ai-profile-cli 0.3.0__tar.gz

ai_profile_cli-0.3.0/.gitattributes

@@ -0,0 +1,3 @@
+* text=auto eol=lf
+*.png binary
+*.svg text eol=lf

ai_profile_cli-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+# Continuous verification on every push/PR: the full suite + lint.
+# This is the workflow behind the README's tests badge - the badge is
+# only as honest as this file stays.
+name: tests
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - name: Full suite + lint
+        run: |
+          python -m pip install -e ".[dev]"
+          python -m pytest tests -p no:cacheprovider
+          python -m ruff check src tests scripts

ai_profile_cli-0.3.0/.github/workflows/publish.yml

@@ -0,0 +1,40 @@
+# Tag-triggered PyPI publish via Trusted Publishing (OIDC - no stored
+# secrets anywhere). Prerequisite (one-time, PyPI web UI): a publisher
+# for project `ai-profile-cli`, owner WenyuChiou, repository ai-profile,
+# workflow publish.yml. The suite + ruff gate the upload: a red test
+# means no release, ever.
+name: publish
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write   # OIDC token for PyPI Trusted Publishing
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - name: Gate - full suite + lint
+        run: |
+          python -m pip install -e ".[dev]"
+          python -m pytest tests -p no:cacheprovider
+          python -m ruff check src tests scripts
+      - name: Build sdist + wheel
+        run: |
+          python -m pip install build==1.4.3
+          python -m build
+      - name: Publish to PyPI (Trusted Publishing)
+        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1

ai_profile_cli-0.3.0/.gitignore

@@ -0,0 +1,17 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+dist/
+build/
+.venv/
+.playwright-mcp/
+
+# Agent-collaboration working files (briefs, transcripts, replies) and
+# local artifact exports — never repo content. Shared here (not in
+# .git/info/exclude) so fresh clones are protected too: these files can
+# carry local absolute paths.
+/.ai/
+/.artifact/
+.claude/settings.local.json

ai_profile_cli-0.3.0/.hypothesis/.gitignore

@@ -0,0 +1,9 @@
+# This .gitignore file was automatically created by Hypothesis. Hypothesis gitignores
+# .hypothesis by default, because we generally recommend that .hypothesis not be checked
+# into version control.
+#
+# If you *would* like to check .hypothesis into version control, you should delete this
+# file. Hypothesis will not re-create this .gitignore unless .hypothesis is deleted (and
+# if it does, that's a bug - please report it!)
+
+*

ai_profile_cli-0.3.0/.hypothesis/constants/015c2e410aaf7eb9

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/storage/db.py
+# hypothesis_version: 6.161.1
+
+[384, ';', 'BEGIN', 'version', 'win32']

ai_profile_cli-0.3.0/.hypothesis/constants/0ba88f907dc84408

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/scanner.py
+# hypothesis_version: 6.161.1
+
+['sha1']

ai_profile_cli-0.3.0/.hypothesis/constants/181e26901f2aa440

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/viz.py
+# hypothesis_version: 6.161.1
+
+[365, 'All time', 'active_ai_days', 'active_days', 'actor_presences', 'ai_actor_presences', 'ai_commits', 'attributed_commits', 'commits_scanned', 'counts', 'daily', 'daily container', 'daily date', 'date', 'declared', 'display name', 'display_name', 'each day cell', 'each day count', 'each provider row', 'evidence', 'evidence_records', 'from', 'generated_on', 'imported', 'inferred', 'label', 'period', 'period.label', 'privacy', 'provider', 'provider slug', 'provider_count', 'providers', 'providers container', 'schema_version', 'to', 'total_commits', 'total_records', 'totals', 'unknown', 'unknown_commits', 'verified']

ai_profile_cli-0.3.0/.hypothesis/constants/1d91045722da8d58

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/themes.py
+# hypothesis_version: 6.161.1
+
+['#033d8b', '#0550ae', '#0969da', '#0d1117', '#161b22', '#1f2328', '#1f6feb', '#21262d', '#218bff', '#388bfd', '#3d444d', '#4493f8', '#58a6ff', '#59636e', '#6e7681', '#6e7781', '#9198a1', '#a5d6ff', '#d1d9e0', '#eff2f5', '#f0f6fc', '#f6f8fa', '#ffffff', 'github-dark', 'github-light']

