dsh-tacit 0.4.0 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -1
- package/client/client.js +292 -45
- package/docs/README.zh.md +2 -1
- package/lib/analyze.js +144 -40
- package/lib/fold.js +11 -5
- package/lib/redact.js +53 -0
- package/lib/routes.js +1 -0
- package/lib/schema.js +71 -12
- package/lib/service.js +210 -51
- package/lib/store.js +2 -2
- package/lib/usage.js +57 -14
- package/lib/workspace.js +62 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -80,7 +80,9 @@ Tacit never sees your API key (every call goes through the harness's own model
|
|
|
80
80
|
service), only calls the allowlisted official models over your session's own
|
|
81
81
|
provider route, keeps reports and directives in `~/.dsh/storages/tacit/`, refuses
|
|
82
82
|
cross-site requests to its own routes, and never deletes anything but its own
|
|
83
|
-
reports and expired usage files.
|
|
83
|
+
reports and expired usage files. Credential-shaped strings in what it captures —
|
|
84
|
+
API keys, tokens, JWTs, private-key blocks — are masked before anything is
|
|
85
|
+
stored or sent. Dollar figures are estimates at list price; a cost plugin such as
|
|
84
86
|
`dsh-cost-meter` shows the real number. The full data-flow and cost tables, and
|
|
85
87
|
the honest list of limitations:
|
|
86
88
|
[Privacy, cost & limitations](https://github.com/hackernotfound/dsh-tacit/blob/main/docs/privacy-and-cost.md).
|