ai-lens 0.8.66 → 0.8.67

package/.commithash

@@ -1 +1 @@
-695b8c8
+cf6dbc7

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 History of changes to the `ai-lens` CLI package on npm. New entries go on top. Format: `## X.Y.Z — YYYY-MM-DD`, followed by user-facing bullets.
 
+## 0.8.67 — 2026-05-26
+- fix: sessions launched from a subdirectory of a repo (e.g. `cd scripts/asr-worker && claude`) now attribute to the repo root instead of the subdirectory. Previously the dashboard showed deep subfolders as if they were the project — a session that ran 74 events inside `meetings-lens/scripts/asr-worker` and 7 at the repo root was attributed to `asr-worker`. SessionStart cwd is now walked up to the nearest `.git` like file-path refinement already did.
+
 ## 0.8.66 — 2026-05-26
 - chore: republish — the npm registry was stuck on 0.8.63 while two patch releases (0.8.64 Codex `apply_patch` multi-file fix and 0.8.65 raw-field preservation on large events) were tagged but never published. Anyone running `npx -y ai-lens init --yes` will now actually receive those fixes.
 - chore: `CHANGELOG.md` now ships inside the published npm package, so it's visible on the npm registry page alongside the README.

package/client/capture.js

@@ -547,37 +547,47 @@ function resolveWorktreeToMainRepo(dir) {
 }
 
 /**
- * Walk up from a path to find the nearest .git entry.
+ * Walk up from a directory to find the nearest .git entry.
  * Returns the repo root (parent of a `.git` directory, or the main repo root
- * when `.git` is a worktree-pointer file) or null.
+ * when `.git` is a worktree-pointer file) or null when no `.git` is found.
  */
-function findGitRoot(filePath) {
-  let dir = dirname(filePath);
-  while (dir && dir !== '/' && dir.length > 1) {
+function findGitRootFromDir(dir) {
+  let cur = dir;
+  while (cur && cur !== '/' && cur.length > 1) {
     try {
-      if (existsSync(join(dir, '.git'))) return resolveWorktreeToMainRepo(dir);
+      if (existsSync(join(cur, '.git'))) return resolveWorktreeToMainRepo(cur);
     } catch {}
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
+    const parent = dirname(cur);
+    if (parent === cur) break;
+    cur = parent;
   }
   return null;
 }
 
 /**
- * If `dir` is a git worktree checkout, return the main repo root; otherwise
- * return `dir` unchanged. Used at session intake where we have a launcher cwd
- * (SessionStart / workspace_roots) and want to avoid attributing the session
- * to a worktree branch name.
+ * Walk up from a file path to find the nearest .git entry.
+ * Returns the repo root or null when no `.git` is found.
+ */
+function findGitRoot(filePath) {
+  return findGitRootFromDir(dirname(filePath));
+}
+
+/**
+ * Resolve a launcher cwd (SessionStart / workspace_roots) to its repo root.
+ *
+ * Two cases are handled:
+ *   1. `dir` is a worktree checkout (`.git` is a pointer file) — roll up to the
+ *      main repo so per-project dashboards don't fragment per worktree branch.
+ *   2. `dir` is a subdirectory of a repo (e.g. user did `cd scripts/asr-worker`
+ *      before launching Claude Code) — walk up to the nearest `.git`, otherwise
+ *      a deep subfolder would dominate the session's representative path and
+ *      hide that the work belongs to the parent repo.
+ *
+ * Returns `dir` unchanged when no `.git` is found anywhere up the tree.
  */
 function canonicalizeProjectPath(dir) {
   if (!dir || typeof dir !== 'string') return dir;
-  try {
-    if (existsSync(join(dir, '.git'))) {
-      return resolveWorktreeToMainRepo(dir);
-    }
-  } catch {}
-  return dir;
+  return findGitRootFromDir(dir) || dir;
 }
 
 /**

package/client/redact.js

@@ -90,8 +90,12 @@ const PATTERNS = [
   // Meilisearch master/API key (mc_ + 32+ hex chars)
   { type: 'MEILISEARCH_KEY', re: /\bmc_[0-9a-f]{32,}\b/g },
 
-  // Connection string password (://user:password@host) — redacts password only
-  { type: 'CONNECTION_STRING', re: /:\/\/([^:@\s]+):([^@\s]{3,})@/g, replacer: (m, user, _pw) => `://${user}:[REDACTED:CONNECTION_STRING]@` },
+  // Connection string password (://user:password@host) — redacts password only.
+  // Tightened: exclude JSON structural chars from the user/password classes so
+  // a stringified JSON payload (e.g. MCP `tool_response` kept as a single
+  // string leaf) can't be matched across field boundaries. See the same note
+  // in server/utils/redact.js.
+  { type: 'CONNECTION_STRING', re: /:\/\/([^:@\s"',\[\]{}']+):([^@\s"',\[\]{}']{3,})@/g, replacer: (m, user, _pw) => `://${user}:[REDACTED:CONNECTION_STRING]@` },
 
   // MySQL/mysqldump CLI -p<password> syntax (mysql -u user -pSECRET dbname)
   { type: 'MYSQL_PASSWORD', re: /(\bmysql\w*\b[^\n]*\s-p)(\S{8,})/g, replacer: (m, prefix, _pw) => `${prefix}[REDACTED:MYSQL_PASSWORD]` },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-lens",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "type": "module",
   "description": "Centralized session analytics for AI coding tools",
   "bin": {