skalpel 4.0.37 → 4.0.38

package/autopsy.mjs

@@ -737,6 +737,19 @@ function redact(s) {
   return t;
 }
 
+// Redact a raw source pointer for the shareable receipt. srcPointer() returns absolute store paths that
+// bake in the OS home dir twice: the literal "/Users/<you>" prefix AND the dash-encoded "-Users-<you>"
+// copy that ~/.claude/projects flattens into each session's directory name (revealing the full project
+// path — e.g. confidential client dir names — on a receipt marketed shareable). Collapse both home forms
+// to "~", then run the same span redaction used for quoted text. --raw reveals the untouched path locally.
+function redactPointer(p) {
+  if (RAW || !p) return p;
+  const encHome = HOME.replace(/\//g, "-"); // "/Users/you" -> "-Users-you"
+  let t = p.split(HOME).join("~"); // literal home prefix -> ~
+  t = t.split(encHome).join("~"); // dash-encoded home inside the projects dir name -> ~
+  return redact(t);
+}
+
 // ---------- autopsy self-echo filter ----------
 const AUTOPSY_ECHO = [
   "skalpel autopsy",
@@ -1456,7 +1469,7 @@ async function main() {
       );
       for (const w of leg.witnesses.slice(0, 2)) {
         const p = srcPointer(w);
-        if (p) P(`        ${p}`);
+        if (p) P(`        ${redactPointer(p)}`);
       }
     }
     P();
@@ -1500,7 +1513,7 @@ async function main() {
       );
       for (const w of shown) {
         const p = srcPointer(w);
-        if (p) P(`      ${p}`);
+        if (p) P(`      ${redactPointer(p)}`);
       }
     } else {
       const proj = projTail(r.root);
@@ -1531,7 +1544,7 @@ async function main() {
         `    occurrences); the ${r.duration_min}min span = last.ts − first.ts, both quoted. Source:`,
       );
       const p = srcPointer(r.witnesses[0]);
-      if (p) P(`      ${p}`);
+      if (p) P(`      ${redactPointer(p)}`);
     }
     P();
     P("  " + RULE);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skalpel",
-  "version": "4.0.37",
+  "version": "4.0.38",
   "description": "Behavioral graph for AI-assisted coding — learns how you work and steers Claude Code + Codex in real time.",
   "type": "module",
   "bin": {