secretless-ai 0.3.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +25 -2
- package/dist/cli.js +2 -1
- package/dist/cli.js.map +1 -1
- package/dist/patterns.js +1 -1
- package/dist/patterns.js.map +1 -1
- package/dist/scan.d.ts.map +1 -1
- package/dist/scan.js +5 -3
- package/dist/scan.js.map +1 -1
- package/dist/status.js +2 -2
- package/dist/status.js.map +1 -1
- package/dist/transcript.d.ts +54 -0
- package/dist/transcript.d.ts.map +1 -0
- package/dist/transcript.js +288 -0
- package/dist/transcript.js.map +1 -0
- package/dist/watch.d.ts +33 -0
- package/dist/watch.d.ts.map +1 -0
- package/dist/watch.js +229 -0
- package/dist/watch.js.map +1 -0
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -3,7 +3,9 @@
|
|
|
3
3
|
[](https://www.npmjs.com/package/secretless-ai)
|
|
4
4
|
[](https://opensource.org/licenses/Apache-2.0)
|
|
5
5
|
|
|
6
|
-
One command to keep secrets out of AI. Works with Claude Code, Cursor, Copilot, Windsurf, Cline, and Aider.
|
|
6
|
+
One command to keep secrets out of AI LLMs. Works with Claude Code, Cursor, Copilot, Windsurf, Cline, and Aider.
|
|
7
|
+
|
|
8
|
+
Part of the [OpenA2A](https://opena2a.org) ecosystem — open-source security for AI agents.
|
|
7
9
|
|
|
8
10
|
```bash
|
|
9
11
|
npx secretless-ai init
|
|
@@ -38,7 +40,7 @@ npx secretless-ai init
|
|
|
38
40
|
Output:
|
|
39
41
|
|
|
40
42
|
```
|
|
41
|
-
Secretless v0.
|
|
43
|
+
Secretless v0.3.0
|
|
42
44
|
Keeping secrets out of AI
|
|
43
45
|
|
|
44
46
|
Detected:
|
|
@@ -172,6 +174,15 @@ For Claude Code, Secretless installs a PreToolUse hook that intercepts every `Re
|
|
|
172
174
|
|
|
173
175
|
Additionally, Secretless adds `permissions.deny` rules to `.claude/settings.json` as a second layer of defense, and adds instructions to `CLAUDE.md` so Claude understands why certain files are blocked.
|
|
174
176
|
|
|
177
|
+
## Development
|
|
178
|
+
|
|
179
|
+
```bash
|
|
180
|
+
npm run build # Compile TypeScript to dist/
|
|
181
|
+
npm test # Run tests (vitest)
|
|
182
|
+
npm run dev # Watch mode — recompile on file changes
|
|
183
|
+
npm run clean # Remove dist/ directory
|
|
184
|
+
```
|
|
185
|
+
|
|
175
186
|
## Requirements
|
|
176
187
|
|
|
177
188
|
- Node.js 18+
|
|
@@ -181,6 +192,18 @@ Additionally, Secretless adds `permissions.deny` rules to `.claude/settings.json
|
|
|
181
192
|
|
|
182
193
|
Secretless has zero runtime dependencies. The npm package is 18 KB.
|
|
183
194
|
|
|
195
|
+
## OpenA2A Ecosystem
|
|
196
|
+
|
|
197
|
+
| Project | What it does |
|
|
198
|
+
|---------|-------------|
|
|
199
|
+
| [**AIM**](https://github.com/opena2a-org/agent-identity-management) | Identity & access management for AI agents |
|
|
200
|
+
| [**HackMyAgent**](https://github.com/opena2a-org/hackmyagent) | Security scanner — 147 checks, attack mode, auto-fix |
|
|
201
|
+
| [**Secretless AI**](https://github.com/opena2a-org/secretless-ai) | Keep credentials out of AI context windows |
|
|
202
|
+
| [**DVAA**](https://github.com/opena2a-org/damn-vulnerable-ai-agent) | Deliberately vulnerable AI agents for security training |
|
|
203
|
+
| [**OASB**](https://oasb.ai) | Open Agent Security Benchmark |
|
|
204
|
+
|
|
205
|
+
[Website](https://opena2a.org) · [Discord](https://discord.gg/uRZa3KXgEn) · [Email](mailto:info@opena2a.org)
|
|
206
|
+
|
|
184
207
|
## License
|
|
185
208
|
|
|
186
209
|
Apache-2.0
|
package/dist/cli.js
CHANGED
|
@@ -48,7 +48,8 @@ const scan_1 = require("./scan");
|
|
|
48
48
|
const status_1 = require("./status");
|
|
49
49
|
const verify_1 = require("./verify");
|
|
50
50
|
const detect_1 = require("./detect");
|
|
51
|
-
|
|
51
|
+
// eslint-disable-next-line @typescript-eslint/no-var-requires
|
|
52
|
+
const { version: VERSION } = require('../package.json');
|
|
52
53
|
function main() {
|
|
53
54
|
const args = process.argv.slice(2);
|
|
54
55
|
const command = args[0];
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAEA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,iCAA8B;AAC9B,iCAA8B;AAC9B,qCAAkC;AAClC,qCAAkC;AAClC,qCAA2C;AAE3C,MAAM,OAAO,GAAG,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAEA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,iCAA8B;AAC9B,iCAA8B;AAC9B,qCAAkC;AAClC,qCAAkC;AAClC,qCAA2C;AAE3C,8DAA8D;AAC9D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAExD,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEjE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM;QACR,KAAK,QAAQ;YACX,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,QAAQ;YACX,SAAS,CAAC,UAAU,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;YACtC,MAAM;QACR,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,SAAS,EAAE,CAAC;YACZ,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,UAAkB;IACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,UAAU,CAAC,CAAC;IAEhC,wBAAwB;IACxB,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAA,wBAAe,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,0BAA0B;IAC1B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,SAAS,IAAA,wBAAe,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,YAAY,0BAA0B,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,OAAO,CAAC,UAAkB;IACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,UAAU,CAAC,CAAC;IAElC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,MAAM,QAAQ,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,CAAC,GAAG,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,wBAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,YAAY,wBAAwB,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC;IAElC,4BAA4B;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,wBAAwB;IACxB,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,WAAW,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;IAED,UAAU;IACV,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;SAAM,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;gBACE,OAAO;;;;;;;;;;;;;;;;CAgBtB,CAAC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}
|
package/dist/patterns.js
CHANGED
|
@@ -17,7 +17,7 @@ exports.CREDENTIAL_PATTERNS = [