ai_profile_cli-0.3.0/.hypothesis/constants/300729828f9fc1d2

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/summary_svg.py
+# hypothesis_version: 6.161.1
+
+[0.2, 0.3, 0.35, 0.5, 0.52, 0.55, 0.56, 0.66, 0.72, 0.75, 0.82, 1.0, 100, 104, 112, 120, 122, 140, 144, 160, 164, 172, 184, 208, 224, 360, 400, 500, 512, 600, 700, 830, '0%', '0.583333', '100%', '</svg>', '<1%', '>99%', '?', 'AI actor presences', 'AI providers', 'Apr', 'Aug', 'Dec', 'Feb', 'Jan', 'Jul', 'Jun', 'Mar', 'May', 'Nov', 'Oct', 'Sep', 'Unknown commits', 'declared', 'end', 'github-dark', "iIl.,:;'`|!ftj ()[]·", 'imported', 'inferred', 'mMW@%&', 'middle', 'start', 'unknown', 'unrecognized', 'verified', '…']

ai_profile_cli-0.3.0/.hypothesis/constants/3dd03d239e44486d

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/cli.py
+# hypothesis_version: 6.161.1
+
+['%Y-%m-%d', '--full', '--out', '--verbose', '--version', '-v', '.git', 'aggregate', 'aiprofile', 'badge-dark.svg', 'badge-light.svg', 'command', 'dist', 'github-dark', 'github-light', 'heatmap-dark.svg', 'heatmap-light.svg', 'imported', 'inferred', 'init', 'path', 'render', 'scan', 'seconds', 'store_true', 'summary-dark.svg', 'summary-light.svg', 'verified', 'version']

ai_profile_cli-0.3.0/.hypothesis/constants/46484eb265dbc142

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/registry.py
+# hypothesis_version: 6.161.1
+
+['aider', 'aider@aider.chat', 'alibaba', 'amazon', 'amazon q', 'amazon-q', 'amazon-q@amazon.com', 'amp', 'amp@ampcode.com', 'anthropic', 'cascade', 'cascade@windsurf.ai', 'cascade@windsurf.com', 'claude code', 'claude-code', 'claudecode', 'codex', 'codex cli', 'codex-cli', 'cognition', 'copilot', 'copilot@github.com', 'cursor', 'deepseek', 'devin', 'gemini', 'gemini cli', 'gemini-cli', 'gemini-code-assist', 'github', 'github copilot', 'github-copilot', 'google', 'jules', 'kimi code', 'kimi-code', 'meta', 'meta ai', 'mistral', 'mistral ai', 'moonshot', 'moonshot ai', 'noreply@google.com', 'noreply@openai.com', 'ollama', 'openai', 'openhands', 'qwen code', 'qwen-code', 'replit', 'replit agent', 'replit-agent', 'roo code', 'roo-code', 'roocode', 'roomote@roocode.com', 'vibe code', 'vibe-code', 'windsurf', 'x.ai', 'xai', 'z.ai', 'zhipu']

ai_profile_cli-0.3.0/.hypothesis/constants/469682b22d658606

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/config.py
+# hypothesis_version: 6.161.1
+
+[384, 448, ', ', '.aiprofile', '.json.tmp', 'AIPROFILE_HOME', 'aiprofile.db', 'config.json', 'identities', 'path', 'publication_level', 'repositories', 'repository_uid', 'salt', 'utf-8', 'win32']

