claude-discover 1.10.9 → 1.10.11

package/README.md

@@ -6,7 +6,12 @@ Ever wondered what Claude Code is **actually** doing all day?
 <img width="1660" alt="claude-discover-dimmed-screenshot" src="https://github.com/user-attachments/assets/708d05c7-8769-47d8-b5bd-14337d1d6037" />
 <br><br>
 
-**Claude Discover** is a desktop tool that shows you what **Claude Code** is actually doing. It collects all your sessions (from the CLI, Desktop, or SDK) and puts them on one timeline, where you can read every conversation, peek at the system prompts, memories, and tools, inspect the raw API traffic behind it all, and see exactly where your tokens - and your money - went. (Spoiler: mostly on re-sending tool definitions.)
+**Claude Discover** is a desktop app for exploring your local Claude Code data. Every session - from the CLI, Desktop, or SDK - lands on one timeline, where you can:
+
+- read each conversation, with every tool call the terminal scrolled past
+- see what was sent behind it: system prompt, memory files, tool definitions, injected reminders
+- inspect the raw API traffic, including the side requests transcripts never record
+- find where your tokens - and your money - went (spoiler: mostly on re-sending tool definitions)
 
 No configuration, no API keys, and **everything stays on your machine**.
 
@@ -39,7 +44,7 @@ claude-discover
     The same session exactly as Claude Code stores it on disk, one JSON line at a time. For when you don't want the story, you want the evidence.
 
   - **API request inspector**\
-    A Postman-like view of every API request and response, captured by an optional local proxy (one click on, one click off). This is where the secrets live: the system prompt, your CLAUDE.md and memory files, tool definitions, injected reminders - all the stuff session logs politely never record.
+    A Postman-like view of every API request and response, captured by an optional local proxy (one click on, one click off). This is where the secrets live: the system prompt, your CLAUDE.md and memory files, tool definitions, injected reminders - plus the side requests (title, auto-mode checks, …) session logs never record.
 
 - **Session summary**\
   Token usage and cost for every session, and totals for the whole period. Computed from your local transcripts with current model rates - accurate to the cent.

package/bin/proxy.config.js

@@ -16,4 +16,5 @@ export const PING_RESPONSE = 'claude-discover-proxy' // the ping body — proves
 
 export const DATA_DIR       = process.env.CLAUDE_DISCOVER_DIR || path.join(os.homedir(), '.claude-discover') // global on purpose — session ids are unique, so one flat dir serves every Claude dir (env override used only by tests)
 export const REQUESTS_DIR   = path.join(DATA_DIR, 'requests') // logs are kept forever — nothing deletes them
+export const UNATTRIBUTED   = 'unattributed' // the log name for requests without a session-id header
 export const ERROR_LOG_PATH = path.join(DATA_DIR, 'proxy.error.log') // capture errors — capture must never fail a request

package/bin/proxy.mjs

@@ -14,7 +14,7 @@ import crypto from 'node:crypto'
 import { pathToFileURL } from 'node:url'
 import { parseArgs } from 'node:util'
 
-import { HOST, PORT, PROXY_URL, UPSTREAM, EXIT_ROUTE, PING_ROUTE, PING_RESPONSE, REQUESTS_DIR, ERROR_LOG_PATH } from './proxy.config.js'
+import { HOST, PORT, PROXY_URL, UPSTREAM, EXIT_ROUTE, PING_ROUTE, PING_RESPONSE, REQUESTS_DIR, UNATTRIBUTED, ERROR_LOG_PATH } from './proxy.config.js'
 
 // How long an exiting proxy keeps serving in-flight responses — long replies stream for minutes
 const DRAIN_TIMEOUT_MS = 10 * 60_000
@@ -107,7 +107,7 @@ function decode(encoding, buf) {
 
 // ── 2. Claude Code capture ───────────────────────────────────────────────────
 // One JSON record per exchange in ~/.claude-discover/requests/<sessionId>.requests.jsonl
-// (session id from the X-Claude-Code-Session-Id header).
+// (session id from the X-Claude-Code-Session-Id header; requests without a usable one go to the UNATTRIBUTED log).
 
 // Keep the header name (useful signal) but never the credential.
 function redactHeaders(headers, keys) {
@@ -116,8 +116,9 @@ function redactHeaders(headers, keys) {
 }
 
 function logRequest({ req, requestBody, status, responseHeaders, responseBody, timestamp, durationMs }) {
-  const sessionId = req.headers['x-claude-code-session-id']
-  if (!sessionId || !/^[\w-]+$/.test(sessionId)) return // header value becomes a filename — accept only safe ids
+  const header = req.headers['x-claude-code-session-id']
+  if (!header && req.method === 'HEAD') return // Claude Code's connectivity probe (HEAD /api/hello), every few seconds at times
+  const sessionId = /^[\w-]+$/.test(header ?? '') ? header : UNATTRIBUTED // header value becomes a filename — accept only safe ids
   const logPath = path.join(REQUESTS_DIR, `${sessionId}.requests.jsonl`)
   const record = { type: 'api-request', timestamp, url: `${req.method} ${req.url}`, status, durationMs }
   record.requestHeaders = redactHeaders(req.headers, ['authorization', 'x-api-key', 'proxy-authorization', 'cookie'])