@optimuslabs/pii-scrub-staging 0.1.0 → 0.1.1

package/README.md

@@ -1,7 +1,8 @@
 # @optimuslabs/pii-scrub
 
-Redacts secrets, and optionally personal data (email names, home-directory usernames), from what an
-Optimus endpoint sends, before the request leaves the machine. Used by `@optimuslabs/runtime`
+Redacts secrets from what an Optimus endpoint sends, before the request leaves the machine. Personal
+data (emails, home directories) is not redacted: the backend reads it for owners, tenants and path
+matching. Used by `@optimuslabs/runtime`
 (tool calls), `@optimuslabs/harness-map` (config file inventory) and `@optimuslabs/discovery`
 (which sends the version). Design: `docs/pii-scrubbing/DESIGN.md`.
 
@@ -10,7 +11,7 @@ import { SCRUBBER_VERSION, scrub, scrubText, scrubValue } from "@optimuslabs/pii
 
 scrubValue({ env: { BRAVE_API_KEY: "BSA..." } });      // { env: { BRAVE_API_KEY: "[OL_REDACTED:CREDENTIAL_ENV_VAR]" } }
 scrubText("key sk-ant-api03-...", { fingerprintKey }); // "key sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<24 hex>]"
-scrubText("ada@gmail.com", { personalData: true });    // "[OL_REDACTED:EMAIL]@gmail.com"
+scrubValue({ command: "npx", env: { LOG_LEVEL: "debug" } }); // unchanged: only secrets are redacted
 scrub(payload).hits;                                   // { ANTHROPIC_KEY: 1, ... }; placeholders already there are not hits
 ```
 
@@ -18,5 +19,9 @@ The rules are in `rules.json`, which the backend reads too; every pattern works
 JavaScript and Python regex engines. Only vendor-format secrets are fingerprinted (HMAC-SHA256
 under the org key, 96 bits), and only when the caller passes the key.
 
+An organization can switch scrubbing off (OPT-942). The senders store the backend's `scrub_pii` in
+`~/.optimuslabs/management/org/config.json`, and every function here returns its input unchanged
+while that file says `"scrub_pii": false`. No file, or no field, means scrub.
+
 The staging build publishes as `@optimuslabs/pii-scrub-staging`, the production build as
 `@optimuslabs/pii-scrub`.

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 /**
- * Redact secrets, and optionally personal data, from what an endpoint sends to Optimus.
+ * Redact secrets from what an endpoint sends to Optimus. Personal data (emails, home directories)
+ * is not redacted: the backend reads it for identity, owners and path matching.
  *
  * Runs on the endpoint, just before a request is built, so the value never leaves the machine.
  * A value is replaced with a typed placeholder rather than dropped, so the backend still knows a
@@ -7,9 +8,7 @@
  *
  *   sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<fp>]   a vendor key keeps its published prefix
  *   [OL_REDACTED:CREDENTIAL_ENV_VAR]                a value under a credential-named key
- *   [OL_REDACTED:ENV_VALUE]                         any other value in an MCP server's env block
- *   [OL_REDACTED:EMAIL]@gmail.com                   an email inside content keeps its domain
- *   /Users/[OL_REDACTED:USERNAME]/src               a home directory keeps its path
+ *   [OL_REDACTED:POTENTIAL_TOKEN]                   a 40+ character token in an MCP server's env
  *
  * `<fp>` is a 96-bit fingerprint (24 hex characters, HMAC-SHA256 under the org's key), on
  * vendor-format secrets only, so the same key is recognisable across configs and machines
@@ -21,16 +20,11 @@
  * is and is not a hit, so scrubbing twice changes nothing and counts nothing.
  */
 export { SECRET_FORMATS } from "./rules.js";
+export { scrubbingSwitchedOff } from "./org-setting.js";
 /** This scrubber's version (the package's), which every sender includes with what it scrubbed. */
 export declare const SCRUBBER_VERSION: string;
 export declare const PLACEHOLDER_PREFIX = "[OL_REDACTED:";
 export interface ScrubOptions {
-    /**
-     * Also redact personal data: the name part of emails and the username in home directories. On
-     * for tool-call content; off for config files, where account emails are identity (agent owners,
-     * tenant approval, the personal-email finding) and stay readable.
