@thehammer/danx-session-telemetry 0.1.26 → 0.1.27

package/dist/.source-hash

@@ -1 +1 @@
-3ffba7fcfab27ba33e21879f9c097dc9eaafaf4a688857098edbd721e2f81300
+46e2f294fe40d0bc967337a16d25bee3eeee3a6d9dae5af7ee213a4d519175f3

package/dist/activity-observer.d.ts

@@ -33,7 +33,7 @@
  *
  * | Field | Read from |
  * |---|---|
- * | `agentType`, `description`, `parentActivityId` | the sub-agent's `meta.json` sidecar (via `SourceDiscoveredInfo`) |
+ * | `agentType`, `description`, `parentActivityId` | the sub-agent's `meta.json` sidecar (via `SourceDiscoveredInfo`); the description through {@link redactLabel} |
  * | `lastActivityAt` | the timestamp of its latest `assistant` / `user` line |
  * | `effort` | its latest `assistant` line's top-level `effort` |
  * | `currentActivity` | its latest `tool_use` block, through {@link describeToolCall} |
@@ -111,11 +111,21 @@ export declare function parseTaskNotification(raw: Record<string, unknown>): {
     taskId: string;
     endStatus: ActivityEndStatus;
 } | null;
+/**
+ * DX-4498 — an agent-written label as the stats wire may carry it: on one line, with every path-shaped token (any token
+ * holding a `/` or `\`) read as `[path]`, and every secret-shaped token (an `ENV_NAME=value` value, or an opaque run of
+ * 20+ letters and digits such as a key, token or full SHA) read as `[redacted]`. A label is free text the agent wrote
+ * for a person to read (real shell descriptions name absolute paths), and it reaches every reader of the team, so this
+ * is the one way any label leaves a transcript. Empty for a blank label.
+ */
+export declare function redactLabel(label: string): string;
+/** DX-4498 — a transcript value read as a label: {@link redactLabel}'s text, or null for a non-string or blank one. */
+export declare function labelOf(value: unknown): string | null;
 /**
  * DX-4498 — a sub-agent's current activity, from one `tool_use` block: the tool's name, plus a label only where the
  * agent wrote one AS a label (a shell call's `description`, an `Agent` call's `description`, a `Skill` call's skill
- * name). Never a command, a file path or a prompt: the stats wire carries ids, numbers and labels, never free-form
- * transcript content.
+ * name), through {@link labelOf}. Never a command, a file path, a secret or a prompt: the stats wire carries ids,
+ * numbers and redacted labels, never free-form transcript content.
  */
 export declare function describeToolCall(name: string, input: Record<string, unknown>): string;
 /**

