unfairly 0.8.3 → 0.8.4

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.8.4 — 2026-10-05
+
+- **Proprietary license** — the package is now licensed under Unfairly's terms instead of MIT. It ships minified, without source maps, and no longer links to the source repository. Behavior is unchanged.
+
 ## 0.8.3 — 2026-09-25
 
 - **Connect in the same session** — after the person approves the machine in the browser, a detached poller claims the collector credential within seconds, so the session that showed the link starts reporting without a restart.

package/LICENSE

@@ -0,0 +1,15 @@
+Copyright (c) 2026 Unfairly AI. All rights reserved.
+
+This software is proprietary and confidential. You may install and run it to
+use Unfairly services under the terms at https://unfairly.ai. No other license
+is granted to use, copy, modify, merge, publish, distribute, sublicense, or
+sell copies of this software, in whole or in part, or to reverse engineer it,
+except as expressly permitted in a separate written agreement with Unfairly AI.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/auth/browser-flow.d.ts

@@ -22,4 +22,3 @@ export declare function cliAuthUrl(apiUrl: string, input: {
  * verifies the state echo and resolves with the token.
  */
 export declare function browserAuthFlow(apiUrl: string, opts?: BrowserAuthOptions): Promise<string | null>;
-//# sourceMappingURL=browser-flow.d.ts.map

package/dist/auth/browser-flow.js

@@ -1,81 +1,5 @@
-import http from "node:http";
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-const SUCCESS_HTML = `<!doctype html><html><head><meta charset="utf-8"><title>Unfairly CLI authorized</title><style>body{margin:0;background:#FAF5EB;font-family:system-ui;color:#1a1612;display:flex;align-items:center;justify-content:center;min-height:100vh}.card{background:#fff;border:3px solid #1a1612;border-radius:20px;box-shadow:6px 6px 0 #1a1612;padding:36px;max-width:420px;text-align:center}h1{margin:0 0 8px;font-size:28px}p{margin:0;color:rgba(26,22,18,.7)}</style></head><body><div class="card"><h1>Authorized.</h1><p>You can close this window and return to your terminal.</p></div></body></html>`;
-export function openBrowser(url) {
-    const opener = process.platform === "darwin"
-        ? "open"
-        : process.platform === "win32"
-            ? "cmd"
-            : "xdg-open";
-    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-    try {
-        spawn(opener, args, { stdio: "ignore", detached: true }).unref();
-    }
-    catch {
-        // best-effort
-    }
-}
-/** The /cli-auth page URL. An organization ID scopes the minted token to that org when the user is a member. */
-export function cliAuthUrl(apiUrl, input) {
-    const url = new URL("/cli-auth", apiUrl);
-    url.searchParams.set("cb", input.cb);
-    url.searchParams.set("state", input.state);
-    url.searchParams.set("name", input.tokenName);
-    if (input.org && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(input.org))
-        url.searchParams.set("org", input.org);
-    return url;
-}
-/**
- * OAuth handshake via loopback HTTP server. Used by `unfairly setup`,
- * `unfairly login`, and `unfairly init`.
- *
- * Flow: pop a /cli-auth page in the user's browser with a one-time `state`
- * and a `cb=http://localhost:<port>/done` callback. The page mints a
- * `mcp_*` token and redirects the browser back to `cb`. Our local server
- * verifies the state echo and resolves with the token.
- */
-export async function browserAuthFlow(apiUrl, opts = {}) {
-    const tokenName = opts.tokenName ?? "unfairly cli";
-    const timeoutMs = opts.timeoutMs ?? 5 * 60_000;
-    const state = crypto.randomBytes(16).toString("base64url");
-    return new Promise((resolve) => {
-        let resolved = false;
-        const cleanup = (val) => {