ai_profile_cli-0.3.0/.hypothesis/constants/4787e114548c11ed

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/schema/vocab.py
+# hypothesis_version: 6.161.1
+
+['Aider', 'Amazon Q', 'Amp', 'Claude', 'Copilot', 'Cursor', 'DeepSeek', 'Devin', 'GLM', 'Gemini', 'Grok', 'Kimi', 'Llama', 'Mistral', 'Ollama', 'OpenAI', 'OpenHands', 'Qwen', 'Replit', 'Roo Code', 'Unrecognized', 'Windsurf', 'aggregate_only', 'ai', 'ai-mode', 'ai-provider', 'ai-tool', 'ai_assisted', 'ai_generated', 'ai_reviewed', 'aider', 'alibaba', 'amazon', 'amazon-q', 'amp', 'anthropic', 'claude-code', 'co-authored-by', 'codex-cli', 'cognition', 'commit', 'copilot', 'cursor', 'declared', 'deepseek', 'devin', 'documentation', 'excluded', 'full', 'gemini-cli', 'gemini-code-assist', 'git_trailer', 'git_trailer_coauthor', 'github', 'google', 'human', 'human_only', 'human_reviewed_ai', 'implementation', 'imported', 'inferred', 'jules', 'kimi-code', 'manual_declaration', 'meta', 'mistral', 'mixed', 'moonshot', 'none', 'ollama', 'openai', 'openhands', 'other', 'qwen-code', 'replit', 'replit-agent', 'repository_anonymous', 'review', 'roo-code', 'testing', 'unknown', 'unrecognized', 'verified', 'vibe-code', 'windsurf', 'xai', 'zhipu']

ai_profile_cli-0.3.0/.hypothesis/constants/4b3dc9d999dfb5d7

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/adapters/trailers.py
+# hypothesis_version: 6.161.1
+
+[',', '-', ':', '_', 'ai-mode', 'ai-model', 'ai-provider', 'ai-reviewed-by', 'ai-role', 'ai-schema', 'ai-tool', 'co-authored-by', 'contradictory-group', 'email', 'human', 'incomplete-group', 'malformed-mode', 'name', 'none', 'present', 'unknown-role', 'values']

ai_profile_cli-0.3.0/.hypothesis/constants/5b73d75526838a3e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/storage/__init__.py
+# hypothesis_version: 6.161.1
+
+[]

ai_profile_cli-0.3.0/.hypothesis/constants/606cf4e2a9f0bcd3

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/export.py
+# hypothesis_version: 6.161.1
+
+['.bak', '.tmp', 'badge-dark.svg', 'badge-light.svg', 'heatmap-dark.svg', 'heatmap-light.svg', 'profile.json', 'summary-dark.svg', 'summary-light.svg', 'utf-8', 'x']

ai_profile_cli-0.3.0/.hypothesis/constants/66104b2322415e55

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/errors.py
+# hypothesis_version: 6.161.1
+
+[]

ai_profile_cli-0.3.0/.hypothesis/constants/6939069d327ecd0c

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/storage/store.py
+# hypothesis_version: 6.161.1
+
+['BEGIN', 'id']

ai_profile_cli-0.3.0/.hypothesis/constants/6a7bfa945445f617

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/schema/__init__.py
+# hypothesis_version: 6.161.1
+
+['AceEvent', 'ActivityType', 'ActorType', 'ContributionMode', 'EvidenceLevel', 'ProvenanceSource', 'PublicationLevel', 'Role', 'SourceType', 'build_event', 'canonical_json', 'compute_event_id', 'merge_event_group', 'to_dict']

ai_profile_cli-0.3.0/.hypothesis/constants/6d23c053eeec8d84

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/schema/event.py
+# hypothesis_version: 6.161.1
+
+[',', ', ', ':', '^[0-9a-f]{40}$', 'ace-identity-v1', 'ace_', 'activity', 'activity.roles', 'activity.timestamp', 'activity.type', 'actor', 'actor.type', 'commit_sha', 'contribution_mode', 'event_id', 'evidence_level', 'human_reviewed', 'model', 'model_raw', 'provenance', 'provider', 'provider_raw', 'recorded_at', 'repository_uid', 'roles', 'schema_version', 'source', 'source_reference', 'source_type', 'sources', 'timestamp', 'tool', 'tool_raw', 'type', 'utf-8']

