@vovy-ai/go 0.1.2 → 0.2.0

package/README.md

@@ -0,0 +1,36 @@
+# @vovy-ai/go
+
+Free, forever, drop-in skills for vibe coding safely — the `vovy` CLI installer.
+
+```
+npx @vovy-ai/go install
+```
+
+That's it. It detects which AI coding tool you have installed — [Claude Code](https://claude.com/claude-code), [Codex CLI](https://developers.openai.com/codex), [Cursor](https://cursor.com), [Cline](https://cline.bot), or [Windsurf](https://windsurf.com) — and writes Vovy's skills there. Your very next prompt gets the benefit.
+
+```
+npx @vovy-ai/go doctor       # check everything is installed correctly
+npx @vovy-ai/go uninstall    # remove everything Vovy wrote, cleanly
+```
+
+Installed globally (`npm i -g @vovy-ai/go`), the command is just `vovy`.
+
+## Why this is free, forever
+
+Vovy never runs its own AI model and never calls a Vovy-hosted server. It only writes markdown skill files that your existing AI coding tool reads for free, using the model you already pay for. No account, no API key, no cost, ever.
+
+## What it installs
+
+Three skills that make AI coding assistants safer and better-scoped for non-technical founders:
+
+| Skill | What it does |
+|---|---|
+| **Prompt Rescoper** | Rewrites vague, oversized requests into a small, reviewable spec before any code is written. |
+| **Project Skill Drafter** | Analyzes your actual project and drafts a project-specific skill so future requests already know your stack. |
+| **Founder Explainer** | Explains destructive/high-stakes actions in plain English before they happen, and flags common vibe-coding security mistakes. |
+
+Full docs, architecture, and source: **[github.com/Vovy-AI/vovy-cli](https://github.com/Vovy-AI/vovy-cli)**
+
+## License
+
+MIT

package/dist/index.js

@@ -53,10 +53,40 @@ function runInstall(opts) {
 }
 
 // src/commands/doctor.ts
+var MCP_TOOL_METADATA = [
+  {
+    name: "analyze_project",
+    title: "Analyze Project",
+    description: "Deterministic, non-LLM static analysis of a project: detected framework/stack, package manager, test runner, top-level directories, and any obvious security footguns (e.g. an untracked .env). No network access, no guessing."
+  },
+  {
+    name: "search_codebase",
+    title: "Search Codebase",
+    description: `Deterministic, non-LLM symbol search over a JS/TS/JSX/TSX project via tree-sitter (no embeddings, no network access). Use this BEFORE reading whole files to answer a 'where is X handled' / 'how does Y work' question \u2014 it finds the exact symbol or file first so you read only what's relevant, not entire files. Actions: "overview" (top-level functions/classes/interfaces/exports in one file, needs filePath), "find_symbol" (declaration sites of a name across the project, needs query), "find_references" (identifier-boundary-aware usage sites of a name \u2014 more precise than grep since it never matches inside a string/comment, needs query), "pattern" (plain regex/text search fallback for non-code content, needs query).`
+  }
+];
+function estimateTokens(text) {
+  return Math.ceil(text.length / 4);
+}
+function computeTokenFootprint() {
+  const skills = getAllSkills2();
+  const skillsEstTokens = skills.reduce((sum, skill) => sum + estimateTokens(skill.raw), 0);
+  const toolsEstTokens = MCP_TOOL_METADATA.reduce(
+    (sum, tool) => sum + estimateTokens(tool.name + tool.title + tool.description),
+    0
+  );
+  return {
+    skillCount: skills.length,
+    skillsEstTokens,
+    toolCount: MCP_TOOL_METADATA.length,
+    toolsEstTokens,
+    totalEstTokens: skillsEstTokens + toolsEstTokens
+  };
+}
 function runDoctor(env, hosts, scope) {
   const dryRunResults = runInstall({ env, hosts, scope, dryRun: true });
   const totalSkillCount = getAllSkills2().length;
-  return dryRunResults.map(({ adapter, skillResults, mcpResult }) => {
+  const reports = dryRunResults.map(({ adapter, skillResults, mcpResult }) => {
     const entries = skillResults.map((r) => ({
       skillId: r.skillId,
       path: r.path,
@@ -73,6 +103,7 @@ function runDoctor(env, hosts, scope) {
       healthy: entries.length === totalSkillCount && entries.every((e) => e.status === "ok") && (mcp === null || mcp.status === "ok")
     };
   });
+  return { reports, tokenFootprint: computeTokenFootprint() };
 }
 
 // src/commands/uninstall.ts
@@ -194,7 +225,7 @@ function cmdDoctor(argv) {
   const flags = parseCommonFlags(argv);
   if (flags.help) return console.log(HELP);
   const env = realEnv();
-  const reports = runDoctor(env, flags.hosts, flags.scope);
+  const { reports, tokenFootprint } = runDoctor(env, flags.hosts, flags.scope);
   if (reports.length === 0) {
     console.log("No supported host tools detected on this machine \u2014 nothing to check.");
     return;
@@ -211,6 +242,10 @@ ${adapter.label}: ${healthy ? "OK" : "needs `npx @vovy-ai/go install`"}`);
       console.log(`  [${mcp.status === "ok" ? "x" : " "}] mcp server (${mcp.status})`);
     }
   }
+  console.log(
+    `
+Estimated always-on token footprint: ~${tokenFootprint.totalEstTokens} tokens (${tokenFootprint.skillCount} skill files ~${tokenFootprint.skillsEstTokens}, ${tokenFootprint.toolCount} MCP tool definitions ~${tokenFootprint.toolsEstTokens}) \u2014 what every session pays whether or not a skill fires. chars/4 estimate, not an exact tokenizer count.`
+  );
   process.exitCode = allHealthy ? 0 : 1;
 }
 function cmdUninstall(argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vovy-ai/go",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Free, forever, drop-in MCP server + skill pack that teaches non-technical founders to vibe code safely. npx @vovy-ai/go install",
   "license": "MIT",
   "type": "module",
@@ -11,8 +11,8 @@
     "dist"
   ],
   "dependencies": {
-    "@vovy-ai/host-detect": "0.1.0",
-    "@vovy-ai/skills": "0.2.0"
+    "@vovy-ai/skills": "0.3.0",
+    "@vovy-ai/host-detect": "0.1.1"
   },
   "devDependencies": {
     "tsup": "^8.3.5",