","missing_dependency_tool","configuration","rate_limit_quota","tool_failure","model_provider_unavailable","workflow_stopped","unknown"]),p=e.enum(["openai_gpt","anthropic_claude","google_gemini","meta_llama","mistral","other","unknown"]),_=e.enum(["none","manual","automatic","unknown"]),u=e.enum(["read_only","workspace_write","elevated","unrestricted","unknown"]),d=e.enum(["under_1s","1s_to_10s","10s_to_60s","1m_to_5m","over_5m","unknown"]),g=e.enum(["success","failure","signal","unknown"]),o=e.string().trim().regex(/^[A-Za-z0-9_-]{1,128}$/).optional(),v=e.object({hook_event:e.string().max(128),approval_mode:e.string().max(128).optional(),permission_mode:e.string().max(128).optional(),status:e.string().max(128).optional(),success:e.boolean().optional(),exit_code:e.number().int().optional(),duration_ms:e.number().nonnegative().optional(),input_tokens:e.number().int().nonnegative().optional(),output_tokens:e.number().int().nonnegative().optional(),cached_tokens:e.number().int().nonnegative().optional(),error_type:e.string().max(128).optional(),stop_reason:e.string().max(128).optional(),root_label:e.string().max(128).optional(),path_fingerprint:e.string().regex(/^[a-f0-9]{64}$/).optional(),file_extension:e.string().max(32).optional(),file_name:e.string().max(255).optional(),size_bytes:e.number().int().nonnegative().optional(),files_changed:e.number().int().nonnegative().optional(),local_signal:e.enum(["approved_output","app_state_change"]).optional(),source_app:e.enum(["chatgpt","claude_desktop","other"]).optional()}).strict(),r=e.object({event_id:e.string().uuid(),installation_id:e.string().uuid().optional(),occurred_at:e.string().datetime(),source:n,event_type:i,evidence_level:a,session_id:e.string().trim().min(1).max(512).optional(),model:e.string().trim().min(1).max(512).optional(),tool:e.string().trim().min(1).max(512).optional(),skill:e.string().trim().min(1).max(512).optional(),cwd:e.string().trim().min(1).max(512).optional(),repository:e.string().trim().min(1).max(512).optional(),branch:e.string().trim().min(1).max(512).optional(),commit_sha:e.string().regex(/^[a-f0-9]{7,64}$/i).optional(),artifact_type:e.enum(["code","pull_request","document","deck","spreadsheet","analysis","workflow","decision","other"]).optional(),attributes:v}),h=r.extend({schema_version:e.literal(1)}).strict(),x=r.extend({schema_version:e.literal(2),workflow_id:e.string().uuid().optional(),initiative_id:e.string().trim().min(1).max(512).optional(),playbook_id:e.string().trim().min(1).max(512).optional(),playbook_version:e.string().trim().min(1).max(512).optional()}).strict(),s=e.object({schema_version:e.literal(3),collection_policy_version:e.literal("metadata-v3"),event_id:e.string().uuid(),installation_id:e.string().uuid().optional(),occurred_at:e.string().datetime(),source:n,event_type:i,evidence_level:a,session_id:o,workflow_id:e.string().uuid().optional(),initiative_id:o,playbook_id:o,playbook_version:o,repository_id:e.string().uuid().optional(),commit_sha:e.string().regex(/^[a-f0-9]{40}$/i).optional(),model_family:p.optional(),tool_category:l.optional(),blocker_category:m.optional(),artifact_type:e.enum(["code","pull_request","document","deck","spreadsheet","analysis","workflow","decision","other"]).optional(),attributes:e.object({client_event:e.enum(["session_start","session_end","before_agent","after_agent","stop","tool_success","tool_failure","model_complete","local_output","local_activity","unknown"]),approval_mode:_.optional(),permission_mode:u.optional(),success:e.boolean().optional(),exit_code_bucket:g.optional(),duration_bucket:d.optional(),input_tokens:e.number().int().nonnegative().optional(),output_tokens:e.number().int().nonnegative().optional(),cached_tokens:e.number().int().nonnegative().optional(),files_changed_bucket:e.enum(["one","two_to_five","six_to_twenty","over_twenty","unknown"]).optional(),local_signal:e.enum(["approved_output","app_state_change"]).optional()}).strict()}).strict().superRefine((t,c)=>{t.commit_sha&&!t.repository_id&&c.addIssue({code:e.ZodIssueCode.custom,path:["commit_sha"],message:"commit_sha requires an approved repository_id"})}),b=e.discriminatedUnion("schema_version",[h,x]),f=s,y=e.object({events:e.array(s).min(1).max(250)}).strict();export{_ as PaceApprovalModeSchema,y as PaceBatchSchema,m as PaceBlockerCategorySchema,d as PaceDurationBucketSchema,f as PaceEventSchema,i as PaceEventTypeSchema,h as PaceEventV1Schema,x as PaceEventV2Schema,s as PaceEventV3Schema,a as PaceEvidenceLevelSchema,g as PaceExitCodeBucketSchema,b as PaceLegacyEventSchema,p as PaceModelFamilySchema,u as PacePermissionModeSchema,n as PaceSourceSchema,l as PaceToolCategorySchema};