|
|
|
17
17
|
{ id: 'stripe', name: 'Stripe Live Key', regex: /sk_live_[0-9a-zA-Z]{24,}/, envPrefix: 'STRIPE_SECRET_KEY' },
|
|
18
18
|
{ id: 'sendgrid', name: 'SendGrid Key', regex: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/, envPrefix: 'SENDGRID_API_KEY' },
|
|
19
19
|
{ id: 'supabase', name: 'Supabase Service Key', regex: /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[a-zA-Z0-9_-]{50,}/, envPrefix: 'SUPABASE_SERVICE_ROLE_KEY' },
|
|
20
|
-
{ id: 'azure', name: 'Azure Key', regex: /[a-zA-Z0-9+/]{43}
|
|
20
|
+
{ id: 'azure', name: 'Azure Key', regex: /(?:AccountKey|SharedAccessKey|azure[_-]?(?:storage|key|account))\s*[=:]\s*[a-zA-Z0-9+/]{43}=/i, envPrefix: 'AZURE_API_KEY' },
|
|
21
21
|
];
|
|
22
22
|
/** File patterns that should never be read by AI tools */
|
|
23
23
|
exports.SECRET_FILE_PATTERNS = [
|
package/dist/patterns.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASU,QAAA,mBAAmB,GAAwB;IACtD,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,oCAAoC,EAAE,SAAS,EAAE,mBAAmB,EAAE;IAC3H,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,gBAAgB,EAAE;IACjH,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,gBAAgB,EAAE;IAC7G,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE;IACvG,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,cAAc,EAAE;IACnG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,4CAA4C,EAAE,SAAS,EAAE,cAAc,EAAE;IACtI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,sDAAsD,EAAE,SAAS,EAAE,aAAa,EAAE;IAC7H,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,gBAAgB,EAAE;IACrG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,mBAAmB,EAAE;IAC5G,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,0CAA0C,EAAE,SAAS,EAAE,kBAAkB,EAAE;IAC1H,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,0DAA0D,EAAE,SAAS,EAAE,2BAA2B,EAAE;IAC3J,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,
|
|
1
|
+
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AASU,QAAA,mBAAmB,GAAwB;IACtD,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,oCAAoC,EAAE,SAAS,EAAE,mBAAmB,EAAE;IAC3H,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,gBAAgB,EAAE;IACjH,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,gBAAgB,EAAE;IAC7G,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE;IACvG,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,cAAc,EAAE;IACnG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,4CAA4C,EAAE,SAAS,EAAE,cAAc,EAAE;IACtI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,sDAAsD,EAAE,SAAS,EAAE,aAAa,EAAE;IAC7H,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,gBAAgB,EAAE;IACrG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,mBAAmB,EAAE;IAC5G,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,0CAA0C,EAAE,SAAS,EAAE,kBAAkB,EAAE;IAC1H,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,0DAA0D,EAAE,SAAS,EAAE,2BAA2B,EAAE;IAC3J,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,+FAA+F,EAAE,SAAS,EAAE,eAAe,EAAE;CACvK,CAAC;AAEF,0DAA0D;AAC7C,QAAA,oBAAoB,GAAa;IAC5C,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,qBAAqB;IACrB,kBAAkB;IAClB,QAAQ;IACR,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,cAAc;IACd,yBAAyB;CAC1B,CAAC;AAEF,sDAAsD;AACzC,QAAA,YAAY,GAAG;IAC1B,aAAa,EAAE,aAAa,EAAE,YAAY;IAC1C,MAAM,EAAE,YAAY;IACpB,cAAc,EAAE,UAAU;IAC1B,WAAW;IACX,uBAAuB,EAAE,sBAAsB;IAC/C,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,kBAAkB;IACrC,uBAAuB;IACvB,uBAAuB;IACvB,iCAAiC;CAClC,CAAC"}
|
package/dist/scan.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAQD;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,
|
|
1
|
+
{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAQD;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAwF7E"}
|
package/dist/scan.js
CHANGED
|
@@ -73,7 +73,8 @@ function scan(projectDir, options) {
|
|
|
73
73
|
continue;
|
|
74
74
|
for (const pattern of patterns_1.CREDENTIAL_PATTERNS) {
|
|
75
75
|
if (pattern.regex.test(line)) {
|
|
76
|
-
const
|
|
76
|
+
const globalRegex = new RegExp(pattern.regex.source, pattern.regex.flags.includes('g') ? pattern.regex.flags : pattern.regex.flags + 'g');
|
|
77
|
+
const masked = line.replace(globalRegex, `[${pattern.name} REDACTED]`);
|
|
77
78
|
findings.push({
|
|
78
79
|
file: global.label,
|
|
79
80
|
line: i + 1,
|
|
@@ -112,8 +113,9 @@ function scan(projectDir, options) {
|
|
|
112
113
|
}
|
|
113
114
|
for (const pattern of patterns_1.CREDENTIAL_PATTERNS) {
|
|
114
115
|
if (pattern.regex.test(line)) {
|
|
115
|
-
// Mask the actual secret in the preview
|
|
116
|
-
const
|
|
116
|
+
// Mask the actual secret in the preview (replace ALL occurrences)
|
|
117
|
+
const globalRegex = new RegExp(pattern.regex.source, pattern.regex.flags.includes('g') ? pattern.regex.flags : pattern.regex.flags + 'g');
|
|
118
|
+
const masked = line.replace(globalRegex, `[${pattern.name} REDACTED]`);
|
|
117
119
|
findings.push({
|
|
118
120
|
file: configFile,
|
|
119
121
|
line: i + 1,
|
package/dist/scan.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,
|
|
1
|
+
{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,oBAwFC;AAtHD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,yCAA+D;AAgB/D,yEAAyE;AACzE,MAAM,mBAAmB,GAAG;IAC1B,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAC5F,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,yBAAyB,EAAE;CACrG,CAAC;AAEF;;;;GAIG;AACH,SAAgB,IAAI,CAAC,UAAkB,EAAE,OAAqB;IAC5D,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,KAAK,KAAK,CAAC;IAEjD,wFAAwF;IACxF,KAAK,MAAM,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC7D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;oBAAE,SAAS;gBACjC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC9F,KAAK,MAAM,OAAO,IAAI,8BAAmB,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;wBAC1I,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,YAAY,CAAC,CAAC;wBACvE,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,MAAM,CAAC,KAAK;4BAClB,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,WAAW,EAAE,OAAO,CAAC,IAAI;4BACzB,QAAQ,EAAE,UAAU;4BACpB,