ai-native-profile 0.1.0 → 0.1.1

package/README.md

@@ -0,0 +1,115 @@
+# AI Native Profile Collector
+
+[![npm version](https://img.shields.io/npm/v/ai-native-profile.svg)](https://www.npmjs.com/package/ai-native-profile)
+[![license](https://img.shields.io/npm/l/ai-native-profile.svg)](https://github.com/Gaurav890/ai-native-profile/blob/main/LICENSE)
+
+Connect local AI coding activity to a private [AI Native Profile](https://ai-native-profile.vercel.app), then choose what to publish on your profile or GitHub README.
+
+The collector runs directly with `npx`; no global installation is required. It discovers supported tools, builds aggregate activity locally, lets you inspect the exact payload, and syncs only after you pair and approve the device.
+
+## Quick start
+
+Check which coding tools are available:
+
+```bash
+npx --yes ai-native-profile@latest sources
+```
+
+Inspect the exact aggregate payload before sending anything:
+
+```bash
+npx --yes ai-native-profile@latest preview
+```
+
+Pair this computer with your cloud profile:
+
+```bash
+npx --yes ai-native-profile@latest connect
+```
+
+The command prints a short-lived verification URL and code. Open the URL, sign in with GitHub, and approve the device. Then run the first sync:
+
+```bash
+npx --yes ai-native-profile@latest sync
+```
+
+To keep syncing every 15 minutes while the command is running:
+
+```bash
+npx --yes ai-native-profile@latest watch
+```
+
+`watch` runs in the foreground and stops when the process stops. The collector never installs a hidden background service.
+
+## Supported coding sources
+
+| Source | Collection path | Trust label |
+|---|---|---|
+| Codex | Official local App Server account usage | Official account source |
+| Claude Code | Local statistics cache | Local exact |
+| Cursor | Supported local database metadata | Estimated; excluded from rankings |
+| Gemini CLI | Locally retained CLI telemetry | Locally derived |
+| GitHub Copilot CLI | Locally retained CLI activity | Locally derived |
+
+ChatGPT Web and Claude Web are connected separately through browser-local official export import or explicit MCP activity. This collector does not read browser conversations or provider cookies.
+
+## Privacy boundary
+
+Normal synchronization may include:
+
+- Dates and provider/model identifiers
+- Token, session, turn, and tool-call counts
+- Duration, coverage, freshness, and provenance
+- Collector version and an anonymous device identifier
+
+It never includes:
+
+- Prompts or responses
+- Source code
+- Tool arguments or outputs
+- Shell commands
+- Repository names or file paths
+- Conversation titles or email addresses
+- Cookies, provider credentials, access tokens, or environment variables
+
+Run `preview` whenever you want to inspect the exact aggregate payload. Pairing credentials are stored locally in `~/.config/ai-native-profile/config.json` with user-only file permissions.
+
+## Commands
+
+| Command | Purpose |
+|---|---|
+| `connect` | Pair this device with the hosted profile |
+| `sources` | Detect supported local coding tools |
+| `preview` | Print the exact aggregate payload without sending it |
+| `sync` | Send one approved aggregate batch |
+| `watch` | Sync immediately, then every 15 minutes until stopped |
+| `doctor` | Check local sources and pairing status |
+| `sessions` | List deliberately published session stories |
+| `share` | Preview or publish a manually supplied sanitized story |
+| `unshare` | Revoke a published story |
+| `export` | Alias for `preview` |
+| `disconnect` | Remove the local platform pairing |
+
+Use a self-hosted deployment instead of the managed service:
+
+```bash
+npx --yes ai-native-profile@latest connect --api-url https://your-domain.example
+```
+
+## What the evidence means
+
+Every metric carries its source, coverage dates, freshness, and provenance. A device signature protects integrity in transit; it does not make a user-controlled computer tamper-proof. Activity demonstrates workflow adoption, not developer skill, productivity, code quality, or AI authorship.
+
+Conversation imports, MCP observations, manual stories, and estimated metrics never affect competitive scores.
+
+## Links
+
+- [Create a profile](https://ai-native-profile.vercel.app)
+- [Source code and issue tracker](https://github.com/Gaurav890/ai-native-profile)
+- [Privacy boundary](https://github.com/Gaurav890/ai-native-profile/blob/main/docs/privacy.md)
+- [Provider capability matrix](https://github.com/Gaurav890/ai-native-profile/blob/main/docs/providers.md)
+- [Scoring methodology](https://github.com/Gaurav890/ai-native-profile/blob/main/docs/methodology.md)
+
+## License
+
+MIT. Provider names are compatibility labels. AI Native Profile is provider-neutral and is not endorsed by the providers it supports.

package/bin/anp.mjs

@@ -6,7 +6,7 @@ import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { createInterface } from 'node:readline';
 
-const VERSION = '0.1.0';
+const VERSION = '0.1.1';
 const DEFAULT_API_URL = 'https://ai-native-profile.vercel.app';
 const configDir = join(homedir(), '.config', 'ai-native-profile');
 const configFile = join(configDir, 'config.json');

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "ai-native-profile",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Privacy-first collector for AI Native Profile",
   "license": "MIT",
   "type": "module",
   "bin": { "anp": "bin/anp.mjs", "ai-native-profile": "bin/anp.mjs" },
-  "files": ["bin", "src"],
+  "files": ["bin", "src", "README.md"],
   "engines": { "node": ">=22.13.0" },
   "repository": {
     "type": "git",