unfairly 0.8.3 → 0.8.4

package/dist/pace/session-summary.js

@@ -1,140 +1,2 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-import { collectLocalSessions } from "./local-sessions.js";
-import { approvedRepositoryId, readRepositoryPolicy, sessionCommitShas } from "./repository.js";
-function readPolicySkills() {
-    return readRepositoryPolicy()?.skills ?? [];
-}
-/**
- * One content-free summary per AI coding session, uploaded to Unfairly
- * Intelligence. This is the unit the server joins to GitHub pull requests and
- * prices into spend. Keep in sync with src/lib/ai-pace/sessions.ts.
- */
-const MODEL_ID = /^(claude-[a-z0-9.-]{1,48}|gpt-[a-z0-9.-]{1,32}|o[1-9][a-z0-9-]{0,20}|gemini-[a-z0-9.-]{1,40}|codex-[a-z0-9.-]{1,32})$/;
-const Count = z.number().int().nonnegative();
-const SKILL_ID = /^[a-z0-9][a-z0-9:_.-]{0,119}$/;
-/** Published plugin skills are namespaced (`superpowers:brainstorming`); a public name, not content. */
-const PUBLIC_SKILL = /^[a-z0-9][a-z0-9-]{0,40}:[a-z0-9][a-z0-9-]{0,78}$/;
-/**
- * Splits a session's skills into names that may be reported (published plugin
- * skills and the organization's own catalog) and a count of everything else,
- * such as personal or project skills, whose names never leave the device.
- */
-export function reportableSkills(skills, orgCatalog = []) {
-    const catalog = new Set(orgCatalog);
-    const reportable = [...new Set(skills)].filter((skill) => SKILL_ID.test(skill) && (PUBLIC_SKILL.test(skill) || catalog.has(skill)));
-    return { skills: reportable.slice(0, 20), unlisted: new Set(skills).size - reportable.length };
-}
-export const SessionSummaryUploadSchema = z.object({
-    schema_version: z.literal(1),
-    collection_policy_version: z.literal("metadata-v3"),
-    installation_id: z.string().uuid(),
-    session_id: z.string().regex(/^[A-Za-z0-9_-]{1,128}$/),
-    source: z.enum(["claude_code", "codex"]),
-    collected_via: z.enum(["hook", "backfill"]),
-    started_at: z.string().datetime(),
-    ended_at: z.string().datetime(),
-    model_id: z.string().regex(MODEL_ID).nullable(),
-    tokens: z.object({ input: Count, output: Count, cache_read: Count, cache_write: Count }).strict(),
-    user_turns: Count,
-    tool_calls: Count,
-    tool_errors: Count,
-    approval_denials: Count,
-    delegated: z.boolean(),
-    launched_by: z.enum(["claude_code"]).nullable(),
-    repository_id: z.string().uuid().nullable(),
-    commit_shas: z.array(z.string().regex(/^[a-f0-9]{40}$/)).max(50),
-    skills: z.array(z.string().regex(SKILL_ID)).max(20),
-    unlisted_skills: Count,
-}).strict().superRefine((summary, context) => {
-    if (summary.commit_shas.length && !summary.repository_id) {
-        context.addIssue({ code: z.ZodIssueCode.custom, path: ["commit_shas"], message: "commit_shas require an approved repository_id" });
-    }
-});
-/** Only recognizable model identifiers leave the device; anything else is reported as unknown. */
-export function allowlistedModelId(model) {
-    if (!model)
-        return null;
-    const normalized = model.trim().toLowerCase();
-    return MODEL_ID.test(normalized) ? normalized : null;
-}
-export function toSessionUpload(session, context) {
-    const repositoryId = approvedRepositoryId(session.cwd, context.policy) ?? null;
-    const commits = repositoryId && session.cwd ? sessionCommitShas(session.cwd, session).map((sha) => sha.toLowerCase()) : [];
-    const skillReport = reportableSkills(session.skills ?? [], context.policy?.skills ?? readPolicySkills());
-    return SessionSummaryUploadSchema.parse({
-        schema_version: 1,
-        collection_policy_version: "metadata-v3",
-        installation_id: context.installationId,
-        session_id: session.sessionId.replace(/[^A-Za-z0-9_-]/g, "").slice(0, 128) || "unknown",
-        source: session.client,
-        collected_via: context.collectedVia,
-        started_at: new Date(session.startedAt).toISOString(),
-        ended_at: new Date(session.endedAt).toISOString(),
-        model_id: allowlistedModelId(session.primaryModel),
-        tokens: { input: session.tokens.input, output: session.tokens.output, cache_read: session.tokens.cacheRead, cache_write: session.tokens.cacheWrite },
-        user_turns: session.userTurns,
-        tool_calls: session.toolCalls,
-        tool_errors: session.toolErrors,
-        approval_denials: session.approvalDenials,
-        delegated: session.delegated,
-        launched_by: session.launchedBy,
-        repository_id: repositoryId,
-        commit_shas: commits,
-        skills: skillReport.skills,
-        unlisted_skills: skillReport.unlisted,
-    });
-}
-// Pending uploads, keyed by source and session so a later, fuller summary of a
-// still-running session replaces the earlier one.
-export function sessionSpoolPath() {
-    return process.env.UNFAIRLY_PACE_SESSION_SPOOL ?? path.join(os.homedir(), ".unfairly", "pace", "sessions.json");
-}
-const spoolKey = (summary) => `${summary.source}:${summary.session_id}`;
-export async function readSessionSpool() {
-    try {
-        const parsed = JSON.parse(await fs.readFile(sessionSpoolPath(), "utf8"));
-        const valid = {};
-        for (const [key, value] of Object.entries(parsed)) {
-            const summary = SessionSummaryUploadSchema.safeParse(value);
