@agentstrack/collector 0.1.0

package/dist/git/commits.js

@@ -0,0 +1,85 @@
+import { commitsSince, findGitRoot } from './repo.js';
+/** Nothing older than this is attributed to a session, however far back its transcript runs. */
+const MAX_LOOKBACK_MS = 24 * 60 * 60 * 1000;
+export class GitCommitWatcher {
+    /** One entry per repo: the session most recently active in it. */
+    repos = new Map();
+    /** SHAs already emitted, so a commit is reported once and not once per scan. */
+    emitted = new Set();
+    /** cwd -> git root, so a repeated cwd costs no filesystem walk. */
+    roots = new Map();
+    /** Records which repo each session is working in. Cheap: no git process. */
+    observe(events) {
+        for (const item of events) {
+            const cwd = item.cwd;
+            if (!cwd)
+                continue;
+            let root = this.roots.get(cwd);
+            if (root === undefined) {
+                root = findGitRoot(cwd);
+                this.roots.set(cwd, root);
+            }
+            if (!root)
+                continue;
+            const occurredAt = new Date(item.event.occurred_at);
+            const at = Number.isNaN(occurredAt.getTime()) ? new Date() : occurredAt;
+            const existing = this.repos.get(root);
+            // A new session in this repo takes it over; the same session only ever
+            // widens its window backwards.
+            if (existing && existing.sessionId === item.event.session_id) {
+                if (at < existing.since)
+                    existing.since = at;
+                continue;
+            }
+            this.repos.set(root, {
+                gitRoot: root,
+                sessionId: item.event.session_id,
+                agent: item.event.agent,
+                agentVersion: item.event.agent_version,
+                since: at,
+            });
+        }
+    }
+    /**
+     * One `git log` per watched repo, at most once per call. Repos are dropped
+     * afterwards: a repo is re-armed by the next event from it, so an idle
+     * project costs nothing.
+     */
+    async poll(now = new Date()) {
+        const watched = [...this.repos.values()];
+        this.repos.clear();
+        const events = [];
+        for (const repo of watched) {
+            const since = new Date(Math.max(repo.since.getTime(), now.getTime() - MAX_LOOKBACK_MS));
+            for (const commit of await commitsSince(repo.gitRoot, since)) {
+                const key = `${repo.gitRoot}:${commit.sha}`;
+                if (this.emitted.has(key))
+                    continue;
+                this.emitted.add(key);
+                events.push({
+                    event: {
+                        occurred_at: commit.committedAt,
+                        session_id: repo.sessionId,
+                        agent: repo.agent,
+                        agent_version: repo.agentVersion,
+                        event_type: 'git.commit',
+                        payload: {
+                            sha: commit.sha,
+                            committed_at: commit.committedAt,
+                            additions: commit.additions,
+                            deletions: commit.deletions,
+                            files_changed: commit.filesChanged,
+                        },
+                    },
+                    cwd: repo.gitRoot,
+                });
+            }
+        }
+        // The set only guards against re-emitting inside one process; a long-lived
+        // daemon should not grow it forever.
+        if (this.emitted.size > 5000)
+            this.emitted.clear();
+        return events;
+    }
+}
+//# sourceMappingURL=commits.js.map

package/dist/git/commits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commits.js","sourceRoot":"","sources":["../../src/git/commits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAoBtD,gGAAgG;AAChG,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,MAAM,OAAO,gBAAgB;IAC3B,kEAAkE;IACjD,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,gFAAgF;IAC/D,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,mEAAmE;IAClD,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE1D,4EAA4E;IAC5E,OAAO,CAAC,MAAyB;QAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACrB,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEtC,uEAAuE;YACvE,+BAA+B;YAC/B,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC7D,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK;oBAAE,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBACnB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;gBAChC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBACvB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;gBACtC,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,MAAY,IAAI,IAAI,EAAE;QAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAsB,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC;YACxF,KAAK,MAAM,MAAM,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEtB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE;wBACL,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,UAAU,EAAE,IAAI,CAAC,SAAS;wBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,aAAa,EAAE,IAAI,CAAC,YAAY;wBAChC,UAAU,EAAE,YAAY;wBACxB,OAAO,EAAE;4BACP,GAAG,EAAE,MAAM,CAAC,GAAG;4BACf,YAAY,EAAE,MAAM,CAAC,WAAW;4BAChC,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,aAAa,EAAE,MAAM,CAAC,YAAY;yBACnC;qBACF;oBACD,GAAG,EAAE,IAAI,CAAC,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,qCAAqC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/git/repo.d.ts

