@optimuslabs/pii-scrub-staging 0.0.0-stage → 0.1.1

package/README.md

@@ -1,3 +1,27 @@
-# Temporary Holding Version
+# @optimuslabs/pii-scrub
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Redacts secrets from what an Optimus endpoint sends, before the request leaves the machine. Personal
+data (emails, home directories) is not redacted: the backend reads it for owners, tenants and path
+matching. Used by `@optimuslabs/runtime`
+(tool calls), `@optimuslabs/harness-map` (config file inventory) and `@optimuslabs/discovery`
+(which sends the version). Design: `docs/pii-scrubbing/DESIGN.md`.
+
+```ts
+import { SCRUBBER_VERSION, scrub, scrubText, scrubValue } from "@optimuslabs/pii-scrub";
+
+scrubValue({ env: { BRAVE_API_KEY: "BSA..." } });      // { env: { BRAVE_API_KEY: "[OL_REDACTED:CREDENTIAL_ENV_VAR]" } }
+scrubText("key sk-ant-api03-...", { fingerprintKey }); // "key sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<24 hex>]"
+scrubValue({ command: "npx", env: { LOG_LEVEL: "debug" } }); // unchanged: only secrets are redacted
+scrub(payload).hits;                                   // { ANTHROPIC_KEY: 1, ... }; placeholders already there are not hits
+```
+
+The rules are in `rules.json`, which the backend reads too; every pattern works in both the
+JavaScript and Python regex engines. Only vendor-format secrets are fingerprinted (HMAC-SHA256
+under the org key, 96 bits), and only when the caller passes the key.
+
+An organization can switch scrubbing off (OPT-942). The senders store the backend's `scrub_pii` in
+`~/.optimuslabs/management/org/config.json`, and every function here returns its input unchanged
+while that file says `"scrub_pii": false`. No file, or no field, means scrub.
+
+The staging build publishes as `@optimuslabs/pii-scrub-staging`, the production build as
+`@optimuslabs/pii-scrub`.

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Redact secrets from what an endpoint sends to Optimus. Personal data (emails, home directories)
+ * is not redacted: the backend reads it for identity, owners and path matching.
+ *
+ * Runs on the endpoint, just before a request is built, so the value never leaves the machine.
+ * A value is replaced with a typed placeholder rather than dropped, so the backend still knows a
+ * credential was there and of what kind:
+ *
+ *   sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<fp>]   a vendor key keeps its published prefix
+ *   [OL_REDACTED:CREDENTIAL_ENV_VAR]                a value under a credential-named key
+ *   [OL_REDACTED:POTENTIAL_TOKEN]                   a 40+ character token in an MCP server's env
+ *
+ * `<fp>` is a 96-bit fingerprint (24 hex characters, HMAC-SHA256 under the org's key), on
+ * vendor-format secrets only, so the same key is recognisable across configs and machines
+ * without being held. A credential-named value with no known format could be a guessable
+ * password, so it gets none. Without a key, nothing gets one.
+ *
+ * Structure first, then text: a 29-character API key matches no format, but nobody names a
+ * variable `BRAVE_API_KEY` unless it holds one. A placeholder already in the input is left as it
+ * is and is not a hit, so scrubbing twice changes nothing and counts nothing.
+ */
+export { SECRET_FORMATS } from "./rules.js";
+export { scrubbingSwitchedOff } from "./org-setting.js";
+/** This scrubber's version (the package's), which every sender includes with what it scrubbed. */
+export declare const SCRUBBER_VERSION: string;
+export declare const PLACEHOLDER_PREFIX = "[OL_REDACTED:";
+export interface ScrubOptions {
+    /** The org's fingerprint key, hex. Absent until the endpoint has received it: no fingerprints. */
+    fingerprintKey?: string;
+}
+/** How many of each type were redacted. Placeholders already in the input are not counted. */
+export type ScrubHits = Record<string, number>;
+export interface ScrubResult<T> {
+    value: T;
+    hits: ScrubHits;
+}
+export declare function placeholder(type: string, fingerprint?: string): string;
+/**
+ * A deep copy of `value` with every string scrubbed and every value under a credential-named key
+ * redacted, and how many of each type were redacted. Non-string leaves are returned as they are.
+ * When the organization has switched scrubbing off, `value` itself, with no hits.
+ */
+export declare function scrub<T>(value: T, options?: ScrubOptions): ScrubResult<T>;
+/** `scrub(value).value`. */
+export declare function scrubValue<T>(value: T, options?: ScrubOptions): T;
+/**
+ * A copy of `text` with every secret redacted;
+ * `text` itself when the organization has switched scrubbing off.
+ */
+export declare function scrubText(text: string, options?: ScrubOptions): string;
+/**
+ * A copy of `record` with each of `fields` that is a string scrubbed as text, the rest untouched:
+ * for log lines and run records (`command`, `message`, `detail`), where the fields are free text.
+ */
+export declare function scrubFields<T extends Record<string, unknown>>(record: T, fields: readonly string[], options?: ScrubOptions): T;
+/** Whether `value` holds a placeholder anywhere (to refuse writing scrubbed data back to disk). */
+export declare function containsPlaceholder(value: unknown): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAyBH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,EAAE,MAA2F,CAAC;AAE3H,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,SAAS,CAAC;CACjB;AAcD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtE;AA4MD;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,CAI7E;AAED,4BAA4B;AAC5B,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,CAAC,CAErE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,MAAM,CAG1E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,YAAiB,GACzB,CAAC,CAOH;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAO3D"}

package/dist/index.js

@@ -0,0 +1,283 @@
+/**
+ * Redact secrets from what an endpoint sends to Optimus. Personal data (emails, home directories)
+ * is not redacted: the backend reads it for identity, owners and path matching.
