ultimatehuman 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,131 @@
+# PolyForm Noncommercial License 1.0.0
+
+<https://polyformproject.org/licenses/noncommercial/1.0.0>
+
+## Acceptance
+
+In order to get any license under these terms, you must agree
+to them as both strict obligations and conditions to all
+your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the
+software to do everything you might do with the software
+that would otherwise infringe the licensor's copyright
+in it for any permitted purpose.  However, you may
+only distribute the software according to [Distribution
+License](#distribution-license) and make changes or new works
+based on the software according to [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license
+to distribute copies of the software.  Your license
+to distribute covers distributing the software with
+changes and new works permitted by [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of
+the software from you also gets a copy of these terms or the
+URL for them above, as well as copies of any plain-text lines
+beginning with `Required Notice:` that the licensor provided
+with the software.  For example:
+
+> Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to
+make changes and new works based on the software for any
+permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that
+covers patent claims the licensor can license, or becomes able
+to license, that you would infringe by using the software.
+
+## Noncommercial Purposes
+
+Any noncommercial purpose is a permitted purpose.
+
+## Personal Uses
+
+Personal use for research, experiment, and testing for
+the benefit of public knowledge, personal study, private
+entertainment, hobby projects, amateur pursuits, or religious
+observance, without any anticipated commercial application,
+is use for a permitted purpose.
+
+## Noncommercial Organizations
+
+Use by any charitable organization, educational institution,
+public research organization, public safety or health
+organization, environmental protection organization,
+or government institution is use for a permitted purpose
+regardless of the source of funding or obligations resulting
+from the funding.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the
+law. These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of
+your licenses to anyone else, or prevent the licensor from
+granting licenses to anyone else.  These terms do not imply
+any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately. If
+your company makes such a claim, your patent license ends
+immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have
+violated any of these terms, or done anything with the software
+not covered by your licenses, your licenses can nonetheless
+continue if you come into full compliance with these terms,
+and take practical steps to correct past violations, within
+32 days of receiving notice.  Otherwise, all your licenses
+end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without
+any warranty or condition, and the licensor will not be liable
+to you for any damages arising out of these terms or the use
+or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these
+terms, and the **software** is the software the licensor makes
+available under these terms.
+
+**You** refers to the individual or entity agreeing to these
+terms.
+
+**Your company** is any legal entity, sole proprietorship,
+or other kind of organization that you work for, plus all
+organizations that have control over, are under the control of,
+or are under common control with that organization.  **Control**
+means ownership of substantially all the assets of an entity,
+or the power to direct its management and policies by vote,
+contract, or otherwise.  Control can be direct or indirect.
+
+**Your licenses** are all the licenses granted to you for the
+software under these terms.
+
+**Use** means anything you do with the software requiring one
+of your licenses.

package/LICENSING.md

@@ -0,0 +1,44 @@
+# Licensing and company deployments
+
+ultimatehuman is source-available under the **PolyForm Noncommercial License 1.0.0**, with separate paid commercial licenses offered by **Vincent Wargnier**. The full public terms are in [LICENSE](LICENSE); this page explains the licensing model and does not amend those terms.
+
+## Free noncommercial use
+
+You may use, modify, and redistribute the software for purposes permitted by PolyForm Noncommercial, subject to its conditions and notice requirements.
+
+| Use | Public license |
+| --- | --- |
+| Personal study, experiments, and hobby projects without anticipated commercial application | Permitted |
+| Other noncommercial purposes | Permitted |
+| Uses by the charitable, educational, public research, public safety/health, environmental, and government organizations specified in the license | Permitted, including the license's funding exception |
+| Commercial business operations or commercial product development | Requires a separate commercial license |
+| Commercial hosting, deployment, or redistribution of the software | Requires a separate commercial license |
+
+The standard license is broader than strictly personal use: it deliberately permits specified noncommercial organizations and purposes. A public repository does not by itself make commercial use free.
+
+## Paid company licenses and installation
+
+For commercial rights outside the public license, request a written agreement from Vincent Wargnier before using the software commercially. Company installation, configuration, and ongoing operation can be included in that agreement.
