unfairly 0.8.2 → 0.8.4

package/dist/lib/client.js

@@ -1,58 +1 @@
-/**
- * `createUnfairlyClient` — public factory for the agent runtime SDK.
- *
- * Resolves API base URL + token from explicit options or env vars. The
- * default base URL is the hosted Unfairly app; self-hosters override it.
- *
- * The returned client is fluent-ish: `client.vault("slug").search(...)`
- * mirrors how the MCP tools read in the wild. Stays HTTP-only — there's
- * no Supabase or admin client in this package. Server work happens at
- * `/api/sdk/v1/*` and reuses the shared `src/lib/vault/*` helpers.
- */
-import { createTransport } from "./transport.js";
-import { makeVaultSearch } from "./vault/search.js";
-import { makeVaultRead } from "./vault/read.js";
-import { makeVaultCheckpoint } from "./vault/checkpoint.js";
-import { makeEmit } from "./events/emit.js";
-const DEFAULT_BASE_URL = "https://app.unfairly.ai";
-function resolveApiKey(opts) {
-    const key = opts.apiKey ??
-        (typeof process !== "undefined" && process.env
-            ? process.env.UNFAIRLY_API_KEY ?? process.env.UNFAIRLY_MCP_TOKEN
-            : undefined);
-    if (!key) {
-        throw new Error("unfairly: missing apiKey. Pass `{ apiKey }` or set UNFAIRLY_API_KEY in your environment.");
-    }
-    return key;
-}
-function resolveBaseUrl(opts) {
-    return (opts.baseUrl ??
-        (typeof process !== "undefined" && process.env
-            ? process.env.UNFAIRLY_BASE_URL ?? DEFAULT_BASE_URL
-            : DEFAULT_BASE_URL));
-}
-export function createUnfairlyClient(opts = {}) {
-    const apiKey = resolveApiKey(opts);
-    const baseUrl = resolveBaseUrl(opts);
-    const request = createTransport({
-        apiKey,
-        baseUrl,
-        fetchImpl: opts.fetchImpl,
-        timeoutMs: opts.timeoutMs,
-    });
-    const emit = makeEmit(request);
-    return {
-        me: () => request({
-            method: "GET",
-            path: "/api/sdk/v1/me",
-        }),
-        vault: (slug) => ({
-            search: makeVaultSearch(request, slug),
-            readDocument: makeVaultRead(request, slug),
-            checkpoint: makeVaultCheckpoint(request, slug),
-        }),
-        event: { emit },
-        raw: request,
-    };
-}
-//# sourceMappingURL=client.js.map
+import{createTransport as a}from"./transport.js";import{makeVaultSearch as p}from"./vault/search.js";import{makeVaultRead as c}from"./vault/read.js";import{makeVaultCheckpoint as m}from"./vault/checkpoint.js";import{makeEmit as f}from"./events/emit.js";const o="https://app.unfairly.ai";function u(e){const t=e.apiKey??(typeof process<"u"&&process.env?process.env.UNFAIRLY_API_KEY??process.env.UNFAIRLY_MCP_TOKEN:void 0);if(!t)throw new Error("unfairly: missing apiKey. Pass `{ apiKey }` or set UNFAIRLY_API_KEY in your environment.");return t}function l(e){return e.baseUrl??(typeof process<"u"&&process.env?process.env.UNFAIRLY_BASE_URL??o:o)}function A(e={}){const t=u(e),i=l(e),r=a({apiKey:t,baseUrl:i,fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs}),s=f(r);return{me:()=>r({method:"GET",path:"/api/sdk/v1/me"}),vault:n=>({search:p(r,n),readDocument:c(r,n),checkpoint:m(r,n)}),event:{emit:s},raw:r}}export{A as createUnfairlyClient};

package/dist/lib/events/emit.d.ts

@@ -14,4 +14,3 @@ export type EmitResult = {
  * dev typos.
  */
 export declare function makeEmit(request: TransportFn): <E extends AllowedEventName>(event: E, data: EventPayload<E>) => Promise<EmitResult>;
-//# sourceMappingURL=emit.d.ts.map

