@eventmodelers/cli 2.0.5 → 2.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eventmodelers/cli",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)",
   "type": "module",
   "bin": {

package/shared/build-kit/lib/tool-call-events.js

@@ -2,15 +2,14 @@
 // runner that sees its agent's individual tool calls records them through here, so every runner logs the same shape.
 
 import { appendEvent } from './slice-events.js';
-import { redactString } from './redact.js';
 
-// Best effort, like the rest of the sharing: a failed write must not cost the build. `detail` is the one-line
-// account of the call's input, with the token and anything JWT-shaped masked — a Bash command can hold
-// credentials, and this log is shared. Only a planned-slice build (`slice.sliceId`) records anything.
-export function recordToolCall({ kitDir, slice, tool, detail, cfg, meta }) {
+// Only the tool's name is recorded — never its input. A Bash command, a skill's arguments or a path can hold
+// credentials or local details, and this log is shared with everyone who can open the board. Best effort, like the
+// rest of the sharing: a failed write must not cost the build. Only a planned-slice build (`slice.sliceId`) records.
+export function recordToolCall({ kitDir, slice, tool, meta }) {
   if (!slice?.sliceId) return;
   try {
-    appendEvent(kitDir, { type: 'tool-call', slice: slice.sliceId, tool, detail: redactString(detail, [cfg?.token]) }, meta);
+    appendEvent(kitDir, { type: 'tool-call', slice: slice.sliceId, tool }, meta);
   } catch (err) {
     console.error(`[ralph] could not record a tool call (${err.message})`);
   }

package/shared/build-kit/ralph-claude.js

@@ -107,7 +107,7 @@ function runClaude(prompt, slice = null, extraEnv = {}) {
           for (const block of msg.message?.content ?? []) {
             if (block.type === 'text' && block.text && verbose) console.log(block.text);
             if (block.type === 'tool_use') {
-              recordToolCall({ kitDir, slice, tool: block.name, detail: describeToolUse(block), cfg, meta: eventMeta(cfg) });
+              recordToolCall({ kitDir, slice, tool: block.name, meta: eventMeta(cfg) });
               if (verbose) console.log(`→ ${describeToolUse(block)}`);
               else if (block.name === 'Skill') console.log(`→ Skill: ${block.input?.skill ?? ''}`);
               else console.log(`→ ${block.name}`);