feat: emit claude agent identities

[michiosw]

Where We Are

The CLI still exports legacy Claude session values in some hosted ledger paths. Normal decision rows and GitHub dry-run rows must not produce different identities for the same Claude request.

Where We Want To Go

New CLI ledger exports use canonical Claude identities: agent_provider=anthropic, agent=claude_code, and agent=claude_cowork. Current released clients remain accepted by the API.

How do we get there

• Add agent_provider to SQLite agent sessions.
• Normalize legacy Claude and CoWork aliases before storing sessions.
• Export agent_provider in ledger batches.
• Use the same canonical identity for normal actions and GitHub dry-run actions.
• Update tests for canonical Claude session and dry-run identities.

Verification:

• go test ./cmd/kontext ./internal/guard/store/sqlite ./internal/managedobserve
• go test -race ./...

[michiosw]

• feat: emit claude agent identities #342 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[greptile-apps]

Greptile Summary

This PR canonicalizes Claude identities in the local ledger path. The main changes are:

• Adds agent_provider to SQLite agent sessions.
• Normalizes Claude and CoWork aliases before storing sessions and actions.
• Exports agent_provider in ledger session batches.
• Updates GitHub dry-run rows and tests for canonical Claude identities.

Confidence Score: 4/5

This is close, but the dry-run identity mismatch should be fixed before merging.

• The session schema and scan changes look consistent.
• Claude aliases now normalize in both normal and dry-run action builders.
• The dry-run builder still includes an extra identity field before hashing, so the same Claude request can export different identity hashes.

internal/guard/store/sqlite/githubdryrun.go

Important Files Changed

Filename	Overview
internal/guard/store/sqlite/githubdryrun.go	Updates dry-run identity construction, but the hashed payload still differs from the normal action row for the same Claude request.
internal/guard/store/sqlite/store.go	Adds canonical hosted agent identity handling for sessions and normal action rows.
internal/guard/store/sqlite/ledger.go	Adds agent_provider to exported agent session ledger records.

_{Reviews (2): Last reviewed commit: "feat: emit claude agent identities" | Re-trigger Greptile}

[tumberger]

lgtm