package/dist/pace/session-summary.d.ts

@@ -176,4 +176,3 @@ export declare function sweepLocalSessions(input: {
     queued: number;
 }>;
 export {};
-//# sourceMappingURL=session-summary.d.ts.map

package/dist/pace/session-summary.js

@@ -1,140 +1,2 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-import { collectLocalSessions } from "./local-sessions.js";
-import { approvedRepositoryId, readRepositoryPolicy, sessionCommitShas } from "./repository.js";
-function readPolicySkills() {
-    return readRepositoryPolicy()?.skills ?? [];
-}
-/**
- * One content-free summary per AI coding session, uploaded to Unfairly
- * Intelligence. This is the unit the server joins to GitHub pull requests and
- * prices into spend. Keep in sync with src/lib/ai-pace/sessions.ts.
- */
-const MODEL_ID = /^(claude-[a-z0-9.-]{1,48}|gpt-[a-z0-9.-]{1,32}|o[1-9][a-z0-9-]{0,20}|gemini-[a-z0-9.-]{1,40}|codex-[a-z0-9.-]{1,32})$/;
-const Count = z.number().int().nonnegative();
-const SKILL_ID = /^[a-z0-9][a-z0-9:_.-]{0,119}$/;
-/** Published plugin skills are namespaced (`superpowers:brainstorming`); a public name, not content. */
-const PUBLIC_SKILL = /^[a-z0-9][a-z0-9-]{0,40}:[a-z0-9][a-z0-9-]{0,78}$/;
-/**
- * Splits a session's skills into names that may be reported (published plugin
- * skills and the organization's own catalog) and a count of everything else,
- * such as personal or project skills, whose names never leave the device.
- */
-export function reportableSkills(skills, orgCatalog = []) {
-    const catalog = new Set(orgCatalog);
-    const reportable = [...new Set(skills)].filter((skill) => SKILL_ID.test(skill) && (PUBLIC_SKILL.test(skill) || catalog.has(skill)));
-    return { skills: reportable.slice(0, 20), unlisted: new Set(skills).size - reportable.length };
-}
-export const SessionSummaryUploadSchema = z.object({
-    schema_version: z.literal(1),
-    collection_policy_version: z.literal("metadata-v3"),
-    installation_id: z.string().uuid(),
-    session_id: z.string().regex(/^[A-Za-z0-9_-]{1,128}$/),
-    source: z.enum(["claude_code", "codex"]),
-    collected_via: z.enum(["hook", "backfill"]),
-    started_at: z.string().datetime(),
-    ended_at: z.string().datetime(),
-    model_id: z.string().regex(MODEL_ID).nullable(),
-    tokens: z.object({ input: Count, output: Count, cache_read: Count, cache_write: Count }).strict(),
-    user_turns: Count,
-    tool_calls: Count,
-    tool_errors: Count,
-    approval_denials: Count,
-    delegated: z.boolean(),
-    launched_by: z.enum(["claude_code"]).nullable(),
-    repository_id: z.string().uuid().nullable(),
-    commit_shas: z.array(z.string().regex(/^[a-f0-9]{40}$/)).max(50),
-    skills: z.array(z.string().regex(SKILL_ID)).max(20),
-    unlisted_skills: Count,
-}).strict().superRefine((summary, context) => {
-    if (summary.commit_shas.length && !summary.repository_id) {
-        context.addIssue({ code: z.ZodIssueCode.custom, path: ["commit_shas"], message: "commit_shas require an approved repository_id" });
-    }
-});
-/** Only recognizable model identifiers leave the device; anything else is reported as unknown. */
-export function allowlistedModelId(model) {
-    if (!model)
-        return null;
-    const normalized = model.trim().toLowerCase();
-    return MODEL_ID.test(normalized) ? normalized : null;
-}
-export function toSessionUpload(session, context) {
-    const repositoryId = approvedRepositoryId(session.cwd, context.policy) ?? null;
-    const commits = repositoryId && session.cwd ? sessionCommitShas(session.cwd, session).map((sha) => sha.toLowerCase()) : [];
