whatileaked 0.2.0 → 0.3.1

package/README.md

@@ -1,5 +1,7 @@
 # whatileaked
 
+[![ci](https://github.com/selan-ai/whatileaked/actions/workflows/ci.yml/badge.svg)](https://github.com/selan-ai/whatileaked/actions/workflows/ci.yml)
+
 Your coding agent saves every conversation to your disk. If you ever pasted an
 API key into a chat, or asked the agent to read a `.env` file, that key is now
 sitting in a log file on your laptop — and it was uploaded to Anthropic or
@@ -193,7 +195,12 @@ npx whatileaked scan || echo "found something"
 | Agent | Folder |
 | --- | --- |
 | Claude Code | `~/.claude/projects/` · `~/.claude/CLAUDE.md` |
-| Codex | `~/.codex/sessions/` · `~/.codex/AGENTS.md` |
+| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/AGENTS.md` |
+| Cursor | `~/.cursor/projects/*/agent-transcripts/` |
+
+Cursor keeps its older Ask-mode chats in SQLite rather than jsonl, and those are
+not scanned. Reading them needs `node:sqlite`, which arrived in Node 22.5, and
+this runs on Node 20. Agent transcripts are covered; Ask history is not.
 
 Transcripts record credentials that were already sent. Instruction and memory
 files are worse: they are read again at the start of the next session, so a

package/dist/cli.js

@@ -2524,7 +2524,8 @@ async function walkDirectories(root) {
 // src/transcript/entry.ts
 var SourceName = {
   "claude-code": "claude-code",
-  codex: "codex"
+  codex: "codex",
+  cursor: "cursor"
 };
 
 // src/transcript/shape.ts
@@ -2556,16 +2557,18 @@ var ClaudeCodeSource = class {
     for (const slug of await listDirectories(root)) {
       const dir = join2(root, slug);
       let project = slug;
-      for (const file of await listFiles(dir, FileExtension.jsonl)) {
-        const path = join2(dir, file);
-        const cwd = await firstCwd(path);
-        if (cwd !== null) project = basename(cwd);
-        yield {
-          source: this.name,
-          kind: FileKind.transcript,
-          path,
-          project: cwd === null ? slug : basename(cwd)
-        };
+      for (const nested of await walkDirectories(dir)) {
+        for (const file of await listFiles(nested, FileExtension.jsonl)) {
+          const path = join2(nested, file);
+          const cwd = await firstCwd(path);
+          if (cwd !== null) project = basename(cwd);
+          yield {
+            source: this.name,
+            kind: FileKind.transcript,
+            path,
+            project: cwd === null ? slug : basename(cwd)
+          };
+        }
       }
       for (const nested of await walkDirectories(join2(dir, "memory"))) {
         for (const file of await listFiles(nested, FileExtension.markdown)) {
@@ -2603,17 +2606,18 @@ var CodexSource = class {
     if (instructions !== null) {
       yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
     }
-    const root = join3(this.#home, ".codex", "sessions");
-    for (const dir of await walkDirectories(root)) {
-      for (const file of await listFiles(dir, FileExtension.jsonl)) {
-        const path = join3(dir, file);
-        const cwd = await firstCwd2(path);
-        yield {
-          source: this.name,
-          kind: FileKind.transcript,
-          path,
-          project: cwd === null ? basename2(dir) : basename2(cwd)
-        };
+    for (const root of ["sessions", "archived_sessions"]) {
+      for (const dir of await walkDirectories(join3(this.#home, ".codex", root))) {
+        for (const file of await listFiles(dir, FileExtension.jsonl)) {
+          const path = join3(dir, file);
+          const cwd = await firstCwd2(path);
+          yield {
+            source: this.name,
+            kind: FileKind.transcript,
+            path,
+            project: cwd === null ? basename2(dir) : basename2(cwd)
+          };
+        }
       }
     }
   }
@@ -2630,6 +2634,61 @@ async function firstCwd2(path) {
   return null;
 }
 
+// src/sources/cursor-source.ts
+import { stat as stat2 } from "fs/promises";
+import { basename as basename3, join as join4 } from "path";
+var CursorSource = class {
+  name = SourceName.cursor;
+  #home;
+  constructor(home2) {
+    this.#home = home2;
+  }
+  async *discover() {
+    const root = join4(this.#home, ".cursor", "projects");
+    for (const slug of await listDirectories(root)) {
+      const project = await projectName(slug);
+      for (const dir of await walkDirectories(join4(root, slug, "agent-transcripts"))) {
+        for (const file of await listFiles(dir, FileExtension.jsonl)) {
+          yield {
+            source: this.name,
+            kind: FileKind.transcript,
+            path: join4(dir, file),
+            project
+          };
+        }
+      }
+    }
+  }
+};
+async function projectName(slug) {
+  const path = await resolveSlug(slug);
+  return path === null ? slug : basename3(path);
+}
+async function resolveSlug(slug) {
+  const parts = slug.split("-");
+  let path = "";
+  let index = 0;
+  while (index < parts.length) {
+    let end = index;
+    let candidate = `${path}/${parts[index]}`;
+    while (!await isDirectory(candidate) && end + 1 < parts.length) {
+      end++;
+      candidate = `${candidate}-${parts[end]}`;
+    }
+    if (!await isDirectory(candidate)) return null;
+    path = candidate;
+    index = end + 1;
+  }
+  return path === "" ? null : path;
+}
+async function isDirectory(path) {
+  try {
+    return (await stat2(path)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
 // src/wipe/confirm.ts
 import { createInterface as createInterface3 } from "readline/promises";
 var CONFIRMATION = "wipe";
@@ -2646,7 +2705,7 @@ var TerminalPrompt = class {
 };
 
 // src/wipe/wipe-run.ts
-import { readFile, rename, stat as stat2, writeFile } from "fs/promises";
+import { readFile, rename, stat as stat3, writeFile } from "fs/promises";
 
 // src/wipe/redact.ts
 function placeholder(rule) {
@@ -2734,7 +2793,7 @@ var WipeRun = class {
       redacted += secrets.size;
       return redactLine(line, secrets);
     });
-    const { mode } = await stat2(file);
+    const { mode } = await stat3(file);
     const temporary = `${file}.whatileaked-tmp`;
     await writeFile(temporary, rewritten.join("\n"), { encoding: "utf8", mode });
     await rename(temporary, file);
@@ -2774,7 +2833,11 @@ async function main(argv) {
     for (const line of home()) write(line);
     return 0;
   }
-  const sources = [new ClaudeCodeSource(homedir()), new CodexSource(homedir())];
+  const sources = [
+    new ClaudeCodeSource(homedir()),
+    new CodexSource(homedir()),
+    new CursorSource(homedir())
+  ];
   const scanner = new Scanner(new KeywordIndex(compileRules(SECRET_RULE_SOURCES)));
   return command === Command.wipe ? await wipe(sources, scanner, write) : await scan(sources, scanner, write);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "whatileaked",
-  "version": "0.2.0",
-  "description": "Scan your local Claude Code and Codex transcripts for credentials you already sent to a model provider.",
+  "version": "0.3.1",
+  "description": "Scan your local Claude Code, Codex and Cursor transcripts for credentials you already sent to a model provider.",
   "type": "module",
   "imports": {
     "#scripts/*": "./scripts/*.ts",