whatileaked 0.4.0 → 0.5.1

package/README.md

@@ -58,7 +58,7 @@ is all — no network connection is made at any point.
 ### When it finds nothing
 
 ```
-  scanned 561 transcripts · 197,016 messages
+  scanned 561 transcripts · 197,016 messages · 3 memory files
 
 No credentials found.
 ```
@@ -68,7 +68,7 @@ Nothing to do. This is the good outcome.
 ### When it finds something
 
 ```
-  scanned 561 transcripts · 196,986 messages
+  scanned 561 transcripts · 196,986 messages · 3 memory files
 
 * aws-access-token  2 secrets
     f0b93847  billing-api            sent 25 times
@@ -205,18 +205,26 @@ npx whatileaked scan || echo "found something"
 
 | Agent | Folder |
 | --- | --- |
-| Claude Code | `~/.claude/projects/` · `~/.claude/CLAUDE.md` |
-| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/AGENTS.md` |
+| Claude Code | `~/.claude/projects/` · `~/.claude/history.jsonl` · `~/.claude/paste-cache/` · `~/.claude/CLAUDE.md` |
+| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/history.jsonl` · `~/.codex/AGENTS.md` |
 | Cursor | `~/.cursor/projects/*/agent-transcripts/` |
-
-Cursor keeps its older Ask-mode chats in SQLite rather than jsonl, and those are
-not scanned. Reading them needs `node:sqlite`, which arrived in Node 22.5, and
-this runs on Node 20. Agent transcripts are covered; Ask history is not.
-
-Transcripts record credentials that were already sent. Instruction and memory
-files are worse: they are read again at the start of the next session, so a
-credential in one keeps leaking until the file is edited. Both are scanned, and
-`wipe` rewrites both.
+| opencode | `~/.local/share/opencode/opencode.db` |
+
+opencode keeps its sessions in a SQLite database. Reading it needs Node's
+built-in `node:sqlite`, which loads without a flag from Node 22.13. On an older
+Node the scan still finds the file and says, in one line, that it was not
+scanned, so a skipped database never looks clean. Only the messages table is
+read, and `wipe` does not rewrite the database: delete those sessions in
+opencode, and rotate.
+
+Cursor keeps its older Ask-mode chats in SQLite as well, and those are not
+scanned yet. Agent transcripts are covered; Ask history is not.
+
+Transcripts record credentials that were already sent. So does prompt history,
+which keeps every prompt you typed and every long paste after the session itself
+has been cleaned up. Instruction and memory files are worse: they are read again
+at the start of the next session, so a credential in one keeps leaking until the
+file is edited. All of them are scanned, and `wipe` rewrites all of them.
 
 Nowhere else. It does not read your repos, your shell history, or your
 environment. Adding support for another agent is one small file — pull requests

package/dist/cli.js

@@ -161,6 +161,7 @@ var TerminalReporter = class {
     if (totals.length === 0) {
       this.#write(green("No credentials found."));
       this.#write("");
+      if (this.#notScanned(stats)) this.#write("");
       this.#write(dim(DISCLOSURE));
       this.#share(sent, stats);
       return;
@@ -186,11 +187,7 @@ var TerminalReporter = class {
         red("Remove them there as well as rotating, or the next session sends them again.")
       );
     }
-    if (stats.unscannable > 0) {
-      this.#write(
-        yellow(`${plural(stats.unscannable, "message")} could not be scanned and are not counted.`)
-      );
-    }
+    this.#notScanned(stats);
     this.#write("");
     this.#write(dim("The 8-character code is a fingerprint, never the secret: a truncated"));
     this.#write(dim("SHA-256, so one credential shows the same code everywhere it leaked."));
@@ -199,6 +196,24 @@ var TerminalReporter = class {
     this.#write(dim(DISCLOSURE));
     this.#share(sent, stats);
   }
+  /**
+   * Everything that was found and not looked at: refused messages, then one
+   * plain line per file not read. Printed under a clean result too, which is
+   * exactly where leaving it out would mislead — a clean scan once returned
+   * before the refused count, so a partial scan read as a clean one. Answers
+   * whether it wrote anything.