-            if (summary.success)
-                valid[key] = summary.data;
-        }
-        return valid;
-    }
-    catch {
-        return {};
-    }
-}
-async function writeSessionSpool(spool) {
-    const file = sessionSpoolPath();
-    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
-    await fs.writeFile(file, `${JSON.stringify(spool)}\n`, { encoding: "utf8", mode: 0o600 });
-}
-export async function queueSessionSummaries(summaries) {
-    const spool = await readSessionSpool();
-    for (const summary of summaries)
-        spool[spoolKey(summary)] = summary;
-    await writeSessionSpool(spool);
-    return Object.keys(spool).length;
-}
-export async function removeSessionSummaries(sent) {
-    const spool = await readSessionSpool();
-    for (const summary of sent) {
-        const current = spool[spoolKey(summary)];
-        // Keep a newer summary that arrived while this batch was uploading.
-        if (current && current.ended_at === summary.ended_at)
-            delete spool[spoolKey(summary)];
-    }
-    await writeSessionSpool(spool);
-}
-/** Summarizes every local session whose transcript changed since `since` and queues it for upload. */
-export async function sweepLocalSessions(input) {
-    const sessions = await collectLocalSessions({ since: input.since, home: input.home });
-    const summaries = sessions.map((session) => toSessionUpload(session, input));
-    const queued = summaries.length ? await queueSessionSummaries(summaries) : (Object.keys(await readSessionSpool()).length);
-    return { summarized: summaries.length, queued };
-}
-//# sourceMappingURL=session-summary.js.map
+import n from"node:fs/promises";import y from"node:os";import d from"node:path";import{z as o}from"zod";import{collectLocalSessions as S}from"./local-sessions.js";import{approvedRepositoryId as g,readRepositoryPolicy as w,sessionCommitShas as k}from"./repository.js";function v(){return w()?.skills??[]}const u=/^(claude-[a-z0-9.-]{1,48}|gpt-[a-z0-9.-]{1,32}|o[1-9][a-z0-9-]{0,20}|gemini-[a-z0-9.-]{1,40}|codex-[a-z0-9.-]{1,32})$/,i=o.number().int().nonnegative(),m=/^[a-z0-9][a-z0-9:_.-]{0,119}$/,z=/^[a-z0-9][a-z0-9-]{0,40}:[a-z0-9][a-z0-9-]{0,78}$/;function I(e,t=[]){const a=new Set(t),r=[...new Set(e)].filter(s=>m.test(s)&&(z.test(s)||a.has(s)));return{skills:r.slice(0,20),unlisted:new Set(e).size-r.length}}const p=o.object({schema_version:o.literal(1),collection_policy_version:o.literal("metadata-v3"),installation_id:o.string().uuid(),session_id:o.string().regex(/^[A-Za-z0-9_-]{1,128}$/),source:o.enum(["claude_code","codex"]),collected_via:o.enum(["hook","backfill"]),started_at:o.string().datetime(),ended_at:o.string().datetime(),model_id:o.string().regex(u).nullable(),tokens:o.object({input:i,output:i,cache_read:i,cache_write:i}).strict(),user_turns:i,tool_calls:i,tool_errors:i,approval_denials:i,delegated:o.boolean(),launched_by:o.enum(["claude_code"]).nullable(),repository_id:o.string().uuid().nullable(),commit_shas:o.array(o.string().regex(/^[a-f0-9]{40}$/)).max(50),skills:o.array(o.string().regex(m)).max(20),unlisted_skills:i}).strict().superRefine((e,t)=>{e.commit_shas.length&&!e.repository_id&&t.addIssue({code:o.ZodIssueCode.custom,path:["commit_shas"],message:"commit_shas require an approved repository_id"})});function b(e){if(!e)return null;const t=e.trim().toLowerCase();return u.test(t)?t:null}function x(e,t){const a=g(e.cwd,t.policy)??null,r=a&&e.cwd?k(e.cwd,e).map(h=>h.toLowerCase()):[],s=I(e.skills??[],t.policy?.skills??v());return p.parse({schema_version:1,collection_policy_version:"metadata-v3",installation_id:t.installationId,session_id:e.sessionId.replace(/[^A-Za-z0-9_-]/g,"").slice(0,128)||"unknown",source:e.client,collected_via:t.collectedVia,started_at:new Date(e.startedAt).toISOString(),ended_at:new Date(e.endedAt).toISOString(),model_id:b(e.primaryModel),tokens:{input:e.tokens.input,output:e.tokens.output,cache_read:e.tokens.cacheRead,cache_write:e.tokens.cacheWrite},user_turns:e.userTurns,tool_calls:e.toolCalls,tool_errors:e.toolErrors,approval_denials:e.approvalDenials,delegated:e.delegated,launched_by:e.launchedBy,repository_id:a,commit_shas:r,skills:s.skills,unlisted_skills:s.unlisted})}function _(){return process.env.UNFAIRLY_PACE_SESSION_SPOOL??d.join(y.homedir(),".unfairly","pace","sessions.json")}const l=e=>`${e.source}:${e.session_id}`;async function c(){try{const e=JSON.parse(await n.readFile(_(),"utf8")),t={};for(const[a,r]of Object.entries(e)){const s=p.safeParse(r);s.success&&(t[a]=s.data)}return t}catch{return{}}}async function f(e){const t=_();await n.mkdir(d.dirname(t),{recursive:!0,mode:448}),await n.writeFile(t,`${JSON.stringify(e)}
+`,{encoding:"utf8",mode:384})}async function L(e){const t=await c();for(const a of e)t[l(a)]=a;return await f(t),Object.keys(t).length}async function D(e){const t=await c();for(const a of e){const r=t[l(a)];r&&r.ended_at===a.ended_at&&delete t[l(a)]}await f(t)}async function R(e){const a=(await S({since:e.since,home:e.home})).map(s=>x(s,e)),r=a.length?await L(a):Object.keys(await c()).length;return{summarized:a.length,queued:r}}export{p as SessionSummaryUploadSchema,b as allowlistedModelId,L as queueSessionSummaries,c as readSessionSpool,D as removeSessionSummaries,I as reportableSkills,_ as sessionSpoolPath,R as sweepLocalSessions,x as toSessionUpload};

