@cortad/connector 0.6.0-rc.3 → 0.6.1

package/lib/history/contract.mjs

@@ -61,7 +61,11 @@ export function conversationOf(raw, count) {
 
 // The conversations to send, newest first, whole, from the window, until the plan's messages; and
 // why each one left out was left out.
-export function selected(raws, { now = Date.now(), secrets = [] } = {}) {
+// `key`: the app's ingest key. Ids and users are hashed with it exactly as the SDK hashes them, so a
+// person brought in from history is the same person when they write to the live app, and a guessable
+// id (a first name, an email) cannot be read back from its hash without the key.
+export function selected(raws, { now = Date.now(), secrets = [], key }) {
+  const subject = (kind, value) => sha256(`${key}:${kind}:${value}`);
   const left = new Map();
   const count = (why) => { left.set(why, (left.get(why) ?? 0) + 1); return null; };
   const all = raws.map((raw) => conversationOf(raw, count)).filter(Boolean);
@@ -77,8 +81,8 @@ export function selected(raws, { now = Date.now(), secrets = [] } = {}) {
     if (replies > room) { count("past 2,500 messages"); continue; }
     room -= replies;
     out.push({
-      id: sha256(c.id),
-      ...(c.user ? { user: sha256(c.user) } : {}),
+      id: subject("session", c.id),
+      ...(c.user ? { user: subject("user", c.user) } : {}),
       messages: c.messages.map((m) => {
         const clean = scrub(m.text, secrets);
         scrubbed += clean.hits;

package/lib/intelligence-text.mjs

@@ -53,10 +53,10 @@ export function historyQuestion({ spec, sources, stores }) {
     "Step 1 of 2: your users' conversations",
     ...sources.map((s) => `Found ${s.name} (${s.names.join(" and ")} in your env).`),
     ...(store ? [`Found where this app keeps its conversations: ${storeName(store)}.`] : []),
-    `Ask the person, with your question tool: "Send our most recent conversations to Cortad, up to 2,500 messages from the last 30 days, so it can show us our users?"`,
+    `Ask the person, with your question tool: "Send our newest whole conversations from the last 30 days to Cortad, until our app's replies reach 2,500, so it can show us our users?"`,
     ...options.map((o, i) => `  ${i + 1}. ${o}`),
     ...sources.map((s) => `${s.name} is read from this computer at ${s.host} with the keys in your env; the keys go to ${s.name} only.`),
-    "What is sent goes to cortad.com and is written first to ~/.cortad on this computer, so you can read exactly what was sent.",
+    "Before anything is sent, keys, card numbers, emails and phone numbers in the messages are replaced on this computer, and the app's conversation and user ids are hashed. What is sent goes to cortad.com, and a copy of exactly what was sent stays in ~/.cortad on this computer.",
     "",
     ...exportContract(spec),
   ];
@@ -65,7 +65,8 @@ const storeName = (s) => `${s.where ? `the ${s.where} ${s.kind === "postgres" ?
 
 export const exportContract = (spec) => [
   "For our database: write a one-off script in this folder that reads the conversations with this app's own database client, through the connection this project's env on this computer already has. Do not commit it. Open a read-only transaction and look for no other credentials.",
-  "Read at most the newest 2,500 conversations from the last 30 days: pick their ids first, then their messages. Cortad keeps whole conversations, newest first, up to 2,500 messages. Print one JSON line per conversation:",
+  "Read the newest conversations from the last 30 days, at most 2,500 of them: pick their ids first, then their messages. Cortad keeps them whole, newest first, until your app's replies reach 2,500. Print first one line naming the database host it read, then one JSON line per conversation:",
+  `  {"source": {"kind": "postgres", "host": "<the database host from the connection>"}}`,
   `  {"id": "<the app's conversation id>", "user": "<the app's user id, if it has one>", "messages": [{"role": "user" or "assistant", "text": "...", "at": "2026-11-08T14:02:11Z"}]}`,
   `Times need a zone (Z or +03:00) or epoch milliseconds. Tell the person which database host it reads. Pipe it to npx -y ${spec} intelligence history --stdin, then delete the script.`,
 ];