+ *
+ * Runs on the endpoint, just before a request is built, so the value never leaves the machine.
+ * A value is replaced with a typed placeholder rather than dropped, so the backend still knows a
+ * credential was there and of what kind:
+ *
+ *   sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<fp>]   a vendor key keeps its published prefix
+ *   [OL_REDACTED:CREDENTIAL_ENV_VAR]                a value under a credential-named key
+ *   [OL_REDACTED:POTENTIAL_TOKEN]                   a 40+ character token in an MCP server's env
+ *
+ * `<fp>` is a 96-bit fingerprint (24 hex characters, HMAC-SHA256 under the org's key), on
+ * vendor-format secrets only, so the same key is recognisable across configs and machines
+ * without being held. A credential-named value with no known format could be a guessable
+ * password, so it gets none. Without a key, nothing gets one.
+ *
+ * Structure first, then text: a 29-character API key matches no format, but nobody names a
+ * variable `BRAVE_API_KEY` unless it holds one. A placeholder already in the input is left as it
+ * is and is not a hit, so scrubbing twice changes nothing and counts nothing.
+ */
+import { createHmac } from "node:crypto";
+import { createRequire } from "node:module";
+import { CODE_VALUE, CONTAINER_KEEP, CONTAINS_REFERENCE, CREDENTIAL_ASSIGNMENT, CREDENTIAL_CONTAINER, CREDENTIAL_FLAG, CREDENTIAL_KEY, ENV_REFERENCE, GENERIC_TOKEN, JSON_SCHEMA_TYPES, MCP_SERVER_KEYS, MCP_VALUE_BLOCKS, MIN_CREDENTIAL_LENGTH, NOT_A_SECRET_UNDER_WEAK_KEY, PLACEHOLDER_VALUE, SECRET_FORMATS, WEAK_CREDENTIAL_KEY, } from "./rules.js";
+import { scrubbingSwitchedOff } from "./org-setting.js";
+export { SECRET_FORMATS } from "./rules.js";
+export { scrubbingSwitchedOff } from "./org-setting.js";
+/** This scrubber's version (the package's), which every sender includes with what it scrubbed. */
+export const SCRUBBER_VERSION = createRequire(import.meta.url)("../package.json").version;
+export const PLACEHOLDER_PREFIX = "[OL_REDACTED:";
+/**
+ * How deep a payload may nest before the scrubber stops descending (and redacts the rest). MCP tool
+ * input schemas in agent configs nest past 32 (measured on prod data), so the limit sits well above.
+ */
+const MAX_DEPTH = 128;
+const FINGERPRINT_HEX_LENGTH = 24;
+export function placeholder(type, fingerprint) {
+    return fingerprint ? `${PLACEHOLDER_PREFIX}${type}:${fingerprint}]` : `${PLACEHOLDER_PREFIX}${type}]`;
+}
+function redacted(pass, type, fingerprint) {
+    pass.hits[type] = (pass.hits[type] ?? 0) + 1;
+    return placeholder(type, fingerprint);
+}
+function fingerprintOf(pass, secret) {
+    const key = pass.options.fingerprintKey;
+    if (!key)
+        return undefined;
+    return createHmac("sha256", Buffer.from(key, "hex")).update(secret).digest("hex").slice(0, FINGERPRINT_HEX_LENGTH);
+}
+/** A value worth redacting under a credential-named key: not a flag, a reference or a placeholder. */
+function isCredentialValue(value) {
+    const trimmed = value.trim();
+    return (trimmed.length >= MIN_CREDENTIAL_LENGTH &&
+        !/\s/.test(trimmed) &&
+        !ENV_REFERENCE.test(trimmed) &&
+        !PLACEHOLDER_VALUE.test(trimmed) &&
+        // A placeholder, or the front of one that a text rule cut at its closing `]`.
+        !trimmed.includes(PLACEHOLDER_PREFIX));
+}
+/**
+ * Whether `name` names a credential, for its `value`. A bare `_key` name (`DEPLOY_SSH_KEY`, but
+ * also `issue_key`, `session_key`) counts only when the value is not an identifier of something else.
+ */
+function isCredentialName(name, value) {
+    if (CREDENTIAL_KEY.test(name))
+        return true;
+    return WEAK_CREDENTIAL_KEY.test(name) && !NOT_A_SECRET_UNDER_WEAK_KEY.test(value.trim());
+}
+/** A reference to a secret stored elsewhere, or a documentation placeholder where one goes. */
+function isReferenceOrPlaceholder(secret) {
+    return CONTAINS_REFERENCE.test(secret) || ENV_REFERENCE.test(secret) || PLACEHOLDER_VALUE.test(secret);
+}
+function redactFormats(text, pass) {
+    let out = text;
+    for (const format of SECRET_FORMATS) {
+        out = out.replace(format.pattern, (match, prefix) => {
+            // Over a placeholder already written (`https://[OL_REDACTED:URL_CREDENTIALS]@host`): left as
+            // it is, so scrubbing twice changes nothing and counts nothing.