-    const skillReport = reportableSkills(session.skills ?? [], context.policy?.skills ?? readPolicySkills());
-    return SessionSummaryUploadSchema.parse({
-        schema_version: 1,
-        collection_policy_version: "metadata-v3",
-        installation_id: context.installationId,
-        session_id: session.sessionId.replace(/[^A-Za-z0-9_-]/g, "").slice(0, 128) || "unknown",
-        source: session.client,
-        collected_via: context.collectedVia,
-        started_at: new Date(session.startedAt).toISOString(),
-        ended_at: new Date(session.endedAt).toISOString(),
-        model_id: allowlistedModelId(session.primaryModel),
-        tokens: { input: session.tokens.input, output: session.tokens.output, cache_read: session.tokens.cacheRead, cache_write: session.tokens.cacheWrite },
-        user_turns: session.userTurns,
-        tool_calls: session.toolCalls,
-        tool_errors: session.toolErrors,
-        approval_denials: session.approvalDenials,
-        delegated: session.delegated,
-        launched_by: session.launchedBy,
-        repository_id: repositoryId,
-        commit_shas: commits,
-        skills: skillReport.skills,
-        unlisted_skills: skillReport.unlisted,
-    });
-}
-// Pending uploads, keyed by source and session so a later, fuller summary of a
-// still-running session replaces the earlier one.
-export function sessionSpoolPath() {
-    return process.env.UNFAIRLY_PACE_SESSION_SPOOL ?? path.join(os.homedir(), ".unfairly", "pace", "sessions.json");
-}
-const spoolKey = (summary) => `${summary.source}:${summary.session_id}`;
-export async function readSessionSpool() {
-    try {
-        const parsed = JSON.parse(await fs.readFile(sessionSpoolPath(), "utf8"));
-        const valid = {};
-        for (const [key, value] of Object.entries(parsed)) {
-            const summary = SessionSummaryUploadSchema.safeParse(value);
-            if (summary.success)
-                valid[key] = summary.data;
-        }
-        return valid;
-    }
-    catch {
-        return {};
-    }
-}
-async function writeSessionSpool(spool) {
-    const file = sessionSpoolPath();
-    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
-    await fs.writeFile(file, `${JSON.stringify(spool)}\n`, { encoding: "utf8", mode: 0o600 });
-}
-export async function queueSessionSummaries(summaries) {
-    const spool = await readSessionSpool();
-    for (const summary of summaries)
-        spool[spoolKey(summary)] = summary;
-    await writeSessionSpool(spool);
-    return Object.keys(spool).length;
-}
-export async function removeSessionSummaries(sent) {
-    const spool = await readSessionSpool();
-    for (const summary of sent) {
-        const current = spool[spoolKey(summary)];
-        // Keep a newer summary that arrived while this batch was uploading.
-        if (current && current.ended_at === summary.ended_at)
-            delete spool[spoolKey(summary)];
-    }
-    await writeSessionSpool(spool);
-}
-/** Summarizes every local session whose transcript changed since `since` and queues it for upload. */
-export async function sweepLocalSessions(input) {
-    const sessions = await collectLocalSessions({ since: input.since, home: input.home });
-    const summaries = sessions.map((session) => toSessionUpload(session, input));
-    const queued = summaries.length ? await queueSessionSummaries(summaries) : (Object.keys(await readSessionSpool()).length);
-    return { summarized: summaries.length, queued };
-}
-//# sourceMappingURL=session-summary.js.map
