agentwhy session audit

agentwhy (Apache 2.0, npm @agentwhy/cli) reads the session records Claude Code keeps on disk, including each subagent's own transcript, and says which private files were reached and how. It works by fixed rules: no AI model, no account, no network request once the package is installed. Values are replaced before the report is built, so its output names files, never their contents. It needs Node 22 or later.

By default it treats these as private: .env*, *.env, .npmrc, secrets/, .ssh/, id_rsa*.

Run every command below from the folder Claude Code was started in, the project root. If command -v agentwhy finds it installed, use agentwhy in place of npx -y @agentwhy/cli@0.4.1. The first npx run downloads that pinned version from npm; agentwhy never updates itself.

Which command to run depends on what the user asked:

• A question ("did an agent read my .env?", "which key do I change?", "did anything leak?"): run check (section 1) and answer it here.
• A request for the report ("show me the report", "open agentwhy", "what happened session by session"), or a question about Codex sessions: open the page (section 2).