unfairly 0.8.3 → 0.8.4

package/dist/pace/enroll.js

@@ -1,138 +1,2 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-/**
- * No-terminal connection for the plugin. On a session start without a
- * collector credential, the plugin starts (or continues) a browser-approved
- * enrollment and hands the person a link. Once approved, it claims a
- * credential bound to this installation. Only these two small files are kept.
- */
-const CredentialSchema = z.object({ installation_id: z.string().uuid(), secret: z.string().regex(/^[A-Za-z0-9_-]{43}$/), org_id: z.string().uuid() }).strict();
-const PendingSchema = z.object({ device_code: z.string(), user_code: z.string(), verification_uri: z.string().url(), expires_at: z.string() }).strict();
-const dir = () => path.join(os.homedir(), ".unfairly", "pace");
-export const collectorCredentialPath = () => process.env.UNFAIRLY_PACE_COLLECTOR ?? path.join(dir(), "collector.json");
-const pendingPath = () => process.env.UNFAIRLY_PACE_ENROLLMENT ?? path.join(dir(), "enrollment.json");
-async function readJson(file, schema) {
-    try {
-        const parsed = schema.safeParse(JSON.parse(await fs.readFile(file, "utf8")));
-        return parsed.success ? parsed.data : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function writeJson(file, value) {
-    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
-    await fs.writeFile(file, `${JSON.stringify(value)}\n`, { encoding: "utf8", mode: 0o600 });
-}
-export const readCollectorCredential = () => readJson(collectorCredentialPath(), CredentialSchema);
-export function collectorAuthorization(credential) {
-    return `Collector ${credential.installation_id}.${credential.secret}`;
-}
-/** One step of the enrollment state machine; safe to call on every session start. */
-export async function ensureEnrolled(input) {
-    const existing = await readCollectorCredential();
-    if (existing)
-        return { status: "connected", orgId: existing.org_id };
-    const call = input.fetchImpl ?? fetch;
-    const now = input.now ?? new Date();
-    const polled = await pollPendingEnrollment({ apiUrl: input.apiUrl, fetchImpl: call, now });
-    if (polled.status === "connected" || polled.status === "waiting")
-        return polled;
-    // No live enrollment, or it was denied, expired, or claimed elsewhere: start over.
-    const clients = input.clients.filter((client) => ["codex", "claude_code", "cursor", "gemini_cli"].includes(client));
-    const response = await call(`${input.apiUrl}/api/ai-pace/enroll`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ installation_id: input.installationId, platform: input.platform, arch: input.arch, clients, ...(input.orgHint ? { org_hint: input.orgHint } : {}) }),
-    });
-    if (!response.ok)
-        return { status: "unavailable" };
-    const started = await response.json();
-    await writeJson(pendingPath(), { device_code: started.device_code, user_code: started.user_code, verification_uri: started.verification_uri, expires_at: new Date(now.getTime() + started.expires_in * 1000).toISOString() });
-    return { status: "waiting", link: started.verification_uri, code: started.user_code };
-}
-/**
- * Checks the enrollment this machine is waiting on, without starting a new
- * one. Claims and stores the credential when the person has approved it.
- */
-export async function pollPendingEnrollment(input) {
-    const existing = await readCollectorCredential();
-    if (existing)
-        return { status: "connected", orgId: existing.org_id };
-    const pending = await readJson(pendingPath(), PendingSchema);
-    if (!pending || Date.parse(pending.expires_at) <= (input.now ?? new Date()).getTime())
-        return { status: "none" };
-    const call = input.fetchImpl ?? fetch;
-    const response = await call(`${input.apiUrl}/api/ai-pace/enroll/poll`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ device_code: pending.device_code }) });
-    const body = await response.json().catch(() => ({}));
-    if (body.status === "approved" && body.installation_id && body.secret && body.org_id) {
-        await writeJson(collectorCredentialPath(), CredentialSchema.parse({ installation_id: body.installation_id, secret: body.secret, org_id: body.org_id }));
-        await fs.unlink(pendingPath()).catch(() => undefined);
-        return { status: "connected", orgId: body.org_id };
-    }
-    if (body.status === "pending")
-        return { status: "waiting", link: pending.verification_uri, code: pending.user_code };
-    return { status: "none" };
-}
-/**
- * Keeps polling after the connect link is shown, so approving in the browser
- * connects this machine within seconds instead of at the next session start.
- * Stops when connected, when the enrollment ends, or at the deadline.
- */
-export async function awaitApproval(input) {
-    const clock = input.clock ?? Date.now;
-    const sleep = input.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-    const deadline = clock() + (input.deadlineMs ?? 16 * 60_000);
-    while (clock() < deadline) {
-        const state = await pollPendingEnrollment({ apiUrl: input.apiUrl, fetchImpl: input.fetchImpl, now: new Date(clock()) }).catch(() => ({ status: "waiting" }));
-        if (state.status === "connected")
-            return true;
-        if (state.status === "none")
-            return false;
-        await sleep(input.intervalMs ?? 5_000);
-    }
-    return false;
-}
-const approvalLockPath = () => path.join(path.dirname(pendingPath()), "approval-wait.json");
-/** At most one background poller per machine: sessions often start in bursts. */
