wayfind 2.0.9 → 2.0.10

package/bin/content-store.js

@@ -39,11 +39,14 @@ const ENTRY_HEADER_RE = /^##\s+(.+?)\s+[—–]\s+(.+)$/;
 const FIELD_RE = /^\*\*([^*:]+):\*\*\s*(.*)$/;
 const DATE_FILE_RE = /^(\d{4}-\d{2}-\d{2})(?:-([a-z0-9._-]+))?\.md$/;
 
-// Repo exclusion list (comma-separated, case-insensitive, supports org/repo or just repo).
-// NOTE: Team boundaries are now enforced at export/sync time via opt-in .claude/wayfind.json
-// bindings (see buildRepoToTeamResolver in team-context.js). This env var is still useful
-// for filtering repos out of indexing and queries entirely, but is no longer needed for
-// preventing unbound repos from leaking into team digests.
+// Team repo allowlist — when set, only entries from matching repos are indexed/queried.
+// Replaces the old TEAM_CONTEXT_EXCLUDE_REPOS blocklist approach.
+// Format: comma-separated, supports org/* wildcards (e.g., "HopSkipInc/*,Doorbell/*")
+const INCLUDE_REPOS = (process.env.TEAM_CONTEXT_INCLUDE_REPOS || '')
+  .split(',').map(r => r.trim().toLowerCase()).filter(Boolean);
+
+// DEPRECATED: Legacy blocklist — use TEAM_CONTEXT_INCLUDE_REPOS instead.
+// Still read for backward compatibility during migration.
 const EXCLUDE_REPOS = (process.env.TEAM_CONTEXT_EXCLUDE_REPOS || '')
   .split(',').map(r => r.trim().toLowerCase()).filter(Boolean);
 
@@ -52,13 +55,33 @@ const DRIFT_POSITIVE = ['drift', 'drifted', 'tangent', 'pivoted', 'sidetracked',
 const DRIFT_NEGATIVE = ['no drift', 'no tangent', 'on track', 'focused', 'laser focused', 'stayed focused'];
 
 /**
- * Check if a repo name matches the exclusion list.
- * Matches against repo name alone or org/repo format.
+ * Check if a repo should be filtered out.
+ * If INCLUDE_REPOS is set: only allow repos matching the allowlist.
+ * If only EXCLUDE_REPOS is set (legacy): block repos on the blocklist.
+ * Supports org/* wildcard patterns.
  */
 function isRepoExcluded(repo) {
-  if (!EXCLUDE_REPOS.length || !repo) return false;
+  if (!repo) return (INCLUDE_REPOS.length > 0); // exclude null repo only when allowlist active
   const lower = repo.toLowerCase();
-  return EXCLUDE_REPOS.some(ex => lower === ex || lower.endsWith('/' + ex) || lower.startsWith(ex + '/'));
+
+  // Allowlist takes priority — if set, only matching repos pass
+  if (INCLUDE_REPOS.length > 0) {
+    return !INCLUDE_REPOS.some(pattern => {
+      if (pattern.endsWith('/*')) {
+        // org/* wildcard — match org prefix
+        const org = pattern.slice(0, -2);
+        return lower.startsWith(org + '/');
+      }
+      return lower === pattern || lower.endsWith('/' + pattern) || lower.startsWith(pattern + '/');
+    });
+  }
+
+  // Legacy blocklist fallback
+  if (EXCLUDE_REPOS.length > 0) {
+    return EXCLUDE_REPOS.some(ex => lower === ex || lower.endsWith('/' + ex) || lower.startsWith(ex + '/'));
+  }
+
+  return false;
 }
 
 // ── Journal parsing ─────────────────────────────────────────────────────────
@@ -1974,6 +1997,7 @@ module.exports = {
   saveConversationIndex: (storePath, convIndex) => getBackend(storePath || DEFAULT_STORE_PATH).saveConversationIndex(convIndex),
 
   // Filtering
+  isRepoExcluded,
   applyFilters,
 
   // Core operations

package/bin/digest.js

@@ -11,13 +11,32 @@ const HOME = process.env.HOME || process.env.USERPROFILE;
 const WAYFIND_DIR = path.join(HOME, '.claude', 'team-context');
 const ENV_FILE = path.join(WAYFIND_DIR, '.env');
 
-// Build regex for content-level filtering of excluded repos
+// Team repo allowlist — mirrors content-store.js logic for digest-time filtering.
+// When INCLUDE_REPOS is set, sections mentioning repos NOT on the list are removed.
+// Falls back to EXCLUDE_REPOS (legacy) for backward compatibility.
+const INCLUDE_REPOS_RAW = (process.env.TEAM_CONTEXT_INCLUDE_REPOS || '')
+  .split(',').map(r => r.trim()).filter(Boolean);
 const EXCLUDE_REPOS_RAW = (process.env.TEAM_CONTEXT_EXCLUDE_REPOS || '')
   .split(',').map(r => r.trim()).filter(Boolean);
 