+   */
+  #notScanned(stats) {
+    if (stats.unscannable > 0) {
+      this.#write(
+        yellow(`${plural(stats.unscannable, "message")} could not be scanned and are not counted.`)
+      );
+    }
+    for (const file of stats.unread) {
+      this.#write(yellow(`Found ${shorten(file.path)} but did not scan it: ${file.reason}.`));
+    }
+    return stats.unscannable > 0 || stats.unread.length > 0;
+  }
   /**
    * The one line meant to be pasted somewhere public. Everything above it names
    * projects, paths and fingerprints, so nobody shares it; this is counts only,
@@ -2398,6 +2413,50 @@ async function* readLines(path) {
   }
 }
 
+// src/sources/listing.ts
+import { readdir, realpath, stat } from "fs/promises";
+import { join } from "path";
+async function listDirectories(root) {
+  try {
+    const entries = await readdir(root, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}
+var FileExtension = {
+  jsonl: ".jsonl",
+  markdown: ".md",
+  text: ".txt",
+  database: ".db"
+};
+function isJsonl(path) {
+  return path.endsWith(FileExtension.jsonl);
+}
+async function listFiles(dir, extension) {
+  try {
+    const entries = await readdir(dir, { withFileTypes: true });
+    return entries.filter((entry) => entry.isFile() && entry.name.endsWith(extension)).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}
+async function resolveFile(path) {
+  try {
+    const real = await realpath(path);
+    return (await stat(real)).isFile() ? real : null;
+  } catch {
+    return null;
+  }
+}
+async function walkDirectories(root) {
+  const found = [root];
+  for (const name of await listDirectories(root)) {
+    found.push(...await walkDirectories(join(root, name)));
+  }
+  return found;
+}
+
 // src/transcript/reader.ts
 import { createReadStream as createReadStream2 } from "fs";
 import { createInterface as createInterface2 } from "readline";
@@ -2430,6 +2489,7 @@ var TranscriptReader = class {
 };
 
 // src/scan-run.ts
+var NEEDS_SQLITE = "reading it needs Node 22.13 or newer";
 var ScanRun = class {
   #sources;
   #scanner;
@@ -2450,12 +2510,19 @@ var ScanRun = class {
       memoryFiles: 0,
       entries: 0,
       skipped: 0,
-      unscannable: 0
+      unscannable: 0,
+      unread: []
     };
     for (const source of this.#sources) {
       for await (const file of source.discover()) {
-        if (file.kind === FileKind.transcript) {
-          stats.transcripts++;
+        if (file.messages !== void 0) {
+          await this.#readDatabase(file, file.messages, findings, stats);
+          this.#progress.advance(stats.transcripts + stats.memoryFiles, file.project);
+          continue;
+        }
+        if (file.kind === FileKind.transcript) stats.transcripts++;
+        else stats.memoryFiles++;
+        if (isJsonl(file.path)) {
           const reader = new TranscriptReader();
           for await (const entry of reader.read(file.path)) {
             this.#collect(file, entry.line, entry.index, findings, stats);
@@ -2463,7 +2530,7 @@ var ScanRun = class {
           stats.entries += reader.stats.entries;
           stats.skipped += reader.stats.skipped;
         } else {
-          stats.memoryFiles++;
+          if (file.kind === FileKind.transcript) stats.entries++;
           for await (const line of readLines(file.path)) {
             this.#collect(file, line.text, line.number, findings, stats);
           }
@@ -2475,6 +2542,24 @@ var ScanRun = class {
     this.#reporter.report(findings, stats);
     return findings.length;
   }
+  /** A database counts as one transcript once it has been read. One it could
+   *  not open is listed instead, so a scan that skipped it never reads as clean. */
+  async #readDatabase(file, messages, findings, stats) {
+    if (messages === null) {
+      stats.unread.push({ path: file.path, reason: NEEDS_SQLITE });
+      return;
+    }
+    let index = 0;
+    try {
+      for await (const message of messages()) {
+        stats.entries++;
+        this.#collect({ ...file, project: message.project }, message.text, index++, findings, stats);
+      }
+      stats.transcripts++;
+    } catch {
+      stats.unread.push({ path: file.path, reason: "it could not be opened" });
+    }
+  }
   /** One entry the engine chokes on must not cost the other 700,000. */
   #collect(file, text, at, findings, stats) {
     let matches = [];
@@ -2502,47 +2587,12 @@ var ScanRun = class {
 // src/sources/claude-code-source.ts
 import { basename, join as join2 } from "path";
 
-// src/sources/listing.ts
-import { readdir, realpath, stat } from "fs/promises";