package/dist/pace/spool.d.ts

@@ -3,4 +3,3 @@ export declare function paceSpoolPath(): string;
 export declare function appendPaceEvent(event: PaceEvent): Promise<string>;
 export declare function readPaceEvents(limit?: number): Promise<PaceEvent[]>;
 export declare function removePaceEvents(ids: Set<string>): Promise<void>;
-//# sourceMappingURL=spool.d.ts.map

package/dist/pace/spool.js

@@ -1,87 +1,8 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { migrateLegacyEvent } from "./normalize.js";
-import { PaceEventSchema, PaceLegacyEventSchema } from "./schema.js";
-export function paceSpoolPath() {
-    return process.env.UNFAIRLY_PACE_SPOOL ?? path.join(os.homedir(), ".unfairly", "pace", "events.jsonl");
-}
-export async function appendPaceEvent(event) {
-    const parsed = PaceEventSchema.parse(event);
-    const spool = paceSpoolPath();
-    await fs.mkdir(path.dirname(spool), { recursive: true, mode: 0o700 });
-    await fs.appendFile(spool, `${JSON.stringify(parsed)}\n`, { encoding: "utf8", mode: 0o600 });
-    await fs.chmod(spool, 0o600).catch(() => undefined);
-    return spool;
-}
-export async function readPaceEvents(limit = 250) {
-    let raw;
-    try {
-        raw = await fs.readFile(paceSpoolPath(), "utf8");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return [];
-        throw error;
-    }
-    const events = [];
-    let needsMigration = false;
-    for (const line of raw.split("\n")) {
-        if (!line.trim())
-            continue;
-        let candidate;
-        try {
-            candidate = JSON.parse(line);
-        }
-        catch {
-            needsMigration = true;
-            continue;
-        }
-        const parsed = PaceEventSchema.safeParse(candidate);
-        if (parsed.success) {
-            events.push(parsed.data);
-        }
-        else {
-            const legacy = PaceLegacyEventSchema.safeParse(candidate);
-            if (legacy.success)
-                events.push(migrateLegacyEvent(legacy.data));
-            needsMigration = true;
-        }
-    }
-    if (needsMigration) {
-        const spool = paceSpoolPath();
-        await fs.writeFile(spool, events.length ? `${events.map((event) => JSON.stringify(event)).join("\n")}\n` : "", {
-            encoding: "utf8",
-            mode: 0o600,
-        });
-    }
-    return events.slice(0, limit);
-}
-export async function removePaceEvents(ids) {
-    const spool = paceSpoolPath();
-    let raw;
-    try {
-        raw = await fs.readFile(spool, "utf8");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return;
-        throw error;
-    }
-    const remaining = raw.split("\n").filter((line) => {
-        if (!line.trim())
-            return false;
-        try {
-            const event = JSON.parse(line);
-            return !event.event_id || !ids.has(event.event_id);
-        }
-        catch {
-            return true;
-        }
-    });
-    await fs.writeFile(spool, remaining.length ? `${remaining.join("\n")}\n` : "", {
-        encoding: "utf8",
-        mode: 0o600,
-    });
-}
-//# sourceMappingURL=spool.js.map
+import o from"node:fs/promises";import d from"node:os";import p from"node:path";import{migrateLegacyEvent as m}from"./normalize.js";import{PaceEventSchema as u,PaceLegacyEventSchema as l}from"./schema.js";function c(){return process.env.UNFAIRLY_PACE_SPOOL??p.join(d.homedir(),".unfairly","pace","events.jsonl")}async function E(i){const r=u.parse(i),e=c();return await o.mkdir(p.dirname(e),{recursive:!0,mode:448}),await o.appendFile(e,`${JSON.stringify(r)}
+`,{encoding:"utf8",mode:384}),await o.chmod(e,384).catch(()=>{}),e}async function P(i=250){let r;try{r=await o.readFile(c(),"utf8")}catch(t){if(t.code==="ENOENT")return[];throw t}const e=[];let a=!1;for(const t of r.split(`
+`)){if(!t.trim())continue;let n;try{n=JSON.parse(t)}catch{a=!0;continue}const s=u.safeParse(n);if(s.success)e.push(s.data);else{const f=l.safeParse(n);f.success&&e.push(m(f.data)),a=!0}}if(a){const t=c();await o.writeFile(t,e.length?`${e.map(n=>JSON.stringify(n)).join(`
+`)}
+`:"",{encoding:"utf8",mode:384})}return e.slice(0,i)}async function N(i){const r=c();let e;try{e=await o.readFile(r,"utf8")}catch(t){if(t.code==="ENOENT")return;throw t}const a=e.split(`
+`).filter(t=>{if(!t.trim())return!1;try{const n=JSON.parse(t);return!n.event_id||!i.has(n.event_id)}catch{return!0}});await o.writeFile(r,a.length?`${a.join(`
+`)}
+`:"",{encoding:"utf8",mode:384})}export{E as appendPaceEvent,c as paceSpoolPath,P as readPaceEvents,N as removePaceEvents};