-export async function acquireApprovalLock(now = Date.now()) {
-    const file = approvalLockPath();
-    try {
-        const lock = JSON.parse(await fs.readFile(file, "utf8"));
-        const fresh = typeof lock.started_at === "number" && now - lock.started_at < 17 * 60_000;
-        let alive = false;
-        try {
-            if (typeof lock.pid === "number") {
-                process.kill(lock.pid, 0);
-                alive = true;
-            }
-        }
-        catch {
-            alive = false;
-        }
-        if (fresh && alive)
-            return false;
-    }
-    catch {
-        // No lock yet.
-    }
-    await writeJson(file, { pid: process.pid, started_at: now });
-    return true;
-}
-export const releaseApprovalLock = () => fs.unlink(approvalLockPath()).catch(() => undefined);
-/** What a SessionStart hook prints: a visible message for the person plus context so the assistant can repeat the link. */
-export function sessionStartOutput(state, hookEventName = "SessionStart") {
-    if (state.status !== "waiting")
-        return "";
-    const message = `Connect Unfairly Intelligence to your team: open ${state.link} and approve code ${state.code}. It shares session metadata only, never prompts or code.`;
-    return JSON.stringify({
-        systemMessage: message,
-        hookSpecificOutput: {
-            hookEventName,
-            additionalContext: `The Unfairly Intelligence plugin is installed but this machine is not connected yet. At a natural point, tell the user once: "${message}" Do not repeat it after they connect.`,
-        },
-    });
-}
-//# sourceMappingURL=enroll.js.map
+import c from"node:fs/promises";import x from"node:os";import l from"node:path";import{z as a}from"zod";const f=a.object({installation_id:a.string().uuid(),secret:a.string().regex(/^[A-Za-z0-9_-]{43}$/),org_id:a.string().uuid()}).strict(),S=a.object({device_code:a.string(),user_code:a.string(),verification_uri:a.string().url(),expires_at:a.string()}).strict(),g=()=>l.join(x.homedir(),".unfairly","pace"),_=()=>process.env.UNFAIRLY_PACE_COLLECTOR??l.join(g(),"collector.json"),d=()=>process.env.UNFAIRLY_PACE_ENROLLMENT??l.join(g(),"enrollment.json");async function m(e,n){try{const t=n.safeParse(JSON.parse(await c.readFile(e,"utf8")));return t.success?t.data:null}catch{return null}}async function u(e,n){await c.mkdir(l.dirname(e),{recursive:!0,mode:448}),await c.writeFile(e,`${JSON.stringify(n)}
+`,{encoding:"utf8",mode:384})}const h=()=>m(_(),f);function C(e){return`Collector ${e.installation_id}.${e.secret}`}async function P(e){const n=await h();if(n)return{status:"connected",orgId:n.org_id};const t=e.fetchImpl??fetch,r=e.now??new Date,i=await w({apiUrl:e.apiUrl,fetchImpl:t,now:r});if(i.status==="connected"||i.status==="waiting")return i;const o=e.clients.filter(v=>["codex","claude_code","cursor","gemini_cli"].includes(v)),p=await t(`${e.apiUrl}/api/ai-pace/enroll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({installation_id:e.installationId,platform:e.platform,arch:e.arch,clients:o,...e.orgHint?{org_hint:e.orgHint}:{}})});if(!p.ok)return{status:"unavailable"};const s=await p.json();return await u(d(),{device_code:s.device_code,user_code:s.user_code,verification_uri:s.verification_uri,expires_at:new Date(r.getTime()+s.expires_in*1e3).toISOString()}),{status:"waiting",link:s.verification_uri,code:s.user_code}}async function w(e){const n=await h();if(n)return{status:"connected",orgId:n.org_id};const t=await m(d(),S);if(!t||Date.parse(t.expires_at)<=(e.now??new Date).getTime())return{status:"none"};const o=await(await(e.fetchImpl??fetch)(`${e.apiUrl}/api/ai-pace/enroll/poll`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:t.device_code})})).json().catch(()=>({}));return o.status==="approved"&&o.installation_id&&o.secret&&o.org_id?(await u(_(),f.parse({installation_id:o.installation_id,secret:o.secret,org_id:o.org_id})),await c.unlink(d()).catch(()=>{}),{status:"connected",orgId:o.org_id}):o.status==="pending"?{status:"waiting",link:t.verification_uri,code:t.user_code}:{status:"none"}}async function A(e){const n=e.clock??Date.now,t=e.sleep??(i=>new Promise(o=>setTimeout(o,i))),r=n()+(e.deadlineMs??16*6e4);for(;n()<r;){const i=await w({apiUrl:e.apiUrl,fetchImpl:e.fetchImpl,now:new Date(n())}).catch(()=>({status:"waiting"}));if(i.status==="connected")return!0;if(i.status==="none")return!1;await t(e.intervalMs??5e3)}return!1}const y=()=>l.join(l.dirname(d()),"approval-wait.json");async function N(e=Date.now()){const n=y();try{const t=JSON.parse(await c.readFile(n,"utf8")),r=typeof t.started_at=="number"&&e-t.started_at<17*6e4;let i=!1;try{typeof t.pid=="number"&&(process.kill(t.pid,0),i=!0)}catch{i=!1}if(r&&i)return!1}catch{}return await u(n,{pid:process.pid,started_at:e}),!0}const T=()=>c.unlink(y()).catch(()=>{});function U(e,n="SessionStart"){if(e.status!=="waiting")return"";const t=`Connect Unfairly Intelligence to your team: open ${e.link} and approve code ${e.code}. It shares session metadata only, never prompts or code.`;return JSON.stringify({systemMessage:t,hookSpecificOutput:{hookEventName:n,additionalContext:`The Unfairly Intelligence plugin is installed but this machine is not connected yet. At a natural point, tell the user once: "${t}" Do not repeat it after they connect.`}})}export{N as acquireApprovalLock,A as awaitApproval,C as collectorAuthorization,_ as collectorCredentialPath,P as ensureEnrolled,w as pollPendingEnrollment,h as readCollectorCredential,T as releaseApprovalLock,U as sessionStartOutput};

