tokpop.dev Collector

tokpop.dev is the new product name. The published package and executable remain ai-native-profile; no reinstall is required for existing devices.

Connect local AI coding activity to a private tokpop.dev, then choose what to publish on your profile or GitHub README.

The collector runs directly with npx; no global installation is required. It discovers supported tools, builds aggregate activity locally, lets you inspect the exact payload, and syncs only after you pair and approve the device.

Quick start

Check which coding tools are available:

npx --yes ai-native-profile@latest sources

Inspect the exact aggregate payload before sending anything:

npx --yes ai-native-profile@latest preview

Pair this computer with your cloud profile:

npx --yes ai-native-profile@latest connect

The command opens your default browser to a short-lived approval page with the code already filled in. Sign in with your own GitHub account and approve the device. If the browser does not open, copy the printed approval link; keep it private. Use connect --no-browser to open the link yourself. Remote/SSH and non-interactive sessions only print the link. The collector then shows the privacy boundary and asks before the first sync. You can also run a one-off sync later:

npx --yes ai-native-profile@latest sync

For the fastest setup, sign in on the website and choose Power up with coding activity. The site creates a one-time command like this:

npx --yes ai-native-profile@latest connect --code ABCD1234

That command is already associated with the signed-in profile. It detects sources, displays the privacy boundary, asks before the first sync, and updates the open card without requiring the code to be entered again. After that first sync it offers automatic 15-minute refreshes; approving them installs a visible user-level macOS LaunchAgent or Linux systemd timer.

Enable persistent 15-minute updates later:

npx --yes ai-native-profile@latest watch --install

Check their status with doctor, or disable them with watch --uninstall. Plain watch remains available for a foreground-only loop that stops with the process. The scheduled collector is copied under ~/.config/ai-native-profile/collector; no provider credentials or source data are copied.

Repair or upgrade automatic sync

An existing scheduled job keeps its own collector copy. After upgrading, run the new version's watch --install once to replace that copy and preserve the executable search path from your terminal. Pairing is preserved; do not disconnect first.

doctor distinguishes a missing job, a job that is not loaded, an unverified first run, a failed or partial run, and a recent successful automatic upload. A manual sync does not prove the background job works. Last-attempt and last-success timestamps are stored locally without credentials or raw error content. A sleeping/offline computer may show a delayed sync; retry after it wakes.

Supported coding sources

| Source | Collection path | Trust label | |---|---|---| | Codex | Account usage when supported; retained local session counters otherwise | Official account source, or partial locally derived coverage | | Claude Code | Deduplicated local session usage plus non-overlapping statistics-cache history | Local exact for retained records; estimated daily splits for cache-inclusive statistics history; partial lifetime coverage | | Cursor | Supported local database metadata | Estimated; excluded from rankings | | Gemini CLI | Locally retained CLI telemetry | Locally derived | | GitHub Copilot CLI | Locally retained CLI activity | Locally derived |

ChatGPT Web and Claude Web are connected separately through browser-local official export import or explicit MCP activity. This collector does not read browser conversations or provider cookies.

Privacy boundary

Normal synchronization may include:

• Dates and provider/model identifiers
• Token, session, turn, and tool-call counts
• Input, output, cache-write, and cache-read token counts when a provider reports them
• Duration, coverage, freshness, and provenance
• Collector version and an anonymous device identifier

It never includes:

• Prompts or responses
• Source code
• Tool arguments or outputs
• Shell commands
• Repository names or file paths
• Conversation titles or email addresses
• Cookies, provider credentials, access tokens, or environment variables

Run preview whenever you want to inspect the exact aggregate payload. Pairing credentials are stored locally in ~/.config/ai-native-profile/config.json with user-only file permissions.

Commands

| Command | Purpose | |---|---| | connect | Pair this device with the hosted profile | | sources | Detect supported local coding tools | | preview | Print the exact aggregate payload without sending it | | sync | Send one approved aggregate batch | | watch | Sync every 15 minutes in the foreground | | watch --install | Enable persistent 15-minute updates after Terminal closes | | watch --uninstall | Disable persistent updates | | doctor | Check local sources, pairing, and automatic-sync status | | sessions | List deliberately published session stories | | share | Preview or publish a manually supplied sanitized story | | unshare | Revoke a published story | | export | Alias for preview | | disconnect | Disable automatic updates and remove the local platform pairing |

Use a self-hosted deployment instead of the managed service:

npx --yes ai-native-profile@latest connect --api-url https://your-domain.example

Troubleshooting Codex discovery

The collector checks the shell PATH and the standard macOS ChatGPT/Codex app-bundle locations for the Codex App Server executable. If yours lives elsewhere, provide its exact path:

ANP_CODEX_PATH=/path/to/codex npx --yes ai-native-profile@latest preview

If the App Server is unavailable, lacks account/usage/read, or returns no daily buckets, the collector falls back to retained token counters in local sessions and archived_sessions directories. It honors CODEX_HOME when set. This fallback is partial history, not a lifetime account total. Repeated cumulative snapshots are not summed, and reported cache/reasoning tokens are not added again. Account totals and local totals are never combined. If neither source has usable records, the collector reports the missing usage rather than claiming zero.

What the evidence means

Every metric carries its source, coverage dates, freshness, and provenance. A device signature protects integrity in transit; it does not make a user-controlled computer tamper-proof. Activity demonstrates workflow adoption, not developer skill, productivity, code quality, or AI authorship.

Conversation imports, MCP observations, manual stories, and estimated metrics never affect competitive scores.

Links

• Create a profile
• Source code and issue tracker
• Privacy boundary
• Provider capability matrix
• Scoring methodology

License

MIT. Provider names are compatibility labels. tokpop.dev is provider-neutral and is not endorsed by the providers it supports.