package/dist/pace-runtime.d.ts

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=pace-runtime.d.ts.map

package/dist/pace-runtime.js

@@ -1,67 +1,2 @@
-/**
- * The runtime bundled inside the Unfairly plugin (plugins/ai-pace/runtime), so
- * installing the plugin from an AI client's plugin store is the whole install:
- * no npm, no terminal. Hooks call it as `node unfairly-intelligence.mjs <command>`.
- *
- *   connect <source> <event>   first-run connection; prints the SessionStart message
- *   await-approval             background: claims the credential once the person approves, then syncs
- *   capture <source> <event>   record a hook event (reads the hook payload on stdin)
- */
-import { spawn } from "node:child_process";
-import os from "node:os";
-import { runPaceCapture, runPaceSync } from "./cmd/pace.js";
-import { readOrCreatePaceDevice } from "./pace/device.js";
-import { acquireApprovalLock, awaitApproval, ensureEnrolled, releaseApprovalLock, sessionStartOutput } from "./pace/enroll.js";
-const DEFAULT_API = "https://app.unfairly.ai";
-const apiUrl = () => (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-async function connect(source, event) {
-    const device = await readOrCreatePaceDevice();
-    if (device.paused)
-        return;
-    const platform = os.platform();
-    const arch = os.arch();
-    if ((platform !== "darwin" && platform !== "linux" && platform !== "win32") || (arch !== "x64" && arch !== "arm64"))
-        return;
-    const state = await ensureEnrolled({
-        apiUrl: apiUrl(),
-        installationId: device.installation_id,
-        platform,
-        arch,
-        // The calling client identifies itself; probing every installed tool is too slow for a session start.
-        clients: [source],
-        orgHint: process.env.UNFAIRLY_ORG,
-    });
-    const output = sessionStartOutput(state, event === "sessionStart" ? "sessionStart" : "SessionStart");
-    if (output)
-        process.stdout.write(`${output}\n`);
-    if (state.status === "waiting") {
-        // Watch for the approval in the background so the machine connects while
-        // this session is still open. Detached, so the session never waits on it.
-        const child = spawn(process.execPath, [process.argv[1], "await-approval"], { detached: true, stdio: "ignore", env: process.env });
-        child.on("error", () => undefined);
-        child.unref();
-    }
-}
-async function awaitApprovalAndSync() {
-    if (!(await acquireApprovalLock()))
-        return;
-    try {
-        if (await awaitApproval({ apiUrl: apiUrl() }))
-            await runPaceSync();
-    }
-    finally {
-        await releaseApprovalLock();
-    }
-}
-async function main() {
-    const [command, source = "unknown", event = "Unknown"] = process.argv.slice(2);
-    if (command === "connect")
-        await connect(source, event);
-    else if (command === "await-approval")
-        await awaitApprovalAndSync();
-    else if (command === "capture")
-        await runPaceCapture(source, event);
-}
-// Telemetry must never break the person's AI session.
-main().catch(() => undefined).finally(() => process.exit(0));
-//# sourceMappingURL=pace-runtime.js.map
+import{spawn as l}from"node:child_process";import c from"node:os";import{runPaceCapture as u,runPaceSync as f}from"./cmd/pace.js";import{readOrCreatePaceDevice as w}from"./pace/device.js";import{acquireApprovalLock as d,awaitApproval as m,ensureEnrolled as v,releaseApprovalLock as A,sessionStartOutput as y}from"./pace/enroll.js";const U="https://app.unfairly.ai",p=()=>(process.env.UNFAIRLY_API_URL??U).replace(/\/$/,"");async function h(a,n){const t=await w();if(t.paused)return;const r=c.platform(),e=c.arch();if(r!=="darwin"&&r!=="linux"&&r!=="win32"||e!=="x64"&&e!=="arm64")return;const i=await v({apiUrl:p(),installationId:t.installation_id,platform:r,arch:e,clients:[a],orgHint:process.env.UNFAIRLY_ORG}),o=y(i,n==="sessionStart"?"sessionStart":"SessionStart");if(o&&process.stdout.write(`${o}
+`),i.status==="waiting"){const s=l(process.execPath,[process.argv[1],"await-approval"],{detached:!0,stdio:"ignore",env:process.env});s.on("error",()=>{}),s.unref()}}async function S(){if(await d())try{await m({apiUrl:p()})&&await f()}finally{await A()}}async function L(){const[a,n="unknown",t="Unknown"]=process.argv.slice(2);a==="connect"?await h(n,t):a==="await-approval"?await S():a==="capture"&&await u(n,t)}L().catch(()=>{}).finally(()=>process.exit(0));