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;yBACxC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,UAAU,IAAI,uBAAY,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;gBAAE,SAAS;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAS;YAE7B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;oBAAE,SAAS,CAAC,mBAAmB;gBAErD,2CAA2C;gBAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;gBAED,KAAK,MAAM,OAAO,IAAI,8BAAmB,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7B,kEAAkE;wBAClE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;wBAC1I,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,YAAY,CAAC,CAAC;wBAEvE,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,UAAU;4BAChB,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,WAAW,EAAE,OAAO,CAAC,IAAI;4BACzB,QAAQ,EAAE,UAAU;4BACpB,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;yBACxC,CAAC,CAAC;wBACH,MAAM,CAAC,uBAAuB;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
package/dist/status.js
CHANGED
|
@@ -73,7 +73,7 @@ function status(projectDir) {
|
|
|
73
73
|
if (fs.existsSync(filePath)) {
|
|
74
74
|
try {
|
|
75
75
|
const content = fs.readFileSync(filePath, 'utf-8');
|
|
76
|
-
if (content.includes('secretless
|
|
76
|
+
if (content.includes('secretless:managed') || content.includes('Secretless AI')) {
|
|
77
77
|
result.configuredTools.push(tool.tool);
|
|
78
78
|
}
|
|
79
79
|
}
|
|
@@ -87,7 +87,7 @@ function status(projectDir) {
|
|
|
87
87
|
if (fs.existsSync(claudeMd)) {
|
|
88
88
|
try {
|
|
89
89
|
const content = fs.readFileSync(claudeMd, 'utf-8');
|
|
90
|
-
if (content.includes('secretless
|
|
90
|
+
if (content.includes('secretless:managed') && !result.configuredTools.includes('claude-code')) {
|
|
91
91
|
result.configuredTools.push('claude-code');
|
|
92
92
|
}
|
|
93
93
|
}
|
package/dist/status.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"status.js","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBH,wBA6DC;AA7ED,uCAAyB;AACzB,2CAA6B;AAC7B,qCAAsD;AACtD,iCAA8B;AAU9B;;GAEG;AACH,SAAgB,MAAM,CAAC,UAAkB;IACvC,MAAM,MAAM,GAAiB;QAC3B,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC;KAChB,CAAC;IAEF,yBAAyB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,aAAa,GAAG,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,MAAM,QAAQ,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"status.js","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBH,wBA6DC;AA7ED,uCAAyB;AACzB,2CAA6B;AAC7B,qCAAsD;AACtD,iCAA8B;AAU9B;;GAEG;AACH,SAAgB,MAAM,CAAC,UAAkB;IACvC,MAAM,MAAM,GAAiB;QAC3B,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,KAAK;QACpB,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC;KAChB,CAAC;IAEF,yBAAyB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,aAAa,GAAG,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,MAAM,QAAQ,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBAChF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9F,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEtC,kFAAkF;IAClF,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/E,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* JSONL transcript scanning and redaction engine.
|
|
3
|
+
* Discovers, scans, and redacts credentials in Claude Code transcript files.
|
|
4
|
+
*/
|
|
5
|
+
export interface TranscriptFinding {
|
|
6
|
+
file: string;
|
|
7
|
+
line: number;
|
|
8
|
+
jsonPath: string;
|
|
9
|
+
patternId: string;
|
|
10
|
+
patternName: string;
|
|
11
|
+
preview: string;
|
|
12
|
+
}
|
|
13
|
+
export interface CleanResult {
|
|
14
|
+
filesScanned: number;
|
|
15
|
+
filesWithSecrets: number;
|
|
16
|
+
totalFindings: number;
|
|
17
|
+
totalRedacted: number;
|
|
18
|
+
findings: TranscriptFinding[];
|
|
19
|
+
}
|
|
20
|
+
export interface CleanOptions {
|
|
21
|
+
dryRun?: boolean;
|
|
22
|
+
targetPath?: string;
|
|
23
|
+
lastSession?: boolean;
|
|
24
|
+
}
|
|
25
|
+
/**
|
|
26
|
+
* Discover Claude Code transcript files.
|
|
27
|
+
* Walks ~/.claude/projects/ recursively, finding .jsonl files.
|
|
28
|
+
* Also discovers session-memory/summary.md files.
|
|
29
|
+
*/
|
|
30
|
+
export declare function discoverTranscripts(targetPath?: string): string[];
|
|
31
|
+
/**
|
|
32
|
+
* Recursively walk a JSON value, scanning string leaves for credentials.
|
|
33
|
+
* Returns the (possibly redacted) value.
|
|
34
|
+
*/
|
|
35
|
+
export declare function deepScan(value: unknown, jsonPath: string, findings: TranscriptFinding[], fileInfo: {
|
|
36
|
+
file: string;
|
|
37
|
+
line: number;
|
|
38
|
+
}): unknown;
|
|
39
|
+
/**
|
|
40
|
+
* Scan a single transcript file. Returns findings and optionally redacted lines.
|
|
41
|
+
*/
|
|
42
|
+
export declare function scanTranscriptFile(filePath: string, dryRun: boolean): {
|
|
43
|
+
findings: TranscriptFinding[];
|
|
44
|
+
redactedLines: string[] | null;
|
|
45
|
+
};
|
|
46
|
+
/**
|
|
47
|
+
* Atomic write: write to temp file then rename.
|
|
48
|
+
*/
|
|
49
|
+
export declare function atomicWrite(filePath: string, lines: string[]): void;
|
|
50
|
+
/**
|
|
51
|
+
* Main orchestrator: discover, scan, and optionally redact transcripts.
|
|
52
|
+
*/
|
|
53
|
+
export declare function cleanTranscripts(options?: CleanOptions): CleanResult;
|
|
54
|
+
//# sourceMappingURL=transcript.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../src/transcript.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAQD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAuBjE;AA+BD;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,iBAAiB,EAAE,EAC7B,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAyBT;AAiCD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,GACd;IAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,CAgEnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAUnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CA0CpE"}
|
|
@@ -0,0 +1,288 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* JSONL transcript scanning and redaction engine.
|
|
4
|
+
* Discovers, scans, and redacts credentials in Claude Code transcript files.