-            if (resolved)
-                return;
-            resolved = true;
-            setTimeout(() => server.close(), 500);
-            resolve(val);
-        };
-        const server = http.createServer((req, res) => {
-            const url = new URL(req.url ?? "/", "http://localhost");
-            if (url.pathname !== "/done") {
-                res.writeHead(404).end();
-                return;
-            }
-            const echoState = url.searchParams.get("state") ?? "";
-            const token = url.searchParams.get("token") ?? "";
-            if (echoState !== state || !token.startsWith("mcp_")) {
-                res.writeHead(400).end("Auth failed");
-                cleanup(null);
-                return;
-            }
-            res
-                .writeHead(200, { "Content-Type": "text/html; charset=utf-8" })
-                .end(SUCCESS_HTML);
-            cleanup(token);
-        });
-        const timeout = setTimeout(() => cleanup(null), timeoutMs);
-        server.on("close", () => clearTimeout(timeout));
-        server.listen(0, "127.0.0.1", () => {
-            const addr = server.address();
-            const port = typeof addr === "object" && addr ? addr.port : 0;
-            const cb = `http://localhost:${port}/done`;
-            const authUrl = cliAuthUrl(apiUrl, { cb, state, tokenName, org: opts.org ?? process.env.UNFAIRLY_ORG });
-            console.error(`\nOpening browser to authorize:\n  ${authUrl.toString()}\n(if it doesn't open, click the link above)\n`);
-            openBrowser(authUrl.toString());
-        });
-    });
-}
-//# sourceMappingURL=browser-flow.js.map
+import f from"node:http";import g from"node:crypto";import{spawn as y}from"node:child_process";const w='<!doctype html><html><head><meta charset="utf-8"><title>Unfairly CLI authorized</title><style>body{margin:0;background:#FAF5EB;font-family:system-ui;color:#1a1612;display:flex;align-items:center;justify-content:center;min-height:100vh}.card{background:#fff;border:3px solid #1a1612;border-radius:20px;box-shadow:6px 6px 0 #1a1612;padding:36px;max-width:420px;text-align:center}h1{margin:0 0 8px;font-size:28px}p{margin:0;color:rgba(26,22,18,.7)}</style></head><body><div class="card"><h1>Authorized.</h1><p>You can close this window and return to your terminal.</p></div></body></html>';function b(r){const t=process.platform==="darwin"?"open":process.platform==="win32"?"cmd":"xdg-open",e=process.platform==="win32"?["/c","start","",r]:[r];try{y(t,e,{stdio:"ignore",detached:!0}).unref()}catch{}}function x(r,t){const e=new URL("/cli-auth",r);return e.searchParams.set("cb",t.cb),e.searchParams.set("state",t.state),e.searchParams.set("name",t.tokenName),t.org&&/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(t.org)&&e.searchParams.set("org",t.org),e}async function P(r,t={}){const e=t.tokenName??"unfairly cli",h=t.timeoutMs??5*6e4,l=g.randomBytes(16).toString("base64url");return new Promise(p=>{let d=!1;const i=o=>{d||(d=!0,setTimeout(()=>n.close(),500),p(o))},n=f.createServer((o,s)=>{const a=new URL(o.url??"/","http://localhost");if(a.pathname!=="/done"){s.writeHead(404).end();return}const c=a.searchParams.get("state")??"",m=a.searchParams.get("token")??"";if(c!==l||!m.startsWith("mcp_")){s.writeHead(400).end("Auth failed"),i(null);return}s.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}).end(w),i(m)}),u=setTimeout(()=>i(null),h);n.on("close",()=>clearTimeout(u)),n.listen(0,"127.0.0.1",()=>{const o=n.address(),a=`http://localhost:${typeof o=="object"&&o?o.port:0}/done`,c=x(r,{cb:a,state:l,tokenName:e,org:t.org??process.env.UNFAIRLY_ORG});console.error(`
+Opening browser to authorize:
+  ${c.toString()}
+(if it doesn't open, click the link above)
+`),b(c.toString())})})}export{P as browserAuthFlow,x as cliAuthUrl,b as openBrowser};

