rulereceipt 0.1.21 → 0.1.22

package/dist/cli.js

@@ -116,6 +116,14 @@ function writeHtmlReport(results, meta, cwd, target) {
         writeFileSync(outPath, html, "utf-8");
         console.log(`\nShareable report written to ${outPath}`);
         console.log("Open it in a browser, attach it to an email, or print it to PDF. It's a single self-contained file.");
+        // Found by dogfooding on a real session (2026-08-31): this file
+        // reproduces rule text and quoted evidence verbatim, which is exactly
+        // what makes it useful — and means it inherits whatever is in the
+        // rules file. A real CLAUDE.md turned out to contain an employer
+        // name, an office email, and absolute paths. Home paths are redacted
+        // automatically; nothing else can be, so say so plainly at the moment
+        // the file is created rather than burying it in a policy page.
+        console.log("Read it before you send it: it quotes your rule text and session evidence verbatim, so anything sensitive in your CLAUDE.md is in there too. (Home paths are shortened to ~.)");
     }
     catch (err) {
         console.log(`\n(--html: couldn't write ${outPath} — ${err instanceof Error ? err.message : String(err)})`);

package/dist/report/generateHtmlReport.js

@@ -1,4 +1,5 @@
 import { basename } from "node:path";
+import { homedir } from "node:os";
 import { computeTranscriptHash } from "./generateReport.js";
 /**
  * Escapes the five characters that can break out of either an HTML text
@@ -21,9 +22,33 @@ function escapeHtml(value) {
 function stripControlChars(value) {
     return value.replace(/[\x00-\x09\x0B-\x1F\x7F-\x9F]/g, "");
 }
+/**
+ * Replaces the user's home directory with `~`.
+ *
+ * Found by dogfooding on a real session (2026-08-31): the shareable
+ * report is the one output explicitly designed to be emailed to someone
+ * else, and it was printing absolute paths like
+ * /Users/<realname>/Desktop/... in both the project header and inside
+ * quoted evidence. For anyone publishing under a pseudonym — or simply
+ * anyone who would rather not hand a stranger their username and
+ * directory layout — that is a leak in the one artifact most likely to
+ * leave the machine.
+ *
+ * This is a mechanical, judgment-free redaction: it removes the home
+ * prefix and nothing else. It is NOT a general secret scrubber, and must
+ * not be described as one. Rule text and evidence are still reproduced
+ * verbatim, because that is what makes the report useful — which is why
+ * the CLI warns the user to read the file before sending it.
+ */
+function redactHome(value) {
+    const home = homedir();
+    if (!home || home === "/" || home.length < 4)
+        return value;
+    return value.split(home).join("~");
+}
 /** Single choke point: nothing untrusted reaches the document except through this. */
 function clean(value) {
-    return escapeHtml(stripControlChars(value));
+    return escapeHtml(stripControlChars(redactHome(value)));
 }
 function bucketOf(result) {
     if (result.status === "FAIL")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulereceipt",
-  "version": "0.1.21",
+  "version": "0.1.22",
   "description": "Checks whether a Claude Code session actually followed your CLAUDE.md / AGENTS.md rules, with evidence.",
   "repository": {
     "type": "git",