+
+[Request a commercial license or company installation](https://github.com/vincent38wargnier/ultimatehuman/issues/new?title=Commercial%20license%20inquiry). An inquiry does not grant a license. Keep credentials and confidential company information out of public issues.
+
+Commercial agreements specify the licensed customer, permitted use, deployment scope, fees, and any rights for contractors, hosting providers, resellers, or installers. The public license does not grant commercial deployment or distribution rights. It also does not establish an exclusive right over every possible consulting or support service; any intended service-provider restrictions need to be addressed in the applicable commercial agreement.
+
+## Earlier versions
+
+The repository previously identified the project as Apache-2.0, and an Apache 2.0 license file was published through commit [`521cbafe8384eefcf5c8d6e81f45e13efa5151f1`](https://github.com/vincent38wargnier/ultimatehuman/tree/521cbafe8384eefcf5c8d6e81f45e13efa5151f1).
+
+This licensing change does **not** withdraw rights already granted under Apache 2.0. Previously licensed code remains usable under those grants, including for commercial purposes when the Apache conditions are met. The new terms apply to material offered under them and future contributions licensed under them; they do not retroactively restrict the earlier Apache version. No npm version had been published when this policy changed.
+
+## Dependencies and other rights
+
+Third-party code, fonts, and other dependencies retain their own licenses. The npm distribution includes their license texts in `THIRD_PARTY_NOTICES.txt`. This project's public license does not replace their terms or claim ownership of them.
+
+Commercial licensing depends on the licensor having the necessary rights in the relevant code. New external contributions require a separate rights review before merging; see [CONTRIBUTING.md](https://github.com/vincent38wargnier/ultimatehuman/blob/main/CONTRIBUTING.md).
+
+## References
+
+- [Official PolyForm Noncommercial terms](https://polyformproject.org/licenses/noncommercial/1.0.0)
+- [PolyForm's guidance on reserving commercial licensing rights](https://polyformproject.org/why-adopt-polyform)
+- [Open Source Definition](https://opensource.org/osd): open-source licenses allow commercial use; this license is source-available instead.
+- [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0.txt): earlier grants are not revoked by this policy.

package/NOTICE

@@ -0,0 +1,6 @@
+Required Notice: Copyright (c) 2026 Vincent Wargnier
+Required Notice: ultimatehuman — https://github.com/vincent38wargnier/ultimatehuman
+
+Public license: PolyForm Noncommercial License 1.0.0. See LICENSE.
+Commercial licensing and the scope of this change: see LICENSING.md.
+Third-party dependencies remain under their respective licenses.

package/README.md

@@ -1,3 +1,134 @@
-# Temporary Holding Version
+<p align="center">
+  <img src="https://raw.githubusercontent.com/vincent38wargnier/ultimatehuman/main/docs/assets/hero.svg" alt="ultimatehuman — AI investigates. You decide." width="100%" />
+</p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<p align="center">
+  <a href="https://www.npmjs.com/package/ultimatehuman"><img src="https://img.shields.io/npm/v/ultimatehuman?color=d3ff5f&labelColor=152018" alt="npm version" /></a>
+  <a href="https://github.com/vincent38wargnier/ultimatehuman/blob/main/LICENSING.md"><img src="https://img.shields.io/badge/license-PolyForm_Noncommercial-d3ff5f?labelColor=152018" alt="PolyForm Noncommercial license" /></a>
+  <a href="https://github.com/vincent38wargnier/ultimatehuman/actions/workflows/check.yml"><img src="https://github.com/vincent38wargnier/ultimatehuman/actions/workflows/check.yml/badge.svg" alt="Build and package checks" /></a>
+</p>
+
+**Your production data already tells you where the product is breaking. ultimatehuman connects it to your code and brings you the investigation, the evidence, and a decision.**
+
+Run it on your machine. Set it up through chat. Watch the pipeline work. Review what deserves action.
