you-wrapped 0.2.0 → 0.3.0

package/SKILL.md

@@ -88,6 +88,41 @@ npx you-wrapped --render portrait.json --out ./wrapped
 Produces `wrapped.html` and a redacted `wrapped.share.html`. Tell them to read the share
 copy before posting it — they should verify their own scrub.
 
+## Phase 5 — offer to go deeper (every machine is different)
+
+The standard sweep is a floor, not a ceiling. `signals.json` contains an `unexplored`
+block listing sources that were **detected on this machine but deliberately not read** —
+plus a folder inventory. Use it to make a *specific* offer, never a generic menu.
+
+After delivering the portrait, tell them what else is available and what it would add.
+Name the actual apps found, with a one-line reason each:
+
+> "There's more here if you want it. I found Obsidian (24 MB of notes), WhatsApp,
+>  Signal, a Lightroom catalog, and 175 MB of your past Claude sessions. Your notes
+>  would sharpen the private-voice read; WhatsApp is often where family lives; the
+>  Claude sessions show what you actually ask for help with. Want any of those?"
+
+Also offer, when relevant:
+
+- **Other connectors** they have but you didn't sweep — Linear, GitHub, Notion, Figma,
+  Spotify, Strava, banking exports. Check what's actually available before offering.
+- **Deeper on one source** rather than wider: a single relationship over five years, one
+  project end-to-end, or their sent mail alone.
+- **A specific question** they bring. The best second pass is usually answering something
+  they've wondered about themselves, not more breadth.
+- **Their creative output** — the films, repos, designs, or writing they actually made.
+  Data about a person is not the same as the work they produced.
+
+Rules for going deeper:
+
+- **Read only what they ask for.** Detection is not permission. Never open a newly
+  discovered source without an explicit yes.
+- **Say what each source would and wouldn't tell you** before they decide.
+- **Re-render when you learn something material** — a portrait that ignores a major new
+  source is worse than one that never had it.
+- If a source is encrypted at rest (Granola, Signal, some note apps), say so plainly and
+  point at the connector or export path instead of attempting to break it.
+
 ---
 
 ## Rules

package/bin/cli.mjs

@@ -7,6 +7,7 @@ import { analyze } from '../src/analyze.mjs';
 import { SYSTEM, buildUserPrompt } from '../src/prompt.mjs';
 import { render } from '../src/render.mjs';
 import { scrubDeep, coarsenPlaces, harvestNames, labelFor } from '../src/scrub.mjs';
+import { discover } from '../src/discover.mjs';
 import { installSkill, skillInstalled, checkFullDiskAccess, openPrivacyPane, hostApp, nodeOk, resolveInvocation, hasClaudeCLI, insideClaude, launchClaude } from '../src/setup.mjs';
 
 const args = process.argv.slice(2);
@@ -150,7 +151,9 @@ photos.ok ? done(`photos — ${photos.count.toLocaleString()} (metadata only, no
 // ── 2. analyze
 step('analyzing');
 const profile = analyze({ messages, notes, browser, photos }, { days: DAYS });
-done('analyzed');
+// what else is on this machine that we did NOT read — the agent offers these
+profile.unexplored = discover();
+done(`analyzed — ${profile.unexplored.apps.length} more sources detected but unread`);
 
 // ── 3. evidence pack (stays local unless you synthesize)
 const m = profile.sources.messages || {};
@@ -241,7 +244,7 @@ ${portrait ? `  ${c.d}wrapped.html${c.x}         your portrait
   ${c.d}wrapped.share.html${c.x}   redacted copy, safe to post` : ''}
 
 ${c.d}${statLine}${c.x}
-`);
+${profile.unexplored.apps.length ? `${c.d}  ${profile.unexplored.apps.length} other sources on this machine were detected but not read.\n  Ask Claude to go deeper and it will offer them.${c.x}\n` : ''}`);
 
 // ── 6. hand off to Claude Code
 // The skill was written to disk above, and a *new* claude process loads skills

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "you-wrapped",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Turn the record your Mac already keeps into a portrait of your year. Runs entirely on your machine.",
   "type": "module",
   "bin": { "you-wrapped": "./bin/cli.mjs" },