+import n from"node:fs/promises";import y from"node:os";import d from"node:path";import{z as o}from"zod";import{collectLocalSessions as S}from"./local-sessions.js";import{approvedRepositoryId as g,readRepositoryPolicy as w,sessionCommitShas as k}from"./repository.js";function v(){return w()?.skills??[]}const u=/^(claude-[a-z0-9.-]{1,48}|gpt-[a-z0-9.-]{1,32}|o[1-9][a-z0-9-]{0,20}|gemini-[a-z0-9.-]{1,40}|codex-[a-z0-9.-]{1,32})$/,i=o.number().int().nonnegative(),m=/^[a-z0-9][a-z0-9:_.-]{0,119}$/,z=/^[a-z0-9][a-z0-9-]{0,40}:[a-z0-9][a-z0-9-]{0,78}$/;function I(e,t=[]){const a=new Set(t),r=[...new Set(e)].filter(s=>m.test(s)&&(z.test(s)||a.has(s)));return{skills:r.slice(0,20),unlisted:new Set(e).size-r.length}}const p=o.object({schema_version:o.literal(1),collection_policy_version:o.literal("metadata-v3"),installation_id:o.string().uuid(),session_id:o.string().regex(/^[A-Za-z0-9_-]{1,128}$/),source:o.enum(["claude_code","codex"]),collected_via:o.enum(["hook","backfill"]),started_at:o.string().datetime(),ended_at:o.string().datetime(),model_id:o.string().regex(u).nullable(),tokens:o.object({input:i,output:i,cache_read:i,cache_write:i}).strict(),user_turns:i,tool_calls:i,tool_errors:i,approval_denials:i,delegated:o.boolean(),launched_by:o.enum(["claude_code"]).nullable(),repository_id:o.string().uuid().nullable(),commit_shas:o.array(o.string().regex(/^[a-f0-9]{40}$/)).max(50),skills:o.array(o.string().regex(m)).max(20),unlisted_skills:i}).strict().superRefine((e,t)=>{e.commit_shas.length&&!e.repository_id&&t.addIssue({code:o.ZodIssueCode.custom,path:["commit_shas"],message:"commit_shas require an approved repository_id"})});function b(e){if(!e)return null;const t=e.trim().toLowerCase();return u.test(t)?t:null}function x(e,t){const a=g(e.cwd,t.policy)??null,r=a&&e.cwd?k(e.cwd,e).map(h=>h.toLowerCase()):[],s=I(e.skills??[],t.policy?.skills??v());return p.parse({schema_version:1,collection_policy_version:"metadata-v3",installation_id:t.installationId,session_id:e.sessionId.replace(/[^A-Za-z0-9_-]/g,"").slice(0,128)||"unknown",source:e.client,collected_via:t.collectedVia,started_at:new Date(e.startedAt).toISOString(),ended_at:new Date(e.endedAt).toISOString(),model_id:b(e.primaryModel),tokens:{input:e.tokens.input,output:e.tokens.output,cache_read:e.tokens.cacheRead,cache_write:e.tokens.cacheWrite},user_turns:e.userTurns,tool_calls:e.toolCalls,tool_errors:e.toolErrors,approval_denials:e.approvalDenials,delegated:e.delegated,launched_by:e.launchedBy,repository_id:a,commit_shas:r,skills:s.skills,unlisted_skills:s.unlisted})}function _(){return process.env.UNFAIRLY_PACE_SESSION_SPOOL??d.join(y.homedir(),".unfairly","pace","sessions.json")}const l=e=>`${e.source}:${e.session_id}`;async function c(){try{const e=JSON.parse(await n.readFile(_(),"utf8")),t={};for(const[a,r]of Object.entries(e)){const s=p.safeParse(r);s.success&&(t[a]=s.data)}return t}catch{return{}}}async function f(e){const t=_();await n.mkdir(d.dirname(t),{recursive:!0,mode:448}),await n.writeFile(t,`${JSON.stringify(e)}
+`,{encoding:"utf8",mode:384})}async function L(e){const t=await c();for(const a of e)t[l(a)]=a;return await f(t),Object.keys(t).length}async function D(e){const t=await c();for(const a of e){const r=t[l(a)];r&&r.ended_at===a.ended_at&&delete t[l(a)]}await f(t)}async function R(e){const a=(await S({since:e.since,home:e.home})).map(s=>x(s,e)),r=a.length?await L(a):Object.keys(await c()).length;return{summarized:a.length,queued:r}}export{p as SessionSummaryUploadSchema,b as allowlistedModelId,L as queueSessionSummaries,c as readSessionSpool,D as removeSessionSummaries,I as reportableSkills,_ as sessionSpoolPath,R as sweepLocalSessions,x as toSessionUpload};