package/dist/pace/identity.d.ts

@@ -7,4 +7,3 @@ export declare function deterministicWorkflowId(input: {
     source: string;
     sessionId: string;
 }): string;
-//# sourceMappingURL=identity.d.ts.map

package/dist/pace/identity.js

@@ -1,17 +1 @@
-import { createHash } from "node:crypto";
-/**
- * Produces a stable, opaque UUID for one AI workflow without exposing the raw
- * installation or session identifiers in downstream joins.
- */
-export function deterministicWorkflowId(input) {
-    const bytes = createHash("sha256")
-        .update(`${input.installationId}\u0000${input.source}\u0000${input.sessionId}`, "utf8")
-        .digest()
-        .subarray(0, 16);
-    // Mark the deterministic hash as a name-based UUID and set the RFC variant.
-    bytes[6] = (bytes[6] & 0x0f) | 0x50;
-    bytes[8] = (bytes[8] & 0x3f) | 0x80;
-    const hex = bytes.toString("hex");
-    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
-}
-//# sourceMappingURL=identity.js.map
+import{createHash as i}from"node:crypto";function r(t){const e=i("sha256").update(`${t.installationId}\0${t.source}\0${t.sessionId}`,"utf8").digest().subarray(0,16);e[6]=e[6]&15|80,e[8]=e[8]&63|128;const s=e.toString("hex");return`${s.slice(0,8)}-${s.slice(8,12)}-${s.slice(12,16)}-${s.slice(16,20)}-${s.slice(20)}`}export{r as deterministicWorkflowId};

package/dist/pace/install.d.ts

@@ -25,4 +25,3 @@ export type IntelligenceInstallerDeps = {
     }) => Promise<string>;
 };
 export declare function installIntelligence(deps: IntelligenceInstallerDeps): Promise<IntelligenceInstallResult>;
-//# sourceMappingURL=install.d.ts.map