+            if (match.includes(PLACEHOLDER_PREFIX))
+                return match;
+            const kept = typeof prefix === "string" ? prefix : "";
+            if (format.skipPlaceholders && isReferenceOrPlaceholder(match.slice(kept.length)))
+                return match;
+            const fingerprint = format.fingerprint ? fingerprintOf(pass, match) : undefined;
+            return `${kept}${redacted(pass, format.type, fingerprint)}`;
+        });
+    }
+    return out;
+}
+/** Whether `offset` falls inside a placeholder already written, such as `[OL_REDACTED:GITHUB_TOKEN:<fp>]`. */
+function insidePlaceholder(text, offset) {
+    const open = text.lastIndexOf(PLACEHOLDER_PREFIX, offset);
+    return open !== -1 && text.indexOf("]", open) >= offset;
+}
+function redactAssignments(text, pass) {
+    return text.replace(CREDENTIAL_ASSIGNMENT, (match, name, value, offset) => 
+    // `credential = client.beta(` and `credential: data.credential` are code, not a secret; the
+    // `TOKEN:<fp>` of a fingerprinted placeholder is the placeholder, not an assignment.
+    isCredentialValue(value) && !CODE_VALUE.test(value) && !insidePlaceholder(text, offset)
+        ? `${name}${redacted(pass, "CREDENTIAL_ENV_VAR")}`
+        : match);
+}
+function scrubString(text, pass) {
+    if (!text)
+        return text;
+    return redactAssignments(redactFormats(text, pass), pass);
+}
+function scrubLeaf(value, pass, key) {
+    if (key !== undefined && isCredentialName(key, value) && isCredentialValue(value)) {
+        // A recognised format keeps its prefix, type and fingerprint; anything else is just a credential.
+        const formatted = redactFormats(value, pass);
+        return formatted !== value ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
+    }
+    return scrubString(value, pass);
+}
+function isPlainObject(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+/** A JSON Schema node (an MCP tool's input schema): `{"type": "array", ...}` describes data, holds none. */
+function isSchemaNode(value) {
+    if (!isPlainObject(value))
+        return false;
+    return typeof value.type === "string" && JSON_SCHEMA_TYPES.has(value.type);
+}
+/**
+ * An MCP server definition: a server key holding a string or list (`command`, `url`, `args`). A
+ * schema's `properties` map with a `type` or `url` property holds objects there, and is not one.
+ */
+function isServerDefinition(obj) {
+    if (isSchemaNode(obj))
+        return false;
+    return Object.entries(obj).some(([k, v]) => MCP_SERVER_KEYS.has(k) && (typeof v === "string" || Array.isArray(v)));
+}
+/** Whether a value can be redacted whole: not empty, not a reference, not already a placeholder. */
+function isRedactable(value) {
+    return Boolean(value.trim()) && !CONTAINS_REFERENCE.test(value) && !ENV_REFERENCE.test(value.trim()) && !value.includes(PLACEHOLDER_PREFIX);
+}
+/**
+ * The backend's generic token (`HardcodedSecretRule`'s "Potential token/secret"): 40 or more
+ * letters, digits, `_` and `-`. In a URL only the query is searched, as the backend does: a host
+ * or path is not a token.
+ */
+function redactGenericTokens(value, pass) {
+    const replace = (text) => text.replace(GENERIC_TOKEN, (token) => (token.length >= 40 ? redacted(pass, "POTENTIAL_TOKEN") : token));
+    if (!value.includes("://"))
+        return replace(value);
+    const query = value.indexOf("?");
+    return query === -1 ? value : value.slice(0, query + 1) + replace(value.slice(query + 1));
+}
+/**
+ * A value in an MCP server's env or headers block, redacted only when it is a secret: a known
+ * format keeps its prefix, type and fingerprint; a credential-named one is a credential; a 40+
+ * character token is a potential token, as the backend reads one. Anything else (`LOG_LEVEL=debug`)
+ * stays readable, as before scrubbing. A reference to a secret stored elsewhere (`${TOKEN}`,
+ * `Bearer ${TOKEN}`) stays readable.
+ */
+function redactBlockValue(value, name, pass) {
+    if (!isRedactable(value))
+        return value;
+    const formatted = redactFormats(value, pass);
+    if (formatted !== value)
+        return formatted;
+    if (isCredentialName(name, value) && isCredentialValue(value))
+        return redacted(pass, "CREDENTIAL_ENV_VAR");
+    return redactGenericTokens(redactAssignments(value, pass), pass);
+}
+function walkValueBlock(block, pass, depth) {
+    const out = {};
+    for (const [name, v] of Object.entries(block)) {
+        out[name] = typeof v === "string" ? redactBlockValue(v, name, pass) : walk(v, pass, name, depth + 1);
+    }
+    return out;
+}
+/** A value in a credential container: a credential whatever its shape (a known format keeps its type). */
+function redactContainerValue(value, pass) {
+    if (!isRedactable(value))
+        return value;
+    const formatted = redactFormats(value, pass);
+    return formatted !== value ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
+}
+/** `["--api-key", "BSA..."]`: the argument after a credential flag is the credential. */
+function walkArgs(args, pass, depth) {
+    return args.map((arg, i) => {
+        const flag = typeof args[i - 1] === "string" ? CREDENTIAL_FLAG.exec(args[i - 1]) : null;
+        if (flag && typeof arg === "string" && isCredentialName(flag[1], arg) && isCredentialValue(arg)) {
+            const formatted = redactFormats(arg, pass);
+            return formatted !== arg ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
+        }
+        return walk(arg, pass, "args", depth + 1);
+    });
+}
+/**
+ * A credential container (`copilotTokens: {"https://github.com:ada": "gho_..."}`): every string
+ * value is a credential whatever its key, so a token with no known format is still redacted.
