Merge pull request #639 from rajbos/rajbos/plan-sharing-server-design

feat: self-hosted sharing server (Phases 1–3)

Author: rajbos

.gitignore

@@ -23,3 +23,4 @@ visualstudio-extension/src/CopilotTokenTracker/obj/project.nuget.cache
 visualstudio-extension/src/CopilotTokenTracker.Tests/bin/
 visualstudio-extension/src/CopilotTokenTracker.Tests/obj/
 visualstudio-extension/TestResults/
+vscode-extension/.session_secret.txt

README.md

@@ -88,6 +88,48 @@ npx @rajbos/ai-engineering-fluency stats
 
 ---
 
+### 🔗 Self-Hosted Sharing Server
+
+Share usage data with your team without an Azure account. Run a lightweight API server
+on your own infrastructure — team members configure a single endpoint URL and upload
+automatically via their existing GitHub session.
+
+- **Zero Azure required** — SQLite + Docker, runs anywhere
+- **Auth via GitHub** — reuses the session already held by VS Code/Copilot, no API keys
+- **Optional org gating** — restrict uploads to GitHub org members
+- **Web dashboard** — see aggregated usage across your team
+
+```yaml
+# docker-compose.yml
+services:
+  sharing-server:
+    image: ghcr.io/rajbos/copilot-sharing-server:latest
+    ports:
+      - "3000:3000"
+    environment:
+      - GITHUB_CLIENT_ID=...
+      - GITHUB_CLIENT_SECRET=...
+      - SESSION_SECRET=...
+      - BASE_URL=https://copilot.example.com
+    volumes:
+      - sharing_data:/data
+volumes:
+  sharing_data:
+```
+
+```json
+// VS Code settings — the only thing team members configure
+{
+  "copilotTokenTracker.backend.enabled": true,
+  "copilotTokenTracker.backend.backend": "sharingServer",
+  "copilotTokenTracker.backend.sharingServer.endpointUrl": "https://copilot.example.com"
+}
+```
+
+📖 [Full sharing server documentation](sharing-server/README.md)
+
+---
+
 ## Contributing
 
 Interested in contributing? Check out our [Contributing Guide](CONTRIBUTING.md) for:

build.ps1

@@ -8,10 +8,11 @@
     Projects:
       vscode-extension  – VS Code extension (TypeScript / Node.js)
       cli               – Command-line tool  (TypeScript / Node.js)
+      sharing           – Self-hosted sharing server (TypeScript / Node.js)
       visualstudio-extension – Visual Studio extension (C# / .NET)   [future]
 
 .PARAMETER Project
-    Which project(s) to build.  Accepts: all | vscode | cli | visualstudio
+    Which project(s) to build.  Accepts: all | vscode | cli | sharing | visualstudio
     Default: all
 
 .PARAMETER Target
@@ -28,7 +29,7 @@
 #>
 
 param(
-    [ValidateSet('all', 'vscode', 'cli', 'visualstudio')]
+    [ValidateSet('all', 'vscode', 'cli', 'visualstudio', 'sharing')]
     [string] $Project = 'all',
 
     [ValidateSet('build', 'package', 'test', 'clean')]
@@ -195,16 +196,34 @@ function Build-VisualStudio {
 }
 
 # ---------------------------------------------------------------------------
-# Entry point
+# Sharing Server
 # ---------------------------------------------------------------------------
+function Build-Sharing {
+    Write-Step "sharing-server: $Target"
+    Push-Location "$PSScriptRoot/sharing-server"
+    try {
+        switch ($Target) {
+            'build'   { npm ci; npm run build }
+            'package' { npm ci; npm run build:production }
+            'test'    { Write-Host "    (no sharing-server tests yet)" }
+            'clean'   { Remove-Item -Recurse -Force dist -ErrorAction SilentlyContinue }
+        }
+        Write-Ok "sharing-server done."
+    }
+    finally { Pop-Location }
+}
+
+
 switch ($Project) {
     'all' {
         Build-VsCode
         Build-Cli
+        Build-Sharing
         Build-VisualStudio
     }
     'vscode'      { Build-VsCode }
     'cli'         { Build-Cli }
+    'sharing'     { Build-Sharing }
     'visualstudio'{ Build-VisualStudio }
 }
 

sharing-server/.env.example

@@ -0,0 +1,17 @@
+# Copy this file to .env and fill in the values before running docker-compose
+
+# GitHub OAuth App credentials (create at https://github.com/settings/developers)
+# Set Callback URL to: <BASE_URL>/auth/github/callback
+GITHUB_CLIENT_ID=your_github_client_id_here
+GITHUB_CLIENT_SECRET=your_github_client_secret_here
+
+# Random secret for signing session cookies
+# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+SESSION_SECRET=change_me_to_a_random_secret
+
+# Public base URL of this server (used in OAuth redirect URI and links)
+BASE_URL=http://localhost:3000
+
+# Optional: restrict to members of a specific GitHub organization
+# Leave empty to allow any GitHub user
+ALLOWED_GITHUB_ORG=

sharing-server/.gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+data/
+*.db
+.env

sharing-server/Dockerfile

@@ -0,0 +1,39 @@
+# syntax=docker/dockerfile:1
+
+# ── Build stage ──────────────────────────────────────────────────────────────
+# Uses node:sqlite (built-in, no native compilation needed)
+FROM node:24-slim AS builder
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY . .
+RUN npm run build:production
+
+# ── Runtime stage ─────────────────────────────────────────────────────────────
+FROM node:24-slim AS runtime
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    tini \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Copy the compiled bundle (no node_modules needed — no native deps)
+COPY --from=builder /app/dist ./dist
+
+RUN mkdir -p /data
+
+VOLUME ["/data"]
+
+EXPOSE 3000
+
+ENV NODE_ENV=production \
+    DATA_DIR=/data \
+    PORT=3000
+
+# Use tini as PID 1 for proper signal handling
+ENTRYPOINT ["tini", "--"]
+CMD ["node", "dist/server.js"]