whatileaked 0.5.1 → 0.5.2

package/README.md

@@ -206,7 +206,7 @@ npx whatileaked scan || echo "found something"
 | Agent | Folder |
 | --- | --- |
 | Claude Code | `~/.claude/projects/` · `~/.claude/history.jsonl` · `~/.claude/paste-cache/` · `~/.claude/CLAUDE.md` |
-| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/history.jsonl` · `~/.codex/AGENTS.md` |
+| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/history.jsonl` · `~/.codex/AGENTS.md` · `~/.codex/AGENTS.override.md` |
 | Cursor | `~/.cursor/projects/*/agent-transcripts/` |
 | opencode | `~/.local/share/opencode/opencode.db` |
 
@@ -220,6 +220,8 @@ opencode, and rotate.
 Cursor keeps its older Ask-mode chats in SQLite as well, and those are not
 scanned yet. Agent transcripts are covered; Ask history is not.
 
+Claude Code transcripts it set aside (`*.jsonl.superseded-*`) are scanned too.
+
 Transcripts record credentials that were already sent. So does prompt history,
 which keeps every prompt you typed and every long paste after the session itself
 has been cleaned up. Instruction and memory files are worse: they are read again

package/dist/cli.js

@@ -2431,7 +2431,16 @@ var FileExtension = {
   database: ".db"
 };
 function isJsonl(path) {
-  return path.endsWith(FileExtension.jsonl);
+  return path.endsWith(FileExtension.jsonl) || supersededJsonl.test(path);
+}
+var supersededJsonl = /\.jsonl\.superseded-[^/\\]+$/;
+async function listJsonl(dir) {
+  try {
+    const entries = await readdir(dir, { withFileTypes: true });
+    return entries.filter((entry) => entry.isFile() && isJsonl(entry.name)).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
 }
 async function listFiles(dir, extension) {
   try {
@@ -2638,7 +2647,7 @@ var ClaudeCodeSource = class {
       const dir = join2(root, slug);
       let project = slug;
       for (const nested of await walkDirectories(dir)) {
-        for (const file of await listFiles(nested, FileExtension.jsonl)) {
+        for (const file of await listJsonl(nested)) {
           const path = join2(nested, file);
           const cwd = await firstCwd(path);
           if (cwd !== null) project = basename(cwd);
@@ -2682,9 +2691,11 @@ var CodexSource = class {
     this.#home = home2;
   }
   async *discover() {
-    const instructions = await resolveFile(join3(this.#home, ".codex", "AGENTS.md"));
-    if (instructions !== null) {
-      yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
+    for (const name of ["AGENTS.override.md", "AGENTS.md"]) {
+      const instructions = await resolveFile(join3(this.#home, ".codex", name));
+      if (instructions !== null) {
+        yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
+      }
     }
     const history = await resolveFile(join3(this.#home, ".codex", "history.jsonl"));
     if (history !== null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whatileaked",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Scan your local Claude Code, Codex, Cursor and opencode transcripts for credentials you already sent to a model provider.",
   "type": "module",
   "imports": {