package/dist/sync/api.d.ts

@@ -77,4 +77,3 @@ export declare class SyncClient {
     }>;
     status(): Promise<StatusResponse>;
 }
-//# sourceMappingURL=api.d.ts.map

package/dist/sync/api.js

@@ -1,55 +1 @@
-export class SyncClient {
-    apiUrl;
-    token;
-    constructor(apiUrl, token) {
-        this.apiUrl = apiUrl;
-        this.token = token;
-    }
-    headers() {
-        return {
-            Authorization: `Bearer ${this.token}`,
-            "Content-Type": "application/json",
-        };
-    }
-    async pull(vault, since) {
-        const url = new URL(`${this.apiUrl}/api/sync/pull`);
-        url.searchParams.set("vault", vault);
-        if (since)
-            url.searchParams.set("since", since);
-        const res = await fetch(url, { headers: this.headers() });
-        if (!res.ok) {
-            throw new Error(`pull failed: ${res.status} ${await res.text()}`);
-        }
-        return res.json();
-    }
-    /** Loop pull until has_more=false, merging pages. */
-    async pullAll(vault, since) {
-        const merged = await this.pull(vault, since);
-        while (merged.has_more && merged.next_cursor) {
-            const next = await this.pull(vault, merged.next_cursor);
-            merged.docs.push(...next.docs);
-            merged.deleted.push(...next.deleted);
-            merged.next_cursor = next.next_cursor;
-            merged.has_more = next.has_more;
-        }
-        return merged;
-    }
-    async push(args) {
-        const res = await fetch(`${this.apiUrl}/api/sync/push`, {
-            method: "POST",
-            headers: this.headers(),
-            body: JSON.stringify(args),
-        });
-        return { status: res.status, data: (await res.json()) };
-    }
-    async status() {
-        const res = await fetch(`${this.apiUrl}/api/sync/status`, {
-            headers: this.headers(),
-        });
-        if (!res.ok) {
-            throw new Error(`status failed: ${res.status} ${await res.text()}`);
-        }
-        return res.json();
-    }
-}
-//# sourceMappingURL=api.js.map
+class n{apiUrl;token;constructor(t,e){this.apiUrl=t,this.token=e}headers(){return{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"}}async pull(t,e){const s=new URL(`${this.apiUrl}/api/sync/pull`);s.searchParams.set("vault",t),e&&s.searchParams.set("since",e);const a=await fetch(s,{headers:this.headers()});if(!a.ok)throw new Error(`pull failed: ${a.status} ${await a.text()}`);return a.json()}async pullAll(t,e){const s=await this.pull(t,e);for(;s.has_more&&s.next_cursor;){const a=await this.pull(t,s.next_cursor);s.docs.push(...a.docs),s.deleted.push(...a.deleted),s.next_cursor=a.next_cursor,s.has_more=a.has_more}return s}async push(t){const e=await fetch(`${this.apiUrl}/api/sync/push`,{method:"POST",headers:this.headers(),body:JSON.stringify(t)});return{status:e.status,data:await e.json()}}async status(){const t=await fetch(`${this.apiUrl}/api/sync/status`,{headers:this.headers()});if(!t.ok)throw new Error(`status failed: ${t.status} ${await t.text()}`);return t.json()}}export{n as SyncClient};