@@ -0,0 +1,36 @@
+import type { RepoContext } from '../schema.js';
+/**
+ * Git enrichment.
+ *
+ * Branch and remote are read straight out of .git — two file reads beat
+ * spawning a process per event. `git log` is only shelled out for diffstats,
+ * which cannot be read from a file.
+ *
+ * The remote URL is never transmitted: only a SHA-256 of its normalized form,
+ * which is enough to correlate a repo across machines without disclosing it.
+ */
+export declare function findGitRoot(startDir: string): string | null;
+export declare function readBranch(gitRoot: string): string | undefined;
+export declare function readRemote(gitRoot: string): string | undefined;
+/**
+ * Collapses ssh and https forms of one repository onto a single identity, so
+ * the same repo cloned two ways still correlates. Mirrors the server's
+ * normalizeRemote — they must agree or nothing matches.
+ */
+export declare function normalizeRemote(remote: string): string;
+export declare function hashRemote(remote: string): string;
+/** owner/name parsed out of a normalized remote, for display only. */
+export declare function ownerAndName(remote: string): {
+    owner?: string;
+    name?: string;
+};
+export declare function describeRepo(cwd: string): RepoContext | undefined;
+export interface CommitInfo {
+    sha: string;
+    committedAt: string;
+    additions: number;
+    deletions: number;
+    filesChanged: number;
+}
+/** Commits authored in this repo within a time window. */
+export declare function commitsSince(gitRoot: string, since: Date): Promise<CommitInfo[]>;

package/dist/git/repo.js

@@ -0,0 +1,141 @@
+import { execFile } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { basename, dirname, join } from 'node:path';
+import { promisify } from 'node:util';
+const exec = promisify(execFile);
+/**
+ * Git enrichment.
+ *
+ * Branch and remote are read straight out of .git — two file reads beat
+ * spawning a process per event. `git log` is only shelled out for diffstats,
+ * which cannot be read from a file.
+ *
+ * The remote URL is never transmitted: only a SHA-256 of its normalized form,
+ * which is enough to correlate a repo across machines without disclosing it.
+ */
+export function findGitRoot(startDir) {
+    let dir = startDir;
+    for (let i = 0; i < 40; i++) {
+        if (existsSync(join(dir, '.git')))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+    return null;
+}
+export function readBranch(gitRoot) {
+    try {
+        const head = readFileSync(join(gitRoot, '.git', 'HEAD'), 'utf8').trim();
+        const match = /^ref:\s*refs\/heads\/(.+)$/.exec(head);
+        // A detached HEAD holds a raw SHA and has no branch name.
+        return match?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+export function readRemote(gitRoot) {
+    try {
+        const config = readFileSync(join(gitRoot, '.git', 'config'), 'utf8');
+        // Prefer origin; fall back to the first remote defined.
+        const origin = /\[remote "origin"\][^[]*?url\s*=\s*(.+)/s.exec(config);
+        if (origin?.[1])
+            return origin[1].split('\n')[0].trim();
+        const any = /\[remote "[^"]+"\][^[]*?url\s*=\s*(.+)/s.exec(config);
+        return any?.[1]?.split('\n')[0]?.trim();
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Collapses ssh and https forms of one repository onto a single identity, so
+ * the same repo cloned two ways still correlates. Mirrors the server's
+ * normalizeRemote — they must agree or nothing matches.
+ */
+export function normalizeRemote(remote) {
+    let s = remote.trim().replace(/\.git$/, '').replace(/^git\+/, '');
+    const ssh = /^(?:ssh:\/\/)?(?:[^@]+@)?([^:/]+)[:/](.+)$/.exec(s);
+    if (ssh && !s.startsWith('http'))
+        return `${ssh[1].toLowerCase()}/${ssh[2].toLowerCase()}`;
+    try {
+        const u = new URL(s);
+        return `${u.host.toLowerCase()}${u.pathname.replace(/\/$/, '').toLowerCase()}`;
+    }
+    catch {
+        return s.toLowerCase();
+    }
+}
+export function hashRemote(remote) {
+    return createHash('sha256').update(normalizeRemote(remote)).digest('hex');
+}
+/** owner/name parsed out of a normalized remote, for display only. */
+export function ownerAndName(remote) {
+    const parts = normalizeRemote(remote).split('/');
+    if (parts.length < 3)
+        return {};
+    return { owner: parts[parts.length - 2], name: parts[parts.length - 1] };
+}
+export function describeRepo(cwd) {
+    const root = findGitRoot(cwd);
+    if (!root)
+        return { project_path: cwd, project_name: basename(cwd) };
+    const remote = readRemote(root);
+    const context = {
+        branch: readBranch(root),
+        project_path: root,
+        project_name: basename(root),
+    };
+    if (remote) {
+        context.remote_hash = hashRemote(remote);
+        const { owner, name } = ownerAndName(remote);
+        context.remote_owner = owner;
+        context.remote_name = name;
+    }
+    return context;
+}
+/**
+ * git prints local time with an offset; the wire schema only accepts UTC, so an
+ * un-normalized timestamp gets the whole event rejected at ingest.
+ */
+function toUtcIso(value) {
+    if (!value)
+        return undefined;
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+}
+/** Commits authored in this repo within a time window. */
+export async function commitsSince(gitRoot, since) {
+    try {
+        const { stdout } = await exec('git', ['log', `--since=${since.toISOString()}`, '--numstat', '--format=%H%x00%cI', '--no-merges'], { cwd: gitRoot, timeout: 10_000, maxBuffer: 4 * 1024 * 1024 });
+        const commits = [];
+        let current = null;
+        for (const line of stdout.split('\n')) {
+            if (line.includes('\0')) {
+                if (current)
+                    commits.push(current);
+                const [sha, committedAt] = line.split('\0');
+                current = { sha: sha, committedAt: toUtcIso(committedAt) ?? since.toISOString(), additions: 0, deletions: 0, filesChanged: 0 };
+                continue;
+            }
+            if (!current || !line.trim())
+                continue;
+            const [added, removed] = line.split('\t');
+            // Binary files show '-' rather than a count.
+            current.additions += Number(added) || 0;
+            current.deletions += Number(removed) || 0;
+            current.filesChanged += 1;
+        }
+        if (current)
+            commits.push(current);
+        return commits;
+    }
+    catch {
+        // No git binary, not a repo, or a timeout — enrichment is best-effort.
+        return [];
+    }
+}
+//# sourceMappingURL=repo.js.map