+
+**Free for personal and other noncommercial use. Commercial use requires a separate paid license.** [Licensing and company deployments](https://github.com/vincent38wargnier/ultimatehuman/blob/main/LICENSING.md)
+
+## Start here
+
+```sh
+npx ultimatehuman@latest
+```
+
+Requires **macOS or Linux**, **Node.js 22.13+**, **Git**, and **Claude Code installed and signed in**. [Install Node.js](https://nodejs.org/en/download) · [Set up Claude Code](https://code.claude.com/docs/en/quickstart)
+
+The CLI verifies your existing Claude account, starts the local engine, and opens your browser. **Continue in Chat.** Chat and investigations use your configured Claude Code account and count toward its usage limits.
+
+Start with something like:
+
+> My project is Acme. The frontend is in ~/code/acme-web and the API is in ~/code/acme-api. Help me set up the first pipeline.
+
+1. **Connect the project.** Chat inspects your repositories and identifies frameworks, tests, and tracking tools.
+2. **Connect the signals.** If you already use PostHog or Datadog, connect it through a private credential form inside chat. No tracking yet? Start with a code-only Security check, or ask for help adding tracking.
+3. **Run one pipeline.** Review its scope and schedule, then ask it to run. Follow the investigation in **Pipeline live**.
+4. **Make the decision.** Open a finding in **Review**, inspect its evidence, and accept, dismiss, or set it aside.
+
+Run the same command again to reopen your workspace. Your repositories, settings, and conversation are preserved.
+
+## Less chasing. More deciding.
+
+A log is a symptom. A replay is a clue. A repository explains how the failure could happen. Putting those pieces together is the work.
+
+ultimatehuman runs that investigation for you: it groups signals, reads the relevant code, challenges the explanation, and checks the evidence before a finding reaches your review queue. If the evidence does not hold up, the pipeline can finish without a finding.
+
+**The AI does not approve its own work. You make the decision.**
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/vincent38wargnier/ultimatehuman/main/docs/assets/pipeline.svg" alt="Production signals and repository code flow through investigation and evidence checks to a human review." width="100%" />
+</p>
+
+## One conversation. The whole system in view.
+
+| Workspace | What you do there |
+| --- | --- |
+| **Chat** | Connect repositories and sources, create pipelines, set schedules, and change guidelines in plain language. |
+| **Setup** | See which repositories are wired, which sources are connected, and what to set up next. |
+| **Pipeline live** | Follow queued work, active investigations, evidence checks, blockers, and decisions across the system. |
+| **Review** | Read the problem, impact, and supporting evidence. Record your decision and export an issue draft. |
+
+The browser, terminal, and optional Telegram connection share one conversation. Chat offers the models available in your installed Claude Code, with **Opus 5.5** as its default. Changing the chat model leaves pipeline models unchanged.
+
+## Start with the tools you already use
+
+| Input | What it unlocks today |
+| --- | --- |
+| **PostHog** | Investigate errors and user behavior with event and session evidence. |
+| **Datadog** | Investigate recurring failures using error logs and events. |
+| **Git repositories** | Connect a finding to its code; investigate security risks without a tracker. |
+| **Findings API** | Submit a finding from another tool into the same review workflow. |
+
+Detection is not connection: finding an SDK in your repository does not grant access to its data. Chat opens a credential form, provides setup guidance, and checks access before treating a source as connected. Keys are saved on your machine, outside the chat transcript.
+
+Two pipeline templates are included. You can change their scope, schedule, timezone, models, and guidelines through chat.
+
+| Pipeline | Investigates | Default schedule | Findings per run |
+| --- | --- | --- | --- |
+| **Bug radar** | User-facing bugs from connected tracking data | Daily, 07:00 | Up to 5; at least 2 evidence items |
+| **Security check** | Exposed secrets, dependencies, and authentication/authorization patterns | Daily, 06:30 | Up to 3; at least 1 evidence item |
+
+Schedules use the engine's timezone unless you specify one. These are limits, not quotas. A quiet or inconclusive investigation may produce no tickets.
+
+## Your machine. Your account. Your judgment.
+
+- **Local workspace.** The engine, dashboard, configuration, and findings run on your machine. Relevant code and evidence are sent to your configured AI provider during analysis; connected sources are queried over their APIs.