package/dist/lib/events/emit.js

@@ -1,28 +1 @@
-import { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "../types/index.js";
-export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, };
-/**
- * Emit a closed-allowlist event to the Unfairly events surface.
- *
- * Client-side validation matches the server's zod schema so callers get
- * a synchronous error before the network round-trip. The server still
- * validates — never trust the client — but this saves a round-trip on
- * dev typos.
- */
-export function makeEmit(request) {
-    return async function emit(event, data) {
-        if (!ALLOWED_EVENT_NAMES.includes(event)) {
-            throw new Error(`unfairly: unknown event "${event}". Allowed: ${ALLOWED_EVENT_NAMES.join(", ")}`);
-        }
-        const schema = EVENT_PAYLOAD_SCHEMAS[event];
-        const parsed = schema.safeParse(data);
-        if (!parsed.success) {
-            throw new Error(`unfairly: invalid payload for "${event}": ${JSON.stringify(parsed.error.flatten())}`);
-        }
-        return request({
-            method: "POST",
-            path: "/api/sdk/v1/events/emit",
-            body: { event, data: parsed.data },
-        });
-    };
-}
-//# sourceMappingURL=emit.js.map
+import{ALLOWED_EVENT_NAMES as a,EVENT_PAYLOAD_SCHEMAS as n}from"../types/index.js";function c(t){return async function(r,i){if(!a.includes(r))throw new Error(`unfairly: unknown event "${r}". Allowed: ${a.join(", ")}`);const o=n[r].safeParse(i);if(!o.success)throw new Error(`unfairly: invalid payload for "${r}": ${JSON.stringify(o.error.flatten())}`);return t({method:"POST",path:"/api/sdk/v1/events/emit",body:{event:r,data:o.data}})}}export{a as ALLOWED_EVENT_NAMES,n as EVENT_PAYLOAD_SCHEMAS,c as makeEmit};

package/dist/lib/index.d.ts

@@ -10,4 +10,3 @@ export type { UnfairlyClient, UnfairlyClientOptions, VaultClient, } from "./clie
 export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "./types/index.js";
 export type { AllowedEventName, EventPayload, CheckpointInput, CheckpointResult, TrustTier, SearchHit, SearchDocumentSummary, SearchResponse, VaultDocument, MeResponse, SdkErrorBody, } from "./types/index.js";
 export { UnfairlyApiError } from "./transport.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/index.js

@@ -1,11 +1 @@
-/**
- * `unfairly` package library surface.
- *
- * Anything exported here is part of the public API contract. Keep this
- * file curated — internal helpers (transport internals, CLI prompts)
- * are NOT exported even though they live in this package.
- */
-export { createUnfairlyClient } from "./client.js";
-export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "./types/index.js";
-export { UnfairlyApiError } from "./transport.js";
-//# sourceMappingURL=index.js.map
+import{createUnfairlyClient as o}from"./client.js";import{ALLOWED_EVENT_NAMES as A,EVENT_PAYLOAD_SCHEMAS as f}from"./types/index.js";import{UnfairlyApiError as i}from"./transport.js";export{A as ALLOWED_EVENT_NAMES,f as EVENT_PAYLOAD_SCHEMAS,i as UnfairlyApiError,o as createUnfairlyClient};

package/dist/lib/transport.d.ts

@@ -43,4 +43,3 @@ export type RequestOptions = {
 };
 export declare function createTransport(opts: TransportOptions): <T>(req: RequestOptions) => Promise<T>;
 export type TransportFn = ReturnType<typeof createTransport>;
-//# sourceMappingURL=transport.d.ts.map

package/dist/lib/transport.js

@@ -1,85 +1 @@
-/**
- * HTTP transport for the SDK.
- *
- * Stays intentionally tiny: builds a request, hits the Unfairly REST
- * surface, parses JSON, throws a typed `UnfairlyApiError` on non-2xx.
- *
- * The `fetchImpl` override exists so tests can drop a fake fetch in
- * without monkey-patching globalThis. Don't bake msw in here — keep this
- * runtime-agnostic so the SDK works in Node, Bun, edge runtimes, etc.
- *
- * Token redaction: we never log the bearer token. The shape we log is
- * `{ length, last4 }` only — see `redactToken`.
- */
-export class UnfairlyApiError extends Error {
-    status;
-    body;
-    constructor(status, body, message) {
-        super(message ?? (("error" in body && body.error) || `Request failed (${status})`));
-        this.name = "UnfairlyApiError";
-        this.status = status;
-        this.body = body;
-    }
-}
-export function redactToken(token) {
-    return {
-        length: token.length,
-        last4: token.slice(-4),
-    };
-}
-export function createTransport(opts) {
-    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
-    if (!fetchImpl) {
-        throw new Error("unfairly: no fetch implementation found. Pass `fetchImpl` or run on Node 18+ / a fetch-capable runtime.");
-    }
-    const baseUrl = opts.baseUrl.replace(/\/$/, "");
-    const timeoutMs = opts.timeoutMs ?? 30_000;
-    const userAgent = opts.userAgent ?? "unfairly/0.5.0";
-    return async function request(req) {
-        const url = new URL(baseUrl + req.path);
-        if (req.query) {
-            for (const [k, v] of Object.entries(req.query)) {
-                if (v === undefined)
-                    continue;
-                url.searchParams.set(k, String(v));
-            }
-        }
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), timeoutMs);
-        let res;
-        try {
-            res = await fetchImpl(url.toString(), {
-                method: req.method ?? "GET",
-                headers: {
-                    Authorization: `Bearer ${opts.apiKey}`,
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                    "User-Agent": userAgent,
-                },
-                body: req.body === undefined ? undefined : JSON.stringify(req.body),
-                signal: controller.signal,
-            });
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        const text = await res.text();
-        let parsed = null;
-        if (text) {
-            try {
-                parsed = JSON.parse(text);
-            }
-            catch {
-                parsed = { raw: text };
-            }
-        }
-        if (!res.ok) {
-            const body = parsed && typeof parsed === "object"
-                ? parsed
-                : { raw: text };
-            throw new UnfairlyApiError(res.status, body);
-        }
-        return parsed;
-    };
-}
-//# sourceMappingURL=transport.js.map
+class d extends Error{status;body;constructor(n,o,s){super(s??("error"in o&&o.error||`Request failed (${n})`)),this.name="UnfairlyApiError",this.status=n,this.body=o}}function m(t){return{length:t.length,last4:t.slice(-4)}}function b(t){const n=t.fetchImpl??globalThis.fetch;if(!n)throw new Error("unfairly: no fetch implementation found. Pass `fetchImpl` or run on Node 18+ / a fetch-capable runtime.");const o=t.baseUrl.replace(/\/$/,""),s=t.timeoutMs??3e4,h=t.userAgent??"unfairly/0.5.0";return async function(e){const l=new URL(o+e.path);if(e.query)for(const[c,f]of Object.entries(e.query))f!==void 0&&l.searchParams.set(c,String(f));const u=new AbortController,p=setTimeout(()=>u.abort(),s);let i;try{i=await n(l.toString(),{method:e.method??"GET",headers:{Authorization:`Bearer ${t.apiKey}`,"Content-Type":"application/json",Accept:"application/json","User-Agent":h},body:e.body===void 0?void 0:JSON.stringify(e.body),signal:u.signal})}finally{clearTimeout(p)}const a=await i.text();let r=null;if(a)try{r=JSON.parse(a)}catch{r={raw:a}}if(!i.ok){const c=r&&typeof r=="object"?r:{raw:a};throw new d(i.status,c)}return r}}export{d as UnfairlyApiError,b as createTransport,m as redactToken};

