ccsniff 1.1.3 → 1.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccsniff",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "Watch Claude Code JSONL output files and emit structured events as a Node.js EventEmitter",
   "type": "module",
   "main": "./src/index.js",

package/src/cli.js

@@ -26,8 +26,8 @@ if (process.argv[2] === 'gui') {
 } else {
 
 const FLAGS = {
-  string: ['since', 'until', 'before', 'after', 'grep', 'igrep', 'cwd', 'project', 'role', 'type', 'tool', 'session', 'sid', 'parent', 'rollup', 'format', 'sort', 'unsloth', 'unsloth-format'],
-  multi: ['grep', 'igrep', 'role', 'type', 'tool', 'session', 'sid', 'project', 'cwd'],
+  string: ['since', 'until', 'before', 'after', 'grep', 'igrep', 'cwd', 'project', 'role', 'type', 'tool', 'session', 'sid', 'parent', 'rollup', 'format', 'sort', 'unsloth', 'unsloth-format', 'exclude-sess', 'exclude-sid', 'exclude-cwd', 'exclude-project'],
+  multi: ['grep', 'igrep', 'role', 'type', 'tool', 'session', 'sid', 'project', 'cwd', 'exclude-sess', 'exclude-sid', 'exclude-cwd', 'exclude-project'],
   number: ['limit', 'head', 'tail-n', 'ctx', 'truncate'],
   bool: ['json', 'ndjson', 'tail', 'f', 'full', 'reverse', 'invert', 'no-subagents', 'only-subagents', 'no-meta', 'only-meta', 'list-sessions', 'list-projects', 'list-tools', 'bash-discipline', 'include-subagents', 'stats', 'count', 'help', 'h'],
 };
@@ -81,6 +81,9 @@ FILTERS (repeatable flags combine as OR within a flag, AND across flags)
   --type <t>             text|tool_use|tool_result|thinking|system|result; repeat = OR
   --tool <name>          tool name (Read, Bash, ...); repeat = OR
   --session <sid>        session id prefix; repeat = OR  (alias: --sid)
+  --exclude-sess <sid>   exclude session id prefix; repeat = exclude any (alias: --exclude-sid)
+  --exclude-cwd <re>     exclude working-dir regex; repeat = exclude any
+  --exclude-project <n>  exclude basename(cwd) exact match; repeat = exclude any
   --parent <sid>         subagent parent session id
   --no-subagents         exclude subagent sessions
   --only-subagents       only subagent sessions
@@ -248,6 +251,11 @@ if (opts['bash-discipline']) {
   const BAD_LEADING = /^\s*(cat|head|tail|ls|grep|find|sed|awk)\b/;
   const SLEEP_POLL = /\bsleep\s+\d+\s*;.*(cat|ls|grep|find|head|tail)/;
   const SPOOL_WRITE = /\.gm\/exec-spool\/in\//;
+  // The host harness explicitly endorses `until <check>; do sleep N; done` as
+  // the canonical pattern for polling external state (see Bash tool description
+  // and Monitor docs). Same for `while !curl ...; do sleep N; done`. These are
+  // NOT sleep-poll violations even though they contain `sleep N`.
+  const ENDORSED_POLL = /^\s*(until|while)\s+/;
   const violations = [];
   for (const ev of all) {
     if (!filter(ev)) continue;
@@ -256,6 +264,8 @@ if (opts['bash-discipline']) {
     const cmd = ev.block?.input?.command || '';
     // `echo > .gm/exec-spool/in/<verb>/N.txt` is the canonical spool-write pattern, not a deviation.
     if (SPOOL_WRITE.test(cmd) && /^\s*echo\b/.test(cmd)) continue;
+    // `until ...; do sleep N; done` is the harness-endorsed poll pattern.
+    if (ENDORSED_POLL.test(cmd)) continue;
     const kind = SLEEP_POLL.test(cmd) ? 'sleep-poll' : (BAD_LEADING.test(cmd) ? 'bad-leading-cmd' : null);
     if (!kind) continue;
     violations.push({ ts: ev.timestamp, sid: ev.conversation.id, project: path.basename(ev.conversation.cwd || ''), kind, cmd: cmd.slice(0, 200) });

package/src/filters.js

@@ -46,6 +46,9 @@ export function buildFilter(opts) {
   const types = new Set(m.type || []);
   const tools = new Set(m.tool || []);
   const sids = (m.session || []).concat(m.sid || []);
+  const excludeSids = (m['exclude-sess'] || []).concat(m['exclude-sid'] || []);
+  const excludeCwdRes = compileRegexes(m['exclude-cwd']);
+  const excludeProjects = new Set(m['exclude-project'] || []);
   const parent = opts.parent || null;
 
   return ev => {
@@ -61,6 +64,9 @@ export function buildFilter(opts) {
     else if (types.size && !types.has(block.type)) pass = false;
     else if (tools.size && !tools.has(block.name)) pass = false;
     else if (sids.length && !sids.some(s => conv.id?.startsWith(s))) pass = false;
+    else if (excludeSids.length && excludeSids.some(s => conv.id?.startsWith(s))) pass = false;
+    else if (excludeCwdRes.length && excludeCwdRes.some(r => r.test(conv.cwd || ''))) pass = false;
+    else if (excludeProjects.size && excludeProjects.has(path.basename(conv.cwd || ''))) pass = false;
     else if (parent && conv.parentSid !== parent) pass = false;
     else if (opts['no-subagents'] && conv.isSubagent) pass = false;
     else if (opts['only-subagents'] && !conv.isSubagent) pass = false;