+- **Read-only investigations.** Autonomous pipelines inspect sources and code. Interactive chat can run shell commands or edit files with approvals shown in the conversation.
+- **Capacity for your own work.** The engine reserves 30% of the account's usage window by default and can pause work when capacity is exhausted.
+- **Explicit outcomes.** Accepting a finding records your decision locally. You can export a Markdown issue draft; acceptance does not merge or deploy code.
+
+## Where this is going
+
+The goal is autonomous engineering with a human decision at its center:
+
+**Discover → Plan → Fix and test → Human decision → Verify**
+
+This first public release delivers the **investigation and review** part: chat setup, real source connections, scheduled pipelines, evidence checks, live progress, and local decisions.
+
+Autonomous fixes, browser proof of a fix, pull-request delivery, and deployed verification are the next stages. Sentry collection, automatic database preparation, and direct issue publishing are also not included in this release. [Read the pipeline concept](https://github.com/vincent38wargnier/ultimatehuman/blob/main/docs/concept-and-pipeline.md) · [See the roadmap](https://github.com/vincent38wargnier/ultimatehuman/blob/main/ROADMAP.md)
+
+## A few useful commands
+
+| Command | Purpose |
+| --- | --- |
+| `npx ultimatehuman@latest` | Start or reopen the browser workspace |
+| `npx ultimatehuman@latest chat` | Continue the shared conversation in your terminal |
+| `npx ultimatehuman@latest doctor` | Check account access and configuration |
+| `npx ultimatehuman@latest service install` | Keep the engine running after login/restart |
+| `npx ultimatehuman@latest stop` | Stop an engine launched without the background service |
+
+Prefer a persistent command? Run `npm install -g ultimatehuman`, then `ultimatehuman`.
+
+### Questions
+
+**Do I need a separate API key for Claude?** No. The normal installation uses your existing Claude Code login. Tracker credentials are separate and are requested only when connecting a source.
+
+**Can one project include several repositories?** Yes. Tell chat which repositories belong together, such as your frontend and API.
+
+**Do I need PostHog or Datadog?** No. The Security check works from repository code. Production bug investigations need a connected source with relevant data.
+
+**Does it run while my laptop is closed?** The machine must be awake and online. Use an always-on machine for continuous operation. The optional background service handles restarts, not sleep.
+
+**Where is my data?** In `~/.ultimatehuman` by default. Use `ULTIMATEHUMAN_HOME` to select another workspace. [Configuration and development](https://github.com/vincent38wargnier/ultimatehuman/blob/main/docs/development.md)
+
+## Build with us
+
+This is an early source-available release. Useful bug reports include the installed version, the steps you took, and what you expected. Remove credentials and private project data before posting.
+
+[Report a problem](https://github.com/vincent38wargnier/ultimatehuman/issues) · [Contribute](https://github.com/vincent38wargnier/ultimatehuman/blob/main/CONTRIBUTING.md) · [Run from source](https://github.com/vincent38wargnier/ultimatehuman/blob/main/docs/development.md) · [Agent installation guide](https://github.com/vincent38wargnier/ultimatehuman/blob/main/docs/agent-install.md)
+
+## License and commercial use
+
+Source-available under [PolyForm Noncommercial 1.0.0](https://github.com/vincent38wargnier/ultimatehuman/blob/main/LICENSE). Personal hobby projects and other uses permitted by that license are free, including its nonprofit, educational, research, and government uses. This is not an OSI-approved open-source license.
+
+To use ultimatehuman for commercial business operations, commercial deployments, or commercial redistribution, obtain a separate written commercial license from **Vincent Wargnier**. [Request a commercial license or company installation](https://github.com/vincent38wargnier/ultimatehuman/issues/new?title=Commercial%20license%20inquiry)
+
+Earlier Apache-licensed revisions retain their existing permissions; this change does not revoke them. [Scope, previous versions, and third-party licenses](https://github.com/vincent38wargnier/ultimatehuman/blob/main/LICENSING.md)