diff --git a/AGENTS.md b/AGENTS.md index 1add2b1..0eb488a 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -81,7 +81,7 @@ Token Meter reads local agent traces, calculates clearly labeled usage estimates - Keep `meter.py` and `token_meter_mcp.py` on the Python standard library. - Keep the dashboard local-only; do not add hosted assets, analytics, or telemetry. - Never output, commit, persist, or transmit prompts, responses, reasoning, tool contents, credentials, account data, or raw traces. -- Work insights are the only sanctioned consumer of typed user-turn text, the preceding assistant-reply tail (600 characters), per request, the basenames of files the agent changed, and the subjects (200 characters) of the user's own pushed commits for Git work types: they stay in the bounded in-memory queue, are sent only to the validated loopback Ollama URL, and only salted keys, labels, and content-free counts (costs, tool and command kinds, file categories) persist. Do not add other consumers. +- Work insights are the only sanctioned consumer of typed user-turn text, the preceding assistant-reply tail (600 characters), per request, the basenames of files the agent changed, and, for Git work types, the subject and first body line (200 characters each) of the user's own pushed commits with content-free counts of the kinds of files and lines each changed: they stay in the bounded in-memory queue, are sent only to the validated loopback Ollama URL, and only salted keys, labels, and content-free counts (costs, tool and command kinds, file categories) persist. Do not add other consumers. - Provider-account requests must remain narrow, bounded, sanitized, and read-only. - Cursor databases, transcripts, and request logs are read-only inputs. - Label estimates as estimates. Unavailable evidence must not become a measured zero. diff --git a/README.md b/README.md index 93c6542..b63d389 100644 --- a/README.md +++ b/README.md @@ -257,7 +257,8 @@ skills, so the package targets Claude Code. `~/.token-meter/mcp-evidence-cache.json`, never paths, titles, or text. It is safe to delete. - Costs are estimates. Codex uses public API rates, which can differ from subscription billing. - Work insights, when on, send typed prompts, the end of the reply before each one, - changed file names, and your pushed commits' subject lines only to the local Ollama; + changed file names, and your pushed commits' messages (subject and first body line) with + counts of the kinds of files and lines they changed only to the local Ollama; Token Meter stores labels and counts, never text. Full details: [User guide](specs/USER_GUIDE.md#data-and-evidence) · diff --git a/dashboard/js/git.js b/dashboard/js/git.js index 0cf1946..eefcd78 100644 --- a/dashboard/js/git.js +++ b/dashboard/js/git.js @@ -342,7 +342,7 @@ function deliveryTypeNote(work){ if(work.available!==true)return 'No pushed commits in this period.'; const labeled=Number(work.labeled_commits)||0,total=Number(work.commits)||0; if(!work.classifier_enabled&&labeled