-     */
-    personalData?: boolean;
     /** The org's fingerprint key, hex. Absent until the endpoint has received it: no fingerprints. */
     fingerprintKey?: string;
 }
@@ -44,11 +38,15 @@ export declare function placeholder(type: string, fingerprint?: string): string;
 /**
  * A deep copy of `value` with every string scrubbed and every value under a credential-named key
  * redacted, and how many of each type were redacted. Non-string leaves are returned as they are.
+ * When the organization has switched scrubbing off, `value` itself, with no hits.
  */
 export declare function scrub<T>(value: T, options?: ScrubOptions): ScrubResult<T>;
 /** `scrub(value).value`. */
 export declare function scrubValue<T>(value: T, options?: ScrubOptions): T;
-/** A copy of `text` with every secret, and with `personalData` emails and usernames, redacted. */
+/**
+ * A copy of `text` with every secret redacted;
+ * `text` itself when the organization has switched scrubbing off.
+ */
 export declare function scrubText(text: string, options?: ScrubOptions): string;
 /**
  * A copy of `record` with each of `fields` that is a string scrubbed as text, the rest untouched:

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAmBH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,EAAE,MAA2F,CAAC;AAE3H,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,SAAS,CAAC;CACjB;AAWD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtE;AAgID;;;GAGG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,CAG7E;AAED,4BAA4B;AAC5B,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,CAAC,CAErE;AAED,kGAAkG;AAClG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,MAAM,CAE1E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,YAAiB,GACzB,CAAC,CAMH;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAO3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAyBH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,EAAE,MAA2F,CAAC;AAE3H,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,EAAE,SAAS,CAAC;CACjB;AAcD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtE;AA4MD;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,CAI7E;AAED,4BAA4B;AAC5B,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,CAAC,CAErE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,MAAM,CAG1E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,YAAiB,GACzB,CAAC,CAOH;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAO3D"}

package/dist/index.js

@@ -1,5 +1,6 @@
 /**
- * Redact secrets, and optionally personal data, from what an endpoint sends to Optimus.
+ * Redact secrets from what an endpoint sends to Optimus. Personal data (emails, home directories)
+ * is not redacted: the backend reads it for identity, owners and path matching.
  *
  * Runs on the endpoint, just before a request is built, so the value never leaves the machine.
  * A value is replaced with a typed placeholder rather than dropped, so the backend still knows a
@@ -7,9 +8,7 @@
  *
  *   sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY:<fp>]   a vendor key keeps its published prefix
  *   [OL_REDACTED:CREDENTIAL_ENV_VAR]                a value under a credential-named key
- *   [OL_REDACTED:ENV_VALUE]                         any other value in an MCP server's env block
- *   [OL_REDACTED:EMAIL]@gmail.com                   an email inside content keeps its domain
- *   /Users/[OL_REDACTED:USERNAME]/src               a home directory keeps its path
+ *   [OL_REDACTED:POTENTIAL_TOKEN]                   a 40+ character token in an MCP server's env
  *
  * `<fp>` is a 96-bit fingerprint (24 hex characters, HMAC-SHA256 under the org's key), on
  * vendor-format secrets only, so the same key is recognisable across configs and machines
@@ -22,13 +21,18 @@
  */
 import { createHmac } from "node:crypto";
 import { createRequire } from "node:module";
-import { CONTAINS_REFERENCE, CREDENTIAL_ASSIGNMENT, CREDENTIAL_FLAG, CREDENTIAL_KEY, EMAIL, ENV_REFERENCE, HOME_DIRECTORY, MCP_SERVER_KEYS, MCP_VALUE_BLOCKS, MIN_CREDENTIAL_LENGTH, RESERVED_EMAIL_DOMAIN, SECRET_FORMATS, } from "./rules.js";