package/src/discover.mjs

@@ -0,0 +1,86 @@
+// Everyone's machine is different. This looks for sources the CLI does NOT read,
+// so the agent can offer a specific "want to go deeper?" instead of a generic menu.
+// Existence and size only — nothing here opens or parses a file.
+
+import { existsSync, statSync, readdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+const H = homedir();
+const p = (...x) => join(H, ...x);
+
+const CANDIDATES = [
+  // note & knowledge apps
+  { id: 'obsidian',  label: 'Obsidian vault',        path: p('Library/Application Support/obsidian'), why: 'long-form notes and daily journals' },
+  { id: 'notion',    label: 'Notion (local cache)',  path: p('Library/Application Support/Notion'),   why: 'docs and databases you own' },
+  { id: 'bear',      label: 'Bear notes',            path: p('Library/Group Containers/9K33E3U3T4.net.shinyfrog.bear'), why: 'personal notes' },
+  { id: 'craft',     label: 'Craft',                 path: p('Library/Containers/com.lukilabs.lukiapp'), why: 'documents' },
+  { id: 'devonthink',label: 'DEVONthink',            path: p('Library/Application Support/DEVONthink 3'), why: 'research archive' },
+
+  // meetings & comms
+  { id: 'granola',   label: 'Granola',               path: p('Library/Application Support/Granola'),  why: 'meeting notes — what you say out loud (encrypted locally; use the MCP connector)' },
+  { id: 'slack',     label: 'Slack (desktop)',       path: p('Library/Application Support/Slack'),    why: 'where many people ideate, distinct from where they decide' },
+  { id: 'discord',   label: 'Discord',               path: p('Library/Application Support/discord'),  why: 'community and side-project conversation' },
+  { id: 'whatsapp',  label: 'WhatsApp',              path: p('Library/Group Containers/group.net.whatsapp.WhatsApp.shared'), why: 'often where family and non-US contacts live' },
+  { id: 'signal',    label: 'Signal',                path: p('Library/Application Support/Signal'),   why: 'private conversation' },
+  { id: 'mail',      label: 'Apple Mail',            path: p('Library/Mail'),                          why: 'sent mail is a distinct professional voice' },
+
+  // creative & work output
+  { id: 'lightroom', label: 'Lightroom catalog',     path: p('Pictures/Lightroom Library.lrlibrary'), why: 'what you photograph, and how you edit it' },
+  { id: 'photos',    label: 'Photos library',        path: p('Pictures/Photos Library.photoslibrary'), why: 'faces, places, and who you spend time with' },
+  { id: 'resolve',   label: 'DaVinci Resolve',       path: p('Library/Application Support/Blackmagic Design/DaVinci Resolve'), why: 'projects and timelines you cut' },
+  { id: 'xcode',     label: 'Xcode',                 path: p('Library/Developer/Xcode'),              why: 'what you build' },
+  { id: 'music',     label: 'Music library',         path: p('Music/Music/Music Library.musiclibrary'), why: 'taste and listening rhythm' },
+  { id: 'books',     label: 'Apple Books',           path: p('Library/Containers/com.apple.iBooksX'), why: 'what you read and highlight' },
+
+  // agent & shell history
+  { id: 'claude',    label: 'Past Claude sessions',  path: p('.claude/projects'),                     why: 'what you actually ask for help with' },
+  { id: 'cursor',    label: 'Cursor history',        path: p('Library/Application Support/Cursor'),   why: 'how you work with AI in code' },
+  { id: 'zsh',       label: 'Shell history',         path: p('.zsh_history'),                          why: 'the commands you actually run' },
+];
+
+// Folders worth naming if they're large — where someone's real output lives.
+const FOLDERS = ['Desktop', 'Documents', 'Downloads', 'Movies', 'Music', 'Pictures', 'Developer', 'Projects', 'Code'];
+
+function dirBytes(dir, depth = 0, budget = { n: 0 }) {
+  // Deliberately shallow: this is a size hint, not an audit.
+  if (depth > 2 || budget.n > 4000) return 0;
+  let total = 0;
+  let entries;
+  try { entries = readdirSync(dir, { withFileTypes: true }); } catch { return 0; }
+  for (const e of entries) {
+    if (budget.n++ > 4000) break;
+    if (e.name.startsWith('.')) continue;
+    const full = join(dir, e.name);
+    try {
+      if (e.isDirectory()) total += dirBytes(full, depth + 1, budget);
+      else total += statSync(full).size;
+    } catch {}
+  }
+  return total;
+}
+
+export function discover() {
+  const found = [];
+  for (const c of CANDIDATES) {
+    if (!existsSync(c.path)) continue;
+    let size = 0;
+    try { size = statSync(c.path).isDirectory() ? dirBytes(c.path) : statSync(c.path).size; } catch {}
+    found.push({ id: c.id, label: c.label, why: c.why, approxBytes: size });
+  }
+
+  const folders = [];
+  for (const f of FOLDERS) {
+    const dir = p(f);
+    if (!existsSync(dir)) continue;
+    let count = 0;
+    try { count = readdirSync(dir).filter(x => !x.startsWith('.')).length; } catch {}
+    if (count > 0) folders.push({ name: f, entries: count });
+  }
+
+  return {
+    apps: found.sort((a, b) => b.approxBytes - a.approxBytes),
+    folders: folders.sort((a, b) => b.entries - a.entries),
+    note: 'Detected but NOT read. Offer these to the user; read only what they ask for.',
+  };
+}

package/src/prompt.mjs

@@ -40,6 +40,8 @@ RULES:
   ownership — those are the only two levers that move a capacity-constrained person.
 - If the data is thin in some area, say so. An honest gap beats a confident fabrication.
 - Match their voice. If their messages are short and profane, don't write them a corporate memo.
+- After the portrait, offer to go deeper using the "unexplored" block in the signals —
+  name the specific sources found on THIS machine. Read nothing new without an explicit yes.
 
 OUTPUT: a JSON object matching the schema you are given. No prose outside the JSON.`;