+/**
+ * Check if a repo name matches the include list.
+ * Supports org/* wildcards.
+ */
+function isRepoIncluded(repo) {
+  if (INCLUDE_REPOS_RAW.length === 0) return true; // no filter = include all
+  const lower = repo.toLowerCase();
+  return INCLUDE_REPOS_RAW.some(pattern => {
+    const p = pattern.toLowerCase();
+    if (p.endsWith('/*')) {
+      return lower.startsWith(p.slice(0, -2) + '/');
+    }
+    return lower === p || lower.endsWith('/' + p) || lower.startsWith(p + '/');
+  });
+}
+
 function buildExcludePattern() {
   if (EXCLUDE_REPOS_RAW.length === 0) return null;
-  // Match repo names as whole words (case-insensitive)
   const escaped = EXCLUDE_REPOS_RAW.map(r => r.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
   return new RegExp(`\\b(${escaped.join('|')})\\b`, 'i');
 }
@@ -25,15 +44,33 @@ function buildExcludePattern() {
 const EXCLUDE_CONTENT_RE = buildExcludePattern();
 
 /**
- * Filter assembled content sections by removing any section whose body
- * mentions an excluded repo. Sections are separated by \n\n---\n\n.
+ * Filter assembled content sections by team boundaries.
+ * Sections are separated by \n\n---\n\n.
+ * If INCLUDE_REPOS is set: keep only sections mentioning included repos.
+ * Falls back to EXCLUDE_REPOS regex for backward compatibility.
  */
 function filterExcludedContent(content) {
-  if (!EXCLUDE_CONTENT_RE || !content) return content;
-  return content
-    .split('\n\n---\n\n')
-    .filter(section => !EXCLUDE_CONTENT_RE.test(section))
-    .join('\n\n---\n\n');
+  if (!content) return content;
+
+  const sections = content.split('\n\n---\n\n');
+
+  if (INCLUDE_REPOS_RAW.length > 0) {
+    // Allowlist mode: extract repo from section header (### DATE — REPO) and check
+    return sections.filter(section => {
+      const repoMatch = section.match(/^###\s+\S+\s+[—–]\s+(\S+)/);
+      if (!repoMatch) return true; // keep non-journal sections (signals, etc.)
+      return isRepoIncluded(repoMatch[1]);
+    }).join('\n\n---\n\n');
+  }
+
+  // Legacy: regex blocklist
+  if (EXCLUDE_CONTENT_RE) {
+    return sections
+      .filter(section => !EXCLUDE_CONTENT_RE.test(section))
+      .join('\n\n---\n\n');
+  }
+
+  return content;
 }
 
 // ── Env file helpers ────────────────────────────────────────────────────────
@@ -636,7 +673,7 @@ async function generateDigest(config, personaIds, sinceDate, onProgress) {
     journalContent = collectJournals(sinceDate, config.journal_dir);
   }
 
-  // Filter out content mentioning excluded repos (TEAM_CONTEXT_EXCLUDE_REPOS)
+  // Filter by team boundaries (TEAM_CONTEXT_INCLUDE_REPOS allowlist, falls back to EXCLUDE_REPOS)
   journalContent = filterExcludedContent(journalContent);
   signalContent = filterExcludedContent(signalContent);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wayfind",
-  "version": "2.0.9",
+  "version": "2.0.10",
   "description": "Team decision trail for AI-assisted development. The connective tissue between product, engineering, and strategy.",
   "bin": {
     "wayfind": "./bin/team-context.js"

package/templates/deploy/.env.example

@@ -35,8 +35,11 @@ GITHUB_TOKEN=
 # Tenant identifier (prefixes storage paths)
 # TEAM_CONTEXT_TENANT_ID=my-team
 
-# Exclude repos from digests and bot queries (comma-separated, case-insensitive)
-# Useful when engineers work on repos belonging to different teams on the same machine
+# Team repo allowlist — only journals from these repos appear in digests and queries.
+# Supports org/* wildcards. This is the recommended way to scope a container to one team.
+# TEAM_CONTEXT_INCLUDE_REPOS=MyOrg/*,MyOrg-Libs/*
+
+# DEPRECATED: Blocklist approach. Use INCLUDE_REPOS instead.
 # TEAM_CONTEXT_EXCLUDE_REPOS=wayfind,personal-project
 
 # Encryption key — generate with: openssl rand -base64 32

package/templates/deploy/docker-compose.yml

@@ -18,7 +18,9 @@ services:
       SLACK_DIGEST_CHANNEL: ${SLACK_DIGEST_CHANNEL:-}
       TEAM_CONTEXT_SLACK_WEBHOOK: ${TEAM_CONTEXT_SLACK_WEBHOOK:-}
 
-      # Exclude repos from digests/queries (comma-separated, case-insensitive)
+      # Team repo allowlist (recommended over EXCLUDE_REPOS)
+      TEAM_CONTEXT_INCLUDE_REPOS: ${TEAM_CONTEXT_INCLUDE_REPOS:-}
+      # DEPRECATED: Blocklist approach — use INCLUDE_REPOS instead
       TEAM_CONTEXT_EXCLUDE_REPOS: ${TEAM_CONTEXT_EXCLUDE_REPOS:-}
 
       # Telemetry (opt-in, sends anonymous usage data to improve Wayfind)