+ * Fields ending in `id` stay readable.
+ */
+function walkCredentialContainer(container, pass, depth) {
+    const out = {};
+    for (const [name, v] of Object.entries(container)) {
+        const isCredential = typeof v === "string" && !CONTAINER_KEEP.test(name);
+        out[name] = isCredential ? redactContainerValue(v, pass) : walk(v, pass, name, depth + 1);
+    }
+    return out;
+}
+/** One child of an object: MCP value blocks, credential containers and `args` get their structural rule. */
+function walkChild(key, value, inServer, pass, depth) {
+    const isBlock = inServer && MCP_VALUE_BLOCKS.has(key);
+    const isData = isPlainObject(value) && !isSchemaNode(value);
+    if (isBlock && isData)
+        return walkValueBlock(value, pass, depth);
+    if (CREDENTIAL_CONTAINER.test(key) && isData)
+        return walkCredentialContainer(value, pass, depth);
+    if (key === "args" && Array.isArray(value))
+        return walkArgs(value, pass, depth);
+    return walk(value, pass, key, depth + 1);
+}
+function walkObject(obj, pass, depth) {
+    const inServer = isServerDefinition(obj);
+    const out = {};
+    for (const [k, v] of Object.entries(obj))
+        out[k] = walkChild(k, v, inServer, pass, depth);
+    return out;
+}
+function walk(value, pass, key, depth) {
+    // The TOO_DEEP placeholder a first pass left at this depth stays as it is.
+    if (depth > MAX_DEPTH)
+        return value === placeholder("TOO_DEEP") ? value : redacted(pass, "TOO_DEEP");
+    if (Array.isArray(value))
+        return value.map((item) => walk(item, pass, key, depth + 1));
+    if (isPlainObject(value))
+        return walkObject(value, pass, depth);
+    return typeof value === "string" ? scrubLeaf(value, pass, key) : value;
+}
+/**
+ * A deep copy of `value` with every string scrubbed and every value under a credential-named key
+ * redacted, and how many of each type were redacted. Non-string leaves are returned as they are.
+ * When the organization has switched scrubbing off, `value` itself, with no hits.
+ */
+export function scrub(value, options = {}) {
+    if (scrubbingSwitchedOff())
+        return { value, hits: {} };
+    const pass = { options, hits: {} };
+    return { value: walk(value, pass, undefined, 0), hits: pass.hits };
+}
+/** `scrub(value).value`. */
+export function scrubValue(value, options = {}) {
+    return scrub(value, options).value;
+}
+/**
+ * A copy of `text` with every secret redacted;
+ * `text` itself when the organization has switched scrubbing off.
+ */
+export function scrubText(text, options = {}) {
+    if (scrubbingSwitchedOff())
+        return text;
+    return scrubString(text, { options, hits: {} });
+}
+/**
+ * A copy of `record` with each of `fields` that is a string scrubbed as text, the rest untouched:
+ * for log lines and run records (`command`, `message`, `detail`), where the fields are free text.
+ */
+export function scrubFields(record, fields, options = {}) {
+    const out = { ...record };
+    if (scrubbingSwitchedOff())
+        return out;
+    for (const field of fields) {
+        if (typeof out[field] === "string")
+            out[field] = scrubText(out[field], options);
+    }
+    return out;
+}
+/** Whether `value` holds a placeholder anywhere (to refuse writing scrubbed data back to disk). */
+export function containsPlaceholder(value) {
+    if (typeof value === "string")
+        return value.includes(PLACEHOLDER_PREFIX);
+    try {
+        return JSON.stringify(value ?? null).includes(PLACEHOLDER_PREFIX);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAY,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAE3H,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAoBlD;;;GAGG;AACH,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,WAAoB;IAC5D,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,GAAG,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,IAAY,EAAE,WAAoB;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,MAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACrH,CAAC;AAED,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,OAAO,CAAC,MAAM,IAAI,qBAAqB;QACvC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACnB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,8EAA8E;QAC9E,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,SAAS,wBAAwB,CAAC,MAAc;IAC9C,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAU;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE;YACnE,6FAA6F;YAC7F,gEAAgE;YAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,OAAO,KAAK,CAAC;YACrD,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChG,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAU;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,MAAc,EAAE,EAAE;IACxG,4FAA4F;IAC5F,qFAAqF;IACrF,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;QACrF,CAAC,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE;QAClD,CAAC,CAAC,KAAK,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAU;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAU,EAAE,GAAuB;IACnE,IAAI,GAAG,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,kGAAkG;QAClG,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAA4B;IACtD,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC9I,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAU;IACpD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CACvC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,IAAU;IAC/D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC3G,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAU,EAAE,KAAa;IAC/E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0GAA0G;AAC1G,SAAS,oBAAoB,CAAC,KAAa,EAAE,IAAU;IACrD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAChF,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,IAAe,EAAE,IAAU,EAAE,KAAa;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,SAAkC,EAAE,IAAU,EAAE,KAAa;IAC5F,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4GAA4G;AAC5G,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,QAAiB,EAAE,IAAU,EAAE,KAAa;IAC1F,MAAM,OAAO,GAAG,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM;QAAE,OAAO,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjG,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B,EAAE,IAAU,EAAE,KAAa;IACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAU,EAAE,GAAuB,EAAE,KAAa;IAC9E,2EAA2E;IAC3E,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAC3D,IAAI,oBAAoB,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvD,MAAM,IAAI,GAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,UAAU,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAChE,OAAO,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,UAAwB,EAAE;IAChE,IAAI,oBAAoB,EAAE;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAS,EACT,MAAyB,EACzB,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACnD,IAAI,oBAAoB,EAAE;QAAE,OAAO,GAAQ,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAW,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/org-setting.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Whether the organization has switched scrubbing off (OPT-942).
