@coo-quack/sensitive-canary 0.5.3 → 0.7.0

package/src/pre-tool-use-hook.ts

@@ -10,7 +10,7 @@ import {
   parseAllowTags,
   randomBird,
 } from "./lib/inspector.ts";
-import { type Finding, scan } from "./lib/rules.ts";
+import { enabledCategoriesFromEnv, type Finding, scan } from "./lib/rules.ts";
 
 interface HookInput {
   transcript_path?: string;
@@ -30,6 +30,8 @@ interface TranscriptLine {
 // Maximum bytes to read from the tail of a transcript file.
 const MAX_TRANSCRIPT_TAIL_BYTES = 65_536; // 64 KB
 
+const ENABLED_CATEGORIES = enabledCategoriesFromEnv();
+
 // ── Transcript ────────────────────────────────────────────────────────────────
 
 // Returns true when the message contains at least one text content block
@@ -150,7 +152,8 @@ function extractFilePathsFromCommand(command: string): string[] {
 
 // ── .env pattern ──────────────────────────────────────────────────────────────
 
-// .env and .env.* (e.g. .env.local, .env.production) are blocked unconditionally.
+// .env and .env.* (e.g. .env.local, .env.production) match the env filename pattern.
+// The block only applies while the "secret" category is enabled (see shouldBlockEnvFile).
 // Files that merely end in .env (e.g. production.env) are handled by content scanning.
 function isBlockedEnvFile(filePath: string): boolean {
   if (!filePath) return false;
@@ -158,6 +161,12 @@ function isBlockedEnvFile(filePath: string): boolean {
   return base === ".env" || base.startsWith(".env.");
 }
 
+// The .env name-based block is a secret guard: it only applies while the
+// "secret" category is enabled.
+function shouldBlockEnvFile(filePath: string): boolean {
+  return ENABLED_CATEGORIES.has("secret") && isBlockedEnvFile(filePath);
+}
+
 // ── Output helpers ────────────────────────────────────────────────────────────
 
 // Build the allow-tag hint lines shown to Claude.
@@ -239,7 +248,7 @@ function block(
 // ── Core scan logic ───────────────────────────────────────────────────────────
 
 function scanFile(filePath: string, allowTags: Set<string>): void {
-  if (isBlockedEnvFile(filePath)) {
+  if (shouldBlockEnvFile(filePath)) {
     if (allowTags.size > 0) return;
     block(
       filePath,
@@ -263,7 +272,10 @@ function scanFile(filePath: string, allowTags: Set<string>): void {
     return;
   }
 
-  const findings = applyAllowTags(dedupeFindings(scan(content)), allowTags);
+  const findings = applyAllowTags(
+    dedupeFindings(scan(content, ENABLED_CATEGORIES)),
+    allowTags,
+  );
   if (findings.length === 0) return;
 
   block(
@@ -308,7 +320,10 @@ process.stdin.on("end", () => {
     for (const varName of extractEnvVarNames(command)) {
       const value = process.env[varName];
       if (!value) continue;
-      const findings = applyAllowTags(dedupeFindings(scan(value)), allowTags);
+      const findings = applyAllowTags(
+        dedupeFindings(scan(value, ENABLED_CATEGORIES)),
+        allowTags,
+      );
       if (findings.length === 0) continue;
       block(
         `bash command: ${command.slice(0, 80)}`,
@@ -322,7 +337,7 @@ process.stdin.on("end", () => {
     }
 
     const cmdFindings = applyAllowTags(
-      dedupeFindings(scan(command)),
+      dedupeFindings(scan(command, ENABLED_CATEGORIES)),
       allowTags,
     );
     if (cmdFindings.length > 0) {

package/src/user-prompt-submit-hook.ts

@@ -8,12 +8,14 @@ import {
   randomBird,
   resolveTagPriority,
 } from "./lib/inspector.ts";
-import { scan } from "./lib/rules.ts";
+import { enabledCategoriesFromEnv, scan } from "./lib/rules.ts";
 
 interface HookInput {
   prompt?: string;
 }
 
+const ENABLED_CATEGORIES = enabledCategoriesFromEnv();
+
 let raw = "";
 process.stdin.setEncoding("utf8");
 process.stdin.on("data", (chunk: string) => (raw += chunk));
@@ -27,7 +29,7 @@ process.stdin.on("end", () => {
 
   const prompt = data.prompt ?? "";
 
-  const allFindings = scan(prompt);
+  const allFindings = scan(prompt, ENABLED_CATEGORIES);
 
   if (allFindings.length === 0) process.exit(0);