|
|
5
|
+
*/
|
|
6
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
7
|
+
if (k2 === undefined) k2 = k;
|
|
8
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
9
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
10
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
11
|
+
}
|
|
12
|
+
Object.defineProperty(o, k2, desc);
|
|
13
|
+
}) : (function(o, m, k, k2) {
|
|
14
|
+
if (k2 === undefined) k2 = k;
|
|
15
|
+
o[k2] = m[k];
|
|
16
|
+
}));
|
|
17
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
18
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
19
|
+
}) : function(o, v) {
|
|
20
|
+
o["default"] = v;
|
|
21
|
+
});
|
|
22
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
23
|
+
var ownKeys = function(o) {
|
|
24
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
25
|
+
var ar = [];
|
|
26
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
27
|
+
return ar;
|
|
28
|
+
};
|
|
29
|
+
return ownKeys(o);
|
|
30
|
+
};
|
|
31
|
+
return function (mod) {
|
|
32
|
+
if (mod && mod.__esModule) return mod;
|
|
33
|
+
var result = {};
|
|
34
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
35
|
+
__setModuleDefault(result, mod);
|
|
36
|
+
return result;
|
|
37
|
+
};
|
|
38
|
+
})();
|
|
39
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
40
|
+
exports.discoverTranscripts = discoverTranscripts;
|
|
41
|
+
exports.deepScan = deepScan;
|
|
42
|
+
exports.scanTranscriptFile = scanTranscriptFile;
|
|
43
|
+
exports.atomicWrite = atomicWrite;
|
|
44
|
+
exports.cleanTranscripts = cleanTranscripts;
|
|
45
|
+
const fs = __importStar(require("fs"));
|
|
46
|
+
const path = __importStar(require("path"));
|
|
47
|
+
const os = __importStar(require("os"));
|
|
48
|
+
const patterns_1 = require("./patterns");
|
|
49
|
+
/** Metadata keys that should never be scanned for credentials */
|
|
50
|
+
const SKIP_KEYS = new Set(['uuid', 'sessionId', 'parentUuid', 'timestamp', 'signature', 'cacheKey', 'hash']);
|
|
51
|
+
/** Max line size to process (ReDoS protection) */
|
|
52
|
+
const MAX_LINE_SIZE = 500 * 1024;
|
|
53
|
+
/**
|
|
54
|
+
* Discover Claude Code transcript files.
|
|
55
|
+
* Walks ~/.claude/projects/ recursively, finding .jsonl files.
|
|
56
|
+
* Also discovers session-memory/summary.md files.
|
|
57
|
+
*/
|
|
58
|
+
function discoverTranscripts(targetPath) {
|
|
59
|
+
const files = [];
|
|
60
|
+
if (targetPath) {
|
|
61
|
+
try {
|
|
62
|
+
const stat = fs.statSync(targetPath);
|
|
63
|
+
if (stat.isFile() && (targetPath.endsWith('.jsonl') || targetPath.endsWith('.md'))) {
|
|
64
|
+
return [targetPath];
|
|
65
|
+
}
|
|
66
|
+
if (stat.isDirectory()) {
|
|
67
|
+
walkDir(targetPath, files);
|
|
68
|
+
return files.sort((a, b) => b.mtime - a.mtime).map(f => f.path);
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
catch {
|
|
72
|
+
return [];
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
const transcriptDir = path.join(os.homedir(), '.claude', 'projects');
|
|
76
|
+
if (!fs.existsSync(transcriptDir))
|
|
77
|
+
return [];
|
|
78
|
+
walkDir(transcriptDir, files);
|
|
79
|
+
return files.sort((a, b) => b.mtime - a.mtime).map(f => f.path);
|
|
80
|
+
}
|
|
81
|
+
function walkDir(dir, files) {
|
|
82
|
+
let entries;
|
|
83
|
+
try {
|
|
84
|
+
entries = fs.readdirSync(dir, { withFileTypes: true });
|
|
85
|
+
}
|
|
86
|
+
catch {
|
|
87
|
+
return;
|
|
88
|
+
}
|
|
89
|
+
for (const entry of entries) {
|
|
90
|
+
const fullPath = path.join(dir, entry.name);
|
|
91
|
+
// Skip tool-results directories
|
|
92
|
+
if (entry.isDirectory() && entry.name === 'tool-results')
|
|
93
|
+
continue;
|
|
94
|
+
if (entry.isDirectory()) {
|
|
95
|
+
walkDir(fullPath, files);
|
|
96
|
+
}
|
|
97
|
+
else if (entry.isFile()) {
|
|
98
|
+
if (entry.name.endsWith('.jsonl') || (entry.name === 'summary.md' && dir.endsWith('session-memory'))) {
|
|
99
|
+
try {
|
|
100
|
+
const stat = fs.statSync(fullPath);
|
|
101
|
+
files.push({ path: fullPath, mtime: stat.mtimeMs });
|
|
102
|
+
}
|
|
103
|
+
catch {
|
|
104
|
+
// Skip unreadable files
|
|
105
|
+
}
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
/**
|
|
111
|
+
* Recursively walk a JSON value, scanning string leaves for credentials.
|
|
112
|
+
* Returns the (possibly redacted) value.
|
|
113
|
+
*/
|
|
114
|
+
function deepScan(value, jsonPath, findings, fileInfo) {
|
|
115
|
+
if (value === null || value === undefined)
|
|
116
|
+
return value;
|
|
117
|
+
if (typeof value === 'string') {
|
|
118
|
+
return scanString(value, jsonPath, findings, fileInfo);
|
|
119
|
+
}
|
|
120
|
+
if (Array.isArray(value)) {
|
|
121
|
+
return value.map((item, i) => deepScan(item, `${jsonPath}[${i}]`, findings, fileInfo));
|
|
122
|
+
}
|
|
123
|
+
if (typeof value === 'object') {
|
|
124
|
+
const obj = value;
|
|
125
|
+
const result = {};
|
|
126
|
+
for (const key of Object.keys(obj)) {
|
|
127
|
+
if (SKIP_KEYS.has(key)) {
|
|
128
|
+
result[key] = obj[key];
|
|
129
|
+
continue;
|
|
130
|
+
}
|
|
131
|
+
result[key] = deepScan(obj[key], `${jsonPath}.${key}`, findings, fileInfo);
|
|
132
|
+
}
|
|
133
|
+
return result;
|
|
134
|
+
}
|
|
135
|
+
return value;
|
|
136
|
+
}
|
|
137
|
+
function scanString(value, jsonPath, findings, fileInfo) {
|
|
138
|
+
// Skip already-redacted values (idempotency)
|
|
139
|
+
if (value.includes('[REDACTED:'))
|
|
140
|
+
return value;
|
|
141
|
+
// Skip very long strings (ReDoS protection)
|
|
142
|
+
if (value.length > MAX_LINE_SIZE)
|
|
143
|
+
return value;
|
|
144
|
+
let result = value;
|
|
145
|
+
for (const pattern of patterns_1.CREDENTIAL_PATTERNS) {
|
|
146
|
+
if (pattern.regex.test(result)) {
|
|
147
|
+
const preview = result.replace(pattern.regex, `[REDACTED:${pattern.id}]`).substring(0, 80);
|
|
148
|
+
findings.push({
|
|
149
|
+
file: fileInfo.file,
|
|
150
|
+
line: fileInfo.line,
|
|
151
|
+
jsonPath,
|
|
152
|
+
patternId: pattern.id,
|
|
153
|
+
patternName: pattern.name,
|
|
154
|
+
preview,
|
|
155
|
+
});
|
|
156
|
+
result = result.replace(pattern.regex, `[REDACTED:${pattern.id}]`);
|
|
157
|
+
}
|
|
158
|
+
}
|
|
159
|
+
return result;
|
|
160
|
+
}
|
|
161
|
+
/**
|
|
162
|
+
* Scan a single transcript file. Returns findings and optionally redacted lines.
