canopy-engine 0.1.7 → 0.1.9

package/LICENSE

@@ -1,25 +1,31 @@
-Canopy Beta License
-
-Copyright (c) 2026 Spill It Labs Private Limited. All rights reserved.
-
-Permission is granted, free of charge, to use this software
-("Canopy") for personal, educational, evaluation and
-non-commercial purposes, on your own computer, subject to these
-terms:
-
-1. No redistribution. You may not copy, publish, sublicense, sell
-   or otherwise distribute Canopy or any part of it.
-2. No reverse engineering. You may not decompile, disassemble or
-   attempt to extract the source code of Canopy, except where
-   applicable law forbids this restriction.
-3. Commercial use. Use inside a company or for paid work needs a
-   separate written agreement. Contact: canopy.spillitlabs@gmail.com.
-4. Your code stays yours. Canopy runs locally and does not send
-   your source code anywhere. The only network features are the
-   optional update check (canopy update) and optional, opt-in
-   anonymous usage statistics described in PRIVACY.md.
-5. No warranty. Canopy is provided "as is", without warranty of
-   any kind. The author is not liable for any damages arising from
-   its use.
-6. Ending. This license ends automatically if you break these
-   terms. The author may change the license for future versions.
+Canopy Beta License
+
+Copyright (c) 2026 Spill It Labs Private Limited. All rights reserved.
+
+Permission is granted, free of charge, to use this software
+("Canopy") for personal, educational, evaluation and
+non-commercial purposes, on your own computer, subject to these
+terms:
+
+1. No redistribution. You may not copy, publish, sublicense, sell
+   or otherwise distribute Canopy or any part of it.
+2. No reverse engineering. You may not decompile, disassemble or
+   attempt to extract the source code of Canopy, except where
+   applicable law forbids this restriction.
+3. Commercial use. Use inside a company or for paid work needs a
+   separate written agreement. Contact: canopy.spillitlabs@gmail.com.
+4. Your code stays yours. Canopy itself runs locally and does not
+   send your source code anywhere. Its only network features are
+   the update check (shown in the viewer, or run `canopy update`;
+   turn it off with CANOPY_NO_UPDATE_CHECK=1) and optional, opt-in
+   anonymous usage statistics described in PRIVACY.md. If you use
+   the Ask AI panel, Canopy starts the AI tool you choose (such
+   as Claude Code, Antigravity CLI or Codex) on your computer, and
+   parts of your code that Canopy's tools return may be processed
+   by that tool's provider under your own account and terms.
+   Canopy never sees your credentials.
+5. No warranty. Canopy is provided "as is", without warranty of
+   any kind. The author is not liable for any damages arising from
+   its use.
+6. Ending. This license ends automatically if you break these
+   terms. The author may change the license for future versions.

package/PRIVACY.md

@@ -6,12 +6,12 @@ Short version: Canopy runs on your computer. Your code is never sent anywhere by
 
 - It reads your project's JavaScript / TypeScript files on your computer and builds a map. The map, the search index, the history and your choices are stored in a `.canopy/` folder inside your project (kept out of git automatically). Nothing in it is uploaded.
 - It serves the viewer on `127.0.0.1` (your own computer only), protected by a random per-session key.
-- **Ask AI** starts the Claude Code program that is already installed on your computer (for example the one inside the VS Code extension), with your own login and plan. Canopy never calls an AI service itself, never sees or stores your credentials, and never reads Claude's login or session files. What Claude Code does with your question, and what it sends to Anthropic, is governed by Anthropic's terms and your own account, not by Canopy. The questions and answers are not kept by Canopy; only the id of the Claude conversation is remembered in `.canopy/ai-session.json` so follow-up questions work, and the path of the Claude Code program you allowed is saved in `.canopy/prefs.json`.
+- **Ask AI** starts the AI tool you choose (Claude Code, Antigravity CLI or Codex) on your own computer, with your own login and plan. Parts of your code that Canopy's tools return may be processed by that tool's provider, under your own account and that provider's terms. Canopy never sees or stores your credentials and never reads a tool's login or session files. The token numbers shown under an answer are the tool's own and stay on your computer: they are not stored outside your project, not sent anywhere, and not part of the usage counts. The questions and answers are not kept by Canopy; only the id of the AI tool's conversation is remembered in `.canopy/ai-session.json` so follow-up questions work, and your choices (the path of the tool you allowed, the model, the provider) are saved in `.canopy/prefs.json`.
 - **Send feedback** and the hint at the end of `canopy sync` are `mailto:` links. They open your own mail program with the subject filled in and an empty message. Canopy sends nothing itself.
 
 ## The update check
 
-The viewer can ask `https://registry.npmjs.org/canopy-engine/latest` once when it loads, to tell you if a newer version exists, and `canopy update` uses npm. The request carries no cookies, no identifiers and no information about you or your project. Turn the viewer's check off with `CANOPY_NO_UPDATE_CHECK=1`.
+Canopy fetches the public package metadata of `canopy-engine` from registry.npmjs.org (at most once a day, in the background) to tell you if a newer version exists, and `canopy update` uses npm. The viewer asks the same address once when it loads. The requests carry no cookies, no identifiers and no information about you or your project. Disable it with `CANOPY_NO_UPDATE_CHECK=1`.
 
 ## Optional anonymous usage counts
 
@@ -36,7 +36,7 @@ Events and their only extra fields (each a fixed word or a whole number):
 | `viewer_opened` | none |
 | `search_used` | a count |
 | `workflow_opened` | a count |
-| `ask_ai_used` | a count, result (`ok`, `error`, `cancelled`), where Claude Code was found (`vscode`, `path`, `env`), answer-time bucket (`<10s`, `10-30s`, `30-90s`, `90s+`) |
+| `ask_ai_used` | a count, result (`ok`, `error`, `cancelled`), where the AI tool was found (`vscode`, `path`, `env`), answer-time bucket (`<10s`, `10-30s`, `30-90s`, `90s+`) |
 | `feedback_link_clicked` | a count |
 | `update_toast_shown` | a count |
 | `error` | an error code from a fixed list (never a message) |
@@ -57,16 +57,16 @@ To a PostHog project in the EU region (`eu.i.posthog.com`) run by the maker of C
 
 ### How long it is kept
 
-*[Founder to state before launch: the retention period, for example "26 months, then deleted".]*
+Usage statistics are kept while Canopy is in beta. To have your install's statistics deleted, email canopy.spillitlabs@gmail.com and include your install ID (shown by `canopy telemetry status`).
 
 ### Your rights
 
-Because the counts are anonymous and carry only a random id, they cannot be tied to you. If you want the data for your install id removed, run `canopy telemetry status`, note the choice file, and email the id from that file to the contact below. After `canopy telemetry off` the id is deleted from your computer and no new data is sent.
+Because the counts are anonymous and carry only a random id, they cannot be tied to you. If you want the data for your install id removed, run `canopy telemetry status` (it prints your install ID) and email that ID to the contact below. After `canopy telemetry off` the id is deleted from your computer and no new data is sent.
 
 ## Contact
 
-t.gandigoutham@gmail.com
+canopy.spillitlabs@gmail.com
 
 ---
 
-*This document describes how Canopy behaves. It has not yet been reviewed by a lawyer; do that before a public launch.*
+This document describes how Canopy behaves.