package/dist/cmd/connect.d.ts

@@ -58,4 +58,3 @@ export declare const connectCommand: {
     handler: (args: ConnectArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=connect.d.ts.map

package/dist/cmd/connect.js

@@ -1,164 +1 @@
-import { parseShareInput } from "./parse-share-input.js";
-import { addScopedClaudeDesktopEntry, } from "../hosts/claude-desktop.js";
-import { addScopedClaudeCodeEntry } from "../hosts/claude-code.js";
-import { addScopedCodexEntry, } from "../hosts/codex.js";
-const API_DEFAULT = "https://app.unfairly.ai";
-/**
- * Map a mint endpoint error code to a user-facing message.
- */
-function describeMintError(status, code) {
-    if (status === 404 || code === "not_found") {
-        return "share link not found — double-check the URL or ask the sender to issue a new one.";
-    }
-    if (status === 410 || code === "revoked_or_expired") {
-        return "share link expired or was revoked — ask the sender for a fresh one.";
-    }
-    if (status === 429 || code === "rate_limited") {
-        return "rate limited (10 mints / hour per link) — try again in an hour.";
-    }
-    if (status === 400 || code === "no_room") {
-        return "invalid share link — it isn't bound to a vault.";
-    }
-    return `server error while minting (${status} ${code}).`;
-}
-/**
- * Pure-ish implementation. Tests inject `deps` to drive without hitting
- * the network or touching real config files.
- */
-export async function runConnect(args, deps) {
-    let parsed;
-    try {
-        parsed = parseShareInput(args.urlOrId);
-    }
-    catch (err) {
-        deps.errLog(`✗ ${err.message}`);
-        return { ok: false, exitCode: 1 };
-    }
-    const apiOrigin = args.api ?? parsed.origin ?? API_DEFAULT;
-    const mintUrl = `${apiOrigin.replace(/\/$/, "")}/api/share-links/${parsed.shareId}/mint-token`;
-    const body = {};
-    if (args.as)
-        body.email = args.as;
-    if (args.label)
-        body.label = args.label;
-    deps.log("✦ Minting a 24-hour vault token…");
-    let res;
-    try {
-        res = await deps.fetch(mintUrl, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify(body),
-        });
-    }
-    catch (err) {
-        deps.errLog(`✗ network error reaching ${apiOrigin}: ${err.message}`);
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    if (!res.ok) {
-        let parsedErr = { error: "unknown" };
-        try {
-            parsedErr = (await res.json());
-        }
-        catch {
-            // body wasn't JSON — fall through with default
-        }
-        const message = describeMintError(res.status, parsedErr.error ?? "unknown");
-        deps.errLog(`✗ ${message}`);
-        return {
-            ok: false,
-            exitCode: 1,
-            shareId: parsed.shareId,
-            errorCode: parsedErr.error,
-        };
-    }
-    let mint;
-    try {
-        mint = (await res.json());
-    }
-    catch (err) {
-        deps.errLog(`✗ mint endpoint returned non-JSON: ${err.message}`);
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    if (!mint.token || !mint.mcp_url) {
-        deps.errLog("✗ mint endpoint response missing token or mcp_url");
-        return { ok: false, exitCode: 1, shareId: parsed.shareId };
-    }
-    const input = {
-        orgSlug: mint.org_slug,
-        roomSlug: mint.room_slug,
-        shareLinkId: parsed.shareId,
-        token: mint.token,
-        mcpUrl: mint.mcp_url,
-    };
-    const [claudeDesktop, claudeCode, codex] = await Promise.all([
-        deps.addClaudeDesktop(input),
-        deps.addClaudeCode(input),
-        deps.addCodex(input),
-    ]);
-    // Per-host success line.
-    const reportHost = (name, result) => {
-        if (result.status === "configured") {
-            const verb = "replaced" in result && result.replaced ? "Updated" : "Wired";
-            deps.log(`✓ ${verb} ${name} · ${result.key}`);
-        }
-        else if (result.status === "not-installed") {
-            deps.log(`  (${name} not installed — skipped)`);
-        }
-        else {
-            deps.errLog(`✗ ${name}: ${result.message ?? "unknown error"}`);
-        }
-    };
-    reportHost("Claude Desktop", claudeDesktop);
-    reportHost("Claude Code", claudeCode);
-    reportHost("Codex", codex);
-    deps.log("");
-    deps.log("→ Open your AI host. Ask: \"what's in this vault?\"");
-    if (mint.expires_at) {
-        deps.log(`  Token expires at ${mint.expires_at} (≤24h).`);
-    }
-    else {
-        deps.log("  Token expires in 24h.");
-    }
-    return {
-        ok: true,
-        exitCode: 0,
-        shareId: parsed.shareId,
-        hosts: { claudeDesktop, claudeCode, codex },
-        mint,
