Go to file

Paolo Donadeo 9c122a312f feat(security,timer): harden auth and add multi-instance coordination

- Extract JASPER_URL into a shared constants module
- Pass login credentials via a temp curl config file to avoid exposure
  in the process argument list (ps/proc)
- Replace vim.ui.input secret prompt with vim.fn.inputsecret()
- Add -s (silent) flag to all curl calls to suppress progress output
- Guard curl output parser against missing newline in stdout
- Track per-activity shared timestamp file
  (/tmp/jasper_<id>.last_activity)
  so the inactivity watchdog skips auto-pause when another Neovim
  instance is still active on the same task
- Clean up leftover uv_timer on repeated begin_tracking calls
- Remove shared activity file on teardown only when this instance wrote
  it

2026-04-18 19:17:44 +02:00

lua/jasper

feat(security,timer): harden auth and add multi-instance coordination

2026-04-18 19:17:44 +02:00

plugin

first commit

2026-04-17 17:33:23 +02:00

LICENSE

first commit

2026-04-17 17:33:23 +02:00

README.md

docs/refactor: add AI disclosure and clean up code style

2026-04-18 00:00:45 +02:00

README.md

jasper.nvim

Neovim plugin for automatic time tracking via Jasper.

Features

Reads a per-project .jasper_config.json to know which Jasper activity to track.
Automatically starts the timer when Neovim opens and stops it when Neovim closes.
Auto-pauses after a configurable period of inactivity (no cursor movement, typing, etc.) and resumes on the next keystroke.
Shares the auth token cache with jasper_waybar.py ($XDG_CONFIG_HOME/jasper/token.json).
If no token is found, prompts for credentials inside Neovim.

Requirements

Neovim ≥ 0.10 (uses vim.system and vim.uv)
curl available in $PATH

Installation (lazy.nvim)

{
  url = "https://git.donadeo.net/pdonadeo/jasper.nvim",
  config = function()
    require("jasper").setup({
      -- Global default inactivity timeout in minutes (can be overridden per project).
      -- inactivity_timeout = 10,
    })
  end,
}

Project configuration

Place a .jasper_config.json file at the root of the project (next to .git):

{
  "attivita_id": 12345,
  "inactivity_timeout": 10
}

Key	Required	Description
`attivita_id`	✅	Numeric ID of the Jasper activity (the `value` field returned by the API).
`inactivity_timeout`	❌	Minutes of inactivity before auto-pause. Defaults to `10`.

How it works

On VimEnter, the plugin looks for .jasper_config.json by walking up from the current working directory.
If found, it reads the cached auth token from $XDG_CONFIG_HOME/jasper/token.json. If the token is missing or expired, it prompts for credentials.
It fetches the list of timers from Jasper and finds the one associated with attivita_id. If none exists, it creates one.
The timer is started. A libuv countdown is armed; after inactivity_timeout minutes of silence the timer is paused.
Any cursor movement or keystroke resets the countdown (and resumes the timer if it was paused).
On VimLeave the timer is stopped.

AI Disclosure

This project was written entirely with the assistance of GitHub Copilot using the Claude Sonnet 4.6 model.