unfairly 0.8.3 → 0.8.4

package/dist/cmd/login.js

@@ -1,41 +1,3 @@
-import { browserAuthFlow } from "../auth/browser-flow.js";
-import { setToken } from "../sync/credentials.js";
-const DEFAULT_API = "https://app.unfairly.ai";
-/**
- * `unfairly login` — runs the OAuth handoff and prints a shell snippet
- * the user can paste into their shell config. Useful for setting up
- * Codex CLI's UNFAIRLY_MCP_TOKEN env var without copy-pasting tokens.
- *
- * For most users `unfairly setup` is the better path — it handles env +
- * agent host config in one shot. `login` is preserved for scripting use
- * cases where you want just the export line on stdout.
- *
- * Stdout = the export line (only). Stderr = friendly hints.
- *
- * NOTE: do NOT pipe `unfairly login >> ~/.zshenv` via npx — npx's first-run
- * "Ok to proceed?" confirmation goes to stdout and corrupts the file.
- * Install globally first (`npm i -g unfairly`) or use `unfairly setup`.
- */
-export async function runLogin(opts = {}) {
-    const apiUrl = process.env.UNFAIRLY_API_URL ?? DEFAULT_API;
-    const token = await browserAuthFlow(apiUrl, { tokenName: "unfairly login" });
-    if (!token) {
-        console.error("Login failed — browser flow timed out or was cancelled.");
-        process.exit(1);
-    }
-    await setToken(token);
-    if (!opts.quiet) {
-        console.error("Authorized.");
-        console.error("");
-        console.error("Add this line to your shell config (~/.zshenv on macOS / Linux):");
-        console.error("");
-    }
-    // The export line goes to STDOUT so it can be piped.
-    process.stdout.write(`export UNFAIRLY_MCP_TOKEN=${token}\n`);
-    process.stdout.write(`export UNFAIRLY_TOKEN=${token}\n`);
-    if (!opts.quiet) {
-        console.error("");
-        console.error("Tip: `unfairly setup` handles this AND patches your Codex / Claude Code config in one shot.");
-    }
-}
-//# sourceMappingURL=login.js.map
+import{browserAuthFlow as n}from"../auth/browser-flow.js";import{setToken as t}from"../sync/credentials.js";const s="https://app.unfairly.ai";async function l(e={}){const r=process.env.UNFAIRLY_API_URL??s,o=await n(r,{tokenName:"unfairly login"});o||(console.error("Login failed \u2014 browser flow timed out or was cancelled."),process.exit(1)),await t(o),e.quiet||(console.error("Authorized."),console.error(""),console.error("Add this line to your shell config (~/.zshenv on macOS / Linux):"),console.error("")),process.stdout.write(`export UNFAIRLY_MCP_TOKEN=${o}
+`),process.stdout.write(`export UNFAIRLY_TOKEN=${o}
+`),e.quiet||(console.error(""),console.error("Tip: `unfairly setup` handles this AND patches your Codex / Claude Code config in one shot."))}export{l as runLogin};

package/dist/cmd/mcp.d.ts

@@ -1,2 +1 @@
 export declare function runMcp(): Promise<void>;
-//# sourceMappingURL=mcp.d.ts.map

package/dist/cmd/mcp.js

@@ -1,86 +1,2 @@
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
-import { z } from "zod";
-import { runPull } from "./pull.js";
-import { runPush } from "./push.js";
-import { runStatus } from "./status.js";
-const PullSchema = z.object({ room: z.string().optional() }).strict();
-const PushSchema = z.object({ room: z.string().optional() }).strict();
-const StatusSchema = z.object({}).strict();
-export async function runMcp() {
-    const server = new Server({ name: "unfairly-sync", version: "0.1.0" }, { capabilities: { tools: {} } });
-    server.setRequestHandler(ListToolsRequestSchema, async () => ({
-        tools: [
-            {
-                name: "pull_vault",
-                description: "Sync local .unfairly/ from cloud. Pass `room` to scope to one vault, omit for all accessible vaults. Reports docs added/updated/deleted.",
-                inputSchema: {
-                    type: "object",
-                    properties: {
-                        room: {
-                            type: "string",
-                            description: "Vault slug to scope to (optional)",
-                        },
-                    },
-                },
-            },
-            {
-                name: "push_vault",
-                description: "Push locally-modified markdown to cloud. Stale-check via expected_updated_at. Returns 409s for conflicts; CLI rewrites those files with merge markers.",
-                inputSchema: {
-                    type: "object",
-                    properties: {
-                        room: {
-                            type: "string",
-                            description: "Vault slug to scope to (optional)",
-                        },
-                    },
-                },
-            },
-            {
-                name: "sync_status",
-                description: "Show local sync status: per-vault last-pulled timestamp + modified-locally count.",
-                inputSchema: { type: "object", properties: {} },
-            },
-        ],
-    }));
-    server.setRequestHandler(CallToolRequestSchema, async (req) => {
-        const { name, arguments: args } = req.params;
-        const captured = [];
-        const origLog = console.log;
-        const origWarn = console.warn;
-        const origError = console.error;
-        console.log = (...a) => captured.push(a.map(String).join(" "));
-        console.warn = (...a) => captured.push("! " + a.map(String).join(" "));
-        console.error = (...a) => captured.push("ERR " + a.map(String).join(" "));
-        try {
-            if (name === "pull_vault") {
-                const { room } = PullSchema.parse(args ?? {});
-                await runPull(room);
-            }
-            else if (name === "push_vault") {
-                const { room } = PushSchema.parse(args ?? {});
-                await runPush(room);
-            }
-            else if (name === "sync_status") {
-                StatusSchema.parse(args ?? {});