|
|
163
|
+
*/
|
|
164
|
+
function scanTranscriptFile(filePath, dryRun) {
|
|
165
|
+
const findings = [];
|
|
166
|
+
let hasChanges = false;
|
|
167
|
+
const redactedLines = [];
|
|
168
|
+
let content;
|
|
169
|
+
try {
|
|
170
|
+
content = fs.readFileSync(filePath, 'utf-8');
|
|
171
|
+
}
|
|
172
|
+
catch {
|
|
173
|
+
return { findings, redactedLines: null };
|
|
174
|
+
}
|
|
175
|
+
const lines = content.split('\n');
|
|
176
|
+
const displayPath = filePath.replace(os.homedir(), '~');
|
|
177
|
+
for (let i = 0; i < lines.length; i++) {
|
|
178
|
+
const line = lines[i];
|
|
179
|
+
// Skip empty lines
|
|
180
|
+
if (!line.trim()) {
|
|
181
|
+
if (!dryRun)
|
|
182
|
+
redactedLines.push(line);
|
|
183
|
+
continue;
|
|
184
|
+
}
|
|
185
|
+
// Skip oversized lines (ReDoS protection)
|
|
186
|
+
if (line.length > MAX_LINE_SIZE) {
|
|
187
|
+
if (!dryRun)
|
|
188
|
+
redactedLines.push(line);
|
|
189
|
+
continue;
|
|
190
|
+
}
|
|
191
|
+
// Handle .md files (non-JSONL)
|
|
192
|
+
if (filePath.endsWith('.md')) {
|
|
193
|
+
const lineFindingsBefore = findings.length;
|
|
194
|
+
const scanned = scanString(line, 'content', findings, { file: displayPath, line: i + 1 });
|
|
195
|
+
if (scanned !== line)
|
|
196
|
+
hasChanges = true;
|
|
197
|
+
if (!dryRun)
|
|
198
|
+
redactedLines.push(scanned);
|
|
199
|
+
continue;
|
|
200
|
+
}
|
|
201
|
+
// Parse JSONL line
|
|
202
|
+
let parsed;
|
|
203
|
+
try {
|
|
204
|
+
parsed = JSON.parse(line);
|
|
205
|
+
}
|
|
206
|
+
catch {
|
|
207
|
+
// Malformed JSON line — keep as-is
|
|
208
|
+
if (!dryRun)
|
|
209
|
+
redactedLines.push(line);
|
|
210
|
+
continue;
|
|
211
|
+
}
|
|
212
|
+
const findingsBefore = findings.length;
|
|
213
|
+
const redacted = deepScan(parsed, '', findings, { file: displayPath, line: i + 1 });
|
|
214
|
+
if (findings.length > findingsBefore) {
|
|
215
|
+
hasChanges = true;
|
|
216
|
+
if (!dryRun)
|
|
217
|
+
redactedLines.push(JSON.stringify(redacted));
|
|
218
|
+
}
|
|
219
|
+
else {
|
|
220
|
+
if (!dryRun)
|
|
221
|
+
redactedLines.push(line);
|
|
222
|
+
}
|
|
223
|
+
}
|
|
224
|
+
return {
|
|
225
|
+
findings,
|
|
226
|
+
redactedLines: !dryRun && hasChanges ? redactedLines : null,
|
|
227
|
+
};
|
|
228
|
+
}
|
|
229
|
+
/**
|
|
230
|
+
* Atomic write: write to temp file then rename.
|
|
231
|
+
*/
|
|
232
|
+
function atomicWrite(filePath, lines) {
|
|
233
|
+
const tempPath = `${filePath}.tmp.${process.pid}`;
|
|
234
|
+
try {
|
|
235
|
+
fs.writeFileSync(tempPath, lines.join('\n'));
|
|
236
|
+
fs.renameSync(tempPath, filePath);
|
|
237
|
+
}
|
|
238
|
+
catch (err) {
|
|
239
|
+
// Clean up temp file on error
|
|
240
|
+
try {
|
|
241
|
+
fs.unlinkSync(tempPath);
|
|
242
|
+
}
|
|
243
|
+
catch { /* ignore */ }
|
|
244
|
+
throw err;
|
|
245
|
+
}
|
|
246
|
+
}
|
|
247
|
+
/**
|
|
248
|
+
* Main orchestrator: discover, scan, and optionally redact transcripts.