-    };
-}
-export const connectCommand = {
-    command: "connect <urlOrId>",
-    describe: "Connect to a shared vault via share link — mints a 24h token, wires all hosts",
-    builder: (yargs) => yargs
-        .positional("urlOrId", {
-        type: "string",
-        demandOption: true,
-        describe: "Share link URL (https://app.unfairly.ai/s/<uuid>), short form (s/<uuid>), or bare UUID",
-    })
-        .option("as", {
-        type: "string",
-        describe: "Email to attribute the token to (audit only)",
-    })
-        .option("label", {
-        type: "string",
-        describe: "Human label for the audit log (≤100 chars)",
-    })
-        .option("api", {
-        type: "string",
-        describe: "Override the API origin (defaults to the URL's origin or app.unfairly.ai)",
-    }),
-    handler: async (args) => {
-        const outcome = await runConnect(args, {
-            fetch: globalThis.fetch.bind(globalThis),
-            addClaudeDesktop: addScopedClaudeDesktopEntry,
-            addClaudeCode: addScopedClaudeCodeEntry,
-            addCodex: addScopedCodexEntry,
-            log: (line) => console.log(line),
-            errLog: (line) => console.error(line),
-        });
-        if (!outcome.ok)
-            process.exit(outcome.exitCode);
-    },
-};
-//# sourceMappingURL=connect.js.map
+import{parseShareInput as g}from"./parse-share-input.js";import{addScopedClaudeDesktopEntry as f}from"../hosts/claude-desktop.js";import{addScopedClaudeCodeEntry as C}from"../hosts/claude-code.js";import{addScopedCodexEntry as y}from"../hosts/codex.js";const b="https://app.unfairly.ai";function x(r,e){return r===404||e==="not_found"?"share link not found \u2014 double-check the URL or ask the sender to issue a new one.":r===410||e==="revoked_or_expired"?"share link expired or was revoked \u2014 ask the sender for a fresh one.":r===429||e==="rate_limited"?"rate limited (10 mints / hour per link) \u2014 try again in an hour.":r===400||e==="no_room"?"invalid share link \u2014 it isn't bound to a vault.":`server error while minting (${r} ${e}).`}async function I(r,e){let o;try{o=g(r.urlOrId)}catch(t){return e.errLog(`\u2717 ${t.message}`),{ok:!1,exitCode:1}}const u=r.api??o.origin??b,k=`${u.replace(/\/$/,"")}/api/share-links/${o.shareId}/mint-token`,s={};r.as&&(s.email=r.as),r.label&&(s.label=r.label),e.log("\u2726 Minting a 24-hour vault token\u2026");let a;try{a=await e.fetch(k,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)})}catch(t){return e.errLog(`\u2717 network error reaching ${u}: ${t.message}`),{ok:!1,exitCode:1,shareId:o.shareId}}if(!a.ok){let t={error:"unknown"};try{t=await a.json()}catch{}const i=x(a.status,t.error??"unknown");return e.errLog(`\u2717 ${i}`),{ok:!1,exitCode:1,shareId:o.shareId,errorCode:t.error}}let n;try{n=await a.json()}catch(t){return e.errLog(`\u2717 mint endpoint returned non-JSON: ${t.message}`),{ok:!1,exitCode:1,shareId:o.shareId}}if(!n.token||!n.mcp_url)return e.errLog("\u2717 mint endpoint response missing token or mcp_url"),{ok:!1,exitCode:1,shareId:o.shareId};const d={orgSlug:n.org_slug,roomSlug:n.room_slug,shareLinkId:o.shareId,token:n.token,mcpUrl:n.mcp_url},[h,c,p]=await Promise.all([e.addClaudeDesktop(d),e.addClaudeCode(d),e.addCodex(d)]),l=(t,i)=>{if(i.status==="configured"){const m="replaced"in i&&i.replaced?"Updated":"Wired";e.log(`\u2713 ${m} ${t} \xB7 ${i.key}`)}else i.status==="not-installed"?e.log(`  (${t} not installed \u2014 skipped)`):e.errLog(`\u2717 ${t}: ${i.message??"unknown error"}`)};return l("Claude Desktop",h),l("Claude Code",c),l("Codex",p),e.log(""),e.log(`\u2192 Open your AI host. Ask: "what's in this vault?"`),n.expires_at?e.log(`  Token expires at ${n.expires_at} (\u226424h).`):e.log("  Token expires in 24h."),{ok:!0,exitCode:0,shareId:o.shareId,hosts:{claudeDesktop:h,claudeCode:c,codex:p},mint:n}}const v={command:"connect <urlOrId>",describe:"Connect to a shared vault via share link \u2014 mints a 24h token, wires all hosts",builder:r=>r.positional("urlOrId",{type:"string",demandOption:!0,describe:"Share link URL (https://app.unfairly.ai/s/<uuid>), short form (s/<uuid>), or bare UUID"}).option("as",{type:"string",describe:"Email to attribute the token to (audit only)"}).option("label",{type:"string",describe:"Human label for the audit log (\u2264100 chars)"}).option("api",{type:"string",describe:"Override the API origin (defaults to the URL's origin or app.unfairly.ai)"}),handler:async r=>{const e=await I(r,{fetch:globalThis.fetch.bind(globalThis),addClaudeDesktop:f,addClaudeCode:C,addCodex:y,log:o=>console.log(o),errLog:o=>console.error(o)});e.ok||process.exit(e.exitCode)}};export{v as connectCommand,I as runConnect};