-                await runStatus();
-            }
-            else {
-                throw new Error(`unknown tool: ${name}`);
-            }
-        }
-        finally {
-            console.log = origLog;
-            console.warn = origWarn;
-            console.error = origError;
-        }
-        return {
-            content: [{ type: "text", text: captured.join("\n") || "ok" }],
-        };
-    });
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-}
-//# sourceMappingURL=mcp.js.map
+import{Server as u}from"@modelcontextprotocol/sdk/server/index.js";import{StdioServerTransport as m}from"@modelcontextprotocol/sdk/server/stdio.js";import{CallToolRequestSchema as d,ListToolsRequestSchema as f}from"@modelcontextprotocol/sdk/types.js";import{z as t}from"zod";import{runPull as h}from"./pull.js";import{runPush as y}from"./push.js";import{runStatus as g}from"./status.js";const S=t.object({room:t.string().optional()}).strict(),w=t.object({room:t.string().optional()}).strict(),v=t.object({}).strict();async function x(){const s=new u({name:"unfairly-sync",version:"0.1.0"},{capabilities:{tools:{}}});s.setRequestHandler(f,async()=>({tools:[{name:"pull_vault",description:"Sync local .unfairly/ from cloud. Pass `room` to scope to one vault, omit for all accessible vaults. Reports docs added/updated/deleted.",inputSchema:{type:"object",properties:{room:{type:"string",description:"Vault slug to scope to (optional)"}}}},{name:"push_vault",description:"Push locally-modified markdown to cloud. Stale-check via expected_updated_at. Returns 409s for conflicts; CLI rewrites those files with merge markers.",inputSchema:{type:"object",properties:{room:{type:"string",description:"Vault slug to scope to (optional)"}}}},{name:"sync_status",description:"Show local sync status: per-vault last-pulled timestamp + modified-locally count.",inputSchema:{type:"object",properties:{}}}]})),s.setRequestHandler(d,async c=>{const{name:e,arguments:n}=c.params,r=[],l=console.log,i=console.warn,p=console.error;console.log=(...o)=>r.push(o.map(String).join(" ")),console.warn=(...o)=>r.push("! "+o.map(String).join(" ")),console.error=(...o)=>r.push("ERR "+o.map(String).join(" "));try{if(e==="pull_vault"){const{room:o}=S.parse(n??{});await h(o)}else if(e==="push_vault"){const{room:o}=w.parse(n??{});await y(o)}else if(e==="sync_status")v.parse(n??{}),await g();else throw new Error(`unknown tool: ${e}`)}finally{console.log=l,console.warn=i,console.error=p}return{content:[{type:"text",text:r.join(`
+`)||"ok"}]}});const a=new m;await s.connect(a)}export{x as runMcp};

package/dist/cmd/pace.d.ts

@@ -1,5 +1,5 @@
 import { detectPaceClients } from "../pace/device.js";
-export declare const RUNTIME_VERSION = "0.8.3";
+export declare const RUNTIME_VERSION = "0.8.4";
 export declare const INTELLIGENCE_POLICY: {
     version: "metadata-v3";
     mode: "metadata_only";
@@ -41,6 +41,7 @@ export declare function refreshRepositoryPolicy(options?: {
     force?: boolean;
 }): Promise<{
     repositories: number;
+    changed: boolean;
 } | null>;
 /** Summarizes and uploads the last `days` of local sessions so Intelligence has history from day one. */
 export declare function runPaceBackfill(days: number): Promise<{
@@ -98,4 +99,3 @@ export declare function runPacePlaybookUse(playbookId: string, playbookVersion:
     workflow_id: string;
     queued: number;
 }>;
-//# sourceMappingURL=pace.d.ts.map

package/dist/cmd/pace.js

@@ -1,426 +1,4 @@
-import { getToken } from "../sync/credentials.js";
-import fs from "node:fs/promises";
-import { randomUUID } from "node:crypto";
-import os from "node:os";
-import path from "node:path";
-import { PaceEventV3Schema } from "../pace/schema.js";
-import { normalizeHookEvent } from "../pace/normalize.js";
-import { appendPaceEvent, paceSpoolPath, readPaceEvents, removePaceEvents } from "../pace/spool.js";
-import { currentDevicePlatform, detectPaceClients, paceDevicePath, readOrCreatePaceDevice, writePaceDevice, } from "../pace/device.js";
-const DEFAULT_API = "https://app.unfairly.ai";
-export const RUNTIME_VERSION = "0.8.3";
-const PLUGIN_VERSION = "0.1.0";
-export const INTELLIGENCE_POLICY = {
-    version: "metadata-v3",
-    mode: "metadata_only",
-    permitted_fields: [
-        "event_id", "installation_id", "session_id", "workflow_id", "occurred_at",
-        "source", "event_type", "evidence_level", "model_family", "tool_category",
-        "blocker_category", "approval_mode", "permission_mode", "duration_bucket",
-        "exit_code_bucket", "token_counts", "playbook_id", "playbook_version",
-        "repository_id", "commit_sha", "artifact_type", "outcome_state",
-    ],
-    prohibited_content: [
-        "prompts", "responses", "source code", "file contents", "screenshots",
-        "keystrokes", "clipboard", "raw commands", "arguments", "tool output",
-        "stdout", "stderr", "paths", "filenames", "repository names", "branches",
-        "URLs", "titles", "secrets", "arbitrary errors",
-    ],
-};
-async function readStdin() {
-    if (process.stdin.isTTY)
-        return {};
-    let raw = "";
-    for await (const chunk of process.stdin)
-        raw += String(chunk);
-    if (!raw.trim())
-        return {};
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        return {};
-    }
-}
-export async function runPaceCapture(source, hookEvent) {
-    const device = await readOrCreatePaceDevice();
-    if (device.paused)
-        return;
-    const event = normalizeHookEvent({
-        source,
-        hookEvent,
-        payload: await readStdin(),
-        installationId: device.installation_id,
-    });
-    await appendPaceEvent(event);
-    const boundary = event.event_type === "session.started" || event.event_type === "session.ended" || event.event_type === "workflow.stopped";
-    // A failure here must never break the AI workflow.