package/dist/sync/autoloader.d.ts

@@ -4,4 +4,3 @@ import type { Manifest } from "./manifest.js";
  * frontmatter, build the autoloader index, and write CLAUDE.md + .gitignore.
  */
 export declare function writeAutoloader(unfairlyRoot: string, manifest: Manifest): Promise<void>;
-//# sourceMappingURL=autoloader.d.ts.map

package/dist/sync/autoloader.js

@@ -1,128 +1,8 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import matter from "gray-matter";
-const SENTINEL_HEADER = "# Unfairly Vault Context (auto-generated by `unfairly`)";
-const GENERATED_CLAUDE_MD = "CLAUDE.md";
-/**
- * After `unfairly pull` populates .unfairly/, scan local files, parse
- * frontmatter, build the autoloader index, and write CLAUDE.md + .gitignore.
- */
-export async function writeAutoloader(unfairlyRoot, manifest) {
-    const docs = await scanLocalDocs(unfairlyRoot, manifest);
-    const goldPrimitives = docs
-        .filter((d) => d.trust_tier === "gold" && d.role === "primitive")
-        .sort((a, b) => (b.updated_at ?? "").localeCompare(a.updated_at ?? ""))
-        .slice(0, 8);
-    const recentSilver = docs
-        .filter((d) => d.trust_tier === "silver")
-        .sort((a, b) => (b.updated_at ?? "").localeCompare(a.updated_at ?? ""))
-        .slice(0, 5);
-    const claudeMd = renderClaudeMd(goldPrimitives, recentSilver);
-    await fs.writeFile(path.join(unfairlyRoot, GENERATED_CLAUDE_MD), claudeMd, "utf8");
-    // .gitignore: write only if missing. The generated file invites users to
-    // uncomment !vault/ re-includes — regenerating on every pull would wipe them.
-    const gitignorePath = path.join(unfairlyRoot, ".gitignore");
-    try {
-        await fs.access(gitignorePath);
-    }
-    catch {
-        await fs.writeFile(gitignorePath, renderGitignore(), "utf8");
-    }
-}
-async function scanLocalDocs(root, manifest) {
-    const entries = [];
-    // manifest.vaults is Record<string, ManifestVault> keyed by slug.
-    for (const vault of Object.values(manifest.vaults)) {
-        // Repo-bound vaults live at the root; non-tracked vaults live under cache/.
-        const vaultRoot = vault.track_in_git
-            ? path.join(root, vault.slug)
-            : path.join(root, "cache", vault.slug);
-        try {
-            await walkAndParse(vaultRoot, root, vault.slug, entries);
-        }
-        catch {
-            // Vault dir doesn't exist yet (e.g., empty vault) — fine, skip.
-        }
-    }
-    return entries;
-}
-async function walkAndParse(dir, unfairlyRoot, vaultSlug, out) {
-    const generatedRootPath = path.join(unfairlyRoot, GENERATED_CLAUDE_MD);
-    const items = await fs.readdir(dir, { withFileTypes: true });
-    for (const item of items) {
-        const full = path.join(dir, item.name);
-        if (item.isDirectory()) {
-            await walkAndParse(full, unfairlyRoot, vaultSlug, out);
-        }
-        else if (item.name.endsWith(".md")) {
-            // Skip ONLY our own generated file (not user docs that happen to be named CLAUDE.md).
-            if (path.resolve(full) === path.resolve(generatedRootPath))
-                continue;
-            try {
-                const raw = await fs.readFile(full, "utf8");
-                const { data } = matter(raw);
-                // Normalize to forward slashes — @-import processors expect POSIX-style paths.
-                const relative = path.relative(unfairlyRoot, full).split(path.sep).join("/");
-                // gray-matter / js-yaml auto-coerces ISO 8601 timestamps to Date — normalize to string.
-                const updatedAtRaw = data.updated_at;
-                const updated_at = updatedAtRaw instanceof Date
-                    ? updatedAtRaw.toISOString()
-                    : typeof updatedAtRaw === "string"
-                        ? updatedAtRaw
-                        : undefined;
-                out.push({
-                    relativePath: relative,
-                    trust_tier: typeof data.trust_tier === "string" ? data.trust_tier : undefined,
-                    role: typeof data.role === "string" ? data.role : undefined,
-                    updated_at,
-                    vaultSlug,
-                });
-            }
-            catch {
-                // Unparseable (malformed YAML, encoding) — skip.
-            }
-        }
-    }
-}
-function renderClaudeMd(gold, silver) {
-    const lines = [];
-    lines.push(SENTINEL_HEADER);
-    lines.push("");
