Telemetry values now pass through marker helpers that declare them safe; nothing sent actually changed.
What's wrong with this entry?
Several telemetry values are now tagged at the call site with marker helpers that declare them safe to emit, with no change to what is actually sent.
- Three new identity-function helpers: one for nullable values coerced to string, one for joining an array, and one that validates each array element against the ID pattern
^[A-Za-z0-9_-]{1,128}$before joining. - The plugin telemetry id now passes through one of these wrappers. That id is still a sha256 of
plugin@versionsalted with a fixed string and truncated to 16 hex characters. - The hashing is unchanged and the wrappers return their input unmodified, so there is no runtime behaviour change in this build.
claude-plugin-telemetry-v1
Strings lifted out of the shipped bundle, so the claim above can be checked against them.