|
|
249
|
+
*/
|
|
250
|
+
function cleanTranscripts(options) {
|
|
251
|
+
const dryRun = options?.dryRun ?? false;
|
|
252
|
+
const result = {
|
|
253
|
+
filesScanned: 0,
|
|
254
|
+
filesWithSecrets: 0,
|
|
255
|
+
totalFindings: 0,
|
|
256
|
+
totalRedacted: 0,
|
|
257
|
+
findings: [],
|
|
258
|
+
};
|
|
259
|
+
let files = discoverTranscripts(options?.targetPath);
|
|
260
|
+
if (options?.lastSession) {
|
|
261
|
+
// Only process the newest .jsonl per project directory
|
|
262
|
+
const newestPerProject = new Map();
|
|
263
|
+
for (const file of files) {
|
|
264
|
+
if (!file.endsWith('.jsonl'))
|
|
265
|
+
continue;
|
|
266
|
+
const projectDir = path.dirname(file);
|
|
267
|
+
if (!newestPerProject.has(projectDir)) {
|
|
268
|
+
newestPerProject.set(projectDir, file);
|
|
269
|
+
}
|
|
270
|
+
}
|
|
271
|
+
files = [...newestPerProject.values()];
|
|
272
|
+
}
|
|
273
|
+
for (const file of files) {
|
|
274
|
+
result.filesScanned++;
|
|
275
|
+
const { findings, redactedLines } = scanTranscriptFile(file, dryRun);
|
|
276
|
+
if (findings.length > 0) {
|
|
277
|
+
result.filesWithSecrets++;
|
|
278
|
+
result.totalFindings += findings.length;
|
|
279
|
+
result.findings.push(...findings);
|
|
280
|
+
if (!dryRun && redactedLines) {
|
|
281
|
+
atomicWrite(file, redactedLines);
|
|
282
|
+
result.totalRedacted += findings.length;
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
}
|
|
286
|
+
return result;
|
|
287
|
+
}
|
|
288
|
+
//# sourceMappingURL=transcript.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"transcript.js","sourceRoot":"","sources":["../src/transcript.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCH,kDAuBC;AAmCD,4BA8BC;AAoCD,gDAmEC;AAKD,kCAUC;AAKD,4CA0CC;AApSD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,yCAAiD;AAyBjD,iEAAiE;AACjE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7G,kDAAkD;AAClD,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AAEjC;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,UAAmB;IACrD,MAAM,KAAK,GAA2C,EAAE,CAAC;IAEzD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnF,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,KAA6C;IACzE,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,gCAAgC;QAChC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAEnE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,QAAQ,CACtB,KAAc,EACd,QAAgB,EAChB,QAA6B,EAC7B,QAAwC;IAExC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,KAAa,EACb,QAAgB,EAChB,QAA6B,EAC7B,QAAwC;IAExC,6CAA6C;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,4CAA4C;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa;QAAE,OAAO,KAAK,CAAC;IAE/C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,8BAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ;gBACR,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,OAAO;aACR,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,QAAgB,EAChB,MAAe;IAEf,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAExD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,mBAAmB;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,+BAA+B;QAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1F,IAAI,OAAO,KAAK,IAAI;gBAAE,UAAU,GAAG,IAAI,CAAC;YACxC,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;YACnC,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEpF,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACrC,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;KAC5D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAAgB,EAAE,KAAe;IAC3D,MAAM,QAAQ,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8BAA8B;QAC9B,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAsB;IACrD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAgB;QAC1B,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,IAAI,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAErD,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,KAAK,GAAG,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAErE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAElC,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;gBAC7B,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACjC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
package/dist/watch.d.ts
ADDED
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* File watcher daemon for real-time transcript protection.
|
|
3
|
+
* Monitors ~/.claude/projects/ for new/modified .jsonl files and auto-redacts.
|
|
4
|
+
*/
|
|
5
|
+
declare const PID_FILE: string;
|
|
6
|
+
declare const LOG_FILE: string;
|
|
7
|
+
/** Debounce window in milliseconds */
|
|
8
|
+
declare const DEBOUNCE_MS = 3000;
|
|
9
|
+
/**
|
|
10
|
+
* Start watching Claude Code transcripts for credentials.
|
|
11
|
+
* Runs in the foreground, monitoring file changes and auto-redacting.
|
|
12
|
+
*/
|
|
13
|
+
export declare function startWatch(options?: {
|
|
14
|
+
logFile?: string;
|
|
15
|
+
}): void;
|
|
16
|
+
/**
|
|
17
|
+
* Stop the running watcher process.
|
|
18
|
+
*/
|
|
19
|
+
export declare function stopWatch(): boolean;
|
|
20
|
+
/**
|
|
21
|
+
* Check if the watcher is currently running.
|
|
22
|
+
*/
|
|
23
|
+
export declare function isWatchRunning(): boolean;
|
|
24
|
+
/**
|
|
25
|
+
* Install macOS LaunchAgent for auto-start on login.
|
|
26
|
+
*/
|
|
27
|
+
export declare function installLaunchAgent(): boolean;
|
|
28
|
+
/**
|
|
29
|
+
* Uninstall macOS LaunchAgent.
|
|
30
|
+
*/
|
|
31
|
+
export declare function uninstallLaunchAgent(): boolean;
|
|
32
|
+
export { PID_FILE, LOG_FILE, DEBOUNCE_MS };
|
|
33
|
+
//# sourceMappingURL=watch.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../src/watch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,QAAA,MAAM,QAAQ,QAAyC,CAAC;AACxD,QAAA,MAAM,QAAQ,QAAyC,CAAC;AAGxD,sCAAsC;AACtC,QAAA,MAAM,WAAW,OAAO,CAAC;AAKzB;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAoD/D;AA6BD;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAanC;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAUxC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAkC5C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAY9C;AAGD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC"}
|
package/dist/watch.js
ADDED
|
@@ -0,0 +1,229 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* File watcher daemon for real-time transcript protection.
|
|
4
|
+
* Monitors ~/.claude/projects/ for new/modified .jsonl files and auto-redacts.
|
|
5
|
+
*/
|
|
6
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
7
|
+
if (k2 === undefined) k2 = k;
|
|
8
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
9
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
10
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
11
|
+
}
|
|
12
|
+
Object.defineProperty(o, k2, desc);
|
|
13
|
+
}) : (function(o, m, k, k2) {
|
|
14
|
+
if (k2 === undefined) k2 = k;
|
|
15
|
+
o[k2] = m[k];
|
|
16
|
+
}));
|
|
17
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
18
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
19
|
+
}) : function(o, v) {
|
|
20
|
+
o["default"] = v;
|
|
21
|
+
});
|
|
22
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
23
|
+
var ownKeys = function(o) {
|
|
24
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
25
|
+
var ar = [];
|
|
26
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
27
|
+
return ar;
|
|
28
|
+
};
|
|
29
|
+
return ownKeys(o);
|
|
30
|
+
};
|
|
31
|
+
return function (mod) {
|
|
32
|
+
if (mod && mod.__esModule) return mod;
|
|
33
|
+
var result = {};
|
|
34
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
35
|
+
__setModuleDefault(result, mod);
|
|
36
|
+
return result;
|
|
37
|
+
};
|
|
38
|
+
})();
|
|
39
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
40
|
+
exports.DEBOUNCE_MS = exports.LOG_FILE = exports.PID_FILE = void 0;
|
|
41
|
+
exports.startWatch = startWatch;
|
|
42
|
+
exports.stopWatch = stopWatch;
|
|
43
|
+
exports.isWatchRunning = isWatchRunning;
|
|
44
|
+
exports.installLaunchAgent = installLaunchAgent;
|
|
45
|
+
exports.uninstallLaunchAgent = uninstallLaunchAgent;
|
|
46
|
+
const fs = __importStar(require("fs"));
|
|
47
|
+
const path = __importStar(require("path"));
|
|
48
|
+
const os = __importStar(require("os"));
|
|
49
|
+
const transcript_1 = require("./transcript");
|
|
50
|
+
const SECRETLESS_DIR = path.join(os.homedir(), '.secretless-ai');
|
|
51
|
+
const PID_FILE = path.join(SECRETLESS_DIR, 'watch.pid');
|
|
52
|
+
exports.PID_FILE = PID_FILE;
|
|
53
|
+
const LOG_FILE = path.join(SECRETLESS_DIR, 'watch.log');
|
|
54
|
+
exports.LOG_FILE = LOG_FILE;
|
|
55
|
+
const TRANSCRIPT_DIR = path.join(os.homedir(), '.claude', 'projects');
|
|
56
|
+
/** Debounce window in milliseconds */
|
|
57
|
+
const DEBOUNCE_MS = 3000;
|
|
58
|
+
exports.DEBOUNCE_MS = DEBOUNCE_MS;
|
|
59
|
+
/** Plist identifier for macOS LaunchAgent */
|
|
60
|
+
const LAUNCH_AGENT_LABEL = 'ai.secretless.watch';
|
|
61
|
+
/**
|
|
62
|
+
* Start watching Claude Code transcripts for credentials.