ai_profile_cli-0.3.0/.hypothesis/constants/6e9774fcaa01b7a7

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/storage/migrations.py
+# hypothesis_version: 6.161.1
+
+[]

ai_profile_cli-0.3.0/.hypothesis/constants/9487c4f418fac494

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/adapters/__init__.py
+# hypothesis_version: 6.161.1
+
+[]

ai_profile_cli-0.3.0/.hypothesis/constants/a762b1fa0f7c34ce

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/badge_svg.py
+# hypothesis_version: 6.161.1
+
+[0.999, '</g>', '</svg>', 'AI-assisted', 'no data', 'verified by git']

ai_profile_cli-0.3.0/.hypothesis/constants/a7a1f2134e21af76

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/__init__.py
+# hypothesis_version: 6.161.1
+
+['0.2.0', '0.3.0']

ai_profile_cli-0.3.0/.hypothesis/constants/ae8276b72ed1f0ea

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/privacy.py
+# hypothesis_version: 6.161.1
+
+['actor_presences', 'attributed_commits', 'dates']

ai_profile_cli-0.3.0/.hypothesis/constants/c827650f32894259

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/heatmap_svg.py
+# hypothesis_version: 6.161.1
+
+[0.45, 0.65, 0.85, 1.0, 112, 120, 124, 364, 600, '#', '0%', '1', '100%', '2-4', '5-7', '8+', '</svg>', 'AI share:', 'Apr', 'Aug', 'Dec', 'Feb', 'Fri', 'Jan', 'Jul', 'Jun', 'Mar', 'May', 'Mon', 'Nov', 'Oct', 'Sep', 'Volume:', 'Wed', 'end', 'middle', '≤25%', '≤50%', '≤75%']

ai_profile_cli-0.3.0/.hypothesis/constants/ce0d3408eab3b4ef

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/brand.py
+# hypothesis_version: 6.161.1
+
+['#000000', '#0B100F', '#152347', '#17171A', '#1B1F24', '#1D1547', '#1E3833', '#2B1547', '#2B203C', '#2D2D2D', '#2E2E2E', '#2E3138', '#33302E', '#3C231B', '#4377FE', '#472315', '#472815', '#5786FE', '#6950EF', '#7A7A7A', '#8E75B2', '#97D8CB', '#9844FF', '#B74C2A', '#DE5A06', '#DFE6F6', '#E2A28D', '#E3DFF6', '#E3E5E8', '#E3F2EF', '#E7E6E4', '#E9DFF6', '#EBEBEB', '#ECE6F4', '#EEEDEC', '#EEEFF1', '#F04805', '#F26207', '#F6E5DF', '#F6E6DF', '#F6E8DF', '#FA520F', 'aider', 'alibaba', 'amazon', 'amp', 'anthropic', 'cognition', 'cursor', 'deepseek', 'github', 'google', 'meta', 'mistral', 'moonshot', 'ollama', 'openai', 'openhands', 'replit', 'roo-code', 'windsurf', 'xai', 'zhipu']

ai_profile_cli-0.3.0/.hypothesis/constants/e409c1c2a387079e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/render/__init__.py
+# hypothesis_version: 6.161.1
+
+[]

ai_profile_cli-0.3.0/.hypothesis/constants/f191e6a3a01e3bf3

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/aggregate.py
+# hypothesis_version: 6.161.1
+
+['.', '0.1', '0.2', 'activity_timestamp', 'actor_type', 'ai', 'ai_commits', 'attributed_commits', 'commit_id', 'date', 'evidence_level', 'human', 'id', 'mixed', 'n', 'provider', 'provider_raw', 'repository_uid', 'schema_version', 'tool_raw', 'total_commits', 'unknown']

ai_profile_cli-0.3.0/.hypothesis/constants/f579a39123bc3edb

@@ -0,0 +1,4 @@
+# file: /home/runner/work/ai-profile/ai-profile/src/aiprofile/gitio.py
+# hypothesis_version: 6.161.1
+
+[300, 65535, '#', '--get', '--show-object-format', '--show-toplevel', '.git', '/', '0', '22', '443', '80', '9418', ':', '?', '@', 'HEAD', '[A-Za-z]', 'bad default revision', 'config', 'file', 'get-url', 'git', 'git+ssh', 'github.com', 'host', 'http', 'https', 'log', 'origin', 'path', 'remote', 'replace', 'rev-parse', 'sha1', 'ssh', 'user.email', 'utf-8', 'v5']