-    lines.push("This directory mirrors your accessible Unfairly vaults. Files below are");
-    lines.push("the active canon — read them before answering questions about this team's");
-    lines.push("architecture, decisions, brand, or in-flight work.");
-    lines.push("");
-    lines.push("## Canon (gold, top primitives)");
-    if (gold.length === 0) {
-        lines.push("(No gold primitives in your accessible vaults yet. Run `unfairly pull` after the team seeds canon docs.)");
-    }
-    else {
-        for (const d of gold)
-            lines.push(`@${d.relativePath}`);
-    }
-    lines.push("");
-    lines.push("## Working knowledge (silver, recently touched)");
-    if (silver.length === 0) {
-        lines.push("(No recent silver docs.)");
-    }
-    else {
-        for (const d of silver)
-            lines.push(`@${d.relativePath}`);
-    }
-    lines.push("");
-    lines.push("## Conventions");
-    lines.push("- Trust tier = audience signal, not visibility filter. All tiers are working memory.");
-    lines.push("- This file is regenerated on every `unfairly init` or `unfairly pull`.");
-    lines.push("  Don't hand-edit — your changes will be overwritten.");
-    lines.push("- For real-time multiplayer state (current checkpoints, applied edits,");
-    lines.push("  pending proposals, online teammates), call `enter_org` via MCP.");
-    lines.push("  This filesystem mirror is static-as-of-last-pull.");
-    return lines.join("\n") + "\n";
-}
-function renderGitignore() {
-    return `# Default: ignore everything in this directory.
+import{promises as c}from"node:fs";import n from"node:path";import y from"gray-matter";const v="# Unfairly Vault Context (auto-generated by `unfairly`)",h="CLAUDE.md";async function E(t,r){const e=await w(t,r),i=e.filter(s=>s.trust_tier==="gold"&&s.role==="primitive").sort((s,l)=>(l.updated_at??"").localeCompare(s.updated_at??"")).slice(0,8),o=e.filter(s=>s.trust_tier==="silver").sort((s,l)=>(l.updated_at??"").localeCompare(s.updated_at??"")).slice(0,5),p=_(i,o);await c.writeFile(n.join(t,h),p,"utf8");const a=n.join(t,".gitignore");try{await c.access(a)}catch{await c.writeFile(a,b(),"utf8")}}async function w(t,r){const e=[];for(const i of Object.values(r.vaults)){const o=i.track_in_git?n.join(t,i.slug):n.join(t,"cache",i.slug);try{await f(o,t,i.slug,e)}catch{}}return e}async function f(t,r,e,i){const o=n.join(r,h),p=await c.readdir(t,{withFileTypes:!0});for(const a of p){const s=n.join(t,a.name);if(a.isDirectory())await f(s,r,e,i);else if(a.name.endsWith(".md")){if(n.resolve(s)===n.resolve(o))continue;try{const l=await c.readFile(s,"utf8"),{data:u}=y(l),g=n.relative(r,s).split(n.sep).join("/"),d=u.updated_at,m=d instanceof Date?d.toISOString():typeof d=="string"?d:void 0;i.push({relativePath:g,trust_tier:typeof u.trust_tier=="string"?u.trust_tier:void 0,role:typeof u.role=="string"?u.role:void 0,updated_at:m,vaultSlug:e})}catch{}}}}function _(t,r){const e=[];if(e.push(v),e.push(""),e.push("This directory mirrors your accessible Unfairly vaults. Files below are"),e.push("the active canon \u2014 read them before answering questions about this team's"),e.push("architecture, decisions, brand, or in-flight work."),e.push(""),e.push("## Canon (gold, top primitives)"),t.length===0)e.push("(No gold primitives in your accessible vaults yet. Run `unfairly pull` after the team seeds canon docs.)");else for(const i of t)e.push(`@${i.relativePath}`);if(e.push(""),e.push("## Working knowledge (silver, recently touched)"),r.length===0)e.push("(No recent silver docs.)");else for(const i of r)e.push(`@${i.relativePath}`);return e.push(""),e.push("## Conventions"),e.push("- Trust tier = audience signal, not visibility filter. All tiers are working memory."),e.push("- This file is regenerated on every `unfairly init` or `unfairly pull`."),e.push("  Don't hand-edit \u2014 your changes will be overwritten."),e.push("- For real-time multiplayer state (current checkpoints, applied edits,"),e.push("  pending proposals, online teammates), call `enter_org` via MCP."),e.push("  This filesystem mirror is static-as-of-last-pull."),e.join(`
+`)+`
+`}function b(){return`# Default: ignore everything in this directory.
 # .unfairly/ is a local cache of vault content. By default, none of it is
-# committed — agents read from disk; the source of truth is in cloud vaults.
+# committed \u2014 agents read from disk; the source of truth is in cloud vaults.
 *
 