package/dist/lib/types/index.d.ts

@@ -164,4 +164,3 @@ export type SdkErrorBody = {
     details?: unknown;
     allowed?: readonly string[];
 };
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.js

@@ -1,50 +1 @@
-/**
- * SDK shared types.
- *
- * `ALLOWED_EVENT_NAMES` is the CLOSED allowlist of events external callers
- * are allowed to emit via `/api/sdk/v1/events/emit`. The server validates
- * incoming events against this same list and per-event payload schema
- * before forwarding to Inngest. Adding an event here without also adding
- * a schema below + an Inngest function on the server side means the event
- * lands in the queue with nobody listening — keep the three in lockstep.
- *
- * Why a closed list: Codex flagged an earlier draft as an "arbitrary
- * event injection" vector. Anything that's not on this list is rejected
- * with a 400, regardless of token scope.
- */
-import { z } from "zod";
-export const ALLOWED_EVENT_NAMES = [
-    "growth-agent/signal.detected",
-    "funding-agent/update.requested",
-    "vault/content.landed",
-];
-// Source of truth for the growth-agent signal payload shape.
-const GrowthSignalPayloadSchema = z.object({
-    signal_id: z.string().min(1).max(100),
-    source: z.enum(["x-listener", "linkedin-listener", "hn-listener", "manual"]),
-    trust_tier: z.enum(["gold", "silver", "bronze"]),
-    dedupe_key: z.string().min(1).max(200),
-    payload: z.object({
-        text: z.string().max(5000),
-        blocks: z.array(z.unknown()).max(50).optional(),
-        url: z.string().url().optional(),
-        author: z.string().max(200).optional(),
-    }),
-});
-const FundingUpdateRequestedSchema = z.object({
-    vault_slug: z.string().min(1).max(120),
-    window: z.enum(["7d", "14d", "30d"]).default("7d"),
-    reason: z.string().max(500).optional(),
-});
-const VaultContentLandedSchema = z.object({
-    vault_slug: z.string().min(1).max(120),
-    document_id: z.string().min(1).max(120),
-    trust_tier: z.enum(["gold", "silver", "bronze"]),
-    source: z.string().max(200).optional(),
-});
-export const EVENT_PAYLOAD_SCHEMAS = {
-    "growth-agent/signal.detected": GrowthSignalPayloadSchema,
-    "funding-agent/update.requested": FundingUpdateRequestedSchema,
-    "vault/content.landed": VaultContentLandedSchema,
-};
-//# sourceMappingURL=index.js.map
+import{z as t}from"zod";const i=["growth-agent/signal.detected","funding-agent/update.requested","vault/content.landed"],n=t.object({signal_id:t.string().min(1).max(100),source:t.enum(["x-listener","linkedin-listener","hn-listener","manual"]),trust_tier:t.enum(["gold","silver","bronze"]),dedupe_key:t.string().min(1).max(200),payload:t.object({text:t.string().max(5e3),blocks:t.array(t.unknown()).max(50).optional(),url:t.string().url().optional(),author:t.string().max(200).optional()})}),e=t.object({vault_slug:t.string().min(1).max(120),window:t.enum(["7d","14d","30d"]).default("7d"),reason:t.string().max(500).optional()}),a=t.object({vault_slug:t.string().min(1).max(120),document_id:t.string().min(1).max(120),trust_tier:t.enum(["gold","silver","bronze"]),source:t.string().max(200).optional()}),r={"growth-agent/signal.detected":n,"funding-agent/update.requested":e,"vault/content.landed":a};export{i as ALLOWED_EVENT_NAMES,r as EVENT_PAYLOAD_SCHEMAS};

