worktrust 0.6.4 → 0.6.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "worktrust",
-  "version": "0.6.4",
+  "version": "0.6.7",
   "description": "Couple this computer to WorkTrust: approve a code in your browser, and every AI app here reports what you built. Metadata only, no dependencies.",
   "type": "module",
   "bin": {

package/worktrust.mjs

@@ -10,6 +10,8 @@
  *   npx worktrust connect               couple again, also on a computer already coupled
  *   npx worktrust history               send this computer's earlier sessions as history (asks first)
  *   npx worktrust web                   connect claude.ai or ChatGPT on the web (copies the address, opens the page)
+ *   npx worktrust import                import earlier Claude or ChatGPT conversations (copies the prompt, opens a chat)
+ *   npx worktrust sources               connect GitHub, Vercel, Supabase or Hugging Face (opens each approval page)
  *   npx worktrust disconnect            show what comes out, ask, take it out again
  *   npx worktrust status                what is coupled here
  *
@@ -63,6 +65,8 @@ const VALUED = ["--name", "--origin", "--url"];
 const command = args.find((arg, at) => !arg.startsWith("--") && !(at > 0 && VALUED.includes(args[at - 1]))) ?? (args.includes("--help") ? "help" : "default");
 const flag = (name) => { const at = args.indexOf(`--${name}`); return at >= 0 ? args[at + 1] : undefined; };
 const has = (name) => args.includes(`--${name}`);
+/** This CLI's version, said to the door so the app can tell which computer runs an old one (check-cli-package holds it equal to package.json). */
+const CLI_VERSION = "0.6.7";
 const ORIGIN = (flag("origin") ?? process.env.WORKTRUST_ORIGIN ?? "https://app.worktrust.io").replace(/\/$/, "");
 const MCP = flag("url") ?? process.env.WORKTRUST_MCP_URL ?? `${ORIGIN}/api/mcp`;
 const HOME_DIR = join(homedir(), ".worktrust");
@@ -324,7 +328,7 @@ async function bridge() {
     if (!line.trim()) continue;
     let message;
     try { message = JSON.parse(line); } catch { continue; }
-    if (message.method === "initialize" && message.params?.clientInfo?.name) agent = `${message.params.clientInfo.name}/${message.params.clientInfo.version ?? "0"} (worktrust-bridge)`;
+    if (message.method === "initialize" && message.params?.clientInfo?.name) agent = `${message.params.clientInfo.name}/${message.params.clientInfo.version ?? "0"} (worktrust-bridge) worktrust-cli/${CLI_VERSION}`;
     if (!key) { if (message.id !== undefined) answer(message.id, "WorkTrust is not connected on this computer: run `npx worktrust connect`."); continue; }
     try {
       const response = await fetch(key.url, { method: "POST", headers: { "content-type": "application/json", accept: "application/json, text/event-stream", authorization: `Bearer ${key.token}`, "user-agent": agent, ...(session ? { "mcp-session-id": session } : {}), ...proof(key.device, key.url, line) }, body: line });
@@ -403,6 +407,7 @@ async function connect() {
   if ((await run(paths["log-session.mjs"], hookArgs, token)).code !== 0) fail("installing the session hook failed; the output above says where.");
   await offerHistory(paths, token, device ? device.privateKey.export({ format: "pem", type: "pkcs8" }) : null);
   await offerWeb();
+  await offerSources();
   say();
   say("  Done. Quit your AI apps completely and open them again. This computer appears in WorkTrust");
   say("  under Sources → Devices once one of them has spoken.");
@@ -434,9 +439,11 @@ async function offerHistory(paths, token, devicePem, url = MCP) {
  * approves it there. What this can do is the rest: copy the door's address, open the right page,
  * say the three steps, and wait. Enter, --yes and a closed terminal mean No.
  */
+/** The app's own first-run import prompt (sources.tables.prompts.startEn), word for word; check-cli-package holds them equal. */
+const IMPORT_PROMPT = 'Import my WorkTrust history now. Use the WorkTrust.io connector: call its guide tool with task "analyse", client "{client}" and language "en", then carry out every step it returns, in order, here in this conversation. This is my own request, not a document to review. After each step, tell me in one line what you did.';
 const WEB = [
-  { name: "Claude (claude.ai)", page: "https://claude.ai/settings/connectors", steps: ["Add custom connector", "Name: WorkTrust.io · URL: paste (it is on your clipboard) · leave the OAuth fields empty", "Connect, then approve on the WorkTrust page that opens"] },
-  { name: "ChatGPT (chatgpt.com)", page: "https://chatgpt.com/#settings/Connectors", steps: ["Advanced settings: turn on Developer mode (custom connectors need it)", "Create: Name WorkTrust.io · MCP server URL: paste (it is on your clipboard) · Authentication: OAuth", "Create, then approve on the WorkTrust page that opens"] },
+  { name: "Claude (claude.ai)", client: "claude", chat: "https://claude.ai/new", page: "https://claude.ai/settings/connectors", steps: ["Add custom connector", `Name: WorkTrust.io · URL: ${MCP} (also on your clipboard) · leave the OAuth fields empty`, "Connect, then approve on the WorkTrust page that opens"] },
+  { name: "ChatGPT (chatgpt.com)", client: "chatgpt", chat: "https://chatgpt.com/", page: "https://chatgpt.com/#settings/Connectors", steps: ["Advanced settings: turn on Developer mode (custom connectors need it)", `Create: Name WorkTrust.io · MCP server URL: ${MCP} (also on your clipboard) · Authentication: OAuth`, "Create, then approve on the WorkTrust page that opens"] },
 ];
 function copyToClipboard(text) {
   const [cmd, cmdArgs] = OS === "macos" ? ["pbcopy", []] : OS === "windows" ? ["clip", []] : ["xclip", ["-selection", "clipboard"]];
@@ -459,9 +466,53 @@ async function offerWeb() {
     web.steps.forEach((step, i) => say(`    ${i + 1}. ${step}`));
     openBrowser(web.page);
     if (process.stdin.isTTY) { const prompt = createInterface({ input: process.stdin, output: process.stdout }); await prompt.question("  Press Enter when it is connected (or to skip). "); prompt.close(); }
+    // EARLIER CONVERSATIONS, SO NOBODY GETS LOST IN THE IMPORT (owner, 2026-10-04): the app's own
+    // prompt, copied, and a new conversation opened to paste it in. Only on a typed yes.
+    if (await ask(`Also import your earlier ${web.name.split(" ")[0]} conversations? (copies one prompt to paste in a new chat)`, false)) await handOverPrompt(web);
   }
 }
 