+ *
+ * The backend sends `scrub_pii` with the prompt policy on startup and inventory responses, and
+ * the senders store it in the org config file beside `collect_prompts`. Only an explicit `false`
+ * turns scrubbing off: no file yet, an unreadable one or no field means scrub, so an endpoint
+ * that has not heard from its organization yet scrubs.
+ *
+ * Read on every call rather than once per process, so a change reaches a sender as soon as the
+ * file is rewritten. The file is a few hundred bytes.
+ */
+export declare function orgConfigPath(): string;
+export declare function scrubbingSwitchedOff(): boolean;
+//# sourceMappingURL=org-setting.d.ts.map

package/dist/org-setting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-setting.d.ts","sourceRoot":"","sources":["../src/org-setting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAQ9C"}

package/dist/org-setting.js

@@ -0,0 +1,28 @@
+/**
+ * Whether the organization has switched scrubbing off (OPT-942).
+ *
+ * The backend sends `scrub_pii` with the prompt policy on startup and inventory responses, and
+ * the senders store it in the org config file beside `collect_prompts`. Only an explicit `false`
+ * turns scrubbing off: no file yet, an unreadable one or no field means scrub, so an endpoint
+ * that has not heard from its organization yet scrubs.
+ *
+ * Read on every call rather than once per process, so a change reaches a sender as soon as the
+ * file is rewritten. The file is a few hundred bytes.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export function orgConfigPath() {
+    return join(homedir(), ".optimuslabs", "management", "org", "config.json");
+}
+export function scrubbingSwitchedOff() {
+    try {
+        const config = JSON.parse(readFileSync(orgConfigPath(), "utf8"));
+        return Boolean(config) && typeof config === "object" && config.scrub_pii === false;
+    }
+    catch {
+        // No file yet, or not JSON: scrub.
+        return false;
+    }
+}
+//# sourceMappingURL=org-setting.js.map

package/dist/org-setting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-setting.js","sourceRoot":"","sources":["../src/org-setting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAY,CAAC;QAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAAkC,CAAC,SAAS,KAAK,KAAK,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The scrubber's rules, loaded from `rules.json` at the package root.
+ *
+ * The rules are data, checked in, so the backend's safety net reads the very same file (and a
+ * Python test compiles every pattern in it). Each pattern is written for both the JavaScript and
+ * Python regex engines: no lookbehind, no named groups, no Unicode property escapes, and every
+ * repeat that can start a match is bounded, so a long run of letters scans in linear time.
+ *
+ * Formats run in file order, most specific first (Anthropic before the generic `sk-` OpenAI
+ * shape, vendor tokens before `Bearer`), so a value is typed by the most precise rule that
+ * matches. Group 1 of a format, when present, is the published vendor prefix that stays.
+ */
+export interface SecretFormat {
+    type: string;
+    fingerprint: boolean;
+    skipPlaceholders: boolean;
+    /** Global, for `replace`. */
+    pattern: RegExp;
+}
+export declare const SECRET_FORMATS: readonly SecretFormat[];
+export declare const CREDENTIAL_KEY: RegExp;
+export declare const WEAK_CREDENTIAL_KEY: RegExp;
+export declare const NOT_A_SECRET_UNDER_WEAK_KEY: RegExp;
+export declare const CREDENTIAL_CONTAINER: RegExp;
+export declare const CONTAINER_KEEP: RegExp;
+export declare const CREDENTIAL_ASSIGNMENT: RegExp;
+export declare const CODE_VALUE: RegExp;
+export declare const ENV_REFERENCE: RegExp;
+export declare const CONTAINS_REFERENCE: RegExp;
+export declare const PLACEHOLDER_VALUE: RegExp;
+export declare const CREDENTIAL_FLAG: RegExp;
+/** The blocks of an MCP server definition whose values are checked for secrets (`env`, `headers`). */
+export declare const MCP_VALUE_BLOCKS: ReadonlySet<string>;
+/** The backend's generic token shape; a match of 40 or more characters is a potential token. */
+export declare const GENERIC_TOKEN: RegExp;
+export declare const MCP_SERVER_KEYS: ReadonlySet<string>;
+export declare const JSON_SCHEMA_TYPES: ReadonlySet<string>;
+export declare const MIN_CREDENTIAL_LENGTH: number;
+//# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkCH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAWD,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAK/C,CAAC;AACJ,eAAO,MAAM,cAAc,QAAuC,CAAC;AACnE,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAC7E,eAAO,MAAM,2BAA2B,QAA6D,CAAC;AACtG,eAAO,MAAM,oBAAoB,QAA6C,CAAC;AAC/E,eAAO,MAAM,cAAc,QAAsD,CAAC;AAClF,eAAO,MAAM,qBAAqB,QAA6C,CAAC;AAChF,eAAO,MAAM,UAAU,QAAmC,CAAC;AAC3D,eAAO,MAAM,aAAa,QAAsC,CAAC;AACjE,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAC3E,eAAO,MAAM,iBAAiB,QAA0C,CAAC;AACzE,eAAO,MAAM,eAAe,QAAwC,CAAC;AACrE,sGAAsG;AACtG,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAC5F,gGAAgG;AAChG,eAAO,MAAM,aAAa,QAAqC,CAAC;AAChE,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAA+C,CAAC;AAChG,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAC7F,eAAO,MAAM,qBAAqB,QAA8B,CAAC"}

package/dist/rules.js

@@ -0,0 +1,45 @@
+/**
+ * The scrubber's rules, loaded from `rules.json` at the package root.