package/dist/cmd/init.d.ts

@@ -6,4 +6,3 @@ export type InitOptions = {
     assumeAuthed?: boolean;
 };
 export declare function runInit(opts?: InitOptions): Promise<void>;
-//# sourceMappingURL=init.d.ts.map

package/dist/cmd/init.js

@@ -1,138 +1,2 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import readline from "node:readline/promises";
-import { stdin as input, stdout as output } from "node:process";
-import { SyncClient } from "../sync/api.js";
-import { emptyManifest, writeManifest } from "../sync/manifest.js";
-import { getToken, setToken } from "../sync/credentials.js";
-import { browserAuthFlow } from "../auth/browser-flow.js";
-import { runPull } from "./pull.js";
-import { findRepoRoot } from "../sync/repo-root.js";
-import { stitchClaudeMd } from "../sync/stitch-claude-md.js";
-import { banner, stepHeader, result, divider, defaultOpts } from "../ui/screens.js";
-const DEFAULT_API = "https://app.unfairly.ai";
-function isTty() {
-    return Boolean(process.stdin.isTTY);
-}
-export async function runInit(opts = {}) {
-    const cwd = process.cwd();
-    const target = path.join(cwd, ".unfairly");
-    const apiUrl = process.env.UNFAIRLY_API_URL ?? DEFAULT_API;
-    const ui = defaultOpts();
-    const write = (s) => process.stderr.write(`${s}\n`);
-    if (!opts.assumeAuthed) {
-        write(banner(ui));
-        write("");
-    }
-    // Confirm overwrite if .unfairly/ already exists
-    try {
-        await fs.access(target);
-        if (!opts.yes) {
-            if (!isTty()) {
-                write(result("err", ".unfairly/ already exists — re-run with --yes to overwrite (non-TTY).", ui));
-                process.exit(1);
-            }
-            const rl = readline.createInterface({ input, output });
-            const ans = await rl.question(`.unfairly/ already exists. Re-initialize? [y/N] `);
-            rl.close();
-            if (ans.trim().toLowerCase() !== "y") {
-                write(result("skip", "aborted", ui));
-                return;
-            }
-        }
-    }
-    catch {
-        // didn't exist; fine
-    }
-    // Resolve token (flag → env → keychain → browser → paste)
-    let token = opts.token ?? process.env.UNFAIRLY_TOKEN ?? (await getToken());
-    if (!token) {
-        if (!isTty()) {
-            write(result("err", "No token. Pass --token or set UNFAIRLY_TOKEN (non-TTY).", ui));
-            process.exit(1);
-        }
-        if (!opts.noBrowser) {
-            const fromBrowser = await browserAuthFlow(apiUrl);
-            if (fromBrowser)
-                token = fromBrowser;
-        }
-        if (!token) {
-            const rl = readline.createInterface({ input, output });
-            token = (await rl.question("Paste mcp_* token: ")).trim();
-            rl.close();
-        }
-    }
-    if (!token || !token.startsWith("mcp_")) {
-        write(result("err", "Token must start with mcp_", ui));
-        process.exit(1);
-    }
-    await setToken(token);
-    // Verify + list vaults
-    const client = new SyncClient(apiUrl, token);
-    write(stepHeader(1, 3, "VAULT INVENTORY", ui));
-    let status;
-    try {
-        status = await client.status();
-    }
-    catch (err) {
-        write(result("err", `failed to reach ${apiUrl}/api/sync/status — ${err.message}`, ui));
-        process.exit(1);
-    }
-    if (status.vaults.length === 0) {
-        write(result("err", "no accessible vaults. Ask an admin to grant you access.", ui));
-        process.exit(1);
-    }
-    for (const v of status.vaults.slice(0, 6)) {
-        write(result("ok", `${v.name.padEnd(20)} · ${v.doc_count} docs${v.track_in_git ? "" : "  (gitignored)"}`, ui));
-    }
-    if (status.vaults.length > 6) {
-        const remaining = status.vaults.length - 6;
-        const totalDocs = status.vaults.reduce((s, v) => s + v.doc_count, 0);
-        write(result("skip", `… ${remaining} more vaults · ${totalDocs} docs total`, ui));
-    }
-    write("");
-    // Seed manifest + pull
-    write(stepHeader(2, 3, "PULL", ui));
-    await fs.mkdir(target, { recursive: true });
-    const manifest = emptyManifest(apiUrl);
-    for (const v of status.vaults) {
-        manifest.vaults[v.slug] = {
-            id: v.id,
-            slug: v.slug,
-            name: v.name,
-            track_in_git: v.track_in_git,