+import { CODE_VALUE, CONTAINER_KEEP, CONTAINS_REFERENCE, CREDENTIAL_ASSIGNMENT, CREDENTIAL_CONTAINER, CREDENTIAL_FLAG, CREDENTIAL_KEY, ENV_REFERENCE, GENERIC_TOKEN, JSON_SCHEMA_TYPES, MCP_SERVER_KEYS, MCP_VALUE_BLOCKS, MIN_CREDENTIAL_LENGTH, NOT_A_SECRET_UNDER_WEAK_KEY, PLACEHOLDER_VALUE, SECRET_FORMATS, WEAK_CREDENTIAL_KEY, } from "./rules.js";
+import { scrubbingSwitchedOff } from "./org-setting.js";
 export { SECRET_FORMATS } from "./rules.js";
+export { scrubbingSwitchedOff } from "./org-setting.js";
 /** This scrubber's version (the package's), which every sender includes with what it scrubbed. */
 export const SCRUBBER_VERSION = createRequire(import.meta.url)("../package.json").version;
 export const PLACEHOLDER_PREFIX = "[OL_REDACTED:";
-/** How deep a payload may nest before the scrubber stops descending (and redacts the rest). */
-const MAX_DEPTH = 32;
+/**
+ * How deep a payload may nest before the scrubber stops descending (and redacts the rest). MCP tool
+ * input schemas in agent configs nest past 32 (measured on prod data), so the limit sits well above.
+ */
+const MAX_DEPTH = 128;
 const FINGERPRINT_HEX_LENGTH = 24;
 export function placeholder(type, fingerprint) {
     return fingerprint ? `${PLACEHOLDER_PREFIX}${type}:${fingerprint}]` : `${PLACEHOLDER_PREFIX}${type}]`;
@@ -49,37 +53,60 @@ function isCredentialValue(value) {
     return (trimmed.length >= MIN_CREDENTIAL_LENGTH &&
         !/\s/.test(trimmed) &&
         !ENV_REFERENCE.test(trimmed) &&
+        !PLACEHOLDER_VALUE.test(trimmed) &&
         // A placeholder, or the front of one that a text rule cut at its closing `]`.
         !trimmed.includes(PLACEHOLDER_PREFIX));
 }
+/**
+ * Whether `name` names a credential, for its `value`. A bare `_key` name (`DEPLOY_SSH_KEY`, but
+ * also `issue_key`, `session_key`) counts only when the value is not an identifier of something else.
+ */
+function isCredentialName(name, value) {
+    if (CREDENTIAL_KEY.test(name))
+        return true;
+    return WEAK_CREDENTIAL_KEY.test(name) && !NOT_A_SECRET_UNDER_WEAK_KEY.test(value.trim());
+}
+/** A reference to a secret stored elsewhere, or a documentation placeholder where one goes. */
+function isReferenceOrPlaceholder(secret) {
+    return CONTAINS_REFERENCE.test(secret) || ENV_REFERENCE.test(secret) || PLACEHOLDER_VALUE.test(secret);
+}
 function redactFormats(text, pass) {
     let out = text;
     for (const format of SECRET_FORMATS) {
         out = out.replace(format.pattern, (match, prefix) => {
+            // Over a placeholder already written (`https://[OL_REDACTED:URL_CREDENTIALS]@host`): left as
+            // it is, so scrubbing twice changes nothing and counts nothing.
+            if (match.includes(PLACEHOLDER_PREFIX))
+                return match;
+            const kept = typeof prefix === "string" ? prefix : "";
+            if (format.skipPlaceholders && isReferenceOrPlaceholder(match.slice(kept.length)))
+                return match;
             const fingerprint = format.fingerprint ? fingerprintOf(pass, match) : undefined;
-            return `${typeof prefix === "string" ? prefix : ""}${redacted(pass, format.type, fingerprint)}`;
+            return `${kept}${redacted(pass, format.type, fingerprint)}`;
         });
     }
     return out;
 }
-function redactAssignments(text, pass) {
-    return text.replace(CREDENTIAL_ASSIGNMENT, (match, name, value) => isCredentialValue(value) ? `${name}${redacted(pass, "CREDENTIAL_ENV_VAR")}` : match);
+/** Whether `offset` falls inside a placeholder already written, such as `[OL_REDACTED:GITHUB_TOKEN:<fp>]`. */
+function insidePlaceholder(text, offset) {
+    const open = text.lastIndexOf(PLACEHOLDER_PREFIX, offset);
+    return open !== -1 && text.indexOf("]", open) >= offset;
 }
-function redactPersonalData(text, pass) {
-    // `git@github.com:` is an SSH remote, and a reserved domain is documentation: neither is a person.