package/dist/pace/install.js

@@ -1,127 +1,4 @@
-import { spawnSync } from "node:child_process";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-const MARKETPLACE_NAME = "unfairly-intelligence";
-function defaultPluginSource() {
-    const moduleDir = path.dirname(fileURLToPath(import.meta.url));
-    const packageRoot = path.resolve(moduleDir, "../..");
-    return path.join(packageRoot, "plugin");
-}
-function defaultRun(command, args) {
-    const result = spawnSync(command, args, { encoding: "utf8", timeout: 30_000 });
-    const detail = `${result.stdout || result.stderr || result.error?.message || ""}`.trim().slice(0, 500);
-    return { ok: !result.error && result.status === 0, detail };
-}
-async function defaultInstallRuntime(input) {
-    await fs.mkdir(input.prefix, { recursive: true, mode: 0o700 });
-    const result = spawnSync("npm", [
-        "install", "--prefix", input.prefix, `unfairly@${input.version}`,
-        "--omit=dev", "--no-audit", "--no-fund",
-    ], { encoding: "utf8", timeout: 120_000 });
-    if (result.error || result.status !== 0) {
-        throw new Error(`Could not install the Unfairly Intelligence runtime: ${`${result.stderr || result.error?.message || "unknown error"}`.trim()}`);
-    }
-    return path.join(input.prefix, "node_modules", "unfairly", "dist", "index.js");
-}
-async function requireDirectory(directory) {
-    const stat = await fs.stat(directory).catch(() => null);
-    if (!stat?.isDirectory())
-        throw new Error(`Bundled Unfairly Intelligence plugin not found at ${directory}`);
-}
-async function writeMarketplace(root, pluginSource) {
-    const pluginTarget = path.join(root, "plugins", "ai-pace");
-    await fs.rm(pluginTarget, { recursive: true, force: true });
-    await fs.mkdir(path.dirname(pluginTarget), { recursive: true, mode: 0o700 });
-    await fs.cp(pluginSource, pluginTarget, { recursive: true });
-    await fs.mkdir(path.join(root, ".agents", "plugins"), { recursive: true, mode: 0o700 });
-    await fs.mkdir(path.join(root, ".claude-plugin"), { recursive: true, mode: 0o700 });
-    const codexMarketplace = {
-        name: MARKETPLACE_NAME,
-        interface: { displayName: "Unfairly Intelligence" },
-        plugins: [{
-                name: "ai-pace",
-                source: { source: "local", path: "./plugins/ai-pace" },
-                policy: { installation: "AVAILABLE", authentication: "ON_INSTALL" },
-                category: "Productivity",
-            }],
-    };
-    const claudeMarketplace = {
-        name: MARKETPLACE_NAME,
-        description: "Unfairly Intelligence for AI-enabled teams.",
-        owner: { name: "Unfairly", url: "https://unfairly.ai" },
-        plugins: [{
-                name: "ai-pace",
-                description: "Content-free workflow evidence and reusable company playbooks.",
-                version: "0.1.0",
-                source: "./plugins/ai-pace",
-                category: "productivity",
-            }],
-    };
-    await fs.writeFile(path.join(root, ".agents", "plugins", "marketplace.json"), `${JSON.stringify(codexMarketplace, null, 2)}\n`, { mode: 0o600 });
-    await fs.writeFile(path.join(root, ".claude-plugin", "marketplace.json"), `${JSON.stringify(claudeMarketplace, null, 2)}\n`, { mode: 0o600 });
-    return pluginTarget;
-}
-function requireCommand(result, label) {
-    if (!result.ok)
-        throw new Error(`${label} failed${result.detail ? `: ${result.detail}` : ""}`);
-}
-export async function installIntelligence(deps) {
-    const home = deps.home ?? os.homedir();
-    const root = path.join(home, ".unfairly");
-    const runtimeRoot = path.join(root, "runtime", deps.version);
-    const marketplaceRoot = path.join(root, "marketplace");
-    const pluginSource = deps.pluginSource ?? defaultPluginSource();
-    const run = deps.run ?? defaultRun;
-    await requireDirectory(pluginSource);
-    const runtimeEntrypoint = await (deps.installRuntime ?? defaultInstallRuntime)({ version: deps.version, prefix: runtimeRoot });
-    const pluginTarget = await writeMarketplace(marketplaceRoot, pluginSource);
-    const runtimePointer = path.join(root, "runtime", "current.json");
-    await fs.mkdir(path.dirname(runtimePointer), { recursive: true, mode: 0o700 });
-    await fs.writeFile(runtimePointer, `${JSON.stringify({ version: deps.version, node: process.execPath, entrypoint: runtimeEntrypoint }, null, 2)}\n`, { mode: 0o600 });
-    const activations = [];
-    const ownedPaths = [runtimeRoot, marketplaceRoot, runtimePointer];
-    const installed = new Map(deps.clients.map((client) => [client.client, client.installed]));
-    if (installed.get("codex")) {
-        run("codex", ["plugin", "remove", `ai-pace@${MARKETPLACE_NAME}`, "--json"]);
-        run("codex", ["plugin", "marketplace", "remove", MARKETPLACE_NAME]);
-        requireCommand(run("codex", ["plugin", "marketplace", "add", marketplaceRoot, "--json"]), "Codex marketplace activation");
-        requireCommand(run("codex", ["plugin", "add", `ai-pace@${MARKETPLACE_NAME}`, "--json"]), "Codex plugin activation");
-        activations.push({ client: "codex", status: "activated", detail: "marketplace plugin installed" });
-    }
-    if (installed.get("claude_code")) {
-        run("claude", ["plugin", "uninstall", `ai-pace@${MARKETPLACE_NAME}`, "--scope", "user"]);
-        run("claude", ["plugin", "marketplace", "remove", MARKETPLACE_NAME, "--scope", "user"]);
-        requireCommand(run("claude", ["plugin", "marketplace", "add", marketplaceRoot, "--scope", "user"]), "Claude marketplace activation");
-        requireCommand(run("claude", ["plugin", "install", `ai-pace@${MARKETPLACE_NAME}`, "--scope", "user"]), "Claude plugin activation");
-        activations.push({ client: "claude_code", status: "activated", detail: "marketplace plugin installed" });
-    }
-    if (installed.get("cursor")) {
-        const cursorTarget = path.join(home, ".cursor", "plugins", "local", "ai-pace");
-        await fs.rm(cursorTarget, { recursive: true, force: true });
-        await fs.mkdir(path.dirname(cursorTarget), { recursive: true, mode: 0o700 });
-        await fs.cp(pluginTarget, cursorTarget, { recursive: true });