-import { join } from "path";
-async function listDirectories(root) {
-  try {
-    const entries = await readdir(root, { withFileTypes: true });
-    return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  } catch {
-    return [];
-  }
-}
-var FileExtension = { jsonl: ".jsonl", markdown: ".md" };
-async function listFiles(dir, extension) {
-  try {
-    const entries = await readdir(dir, { withFileTypes: true });
-    return entries.filter((entry) => entry.isFile() && entry.name.endsWith(extension)).map((entry) => entry.name);
-  } catch {
-    return [];
-  }
-}
-async function resolveFile(path) {
-  try {
-    const real = await realpath(path);
-    return (await stat(real)).isFile() ? real : null;
-  } catch {
-    return null;
-  }
-}
-async function walkDirectories(root) {
-  const found = [root];
-  for (const name of await listDirectories(root)) {
-    found.push(...await walkDirectories(join(root, name)));
-  }
-  return found;
-}
-
 // src/transcript/entry.ts
 var SourceName = {
   "claude-code": "claude-code",
   codex: "codex",
-  cursor: "cursor"
+  cursor: "cursor",
+  opencode: "opencode"
 };
 
 // src/transcript/shape.ts
@@ -2570,6 +2620,19 @@ var ClaudeCodeSource = class {
     if (instructions !== null) {
       yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
     }
+    const history = await resolveFile(join2(this.#home, ".claude", "history.jsonl"));
+    if (history !== null) {
+      yield { source: this.name, kind: FileKind.transcript, path: history, project: this.name };
+    }
+    const pastes = join2(this.#home, ".claude", "paste-cache");
+    for (const file of await listFiles(pastes, FileExtension.text)) {
+      yield {
+        source: this.name,
+        kind: FileKind.transcript,
+        path: join2(pastes, file),
+        project: this.name
+      };
+    }
     const root = join2(this.#home, ".claude", "projects");
     for (const slug of await listDirectories(root)) {
       const dir = join2(root, slug);
@@ -2623,6 +2686,10 @@ var CodexSource = class {
     if (instructions !== null) {
       yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
     }
+    const history = await resolveFile(join3(this.#home, ".codex", "history.jsonl"));
+    if (history !== null) {
+      yield { source: this.name, kind: FileKind.transcript, path: history, project: this.name };
+    }
     for (const root of ["sessions", "archived_sessions"]) {
       for (const dir of await walkDirectories(join3(this.#home, ".codex", root))) {
         for (const file of await listFiles(dir, FileExtension.jsonl)) {
@@ -2706,6 +2773,73 @@ async function isDirectory(path) {
   }
 }
 
+// src/sources/opencode-source.ts
+import { basename as basename4, join as join5 } from "path";
+var OpencodeSource = class {
+  name = SourceName.opencode;
+  #home;
+  #load;
+  constructor(home2, load = loadSqlite) {
+    this.#home = home2;
+    this.#load = load;
+  }
+  async *discover() {
+    const dir = join5(this.#home, ".local", "share", "opencode");
+    for (const file of await listFiles(dir, FileExtension.database)) {
+      const path = join5(dir, file);
+      const sqlite = await this.#load();
+      yield {
+        source: this.name,
+        kind: FileKind.transcript,
+        path,
+        project: this.name,
+        messages: sqlite === null ? null : () => readMessages(sqlite, path, this.name)
+      };
+    }
+  }
+};
+async function* readMessages(sqlite, path, fallback) {
+  const db = new sqlite.DatabaseSync(path, { readOnly: true });
+  try {
+    const directories = /* @__PURE__ */ new Map();
+    const tables = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name IN (?, ?)").all("session", "session_v2");
+    for (const { name } of tables) {
+      for (const row of db.prepare(`SELECT id, directory FROM "${String(name)}"`).iterate()) {
+        if (typeof row.id === "string" && typeof row.directory === "string") {
+          directories.set(row.id, row.directory);
+        }
+      }
+    }
+    for (const row of db.prepare("SELECT session_id, data FROM session_message").iterate()) {
+      if (typeof row.data !== "string") continue;
+      const directory = typeof row.session_id === "string" ? directories.get(row.session_id) : null;
+      yield { project: directory == null ? fallback : basename4(directory), text: row.data };
+    }
+  } finally {
+    db.close();
+  }
+}
+var loading = null;
+function loadSqlite() {
+  loading ??= importSqlite();
+  return loading;
+}
+async function importSqlite() {
+  const emitWarning = process.emitWarning;
