acp-devtools 0.1.0 → 0.2.0

package/dist/index.js

@@ -8480,7 +8480,7 @@ function extractRpcId(line) {
 }
 
 // ../core/dist/storage/sqlite.js
-import { existsSync } from "fs";
+import { chmodSync, existsSync, statSync } from "fs";
 import Database from "better-sqlite3";
 var SCHEMA_VERSION = 4;
 var SCHEMA_SQL = `
@@ -8523,12 +8523,27 @@ function hasColumn(db, table, column) {
   const cols = db.pragma(`table_info(${table})`);
   return cols.some((c) => c.name === column);
 }
+function restrictDbFile(path) {
+  if (path === ":memory:" || process.platform === "win32")
+    return;
+  try {
+    if (!existsSync(path))
+      return;
+    const mode = statSync(path).mode & 511;
+    if (mode !== 384)
+      chmodSync(path, 384);
+  } catch {
+  }
+}
 function openDatabase(path) {
   const db = new Database(path);
+  restrictDbFile(path);
   db.pragma("busy_timeout = 5000");
   db.pragma("journal_mode = WAL");
   db.pragma("foreign_keys = ON");
   db.pragma("synchronous = NORMAL");
+  restrictDbFile(`${path}-wal`);
+  restrictDbFile(`${path}-shm`);
   db.exec(SCHEMA_SQL);
   if (!hasColumn(db, "sessions", "client_name")) {
     db.exec(`ALTER TABLE sessions ADD COLUMN client_name TEXT`);
@@ -8852,6 +8867,108 @@ function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// ../core/dist/storage/redact.js
+var REDACTED_PLACEHOLDER = "<REDACTED>";
+var SENSITIVE_HEADER_NAMES = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "proxy-authentication",
+  "x-api-key",
+  "x-api-token",
+  "x-auth-token",
+  "api-key",
+  "api_key",
+  "proxy_key",
+  "cookie",
+  "set-cookie"
+]);
+function redactMessage(message) {
+  if (message.payload == null) {
+    return { redacted: message, count: 0 };
+  }
+  const { value, count } = redactValue(message.payload, { inProxyConfig: false });
+  if (count === 0) {
+    return { redacted: message, count: 0 };
+  }
+  const redactedPayload = value;
+  return {
+    redacted: {
+      ...message,
+      payload: redactedPayload,
+      raw: JSON.stringify(redactedPayload)
+    },
+    count
+  };
+}
+function redactValue(value, ctx) {
+  if (Array.isArray(value)) {
+    let count = 0;
+    const out = new Array(value.length);
+    for (let i = 0; i < value.length; i++) {
+      const r = redactValue(value[i], ctx);
+      out[i] = r.value;
+      count += r.count;
+    }
+    return { value: out, count };
+  }
+  if (value !== null && typeof value === "object") {
+    let count = 0;
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (typeof v === "string" && SENSITIVE_HEADER_NAMES.has(k.toLowerCase())) {
+        out[k] = REDACTED_PLACEHOLDER;
+        count += 1;
+        continue;
+      }
+      if (ctx.inProxyConfig && k === "headers" && v !== null && typeof v === "object" && !Array.isArray(v)) {
+        const r2 = redactHeadersBlock(v);
+        out[k] = r2.value;
+        count += r2.count;
+        continue;
+      }
+      const childCtx = ctx.inProxyConfig || k.toLowerCase() === "proxyconfig" ? { inProxyConfig: true } : ctx;
+      const r = redactValue(v, childCtx);
+      out[k] = r.value;
+      count += r.count;
+    }
+    return { value: out, count };
+  }
+  return { value, count: 0 };
+}
+function redactHeadersBlock(obj) {
+  let count = 0;
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    if (typeof v === "string") {
+      out[k] = REDACTED_PLACEHOLDER;
+      count += 1;
+    } else {
+      out[k] = v;
+    }
+  }
+  return { value: out, count };
+}
+function redactSessionExport(exp) {
+  let messagesAffected = 0;
+  let fieldsRedacted = 0;
+  const messages = exp.messages.map((msg) => {
+    const r = redactMessage(msg);
+    if (r.count > 0) {
+      messagesAffected += 1;
+      fieldsRedacted += r.count;
+    }
+    return r.redacted;
+  });
+  if (fieldsRedacted === 0) {
+    return { export: exp, messagesAffected: 0, fieldsRedacted: 0 };
+  }
+  return {
+    export: { ...exp, messages },
+    messagesAffected,
+    fieldsRedacted
+  };
+}
+
 // ../core/dist/ws/server.js
 import { WebSocketServer } from "ws";
 var WsBroadcaster = class {
@@ -9918,7 +10035,7 @@ function fmtValue(v) {
 }
 