-        ownedPaths.push(cursorTarget);
-        activations.push({ client: "cursor", status: "activated", detail: "local plugin installed; reload Cursor to activate" });
-    }
-    if (installed.get("gemini_cli")) {
-        const geminiTarget = path.join(home, ".gemini", "extensions", "unfairly-intelligence");
-        await fs.rm(geminiTarget, { recursive: true, force: true });
-        await fs.mkdir(path.dirname(geminiTarget), { recursive: true, mode: 0o700 });
-        await fs.cp(path.join(pluginTarget, "gemini"), geminiTarget, { recursive: true });
-        const hooksPath = path.join(geminiTarget, "hooks", "hooks.json");
-        const hooks = await fs.readFile(hooksPath, "utf8");
-        const stableCommand = `${JSON.stringify(process.execPath)} ${JSON.stringify(runtimeEntrypoint)} intelligence capture`;
-        await fs.writeFile(hooksPath, hooks.replaceAll("unfairly pace capture", stableCommand), { mode: 0o600 });
-        ownedPaths.push(geminiTarget);
-        activations.push({ client: "gemini_cli", status: "activated", detail: "Gemini extension installed" });
-    }
-    for (const client of deps.clients) {
-        if (client.installed && !activations.some((activation) => activation.client === client.client)) {
-            activations.push({ client: client.client, status: "skipped", detail: "no passive lifecycle hook surface" });
-        }
-    }
-    return { runtime_entrypoint: runtimeEntrypoint, marketplace_root: marketplaceRoot, activations, owned_paths: ownedPaths };
-}
-//# sourceMappingURL=install.js.map
+import{spawnSync as y}from"node:child_process";import t from"node:fs/promises";import x from"node:os";import i from"node:path";import{fileURLToPath as $}from"node:url";const c="unfairly-intelligence";function _(){const e=i.dirname($(import.meta.url)),n=i.resolve(e,"../..");return i.join(n,"plugin")}function C(e,n){const r=y(e,n,{encoding:"utf8",timeout:3e4}),u=`${r.stdout||r.stderr||r.error?.message||""}`.trim().slice(0,500);return{ok:!r.error&&r.status===0,detail:u}}async function S(e){await t.mkdir(e.prefix,{recursive:!0,mode:448});const n=y("npm",["install","--prefix",e.prefix,`unfairly@${e.version}`,"--omit=dev","--no-audit","--no-fund"],{encoding:"utf8",timeout:12e4});if(n.error||n.status!==0)throw new Error(`Could not install the Unfairly Intelligence runtime: ${`${n.stderr||n.error?.message||"unknown error"}`.trim()}`);return i.join(e.prefix,"node_modules","unfairly","dist","index.js")}async function A(e){if(!(await t.stat(e).catch(()=>null))?.isDirectory())throw new Error(`Bundled Unfairly Intelligence plugin not found at ${e}`)}async function I(e,n){const r=i.join(e,"plugins","ai-pace");await t.rm(r,{recursive:!0,force:!0}),await t.mkdir(i.dirname(r),{recursive:!0,mode:448}),await t.cp(n,r,{recursive:!0}),await t.mkdir(i.join(e,".agents","plugins"),{recursive:!0,mode:448}),await t.mkdir(i.join(e,".claude-plugin"),{recursive:!0,mode:448});const u={name:c,interface:{displayName:"Unfairly Intelligence"},plugins:[{name:"ai-pace",source:{source:"local",path:"./plugins/ai-pace"},policy:{installation:"AVAILABLE",authentication:"ON_INSTALL"},category:"Productivity"}]},l={name:c,description:"Unfairly Intelligence for AI-enabled teams.",owner:{name:"Unfairly",url:"https://unfairly.ai"},plugins:[{name:"ai-pace",description:"Content-free workflow evidence and reusable company playbooks.",version:"0.1.0",source:"./plugins/ai-pace",category:"productivity"}]};return await t.writeFile(i.join(e,".agents","plugins","marketplace.json"),`${JSON.stringify(u,null,2)}
+`,{mode:384}),await t.writeFile(i.join(e,".claude-plugin","marketplace.json"),`${JSON.stringify(l,null,2)}
+`,{mode:384}),r}function m(e,n){if(!e.ok)throw new Error(`${n} failed${e.detail?`: ${e.detail}`:""}`)}async function L(e){const n=e.home??x.homedir(),r=i.join(n,".unfairly"),u=i.join(r,"runtime",e.version),l=i.join(r,"marketplace"),v=e.pluginSource??_(),o=e.run??C;await A(v);const g=await(e.installRuntime??S)({version:e.version,prefix:u}),k=await I(l,v),f=i.join(r,"runtime","current.json");await t.mkdir(i.dirname(f),{recursive:!0,mode:448}),await t.writeFile(f,`${JSON.stringify({version:e.version,node:process.execPath,entrypoint:g},null,2)}
+`,{mode:384});const s=[],w=[u,l,f],d=new Map(e.clients.map(a=>[a.client,a.installed]));if(d.get("codex")&&(o("codex",["plugin","remove",`ai-pace@${c}`,"--json"]),o("codex",["plugin","marketplace","remove",c]),m(o("codex",["plugin","marketplace","add",l,"--json"]),"Codex marketplace activation"),m(o("codex",["plugin","add",`ai-pace@${c}`,"--json"]),"Codex plugin activation"),s.push({client:"codex",status:"activated",detail:"marketplace plugin installed"})),d.get("claude_code")&&(o("claude",["plugin","uninstall",`ai-pace@${c}`,"--scope","user"]),o("claude",["plugin","marketplace","remove",c,"--scope","user"]),m(o("claude",["plugin","marketplace","add",l,"--scope","user"]),"Claude marketplace activation"),m(o("claude",["plugin","install",`ai-pace@${c}`,"--scope","user"]),"Claude plugin activation"),s.push({client:"claude_code",status:"activated",detail:"marketplace plugin installed"})),d.get("cursor")){const a=i.join(n,".cursor","plugins","local","ai-pace");await t.rm(a,{recursive:!0,force:!0}),await t.mkdir(i.dirname(a),{recursive:!0,mode:448}),await t.cp(k,a,{recursive:!0}),w.push(a),s.push({client:"cursor",status:"activated",detail:"local plugin installed; reload Cursor to activate"})}if(d.get("gemini_cli")){const a=i.join(n,".gemini","extensions","unfairly-intelligence");await t.rm(a,{recursive:!0,force:!0}),await t.mkdir(i.dirname(a),{recursive:!0,mode:448}),await t.cp(i.join(k,"gemini"),a,{recursive:!0});const p=i.join(a,"hooks","hooks.json"),h=await t.readFile(p,"utf8"),j=`${JSON.stringify(process.execPath)} ${JSON.stringify(g)} intelligence capture`;await t.writeFile(p,h.replaceAll("unfairly pace capture",j),{mode:384}),w.push(a),s.push({client:"gemini_cli",status:"activated",detail:"Gemini extension installed"})}for(const a of e.clients)a.installed&&!s.some(p=>p.client===a.client)&&s.push({client:a.client,status:"skipped",detail:"no passive lifecycle hook surface"});return{runtime_entrypoint:g,marketplace_root:l,activations:s,owned_paths:w}}export{L as installIntelligence};