package/dist/lib/vault/checkpoint.d.ts

@@ -9,4 +9,3 @@ import type { CheckpointInput, CheckpointResult } from "../types/index.js";
  * and rejected at worst.
  */
 export declare function makeVaultCheckpoint(request: TransportFn, slug: string): (input: CheckpointInput) => Promise<CheckpointResult>;
-//# sourceMappingURL=checkpoint.d.ts.map

package/dist/lib/vault/checkpoint.js

@@ -1,18 +1 @@
-/**
- * Save a checkpoint to the vault.
- *
- * `actor_email` and `actor_kind` are intentionally not part of
- * `CheckpointInput`. The server derives identity from the bearer token
- * owner; supplying those fields in the request body is a no-op at best
- * and rejected at worst.
- */
-export function makeVaultCheckpoint(request, slug) {
-    return async function checkpoint(input) {
-        return request({
-            method: "POST",
-            path: `/api/sdk/v1/vault/${encodeURIComponent(slug)}/checkpoint`,
-            body: input,
-        });
-    };
-}
-//# sourceMappingURL=checkpoint.js.map
+function c(n,t){return async function(e){return n({method:"POST",path:`/api/sdk/v1/vault/${encodeURIComponent(t)}/checkpoint`,body:e})}}export{c as makeVaultCheckpoint};

package/dist/lib/vault/read.d.ts

@@ -1,4 +1,3 @@
 import type { TransportFn } from "../transport.js";
 import type { VaultDocument } from "../types/index.js";
 export declare function makeVaultRead(request: TransportFn, slug: string): (nameOrSlug: string) => Promise<VaultDocument>;
-//# sourceMappingURL=read.d.ts.map

package/dist/lib/vault/read.js

@@ -1,9 +1 @@
-export function makeVaultRead(request, slug) {
-    return async function readDocument(nameOrSlug) {
-        return request({
-            method: "GET",
-            path: `/api/sdk/v1/vault/${encodeURIComponent(slug)}/documents/${encodeURIComponent(nameOrSlug)}`,
-        });
-    };
-}
-//# sourceMappingURL=read.js.map
+function a(e,n){return async function(t){return e({method:"GET",path:`/api/sdk/v1/vault/${encodeURIComponent(n)}/documents/${encodeURIComponent(t)}`})}}export{a as makeVaultRead};

package/dist/lib/vault/search.d.ts

@@ -5,4 +5,3 @@ export type SearchOptions = {
     matchThreshold?: number;
 };
 export declare function makeVaultSearch(request: TransportFn, slug: string): (query: string, options?: SearchOptions) => Promise<SearchResponse>;
-//# sourceMappingURL=search.d.ts.map

package/dist/lib/vault/search.js

@@ -1,10 +1 @@
-export function makeVaultSearch(request, slug) {
-    return async function search(query, options = {}) {
-        return request({
-            method: "POST",
-            path: `/api/sdk/v1/vault/${encodeURIComponent(slug)}/search`,
-            body: { query, ...options },
-        });
-    };
-}
-//# sourceMappingURL=search.js.map
+function r(e,n){return async function(t,a={}){return e({method:"POST",path:`/api/sdk/v1/vault/${encodeURIComponent(n)}/search`,body:{query:t,...a}})}}export{r as makeVaultSearch};

package/dist/pace/device.d.ts

@@ -25,6 +25,7 @@ declare const DeviceStateSchema: z.ZodObject<{
     paused: z.ZodOptional<z.ZodBoolean>;
     last_upload_at: z.ZodOptional<z.ZodString>;
     last_session_sweep_at: z.ZodOptional<z.ZodString>;
+    history_backfilled_at: z.ZodOptional<z.ZodString>;
     repository_policy_refreshed_at: z.ZodOptional<z.ZodString>;
     collection_policy_version: z.ZodOptional<z.ZodLiteral<"metadata-v3">>;
     managed_files: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -58,6 +59,7 @@ declare const DeviceStateSchema: z.ZodObject<{
     paused?: boolean | undefined;
     last_upload_at?: string | undefined;
     last_session_sweep_at?: string | undefined;
+    history_backfilled_at?: string | undefined;
     repository_policy_refreshed_at?: string | undefined;
     managed_files?: string[] | undefined;
     intelligence_install?: {
@@ -76,6 +78,7 @@ declare const DeviceStateSchema: z.ZodObject<{
     paused?: boolean | undefined;
     last_upload_at?: string | undefined;
     last_session_sweep_at?: string | undefined;
+    history_backfilled_at?: string | undefined;
     repository_policy_refreshed_at?: string | undefined;
     managed_files?: string[] | undefined;
     intelligence_install?: {
@@ -98,4 +101,3 @@ export declare function currentDevicePlatform(): {
 };
 export declare function needsIntelligenceInstall(state: PaceDeviceState, clients: PaceClientCoverage[]): boolean;
 export {};
-//# sourceMappingURL=device.d.ts.map