-    if (boundary)
-        await runPaceSync({ flush: process.env.UNFAIRLY_PACE_NO_FLUSH !== "1" }).catch(() => undefined);
-}
-const SWEEP_OVERLAP_MS = 15 * 60_000;
-const FIRST_SWEEP_LOOKBACK_MS = 2 * 86_400_000;
-/** How far back the first sync after connecting reads local transcripts. Matches the report's window. */
-export const HISTORY_BACKFILL_DAYS = 90;
-/**
- * Summarizes local sessions and uploads them. Does nothing until this machine
- * is connected: before that there is nowhere to send summaries and no
- * approved-repository list, and a session summarized without that list would
- * lose its commits for good. The first sync after connecting reads the last
- * {@link HISTORY_BACKFILL_DAYS} days so the report has history from day one.
- */
-export async function runPaceSync(options = {}) {
-    if (!(await paceAuthorization()))
-        return null;
-    const device = await readOrCreatePaceDevice();
-    const firstSync = !device.history_backfilled_at;
-    // Session summaries carry repository IDs and commit SHAs only for approved
-    // repositories, so the policy has to be current before sessions are summarized.
-    await refreshRepositoryPolicy({ force: firstSync }).catch(() => null);
-    const sweep = firstSync
-        ? await runPaceSweep({ sinceMs: Date.now() - HISTORY_BACKFILL_DAYS * 86_400_000, collectedVia: "backfill" })
-        : await runPaceSweep();
-    if (firstSync)
-        await writePaceDevice({ ...(await readOrCreatePaceDevice()), history_backfilled_at: new Date().toISOString() });
-    // A telemetry outage must never break the employee's AI workflow. Keep the
-    // durable queue and retry on the next session boundary or explicit flush.
-    if (options.flush !== false)
-        await runPaceFlush().catch(() => undefined);
-    return { summarized: sweep.summarized, backfilled: firstSync };
-}
-/** Summarizes local sessions changed since the last sweep and queues them for upload. */
-export async function runPaceSweep(options = {}) {
-    const { sweepLocalSessions } = await import("../pace/session-summary.js");
-    const device = await readOrCreatePaceDevice();
-    const startedAt = Date.now();
-    const last = device.last_session_sweep_at ? Date.parse(device.last_session_sweep_at) : startedAt - FIRST_SWEEP_LOOKBACK_MS;
-    const result = await sweepLocalSessions({
-        since: options.sinceMs ?? last - SWEEP_OVERLAP_MS,
-        installationId: device.installation_id,
-        collectedVia: options.collectedVia ?? "hook",
-    });
-    await writePaceDevice({ ...(await readOrCreatePaceDevice()), last_session_sweep_at: new Date(startedAt).toISOString() });
-    return result;
-}
-/**
- * The Authorization header for Intelligence uploads: this installation's own
- * collector credential (plugin install path) or, failing that, the signed-in
- * CLI token.