ai_profile_cli-0.3.0/AGENTS.md

@@ -0,0 +1,129 @@
+# AGENTS.md — agent orientation for ai-profile
+
+`aiprofile` is a local-first CLI that scans local Git repos for explicit
+AI provenance (AI-* trailers, known co-author trailers) and renders
+privacy-safe SVG/JSON profile summaries. It is NOT an AI code detector.
+Read `README.md` and `CONTRIBUTING.md` first; where docs and code
+disagree, docs win and the code is the bug.
+
+## Quality gates (must stay green after every change)
+
+- `python -m pytest tests -p no:cacheprovider` — full suite; state the
+  count you observe (as of 2026-07-21: 340 passed, 1 skipped — the skip
+  is a POSIX-only fixture on Windows; if your run differs, update this
+  line in the same commit).
+- `python -m ruff check src tests` — clean.
+- Privacy invariants are test-enforced; anything weakening `VizStats`
+  structural redaction needs its own ADR. Snapshot/sample regeneration
+  only via the sanctioned per-family commands (byte-drift guarded):
+  `python tests/unit/test_render_summary.py` (summary family) and
+  `python tests/unit/test_heatmap_svg.py` (heatmap/badge family, D4).
+- Contract changes need an ADR under `docs/decisions/` + schema bump.
+
+## Collaboration contract (Fable ↔ Codex gate loop)
+
+This repo is built through numbered independent "gate" review rounds:
+
+- **Fable (Claude Code)** implements, resolves review findings
+  red-first (regression proven failing pre-fix), records dispositions in
+  `docs/reviews/gate-disposition.md` + `docs/progress.md`, and is the
+  ONLY party that commits (`Resolve gate-N review: ...`).
+- **Codex** acts as independent Principal-Software-Engineer reviewer:
+  verification only, adversarial reproduction with runnable probes,
+  never commits, never changes production/test/design code. The review
+  overwrites `docs/reviews/gate-review.md` (repo convention; usually
+  committed alongside the commit that resolves it — but a round may
+  leave it deliberately uncommitted, as gate-9's did; check `git status`
+  and the round's own commit message/brief before assuming which).
+
+## Handoff protocol (replaces clipboard copy-paste between apps)
+
+Round files live in `.ai/handoff/` (git-ignored via `.git/info/exclude`;
+Codex's file tools read them regardless):
+
+- `NNN_<slug>.to_codex.md` — a task/review brief authored by Fable.
+- `NNN_<slug>.to_fable.md` — Codex's durable reply (same NNN; this file
+  is never overwritten by later rounds, unlike gate-review.md).
+- Exception: `000_gate8_review_snapshot.to_fable.md` is a one-off
+  bootstrap snapshot authored by Fable (preserving the never-committed
+  gate-8 review text), not a Codex reply.
+- NNN is single-use: a second round over the same range or brief (a
+  second opinion, a re-run) ALWAYS gets its own fresh NNN brief — never
+  point a new round at an existing NNN, because its reply instruction
+  would overwrite that round's supposedly-durable `.to_fable.md`
+  (this happened live on 2026-07-21: an app round reusing brief 001
+  silently clobbered the headless round's 001 reply; recovered from a
+  session transcript, which will not always exist).
+- While an external review of a committed range is in flight, do not
+  draft next-round files in the same working tree: the reviewer's
+  `git status` picks up the strays (observed live during gate-11 — a
+  concurrently-drafted test file appeared mid-review; the reviewer
+  disclosed rather than touched it, but the ambiguity is avoidable).
+  Range-pinned checks are immune, tree-state checks are not.
+
+To run a round from the Codex app, open it with cwd = this repo's root
+and say exactly:
+
+> Read .ai/handoff/NNN_<slug>.to_codex.md and execute all instructions;
+> write your reply to .ai/handoff/NNN_<slug>.to_fable.md.
+
+The brief itself carries all round-specific instructions (review range,
+expected test counts, output contract) — the sentence never changes.
+
+Preferred transport (proven on the gate-10 round, 2026-07-22): Fable
+runs the same brief headlessly — no human in the transport at all —
+via the codex-delegate wrapper (personal-environment tooling from the
+maintainer's global skills install, optional; the Codex-app sentence
+above is the portable path for anyone else):
+
+```bash
+bash ~/.claude/skills/codex-delegate/scripts/run_codex.sh \
+  --brief-file .ai/handoff/NNN_<slug>.to_codex.md --repo <repo-root>
+```
+
+Machine-readable status lands at `<brief>.txt.result.json`
+(`success` / `fallback` = Codex quota exhausted / `error`). On
+`fallback`, wait for the quota reset or fall back to the Codex-app
+sentence above — never substitute a same-vendor review for the
+independent external round.
+
+## Commit trailers (dogfood — this repo's own product)
+
+Every commit here declares its AI participation with the tool's own
+schema (README "Declaring AI participation"), so `aiprofile scan` on
+this repo reports the true multi-tool history. One block per AI actor;
+a repeated `AI-Provider:` key starts the next block (ADR-005). Example
+for the standard round shape (Fable implements, Codex reviews):
+
+```text
+AI-Provider: Anthropic
+AI-Model: Claude-Fable-5
+AI-Tool: Claude-Code
+AI-Role: implementation, documentation
+AI-Mode: AI-Assisted
+AI-Provider: OpenAI
+AI-Model: GPT-5.5
+AI-Tool: Codex-CLI
+AI-Role: review
+AI-Mode: AI-Assisted
+```
+
+ONE CONTIGUOUS BLOCK — never put a blank line between groups: git's
+trailer extraction (`%(trailers:only)`) keeps only the last contiguous
+paragraph, so a blank line silently drops every group above it
+(verified empirically 2026-07-21: the blank-line form lost the entire
+Anthropic group). The repeated `AI-Provider:` key alone is the group
+separator.
+
+AND a blank line BEFORE the block — the trailer paragraph must be
+separated from the body prose, or git rejects the whole paragraph as
+non-trailers (too many non-trailer lines in it). Found by dogfooding
+2026-07-23: commits ea5f37d / d2c1147 / 66bc3e9 glued their trailer
+block to the preceding body line and scan as `unknown` forever (pushed
+history is never rewritten here — this note is the erratum). The two
+rules together: blank line before the block, no blank line inside it.
+
+Honesty rules: only list actors that actually touched the commit;
+`AI-Reviewed-By: Human` only when a human actually read the diff
+(omit or `None` otherwise); keep the `Co-Authored-By:` line too
+(GitHub UI + the tool's registry fallback both read it).