package/dist/pace/local-evidence.d.ts

@@ -72,4 +72,3 @@ export declare function scanLocalEvidence(input?: {
     events: PaceEvent[];
     baselineRoots: string[];
 }>;
-//# sourceMappingURL=local-evidence.d.ts.map

package/dist/pace/local-evidence.js

@@ -1,228 +1,2 @@
-import { createHash, randomUUID } from "node:crypto";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-import { PaceEventSchema } from "./schema.js";
-import { deterministicWorkflowId } from "./identity.js";
-const sourceAppSchema = z.enum(["chatgpt", "claude_desktop", "other"]);
-const evidenceRootSchema = z.object({
-    path: z.string().trim().min(1),
-    label: z.string().trim().min(1).max(128),
-    kind: z.enum(["output", "app_state"]),
-    source_app: sourceAppSchema.optional(),
-    extensions: z.array(z.string().trim().min(1).max(32)).max(100).optional(),
-}).strict().superRefine((root, context) => {
-    if (root.kind === "app_state" && !root.source_app) {
-        context.addIssue({ code: z.ZodIssueCode.custom, path: ["source_app"], message: "app_state roots require source_app" });
-    }
-});
-export const localEvidencePolicySchema = z.object({
-    version: z.literal(1),
-    include_file_names: z.boolean().default(false),
-    scan_interval_seconds: z.number().int().min(15).max(3600).default(60),
-    max_files_per_root: z.number().int().min(1).max(50_000).default(5_000),
-    roots: z.array(evidenceRootSchema).max(50),
-}).strict();
-const DEFAULT_OUTPUT_EXTENSIONS = new Set([
-    ".doc", ".docx", ".gdoc", ".md", ".pdf", ".ppt", ".pptx", ".gslides",
-    ".xls", ".xlsx", ".gsheet", ".csv", ".tsv", ".txt", ".rtf", ".html",
-    ".js", ".jsx", ".ts", ".tsx", ".py", ".go", ".rs", ".java", ".sql",
-]);
-const IGNORED_DIRECTORIES = new Set([".git", "node_modules", ".next", "dist", "build"]);
-export function localEvidencePolicyPath() {
-    return process.env.UNFAIRLY_PACE_EVIDENCE_POLICY ?? path.join(os.homedir(), ".unfairly", "pace", "evidence-policy.json");
-}
-export function localEvidenceStatePath() {
-    return process.env.UNFAIRLY_PACE_EVIDENCE_STATE ?? path.join(os.homedir(), ".unfairly", "pace", "evidence-state.json");
-}
-function expandHome(value) {
-    if (value === "~")
-        return os.homedir();
-    if (value.startsWith(`~${path.sep}`))
-        return path.join(os.homedir(), value.slice(2));
-    return path.resolve(value);
-}
-export async function readLocalEvidencePolicy(policyPath = localEvidencePolicyPath()) {
-    const raw = await fs.readFile(policyPath, "utf8").catch((error) => {
-        if (error.code === "ENOENT")
-            throw new Error(`Unfairly Intelligence local evidence policy not found: ${policyPath}`);
-        throw error;
-    });
-    const policy = localEvidencePolicySchema.parse(JSON.parse(raw));
-    const labels = new Set();
-    for (const root of policy.roots) {
-        if (labels.has(root.label))
-            throw new Error(`Unfairly Intelligence evidence root labels must be unique: ${root.label}`);
-        const resolved = expandHome(root.path);
-        if (resolved === path.parse(resolved).root || resolved === path.resolve(os.homedir())) {
-            throw new Error(`Unfairly Intelligence evidence roots must be narrower than a filesystem or home directory: ${root.path}`);
-        }
-        labels.add(root.label);
-    }
-    return policy;
-}
-function fingerprint(label, relativePath) {
-    return createHash("sha256").update(label).update("\0").update(relativePath).digest("hex");
-}
-function artifactType(extension) {
-    if ([".ppt", ".pptx", ".gslides"].includes(extension))
-        return "deck";
-    if ([".xls", ".xlsx", ".gsheet", ".csv", ".tsv"].includes(extension))
-        return "spreadsheet";
-    if ([".js", ".jsx", ".ts", ".tsx", ".py", ".go", ".rs", ".java", ".sql"].includes(extension))
-        return "code";
-    if ([".doc", ".docx", ".gdoc", ".md", ".pdf", ".txt", ".rtf", ".html"].includes(extension))
-        return "document";
-    return "other";
-}
-function localSession(root, occurredAt) {
-    return fingerprint(root.label, occurredAt.toISOString().slice(0, 10)).slice(0, 32);
-}
-function filesChangedBucket(value) {
-    if (value <= 1)
-        return "one";
-    if (value <= 5)
-        return "two_to_five";
-    if (value <= 20)
-        return "six_to_twenty";
-    return "over_twenty";
-}
-async function walkRoot(root, maxFiles) {
-    const absoluteRoot = expandHome(root.path);
-    const allowed = root.extensions?.length
-        ? new Set(root.extensions.map((item) => item.startsWith(".") ? item.toLowerCase() : `.${item.toLowerCase()}`))
-        : DEFAULT_OUTPUT_EXTENSIONS;
-    const facts = [];
-    const pending = [absoluteRoot];
-    while (pending.length && facts.length < maxFiles) {
-        const directory = pending.pop();
-        let entries;
-        try {
-            entries = await fs.readdir(directory, { withFileTypes: true });
-        }
-        catch {
-            continue;
-        }
-        for (const entry of entries) {
-            if (facts.length >= maxFiles)
-                break;
-            if (entry.name.startsWith(".") || IGNORED_DIRECTORIES.has(entry.name))
-                continue;
-            const fullPath = path.join(directory, entry.name);
-            if (entry.isDirectory()) {
-                pending.push(fullPath);
-                continue;
-            }
-            if (!entry.isFile())
-                continue;