package/dist/pace/device.js

@@ -1,148 +1,2 @@
-import { randomUUID } from "node:crypto";
-import { spawnSync } from "node:child_process";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-export const PaceClientIdSchema = z.enum([
-    "codex",
-    "claude_code",
-    "cursor",
-    "claude_desktop",
-    "gemini_cli",
-    "openrouter",
-    "chatgpt_desktop",
-]);
-export const PaceClientCoverageSchema = z.object({
-    client: PaceClientIdSchema,
-    installed: z.boolean(),
-    configured: z.boolean(),
-    version: z.string().max(200).optional(),
-}).strict();
-const IntelligenceInstallSchema = z.object({
-    version: z.string().min(1).max(100),
-    runtime_entrypoint: z.string().min(1),
-    marketplace_root: z.string().min(1),
-    owned_paths: z.array(z.string().min(1)).max(20),
-    activated_clients: z.array(PaceClientIdSchema).max(10),
-    installed_at: z.string().datetime(),
-}).strict();
-const DeviceStateSchema = z.object({
-    installation_id: z.string().uuid(),
-    attestation: z.string().min(1).optional(),
-    attestation_expires_at: z.string().datetime().optional(),
-    paused: z.boolean().optional(),
-    last_upload_at: z.string().datetime().optional(),
-    last_session_sweep_at: z.string().datetime().optional(),
-    repository_policy_refreshed_at: z.string().datetime().optional(),
-    collection_policy_version: z.literal("metadata-v3").optional(),
-    managed_files: z.array(z.string().min(1)).max(20).optional(),
-    intelligence_install: IntelligenceInstallSchema.optional(),
-}).strict();
-export function paceDevicePath() {
-    return process.env.UNFAIRLY_PACE_DEVICE_STATE ?? path.join(os.homedir(), ".unfairly", "pace", "device.json");
-}
-export async function readOrCreatePaceDevice() {
-    const file = paceDevicePath();
-    try {
-        return DeviceStateSchema.parse(JSON.parse(await fs.readFile(file, "utf8")));
-    }
-    catch (error) {
-        if (error.code !== "ENOENT" && error instanceof SyntaxError)
-            throw error;
-    }
-    const state = { installation_id: randomUUID() };
-    await writePaceDevice(state);
-    return state;
-}
-export async function writePaceDevice(state) {
-    const parsed = DeviceStateSchema.parse(state);
-    const file = paceDevicePath();
-    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
-    await fs.writeFile(file, `${JSON.stringify(parsed, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
-    await fs.chmod(file, 0o600).catch(() => undefined);
-}
-function binaryVersion(binary) {
-    const result = spawnSync(binary, ["--version"], { encoding: "utf8", timeout: 2_000 });
-    if (result.error || result.status !== 0)
-        return { installed: false };
-    const version = `${result.stdout || result.stderr}`.trim().slice(0, 200);
-    return { installed: true, version: version || undefined };
-}
-async function exists(file) {
-    try {
-        await fs.access(file);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-export async function detectPaceClients() {
-    const home = os.homedir();
-    const codex = binaryVersion("codex");
-    const claude = binaryVersion("claude");
-    const gemini = binaryVersion("gemini");
-    const cursorCli = binaryVersion("cursor");
-    const openrouterConfigured = Boolean(process.env.OPENROUTER_API_KEY);
-    const claudeDesktopPath = process.platform === "darwin"
-        ? "/Applications/Claude.app"
-        : path.join(process.env.APPDATA ?? home, "Claude");
-    const chatgptDesktopPath = process.platform === "darwin"
-        ? "/Applications/ChatGPT.app"
-        : path.join(process.env.LOCALAPPDATA ?? home, "Programs", "ChatGPT");
-    const cursorAppPath = process.platform === "darwin"
-        ? "/Applications/Cursor.app"
-        : path.join(process.env.LOCALAPPDATA ?? home, "Programs", "cursor");
-    return [
-        {
-            client: "codex",
-            ...codex,
-            configured: codex.installed && await exists(path.join(home, ".codex", "config.toml")),
-        },
-        {
-            client: "claude_code",
-            ...claude,
-            configured: claude.installed && await exists(path.join(home, ".claude.json")),
-        },
-        {
-            client: "cursor",
-            installed: cursorCli.installed || await exists(cursorAppPath),
-            configured: await exists(path.join(home, ".cursor", "hooks.json")) || await exists(path.join(home, ".claude", "settings.json")),
-            version: cursorCli.version,
-        },
-        {
-            client: "claude_desktop",
-            installed: await exists(claudeDesktopPath),
-            configured: await exists(process.platform === "darwin"
-                ? path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json")
-                : path.join(process.env.APPDATA ?? home, "Claude", "claude_desktop_config.json")),
-        },
-        {