ai_profile_cli-0.3.0/CHANGELOG.md

@@ -0,0 +1,132 @@
+# Changelog
+
+Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+Versioning: [SemVer](https://semver.org/spec/v2.0.0.html) on the CLI
+package. The ACE event schema carries its own semver (ADR-012) and the
+SQLite store its own migration chain (ADR-004) — see the upgrade policy
+below.
+
+## Upgrade policy
+
+- **Within a minor line (0.1.x):** drop-in. The database migration
+  runner applies any pending migrations automatically on the next
+  command; config.json is read-compatible; no action needed.
+- **Across minors (0.1 → 0.2):** read the release notes first. The ACE
+  schema refuses aggregation across incompatible `major.minor` payload
+  versions by design (ADR-012) — a release that bumps the event schema
+  states explicitly whether existing scanned data re-aggregates or a
+  rescan is needed. Your raw repositories are always the source of
+  truth: worst case, `aiprofile scan` re-derives everything.
+- **Downgrades are unsupported:** the migration chain is forward-only.
+  If you must roll back the CLI, delete `~/.aiprofile` (or your
+  `AIPROFILE_HOME`) and re-init + rescan — nothing in it is
+  irreplaceable (config identities/policy aside, which are a few lines
+  of JSON you can note down first).
+
+## [Unreleased]
+
+(nothing yet)
+
+## [0.3.0] — 2026-07-23
+
+### Added
+
+- **Collaboration-ratio heatmap** (`heatmap-{light,dark}.svg`,
+  ADR-020): GitHub-style year grid where intensity = total commits
+  that day — your own human commits included — and hue = the day's
+  AI-collaboration share (five quantized bins, neutral → accent). The
+  daily series window widens to 365 days (ADR-018 addendum);
+  `profile.json` day cells gain `total_commits`/`ai_commits`
+  (additive).
+- **AI-collaboration badge** (`badge-{light,dark}.svg`): a small flat
+  shield — "AI-assisted | K% · verified by git" — using the summary
+  card's own headline share and rounding. `aiprofile render` now
+  writes all six SVG assets plus profile.json in one atomic bundle.
+- Provider brand marks for **OpenAI** and **Grok (xAI)** from a second
+  icon source (lobe-icons, MIT, pinned commit) via
+  `vendor_brand_icons.py --source lobe`; new `THIRD_PARTY_NOTICES.md`
+  carries the MIT text (ADR-017 D5 addendum).
+- Two-tier provider model (ADR-019): the DECLARATION tier grows by ten
+  providers - Kimi (moonshot), DeepSeek, Qwen (alibaba), Mistral, Grok
+  (xai), GLM (zhipu), Ollama, Llama (meta), Replit, Amp - so
+  hand-written `AI-Provider:` trailers resolve and rank; the AUTO-MATCH
+  tier stays evidence-gated and gains exactly one identity: Amp
+  (`amp@ampcode.com`, documented default-on co-author trailer).
+- Eight new provider marks vendored mechanically from the pinned CC0
+  simple-icons commit via the new `scripts/vendor_brand_icons.py`
+  (byte-verified provenance; Amp keeps the honest letter tile - its
+  lobe icon is multi-path - and Grok gained its mark via the second
+  source above).
+- Calendar band polish: intensity-bin legend + "publishable repos only"
+  cue, clock-free month boundary labels, and clearer provider-overflow
+  wording.
+- Repo social-preview card (docs/assets/social-preview.{svg,png}) in
+  the banner's visual language.
+
+### Fixed
+
