@swestash/agent-lens 0.5.3 → 0.5.4

package/README.md

@@ -1,6 +1,6 @@
 # Agent Lens
 
-> Passively collect, browse, and analyze your Claude Code CLI session traces — **100% local**.
+> Passively collect, search, and audit your Claude Code CLI session traces — **100% local**.
 
 [![npm](https://img.shields.io/npm/v/@swestash/agent-lens)](https://www.npmjs.com/package/@swestash/agent-lens)
 ![Node](https://img.shields.io/badge/node-%E2%89%A524-brightgreen)
@@ -9,8 +9,9 @@
 
 Claude Code records rich per-session telemetry under `~/.claude/`, but prunes it on a rolling
 **30-day window**. Agent Lens continuously copies that data out before it's lost, normalizes it into
-a queryable SQLite store, and gives you a browsable transcript viewer plus analytics dashboards —
-**without a single byte leaving your machine**.
+a queryable SQLite store, and gives you three things over it — a searchable transcript browser,
+usage/cost dashboards, and a deterministic, no-AI **audit of what the agent actually did on your
+machine** — **without a single byte leaving your machine**.
 
 ## Install
 

package/dist/agent-lens.js

@@ -2319,7 +2319,7 @@ function classify(db, dirty) {
 
 // ../ingest/dist/detect.js
 import { createHash } from "crypto";
-var DETECTOR_VERSION = 6;
+var DETECTOR_VERSION = 7;
 function evidence(s, max = 200) {
   const one = s.replace(/\s+/g, " ").trim();
   return one.length > max ? one.slice(0, max - 1) + "\u2026" : one;
@@ -2341,6 +2341,8 @@ var SECRET_VALUE_PATTERNS = [
   { re: /\bsk-[A-Za-z0-9]{20,}\b/, label: "api-secret-key" }
 ];
 var isBash = (t) => t === "Bash";
+var SQL_DESTRUCTIVE = /\b(DROP\s+(TABLE|DATABASE|SCHEMA)|TRUNCATE(\s+TABLE)?)\b/i;
+var SQL_CLIENT = /\b(psql|pgcli|mysql|mysqladmin|mariadb|sqlite3?|sqlcmd|usql|mongo|mongosh|clickhouse-client|cockroach|snowsql|bq)\b/i;
 var stripComments = (c) => c.replace(/(^|\s)#[^\n]*/g, "$1");
 var neutralizeEcho = (c) => c.replace(/((?:^|[;&|\n(])\s*)(?:echo|printf)\b(?:"(?:[^"\\]|\\.)*"|'[^']*'|[^;&|\n])*/gi, "$1echo");
 var blankHeredoc = (c) => c.replace(/<<-?\s*(['"]?)(\w+)\1[\s\S]*?\n\s*\2\b/g, "<<HEREDOC");
@@ -2418,14 +2420,22 @@ var RULES = [
     tools: ["Bash"],
     baseSeverity: "high",
     test(ctx) {
-      const c = ctx.commandBare;
-      if (!c)
+      if (!ctx.commandBare)
+        return null;
+      const c = ctx.commandBare.replace(/\bgit\s+rm\b/gi, "gitrm");
+      const rmSeg = c.match(/\brm\b[^|;&\n]*/i)?.[0];
+      if (!rmSeg)
         return null;
-      const rf = /\brm\s+[^|;&\n]*(-[a-z]*r[a-z]*f|-[a-z]*f[a-z]*r|--recursive[^|;&\n]*--force|--force[^|;&\n]*--recursive)/i;
-      if (!rf.test(c))
+      const combined = /(?:^|\s)-(?=[a-zA-Z]*[rR])(?=[a-zA-Z]*f)[a-zA-Z]+(?=\s|$)/.test(rmSeg);
+      const recursive = /(?:^|\s)(?:-[a-zA-Z]*[rR][a-zA-Z]*|--recursive)(?=\s|$)/.test(rmSeg);
+      const force = /(?:^|\s)(?:-[a-zA-Z]*f[a-zA-Z]*|--force)(?=\s|$)/.test(rmSeg);
+      if (!combined && !(recursive && force))
         return null;
       const dangerousTarget = HOME_OR_ROOT_TARGET.test(c) || /\s\/(?:\s|$)/.test(c) || /\brm\b[^|;&\n]*\*/.test(c);
-      return { evidence: evidence(ctx.command), severity: dangerousTarget ? "critical" : "high", mods: { dangerous_target: dangerousTarget } };
+      const targets = rmSeg.split(/\s+/).slice(1).filter((a) => a && !a.startsWith("-"));
+      const tempOnly = targets.length > 0 && targets.every((t) => TEMP_PATH.test(t));
+      const severity = dangerousTarget ? "critical" : tempOnly ? "low" : "high";
+      return { evidence: evidence(ctx.command), severity, mods: { dangerous_target: dangerousTarget, temp_target: tempOnly } };
     }
   },
   {
@@ -2468,10 +2478,12 @@ var RULES = [
     baseSeverity: "high",
     test(ctx) {
       const query = typeof ctx.input?.query === "string" ? ctx.input.query : null;
-      const hay = ctx.commandCode ?? query;
-      if (!hay || !/\b(DROP\s+(TABLE|DATABASE|SCHEMA)|TRUNCATE(\s+TABLE)?)\b/i.test(hay))
-        return null;
-      return { evidence: evidence(ctx.command ?? query) };
+      if (query && SQL_DESTRUCTIVE.test(query))
+        return { evidence: evidence(ctx.command ?? query) };
+      const code = ctx.commandCode;
+      if (code && SQL_CLIENT.test(code) && SQL_DESTRUCTIVE.test(code))
+        return { evidence: evidence(ctx.command) };
+      return null;
     }
   },
   {