package/dist/activity-observer.js

@@ -33,7 +33,7 @@
  *
  * | Field | Read from |
  * |---|---|
- * | `agentType`, `description`, `parentActivityId` | the sub-agent's `meta.json` sidecar (via `SourceDiscoveredInfo`) |
+ * | `agentType`, `description`, `parentActivityId` | the sub-agent's `meta.json` sidecar (via `SourceDiscoveredInfo`); the description through {@link redactLabel} |
  * | `lastActivityAt` | the timestamp of its latest `assistant` / `user` line |
  * | `effort` | its latest `assistant` line's top-level `effort` |
  * | `currentActivity` | its latest `tool_use` block, through {@link describeToolCall} |
@@ -122,27 +122,69 @@ export function parseTaskNotification(raw) {
     const endStatus = NOTIFICATION_END_STATUS[match[2].trim()];
     return endStatus === undefined ? null : { taskId: match[1].trim(), endStatus };
 }
+/** DX-4498 — what {@link redactLabel} puts in place of a path-shaped token. */
+const REDACTED_PATH = "[path]";
+/** DX-4498 — what {@link redactLabel} puts in place of a secret-shaped token, or an assignment's value. */
+const REDACTED_SECRET = "[redacted]";
+/** An `ENV_NAME=value` token: its value may be a credential. */
+const ASSIGNMENT_TOKEN = /^([A-Za-z_][A-Za-z0-9_]*)=.+$/;
+/** The characters a key, token, hash or id is written in. */
+const OPAQUE_TOKEN = /^[A-Za-z0-9_+.-]+$/;
+/** The shortest opaque run of letters and digits treated as a key, token, hash or id (a card id or short SHA is far shorter). */
+const OPAQUE_TOKEN_MIN_CHARS = 20;
+/** Punctuation a token may be wrapped in, which never stops it from being read as opaque. */
+const WRAPPING_PUNCTUATION = /^[("'`[]+|[)"'`\],.:;!?]+$/g;
+function redactToken(token) {
+    if (/[\\/]/.test(token))
+        return REDACTED_PATH;
+    const assignment = ASSIGNMENT_TOKEN.exec(token);
+    if (assignment !== null)
+        return `${assignment[1]}=${REDACTED_SECRET}`;
+    const bare = token.replace(WRAPPING_PUNCTUATION, "");
+    const opaque = bare.length >= OPAQUE_TOKEN_MIN_CHARS && OPAQUE_TOKEN.test(bare) && /[0-9]/.test(bare) && /[A-Za-z]/.test(bare);
+    return opaque ? REDACTED_SECRET : token;
+}
+/**
+ * DX-4498 — an agent-written label as the stats wire may carry it: on one line, with every path-shaped token (any token
+ * holding a `/` or `\`) read as `[path]`, and every secret-shaped token (an `ENV_NAME=value` value, or an opaque run of
+ * 20+ letters and digits such as a key, token or full SHA) read as `[redacted]`. A label is free text the agent wrote
+ * for a person to read (real shell descriptions name absolute paths), and it reaches every reader of the team, so this
+ * is the one way any label leaves a transcript. Empty for a blank label.
+ */
+export function redactLabel(label) {
+    return label
+        .split(/\s+/)
+        .filter((token) => token !== "")
+        .map(redactToken)
+        .join(" ");
+}
+/** DX-4498 — a transcript value read as a label: {@link redactLabel}'s text, or null for a non-string or blank one. */
+export function labelOf(value) {
+    if (typeof value !== "string")
+        return null;
+    const label = redactLabel(value);
+    return label === "" ? null : label;
+}
 /**
  * DX-4498 — a sub-agent's current activity, from one `tool_use` block: the tool's name, plus a label only where the
  * agent wrote one AS a label (a shell call's `description`, an `Agent` call's `description`, a `Skill` call's skill
- * name). Never a command, a file path or a prompt: the stats wire carries ids, numbers and labels, never free-form
- * transcript content.
+ * name), through {@link labelOf}. Never a command, a file path, a secret or a prompt: the stats wire carries ids,
+ * numbers and redacted labels, never free-form transcript content.
  */
 export function describeToolCall(name, input) {
-    const label = (v) => (typeof v === "string" && v.trim() !== "" ? v.trim() : null);
     let detail = null;
     switch (name) {
         case "Bash":
         case "PowerShell":
         case "Agent":
         case "Task":
-            detail = label(input.description);
+            detail = labelOf(input.description);
             break;
         case "Skill":
-            detail = label(input.skill);
+            detail = labelOf(input.skill);
             break;
     }
-    const text = (detail === null ? name : `${name}: ${detail}`).replace(/\s+/g, " ");
+    const text = detail === null ? name : `${name}: ${detail}`;
     return text.length > CURRENT_ACTIVITY_MAX_CHARS ? `${text.slice(0, CURRENT_ACTIVITY_MAX_CHARS - 3)}...` : text;
 }
 /**
@@ -230,8 +272,9 @@ export function createActivityObserver(deps) {
                     existing.agentType = info.agentType;
                     filled = true;
                 }
-                if (existing.description === null && info.description !== null) {
-                    existing.description = info.description;
+                const description = labelOf(info.description);
+                if (existing.description === null && description !== null) {
+                    existing.description = description;
                     filled = true;
                 }
                 if (existing.parentActivityId === null && info.parentSource !== null) {
@@ -246,8 +289,8 @@ export function createActivityObserver(deps) {
                 kind: "agent",
                 activityId: info.source,
                 agentType: info.agentType,
-                // DX-4498 — the label its spawning `Agent` call gave it, from the sidecar.
-                description: info.description,
+                // DX-4498 — the label its spawning `Agent` call gave it, from the sidecar, redacted like every label.
+                description: labelOf(info.description),
                 startedAt: info.discoveredAt,
                 lastActivityAt: info.discoveredAt,
                 finishedAt: null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/danx-session-telemetry",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Shared Claude Code transcript collector (DX-2962) — incremental JSONL tailing for the danxbot worker and the danx-dashboard-mcp desktop bridge, so both run identical collector code.",
   "license": "MIT",
   "type": "module",