- */
-export async function paceAuthorization() {
-    const { collectorAuthorization, readCollectorCredential } = await import("../pace/enroll.js");
-    const credential = await readCollectorCredential();
-    if (credential)
-        return collectorAuthorization(credential);
-    const token = await getToken();
-    return token ? `Bearer ${token}` : null;
-}
-function apiBase() {
-    return (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-}
-/** Pulls the organization's approved repositories so sessions can carry repository IDs and commit SHAs. */
-export async function refreshRepositoryPolicy(options = {}) {
-    const device = await readOrCreatePaceDevice();
-    const fresh = device.repository_policy_refreshed_at && Date.now() - Date.parse(device.repository_policy_refreshed_at) < 3_600_000;
-    if (fresh && !options.force)
-        return null;
-    const authorization = await paceAuthorization();
-    if (!authorization)
-        return null;
-    const response = await fetch(`${apiBase()}/api/ai-pace/repository-policy`, { headers: { Authorization: authorization } });
-    if (!response.ok)
-        return null;
-    const { parseRepositoryPolicy, repositoryPolicyPath } = await import("../pace/repository.js");
-    const policy = parseRepositoryPolicy(await response.json());
-    const file = repositoryPolicyPath();
-    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
-    await fs.writeFile(file, `${JSON.stringify(policy, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
-    await writePaceDevice({ ...(await readOrCreatePaceDevice()), repository_policy_refreshed_at: new Date().toISOString() });
-    return { repositories: policy.mappings.length };
-}
-async function uploadSessionSummaries(authorization) {
-    const { readSessionSpool, removeSessionSummaries } = await import("../pace/session-summary.js");
-    let sent = 0;
-    for (let round = 0; round < 50; round += 1) {
-        const pending = Object.values(await readSessionSpool()).slice(0, 100);
-        if (!pending.length)
-            break;
-        const response = await fetch(`${apiBase()}/api/ai-pace/sessions`, {
-            method: "POST",
-            headers: { Authorization: authorization, "Content-Type": "application/json" },
-            body: JSON.stringify({ sessions: pending }),
-        });
-        if (!response.ok)
-            throw new Error(`Unfairly Intelligence session upload failed (${response.status})`);
-        await removeSessionSummaries(pending);
-        sent += pending.length;
-    }
-    return { sent, remaining: Object.keys(await readSessionSpool()).length };
-}
-/** Summarizes and uploads the last `days` of local sessions so Intelligence has history from day one. */
-export async function runPaceBackfill(days) {
-    const policy = await refreshRepositoryPolicy({ force: true }).catch(() => null);
-    // Uploads are only accepted from a registered, active installation.
-    await runPaceHeartbeat();
-    const sweep = await runPaceSweep({ sinceMs: Date.now() - days * 86_400_000, collectedVia: "backfill" });
-    const authorization = await paceAuthorization();
-    if (!authorization)
-        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
-    const upload = await uploadSessionSummaries(authorization);
-    return { summarized: sweep.summarized, uploaded: upload.sent, remaining: upload.remaining, approved_repositories: policy?.repositories ?? null };
-}
-export async function runPaceFlush() {
-    const authorization = await paceAuthorization();
-    if (!authorization)
-        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
-    await refreshRepositoryPolicy().catch(() => null);
-    const sessions = await uploadSessionSummaries(authorization);
-    const events = await readPaceEvents();
-    if (!events.length)
-        return { sent: 0, remaining: 0, sessions_sent: sessions.sent };
-    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-    const device = await readOrCreatePaceDevice();
-    const attributedEvents = events.map((event) => ({
-        ...event,
-        installation_id: event.installation_id ?? device.installation_id,
-    }));
-    const response = await fetch(`${apiUrl}/api/ai-pace/events`, {
-        method: "POST",
-        headers: {
-            Authorization: authorization,
-            "Content-Type": "application/json",
-            ...(device.attestation ? { "X-AI-Pace-Attestation": device.attestation } : {}),
-        },
-        body: JSON.stringify({ events: attributedEvents }),
-    });
-    if (!response.ok)
-        throw new Error(`Unfairly Intelligence upload failed (${response.status})`);
-    await removePaceEvents(new Set(events.map((event) => event.event_id)));
-    const remaining = (await readPaceEvents()).length;
-    await writePaceDevice({ ...(await readOrCreatePaceDevice()), last_upload_at: new Date().toISOString(), collection_policy_version: "metadata-v3" });
-    return { sent: events.length, remaining, sessions_sent: sessions.sent };
-}
-export async function runPaceHeartbeat() {
-    const authorization = await paceAuthorization();
-    if (!authorization)
-        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
-    const device = await readOrCreatePaceDevice();
-    const clients = await detectPaceClients();
-    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-    const response = await fetch(`${apiUrl}/api/ai-pace/heartbeat`, {
-        method: "POST",
-        headers: {