-            client: "gemini_cli",
-            ...gemini,
-            configured: gemini.installed && await exists(path.join(home, ".gemini", "settings.json")),
-        },
-        {
-            client: "openrouter",
-            installed: openrouterConfigured,
-            configured: openrouterConfigured,
-        },
-        {
-            client: "chatgpt_desktop",
-            installed: await exists(chatgptDesktopPath),
-            configured: false,
-        },
-    ].map((client) => PaceClientCoverageSchema.parse(client));
-}
-export function currentDevicePlatform() {
-    return { platform: process.platform, arch: process.arch };
-}
-export function needsIntelligenceInstall(state, clients) {
-    if (!state.intelligence_install)
-        return true;
-    const hookClients = new Set(["codex", "claude_code", "cursor", "gemini_cli"]);
-    const activated = new Set(state.intelligence_install.activated_clients);
-    return clients.some((client) => client.installed && hookClients.has(client.client) && !activated.has(client.client));
-}
-//# sourceMappingURL=device.js.map
+import{randomUUID as w}from"node:crypto";import{spawnSync as P}from"node:child_process";import s from"node:fs/promises";import p from"node:os";import o from"node:path";import{z as e}from"zod";const u=e.enum(["codex","claude_code","cursor","claude_desktop","gemini_cli","openrouter","chatgpt_desktop"]),A=e.object({client:u,installed:e.boolean(),configured:e.boolean(),version:e.string().max(200).optional()}).strict(),x=e.object({version:e.string().min(1).max(100),runtime_entrypoint:e.string().min(1),marketplace_root:e.string().min(1),owned_paths:e.array(e.string().min(1)).max(20),activated_clients:e.array(u).max(10),installed_at:e.string().datetime()}).strict(),m=e.object({installation_id:e.string().uuid(),attestation:e.string().min(1).optional(),attestation_expires_at:e.string().datetime().optional(),paused:e.boolean().optional(),last_upload_at:e.string().datetime().optional(),last_session_sweep_at:e.string().datetime().optional(),history_backfilled_at:e.string().datetime().optional(),repository_policy_refreshed_at:e.string().datetime().optional(),collection_policy_version:e.literal("metadata-v3").optional(),managed_files:e.array(e.string().min(1)).max(20).optional(),intelligence_install:x.optional()}).strict();function f(){return process.env.UNFAIRLY_PACE_DEVICE_STATE??o.join(p.homedir(),".unfairly","pace","device.json")}async function T(){const t=f();try{return m.parse(JSON.parse(await s.readFile(t,"utf8")))}catch(i){if(i.code!=="ENOENT"&&i instanceof SyntaxError)throw i}const n={installation_id:w()};return await j(n),n}async function j(t){const n=m.parse(t),i=f();await s.mkdir(o.dirname(i),{recursive:!0,mode:448}),await s.writeFile(i,`${JSON.stringify(n,null,2)}
+`,{encoding:"utf8",mode:384}),await s.chmod(i,384).catch(()=>{})}function l(t){const n=P(t,["--version"],{encoding:"utf8",timeout:2e3});return n.error||n.status!==0?{installed:!1}:{installed:!0,version:`${n.stdout||n.stderr}`.trim().slice(0,200)||void 0}}async function a(t){try{return await s.access(t),!0}catch{return!1}}async function b(){const t=p.homedir(),n=l("codex"),i=l("claude"),c=l("gemini"),r=l("cursor"),d=!!process.env.OPENROUTER_API_KEY,g=process.platform==="darwin"?"/Applications/Claude.app":o.join(process.env.APPDATA??t,"Claude"),_=process.platform==="darwin"?"/Applications/ChatGPT.app":o.join(process.env.LOCALAPPDATA??t,"Programs","ChatGPT"),h=process.platform==="darwin"?"/Applications/Cursor.app":o.join(process.env.LOCALAPPDATA??t,"Programs","cursor");return[{client:"codex",...n,configured:n.installed&&await a(o.join(t,".codex","config.toml"))},{client:"claude_code",...i,configured:i.installed&&await a(o.join(t,".claude.json"))},{client:"cursor",installed:r.installed||await a(h),configured:await a(o.join(t,".cursor","hooks.json"))||await a(o.join(t,".claude","settings.json")),version:r.version},{client:"claude_desktop",installed:await a(g),configured:await a(process.platform==="darwin"?o.join(t,"Library","Application Support","Claude","claude_desktop_config.json"):o.join(process.env.APPDATA??t,"Claude","claude_desktop_config.json"))},{client:"gemini_cli",...c,configured:c.installed&&await a(o.join(t,".gemini","settings.json"))},{client:"openrouter",installed:d,configured:d},{client:"chatgpt_desktop",installed:await a(_),configured:!1}].map(v=>A.parse(v))}function I(){return{platform:process.platform,arch:process.arch}}function O(t,n){if(!t.intelligence_install)return!0;const i=new Set(["codex","claude_code","cursor","gemini_cli"]),c=new Set(t.intelligence_install.activated_clients);return n.some(r=>r.installed&&i.has(r.client)&&!c.has(r.client))}export{A as PaceClientCoverageSchema,u as PaceClientIdSchema,I as currentDevicePlatform,b as detectPaceClients,O as needsIntelligenceInstall,f as paceDevicePath,T as readOrCreatePaceDevice,j as writePaceDevice};