 // src/commands/doctor.ts
-import { existsSync as existsSync6, readdirSync as readdirSync2, statSync } from "fs";
+import { existsSync as existsSync6, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
 import { homedir as homedir3, platform, release } from "os";
 import { join as join3 } from "path";
 var STATUS_MARK = {
@@ -9983,7 +10100,7 @@ function checkState() {
                      ) m ON m.session_id = s.id`
       ).get();
       db.close();
-      const size = statSync(dbPath).size;
+      const size = statSync2(dbPath).size;
       results.push({
         status: "ok",
         label: `captures database: ${row2.sessions} session${row2.sessions === 1 ? "" : "s"}, ${row2.messages} message${row2.messages === 1 ? "" : "s"}`,
@@ -10065,7 +10182,7 @@ function probeJetBrains() {
       if (!JETBRAINS_VERSIONED.test(entry) && !JETBRAINS_UNVERSIONED.has(entry)) continue;
       const full = join3(base, entry);
       try {
-        if (!statSync(full).isDirectory()) continue;
+        if (!statSync2(full).isDirectory()) continue;
       } catch {
         continue;
       }
@@ -10161,11 +10278,15 @@ function registerDoctorCommand(program2) {
 import { writeFileSync as writeFileSync2 } from "fs";
 
 // src/version.ts
-var CLI_VERSION = "0.1.0";
+var CLI_VERSION = "0.2.0";
 
 // src/commands/export.ts
 function registerExportCommand(program2) {
-  program2.command("export").description("Export a recorded session as self-contained JSON (suitable for sharing and for mock-replay)").argument("[id]", "session id to export (default: latest in the database)").option("--db <path>", "captures database", defaultCapturesDbPath()).option("-o, --output <file>", "write to a file instead of stdout").option("--no-pretty", "emit compact JSON (no indent, single line)").action((idArg, opts) => {
+  program2.command("export").description("Export a recorded session as self-contained JSON (suitable for sharing and for mock-replay)").argument("[id]", "session id to export (default: latest in the database)").option("--db <path>", "captures database", defaultCapturesDbPath()).option("-o, --output <file>", "write to a file instead of stdout").option("--no-pretty", "emit compact JSON (no indent, single line)").option(
+    "--raw",
+    "skip default redaction of auth headers / proxy tokens (use only when the export stays on YOUR machine)",
+    false
+  ).action((idArg, opts) => {
     let id = null;
     if (idArg !== void 0) {
       id = Number(idArg);
@@ -10194,20 +10315,31 @@ function registerExportCommand(program2) {
       db.close();
       process.exit(1);
     }
-    const exp = exportSession(session, {
+    const rawExp = exportSession(session, {
       tool: { name: "acp-devtools", version: CLI_VERSION }
     });
-    const json = serializeExport(exp, opts.pretty ? 4 : 0);
+    const { export: finalExp, fieldsRedacted, messagesAffected } = opts.raw ? { export: rawExp, fieldsRedacted: 0, messagesAffected: 0 } : redactSessionExport(rawExp);
+    const json = serializeExport(finalExp, opts.pretty ? 4 : 0);
     db.close();
     if (opts.output) {
       writeFileSync2(opts.output, json);
       process.stderr.write(
-        `acp-devtools: exported session #${exp.session.id} (${exp.messages.length} messages) \u2192 ${opts.output}
+        `acp-devtools: exported session #${finalExp.session.id} (${finalExp.messages.length} messages) \u2192 ${opts.output}
 `
       );
     } else {
       process.stdout.write(json);
     }
+    if (opts.raw) {
+      process.stderr.write(
+        "acp-devtools: --raw was set; export may contain auth headers / proxy tokens \u2014 do not share publicly\n"
+      );
+    } else if (fieldsRedacted > 0) {
+      process.stderr.write(
+        `acp-devtools: redacted ${fieldsRedacted} field(s) across ${messagesAffected} message(s) \u2014 re-run with --raw to keep them
+`
+      );
+    }
   });
 }
 
