whatileaked 0.5.1 → 0.5.3

package/README.md

@@ -114,7 +114,9 @@ fingerprint — so it is the part you can paste or screenshot anywhere:
 whatileaked: 3 credentials sent to a model provider, across 561 transcripts.
 ```
 
-A clean scan ends the same way, with `no credentials`.
+A clean scan ends the same way, with `no credentials`. If some of it could not
+be scanned, the line says how much, still in counts only — `(7 messages and 1
+file not scanned)` — so a pasted partial scan never reads as a clean one.
 
 ---
 
@@ -206,7 +208,7 @@ npx whatileaked scan || echo "found something"
 | Agent | Folder |
 | --- | --- |
 | Claude Code | `~/.claude/projects/` · `~/.claude/history.jsonl` · `~/.claude/paste-cache/` · `~/.claude/CLAUDE.md` |
-| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/history.jsonl` · `~/.codex/AGENTS.md` |
+| Codex | `~/.codex/sessions/` · `~/.codex/archived_sessions/` · `~/.codex/history.jsonl` · `~/.codex/AGENTS.md` · `~/.codex/AGENTS.override.md` |
 | Cursor | `~/.cursor/projects/*/agent-transcripts/` |
 | opencode | `~/.local/share/opencode/opencode.db` |
 
@@ -220,6 +222,8 @@ opencode, and rotate.
 Cursor keeps its older Ask-mode chats in SQLite as well, and those are not
 scanned yet. Agent transcripts are covered; Ask history is not.
 
+Claude Code transcripts it set aside (`*.jsonl.superseded-*`) are scanned too.
+
 Transcripts record credentials that were already sent. So does prompt history,
 which keeps every prompt you typed and every long paste after the session itself
 has been cleaned up. Instruction and memory files are worse: they are read again

package/dist/cli.js

@@ -220,13 +220,19 @@ var TerminalReporter = class {
    * and stays that way. It is last so a screenshot can crop to it, unstyled so
    * a copy carries nothing but the words, and it repeats the headline's
    * transmitted-only count for the same reason the headline keeps memory files
-   * out of it.
+   * out of it. A partial scan says so here in counts, because this is the line
+   * that gets cropped to: without it a pasted "no credentials" overclaims.
    */
   #share(sent, stats) {
     const credentials = sent === 0 ? "no credentials" : plural(sent, "credential");
+    const missed = [
+      ...stats.unscannable > 0 ? [plural(stats.unscannable, "message")] : [],
+      ...stats.unread.length > 0 ? [plural(stats.unread.length, "file")] : []
+    ];
+    const partial = missed.length === 0 ? "" : ` (${missed.join(" and ")} not scanned)`;
     this.#write("");
     this.#write(
-      `whatileaked: ${credentials} sent to a model provider, across ${plural(stats.transcripts, "transcript")}.`
+      `whatileaked: ${credentials} sent to a model provider, across ${plural(stats.transcripts, "transcript")}${partial}.`
     );
   }
 };
@@ -2431,7 +2437,16 @@ var FileExtension = {
   database: ".db"
 };
 function isJsonl(path) {
-  return path.endsWith(FileExtension.jsonl);
+  return path.endsWith(FileExtension.jsonl) || supersededJsonl.test(path);
+}
+var supersededJsonl = /\.jsonl\.superseded-[^/\\]+$/;
+async function listJsonl(dir) {
+  try {
+    const entries = await readdir(dir, { withFileTypes: true });
+    return entries.filter((entry) => entry.isFile() && isJsonl(entry.name)).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
 }
 async function listFiles(dir, extension) {
   try {
@@ -2638,7 +2653,7 @@ var ClaudeCodeSource = class {
       const dir = join2(root, slug);
       let project = slug;
       for (const nested of await walkDirectories(dir)) {
-        for (const file of await listFiles(nested, FileExtension.jsonl)) {
+        for (const file of await listJsonl(nested)) {
           const path = join2(nested, file);
           const cwd = await firstCwd(path);
           if (cwd !== null) project = basename(cwd);
@@ -2682,9 +2697,11 @@ var CodexSource = class {
     this.#home = home2;
   }
   async *discover() {
-    const instructions = await resolveFile(join3(this.#home, ".codex", "AGENTS.md"));
-    if (instructions !== null) {
-      yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
+    for (const name of ["AGENTS.override.md", "AGENTS.md"]) {
+      const instructions = await resolveFile(join3(this.#home, ".codex", name));
+      if (instructions !== null) {
+        yield { source: this.name, kind: FileKind.memory, path: instructions, project: this.name };
+      }
     }
     const history = await resolveFile(join3(this.#home, ".codex", "history.jsonl"));
     if (history !== null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "whatileaked",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "Scan your local Claude Code, Codex, Cursor and opencode transcripts for credentials you already sent to a model provider.",
   "type": "module",
   "imports": {