+ *
+ * The rules are data, checked in, so the backend's safety net reads the very same file (and a
+ * Python test compiles every pattern in it). Each pattern is written for both the JavaScript and
+ * Python regex engines: no lookbehind, no named groups, no Unicode property escapes, and every
+ * repeat that can start a match is bounded, so a long run of letters scans in linear time.
+ *
+ * Formats run in file order, most specific first (Anthropic before the generic `sk-` OpenAI
+ * shape, vendor tokens before `Bearer`), so a value is typed by the most precise rule that
+ * matches. Group 1 of a format, when present, is the published vendor prefix that stays.
+ */
+import { createRequire } from "node:module";
+// dist/rules.js → ../rules.json, the file at the package root (shipped in `files`). Loaded with
+// Node's JSON loader rather than `fs`, which a consumer's tests may mock.
+const RULES = createRequire(import.meta.url)("../rules.json");
+/** `global` for patterns used with `replace`; never for `test`, whose `lastIndex` would stick. */
+function compile(spec, global) {
+    return new RegExp(spec.pattern, `${global ? "g" : ""}${spec.ignore_case ? "i" : ""}`);
+}
+export const SECRET_FORMATS = RULES.formats.map((f) => ({
+    type: f.type,
+    fingerprint: f.fingerprint,
+    skipPlaceholders: Boolean(f.skip_placeholders),
+    pattern: compile(f, true),
+}));
+export const CREDENTIAL_KEY = compile(RULES.credential_key, false);
+export const WEAK_CREDENTIAL_KEY = compile(RULES.weak_credential_key, false);
+export const NOT_A_SECRET_UNDER_WEAK_KEY = new RegExp(RULES.weak_credential_key.not_a_secret_pattern);
+export const CREDENTIAL_CONTAINER = compile(RULES.credential_container, false);
+export const CONTAINER_KEEP = new RegExp(RULES.credential_container.keep_pattern);
+export const CREDENTIAL_ASSIGNMENT = compile(RULES.credential_assignment, true);
+export const CODE_VALUE = compile(RULES.code_value, false);
+export const ENV_REFERENCE = compile(RULES.env_reference, false);
+export const CONTAINS_REFERENCE = compile(RULES.contains_reference, false);
+export const PLACEHOLDER_VALUE = compile(RULES.placeholder_value, false);
+export const CREDENTIAL_FLAG = compile(RULES.credential_flag, false);
+/** The blocks of an MCP server definition whose values are checked for secrets (`env`, `headers`). */
+export const MCP_VALUE_BLOCKS = new Set(RULES.mcp_value_blocks.blocks);
+/** The backend's generic token shape; a match of 40 or more characters is a potential token. */
+export const GENERIC_TOKEN = compile(RULES.generic_token, true);
+export const MCP_SERVER_KEYS = new Set(RULES.mcp_value_blocks.server_keys);
+export const JSON_SCHEMA_TYPES = new Set(RULES.json_schema_types.types);
+export const MIN_CREDENTIAL_LENGTH = RULES.min_credential_length;
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwC5C,gGAAgG;AAChG,0EAA0E;AAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAc,CAAC;AAE3E,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAAiB,EAAE,MAAe;IACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAA4B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC;CAC1B,CAAC,CAAC,CAAC;AACJ,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AACrE,sGAAsG;AACtG,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC5F,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,32 @@
 {
   "name": "@optimuslabs/pii-scrub-staging",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Redacts secrets and personal data from what an Optimus endpoint sends, before it leaves the machine.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist/**/*",
+    "!dist/test/**",
+    "rules.json",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.json",
+    "pretest": "npm run build",
+    "test": "node --test dist/test/*.test.js",
+    "prepack": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "UNLICENSED",
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^20.19.39",
+    "typescript": "^5.4.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/rules.json

@@ -0,0 +1,261 @@
+{
+  "description": "Rules for @optimuslabs/pii-scrub, read by the endpoint scrubber and the backend. Every pattern is valid in both the JavaScript and Python regex engines; see docs/pii-scrubbing/DESIGN.md.",
+  "placeholder": {
+    "description": "A placeholder the scrubber wrote: left unchanged and never counted as a hit.",
+    "pattern": "\\[OL_REDACTED:[A-Z_]+(?::[0-9a-f]{24})?\\]"
+  },
+  "formats": [
+    {
+      "type": "PRIVATE_KEY",
+      "pattern": "-----BEGIN (?:[A-Z0-9]+ )*PRIVATE KEY-----[\\s\\S]*?-----END (?:[A-Z0-9]+ )*PRIVATE KEY-----",
+      "fingerprint": true
+    },
+    {
+      "type": "URL_CREDENTIALS",
+      "pattern": "\\b([a-z][a-z0-9+.-]{0,31}:\\/\\/[^\\s:@/\"'`]{1,256}:)[^\\s@/\"'`]{1,256}(?=@)",
+      "ignore_case": true,
+      "fingerprint": false,
+      "skip_placeholders": true
+    },
+    {
+      "type": "URL_CREDENTIALS",
+      "pattern": "\\b([a-z][a-z0-9+.-]{0,31}:\\/\\/)[^\\s:@/\"'`]{16,255}(?=@)",
+      "ignore_case": true,
+      "fingerprint": false,