package/dist/pace/spool.d.ts

@@ -3,4 +3,3 @@ export declare function paceSpoolPath(): string;
 export declare function appendPaceEvent(event: PaceEvent): Promise<string>;
 export declare function readPaceEvents(limit?: number): Promise<PaceEvent[]>;
 export declare function removePaceEvents(ids: Set<string>): Promise<void>;
-//# sourceMappingURL=spool.d.ts.map

package/dist/pace/spool.js

@@ -1,87 +1,8 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { migrateLegacyEvent } from "./normalize.js";
-import { PaceEventSchema, PaceLegacyEventSchema } from "./schema.js";
-export function paceSpoolPath() {
-    return process.env.UNFAIRLY_PACE_SPOOL ?? path.join(os.homedir(), ".unfairly", "pace", "events.jsonl");
-}
-export async function appendPaceEvent(event) {
-    const parsed = PaceEventSchema.parse(event);
-    const spool = paceSpoolPath();
-    await fs.mkdir(path.dirname(spool), { recursive: true, mode: 0o700 });
-    await fs.appendFile(spool, `${JSON.stringify(parsed)}\n`, { encoding: "utf8", mode: 0o600 });
-    await fs.chmod(spool, 0o600).catch(() => undefined);
-    return spool;
-}
-export async function readPaceEvents(limit = 250) {
-    let raw;
-    try {
-        raw = await fs.readFile(paceSpoolPath(), "utf8");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return [];
-        throw error;
-    }
-    const events = [];
-    let needsMigration = false;
-    for (const line of raw.split("\n")) {
-        if (!line.trim())
-            continue;
-        let candidate;
-        try {
-            candidate = JSON.parse(line);
-        }
-        catch {
-            needsMigration = true;
-            continue;
-        }
-        const parsed = PaceEventSchema.safeParse(candidate);
-        if (parsed.success) {
-            events.push(parsed.data);
-        }
-        else {
-            const legacy = PaceLegacyEventSchema.safeParse(candidate);
-            if (legacy.success)
-                events.push(migrateLegacyEvent(legacy.data));
-            needsMigration = true;
-        }
-    }
-    if (needsMigration) {
-        const spool = paceSpoolPath();
-        await fs.writeFile(spool, events.length ? `${events.map((event) => JSON.stringify(event)).join("\n")}\n` : "", {
-            encoding: "utf8",
-            mode: 0o600,
-        });
-    }
-    return events.slice(0, limit);
-}
-export async function removePaceEvents(ids) {
-    const spool = paceSpoolPath();
-    let raw;
-    try {
-        raw = await fs.readFile(spool, "utf8");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return;
-        throw error;
-    }
-    const remaining = raw.split("\n").filter((line) => {
-        if (!line.trim())
-            return false;
-        try {
-            const event = JSON.parse(line);
-            return !event.event_id || !ids.has(event.event_id);
-        }
-        catch {
-            return true;
-        }
-    });
-    await fs.writeFile(spool, remaining.length ? `${remaining.join("\n")}\n` : "", {
-        encoding: "utf8",
-        mode: 0o600,
-    });
-}
-//# sourceMappingURL=spool.js.map
+import o from"node:fs/promises";import d from"node:os";import p from"node:path";import{migrateLegacyEvent as m}from"./normalize.js";import{PaceEventSchema as u,PaceLegacyEventSchema as l}from"./schema.js";function c(){return process.env.UNFAIRLY_PACE_SPOOL??p.join(d.homedir(),".unfairly","pace","events.jsonl")}async function E(i){const r=u.parse(i),e=c();return await o.mkdir(p.dirname(e),{recursive:!0,mode:448}),await o.appendFile(e,`${JSON.stringify(r)}
+`,{encoding:"utf8",mode:384}),await o.chmod(e,384).catch(()=>{}),e}async function P(i=250){let r;try{r=await o.readFile(c(),"utf8")}catch(t){if(t.code==="ENOENT")return[];throw t}const e=[];let a=!1;for(const t of r.split(`
+`)){if(!t.trim())continue;let n;try{n=JSON.parse(t)}catch{a=!0;continue}const s=u.safeParse(n);if(s.success)e.push(s.data);else{const f=l.safeParse(n);f.success&&e.push(m(f.data)),a=!0}}if(a){const t=c();await o.writeFile(t,e.length?`${e.map(n=>JSON.stringify(n)).join(`
+`)}
+`:"",{encoding:"utf8",mode:384})}return e.slice(0,i)}async function N(i){const r=c();let e;try{e=await o.readFile(r,"utf8")}catch(t){if(t.code==="ENOENT")return;throw t}const a=e.split(`
+`).filter(t=>{if(!t.trim())return!1;try{const n=JSON.parse(t);return!n.event_id||!i.has(n.event_id)}catch{return!0}});await o.writeFile(r,a.length?`${a.join(`
+`)}
+`:"",{encoding:"utf8",mode:384})}export{E as appendPaceEvent,c as paceSpoolPath,P as readPaceEvents,N as removePaceEvents};

package/dist/pace-runtime.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/pace-runtime.js

@@ -0,0 +1,2 @@
+import{spawn as l}from"node:child_process";import c from"node:os";import{runPaceCapture as u,runPaceSync as f}from"./cmd/pace.js";import{readOrCreatePaceDevice as w}from"./pace/device.js";import{acquireApprovalLock as d,awaitApproval as m,ensureEnrolled as v,releaseApprovalLock as A,sessionStartOutput as y}from"./pace/enroll.js";const U="https://app.unfairly.ai",p=()=>(process.env.UNFAIRLY_API_URL??U).replace(/\/$/,"");async function h(a,n){const t=await w();if(t.paused)return;const r=c.platform(),e=c.arch();if(r!=="darwin"&&r!=="linux"&&r!=="win32"||e!=="x64"&&e!=="arm64")return;const i=await v({apiUrl:p(),installationId:t.installation_id,platform:r,arch:e,clients:[a],orgHint:process.env.UNFAIRLY_ORG}),o=y(i,n==="sessionStart"?"sessionStart":"SessionStart");if(o&&process.stdout.write(`${o}
+`),i.status==="waiting"){const s=l(process.execPath,[process.argv[1],"await-approval"],{detached:!0,stdio:"ignore",env:process.env});s.on("error",()=>{}),s.unref()}}async function S(){if(await d())try{await m({apiUrl:p()})&&await f()}finally{await A()}}async function L(){const[a,n="unknown",t="Unknown"]=process.argv.slice(2);a==="connect"?await h(n,t):a==="await-approval"?await S():a==="capture"&&await u(n,t)}L().catch(()=>{}).finally(()=>process.exit(0));