+- Display-name provider declarations resolve (latent since v0.1):
+  `AI-Provider: Claude` / `Gemini` / `Copilot` / `Kimi` / `Qwen` /
+  `Grok` / `GLM` / `Llama` etc. previously produced canonical-null
+  events that published as "Unrecognized". `PROVIDER_ALIASES` now
+  derives an entry from every schema-owned display name plus common
+  spacing/punctuation variants (Mistral AI, Meta AI, x.ai, Z.ai,
+  Moonshot AI), closing the class for future providers too.
+- `aiprofile --version` now reports the real version: 0.2.0 bumped
+  `pyproject.toml` but not `__version__`, so the CLI kept saying
+  0.1.0. Both sources are now pinned together by a regression test.
+
+## [0.2.0] — 2026-07-23
+
+### Added
+
+- Provider brand identity on the summary card (round D1, ADR-017):
+  official marks for Claude / Gemini / GitHub Copilot / Cursor /
+  Windsurf (CC0 simple-icons subset, byte-verified) with per-theme
+  brand-colored bars; honest letter-tile fallback for providers with
+  no CC0 mark (OpenAI, Amazon Q, Aider, Roo Code, OpenHands, Devin).
+- README banner (docs/assets/banner-{light,dark}.svg): deterministic
+  generated hero in the card's own visual language (isometric brand
+  stacks), theme-paired.
+- Tag-triggered PyPI publish workflow (.github/workflows/publish.yml)
+  via PyPI Trusted Publishing (OIDC, no stored secrets); gated on the
+  full test suite + ruff before build/upload.
+- Isometric daily AI-collaboration calendar (round D2, ADR-018):
+  a 12-week 3D activity grid, stacked by provider color, built ONLY
+  from explicitly-publishable repositories — aggregate-only
+  repositories never surface their activity dates. Fully static SVG
+  (no animation - two entrance attempts were invisible in static
+  captures and were removed).
+
+### Changed
+
+- ACE schema version 0.1.0 -> 0.2.0: `profile.json` and the internal
+  visualization contract gain the additive `daily` series (ADR-012's
+  minor-bump rule for additive optional fields, binding post-v0.1.0).
+  Databases scanned under 0.1 remain fully aggregatable; new scans
+  stamp 0.2.0.
+
+## [0.1.0] — 2026-07-22
+
+First public release.
+
+### Added
+
+- Vertical slice: `aiprofile init` / `scan` / `aggregate` / `render` —
+  explicit AI provenance (AI-* trailers + verified co-author registry)
+  from local git repositories into a local SQLite store, rendered as
+  privacy-safe SVG cards (light/dark) + `profile.json`.
+- Privacy model: local-first (zero network, zero telemetry),
+  `aggregate_only` by default, `aggregate` output IS the publish
+  preview, structurally sealed `VizStats` publication boundary
+  (ten adversarial gate rounds, gates 2–11, each independently
+  verified; see `docs/reviews/`).
+- Evidence-quality ladder (`verified > declared > imported > inferred
+  > unknown`); honest `unknown` for commits without explicit evidence —
+  never inferred from code style.
+- Pre-release hardening: owner-only file permissions (POSIX-enforced,
+  retrofitted to existing installations on every load), git-worktree
+  placement warning, cp950-safe console text, packaged-install release
+  smoke script, cherry-pick counting semantics documented + tested,
+  console (stdout/stderr) canary sweeps, hypothesis property fuzzing
+  over the schema invariants.