package/dist/git/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../src/git/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,0DAA0D;QAC1D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,wDAAwD;QACxD,MAAM,MAAM,GAAG,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,4CAA4C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IAErE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAgB;QAC3B,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;QACxB,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;KAC7B,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;QAC7B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACvE,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,KAAW;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAC3B,KAAK,EACL,CAAC,KAAK,EAAE,WAAW,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,CAAC,EAC3F,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAC9D,CAAC;QAEF,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,IAAI,OAAO,GAAsB,IAAI,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,GAAG,EAAE,GAAG,EAAE,GAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBAChI,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YACvC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,6CAA6C;YAC7C,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export * from './schema.js';
+export * from './config.js';
+export { Collector, buildAdapters, listTranscripts, VERSION } from './daemon.js';
+export { ClaudeCodeAdapter } from './adapters/claude.js';
+export { CodexAdapter } from './adapters/codex.js';
+export { OpenCodeAdapter } from './adapters/opencode.js';
+export { readClaudeAccount, readOpenCodeAccounts } from './adapters/account.js';
+export type { AccountIdentity, AgentAdapter, DetectionResult, HealthStatus, NormalizedEvent, PollContext, } from './adapters/types.js';
+export { redact, BUILTIN_RULES } from './privacy/redact.js';
+export { applyPrivacy } from './privacy/pipeline.js';
+export { Spool } from './queue/spool.js';
+export { ApiClient } from './transport/client.js';

package/dist/index.js

@@ -0,0 +1,12 @@
+export * from './schema.js';
+export * from './config.js';
+export { Collector, buildAdapters, listTranscripts, VERSION } from './daemon.js';
+export { ClaudeCodeAdapter } from './adapters/claude.js';
+export { CodexAdapter } from './adapters/codex.js';
+export { OpenCodeAdapter } from './adapters/opencode.js';
+export { readClaudeAccount, readOpenCodeAccounts } from './adapters/account.js';
+export { redact, BUILTIN_RULES } from './privacy/redact.js';
+export { applyPrivacy } from './privacy/pipeline.js';
+export { Spool } from './queue/spool.js';
+export { ApiClient } from './transport/client.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAShF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/privacy/mode.d.ts

