worktrust 0.5.0 → 0.6.0

package/README.md

@@ -32,8 +32,12 @@ curl -fsSO https://app.worktrust.io/counter/worktrust.mjs && node worktrust.mjs
 3. **The terminal finishes by itself.** It keeps the key in its private file and gives every
    AI app here the WorkTrust door, then installs the session hook. Quit your AI apps and open them
    again.
+4. **Earlier work only if you say yes.** It counts the Claude Code and Codex sessions already on
+   this computer and asks `Send these as history? [y/N]`. Enter sends nothing. What goes is hours
+   and tokens per day, never text, and WorkTrust shows it as earlier work, never as verified hours.
 
 ```
+npx worktrust history       send this computer's earlier sessions later (asks first)
 npx worktrust status        what is coupled here
 npx worktrust disconnect    take it out again (shows the plan, asks first)
 ```

package/log-session.mjs

@@ -23,6 +23,7 @@
  *   node log-session.mjs --uninstall [--purge] take it out again (--purge also deletes the copies)
  *   node log-session.mjs --dry-run            show what the current transcripts would send
  *   node log-session.mjs --history [--dry-run] send the months already on this machine, as HISTORY
+ *   node log-session.mjs --history --summary   one JSON line: sessions, hours, first and last month (sends nothing)
  *   (as a hook)                                reads the hook's JSON on stdin, logs, exits
  *   (from Codex)                               notify = ["node", "~/.worktrust/log-session.mjs", "--codex-notify"]
  *                                              in ~/.codex/config.toml: Codex calls it at every turn's end and
@@ -587,6 +588,7 @@ function historyEntries() {
         from: messages[0].at, to: last,
       });
       if (CODEX_ROLLOUT.test(file)) entrySource.set(entry, "codex");
+      entryFile.set(entry, file);
       entries.push(entry);
       void day;
     }
@@ -765,12 +767,15 @@ const door = coupling();
 const codexDoor = codexCoupling();
 const doorFor = (entry) => (String(entry?.id ?? "").startsWith("codex:") ? codexDoor ?? door : door);
 const entrySource = new WeakMap(); // a history entry → "codex" when its rollout was Codex's; sendHistory routes by it
+const entryFile = new WeakMap(); // a history entry → its transcript, so `--summary` can count sessions
 if (!door && !codexDoor && !DRY) { process.exit(0); } // Not coupled on this machine: nothing to do, quietly.
 
 if (flag("history")) {
   const entries = historyEntries();
   const hours = entries.reduce((sum, entry) => sum + (entry.seconds ?? 0), 0) / 3600;
   const months = [...new Set(entries.map((entry) => entry.at.slice(0, 7)))].sort();
+  // ONE LINE FOR `npx worktrust` TO ASK WITH (2026-10-03): sessions, hours, first and last month; nothing sent.
+  if (flag("summary")) { console.log(JSON.stringify({ sessions: new Set(entries.map((entry) => entryFile.get(entry))).size, hours: Math.round(hours * 10) / 10, first: months[0] ?? null, last: months.at(-1) ?? null })); process.exit(0); }
   console.log(`${entries.length} day-stretches · ${hours.toFixed(1)} measured hours · ${months.join(", ")}`);
   if (DRY) {
     // One example in full: the shape is the argument for trusting it, and a summary hides it.
@@ -778,8 +783,8 @@ if (flag("history")) {
     console.log("\ndry run — nothing sent. Add --history without --dry-run to import them.");
     process.exit(0);
   }
-  await sendHistory(door, entries, true);
-  process.exit(0);
+  // A batch the door refused is a failure the caller must see, not a quiet zero.
+  process.exit((await sendHistory(door, entries, true)) === entries.length ? 0 : 1);
 }
 
 const input = hookInput();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "worktrust",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Couple this computer to WorkTrust: approve a code in your browser, and every AI app here reports what you built. Metadata only, no dependencies.",
   "type": "module",
   "bin": {

package/worktrust.mjs

@@ -8,6 +8,7 @@
  *   npx worktrust --yes                 no question (for scripts); the computer is still approved in the app
  *   npx worktrust --device              a computer without a browser (SSH): type a code on another device
  *   npx worktrust connect               couple again, also on a computer already coupled
+ *   npx worktrust history               send this computer's earlier sessions as history (asks first)
  *   npx worktrust disconnect            show what comes out, ask, take it out again
  *   npx worktrust status                what is coupled here
  *
@@ -95,9 +96,9 @@ async function scripts() {
 }
 
