Skip to content

v0.6.59

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 18:28
v0.6.59
e456e75 
feat: hook two-gate privacy — recording + cwd whitelist

The Claude Code hook is installed globally (~/.claude/settings.json),
so a naive fire-on-every-Bash design would silently log the user's
daily coding, hobby projects, and unrelated Claude sessions into the
engagement audit chain. That's a privacy leak.

Two gates now, both required before an event is sent:

  1. RedLog is currently recording (`/api/recording` returns true)
  2. Claude Code's cwd sits under a path in the user's whitelist

Whitelist lives at ~/.redlog/hook-config.json:
    { "watchPaths": ["~/Desktop/BugBounty", "~/Desktop/redlog"] }

Missing file, missing key, or empty array → hook records NOTHING
(privacy-first default; users have to explicitly opt in per path).

Managed through Settings ▸ 整合 ▸ Claude Code Hook Engagement Paths —
add/remove buttons write straight to the file via `hookConfig:get` /
`hookConfig:save` IPC. UI hints say plainly what "empty list" means so
a fresh install doesn't quietly log everything.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Assets 15
Loading