@@ -0,0 +1,11 @@
+import type { PrivacyMode } from '../schema.js';
+/**
+ * The org policy is a CEILING, never a floor.
+ *
+ * A developer who has chosen `metadata` locally must keep it even if their
+ * organization permits `full`. Assigning the server's value outright silently
+ * widens what leaves the machine, which is the one thing this tool must never
+ * do — so both `login` and the daemon go through here.
+ */
+export declare function clampPrivacyMode(local: PrivacyMode, orgCeiling: PrivacyMode): PrivacyMode;
+export declare function isStricter(a: PrivacyMode, b: PrivacyMode): boolean;

package/dist/privacy/mode.js

@@ -0,0 +1,17 @@
+/** Least to most disclosing. */
+const ORDER = { metadata: 0, analytics: 1, full: 2 };
+/**
+ * The org policy is a CEILING, never a floor.
+ *
+ * A developer who has chosen `metadata` locally must keep it even if their
+ * organization permits `full`. Assigning the server's value outright silently
+ * widens what leaves the machine, which is the one thing this tool must never
+ * do — so both `login` and the daemon go through here.
+ */
+export function clampPrivacyMode(local, orgCeiling) {
+    return ORDER[local] <= ORDER[orgCeiling] ? local : orgCeiling;
+}
+export function isStricter(a, b) {
+    return ORDER[a] < ORDER[b];
+}
+//# sourceMappingURL=mode.js.map

package/dist/privacy/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../src/privacy/mode.ts"],"names":[],"mappings":"AAEA,gCAAgC;AAChC,MAAM,KAAK,GAAgC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,UAAuB;IAC1E,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAc,EAAE,CAAc;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/privacy/paths.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Path handling per privacy mode.
+ *
+ * An absolute path is itself disclosure — it leaks usernames, client names and
+ * directory structure. `relative` (the default) keeps paths useful for
+ * analytics while dropping everything above the project root.
+ */
+export type PathMode = 'never' | 'relative' | 'absolute';
+export declare function normalizePath(path: string, projectRoot: string | undefined, mode: PathMode): string | null;
+/** True when a project is on the user's exclusion list. */
+export declare function isExcluded(projectPath: string, excluded: string[]): boolean;

package/dist/privacy/paths.js

@@ -0,0 +1,30 @@
+import { relative, sep } from 'node:path';
+import { homedir } from 'node:os';
+export function normalizePath(path, projectRoot, mode) {
+    if (mode === 'never')
+        return null;
+    if (mode === 'absolute')
+        return path;
+    if (projectRoot && path.startsWith(projectRoot)) {
+        const rel = relative(projectRoot, path);
+        return rel === '' ? '.' : rel;
+    }
+    // Outside the project: keep the shape, drop the identity.
+    const home = homedir();
+    if (path.startsWith(home))
+        return `~${path.slice(home.length)}`;
+    // Unknown absolute path — keep only the last two segments so the file type
+    // is still visible without revealing the tree it sits in.
+    const parts = path.split(sep).filter(Boolean);
+    return parts.length <= 2 ? path : `…${sep}${parts.slice(-2).join(sep)}`;
+}
+/** True when a project is on the user's exclusion list. */
+export function isExcluded(projectPath, excluded) {
+    const home = homedir();
+    const normalized = projectPath.replace(/\/+$/, '');
+    return excluded.some((pattern) => {
+        const expanded = pattern.replace(/^~/, home).replace(/\/+$/, '');
+        return normalized === expanded || normalized.startsWith(`${expanded}${sep}`);
+    });
+}
+//# sourceMappingURL=paths.js.map

package/dist/privacy/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/privacy/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAWlC,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,WAA+B,EAAE,IAAc;IACzF,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACxC,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChC,CAAC;IAED,0DAA0D;IAC1D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAEhE,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,QAAkB;IAChE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/privacy/pipeline.d.ts