|
|
63
|
+
* Runs in the foreground, monitoring file changes and auto-redacting.
|
|
64
|
+
*/
|
|
65
|
+
function startWatch(options) {
|
|
66
|
+
const logPath = options?.logFile || LOG_FILE;
|
|
67
|
+
// Ensure directories exist
|
|
68
|
+
fs.mkdirSync(SECRETLESS_DIR, { recursive: true });
|
|
69
|
+
if (!fs.existsSync(TRANSCRIPT_DIR)) {
|
|
70
|
+
log(logPath, 'Transcript directory not found: ' + TRANSCRIPT_DIR);
|
|
71
|
+
log(logPath, 'Start a Claude Code session first, then re-run.');
|
|
72
|
+
return;
|
|
73
|
+
}
|
|
74
|
+
// Write PID file
|
|
75
|
+
fs.writeFileSync(PID_FILE, String(process.pid));
|
|
76
|
+
log(logPath, `Watcher started (PID: ${process.pid})`);
|
|
77
|
+
log(logPath, `Monitoring: ${TRANSCRIPT_DIR}`);
|
|
78
|
+
// Track debounce timers per file
|
|
79
|
+
const debounceTimers = new Map();
|
|
80
|
+
// Watch for changes
|
|
81
|
+
const watcher = fs.watch(TRANSCRIPT_DIR, { recursive: true }, (eventType, filename) => {
|
|
82
|
+
if (!filename || !filename.endsWith('.jsonl'))
|
|
83
|
+
return;
|
|
84
|
+
const fullPath = path.join(TRANSCRIPT_DIR, filename);
|
|
85
|
+
// Skip if in tool-results
|
|
86
|
+
if (filename.includes('tool-results'))
|
|
87
|
+
return;
|
|
88
|
+
// Debounce: Claude Code writes in bursts
|
|
89
|
+
const existing = debounceTimers.get(fullPath);
|
|
90
|
+
if (existing)
|
|
91
|
+
clearTimeout(existing);
|
|
92
|
+
debounceTimers.set(fullPath, setTimeout(() => {
|
|
93
|
+
debounceTimers.delete(fullPath);
|
|
94
|
+
processFile(fullPath, logPath);
|
|
95
|
+
}, DEBOUNCE_MS));
|
|
96
|
+
});
|
|
97
|
+
// Graceful shutdown
|
|
98
|
+
const shutdown = () => {
|
|
99
|
+
log(logPath, 'Watcher stopping...');
|
|
100
|
+
watcher.close();
|
|
101
|
+
for (const timer of debounceTimers.values())
|
|
102
|
+
clearTimeout(timer);
|
|
103
|
+
debounceTimers.clear();
|
|
104
|
+
try {
|
|
105
|
+
fs.unlinkSync(PID_FILE);
|
|
106
|
+
}
|
|
107
|
+
catch { /* ignore */ }
|
|
108
|
+
log(logPath, 'Watcher stopped.');
|
|
109
|
+
process.exit(0);
|
|
110
|
+
};
|
|
111
|
+
process.on('SIGTERM', shutdown);
|
|
112
|
+
process.on('SIGINT', shutdown);
|
|
113
|
+
}
|
|
114
|
+
function processFile(filePath, logPath) {
|
|
115
|
+
try {
|
|
116
|
+
const { findings, redactedLines } = (0, transcript_1.scanTranscriptFile)(filePath, false);
|
|
117
|
+
if (findings.length > 0 && redactedLines) {
|
|
118
|
+
(0, transcript_1.atomicWrite)(filePath, redactedLines);
|
|
119
|
+
const displayPath = filePath.replace(os.homedir(), '~');
|
|
120
|
+
log(logPath, `Redacted ${findings.length} credential(s) in ${displayPath}`);
|
|
121
|
+
for (const f of findings) {
|
|
122
|
+
log(logPath, ` ${f.jsonPath} → [REDACTED:${f.patternId}]`);
|
|
123
|
+
}
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
catch (err) {
|
|
127
|
+
log(logPath, `Error processing ${filePath}: ${err}`);
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
function log(logPath, message) {
|
|
131
|
+
const timestamp = new Date().toISOString();
|
|
132
|
+
const line = `[${timestamp}] ${message}\n`;
|
|
133
|
+
try {
|
|
134
|
+
fs.appendFileSync(logPath, line);
|
|
135
|
+
}
|
|
136
|
+
catch {
|
|
137
|
+
// Fallback to stderr if log file is not writable
|
|
138
|
+
}
|
|
139
|
+
process.stderr.write(line);
|
|
140
|
+
}
|
|
141
|
+
/**
|
|
142
|
+
* Stop the running watcher process.
|
|
143
|
+
*/
|
|
144
|
+
function stopWatch() {
|
|
145
|
+
if (!fs.existsSync(PID_FILE))
|
|
146
|
+
return false;
|
|
147
|
+
try {
|
|
148
|
+
const pid = parseInt(fs.readFileSync(PID_FILE, 'utf-8').trim(), 10);
|
|
149
|
+
process.kill(pid, 'SIGTERM');
|
|
150
|
+
fs.unlinkSync(PID_FILE);
|
|
151
|
+
return true;
|
|
152
|
+
}
|
|
153
|
+
catch {
|
|
154
|
+
// Process may already be dead
|
|
155
|
+
try {
|
|
156
|
+
fs.unlinkSync(PID_FILE);
|
|
157
|
+
}
|
|
158
|
+
catch { /* ignore */ }
|
|
159
|
+
return false;
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
/**
|
|
163
|
+
* Check if the watcher is currently running.