-            const extension = path.extname(entry.name).toLowerCase();
-            if (root.kind === "output" && !allowed.has(extension))
-                continue;
-            const relativePath = path.relative(absoluteRoot, fullPath);
-            const stat = await fs.stat(fullPath).catch(() => null);
-            if (!stat?.isFile())
-                continue;
-            facts.push({ fingerprint: fingerprint(root.label, relativePath), relativePath, extension, size: stat.size, mtimeMs: stat.mtimeMs });
-        }
-    }
-    return facts;
-}
-async function readState() {
-    try {
-        const parsed = JSON.parse(await fs.readFile(localEvidenceStatePath(), "utf8"));
-        if (parsed.version === 1 && Array.isArray(parsed.initialized_roots) && parsed.files && typeof parsed.files === "object")
-            return parsed;
-    }
-    catch {
-        // A missing or invalid state file is safely rebuilt as a baseline.
-    }
-    return { version: 1, initialized_roots: [], files: {} };
-}
-async function writeState(state) {
-    const statePath = localEvidenceStatePath();
-    await fs.mkdir(path.dirname(statePath), { recursive: true, mode: 0o700 });
-    await fs.writeFile(statePath, `${JSON.stringify(state, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
-    await fs.chmod(statePath, 0o600).catch(() => undefined);
-}
-function outputEvent(input) {
-    const sourceApp = input.root.source_app ?? "other";
-    const occurredAt = new Date(input.fact.mtimeMs);
-    const sessionId = sourceApp !== "other" ? localSession(input.root, occurredAt) : undefined;
-    const workflowId = input.installationId && sessionId
-        ? deterministicWorkflowId({ installationId: input.installationId, source: sourceApp, sessionId })
-        : undefined;
-    return PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: randomUUID(),
-        installation_id: input.installationId,
-        occurred_at: occurredAt.toISOString(),
-        source: "local_filesystem",
-        event_type: input.previous ? "artifact.modified" : "artifact.created",
-        evidence_level: "exact",
-        session_id: sessionId,
-        workflow_id: workflowId,
-        artifact_type: artifactType(input.fact.extension),
-        attributes: {
-            client_event: "local_output",
-            local_signal: "approved_output",
-        },
-    });
-}
-function appActivityEvent(input) {
-    const latest = Math.max(...input.facts.map((fact) => fact.mtimeMs));
-    const occurredAt = new Date(latest);
-    const sessionId = localSession(input.root, occurredAt);
-    const workflowId = input.installationId
-        ? deterministicWorkflowId({ installationId: input.installationId, source: input.root.source_app, sessionId })
-        : undefined;
-    return PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: randomUUID(),
-        installation_id: input.installationId,
-        occurred_at: occurredAt.toISOString(),
-        source: input.root.source_app,
-        event_type: "desktop.activity",
-        evidence_level: "correlated",
-        session_id: sessionId,
-        workflow_id: workflowId,
-        attributes: {
-            client_event: "local_activity",
-            files_changed_bucket: filesChangedBucket(input.facts.length),
-            local_signal: "app_state_change",
-        },
-    });
-}
-export async function scanLocalEvidence(input = {}) {
-    const policy = await readLocalEvidencePolicy(input.policyPath);
-    const state = await readState();
-    const initialized = new Set(state.initialized_roots);
-    const nextFiles = {};
-    const events = [];
-    const baselineRoots = [];
-    for (const root of policy.roots) {
-        const facts = await walkRoot(root, policy.max_files_per_root);
-        const isBaseline = !initialized.has(root.label);
-        if (isBaseline)
-            baselineRoots.push(root.label);
-        const changed = [];
-        for (const fact of facts) {
-            const previous = state.files[fact.fingerprint];
-            nextFiles[fact.fingerprint] = { size: fact.size, mtime_ms: fact.mtimeMs };
-            if (!isBaseline && (!previous || previous.size !== fact.size || previous.mtime_ms !== fact.mtimeMs))
-                changed.push({ fact, previous });
-        }
-        if (root.kind === "output") {
-            events.push(...changed.map(({ fact, previous }) => outputEvent({ root, fact, previous, installationId: input.installationId })));
-        }
-        else if (changed.length) {
-            events.push(appActivityEvent({ root, facts: changed.map(({ fact }) => fact), installationId: input.installationId }));
-        }
-        initialized.add(root.label);
-    }
-    await writeState({ version: 1, initialized_roots: [...initialized], files: nextFiles });
-    return { events, baselineRoots };
-}
-//# sourceMappingURL=local-evidence.js.map