@@ -0,0 +1,26 @@
+import type { Config } from '../config.js';
+import type { EventEnvelope } from '../schema.js';
+/**
+ * The privacy pipeline from BLUEPRINT §9.3, applied to every event before it
+ * enters the upload spool:
+ *
+ *   raw event -> policy lookup -> secret detection -> path/content redaction
+ *   -> optional local classification -> optional local summary
+ *   -> raw content discard -> normalized event
+ *
+ * Enforced here, on the developer's machine. By the time an event reaches the
+ * spool there is nothing left to leak.
+ */
+export interface PipelineContext {
+    config: Config;
+    projectRoot?: string;
+    orgRules?: {
+        pattern: string;
+        replacement: string;
+    }[];
+}
+export interface PipelineResult {
+    event: EventEnvelope;
+    redactions: string[];
+}
+export declare function applyPrivacy(event: EventEnvelope, ctx: PipelineContext): PipelineResult;

package/dist/privacy/pipeline.js

@@ -0,0 +1,112 @@
+import { commandName, compileRules, redact } from './redact.js';
+import { normalizePath } from './paths.js';
+/** Payload keys that carry free text and must always be scanned for secrets. */
+const TEXT_KEYS = ['prompt_text', 'derived_title', 'message', 'command'];
+export function applyPrivacy(event, ctx) {
+    const mode = ctx.config.privacy.mode;
+    const policy = ctx.config.privacy;
+    const extraRules = compileRules(ctx.orgRules ?? []);
+    const redactions = [];
+    const payload = { ...event.payload };
+    // --- content: strip anything the mode does not permit -------------------
+    if (mode === 'metadata') {
+        // Counts and timings only. Titles are derived from prompts, so they go too.
+        delete payload['prompt_text'];
+        delete payload['derived_title'];
+        delete payload['message'];
+        // A shell command line IS content: it carries hostnames, client names,
+        // usernames and inline passwords. `metadata` promises none of that, so the
+        // binary name is all that may travel regardless of shell_arguments.
+        if (typeof payload['command'] === 'string') {
+            payload['command'] = commandName(payload['command']);
+        }
+    }
+    else if (mode === 'analytics') {
+        // Locally derived summaries may travel; the prompt itself never does.
+        delete payload['prompt_text'];
+        // `prompts: never` is stricter than the mode and must still be honoured —
+        // it previously only took effect in `full` mode, making it a privacy
+        // control that silently did nothing.
+        if (policy.prompts === 'never')
+            delete payload['derived_title'];
+    }
+    else if (policy.prompts !== 'full') {
+        // 'full' mode still honours a stricter prompts policy.
+        delete payload['prompt_text'];
+        // ...including the locally derived summary. `never` means nothing
+        // prompt-derived leaves the machine, in every mode — not just analytics.
+        if (policy.prompts === 'never')
+            delete payload['derived_title'];
+    }
+    // --- code content -------------------------------------------------------
+    // `code_content: never` is the default and means exactly that: file bodies
+    // and diffs are dropped regardless of mode, so opting into `full` prompts
+    // does not silently opt into shipping source code.
+    if (policy.code_content === 'never') {
+        delete payload['content'];
+        delete payload['diff'];
+        delete payload['old_string'];
+        delete payload['new_string'];
+    }
+    // --- secret detection on whatever text survives -------------------------
+    for (const key of TEXT_KEYS) {
+        const value = payload[key];
+        if (typeof value !== 'string')
+            continue;
+        const result = redact(value, extraRules);
+        payload[key] = result.text;
+        redactions.push(...result.redactions);
+    }
+    // --- paths --------------------------------------------------------------
+    if (typeof payload['path'] === 'string') {
+        const normalized = normalizePath(payload['path'], ctx.projectRoot, policy.file_paths);