-            last_pulled_at: null,
-            last_pushed_at: null,
-            docs: {},
-        };
-    }
-    await writeManifest(cwd, manifest);
-    await runPull(undefined);
-    write(result("ok", "wrote .unfairly/CLAUDE.md (auto-loader for Claude Code)", ui));
-    write("");
-    // Stitch repo's root CLAUDE.md
-    write(stepHeader(3, 3, "STITCH", ui));
-    const repoRoot = await findRepoRoot(cwd);
-    if (!repoRoot) {
-        write(result("skip", "not in a git repo — skipping CLAUDE.md stitch", ui));
-    }
-    else {
-        const stitch = await stitchClaudeMd(repoRoot);
-        if (stitch.action === "created") {
-            write(result("ok", `created ${stitch.path} with @.unfairly/CLAUDE.md`, ui));
-        }
-        else if (stitch.action === "appended") {
-            write(result("ok", `appended @.unfairly/CLAUDE.md to ${stitch.path}`, ui));
-        }
-        else if (stitch.action === "noop") {
-            write(result("skip", `${stitch.path} already references the autoloader`, ui));
-        }
-        else if (stitch.action === "error") {
-            write(result("warn", `couldn't stitch ${stitch.path} — ${stitch.message}`, ui));
-        }
-    }
-    write("");
-    write(divider(ui));
-    write("");
-}
-//# sourceMappingURL=init.js.map
+import{promises as m}from"node:fs";import v from"node:path";import w from"node:readline/promises";import{stdin as h,stdout as k}from"node:process";import{SyncClient as A}from"../sync/api.js";import{emptyManifest as L,writeManifest as $}from"../sync/manifest.js";import{getToken as U,setToken as C}from"../sync/credentials.js";import{browserAuthFlow as I}from"../auth/browser-flow.js";import{runPull as E}from"./pull.js";import{findRepoRoot as N}from"../sync/repo-root.js";import{stitchClaudeMd as R}from"../sync/stitch-claude-md.js";import{banner as x,stepHeader as u,result as o,divider as Y,defaultOpts as D}from"../ui/screens.js";const P="https://app.unfairly.ai";function y(){return!!process.stdin.isTTY}async function W(a={}){const c=process.cwd(),p=v.join(c,".unfairly"),n=process.env.UNFAIRLY_API_URL??P,s=D(),e=t=>process.stderr.write(`${t}
+`);a.assumeAuthed||(e(x(s)),e(""));try{if(await m.access(p),!a.yes){y()||(e(o("err",".unfairly/ already exists \u2014 re-run with --yes to overwrite (non-TTY).",s)),process.exit(1));const t=w.createInterface({input:h,output:k}),l=await t.question(".unfairly/ already exists. Re-initialize? [y/N] ");if(t.close(),l.trim().toLowerCase()!=="y"){e(o("skip","aborted",s));return}}}catch{}let r=a.token??process.env.UNFAIRLY_TOKEN??await U();if(!r){if(y()||(e(o("err","No token. Pass --token or set UNFAIRLY_TOKEN (non-TTY).",s)),process.exit(1)),!a.noBrowser){const t=await I(n);t&&(r=t)}if(!r){const t=w.createInterface({input:h,output:k});r=(await t.question("Paste mcp_* token: ")).trim(),t.close()}}(!r||!r.startsWith("mcp_"))&&(e(o("err","Token must start with mcp_",s)),process.exit(1)),await C(r);const _=new A(n,r);e(u(1,3,"VAULT INVENTORY",s));let i;try{i=await _.status()}catch(t){e(o("err",`failed to reach ${n}/api/sync/status \u2014 ${t.message}`,s)),process.exit(1)}i.vaults.length===0&&(e(o("err","no accessible vaults. Ask an admin to grant you access.",s)),process.exit(1));for(const t of i.vaults.slice(0,6))e(o("ok",`${t.name.padEnd(20)} \xB7 ${t.doc_count} docs${t.track_in_git?"":"  (gitignored)"}`,s));if(i.vaults.length>6){const t=i.vaults.length-6,l=i.vaults.reduce((g,T)=>g+T.doc_count,0);e(o("skip",`\u2026 ${t} more vaults \xB7 ${l} docs total`,s))}e(""),e(u(2,3,"PULL",s)),await m.mkdir(p,{recursive:!0});const f=L(n);for(const t of i.vaults)f.vaults[t.slug]={id:t.id,slug:t.slug,name:t.name,track_in_git:t.track_in_git,last_pulled_at:null,last_pushed_at:null,docs:{}};await $(c,f),await E(void 0),e(o("ok","wrote .unfairly/CLAUDE.md (auto-loader for Claude Code)",s)),e(""),e(u(3,3,"STITCH",s));const d=await N(c);if(!d)e(o("skip","not in a git repo \u2014 skipping CLAUDE.md stitch",s));else{const t=await R(d);t.action==="created"?e(o("ok",`created ${t.path} with @.unfairly/CLAUDE.md`,s)):t.action==="appended"?e(o("ok",`appended @.unfairly/CLAUDE.md to ${t.path}`,s)):t.action==="noop"?e(o("skip",`${t.path} already references the autoloader`,s)):t.action==="error"&&e(o("warn",`couldn't stitch ${t.path} \u2014 ${t.message}`,s))}e(""),e(Y(s)),e("")}export{W as runInit};