package/lib/intelligence.mjs

@@ -67,7 +67,7 @@ export async function intelligence(args, ctx) {
     }
     if (connection.started) out.push(say.live(connection));
     else if (connection.here) out.push(say.workingHere(connection.here.at));
-    if (!connection.started) out.push(...codeStepFor(keys));
+    if (!connection.started) out.push(...codeStepFor({ ...keys, site: keys.site ?? connection.site?.origin ?? null }));
     const progress = await (wait ? waited(call) : call("/mcp/history"));
     if (progress.ok) out.push("", ...say.findings({ ...progress.data, done: progress.data.history.read >= progress.data.history.conversations }));
     if (progress.ok && progress.data.history.read < progress.data.history.conversations && !wait) out.push(say.next(spec, "--wait"));
@@ -135,7 +135,9 @@ export async function intelligence(args, ctx) {
       return { text: say.lines("Name where the conversations come from: --from <tool>, --stdin for your own export, or --skip."), code: 1 };
     }
     const label = SOURCES.find((s) => s.id === source)?.name ?? "your export";
-    const picked = selected(raws, { secrets: secretValues(ENV_FILES.map((f) => join(root, f)).filter(existsSync)).filter(credentialShaped) });
+    const key = ingestKeyHere();
+    if (!key) return { text: say.lines(`This folder has no CORTAD_INGEST_KEY yet. Run npx -y ${spec} intelligence first.`), code: 1 };
+    const picked = selected(raws, { key, secrets: secretValues(ENV_FILES.map((f) => join(root, f)).filter(existsSync)).filter(credentialShaped) });
     if (picked.conversations.length === 0) return { text: say.lines(say.historyNothing(label)), code: 1 };
     const sends = packed(source, picked.conversations);
     const file = join(homeOf(ctx.project), "history.json");
@@ -150,10 +152,16 @@ export async function intelligence(args, ctx) {
     return { text: say.lines(say.historySent({ result, picked, span, source: label, file }), say.next(spec)) };
   }
 
-  function key(ctx_, host) {
+  // The ingest key as this folder holds it: in its env file, or in keys.env when a manager holds its settings.
+  function ingestKeyHere() {
     const file = settingsOf(root).file ?? join(homeOf(ctx.project), "keys.env");
     const path = file.startsWith("/") ? file : join(root, file);
-    const value = parseEnv(existsSync(path) ? readFileSync(path, "utf8") : "")["CORTAD_INGEST_KEY"];
+    return parseEnv(existsSync(path) ? readFileSync(path, "utf8") : "")["CORTAD_INGEST_KEY"] ?? null;
+  }
+
+  function key(ctx_, host) {
+    const file = settingsOf(root).file ?? join(homeOf(ctx.project), "keys.env");
+    const value = ingestKeyHere();
     if (!value) return { text: say.lines(`There is no CORTAD_INGEST_KEY in ${file} yet. Run npx -y ${spec} intelligence first.`), code: 1 };
     if (!host || !HOSTS[host]) return { text: say.lines(`Name the host: --to ${Object.keys(HOSTS).filter((h) => h !== "other").join(", ")}.`), code: 1 };
     if (!canSet(root, host)) return { text: say.lines(say.keyNotSet(host, `its command is not installed, signed in or linked to this folder`, `${file} (line ${lineOf(root, file, "CORTAD_INGEST_KEY")})`)), code: 1 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortad/connector",
-  "version": "0.6.0-rc.3",
+  "version": "0.6.1",
   "description": "Connects the AI app on your machine to Cortad for test conversations, and gives your coding agent the MCP and skill to run them.",
   "bin": {
     "cortad": "local.mjs"