package/dist/pace/enroll.d.ts

@@ -0,0 +1,79 @@
+import { z } from "zod";
+/**
+ * No-terminal connection for the plugin. On a session start without a
+ * collector credential, the plugin starts (or continues) a browser-approved
+ * enrollment and hands the person a link. Once approved, it claims a
+ * credential bound to this installation. Only these two small files are kept.
+ */
+declare const CredentialSchema: z.ZodObject<{
+    installation_id: z.ZodString;
+    secret: z.ZodString;
+    org_id: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    installation_id: string;
+    secret: string;
+    org_id: string;
+}, {
+    installation_id: string;
+    secret: string;
+    org_id: string;
+}>;
+export type CollectorCredential = z.infer<typeof CredentialSchema>;
+export declare const collectorCredentialPath: () => string;
+export declare const readCollectorCredential: () => Promise<{
+    installation_id: string;
+    secret: string;
+    org_id: string;
+} | null>;
+export declare function collectorAuthorization(credential: CollectorCredential): string;
+export type EnrollmentState = {
+    status: "connected";
+    orgId: string;
+} | {
+    status: "waiting";
+    link: string;
+    code: string;
+} | {
+    status: "unavailable";
+};
+/** One step of the enrollment state machine; safe to call on every session start. */
+export declare function ensureEnrolled(input: {
+    apiUrl: string;
+    installationId: string;
+    platform: "darwin" | "linux" | "win32";
+    arch: "x64" | "arm64";
+    clients: string[];
+    orgHint?: string;
+    fetchImpl?: typeof fetch;
+    now?: Date;
+}): Promise<EnrollmentState>;
+/**
+ * Checks the enrollment this machine is waiting on, without starting a new
+ * one. Claims and stores the credential when the person has approved it.
+ */
+export declare function pollPendingEnrollment(input: {
+    apiUrl: string;
+    fetchImpl?: typeof fetch;
+    now?: Date;
+}): Promise<EnrollmentState | {
+    status: "none";
+}>;
+/**
+ * Keeps polling after the connect link is shown, so approving in the browser
+ * connects this machine within seconds instead of at the next session start.
+ * Stops when connected, when the enrollment ends, or at the deadline.
+ */
+export declare function awaitApproval(input: {
+    apiUrl: string;
+    intervalMs?: number;
+    deadlineMs?: number;
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    clock?: () => number;
+}): Promise<boolean>;
+/** At most one background poller per machine: sessions often start in bursts. */
+export declare function acquireApprovalLock(now?: number): Promise<boolean>;
+export declare const releaseApprovalLock: () => Promise<void | undefined>;
+/** What a SessionStart hook prints: a visible message for the person plus context so the assistant can repeat the link. */
+export declare function sessionStartOutput(state: EnrollmentState, hookEventName?: string): string;
+export {};