package/dist/cmd/invite.d.ts

@@ -23,4 +23,3 @@ export declare const inviteCommand: {
     handler: (args: InviteArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=invite.d.ts.map

package/dist/cmd/invite.js

@@ -1,73 +1,4 @@
-import { getToken } from "../sync/credentials.js";
-const API_DEFAULT = "https://app.unfairly.ai";
-export const inviteCommand = {
-    command: "invite",
-    describe: "Generate a persona-tagged invite link for a teammate",
-    builder: (yargs) => yargs
-        .option("email", {
-        type: "string",
-        demandOption: true,
-        describe: "Email of the person you're inviting",
-    })
-        .option("persona-surface", {
-        type: "string",
-        demandOption: true,
-        choices: ["builder-terminal", "player-web"],
-        describe: "Onboarding role: builder-terminal = Champion, player-web = Player",
-    })
-        .option("persona-workflow", {
-        type: "string",
-        choices: [
-            "strategy",
-            "synthesis",
-            "clinical-operations",
-            "credentialing",
-            "technical",
-            "recruiting",
-        ],
-        describe: "What workflow they own",
-    })
-        .option("org", {
-        type: "string",
-        describe: "Org slug or id (required for CLI; web infers from cookie)",
-    })
-        .option("api", {
-        type: "string",
-        default: API_DEFAULT,
-        describe: "API origin",
-    }),
-    handler: async (args) => {
-        const token = await getToken();
-        if (!token) {
-            console.error("Not signed in. Run `unfairly login` first, then re-run `unfairly invite`.");
-            process.exit(1);
-        }
-        const res = await fetch(`${args.api}/api/onboard/invite`, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${token}`,
-            },
-            body: JSON.stringify({
-                email: args.email,
-                persona_surface: args["persona-surface"],
-                persona_workflow: args["persona-workflow"],
-                org_slug: args.org,
-            }),
-        });
-        if (!res.ok) {
-            const err = await res.text();
-            console.error(`Failed to create invite: ${res.status} ${err}`);
-            process.exit(1);
-        }
-        const data = await res.json();
-        console.log(`\n✦ Invite ready for ${data.target_email}`);
-        console.log(`   Surface:  ${data.persona_surface}`);
-        if (data.persona_workflow) {
-            console.log(`   Workflow: ${data.persona_workflow}`);
-        }
-        console.log(`\n   ${data.url}\n`);
-        console.log(`Send that to them. They'll paste-run \`npx unfairly join\` from there.\n`);
-    },
-};
-//# sourceMappingURL=invite.js.map
+import{getToken as t}from"../sync/credentials.js";const a="https://app.unfairly.ai",l={command:"invite",describe:"Generate a persona-tagged invite link for a teammate",builder:e=>e.option("email",{type:"string",demandOption:!0,describe:"Email of the person you're inviting"}).option("persona-surface",{type:"string",demandOption:!0,choices:["builder-terminal","player-web"],describe:"Onboarding role: builder-terminal = Champion, player-web = Player"}).option("persona-workflow",{type:"string",choices:["strategy","synthesis","clinical-operations","credentialing","technical","recruiting"],describe:"What workflow they own"}).option("org",{type:"string",describe:"Org slug or id (required for CLI; web infers from cookie)"}).option("api",{type:"string",default:a,describe:"API origin"}),handler:async e=>{const n=await t();n||(console.error("Not signed in. Run `unfairly login` first, then re-run `unfairly invite`."),process.exit(1));const r=await fetch(`${e.api}/api/onboard/invite`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${n}`},body:JSON.stringify({email:e.email,persona_surface:e["persona-surface"],persona_workflow:e["persona-workflow"],org_slug:e.org})});if(!r.ok){const i=await r.text();console.error(`Failed to create invite: ${r.status} ${i}`),process.exit(1)}const o=await r.json();console.log(`
+\u2726 Invite ready for ${o.target_email}`),console.log(`   Surface:  ${o.persona_surface}`),o.persona_workflow&&console.log(`   Workflow: ${o.persona_workflow}`),console.log(`
+   ${o.url}
+`),console.log("Send that to them. They'll paste-run `npx unfairly join` from there.\n")}};export{l as inviteCommand};

package/dist/cmd/join.d.ts

@@ -17,4 +17,3 @@ export declare const joinCommand: {
     handler: (args: JoinArgs) => Promise<void>;
 };
 export {};
-//# sourceMappingURL=join.d.ts.map