+      "skip_placeholders": true
+    },
+    {
+      "type": "ANTHROPIC_KEY",
+      "pattern": "\\b(sk-ant-[a-z]+\\d{2}-)[A-Za-z0-9_-]{20,}",
+      "fingerprint": true
+    },
+    {
+      "type": "OPENAI_KEY",
+      "pattern": "\\b(sk-(?:proj|svcacct|admin)-)[A-Za-z0-9_-]{20,}",
+      "fingerprint": true
+    },
+    {
+      "type": "OPENAI_KEY",
+      "pattern": "\\b(sk-)[A-Za-z0-9]{20,}",
+      "fingerprint": true
+    },
+    {
+      "type": "GITHUB_TOKEN",
+      "pattern": "\\b(gh[pousr]_)[A-Za-z0-9]{36,}",
+      "fingerprint": true
+    },
+    {
+      "type": "GITHUB_TOKEN",
+      "pattern": "\\b(github_pat_)[A-Za-z0-9_]{22,}",
+      "fingerprint": true
+    },
+    {
+      "type": "AWS_ACCESS_KEY",
+      "pattern": "\\b(AKIA|ASIA)[0-9A-Z]{16}\\b",
+      "fingerprint": true
+    },
+    {
+      "type": "STRIPE_KEY",
+      "pattern": "\\b((?:sk|rk)_(?:live|test)_)[A-Za-z0-9]{16,}",
+      "fingerprint": true
+    },
+    {
+      "type": "SLACK_TOKEN",
+      "pattern": "\\b(xox[abposr]-|xapp-)[A-Za-z0-9-]{10,}",
+      "fingerprint": true
+    },
+    {
+      "type": "GOOGLE_API_KEY",
+      "pattern": "\\b(AIza)[0-9A-Za-z_-]{35}",
+      "fingerprint": true
+    },
+    {
+      "type": "NPM_TOKEN",
+      "pattern": "\\b(npm_)[A-Za-z0-9]{36}\\b",
+      "fingerprint": true
+    },
+    {
+      "type": "PYPI_TOKEN",
+      "pattern": "\\b(pypi-)AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}",
+      "fingerprint": true
+    },
+    {
+      "type": "SENDGRID_KEY",
+      "pattern": "\\b(SG\\.)[A-Za-z0-9_-]{22}\\.[A-Za-z0-9_-]{43}",
+      "fingerprint": true
+    },
+    {
+      "type": "HUGGINGFACE_TOKEN",
+      "pattern": "\\b(hf_)[A-Za-z0-9]{34,}",
+      "fingerprint": true
+    },
+    {
+      "type": "PERPLEXITY_KEY",
+      "pattern": "\\b(pplx-)[A-Za-z0-9]{32,}",
+      "fingerprint": true
+    },
+    {
+      "type": "BRAVE_KEY",
+      "pattern": "\\b(BSA)[A-Za-z0-9_-]{20,}",
+      "fingerprint": true
+    },
+    {
+      "type": "JWT",
+      "pattern": "\\beyJ[A-Za-z0-9_-]{8,}\\.eyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}",
+      "fingerprint": true
+    },
+    {
+      "type": "BEARER_TOKEN",
+      "pattern": "\\b(Bearer\\s+)[A-Za-z0-9._~+/=-]{16,}",
+      "ignore_case": true,
+      "fingerprint": false,
+      "skip_placeholders": true
+    },
+    {
+      "type": "BASIC_AUTH",
+      "pattern": "\\b(Basic\\s+)(?=[A-Za-z0-9+/=]{0,512}(?:[0-9+/=]|[a-z][A-Z]))(?:[A-Za-z0-9+/]{4}){2,128}(?:[A-Za-z0-9+/]{4}|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{2}==)(?![A-Za-z0-9+/=])",
+      "fingerprint": false
+    }
+  ],
+  "credential_key": {
+    "pattern": "(?:api[_-]?key|apikey|secret|token|password|passwd|credential|private[_-]?key|(?:secret|signing|encryption)[_-]?key|access[_-]?key|authorization|token[_-]?cache(?:v\\d+)?)$",
+    "ignore_case": true
+  },
+  "weak_credential_key": {
+    "description": "A name ending in `_key` (DEPLOY_SSH_KEY, LICENSE_KEY) is a credential only when its value is not an identifier of something else: an issue key (INCIDENT-31138) or a session key of three or more colon-separated lowercase parts (agent:main:slack). Secret, signing and encryption keys are always credentials (credential_key).",
+    "pattern": "[_.-]key$",
+    "ignore_case": true,
+    "not_a_secret_pattern": "^[a-z0-9_-]+(?::[a-z0-9_+.-]+){2,}$|^[A-Z][A-Z0-9]{1,15}-[0-9]{1,9}$"
+  },
+  "credential_container": {
+    "description": "An object whose every string value is a credential, whatever its own key (Copilot's copilotTokens maps host:user to a token). Fields ending in id stay (Codex tokens.account_id).",
+    "pattern": "(?:tokens|secrets|credentials|api[_-]?keys)$",
+    "ignore_case": true,
+    "keep_pattern": "(?:^|[_-])id$|[a-z]Id$"
+  },
+  "credential_assignment": {
+    "pattern": "((?:api[_-]?key|apikey|secret|token|password|passwd|credential|private[_-]?key|access[_-]?key)[\"']?\\s*[:=]\\s*[\"']?)([^\\s\"'`,;&)}\\]]{8,})",
+    "ignore_case": true
+  },
+  "code_value": {
+    "description": "A value after a credential name in text that is code, not a secret: a call or block opener (`os.environ.get(`, `T.type_alias{`), a template (`{client_private_key}`, `<paste_key_here>`), or a variable named for a credential (`data.credential`, `walletKey`, `this.env.VAPID_PRIVATE_KEY`). A secret that merely contains `(` or `{` is still one.",
+    "pattern": "^[A-Za-z_$][\\w$.]*[({]$|^\\{[\\w.]{1,128}$|^<[^<>]{1,64}>$|^(?=[\\w$.]{0,256}(?:\\.|[a-z][A-Z]))(?=[\\w$.]{0,256}(?:[Kk]ey|KEY|[Ss]ecret|SECRET|[Tt]oken|TOKEN|[Pp]assw|PASSW|[Cc]redential|CREDENTIAL|\\.env\\.|\\.environ\\b))[A-Za-z_$][\\w$]*(?:\\.[A-Za-z_$][\\w$]*)*$"
+  },
+  "env_reference": {
+    "pattern": "^(?:\\$|\\{\\{|process\\.env\\.)|^[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+$"
+  },
+  "contains_reference": {
+    "description": "A reference to a secret stored elsewhere anywhere in a value (`Bearer ${TOKEN}`): the value stays readable.",
+    "pattern": "\\$\\{[^}]{1,128}\\}|\\$env:|process\\.env\\."