-            Authorization: authorization,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({
-            installation_id: device.installation_id,
-            agent_version: RUNTIME_VERSION,
-            runtime_version: RUNTIME_VERSION,
-            plugin_version: PLUGIN_VERSION,
-            collection_policy_version: "metadata-v3",
-            ...currentDevicePlatform(),
-            clients,
-        }),
-    });
-    if (!response.ok)
-        throw new Error(`Unfairly Intelligence heartbeat failed (${response.status})`);
-    const body = await response.json();
-    if (!body.attestation || !body.expires_at)
-        throw new Error("Unfairly Intelligence heartbeat returned no attestation");
-    await writePaceDevice({
-        ...device,
-        attestation: body.attestation,
-        attestation_expires_at: body.expires_at,
-        collection_policy_version: "metadata-v3",
-    });
-    return { installation_id: device.installation_id, clients };
-}
-export async function runPaceInstall() {
-    const clients = await detectPaceClients();
-    const { installIntelligence } = await import("../pace/install.js");
-    const installed = await installIntelligence({ version: RUNTIME_VERSION, clients });
-    const device = await readOrCreatePaceDevice();
-    await writePaceDevice({
-        ...device,
-        collection_policy_version: "metadata-v3",
-        intelligence_install: {
-            version: RUNTIME_VERSION,
-            runtime_entrypoint: installed.runtime_entrypoint,
-            marketplace_root: installed.marketplace_root,
-            owned_paths: installed.owned_paths,
-            activated_clients: installed.activations.filter((item) => item.status === "activated").map((item) => item.client),
-            installed_at: new Date().toISOString(),
-        },
-    });
-    await runPaceHeartbeat();
-    return {
-        runtime_entrypoint: installed.runtime_entrypoint,
-        marketplace_root: installed.marketplace_root,
-        activations: installed.activations,
-        verification: { heartbeat: "ok", live_events: "pending_first_session" },
-    };
-}
-export async function runPaceStatus() {
-    const queued = (await readPaceEvents()).length;
-    const device = await readOrCreatePaceDevice();
-    const clients = await detectPaceClients();
-    process.stdout.write(JSON.stringify({
-        enabled: !device.paused,
-        paused: Boolean(device.paused),
-        installation_id: device.installation_id,
-        attestation_expires_at: device.attestation_expires_at ?? null,
-        last_upload_at: device.last_upload_at ?? null,
-        runtime_version: RUNTIME_VERSION,
-        plugin_version: PLUGIN_VERSION,
-        collection_policy_version: device.collection_policy_version ?? INTELLIGENCE_POLICY.version,
-        queued,
-        spool: paceSpoolPath(),
-        clients,
-    }, null, 2) + "\n");
-}
-export async function runPaceConfig(input) {
-    const { writeManagedConfigs } = await import("../pace/managed-config.js");
-    const files = await writeManagedConfigs(input);
-    const device = await readOrCreatePaceDevice();
-    await writePaceDevice({ ...device, managed_files: files, collection_policy_version: "metadata-v3" });
-    return files;
-}
-export function runPacePolicy() {
-    return INTELLIGENCE_POLICY;
-}
-export async function runPacePause(paused) {
-    const device = await readOrCreatePaceDevice();
-    await writePaceDevice({ ...device, paused });
-    return { paused };
-}
-export async function runPaceUninstall() {
-    const device = await readOrCreatePaceDevice();
-    const activated = new Set(device.intelligence_install?.activated_clients ?? []);
-    const { spawnSync } = await import("node:child_process");
-    if (activated.has("codex")) {
-        spawnSync("codex", ["plugin", "remove", "ai-pace@unfairly-intelligence", "--json"], { encoding: "utf8", timeout: 30_000 });
-        spawnSync("codex", ["plugin", "marketplace", "remove", "unfairly-intelligence"], { encoding: "utf8", timeout: 30_000 });
-    }
-    if (activated.has("claude_code")) {
-        spawnSync("claude", ["plugin", "uninstall", "ai-pace@unfairly-intelligence", "--scope", "user"], { encoding: "utf8", timeout: 30_000 });
-        spawnSync("claude", ["plugin", "marketplace", "remove", "unfairly-intelligence", "--scope", "user"], { encoding: "utf8", timeout: 30_000 });
-    }
-    const permitted = new Set([
-        "codex-requirements.toml", "claude-settings.json", "gemini-settings.json",
-        "evidence-policy.json", "repository-policy.json",
-    ]);
-    let removed = 0;
-    for (const file of device.managed_files ?? []) {
-        const name = file.split(/[\\/]/).at(-1);
-        if (!name || !permitted.has(name))
-            continue;
-        await fs.unlink(file).then(() => { removed += 1; }).catch((error) => {
-            if (error.code !== "ENOENT")
-                throw error;
-        });
-    }
-    const safeOwnedRoots = [
-        path.join(os.homedir(), ".unfairly"),
-        path.join(os.homedir(), ".cursor", "plugins", "local", "ai-pace"),
-        path.join(os.homedir(), ".gemini", "extensions", "unfairly-intelligence"),
-    ];
-    for (const ownedPath of device.intelligence_install?.owned_paths ?? []) {
-        const resolved = path.resolve(ownedPath);
-        if (!safeOwnedRoots.some((root) => resolved === root || resolved.startsWith(`${root}${path.sep}`)))
-            continue;