|
|
164
|
+
*/
|
|
165
|
+
function isWatchRunning() {
|
|
166
|
+
if (!fs.existsSync(PID_FILE))
|
|
167
|
+
return false;
|
|
168
|
+
try {
|
|
169
|
+
const pid = parseInt(fs.readFileSync(PID_FILE, 'utf-8').trim(), 10);
|
|
170
|
+
process.kill(pid, 0); // Signal 0 = check if process exists
|
|
171
|
+
return true;
|
|
172
|
+
}
|
|
173
|
+
catch {
|
|
174
|
+
return false;
|
|
175
|
+
}
|
|
176
|
+
}
|
|
177
|
+
/**
|
|
178
|
+
* Install macOS LaunchAgent for auto-start on login.
|
|
179
|
+
*/
|
|
180
|
+
function installLaunchAgent() {
|
|
181
|
+
if (process.platform !== 'darwin')
|
|
182
|
+
return false;
|
|
183
|
+
const launchAgentsDir = path.join(os.homedir(), 'Library', 'LaunchAgents');
|
|
184
|
+
fs.mkdirSync(launchAgentsDir, { recursive: true });
|
|
185
|
+
const plistPath = path.join(launchAgentsDir, `${LAUNCH_AGENT_LABEL}.plist`);
|
|
186
|
+
const plist = `<?xml version="1.0" encoding="UTF-8"?>
|
|
187
|
+
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
188
|
+
<plist version="1.0">
|
|
189
|
+
<dict>
|
|
190
|
+
<key>Label</key>
|
|
191
|
+
<string>${LAUNCH_AGENT_LABEL}</string>
|
|
192
|
+
<key>ProgramArguments</key>
|
|
193
|
+
<array>
|
|
194
|
+
<string>npx</string>
|
|
195
|
+
<string>secretless-ai</string>
|
|
196
|
+
<string>watch</string>
|
|
197
|
+
<string>start</string>
|
|
198
|
+
</array>
|
|
199
|
+
<key>RunAtLoad</key>
|
|
200
|
+
<true/>
|
|
201
|
+
<key>KeepAlive</key>
|
|
202
|
+
<true/>
|
|
203
|
+
<key>StandardErrorPath</key>
|
|
204
|
+
<string>${LOG_FILE}</string>
|
|
205
|
+
<key>StandardOutPath</key>
|
|
206
|
+
<string>${LOG_FILE}</string>
|
|
207
|
+
</dict>
|
|
208
|
+
</plist>`;
|
|
209
|
+
fs.writeFileSync(plistPath, plist);
|
|
210
|
+
return true;
|
|
211
|
+
}
|
|
212
|
+
/**
|
|
213
|
+
* Uninstall macOS LaunchAgent.
|
|
214
|
+
*/
|
|
215
|
+
function uninstallLaunchAgent() {
|
|
216
|
+
if (process.platform !== 'darwin')
|
|
217
|
+
return false;
|
|
218
|
+
const plistPath = path.join(os.homedir(), 'Library', 'LaunchAgents', `${LAUNCH_AGENT_LABEL}.plist`);
|
|
219
|
+
if (!fs.existsSync(plistPath))
|
|
220
|
+
return false;
|
|
221
|
+
try {
|
|
222
|
+
fs.unlinkSync(plistPath);
|
|
223
|
+
return true;
|
|
224
|
+
}
|
|
225
|
+
catch {
|
|
226
|
+
return false;
|
|
227
|
+
}
|
|
228
|
+
}
|
|
229
|
+
//# sourceMappingURL=watch.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"watch.js","sourceRoot":"","sources":["../src/watch.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBH,gCAoDC;AAgCD,8BAaC;AAKD,wCAUC;AAKD,gDAkCC;AAKD,oDAYC;AA5LD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,6CAA+D;AAE/D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAyL/C,4BAAQ;AAxLjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAwLrC,4BAAQ;AAvL3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAEtE,sCAAsC;AACtC,MAAM,WAAW,GAAG,IAAI,CAAC;AAoLI,kCAAW;AAlLxC,6CAA6C;AAC7C,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD;;;GAGG;AACH,SAAgB,UAAU,CAAC,OAA8B;IACvD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC;IAE7C,2BAA2B;IAC3B,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,OAAO,EAAE,kCAAkC,GAAG,cAAc,CAAC,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,iDAAiD,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,OAAO,EAAE,yBAAyB,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACtD,GAAG,CAAC,OAAO,EAAE,eAAe,cAAc,EAAE,CAAC,CAAC;IAE9C,iCAAiC;IACjC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyC,CAAC;IAExE,oBAAoB;IACpB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;QACpF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO;QAEtD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAErD,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO;QAE9C,yCAAyC;QACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAErC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE;YAC3C,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACpC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjE,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAA,+BAAkB,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,IAAA,wBAAW,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACxD,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,CAAC,MAAM,qBAAqB,WAAW,EAAE,CAAC,CAAC;YAC5E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,OAAO,EAAE,oBAAoB,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,OAAe;IAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS;IACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;QAC9B,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,qCAAqC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC3E,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,kBAAkB,QAAQ,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG;;;;;YAKJ,kBAAkB;;;;;;;;;;;;;YAalB,QAAQ;;YAER,QAAQ;;SAEX,CAAC;IAER,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,kBAAkB,QAAQ,CAAC,CAAC;IACpG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5C,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "secretless-ai",
|
|
3
|
-
"version": "0.3.
|
|
3
|
+
"version": "0.3.1",
|
|
4
4
|
"description": "One command to keep secrets out of AI. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"type": "commonjs",
|
|
@@ -34,9 +34,9 @@
|
|
|
34
34
|
],
|
|
35
35
|
"repository": {
|
|
36
36
|
"type": "git",
|
|
37
|
-
"url": "https://github.com/opena2a-org/secretless"
|
|
37
|
+
"url": "https://github.com/opena2a-org/secretless-ai"
|
|
38
38
|
},
|
|
39
|
-
"homepage": "https://github.com/opena2a-org/secretless",
|
|
39
|
+
"homepage": "https://github.com/opena2a-org/secretless-ai",
|
|
40
40
|
"engines": {
|
|
41
41
|
"node": ">=18.0.0"
|
|
42
42
|
},
|