package/dist/pace/enroll.js

@@ -0,0 +1,2 @@
+import c from"node:fs/promises";import x from"node:os";import l from"node:path";import{z as a}from"zod";const f=a.object({installation_id:a.string().uuid(),secret:a.string().regex(/^[A-Za-z0-9_-]{43}$/),org_id:a.string().uuid()}).strict(),S=a.object({device_code:a.string(),user_code:a.string(),verification_uri:a.string().url(),expires_at:a.string()}).strict(),g=()=>l.join(x.homedir(),".unfairly","pace"),_=()=>process.env.UNFAIRLY_PACE_COLLECTOR??l.join(g(),"collector.json"),d=()=>process.env.UNFAIRLY_PACE_ENROLLMENT??l.join(g(),"enrollment.json");async function m(e,n){try{const t=n.safeParse(JSON.parse(await c.readFile(e,"utf8")));return t.success?t.data:null}catch{return null}}async function u(e,n){await c.mkdir(l.dirname(e),{recursive:!0,mode:448}),await c.writeFile(e,`${JSON.stringify(n)}
+`,{encoding:"utf8",mode:384})}const h=()=>m(_(),f);function C(e){return`Collector ${e.installation_id}.${e.secret}`}async function P(e){const n=await h();if(n)return{status:"connected",orgId:n.org_id};const t=e.fetchImpl??fetch,r=e.now??new Date,i=await w({apiUrl:e.apiUrl,fetchImpl:t,now:r});if(i.status==="connected"||i.status==="waiting")return i;const o=e.clients.filter(v=>["codex","claude_code","cursor","gemini_cli"].includes(v)),p=await t(`${e.apiUrl}/api/ai-pace/enroll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({installation_id:e.installationId,platform:e.platform,arch:e.arch,clients:o,...e.orgHint?{org_hint:e.orgHint}:{}})});if(!p.ok)return{status:"unavailable"};const s=await p.json();return await u(d(),{device_code:s.device_code,user_code:s.user_code,verification_uri:s.verification_uri,expires_at:new Date(r.getTime()+s.expires_in*1e3).toISOString()}),{status:"waiting",link:s.verification_uri,code:s.user_code}}async function w(e){const n=await h();if(n)return{status:"connected",orgId:n.org_id};const t=await m(d(),S);if(!t||Date.parse(t.expires_at)<=(e.now??new Date).getTime())return{status:"none"};const o=await(await(e.fetchImpl??fetch)(`${e.apiUrl}/api/ai-pace/enroll/poll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:t.device_code})})).json().catch(()=>({}));return o.status==="approved"&&o.installation_id&&o.secret&&o.org_id?(await u(_(),f.parse({installation_id:o.installation_id,secret:o.secret,org_id:o.org_id})),await c.unlink(d()).catch(()=>{}),{status:"connected",orgId:o.org_id}):o.status==="pending"?{status:"waiting",link:t.verification_uri,code:t.user_code}:{status:"none"}}async function A(e){const n=e.clock??Date.now,t=e.sleep??(i=>new Promise(o=>setTimeout(o,i))),r=n()+(e.deadlineMs??16*6e4);for(;n()<r;){const i=await w({apiUrl:e.apiUrl,fetchImpl:e.fetchImpl,now:new Date(n())}).catch(()=>({status:"waiting"}));if(i.status==="connected")return!0;if(i.status==="none")return!1;await t(e.intervalMs??5e3)}return!1}const y=()=>l.join(l.dirname(d()),"approval-wait.json");async function N(e=Date.now()){const n=y();try{const t=JSON.parse(await c.readFile(n,"utf8")),r=typeof t.started_at=="number"&&e-t.started_at<17*6e4;let i=!1;try{typeof t.pid=="number"&&(process.kill(t.pid,0),i=!0)}catch{i=!1}if(r&&i)return!1}catch{}return await u(n,{pid:process.pid,started_at:e}),!0}const T=()=>c.unlink(y()).catch(()=>{});function U(e,n="SessionStart"){if(e.status!=="waiting")return"";const t=`Connect Unfairly Intelligence to your team: open ${e.link} and approve code ${e.code}. It shares session metadata only, never prompts or code.`;return JSON.stringify({systemMessage:t,hookSpecificOutput:{hookEventName:n,additionalContext:`The Unfairly Intelligence plugin is installed but this machine is not connected yet. At a natural point, tell the user once: "${t}" Do not repeat it after they connect.`}})}export{N as acquireApprovalLock,A as awaitApproval,C as collectorAuthorization,_ as collectorCredentialPath,P as ensureEnrolled,w as pollPendingEnrollment,h as readCollectorCredential,T as releaseApprovalLock,U as sessionStartOutput};

package/dist/pace/identity.d.ts

@@ -7,4 +7,3 @@ export declare function deterministicWorkflowId(input: {
     source: string;
     sessionId: string;
 }): string;
-//# sourceMappingURL=identity.d.ts.map

package/dist/pace/identity.js

@@ -1,17 +1 @@
-import { createHash } from "node:crypto";
-/**
- * Produces a stable, opaque UUID for one AI workflow without exposing the raw
- * installation or session identifiers in downstream joins.
- */
-export function deterministicWorkflowId(input) {
-    const bytes = createHash("sha256")
-        .update(`${input.installationId}\u0000${input.source}\u0000${input.sessionId}`, "utf8")
-        .digest()
-        .subarray(0, 16);
-    // Mark the deterministic hash as a name-based UUID and set the RFC variant.
-    bytes[6] = (bytes[6] & 0x0f) | 0x50;
-    bytes[8] = (bytes[8] & 0x3f) | 0x80;
-    const hex = bytes.toString("hex");
-    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
-}
-//# sourceMappingURL=identity.js.map
+import{createHash as i}from"node:crypto";function r(t){const e=i("sha256").update(`${t.installationId}\0${t.source}\0${t.sessionId}`,"utf8").digest().subarray(0,16);e[6]=e[6]&15|80,e[8]=e[8]&63|128;const s=e.toString("hex");return`${s.slice(0,8)}-${s.slice(8,12)}-${s.slice(12,16)}-${s.slice(16,20)}-${s.slice(20)}`}export{r as deterministicWorkflowId};

package/dist/pace/install.d.ts

@@ -25,4 +25,3 @@ export type IntelligenceInstallerDeps = {
     }) => Promise<string>;
 };
 export declare function installIntelligence(deps: IntelligenceInstallerDeps): Promise<IntelligenceInstallResult>;
-//# sourceMappingURL=install.d.ts.map