@3030-labs/wotw 0.8.4 → 0.9.0

package/dist/index.d.ts

@@ -588,6 +588,15 @@ interface RedactionRule {
     name: string;
     pattern: RegExp;
     replacement: string;
+    /**
+     * Cloud-side rule_id this rule maps to in the PASS-024 `redaction_log`
+     * whitelist (`credential_pattern_01..10` + `truncation_32kb`). When set,
+     * sanitizeWithEvents() emits a row tagged with this id. When omitted,
+     * the redaction still fires but no outbound event is recorded — used
+     * for PII rules (credit-card, us-ssn) that stay daemon-local per the
+     * cloud's explicit whitelist (FEATURE-PASS-011 rule mapping).
+     */
+    cloud_rule_id?: string;
 }
 /**
  * Default redaction rules. Ordered by likely-to-match first for efficiency.

package/dist/index.js

@@ -346,6 +346,7 @@ async function loadConfig(searchFrom) {
   const withEnv = applyEnvOverrides(merged);
   const validated = validateConfig(withEnv);
   validateHostedConfig(validated);
+  validateHostedRedactionSink(validated);
   return { config: validated, path };
 }
 __name(loadConfig, "loadConfig");
@@ -430,6 +431,16 @@ function applyEnvOverrides(config) {
 }
 __name(applyEnvOverrides, "applyEnvOverrides");
 var UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function validateHostedRedactionSink(config, env = process.env) {
+  if (!config.hosted.enabled) return;
+  const secret = env.WOTW_CLOUD_SINK_SECRET;
+  if (!secret || secret.length === 0) {
+    throw new Error(
+      "Config error: hosted.enabled is true but WOTW_CLOUD_SINK_SECRET is unset. The redaction-emit wire requires this secret to authenticate with /api/internal/redaction-log; running hosted-mode without it would silently drop every compliance redaction event."
+    );
+  }
+}
+__name(validateHostedRedactionSink, "validateHostedRedactionSink");
 function validateHostedConfig(config) {
   if (!config.hosted.enabled) return;
   if (!config.hosted.tenant_id || config.hosted.tenant_id.length === 0) {
@@ -1167,19 +1178,22 @@ var DEFAULT_REDACTIONS = [
   {
     name: "aws-access-key",
     pattern: /\bAKIA[0-9A-Z]{16}\b/g,
-    replacement: "[REDACTED:AWS_ACCESS_KEY]"
+    replacement: "[REDACTED:AWS_ACCESS_KEY]",
+    cloud_rule_id: "credential_pattern_01"
   },
   {
     name: "aws-secret-key",
     pattern: /\b[A-Za-z0-9/+=]{40}\b(?=.*(?:secret|aws))/gi,
-    replacement: "[REDACTED:AWS_SECRET_KEY]"
+    replacement: "[REDACTED:AWS_SECRET_KEY]",
+    cloud_rule_id: "credential_pattern_02"
   },
   {
     name: "github-token",
     // Review item 2: also catch GitHub fine-grained personal access
     // tokens (`github_pat_*`, 82+ chars per docs).
     pattern: /\bgh[pousr]_[A-Za-z0-9]{36,255}\b|\bgithub_pat_[A-Za-z0-9_]{50,}\b/g,
-    replacement: "[REDACTED:GITHUB_TOKEN]"
+    replacement: "[REDACTED:GITHUB_TOKEN]",
+    cloud_rule_id: "credential_pattern_03"
   },
   {
     name: "anthropic-api-key",
@@ -1187,7 +1201,8 @@ var DEFAULT_REDACTIONS = [
     // window stays generous enough to catch both legacy and current
     // formats including api03- prefix.
     pattern: /\bsk-ant-[A-Za-z0-9-_]{80,120}\b/g,
-    replacement: "[REDACTED:ANTHROPIC_API_KEY]"
+    replacement: "[REDACTED:ANTHROPIC_API_KEY]",
+    cloud_rule_id: "credential_pattern_04"
   },
   {
     name: "openai-api-key",
@@ -1196,31 +1211,38 @@ var DEFAULT_REDACTIONS = [
     // `sk-svcacct-*`, `sk-admin-*` all use `-` separators after the
     // prefix and longer character set. Updated character class.
     pattern: /\bsk-(?:proj|svcacct|admin)-[A-Za-z0-9_-]{20,200}\b|\bsk-[A-Za-z0-9]{20,200}\b/g,
-    replacement: "[REDACTED:OPENAI_API_KEY]"
+    replacement: "[REDACTED:OPENAI_API_KEY]",
+    cloud_rule_id: "credential_pattern_05"
   },
   {
     name: "gemini-api-key",
-    // Review item 2: Google AI Studio API keys are `AIza` + 35 chars.
-    // No rule existed pre-fix.
-    pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g,
-    replacement: "[REDACTED:GEMINI_API_KEY]"
+    // Google AI Studio API keys come in two formats:
+    //   - legacy: `AIza` + 35 chars
+    //   - current: `AQ.` + ~40-80 url-safe chars (rolled out 2024-2025; the
+    //     `AIza`-only rule silently missed these, leaking new-format keys)
+    pattern: /\bAIza[A-Za-z0-9_-]{35}\b|\bAQ\.[A-Za-z0-9_-]{40,80}\b/g,
+    replacement: "[REDACTED:GEMINI_API_KEY]",
+    cloud_rule_id: "credential_pattern_06"
   },
   {
     name: "wotw-daemon-token",
     // Review item 2: daemon tokens emitted by `wotw user add` are
     // `wotw_` + base64url chars. Pre-fix these went unredacted.
     pattern: /\bwotw_[A-Za-z0-9_-]{30,200}\b/g,
-    replacement: "[REDACTED:WOTW_TOKEN]"
+    replacement: "[REDACTED:WOTW_TOKEN]",
+    cloud_rule_id: "credential_pattern_07"
   },
   {
     name: "private-key-block",
     pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-    replacement: "[REDACTED:PRIVATE_KEY_BLOCK]"
+    replacement: "[REDACTED:PRIVATE_KEY_BLOCK]",
+    cloud_rule_id: "credential_pattern_08"
   },
   {
     name: "jwt",
     pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
-    replacement: "[REDACTED:JWT]"
+    replacement: "[REDACTED:JWT]",
+    cloud_rule_id: "credential_pattern_09"
   },
   {
     // L-SEC-3: This pattern is deliberately scoped to full `scheme://`
@@ -1231,14 +1253,20 @@ var DEFAULT_REDACTIONS = [
     // Verified by unit tests in test/unit/sanitize.test.ts.
     name: "password-in-url",
     pattern: /(\w+:\/\/[^:/\s]+:)[^@\s]+(@)/g,
-    replacement: "$1[REDACTED]$2"
+    replacement: "$1[REDACTED]$2",
+    cloud_rule_id: "credential_pattern_10"
   },
   {
+    // PII — stays daemon-local. cloud_rule_id intentionally omitted: the
+    // PASS-024 cloud whitelist accepts only credential_pattern_01..10 +
+    // truncation_32kb, treating PII metadata as data-that-shouldn't-leave-
+    // the-daemon. Redaction still fires on-disk; sink emission is skipped.
     name: "credit-card",
     pattern: /\b(?:\d[ -]*?){13,16}\b/g,
     replacement: "[REDACTED:PAN]"
   },
   {
+    // PII — see credit-card note above.
     name: "us-ssn",
     pattern: /\b\d{3}-\d{2}-\d{4}\b/g,
     replacement: "[REDACTED:SSN]"