-        await fs.rm(resolved, { recursive: true, force: true });
-        removed += 1;
-    }
-    await fs.unlink(paceSpoolPath()).catch((error) => {
-        if (error.code !== "ENOENT")
-            throw error;
-    });
-    await fs.unlink(paceDevicePath()).catch((error) => {
-        if (error.code !== "ENOENT" && error.code !== "EISDIR")
-            throw error;
-    });
-    return { removed_files: removed, retained_global_credentials: true };
-}
-export async function runPaceEvidenceScan(policyPath) {
-    const { scanLocalEvidence } = await import("../pace/local-evidence.js");
-    const device = await readOrCreatePaceDevice();
-    const result = await scanLocalEvidence({ policyPath, installationId: device.installation_id });
-    await Promise.all(result.events.map((event) => appendPaceEvent(event)));
-    return { observed: result.events.length, baseline_roots: result.baselineRoots, queued: (await readPaceEvents()).length };
-}
-export async function runPaceEvidenceWatch(policyPath) {
-    const { readLocalEvidencePolicy } = await import("../pace/local-evidence.js");
-    const policy = await readLocalEvidencePolicy(policyPath);
-    process.stdout.write(`Unfairly Intelligence is watching ${policy.roots.length} approved local evidence root(s).\n`);
-    const scan = async () => {
-        const result = await runPaceEvidenceScan(policyPath);
-        if (result.observed)
-            await runPaceFlush().catch(() => undefined);
-    };
-    await scan();
-    await new Promise((resolve) => {
-        const timer = setInterval(() => { void scan(); }, policy.scan_interval_seconds * 1000);
-        const stop = () => { clearInterval(timer); resolve(); };
-        process.once("SIGINT", stop);
-        process.once("SIGTERM", stop);
-    });
-}
-export async function runPacePlaybooks(query) {
-    const token = await getToken();
-    if (!token)
-        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
-    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-    const params = query?.trim() ? `?q=${encodeURIComponent(query.trim())}` : "";
-    const response = await fetch(`${apiUrl}/api/ai-pace/playbooks${params}`, {
-        headers: { Authorization: `Bearer ${token}`, Accept: "application/json" },
-    });
-    if (!response.ok)
-        throw new Error(`Unfairly Intelligence playbooks failed (${response.status})`);
-    const body = await response.json();
-    return body.playbooks ?? [];
-}
-export async function runPacePlaybookUse(playbookId, playbookVersion) {
-    const token = await getToken();
-    if (!token)
-        throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");
-    const device = await readOrCreatePaceDevice();
-    if (device.paused)
-        throw new Error("Unfairly Intelligence is paused. Run `unfairly intelligence resume` first.");
-    const workflowId = randomUUID();
-    const sourceRecordId = randomUUID();
-    const event = PaceEventV3Schema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: randomUUID(),
-        installation_id: device.installation_id,
-        occurred_at: new Date().toISOString(),
-        source: "unknown",
-        event_type: "session.started",
-        evidence_level: "exact",
-        session_id: sourceRecordId,
-        workflow_id: workflowId,
-        playbook_id: playbookId,
-        playbook_version: playbookVersion,
-        attributes: { client_event: "session_start" },
-    });
-    await appendPaceEvent(event);
-    const apiUrl = (process.env.UNFAIRLY_API_URL ?? DEFAULT_API).replace(/\/$/, "");
-    const response = await fetch(`${apiUrl}/api/ai-pace/playbooks`, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-        body: JSON.stringify({
-            action: "record",
-            playbook_id: playbookId,
-            playbook_version: Number(playbookVersion),
-            event_type: "started",
-            source_record_id: sourceRecordId,
-            workflow_id: workflowId,
-        }),
-    });
-    // The event remains safely spooled when the marketplace endpoint is offline.
-    if (!response.ok && response.status < 500)
-        throw new Error(`Unfairly Intelligence playbook use failed (${response.status})`);
-    return { workflow_id: workflowId, queued: (await readPaceEvents()).length };
-}
-//# sourceMappingURL=pace.js.map
+import{getToken as v}from"../sync/credentials.js";import u from"node:fs/promises";import{randomUUID as h}from"node:crypto";import g from"node:os";import d from"node:path";import{PaceEventV3Schema as D}from"../pace/schema.js";import{normalizeHookEvent as j}from"../pace/normalize.js";import{appendPaceEvent as k,paceSpoolPath as x,readPaceEvents as _,removePaceEvents as z}from"../pace/spool.js";import{currentDevicePlatform as C,detectPaceClients as I,paceDevicePath as F,readOrCreatePaceDevice as c,writePaceDevice as p}from"../pace/device.js";const f="https://app.unfairly.ai",w="0.8.4",O="0.1.0",R={version:"metadata-v3",mode:"metadata_only",permitted_fields:["event_id","installation_id","session_id","workflow_id","occurred_at","source","event_type","evidence_level","model_family","tool_category","blocker_category","approval_mode","permission_mode","duration_bucket","exit_code_bucket","token_counts","playbook_id","playbook_version","repository_id","commit_sha","artifact_type","outcome_state"],prohibited_content:["prompts","responses","source code","file contents","screenshots","keystrokes","clipboard","raw commands","arguments","tool output","stdout","stderr","paths","filenames","repository names","branches","URLs","titles","secrets","arbitrary errors"]};async function Y(){if(process.stdin.isTTY)return{};let n="";for await(const t of process.stdin)n+=String(t);if(!n.trim())return{};try{return JSON.parse(n)}catch{return{}}}async function ne(n,t){const e=await c();if(e.paused)return;const a=j({source:n,hookEvent:t,payload:await Y(),installationId:e.installation_id});await k(a),(a.event_type==="session.started"||a.event_type==="session.ended"||a.event_type==="workflow.stopped")&&await V({flush:process.env.UNFAIRLY_PACE_NO_FLUSH!