+import{createHash as b,randomUUID as v}from"node:crypto";import m from"node:fs/promises";import h from"node:os";import c from"node:path";import{z as a}from"zod";import{PaceEventSchema as w}from"./schema.js";import{deterministicWorkflowId as y}from"./identity.js";const S=a.enum(["chatgpt","claude_desktop","other"]),k=a.object({path:a.string().trim().min(1),label:a.string().trim().min(1).max(128),kind:a.enum(["output","app_state"]),source_app:S.optional(),extensions:a.array(a.string().trim().min(1).max(32)).max(100).optional()}).strict().superRefine((e,t)=>{e.kind==="app_state"&&!e.source_app&&t.addIssue({code:a.ZodIssueCode.custom,path:["source_app"],message:"app_state roots require source_app"})}),j=a.object({version:a.literal(1),include_file_names:a.boolean().default(!1),scan_interval_seconds:a.number().int().min(15).max(3600).default(60),max_files_per_root:a.number().int().min(1).max(5e4).default(5e3),roots:a.array(k).max(50)}).strict(),A=new Set([".doc",".docx",".gdoc",".md",".pdf",".ppt",".pptx",".gslides",".xls",".xlsx",".gsheet",".csv",".tsv",".txt",".rtf",".html",".js",".jsx",".ts",".tsx",".py",".go",".rs",".java",".sql"]),P=new Set([".git","node_modules",".next","dist","build"]);function z(){return process.env.UNFAIRLY_PACE_EVIDENCE_POLICY??c.join(h.homedir(),".unfairly","pace","evidence-policy.json")}function g(){return process.env.UNFAIRLY_PACE_EVIDENCE_STATE??c.join(h.homedir(),".unfairly","pace","evidence-state.json")}function x(e){return e==="~"?h.homedir():e.startsWith(`~${c.sep}`)?c.join(h.homedir(),e.slice(2)):c.resolve(e)}async function N(e=z()){const t=await m.readFile(e,"utf8").catch(o=>{throw o.code==="ENOENT"?new Error(`Unfairly Intelligence local evidence policy not found: ${e}`):o}),n=j.parse(JSON.parse(t)),i=new Set;for(const o of n.roots){if(i.has(o.label))throw new Error(`Unfairly Intelligence evidence root labels must be unique: ${o.label}`);const r=x(o.path);if(r===c.parse(r).root||r===c.resolve(h.homedir()))throw new Error(`Unfairly Intelligence evidence roots must be narrower than a filesystem or home directory: ${o.path}`);i.add(o.label)}return n}function I(e,t){return b("sha256").update(e).update("\0").update(t).digest("hex")}function O(e){return[".ppt",".pptx",".gslides"].includes(e)?"deck":[".xls",".xlsx",".gsheet",".csv",".tsv"].includes(e)?"spreadsheet":[".js",".jsx",".ts",".tsx",".py",".go",".rs",".java",".sql"].includes(e)?"code":[".doc",".docx",".gdoc",".md",".pdf",".txt",".rtf",".html"].includes(e)?"document":"other"}function E(e,t){return I(e.label,t.toISOString().slice(0,10)).slice(0,32)}function C(e){return e<=1?"one":e<=5?"two_to_five":e<=20?"six_to_twenty":"over_twenty"}async function R(e,t){const n=x(e.path),i=e.extensions?.length?new Set(e.extensions.map(f=>f.startsWith(".")?f.toLowerCase():`.${f.toLowerCase()}`)):A,o=[],r=[n];for(;r.length&&o.length<t;){const f=r.pop();let l;try{l=await m.readdir(f,{withFileTypes:!0})}catch{continue}for(const u of l){if(o.length>=t)break;if(u.name.startsWith(".")||P.has(u.name))continue;const _=c.join(f,u.name);if(u.isDirectory()){r.push(_);continue}if(!u.isFile())continue;const p=c.extname(u.name).toLowerCase();if(e.kind==="output"&&!i.has(p))continue;const s=c.relative(n,_),d=await m.stat(_).catch(()=>null);d?.isFile()&&o.push({fingerprint:I(e.label,s),relativePath:s,extension:p,size:d.size,mtimeMs:d.mtimeMs})}}return o}async function T(){try{const e=JSON.parse(await m.readFile(g(),"utf8"));if(e.version===1&&Array.isArray(e.initialized_roots)&&e.files&&typeof e.files=="object")return e}catch{}return{version:1,initialized_roots:[],files:{}}}async function U(e){const t=g();await m.mkdir(c.dirname(t),{recursive:!0,mode:448}),await m.writeFile(t,`${JSON.stringify(e,null,2)}
+`,{encoding:"utf8",mode:384}),await m.chmod(t,384).catch(()=>{})}function D(e){const t=e.root.source_app??"other",n=new Date(e.fact.mtimeMs),i=t!=="other"?E(e.root,n):void 0,o=e.installationId&&i?y({installationId:e.installationId,source:t,sessionId:i}):void 0;return w.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:v(),installation_id:e.installationId,occurred_at:n.toISOString(),source:"local_filesystem",event_type:e.previous?"artifact.modified":"artifact.created",evidence_level:"exact",session_id:i,workflow_id:o,artifact_type:O(e.fact.extension),attributes:{client_event:"local_output",local_signal:"approved_output"}})}function F(e){const t=Math.max(...e.facts.map(r=>r.mtimeMs)),n=new Date(t),i=E(e.root,n),o=e.installationId?y({installationId:e.installationId,source:e.root.source_app,sessionId:i}):void 0;return w.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:v(),installation_id:e.installationId,occurred_at:n.toISOString(),source:e.root.source_app,event_type:"desktop.activity",evidence_level:"correlated",session_id:i,workflow_id:o,attributes:{client_event:"local_activity",files_changed_bucket:C(e.facts.length),local_signal:"app_state_change"}})}async function B(e={}){const t=await N(e.policyPath),n=await T(),i=new Set(n.initialized_roots),o={},r=[],f=[];for(const l of t.roots){const u=await R(l,t.max_files_per_root),_=!i.has(l.label);_&&f.push(l.label);const p=[];for(const s of u){const d=n.files[s.fingerprint];o[s.fingerprint]={size:s.size,mtime_ms:s.mtimeMs},!_&&(!d||d.size!==s.size||d.mtime_ms!==s.mtimeMs)&&p.push({fact:s,previous:d})}l.kind==="output"?r.push(...p.map(({fact:s,previous:d})=>D({root:l,fact:s,previous:d,installationId:e.installationId}))):p.length&&r.push(F({root:l,facts:p.map(({fact:s})=>s),installationId:e.installationId})),i.add(l.label)}return await U({version:1,initialized_roots:[...i],files:o}),{events:r,baselineRoots:f}}export{z as localEvidencePolicyPath,j as localEvidencePolicySchema,g as localEvidenceStatePath,N as readLocalEvidencePolicy,B as scanLocalEvidence};

package/dist/pace/local-sessions.d.ts

@@ -45,4 +45,3 @@ export declare function collectLocalSessions(options: {
     since: number;
     home?: string;
 }): Promise<LocalSessionSummary[]>;
-//# sourceMappingURL=local-sessions.d.ts.map