+  process.emitWarning = ((warning, ...rest) => {
+    if (String(warning).includes("SQLite")) return;
+    Reflect.apply(emitWarning, process, [warning, ...rest]);
+  });
+  try {
+    const specifier = "node:sqlite";
+    return await import(specifier);
+  } catch {
+    return null;
+  } finally {
+    process.emitWarning = emitWarning;
+  }
+}
+
 // src/wipe/confirm.ts
 import { createInterface as createInterface3 } from "readline/promises";
 var CONFIRMATION = "wipe";
@@ -2749,16 +2883,16 @@ var WipeRun = class {
     this.#write = write;
   }
   async run() {
-    const plans = await this.#plan();
+    const { plans, untouched } = await this.#plan();
     if (plans.length === 0) {
-      return { planned: [], filesRewritten: 0, secretsRedacted: 0, confirmed: false };
+      return { planned: [], untouched, filesRewritten: 0, secretsRedacted: 0, confirmed: false };
     }
     this.#preview(plans);
     const answer = await this.#prompt.ask(
       `  Type ${bold(red(CONFIRMATION))} to rewrite these files, or anything else to stop: `
     );
     if (answer !== CONFIRMATION) {
-      return { planned: plans, filesRewritten: 0, secretsRedacted: 0, confirmed: false };
+      return { planned: plans, untouched, filesRewritten: 0, secretsRedacted: 0, confirmed: false };
     }
     let filesRewritten = 0;
     let secretsRedacted = 0;
@@ -2766,12 +2900,18 @@ var WipeRun = class {
       secretsRedacted += await this.#rewrite(plan.file);
       filesRewritten++;
     }
-    return { planned: plans, filesRewritten, secretsRedacted, confirmed: true };
+    return { planned: plans, untouched, filesRewritten, secretsRedacted, confirmed: true };
   }
   async #plan() {
     const plans = [];
+    const untouched = [];
     for (const source of this.#sources) {
       for await (const file of source.discover()) {
+        if (file.messages !== void 0) {
+          if (!await this.#holdsSecret(file.messages)) continue;
+          untouched.push(file.path);
+          continue;
+        }
         let lines = 0;
         let secrets = 0;
         for await (const text of this.#textOf(file)) {
@@ -2785,12 +2925,25 @@ var WipeRun = class {
         }
       }
     }
-    return plans;
+    return { plans, untouched };
+  }
+  /** True for a database that cannot be read: it may hold one, and saying
+   *  nothing about it would let a wipe pass for complete. */
+  async #holdsSecret(messages) {
+    if (messages == null) return true;
+    try {
+      for await (const message of messages()) {
+        if (this.#scanner.secretsOf(message.text).size > 0) return true;
+      }
+      return false;
+    } catch {
+      return true;
+    }
   }
   /** The rewrite below is textual and kind-blind; only counting needs to know
    *  which reader gets the file. */
   async *#textOf(file) {
-    if (file.kind === FileKind.memory) {
+    if (!isJsonl(file.path)) {
       for await (const line of readLines(file.path)) yield line.text;
       return;
     }
@@ -2853,7 +3006,8 @@ async function main(argv) {
   const sources = [
     new ClaudeCodeSource(homedir()),
     new CodexSource(homedir()),
-    new CursorSource(homedir())
+    new CursorSource(homedir()),
+    new OpencodeSource(homedir())
   ];
   const scanner = new Scanner(new KeywordIndex(compileRules(SECRET_RULE_SOURCES)));
   return command === Command.wipe ? await wipe(sources, scanner, write) : await scan(sources, scanner, write);
@@ -2872,7 +3026,13 @@ async function wipe(sources, scanner, write) {
   write(dim("  replacing credentials in your local transcripts with a placeholder"));
   write("");
   const outcome = await new WipeRun(sources, scanner, new TerminalPrompt(), write).run();
+  for (const path of outcome.untouched) {
+    write(yellow(`  Not rewritten: ${shorten(path)} is a database, and wipe only rewrites text.`));
+    write(dim("  Delete those sessions in the agent itself, and rotate what they held."));
+    write("");
+  }
   if (outcome.planned.length === 0) {
+    if (outcome.untouched.length > 0) return 1;
     write(green("  No credentials found. Nothing to wipe."));
     return 0;
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "whatileaked",
-  "version": "0.4.0",
-  "description": "Scan your local Claude Code, Codex and Cursor transcripts for credentials you already sent to a model provider.",
+  "version": "0.5.1",
+  "description": "Scan your local Claude Code, Codex, Cursor and opencode transcripts for credentials you already sent to a model provider.",
   "type": "module",
   "imports": {
     "#scripts/*": "./scripts/*.ts",