+        if (normalized === null)
+            delete payload['path'];
+        else
+            payload['path'] = normalized;
+    }
+    // `cwd` on session.started IS the project root, so it gets the same treatment
+    // as repo.project_path — an absolute path leaks the username, the client name
+    // and the directory tree, and it was travelling in metadata mode untouched.
+    if (typeof payload['cwd'] === 'string' && policy.file_paths !== 'absolute') {
+        delete payload['cwd'];
+    }
+    const repo = payload['repo'];
+    if (repo && typeof repo === 'object') {
+        const r = { ...repo };
+        if (policy.file_paths === 'never')
+            delete r['project_path'];
+        else if (typeof r['project_path'] === 'string' && policy.file_paths === 'relative') {
+            // The project root itself is only ever sent as a hash, never a path.
+            delete r['project_path'];
+        }
+        payload['repo'] = r;
+    }
+    // --- account identity ---------------------------------------------------
+    // `key` is an opaque provider account id and always travels: it is the only
+    // thing that keeps two accounts' sessions apart, and in `metadata` mode the
+    // account must still show up as a distinct (if anonymous) identity rather
+    // than merging into everyone else's. `label` is an email or display name and
+    // `org` is an employer — both name a human, so they are content and are
+    // dropped below `analytics` exactly like a prompt is.
+    const account = payload['account'];
+    if (account && typeof account === 'object' && !Array.isArray(account)) {
+        const a = account;
+        const trimmed = { key: a['key'] };
+        if (a['provider'] !== undefined)
+            trimmed['provider'] = a['provider'];
+        if (mode !== 'metadata') {
+            if (a['label'] !== undefined)
+                trimmed['label'] = a['label'];
+            if (a['org'] !== undefined)
+                trimmed['org'] = a['org'];
+        }
+        payload['account'] = trimmed;
+    }
+    // --- shell arguments ----------------------------------------------------
+    if (typeof payload['command'] === 'string' && policy.shell_arguments === 'never') {
+        payload['command'] = payload['command'].split(/\s+/)[0] ?? '';
+    }
+    return { event: { ...event, payload }, redactions };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/privacy/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/privacy/pipeline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAsB,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAyB3C,gFAAgF;AAChF,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAElF,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,GAAoB;IACrE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAClC,MAAM,UAAU,GAAoB,YAAY,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAA4B,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAE9D,2EAA2E;IAC3E,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,4EAA4E;QAC5E,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1B,uEAAuE;QACvE,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,sEAAsE;QACtE,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9B,0EAA0E;QAC1E,qEAAqE;QACrE,qCAAqC;QACrC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACrC,uDAAuD;QACvD,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9B,kEAAkE;QAClE,yEAAyE;QACzE,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,mDAAmD;IACnD,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,2EAA2E;IAC3E,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;;YAC3C,OAAO,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IACpC,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC;aACvD,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACnF,qEAAqE;YACrE,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,sDAAsD;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,MAAM,OAAO,GAA4B,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,2EAA2E;IAC3E,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QACjF,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC"}