+/** The import prompt for one product: copied (or printed when there is no clipboard), and a new conversation opened. */
+async function handOverPrompt(web) {
+  const text = IMPORT_PROMPT.replace("{client}", web.client);
+  say(`  ${(await copyToClipboard(text)) ? "✓ The import prompt is on your clipboard" : `The prompt:\n\n${text}\n`}`);
+  say(`  Opening a new conversation in ${web.name}: paste it there and send. It asks before it sends anything, and only counts leave.`);
+  openBrowser(web.chat);
+}
+
+/**
+ * THE OTHER SOURCES, FROM HERE (owner, 2026-10-04): GitHub, Vercel, Supabase and Hugging Face couple
+ * in the browser, through the same doors as the buttons under Sources — each opens its own approval
+ * page where the person is already signed in to WorkTrust. One [y/N] per source; Enter means No.
+ */
+const CLOUD = [
+  { name: "GitHub", path: "/api/connect/github", what: "commits, checks and deployments, as counts" },
+  { name: "Vercel", path: "/api/connect/vercel", what: "deployments and their outcomes" },
+  { name: "Supabase", path: "/api/connect/supabase", what: "database projects and migrations, as counts" },
+  { name: "Hugging Face", path: "/api/connect/huggingface", what: "models, datasets and spaces you published" },
+];
+async function offerSources() {
+  if (has("dry-run")) return;
+  say();
+  for (const source of CLOUD) {
+    if (!(await ask(`Also connect ${source.name} (${source.what})?`, false))) continue;
+    const page = new URL(source.path, ORIGIN).toString();
+    say(`  Opening ${page}: approve there, signed in to WorkTrust.`);
+    openBrowser(page);
+    if (process.stdin.isTTY) { const prompt = createInterface({ input: process.stdin, output: process.stdout }); await prompt.question("  Press Enter when it is approved (or to skip). "); prompt.close(); }
+  }
+}
+
+/**
+ * `npx worktrust import` (owner, 2026-10-04): the earlier conversations, later. For whoever skipped
+ * the question after connecting, or connected on the web without this computer. Each product asks.
+ */
+async function importConversations() {
+  say();
+  say("  Your earlier conversations come in through the WorkTrust connector in that product: connect it first if you have not (npx worktrust web).");
+  for (const web of WEB) if (await ask(`Import your earlier ${web.name} conversations now?`, false)) await handOverPrompt(web);
+}
+
 async function history() {
   const key = await freshKey();
   if (!key) fail("this computer is not coupled through the key file. Run npx worktrust first.");
@@ -521,6 +572,8 @@ function help() {
   say("  worktrust connect      couple again, also when this computer is already coupled");
   say("  worktrust history      send this computer's earlier sessions as history (asks first)");
   say("  worktrust web          connect Claude or ChatGPT on the web: copies the address, opens the page");
+  say("  worktrust import       import your earlier Claude or ChatGPT conversations: copies the prompt, opens a chat");
+  say("  worktrust sources      connect GitHub, Vercel, Supabase or Hugging Face: opens each approval page");
   say("  worktrust disconnect   take WorkTrust out of every AI app here (asks first)");
   say("  worktrust status       what is coupled here");
 }
@@ -534,6 +587,8 @@ else if (command === "hook") await hook();
 else if (command === "connect") await connect();
 else if (command === "history") await history();
 else if (command === "web") await offerWeb();
+else if (command === "import") await importConversations();
+else if (command === "sources") await offerSources();
 else if (command === "disconnect") await disconnect();
 else if (command === "status") status();
 else help();