+  },
+  "placeholder_value": {
+    "description": "A documentation placeholder where a secret goes (`<your_key>`, `YOUR_API_TOKEN`, `my_secret`): not a secret, so not redacted and never a finding.",
+    "pattern": "^<[^<>]{1,64}>$|(?:^|[_.-])(?:YOUR|your|MY|my)[_-]|_(?:TOKEN|KEY|SECRET|PASSWORD)$"
+  },
+  "credential_flag": {
+    "description": "A command-line flag whose next argument is a credential (`--api-key`, `--token`); group 1 is the name, tested against credential_key.",
+    "pattern": "^-{1,2}([A-Za-z0-9_.-]{1,64})$"
+  },
+  "mcp_value_blocks": {
+    "description": "Blocks inside an MCP server definition whose values are checked for secrets: a known format, a value under a credential-named key, or a generic token (generic_token) is redacted; any other value stays. A server definition is an object with one of server_keys. A server key counts only when its value is a string or a list, so a JSON Schema `properties` map with a `type` or `url` property is not a server.",
+    "blocks": [
+      "env",
+      "environment",
+      "headers",
+      "http_headers"
+    ],
+    "server_keys": [
+      "command",
+      "args",
+      "url",
+      "serverUrl",
+      "httpUrl",
+      "transport",
+      "type"
+    ]
+  },
+  "generic_token": {
+    "description": "The backend's generic token (HardcodedSecretRule.GENERIC_TOKEN_PATTERN): in an MCP env or headers value, a match of 40 or more characters is redacted as POTENTIAL_TOKEN, which the backend reads as a potential token/secret. In a URL only the query is searched.",
+    "pattern": "\\b[a-zA-Z0-9][a-zA-Z0-9_-]{31,}\\b"
+  },
+  "json_schema_types": {
+    "description": "An object whose `type` is one of these is a JSON Schema node (an MCP tool's input schema), not data: never a credential container or an MCP value block.",
+    "types": [
+      "object",
+      "array",
+      "string",
+      "number",
+      "integer",
+      "boolean",
+      "null"
+    ]
+  },
+  "min_credential_length": 8,
+  "admin_summary": {
+    "description": "What admins are told is redacted (org settings, Data redaction; OPT-953): one item per kind, naming the rule groups it describes; \"list\": \"formats\" adds the format types as a list. \"items\" are the names or kinds the other items remove. The backend sends these items; a backend test fails when a rule group that redacts has no item here.",
+    "lines": [
+      {
+        "title": "API keys and tokens",
+        "rules": [
+          "formats"
+        ],
+        "list": "formats",
+        "text": "Known vendor formats, replaced by [OL_REDACTED:<format>]. The vendor's prefix stays."
+      },
+      {
+        "title": "Credentials by name",
+        "rules": [
+          "credential_key",
+          "weak_credential_key",
+          "credential_assignment",
+          "credential_flag"
+        ],
+        "text": "Values named like a credential (api_key, token, secret, password), in any format.",
+        "items": [
+          "api_key",
+          "apikey",
+          "secret",
+          "token",
+          "password",
+          "passwd",
+          "credential",
+          "private_key",
+          "secret_key",
+          "signing_key",
+          "encryption_key",
+          "access_key",
+          "authorization",
+          "token_cache",
+          "*_key"
+        ]
+      },
+      {
+        "title": "Token maps",
+        "rules": [
+          "credential_container"
+        ],
+        "text": "Every value in a map of tokens, such as Copilot's copilotTokens.",
+        "items": [
+          "*tokens",
+          "*secrets",
+          "*credentials",
+          "*api_keys"
+        ]
+      },
+      {
+        "title": "MCP server env and headers",
+        "rules": [
+          "mcp_value_blocks",
+          "generic_token"
+        ],
+        "text": "Secrets in an MCP server's env and headers: known formats, credential names and long tokens. Other values stay.",
+        "items": [
+          "env",
+          "environment",
+          "headers",
+          "http_headers"
+        ]
+      }
+    ]
+  }
+}