package/dist/privacy/redact.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Secret detection and redaction.
+ *
+ * This runs on the developer's machine, before anything is uploaded. It is the
+ * first line of defence, not the last: in `metadata` mode there is simply no
+ * content to leak because it was discarded here.
+ *
+ * Patterns are ordered most-specific first so a token that matches two rules
+ * is labelled by the more precise one.
+ */
+export interface RedactionRule {
+    name: string;
+    pattern: RegExp;
+    replacement: string;
+}
+export declare const BUILTIN_RULES: RedactionRule[];
+export interface RedactionResult {
+    text: string;
+    /** Names of rules that fired, for the trust metrics in BLUEPRINT §14. */
+    redactions: string[];
+}
+export declare function redact(input: string, extraRules?: RedactionRule[]): RedactionResult;
+/** Compiles org-supplied patterns, skipping any that do not compile. */
+export declare function compileRules(rules: {
+    pattern: string;
+    replacement: string;
+}[]): RedactionRule[];
+/** Extracts the binary name, dropping arguments that may hold secrets. */
+export declare function commandName(commandLine: string): string;

package/dist/privacy/redact.js

@@ -0,0 +1,58 @@
+export const BUILTIN_RULES = [
+    { name: 'anthropic_key', pattern: /sk-ant-[A-Za-z0-9_-]{20,}/g, replacement: '[REDACTED:anthropic_key]' },
+    { name: 'openai_key', pattern: /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g, replacement: '[REDACTED:openai_key]' },
+    { name: 'github_token', pattern: /gh[pousr]_[A-Za-z0-9]{16,}/g, replacement: '[REDACTED:github_token]' },
+    { name: 'github_pat', pattern: /github_pat_[A-Za-z0-9_]{20,}/g, replacement: '[REDACTED:github_pat]' },
+    { name: 'slack_token', pattern: /xox[baprs]-[A-Za-z0-9-]{10,}/g, replacement: '[REDACTED:slack_token]' },
+    { name: 'stripe_key', pattern: /[rs]k_(?:live|test)_[A-Za-z0-9]{16,}/g, replacement: '[REDACTED:stripe_key]' },
+    { name: 'aws_access_key', pattern: /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g, replacement: '[REDACTED:aws_access_key]' },
+    { name: 'google_api_key', pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: '[REDACTED:google_api_key]' },
+    { name: 'agentstrack_key', pattern: /\bat_(?:live|test)_[a-f0-9]{16}_[A-Za-z0-9_-]{20,}/g, replacement: '[REDACTED:agentstrack_key]' },
+    { name: 'private_key', pattern: /-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z ]*PRIVATE KEY-----/g, replacement: '[REDACTED:private_key]' },
+    { name: 'jwt', pattern: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g, replacement: '[REDACTED:jwt]' },
+    { name: 'bearer_header', pattern: /\b[Bb]earer\s+[A-Za-z0-9._~+/-]{20,}=*/g, replacement: 'Bearer [REDACTED]' },
+    { name: 'basic_auth_url', pattern: /(\b[a-z][a-z0-9+.-]*:\/\/)[^/\s:@]+:[^/\s@]+@/g, replacement: '$1[REDACTED]@' },
+    { name: 'env_assignment', pattern: /\b([A-Z_]*(?:SECRET|TOKEN|PASSWORD|PASSWD|APIKEY|API_KEY|PRIVATE_KEY|ACCESS_KEY)[A-Z_]*)\s*=\s*("[^"]*"|'[^']*'|\S+)/g, replacement: '$1=[REDACTED]' },
+    // mysql/psql style inline credentials: -pSECRET, --password=SECRET. Extremely
+    // common in agent shell calls and missed by every key-shaped rule above.
+    { name: 'inline_password_flag', pattern: /(--password[= ]|(?<![\w-])-p)(?!\s)("[^"]*"|'[^']*'|\S+)/g, replacement: '$1[REDACTED]' },
+    { name: 'generic_hex_secret', pattern: /\b[a-f0-9]{40,}\b/g, replacement: '[REDACTED:hex]' },
+];
+export function redact(input, extraRules = []) {
+    let text = input;
+    const redactions = [];
+    for (const rule of [...BUILTIN_RULES, ...extraRules]) {
+        // Fresh lastIndex per call: these regexes are global and module-level, so
+        // reusing them statefully across calls would skip matches.
+        rule.pattern.lastIndex = 0;
+        if (!rule.pattern.test(text))
+            continue;
+        rule.pattern.lastIndex = 0;
+        text = text.replace(rule.pattern, rule.replacement);
+        redactions.push(rule.name);
+    }
+    return { text, redactions };
+}
+/** Compiles org-supplied patterns, skipping any that do not compile. */
+export function compileRules(rules) {
+    const compiled = [];
+    for (const [index, rule] of rules.entries()) {
+        try {
+            compiled.push({
+                name: `org_rule_${index}`,
+                pattern: new RegExp(rule.pattern, 'g'),
+                replacement: rule.replacement,
+            });
+        }
+        catch {
+            // A malformed server-side rule must not stop the collector entirely.
+        }
+    }
+    return compiled;
+}
+/** Extracts the binary name, dropping arguments that may hold secrets. */
+export function commandName(commandLine) {
+    const first = commandLine.trim().split(/\s+/)[0] ?? '';
+    return first.split('/').pop() ?? first;
+}
+//# sourceMappingURL=redact.js.map

package/dist/privacy/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/privacy/redact.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACzG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,kCAAkC,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACzG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACxG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,+BAA+B,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACtG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,+BAA+B,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACxG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,uCAAuC,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC9G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC/G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC3G,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qDAAqD,EAAE,WAAW,EAAE,4BAA4B,EAAE;IACtI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2EAA2E,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACpJ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAC7H,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yCAAyC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC/G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gDAAgD,EAAE,WAAW,EAAE,eAAe,EAAE;IACnH,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uHAAuH,EAAE,WAAW,EAAE,eAAe,EAAE;IAC1L,8EAA8E;IAC9E,yEAAyE;IACzE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,2DAA2D,EAAE,WAAW,EAAE,cAAc,EAAE;IACnI,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE;CAC7F,CAAC;AAQF,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,aAA8B,EAAE;IACpE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACrD,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAC1B,KAAiD;IAEjD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY,KAAK,EAAE;gBACzB,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;gBACtC,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;AACzC,CAAC"}