=="1"}).catch(()=>{})}const B=15*6e4,J=2*864e5,M=90;async function V(n={}){if(!await m())return null;const t=await c(),e=await P({force:!t.history_backfilled_at}).catch(()=>null),a=!t.history_backfilled_at||!!e?.changed,i=a?await S({sinceMs:Date.now()-M*864e5,collectedVia:"backfill"}):await S();return a&&await p({...await c(),history_backfilled_at:new Date().toISOString()}),n.flush!==!1&&await $().catch(()=>{}),{summarized:i.summarized,backfilled:a}}async function S(n={}){const{sweepLocalSessions:t}=await import("../pace/session-summary.js"),e=await c(),a=Date.now(),i=e.last_session_sweep_at?Date.parse(e.last_session_sweep_at):a-J,o=await t({since:n.sinceMs??i-B,installationId:e.installation_id,collectedVia:n.collectedVia??"hook"});return await p({...await c(),last_session_sweep_at:new Date(a).toISOString()}),o}async function m(){const{collectorAuthorization:n,readCollectorCredential:t}=await import("../pace/enroll.js"),e=await t();if(e)return n(e);const a=await v();return a?`Bearer ${a}`:null}function A(){return(process.env.UNFAIRLY_API_URL??f).replace(/\/$/,"")}async function P(n={}){const t=await c();if(t.repository_policy_refreshed_at&&Date.now()-Date.parse(t.repository_policy_refreshed_at)<36e5&&!n.force)return null;const a=await m();if(!a)return null;const i=await fetch(`${A()}/api/ai-pace/repository-policy`,{headers:{Authorization:a}});if(!i.ok)return null;const{parseRepositoryPolicy:o,repositoryPolicyPath:s}=await import("../pace/repository.js"),l=o(await i.json()),r=s(),b=await u.readFile(r,"utf8").then(y=>o(JSON.parse(y)),()=>null),E=y=>(y?.mappings??[]).map(U=>`${U.repository_id}:${U.remote_fingerprint}`).sort().join(","),T=b!==null&&E(b)!==E(l);return await u.mkdir(d.dirname(r),{recursive:!0,mode:448}),await u.writeFile(r,`${JSON.stringify(l,null,2)}
+`,{encoding:"utf8",mode:384}),await p({...await c(),repository_policy_refreshed_at:new Date().toISOString()}),{repositories:l.mappings.length,changed:T}}async function N(n){const{readSessionSpool:t,removeSessionSummaries:e}=await import("../pace/session-summary.js");let a=0;for(let i=0;i<50;i+=1){const o=Object.values(await t()).slice(0,100);if(!o.length)break;const s=await fetch(`${A()}/api/ai-pace/sessions`,{method:"POST",headers:{Authorization:n,"Content-Type":"application/json"},body:JSON.stringify({sessions:o})});if(!s.ok)throw new Error(`Unfairly Intelligence session upload failed (${s.status})`);await e(o),a+=o.length}return{sent:a,remaining:Object.keys(await t()).length}}async function ae(n){const t=await P({force:!0}).catch(()=>null);await L();const e=await S({sinceMs:Date.now()-n*864e5,collectedVia:"backfill"}),a=await m();if(!a)throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");const i=await N(a);return{summarized:e.summarized,uploaded:i.sent,remaining:i.remaining,approved_repositories:t?.repositories??null}}async function $(){const n=await m();if(!n)throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");await P().catch(()=>null);const t=await N(n),e=await _();if(!e.length)return{sent:0,remaining:0,sessions_sent:t.sent};const a=(process.env.UNFAIRLY_API_URL??f).replace(/\/$/,""),i=await c(),o=e.map(r=>({...r,installation_id:r.installation_id??i.installation_id})),s=await fetch(`${a}/api/ai-pace/events`,{method:"POST",headers:{Authorization:n,"Content-Type":"application/json",...i.attestation?{"X-AI-Pace-Attestation":i.attestation}:{}},body:JSON.stringify({events:o})});if(!s.ok)throw new Error(`Unfairly Intelligence upload failed (${s.status})`);await z(new Set(e.map(r=>r.event_id)));const l=(await _()).length;return await p({...await c(),last_upload_at:new Date().toISOString(),collection_policy_version:"metadata-v3"}),{sent:e.length,remaining:l,sessions_sent:t.sent}}async function L(){const n=await m();if(!n)throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");const t=await c(),e=await I(),a=(process.env.UNFAIRLY_API_URL??f).replace(/\/$/,""),i=await fetch(`${a}/api/ai-pace/heartbeat`,{method:"POST",headers:{Authorization:n,"Content-Type":"application/json"},body:JSON.stringify({installation_id:t.installation_id,agent_version:w,runtime_version:w,plugin_version:O,collection_policy_version:"metadata-v3",...C(),clients:e})});if(!i.ok)throw new Error(`Unfairly Intelligence heartbeat failed (${i.status})`);const o=await i.json();if(!o.attestation||!o.expires_at)throw new Error("Unfairly Intelligence heartbeat returned no attestation");return await p({...t,attestation:o.attestation,attestation_expires_at:o.expires_at,collection_policy_version:"metadata-v3"}),{installation_id:t.installation_id,clients:e}}async function ie(){const n=await I(),{installIntelligence:t}=await import("../pace/install.js"),e=await t({version:w,clients:n}),a=await c();return await p({...a,collection_policy_version:"metadata-v3",intelligence_install:{version:w,runtime_entrypoint:e.runtime_entrypoint,marketplace_root:e.marketplace_root,owned_paths:e.owned_paths,activated_clients:e.activations.filter(i=>i.status==="activated").map(i=>i.client),installed_at:new Date().toISOString()}}),await L(),{runtime_entrypoint:e.runtime_entrypoint,marketplace_root:e.marketplace_root,activations:e.activations,verification:{heartbeat:"ok",live_events:"pending_first_session"}}}async function oe(){const n=(await _()).length,t=await c(),e=await I();process.stdout.write(JSON.stringify({enabled:!t.paused,paused:!!t.paused,installation_id:t.installation_id,attestation_expires_at:t.attestation_expires_at??null,last_upload_at:t.last_upload_at??null,runtime_version:w,plugin_version:O,collection_policy_version:t.collection_policy_version??R.version,queued:n,spool:x(),clients:e},null,2)+`