ai_profile_cli-0.3.0/CONTRIBUTING.md

@@ -0,0 +1,44 @@
+# Contributing
+
+Thanks for considering a contribution. This project is small on purpose;
+the bar is correctness and privacy, not feature count.
+
+## Setup and verification
+
+```bash
+pip install -e ".[dev]"        # Python >= 3.11, git >= 2.17 (SHA-1 repos)
+python -m pytest               # full suite must pass (states its count)
+python -m ruff check src tests
+```
+
+Integration tests build throwaway git repositories under pytest tmp dirs;
+no network is used anywhere in the suite, ever.
+
+## Ground rules
+
+- `docs/schema.md` is the normative event contract; `docs/architecture.md`
+  pins module boundaries (renderers/exporters consume `VizStats` only).
+  Where code and docs disagree, the docs win and the code is a bug.
+- **Contract changes require an ADR** under `docs/decisions/` (and a schema
+  version bump per ADR-012). New sections in existing docs get review.
+- **Registry additions need primary evidence**: an entry in
+  `src/aiprofile/registry.py` must cite an official doc, tool source code,
+  or verified real-commit usage (see `docs/landscape.md` §2.1 for the
+  verification standard). Unverified strings stay out.
+- **Attribution is explicit-evidence-only.** No code-style inference, no
+  LLM classification of historical commits — patches adding either will be
+  declined regardless of accuracy.
+- Privacy invariants are test-enforced (leak tests, policy tests); a change
+  that weakens `VizStats`' structural redaction needs its own ADR and a
+  very good reason. Read `docs/PRIVACY.md` first.
+- Deterministic rendering: snapshot updates must be intentional; regenerate
+  via `python tests/unit/test_render_summary.py` and inspect the diff. That
+  one command regenerates BOTH the test snapshots and the committed README
+  sample assets (`docs/assets/summary-sample-{light,dark}.svg`) from their
+  authoritative synthetic fixture — never hand-edit or copy either set; a
+  byte-exact drift guard fails the suite if they fall out of sync.
+
+## Reporting privacy/security issues
+
+Open an issue titled "privacy report" without including the sensitive
+details, and the maintainer will follow up privately.

ai_profile_cli-0.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wenyu Chiou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.