package/dist/sync/api.d.ts

@@ -77,4 +77,3 @@ export declare class SyncClient {
     }>;
     status(): Promise<StatusResponse>;
 }
-//# sourceMappingURL=api.d.ts.map

package/dist/sync/api.js

@@ -1,55 +1 @@
-export class SyncClient {
-    apiUrl;
-    token;
-    constructor(apiUrl, token) {
-        this.apiUrl = apiUrl;
-        this.token = token;
-    }
-    headers() {
-        return {
-            Authorization: `Bearer ${this.token}`,
-            "Content-Type": "application/json",
-        };
-    }
-    async pull(vault, since) {
-        const url = new URL(`${this.apiUrl}/api/sync/pull`);
-        url.searchParams.set("vault", vault);
-        if (since)
-            url.searchParams.set("since", since);
-        const res = await fetch(url, { headers: this.headers() });
-        if (!res.ok) {
-            throw new Error(`pull failed: ${res.status} ${await res.text()}`);
-        }
-        return res.json();
-    }
-    /** Loop pull until has_more=false, merging pages. */
-    async pullAll(vault, since) {
-        const merged = await this.pull(vault, since);
-        while (merged.has_more && merged.next_cursor) {
-            const next = await this.pull(vault, merged.next_cursor);
-            merged.docs.push(...next.docs);
-            merged.deleted.push(...next.deleted);
-            merged.next_cursor = next.next_cursor;
-            merged.has_more = next.has_more;
-        }
-        return merged;
-    }
-    async push(args) {
-        const res = await fetch(`${this.apiUrl}/api/sync/push`, {
-            method: "POST",
-            headers: this.headers(),
-            body: JSON.stringify(args),
-        });
-        return { status: res.status, data: (await res.json()) };
-    }
-    async status() {
-        const res = await fetch(`${this.apiUrl}/api/sync/status`, {
-            headers: this.headers(),
-        });
-        if (!res.ok) {
-            throw new Error(`status failed: ${res.status} ${await res.text()}`);
-        }
-        return res.json();
-    }
-}
-//# sourceMappingURL=api.js.map
+class n{apiUrl;token;constructor(t,e){this.apiUrl=t,this.token=e}headers(){return{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"}}async pull(t,e){const s=new URL(`${this.apiUrl}/api/sync/pull`);s.searchParams.set("vault",t),e&&s.searchParams.set("since",e);const a=await fetch(s,{headers:this.headers()});if(!a.ok)throw new Error(`pull failed: ${a.status} ${await a.text()}`);return a.json()}async pullAll(t,e){const s=await this.pull(t,e);for(;s.has_more&&s.next_cursor;){const a=await this.pull(t,s.next_cursor);s.docs.push(...a.docs),s.deleted.push(...a.deleted),s.next_cursor=a.next_cursor,s.has_more=a.has_more}return s}async push(t){const e=await fetch(`${this.apiUrl}/api/sync/push`,{method:"POST",headers:this.headers(),body:JSON.stringify(t)});return{status:e.status,data:await e.json()}}async status(){const t=await fetch(`${this.apiUrl}/api/sync/status`,{headers:this.headers()});if(!t.ok)throw new Error(`status failed: ${t.status} ${await t.text()}`);return t.json()}}export{n as SyncClient};

package/dist/sync/autoloader.d.ts

@@ -4,4 +4,3 @@ import type { Manifest } from "./manifest.js";
  * frontmatter, build the autoloader index, and write CLAUDE.md + .gitignore.
  */
 export declare function writeAutoloader(unfairlyRoot: string, manifest: Manifest): Promise<void>;
-//# sourceMappingURL=autoloader.d.ts.map