package/dist/cmd/join.js

@@ -1,91 +1 @@
-import { setTimeout as sleep } from "node:timers/promises";
-import { openBrowser } from "../auth/browser-flow.js";
-import { setToken } from "../sync/credentials.js";
-const API_DEFAULT = "https://app.unfairly.ai";
-export const joinCommand = {
-    command: "join <token>",
-    describe: "Join an Unfairly org via a persona-tagged invite token",
-    builder: (yargs) => yargs
-        .positional("token", { type: "string", demandOption: true })
-        .option("api", { type: "string", default: API_DEFAULT })
-        .option("host", {
-        type: "string",
-        choices: ["claude-code", "codex", "cowork"],
-        describe: "Force a specific host (default: pick by persona)",
-    }),
-    handler: async (args) => {
-        // 1. Init session
-        console.log("✦ Initializing join session…");
-        const initRes = await fetch(`${args.api}/api/cli/join/init`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ token: args.token }),
-        });
-        if (!initRes.ok) {
-            const err = await initRes.text();
-            console.error(`Failed to init: ${initRes.status} ${err}`);
-            process.exit(1);
-        }
-        const init = await initRes.json();
-        // 2. Open browser
-        console.log(`✓ Opening browser to authorize…`);
-        console.log(`  (if it doesn't open: ${init.auth_url})`);
-        openBrowser(init.auth_url);
-        // 3. Poll for completion
-        let waited = 0;
-        let interval = init.poll_interval_seconds * 1000;
-        let result = null;
-        while (waited < init.ttl_seconds * 1000) {
-            await sleep(interval);
-            waited += interval;
-            const pollRes = await fetch(init.poll_url);
-            if (!pollRes.ok) {
-                console.error(`Poll error: ${pollRes.status}`);
-                process.exit(1);
-            }
-            const poll = await pollRes.json();
-            if (poll.status === "completed") {
-                result = poll;
-                break;
-            }
-            if (poll.status === "expired") {
-                console.error("Session expired. Re-run the command.");
-                process.exit(1);
-            }
-            if (waited > init.poll_backoff_after_seconds * 1000) {
-                interval = init.poll_backoff_interval_seconds * 1000;
-            }
-        }
-        if (!result) {
-            console.error("Timed out waiting for browser auth. Re-run the command.");
-            process.exit(1);
-        }
-        console.log(`✓ You're in. Joining as: ${result.display_name} (${result.persona_surface}/${result.persona_workflow ?? "—"})`);
-        // 4. Pick host (default by persona surface)
-        const host = args.host ??
-            (result.persona_surface === "oracle-cowork" ? "cowork" : "claude-code");
-        // 5. Persist the join JWT via existing credential store + configure host.
-        //    Existing host writers take a single `apiUrl: string` arg and read
-        //    the token from credentials.
-        await setToken(result.jwt);
-        console.log(`✓ Configuring ${host}…`);
-        if (host === "claude-code") {
-            const { configureClaudeCode } = await import("../hosts/claude-code.js");
-            await configureClaudeCode(args.api, result.jwt);
-        }
-        else if (host === "codex") {
-            const { configureCodex } = await import("../hosts/codex.js");
-            await configureCodex(args.api);
-        }
-        else if (host === "cowork") {
-            const { configureClaudeDesktop } = await import("../hosts/claude-desktop.js");
-            await configureClaudeDesktop(args.api, result.jwt);
-            console.log("⚠  Quit and relaunch Claude Desktop to load the new MCP server.");
-        }
-        // 6. Print persona-shaped welcome
-        const welcomeRes = await fetch(`${args.api}/api/cli/welcome?persona=${result.persona_surface}&workflow=${result.persona_workflow ?? ""}`);
-        const welcome = await welcomeRes.text();
-        console.log(welcome);
-    },
-};
-//# sourceMappingURL=join.js.map
+import{setTimeout as p}from"node:timers/promises";import{openBrowser as d}from"../auth/browser-flow.js";import{setToken as w}from"../sync/credentials.js";const f="https://app.unfairly.ai",_={command:"join <token>",describe:"Join an Unfairly org via a persona-tagged invite token",builder:t=>t.positional("token",{type:"string",demandOption:!0}).option("api",{type:"string",default:f}).option("host",{type:"string",choices:["claude-code","codex","cowork"],describe:"Force a specific host (default: pick by persona)"}),handler:async t=>{console.log("\u2726 Initializing join session\u2026");const n=await fetch(`${t.api}/api/cli/join/init`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t.token})});if(!n.ok){const e=await n.text();console.error(`Failed to init: ${n.status} ${e}`),process.exit(1)}const i=await n.json();console.log("\u2713 Opening browser to authorize\u2026"),console.log(`  (if it doesn't open: ${i.auth_url})`),d(i.auth_url);let s=0,r=i.poll_interval_seconds*1e3,o=null;for(;s<i.ttl_seconds*1e3;){await p(r),s+=r;const e=await fetch(i.poll_url);e.ok||(console.error(`Poll error: ${e.status}`),process.exit(1));const l=await e.json();if(l.status==="completed"){o=l;break}l.status==="expired"&&(console.error("Session expired. Re-run the command."),process.exit(1)),s>i.poll_backoff_after_seconds*1e3&&(r=i.poll_backoff_interval_seconds*1e3)}o||(console.error("Timed out waiting for browser auth. Re-run the command."),process.exit(1)),console.log(`\u2713 You're in. Joining as: ${o.display_name} (${o.persona_surface}/${o.persona_workflow??"\u2014"})`);const a=t.host??(o.persona_surface==="oracle-cowork"?"cowork":"claude-code");if(await w(o.jwt),console.log(`\u2713 Configuring ${a}\u2026`),a==="claude-code"){const{configureClaudeCode:e}=await import("../hosts/claude-code.js");await e(t.api,o.jwt)}else if(a==="codex"){const{configureCodex:e}=await import("../hosts/codex.js");await e(t.api)}else if(a==="cowork"){const{configureClaudeDesktop:e}=await import("../hosts/claude-desktop.js");await e(t.api,o.jwt),console.log("\u26A0  Quit and relaunch Claude Desktop to load the new MCP server.")}const c=await(await fetch(`${t.api}/api/cli/welcome?persona=${o.persona_surface}&workflow=${o.persona_workflow??""}`)).text();console.log(c)}};export{_ as joinCommand};

package/dist/cmd/login.d.ts

@@ -18,4 +18,3 @@ export type LoginOptions = {
  * Install globally first (`npm i -g unfairly`) or use `unfairly setup`.
  */
 export declare function runLogin(opts?: LoginOptions): Promise<void>;
-//# sourceMappingURL=login.d.ts.map