+`)}async function se(n){const{writeManagedConfigs:t}=await import("../pace/managed-config.js"),e=await t(n),a=await c();return await p({...a,managed_files:e,collection_policy_version:"metadata-v3"}),e}function re(){return R}async function ce(n){const t=await c();return await p({...t,paused:n}),{paused:n}}async function le(){const n=await c(),t=new Set(n.intelligence_install?.activated_clients??[]),{spawnSync:e}=await import("node:child_process");t.has("codex")&&(e("codex",["plugin","remove","ai-pace@unfairly-intelligence","--json"],{encoding:"utf8",timeout:3e4}),e("codex",["plugin","marketplace","remove","unfairly-intelligence"],{encoding:"utf8",timeout:3e4})),t.has("claude_code")&&(e("claude",["plugin","uninstall","ai-pace@unfairly-intelligence","--scope","user"],{encoding:"utf8",timeout:3e4}),e("claude",["plugin","marketplace","remove","unfairly-intelligence","--scope","user"],{encoding:"utf8",timeout:3e4}));const a=new Set(["codex-requirements.toml","claude-settings.json","gemini-settings.json","evidence-policy.json","repository-policy.json"]);let i=0;for(const s of n.managed_files??[]){const l=s.split(/[\\/]/).at(-1);!l||!a.has(l)||await u.unlink(s).then(()=>{i+=1}).catch(r=>{if(r.code!=="ENOENT")throw r})}const o=[d.join(g.homedir(),".unfairly"),d.join(g.homedir(),".cursor","plugins","local","ai-pace"),d.join(g.homedir(),".gemini","extensions","unfairly-intelligence")];for(const s of n.intelligence_install?.owned_paths??[]){const l=d.resolve(s);o.some(r=>l===r||l.startsWith(`${r}${d.sep}`))&&(await u.rm(l,{recursive:!0,force:!0}),i+=1)}return await u.unlink(x()).catch(s=>{if(s.code!=="ENOENT")throw s}),await u.unlink(F()).catch(s=>{if(s.code!=="ENOENT"&&s.code!=="EISDIR")throw s}),{removed_files:i,retained_global_credentials:!0}}async function q(n){const{scanLocalEvidence:t}=await import("../pace/local-evidence.js"),e=await c(),a=await t({policyPath:n,installationId:e.installation_id});return await Promise.all(a.events.map(i=>k(i))),{observed:a.events.length,baseline_roots:a.baselineRoots,queued:(await _()).length}}async function pe(n){const{readLocalEvidencePolicy:t}=await import("../pace/local-evidence.js"),e=await t(n);process.stdout.write(`Unfairly Intelligence is watching ${e.roots.length} approved local evidence root(s).
+`);const a=async()=>{(await q(n)).observed&&await $().catch(()=>{})};await a(),await new Promise(i=>{const o=setInterval(()=>{a()},e.scan_interval_seconds*1e3),s=()=>{clearInterval(o),i()};process.once("SIGINT",s),process.once("SIGTERM",s)})}async function ue(n){const t=await v();if(!t)throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");const e=(process.env.UNFAIRLY_API_URL??f).replace(/\/$/,""),a=n?.trim()?`?q=${encodeURIComponent(n.trim())}`:"",i=await fetch(`${e}/api/ai-pace/playbooks${a}`,{headers:{Authorization:`Bearer ${t}`,Accept:"application/json"}});if(!i.ok)throw new Error(`Unfairly Intelligence playbooks failed (${i.status})`);return(await i.json()).playbooks??[]}async function de(n,t){const e=await v();if(!e)throw new Error("Unfairly Intelligence is not enrolled. Run `unfairly setup` first.");const a=await c();if(a.paused)throw new Error("Unfairly Intelligence is paused. Run `unfairly intelligence resume` first.");const i=h(),o=h(),s=D.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:h(),installation_id:a.installation_id,occurred_at:new Date().toISOString(),source:"unknown",event_type:"session.started",evidence_level:"exact",session_id:o,workflow_id:i,playbook_id:n,playbook_version:t,attributes:{client_event:"session_start"}});await k(s);const l=(process.env.UNFAIRLY_API_URL??f).replace(/\/$/,""),r=await fetch(`${l}/api/ai-pace/playbooks`,{method:"POST",headers:{Authorization:`Bearer ${e}`,"Content-Type":"application/json"},body:JSON.stringify({action:"record",playbook_id:n,playbook_version:Number(t),event_type:"started",source_record_id:o,workflow_id:i})});if(!r.ok&&r.status<500)throw new Error(`Unfairly Intelligence playbook use failed (${r.status})`);return{workflow_id:i,queued:(await _()).length}}export{M as HISTORY_BACKFILL_DAYS,R as INTELLIGENCE_POLICY,w as RUNTIME_VERSION,m as paceAuthorization,P as refreshRepositoryPolicy,ae as runPaceBackfill,ne as runPaceCapture,se as runPaceConfig,q as runPaceEvidenceScan,pe as runPaceEvidenceWatch,$ as runPaceFlush,L as runPaceHeartbeat,ie as runPaceInstall,ce as runPacePause,de as runPacePlaybookUse,ue as runPacePlaybooks,re as runPacePolicy,oe as runPaceStatus,S as runPaceSweep,V as runPaceSync,le as runPaceUninstall};

package/dist/cmd/parse-share-input.d.ts

@@ -3,4 +3,3 @@ export type ParsedShareInput = {
     origin: string | null;
 };
 export declare function parseShareInput(input: string): ParsedShareInput;
-//# sourceMappingURL=parse-share-input.d.ts.map