ccsniff 1.1.9 → 1.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccsniff",
-  "version": "1.1.9",
+  "version": "1.1.11",
   "description": "Watch Claude Code JSONL output files and emit structured events as a Node.js EventEmitter",
   "type": "module",
   "main": "./src/index.js",

package/src/cli.js

@@ -263,6 +263,11 @@ if (opts['bash-discipline']) {
   // to compare watcher heartbeat against current epoch. The cat is canonical, not a deviation.
   // Same for reading .watcher.log diagnostics directly.
   const CANONICAL_BOOT_PROBE = /\.gm\/exec-spool\/\.(status\.json|watcher\.log|bootstrap-(status|error)\.json|last-session-start\.json)/;
+  // Observability surfaces — multi-file pattern scans over JSONL logs and transcript dirs
+  // legitimately need grep/tail/cat because Read tool can't stream multi-file or pipe to head -c.
+  // gm-log/<day>/*.jsonl, .claude/projects/*/*.jsonl, and *.jsonl in general are the canonical
+  // observability targets per AGENTS.md "rs-learn observability" entry.
+  const OBSERVABILITY_TARGET = /\.(jsonl|ndjson|log)\b|gm-log\/|\.claude\/projects\//;
   const violations = [];
   for (const ev of all) {
     if (!filter(ev)) continue;
@@ -275,6 +280,8 @@ if (opts['bash-discipline']) {
     if (ENDORSED_POLL.test(cmd)) continue;
     // Canonical gm-skill boot/diagnostic probes (cat .status.json; date +%s%3N etc.) are prescribed by SKILL.md.
     if (CANONICAL_BOOT_PROBE.test(cmd)) continue;
+    // Observability surface reads — grep/cat/tail over JSONL logs and transcript dirs are legit (Read tool can't stream/multi-file).
+    if (OBSERVABILITY_TARGET.test(cmd)) continue;
     const kind = SLEEP_POLL.test(cmd) ? 'sleep-poll' : (BAD_LEADING.test(cmd) ? 'bad-leading-cmd' : null);
     if (!kind) continue;
     violations.push({ ts: ev.timestamp, sid: ev.conversation.id, project: path.basename(ev.conversation.cwd || ''), kind, cmd: cmd.slice(0, 200) });

package/src/index.js

@@ -124,17 +124,19 @@ export class JsonlWatcher extends EventEmitter {
     this.emit('streaming_complete', { conversationId: conv.id, conversation: conv, seq: this._seq(sid), timestamp: Date.now() });
   }
 
-  _push(conv, sid, block, role) {
-    this.emit('streaming_progress', { conversationId: conv.id, conversation: conv, block, role, seq: this._seq(sid), timestamp: Date.now() });
+  _push(conv, sid, block, role, eventTs) {
+    const ts = eventTs != null ? eventTs : Date.now();
+    this.emit('streaming_progress', { conversationId: conv.id, conversation: conv, block, role, seq: this._seq(sid), timestamp: ts });
   }
 
   _route(conv, sid, e) {
     if (e.type === 'queue-operation' || e.type === 'last-prompt') return;
+    const ets = e.timestamp ? Date.parse(e.timestamp) : null;
     if (e.type === 'user' && e.isMeta) {
       this._startStreaming(conv, sid);
       const content = e.message?.content;
       const text = typeof content === 'string' ? content : (Array.isArray(content) ? content.filter(b => b?.type === 'text').map(b => b.text).join('') : '');
-      if (text.trim()) this._push(conv, sid, { type: 'text', text, isMeta: true }, 'user');
+      if (text.trim()) this._push(conv, sid, { type: 'text', text, isMeta: true }, 'user', ets);
       return;
     }
 
@@ -147,7 +149,7 @@ export class JsonlWatcher extends EventEmitter {
       if (e.subtype === 'init') { this._startStreaming(conv, sid); return; }
       if (e.subtype === 'turn_duration' || e.subtype === 'stop_hook_summary') { this._endStreaming(conv, sid); return; }
       this._startStreaming(conv, sid);
-      this._push(conv, sid, { type: 'system', subtype: e.subtype, model: e.model, cwd: e.cwd, tools: e.tools }, 'system');
+      this._push(conv, sid, { type: 'system', subtype: e.subtype, model: e.model, cwd: e.cwd, tools: e.tools }, 'system', ets);
       return;
     }
 
@@ -158,7 +160,7 @@ export class JsonlWatcher extends EventEmitter {
       const newBlocks = e.message.content.slice(prev);
       if (newBlocks.length > 0) {
         this._emitted.set(key, e.message.content.length);
-        for (const b of newBlocks) if (b?.type) this._push(conv, sid, b, 'assistant');
+        for (const b of newBlocks) if (b?.type) this._push(conv, sid, b, 'assistant', ets);
       }
       if (e.message.stop_reason) this._emitted.delete(key);
       return;
@@ -168,19 +170,19 @@ export class JsonlWatcher extends EventEmitter {
       this._startStreaming(conv, sid);
       const content = e.message.content;
       if (typeof content === 'string') {
-        if (content.trim()) this._push(conv, sid, { type: 'text', text: content }, 'user');
+        if (content.trim()) this._push(conv, sid, { type: 'text', text: content }, 'user', ets);
       } else if (Array.isArray(content)) {
         for (const b of content) {
           if (!b || !b.type) continue;
-          if (b.type === 'tool_result') this._push(conv, sid, b, 'tool_result');
-          else this._push(conv, sid, b, 'user');
+          if (b.type === 'tool_result') this._push(conv, sid, b, 'tool_result', ets);
+          else this._push(conv, sid, b, 'user', ets);
         }
       }
       return;
     }
 
     if (e.type === 'result') {
-      this._push(conv, sid, { type: 'result', result: e.result, subtype: e.subtype, duration_ms: e.duration_ms, total_cost_usd: e.total_cost_usd, is_error: e.is_error || false }, 'result');
+      this._push(conv, sid, { type: 'result', result: e.result, subtype: e.subtype, duration_ms: e.duration_ms, total_cost_usd: e.total_cost_usd, is_error: e.is_error || false }, 'result', ets);
       this._endStreaming(conv, sid);
     }
   }