@@ -10646,7 +10778,23 @@ it avoids re-parsing the text payload.
 Schema notes: sessions have a structured-metadata layer populated by the
 \`backfill-metadata\` CLI; \`client_name\` / \`client_version\` /
 \`client_platform\` may be null on freshly imported captures until that
-command runs.`;
+command runs.
+
+Redaction: every tool that returns frame contents OR derived views
+of them (\`get_message\`, \`get_session_messages\`, \`search_messages\`,
+\`get_session_metadata\`, \`get_session_summary\`, \`diff_sessions\`)
+redacts auth headers and proxy tokens (\`Authorization\`,
+\`X-Api-Key\`, JetBrains \`_meta.proxyConfig.proxies[*].proxy.headers.*\`,
+etc). Sensitive fields appear as \`<REDACTED>\`. This is
+unconditional; there is no opt-out flag, because the human owns the
+share decision (use \`acp-devtools export <id> --raw\` on the CLI when
+the export stays on your machine). \`search_messages\` indexes the
+pre-redaction bytes so you can still find a frame by a token fragment,
+but the returned \`raw\` is the redacted copy \u2014 do not quote the live
+secret back to the user. \`diff_sessions\` operates on already-redacted
+frames, so a token that rotated between two sessions shows up as equal
+("<REDACTED>" on both sides) rather than as a change \u2014 this is
+intentional, treating "token rotated" as a leaked side channel.`;
 function annotations(meta) {
   return {
     title: meta.title,
@@ -10779,7 +10927,7 @@ function buildMcpServer(opts) {
       annotations: annotations({ title: "Get session metadata" })
     },
     async ({ session_id }) => {
-      const messages = readMessages(opts.db, session_id);
+      const messages = redactedReadMessages(opts.db, session_id);
       return structuredResult({
         session_id,
         metadata: extractSessionMetadata(messages)
@@ -10854,7 +11002,7 @@ function buildMcpServer(opts) {
       annotations: annotations({ title: "One-call session digest" })
     },
     async ({ session_id }) => {
-      const messages = readMessages(opts.db, session_id);
+      const messages = redactedReadMessages(opts.db, session_id);
       const perMethod = buildPerMethodStats(messages);
       const insights = buildPerformanceInsights(messages, perMethod);
       const pairs = buildPairIndex(messages);
@@ -10932,7 +11080,7 @@ function buildMcpServer(opts) {
         total,
         offset: start,
         returned: end - start,
-        messages: filtered.slice(start, end)
+        messages: filtered.slice(start, end).map((m) => redactMessage(m).redacted)
       });
     }
   );
@@ -10956,7 +11104,7 @@ function buildMcpServer(opts) {
       if (!msg) {
         return errorResult(`session ${session_id} has no message #${seq}`);
       }
-      return structuredResult({ session_id, message: msg });
+      return structuredResult({ session_id, message: redactMessage(msg).redacted });
     }
   );
   server.registerTool(
@@ -11010,7 +11158,8 @@ function buildMcpServer(opts) {
       const matches = [];
       for (const m of messages) {
         if (m.raw.toLowerCase().includes(needle)) {
-          matches.push({ seq: m.seq, method: m.method ?? null, raw: m.raw });
+          const safe = redactMessage(m).redacted;
+          matches.push({ seq: m.seq, method: m.method ?? null, raw: safe.raw });
           if (matches.length >= (limit ?? 50)) break;
         }
       }
@@ -11133,8 +11282,8 @@ function buildMcpServer(opts) {
       annotations: annotations({ title: "Diff two sessions" })
     },
     async ({ session_a, session_b, include_equal }) => {
-      const a = readMessages(opts.db, session_a);
-      const b = readMessages(opts.db, session_b);
+      const a = redactedReadMessages(opts.db, session_a);
+      const b = redactedReadMessages(opts.db, session_b);
       const diff = buildSessionDiff(a, b);
       const meta = buildMetadataDiff(a, b);
       const perMethod = buildMethodStatsDiff(a, b);
@@ -11257,6 +11406,9 @@ Cite the chosen session ids and their message counts so I can replicate in the i
     })
   );
 }
+function redactedReadMessages(dbPath, sessionId) {
+  return readMessages(dbPath, sessionId).map((m) => redactMessage(m).redacted);
+}
 function readMessages(dbPath, sessionId) {
   const db = openDatabase(dbPath);
   try {
@@ -12531,7 +12683,7 @@ function renderPerMethod(s, rows) {
 }
 
 // src/commands/ui.ts
-import { createReadStream, existsSync as existsSync7, statSync as statSync2 } from "fs";
+import { createReadStream, existsSync as existsSync7, statSync as statSync3 } from "fs";
 import { createServer } from "http";
 import { dirname as dirname5, extname, join as join4, normalize, resolve, sep } from "path";
 import { fileURLToPath } from "url";
@@ -12578,7 +12730,7 @@ function serveStatic(req, res, rootDir) {
     return;
   }
   let filePath = candidate;
-  if (!existsSync7(filePath) || !statSync2(filePath).isFile()) {
+  if (!existsSync7(filePath) || !statSync3(filePath).isFile()) {
     filePath = join4(rootDir, "index.html");
     if (!existsSync7(filePath)) {
       res.statusCode = 404;
@@ -12587,7 +12739,7 @@ function serveStatic(req, res, rootDir) {
       return;
     }
   }
-  const stat = statSync2(filePath);
+  const stat = statSync3(filePath);
   res.statusCode = 200;
   res.setHeader("content-type", contentTypeFor(filePath));
   res.setHeader("content-length", stat.size);