 /** Run a script; its output is shown, or collected for the plan. The key travels in the environment only. */
-function run(path, scriptArgs, token, collect = false) {
+function run(path, scriptArgs, token, collect = false, extraEnv = {}) {
   return new Promise((resolve) => {
-    const child = spawn(process.execPath, [path, ...scriptArgs], { stdio: collect ? ["ignore", "pipe", "pipe"] : "inherit", env: { ...process.env, WORKTRUST_MCP_URL: MCP, WORKTRUST_MCP_TOKEN: token, WORKTRUST_NODE: NODE } });
+    const child = spawn(process.execPath, [path, ...scriptArgs], { stdio: collect ? ["ignore", "pipe", "pipe"] : "inherit", env: { ...process.env, WORKTRUST_MCP_URL: MCP, WORKTRUST_MCP_TOKEN: token, WORKTRUST_NODE: NODE, ...extraEnv } });
     let out = "";
     child.stdout?.on("data", (chunk) => { out += chunk; });
     child.stderr?.on("data", (chunk) => { out += chunk; });
@@ -105,13 +106,14 @@ function run(path, scriptArgs, token, collect = false) {
   });
 }
 
-async function ask(question) {
-  if (has("yes")) return true;
+/** `yes` is the answer Enter gives, and the one `--yes` gives: a question whose default is No stays No under --yes. */
+async function ask(question, yes = true) {
+  if (has("yes")) return yes;
   if (!process.stdin.isTTY) fail("not a terminal: nothing was changed. Run it in a terminal, or add --yes to agree in advance.");
   const prompt = createInterface({ input: process.stdin, output: process.stdout });
-  const answer = (await prompt.question(`  ${question} [Y/n] `)).trim().toLowerCase();
+  const answer = (await prompt.question(`  ${question} ${yes ? "[Y/n]" : "[y/N]"} `)).trim().toLowerCase();
   prompt.close();
-  return answer === "" || answer === "y" || answer === "yes";
+  return answer === "" ? yes : answer === "y" || answer === "yes";
 }
 
 function openBrowser(url) {
@@ -398,11 +400,38 @@ async function connect() {
   say();
   const hookArgs = ["--install", ...(BUNDLED ? ["--counter", paths["count-behaviour.mjs"]] : []), ...(direct ? [] : ["--via", STABLE])];
   if ((await run(paths["log-session.mjs"], hookArgs, token)).code !== 0) fail("installing the session hook failed; the output above says where.");
+  await offerHistory(paths, token, device ? device.privateKey.export({ format: "pem", type: "pkcs8" }) : null);
   say();
   say("  Done. Quit your AI apps completely and open them again. This computer appears in WorkTrust");
   say("  under Sources → Devices once one of them has spoken.");
 }
 
+/**
+ * EARLIER WORK IS SENT ONLY ON A YES (owner, 2026-10-03). After coupling, or as `npx worktrust history`:
+ * what this computer holds is counted here and shown, and nothing leaves before the person types y.
+ * Enter, --yes and a closed terminal all mean No; `--history` says yes in advance. What goes is hours
+ * and tokens per day, filed as history (never verified hours, never text).
+ */
+async function offerHistory(paths, token, devicePem, url = MCP) {
+  const env = { WORKTRUST_MCP_URL: url, ...(devicePem ? { WORKTRUST_DEVICE_KEY: devicePem } : {}) };
+  const counted = await run(paths["log-session.mjs"], ["--history", "--dry-run", "--summary"], token, true, env);
+  let found = null;
+  try { found = JSON.parse(counted.out.trim().split("\n").pop()); } catch { /* no line: nothing to offer */ }
+  say();
+  if (!found?.sessions) { say("  No earlier Claude Code or Codex sessions on this computer to send."); return; }
+  say(`  This computer holds ${found.sessions} earlier Claude Code / Codex sessions · ${found.hours} measured hours · ${found.first} … ${found.last}.`);
+  if (has("dry-run")) { say("  Dry run: nothing was sent."); return; }
+  if (!has("history") && !(await ask("Send these as history (hours and tokens per day; never text)?", false))) { say("  Not sent. Send them later with: npx worktrust history"); return; }
+  const sent = await run(paths["log-session.mjs"], ["--history"], token, true, env);
+  say(sent.code === 0 ? "  ✓ Sent as history. It shows in WorkTrust as earlier work, never as verified hours." : "  Not all of it arrived. Run npx worktrust history again: a line already received is kept once.");
+}
+
+async function history() {
+  const key = await freshKey();
+  if (!key) fail("this computer is not coupled through the key file. Run npx worktrust first.");
+  await offerHistory(await scripts(), key.token, key.device ?? null, key.url);
+}
+
 async function disconnect() {
   say();
   say(`  WorkTrust · disconnect ${hostname().replace(/\.local$/i, "")}`);
@@ -454,6 +483,7 @@ function help() {
   say("    --name <name>        the name this computer gets (default: its host name)");
   say("    --direct             put the key in each app's settings instead of the key file");
   say("  worktrust connect      couple again, also when this computer is already coupled");
+  say("  worktrust history      send this computer's earlier sessions as history (asks first)");
   say("  worktrust disconnect   take WorkTrust out of every AI app here (asks first)");
   say("  worktrust status       what is coupled here");
 }
@@ -465,6 +495,7 @@ if (command === "default") { if (keyStore.load()) { status(); say(); say("  This
 else if (command === "mcp") await bridge();
 else if (command === "hook") await hook();
 else if (command === "connect") await connect();
+else if (command === "history") await history();
 else if (command === "disconnect") await disconnect();
 else if (command === "status") status();
 else help();