package/dist/sync/autoloader.js

@@ -1,128 +1,8 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import matter from "gray-matter";
-const SENTINEL_HEADER = "# Unfairly Vault Context (auto-generated by `unfairly`)";
-const GENERATED_CLAUDE_MD = "CLAUDE.md";
-/**
- * After `unfairly pull` populates .unfairly/, scan local files, parse
- * frontmatter, build the autoloader index, and write CLAUDE.md + .gitignore.
- */
-export async function writeAutoloader(unfairlyRoot, manifest) {
-    const docs = await scanLocalDocs(unfairlyRoot, manifest);
-    const goldPrimitives = docs
-        .filter((d) => d.trust_tier === "gold" && d.role === "primitive")
-        .sort((a, b) => (b.updated_at ?? "").localeCompare(a.updated_at ?? ""))
-        .slice(0, 8);
-    const recentSilver = docs
-        .filter((d) => d.trust_tier === "silver")
-        .sort((a, b) => (b.updated_at ?? "").localeCompare(a.updated_at ?? ""))
-        .slice(0, 5);
-    const claudeMd = renderClaudeMd(goldPrimitives, recentSilver);
-    await fs.writeFile(path.join(unfairlyRoot, GENERATED_CLAUDE_MD), claudeMd, "utf8");
-    // .gitignore: write only if missing. The generated file invites users to
-    // uncomment !vault/ re-includes — regenerating on every pull would wipe them.
-    const gitignorePath = path.join(unfairlyRoot, ".gitignore");
-    try {
-        await fs.access(gitignorePath);
-    }
-    catch {
-        await fs.writeFile(gitignorePath, renderGitignore(), "utf8");
-    }
-}
-async function scanLocalDocs(root, manifest) {
-    const entries = [];
-    // manifest.vaults is Record<string, ManifestVault> keyed by slug.
-    for (const vault of Object.values(manifest.vaults)) {
-        // Repo-bound vaults live at the root; non-tracked vaults live under cache/.
-        const vaultRoot = vault.track_in_git
-            ? path.join(root, vault.slug)
-            : path.join(root, "cache", vault.slug);
-        try {
-            await walkAndParse(vaultRoot, root, vault.slug, entries);
-        }
-        catch {
-            // Vault dir doesn't exist yet (e.g., empty vault) — fine, skip.
-        }
-    }
-    return entries;
-}
-async function walkAndParse(dir, unfairlyRoot, vaultSlug, out) {
-    const generatedRootPath = path.join(unfairlyRoot, GENERATED_CLAUDE_MD);
-    const items = await fs.readdir(dir, { withFileTypes: true });
-    for (const item of items) {
-        const full = path.join(dir, item.name);
-        if (item.isDirectory()) {
-            await walkAndParse(full, unfairlyRoot, vaultSlug, out);
-        }
-        else if (item.name.endsWith(".md")) {
-            // Skip ONLY our own generated file (not user docs that happen to be named CLAUDE.md).
-            if (path.resolve(full) === path.resolve(generatedRootPath))
-                continue;
-            try {
-                const raw = await fs.readFile(full, "utf8");
-                const { data } = matter(raw);
-                // Normalize to forward slashes — @-import processors expect POSIX-style paths.
-                const relative = path.relative(unfairlyRoot, full).split(path.sep).join("/");
-                // gray-matter / js-yaml auto-coerces ISO 8601 timestamps to Date — normalize to string.
-                const updatedAtRaw = data.updated_at;
-                const updated_at = updatedAtRaw instanceof Date
-                    ? updatedAtRaw.toISOString()
-                    : typeof updatedAtRaw === "string"
-                        ? updatedAtRaw
-                        : undefined;
-                out.push({
-                    relativePath: relative,
-                    trust_tier: typeof data.trust_tier === "string" ? data.trust_tier : undefined,
-                    role: typeof data.role === "string" ? data.role : undefined,
-                    updated_at,
-                    vaultSlug,
-                });
-            }
-            catch {
-                // Unparseable (malformed YAML, encoding) — skip.
-            }
-        }
-    }
-}
-function renderClaudeMd(gold, silver) {
-    const lines = [];
-    lines.push(SENTINEL_HEADER);
-    lines.push("");
-    lines.push("This directory mirrors your accessible Unfairly vaults. Files below are");
-    lines.push("the active canon — read them before answering questions about this team's");
-    lines.push("architecture, decisions, brand, or in-flight work.");
-    lines.push("");
-    lines.push("## Canon (gold, top primitives)");
-    if (gold.length === 0) {
