worktrust 0.6.2 → 0.6.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "worktrust",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Couple this computer to WorkTrust: approve a code in your browser, and every AI app here reports what you built. Metadata only, no dependencies.",
   "type": "module",
   "bin": {

package/setup-mcp.mjs

@@ -111,7 +111,8 @@ for (const client of CLIENTS) {
     continue;
   }
   const text = existsSync(client.file) ? readFileSync(client.file, "utf8") : "";
-  const already = text.includes(URL_) || (BRIDGE !== undefined && text.includes(JSON.stringify(BRIDGE).slice(1, -1))) || (REMOVE && /worktrust\.mjs/.test(text));
+  // With the bridge, coupled means the bridge is in AND no entry with a key in it is left beside it.
+  const already = REMOVE ? text.includes(URL_) || /worktrust\.mjs/.test(text) : BRIDGE !== undefined ? text.includes(JSON.stringify(BRIDGE).slice(1, -1)) && !text.includes(URL_) : text.includes(URL_);
   // THE WAY OUT, ON THE MACHINE. Uncoupling in the app ends the TOKEN; the config that names the
   // door stays behind on every client here, so the next person to read this file believes the
   // machine is coupled. `--remove` takes the entry out; the account side is a separate act and
@@ -132,7 +133,10 @@ for (const client of CLIENTS) {
     } else if (client.shape === "toml") {
       const text = readFileSync(client.file, "utf8");
       // The block and nothing after it: from its own header to the next one, or the end.
-      const stripped = text.replace(new RegExp(`\\n?\\[mcp_servers\\.${NAME}\\][^\\[]*`, "g"), "\n");
+      // Every block that names the door, under any name (a hand-made one too, 2026-10-04), or ours.
+      // A block runs to the next table header at the START of a line, never to the next "[" — the
+      // bridge's own `args = ["…", "mcp"]` holds one, and cutting there left half a block behind.
+      const stripped = text.replace(/\n?\[mcp_servers\.("?)([A-Za-z0-9_.-]+)\1\][\s\S]*?(?=\n\[|$)/g, (block, _q, name) => (name === NAME || block.includes(URL_) || /worktrust\.mjs/.test(block) ? "" : block));
       console.log(`  − ${client.label}: ${WRITE ? "removed from" : "would remove from"} ${client.file}`);
       if (WRITE) writeFileSync(client.file, stripped);
     }

package/worktrust.mjs

@@ -9,6 +9,7 @@
  *   npx worktrust --device              a computer without a browser (SSH): type a code on another device
  *   npx worktrust connect               couple again, also on a computer already coupled
  *   npx worktrust history               send this computer's earlier sessions as history (asks first)
+ *   npx worktrust web                   connect claude.ai or ChatGPT on the web (copies the address, opens the page)
  *   npx worktrust disconnect            show what comes out, ask, take it out again
  *   npx worktrust status                what is coupled here
  *
@@ -401,6 +402,7 @@ async function connect() {
   const hookArgs = ["--install", ...(BUNDLED ? ["--counter", paths["count-behaviour.mjs"]] : []), ...(direct ? [] : ["--via", STABLE])];
   if ((await run(paths["log-session.mjs"], hookArgs, token)).code !== 0) fail("installing the session hook failed; the output above says where.");
   await offerHistory(paths, token, device ? device.privateKey.export({ format: "pem", type: "pkcs8" }) : null);
+  await offerWeb();
   say();
   say("  Done. Quit your AI apps completely and open them again. This computer appears in WorkTrust");
   say("  under Sources → Devices once one of them has spoken.");
@@ -426,6 +428,40 @@ async function offerHistory(paths, token, devicePem, url = MCP) {
   say(sent.code === 0 ? "  ✓ Sent as history. It shows in WorkTrust as earlier work, never as verified hours." : "  Not all of it arrived. Run npx worktrust history again: a line already received is kept once.");
 }
 
+/**
+ * CLAUDE AND CHATGPT ON THE WEB, FROM HERE (owner, 2026-10-04). A web connector lives in the person's
+ * own account at Anthropic or OpenAI, and neither lets a program add one: the person adds it and
+ * approves it there. What this can do is the rest: copy the door's address, open the right page,
+ * say the three steps, and wait. Enter, --yes and a closed terminal mean No.
+ */
+const WEB = [
+  { name: "Claude (claude.ai)", page: "https://claude.ai/settings/connectors", steps: ["Add custom connector", "Name: WorkTrust.io · URL: paste (it is on your clipboard) · leave the OAuth fields empty", "Connect, then approve on the WorkTrust page that opens"] },
+  { name: "ChatGPT (chatgpt.com)", page: "https://chatgpt.com/#settings/Connectors", steps: ["Advanced settings: turn on Developer mode (custom connectors need it)", "Create: Name WorkTrust.io · MCP server URL: paste (it is on your clipboard) · Authentication: OAuth", "Create, then approve on the WorkTrust page that opens"] },
+];
+function copyToClipboard(text) {
+  const [cmd, cmdArgs] = OS === "macos" ? ["pbcopy", []] : OS === "windows" ? ["clip", []] : ["xclip", ["-selection", "clipboard"]];
+  return new Promise((resolve) => {
+    try {
+      const child = spawn(cmd, cmdArgs, { stdio: ["pipe", "ignore", "ignore"] });
+      child.on("error", () => resolve(false)).on("exit", (code) => resolve(code === 0));
+      child.stdin.end(text);
+    } catch { resolve(false); }
+  });
+}
+async function offerWeb() {
+  if (has("dry-run")) return;
+  say();
+  for (const web of WEB) {
+    if (!(await ask(`Also connect ${web.name} in your browser?`, false))) continue;
+    const copied = await copyToClipboard(MCP);
+    say(`  ${copied ? "✓ Copied" : "The address is"} ${MCP}${copied ? " to your clipboard" : ""}`);
+    say(`  Opening ${web.page}. There:`);
+    web.steps.forEach((step, i) => say(`    ${i + 1}. ${step}`));
+    openBrowser(web.page);
+    if (process.stdin.isTTY) { const prompt = createInterface({ input: process.stdin, output: process.stdout }); await prompt.question("  Press Enter when it is connected (or to skip). "); prompt.close(); }
+  }
+}
+
 async function history() {
   const key = await freshKey();
   if (!key) fail("this computer is not coupled through the key file. Run npx worktrust first.");
@@ -484,6 +520,7 @@ function help() {
   say("    --direct             put the key in each app's settings instead of the key file");
   say("  worktrust connect      couple again, also when this computer is already coupled");
   say("  worktrust history      send this computer's earlier sessions as history (asks first)");
+  say("  worktrust web          connect Claude or ChatGPT on the web: copies the address, opens the page");
   say("  worktrust disconnect   take WorkTrust out of every AI app here (asks first)");
   say("  worktrust status       what is coupled here");
 }
@@ -496,6 +533,7 @@ else if (command === "mcp") await bridge();
 else if (command === "hook") await hook();
 else if (command === "connect") await connect();
 else if (command === "history") await history();
+else if (command === "web") await offerWeb();
 else if (command === "disconnect") await disconnect();
 else if (command === "status") status();
 else help();