 # Re-include the autoloader and this gitignore so Claude Code finds them:
@@ -133,6 +13,4 @@ function renderGitignore() {
 # whose docs should be versioned alongside code), add explicit re-includes:
 # !unfairly-app/
 # !unfairly-app/**
-`;
-}
-//# sourceMappingURL=autoloader.js.map
+`}export{E as writeAutoloader};

package/dist/sync/conflict.d.ts

@@ -9,4 +9,3 @@ export declare function buildConflictFile(args: {
     serverBody: string;
     serverUpdatedAt: string;
 }): string;
-//# sourceMappingURL=conflict.d.ts.map

package/dist/sync/conflict.js

@@ -1,16 +1,6 @@
-import matter from "gray-matter";
-/**
- * Build a three-way merge file: server frontmatter (always wins for
- * authoritative keys), then a conflict-marked body section. The user
- * (or their agent) edits to remove markers, then runs `unfairly resolve`.
- */
-export function buildConflictFile(args) {
-    const conflictBody = `<<<<<<< local
-${args.localBody}
+import e from"gray-matter";function d(t){const o=`<<<<<<< local
+${t.localBody}
 =======
-${args.serverBody}
->>>>>>> cloud (updated_at ${args.serverUpdatedAt})
-`;
-    return matter.stringify(conflictBody, args.serverFrontmatter);
-}
-//# sourceMappingURL=conflict.js.map
+${t.serverBody}
+>>>>>>> cloud (updated_at ${t.serverUpdatedAt})
+`;return e.stringify(o,t.serverFrontmatter)}export{d as buildConflictFile};

package/dist/sync/credentials.d.ts

@@ -5,4 +5,3 @@
 export declare function getToken(): Promise<string | null>;
 export declare function setToken(token: string): Promise<void>;
 export declare function clearToken(): Promise<void>;
-//# sourceMappingURL=credentials.d.ts.map

package/dist/sync/credentials.js

@@ -1,51 +1 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import os from "node:os";
-const SERVICE = "unfairly";
-const ACCOUNT = "default";
-const FILE_FALLBACK = path.join(os.homedir(), ".unfairly", "credentials");
-/**
- * Try OS keychain via keytar; if unavailable (Linux without libsecret, CI,
- * etc.), fall back to a 0600 file in ~/.unfairly/credentials.
- */
-export async function getToken() {
-    try {
-        const keytar = (await import("keytar")).default;
-        const t = await keytar.getPassword(SERVICE, ACCOUNT);
-        if (t)
-            return t;
-    }
-    catch {
-        // keytar unavailable; fall through
-    }
-    try {
-        return (await fs.readFile(FILE_FALLBACK, "utf8")).trim();
-    }
-    catch {
-        return null;
-    }
-}
-export async function setToken(token) {
-    try {
-        const keytar = (await import("keytar")).default;
-        await keytar.setPassword(SERVICE, ACCOUNT, token);
-        return;
-    }
-    catch {
-        // fall through
-    }
-    await fs.mkdir(path.dirname(FILE_FALLBACK), { recursive: true });
-    await fs.writeFile(FILE_FALLBACK, token, { mode: 0o600 });
-}
-export async function clearToken() {
-    try {
-        const keytar = (await import("keytar")).default;
-        await keytar.deletePassword(SERVICE, ACCOUNT);
-    }
-    catch { }
-    try {
-        await fs.unlink(FILE_FALLBACK);
-    }
-    catch { }
-}
-//# sourceMappingURL=credentials.js.map
+import{promises as a}from"node:fs";import n from"node:path";import c from"node:os";const i="unfairly",o="default",r=n.join(c.homedir(),".unfairly","credentials");async function f(){try{const e=await(await import("keytar")).default.getPassword(i,o);if(e)return e}catch{}try{return(await a.readFile(r,"utf8")).trim()}catch{return null}}async function m(t){try{await(await import("keytar")).default.setPassword(i,o,t);return}catch{}await a.mkdir(n.dirname(r),{recursive:!0}),await a.writeFile(r,t,{mode:384})}async function d(){try{await(await import("keytar")).default.deletePassword(i,o)}catch{}try{await a.unlink(r)}catch{}}export{d as clearToken,f as getToken,m as setToken};

package/dist/sync/files.d.ts

@@ -40,4 +40,3 @@ export declare function readDocRaw(absPath: string): Promise<string>;
 export declare function readDocFile(absPath: string): Promise<DocFile>;
 /** Atomic write (tmp + rename). */
 export declare function writeDocFile(absPath: string, content: string): Promise<void>;
-//# sourceMappingURL=files.d.ts.map