-        lines.push("(No gold primitives in your accessible vaults yet. Run `unfairly pull` after the team seeds canon docs.)");
-    }
-    else {
-        for (const d of gold)
-            lines.push(`@${d.relativePath}`);
-    }
-    lines.push("");
-    lines.push("## Working knowledge (silver, recently touched)");
-    if (silver.length === 0) {
-        lines.push("(No recent silver docs.)");
-    }
-    else {
-        for (const d of silver)
-            lines.push(`@${d.relativePath}`);
-    }
-    lines.push("");
-    lines.push("## Conventions");
-    lines.push("- Trust tier = audience signal, not visibility filter. All tiers are working memory.");
-    lines.push("- This file is regenerated on every `unfairly init` or `unfairly pull`.");
-    lines.push("  Don't hand-edit — your changes will be overwritten.");
-    lines.push("- For real-time multiplayer state (current checkpoints, applied edits,");
-    lines.push("  pending proposals, online teammates), call `enter_org` via MCP.");
-    lines.push("  This filesystem mirror is static-as-of-last-pull.");
-    return lines.join("\n") + "\n";
-}
-function renderGitignore() {
-    return `# Default: ignore everything in this directory.
+import{promises as c}from"node:fs";import n from"node:path";import y from"gray-matter";const v="# Unfairly Vault Context (auto-generated by `unfairly`)",h="CLAUDE.md";async function E(t,r){const e=await w(t,r),i=e.filter(s=>s.trust_tier==="gold"&&s.role==="primitive").sort((s,l)=>(l.updated_at??"").localeCompare(s.updated_at??"")).slice(0,8),o=e.filter(s=>s.trust_tier==="silver").sort((s,l)=>(l.updated_at??"").localeCompare(s.updated_at??"")).slice(0,5),p=_(i,o);await c.writeFile(n.join(t,h),p,"utf8");const a=n.join(t,".gitignore");try{await c.access(a)}catch{await c.writeFile(a,b(),"utf8")}}async function w(t,r){const e=[];for(const i of Object.values(r.vaults)){const o=i.track_in_git?n.join(t,i.slug):n.join(t,"cache",i.slug);try{await f(o,t,i.slug,e)}catch{}}return e}async function f(t,r,e,i){const o=n.join(r,h),p=await c.readdir(t,{withFileTypes:!0});for(const a of p){const s=n.join(t,a.name);if(a.isDirectory())await f(s,r,e,i);else if(a.name.endsWith(".md")){if(n.resolve(s)===n.resolve(o))continue;try{const l=await c.readFile(s,"utf8"),{data:u}=y(l),g=n.relative(r,s).split(n.sep).join("/"),d=u.updated_at,m=d instanceof Date?d.toISOString():typeof d=="string"?d:void 0;i.push({relativePath:g,trust_tier:typeof u.trust_tier=="string"?u.trust_tier:void 0,role:typeof u.role=="string"?u.role:void 0,updated_at:m,vaultSlug:e})}catch{}}}}function _(t,r){const e=[];if(e.push(v),e.push(""),e.push("This directory mirrors your accessible Unfairly vaults. Files below are"),e.push("the active canon \u2014 read them before answering questions about this team's"),e.push("architecture, decisions, brand, or in-flight work."),e.push(""),e.push("## Canon (gold, top primitives)"),t.length===0)e.push("(No gold primitives in your accessible vaults yet. Run `unfairly pull` after the team seeds canon docs.)");else for(const i of t)e.push(`@${i.relativePath}`);if(e.push(""),e.push("## Working knowledge (silver, recently touched)"),r.length===0)e.push("(No recent silver docs.)");else for(const i of r)e.push(`@${i.relativePath}`);return e.push(""),e.push("## Conventions"),e.push("- Trust tier = audience signal, not visibility filter. All tiers are working memory."),e.push("- This file is regenerated on every `unfairly init` or `unfairly pull`."),e.push("  Don't hand-edit \u2014 your changes will be overwritten."),e.push("- For real-time multiplayer state (current checkpoints, applied edits,"),e.push("  pending proposals, online teammates), call `enter_org` via MCP."),e.push("  This filesystem mirror is static-as-of-last-pull."),e.join(`
+`)+`
+`}function b(){return`# Default: ignore everything in this directory.
 # .unfairly/ is a local cache of vault content. By default, none of it is
-# committed — agents read from disk; the source of truth is in cloud vaults.
+# committed \u2014 agents read from disk; the source of truth is in cloud vaults.
 *
 
 # Re-include the autoloader and this gitignore so Claude Code finds them:
@@ -133,6 +13,4 @@ function renderGitignore() {
 # whose docs should be versioned alongside code), add explicit re-includes:
 # !unfairly-app/
 # !unfairly-app/**
-`;
-}
-//# sourceMappingURL=autoloader.js.map
+`}export{E as writeAutoloader};

package/dist/sync/conflict.d.ts

@@ -9,4 +9,3 @@ export declare function buildConflictFile(args: {
     serverBody: string;
     serverUpdatedAt: string;
 }): string;
-//# sourceMappingURL=conflict.d.ts.map