-    const emailsDone = text.replace(EMAIL, (match, domain) => match.startsWith("git@") || RESERVED_EMAIL_DOMAIN.test(domain)
-        ? match
-        : `${redacted(pass, "EMAIL")}@${domain}`);
-    return emailsDone.replace(HOME_DIRECTORY, (_match, root) => `${root}${redacted(pass, "USERNAME")}`);
+function redactAssignments(text, pass) {
+    return text.replace(CREDENTIAL_ASSIGNMENT, (match, name, value, offset) => 
+    // `credential = client.beta(` and `credential: data.credential` are code, not a secret; the
+    // `TOKEN:<fp>` of a fingerprinted placeholder is the placeholder, not an assignment.
+    isCredentialValue(value) && !CODE_VALUE.test(value) && !insidePlaceholder(text, offset)
+        ? `${name}${redacted(pass, "CREDENTIAL_ENV_VAR")}`
+        : match);
 }
 function scrubString(text, pass) {
     if (!text)
         return text;
-    const out = redactAssignments(redactFormats(text, pass), pass);
-    return pass.options.personalData ? redactPersonalData(out, pass) : out;
+    return redactAssignments(redactFormats(text, pass), pass);
 }
 function scrubLeaf(value, pass, key) {
-    if (key !== undefined && CREDENTIAL_KEY.test(key) && isCredentialValue(value)) {
+    if (key !== undefined && isCredentialName(key, value) && isCredentialValue(value)) {
         // A recognised format keeps its prefix, type and fingerprint; anything else is just a credential.
         const formatted = redactFormats(value, pass);
         return formatted !== value ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
@@ -89,60 +116,115 @@ function scrubLeaf(value, pass, key) {
 function isPlainObject(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
+/** A JSON Schema node (an MCP tool's input schema): `{"type": "array", ...}` describes data, holds none. */
+function isSchemaNode(value) {
+    if (!isPlainObject(value))
+        return false;
+    return typeof value.type === "string" && JSON_SCHEMA_TYPES.has(value.type);
+}
 /**
- * A value in an MCP server's env or headers block. Every one is redacted, because a server's
- * secrets sit there under whatever name its author chose: a known format keeps its prefix, type
- * and fingerprint; a credential-named one is a credential; anything else is typed by the block
- * (`ENV_VALUE`, `HEADER_VALUE`), which the backend does not read as a secret. A reference to a
- * secret stored elsewhere (`${TOKEN}`, `Bearer ${TOKEN}`) stays readable.
+ * An MCP server definition: a server key holding a string or list (`command`, `url`, `args`). A
+ * schema's `properties` map with a `type` or `url` property holds objects there, and is not one.
  */
-function redactBlockValue(value, name, ordinaryType, pass) {
-    if (!value.trim() || CONTAINS_REFERENCE.test(value) || ENV_REFERENCE.test(value.trim()))
-        return value;
-    if (value.includes(PLACEHOLDER_PREFIX))
+function isServerDefinition(obj) {
+    if (isSchemaNode(obj))
+        return false;
+    return Object.entries(obj).some(([k, v]) => MCP_SERVER_KEYS.has(k) && (typeof v === "string" || Array.isArray(v)));
+}
+/** Whether a value can be redacted whole: not empty, not a reference, not already a placeholder. */
+function isRedactable(value) {
+    return Boolean(value.trim()) && !CONTAINS_REFERENCE.test(value) && !ENV_REFERENCE.test(value.trim()) && !value.includes(PLACEHOLDER_PREFIX);
+}
+/**
+ * The backend's generic token (`HardcodedSecretRule`'s "Potential token/secret"): 40 or more
+ * letters, digits, `_` and `-`. In a URL only the query is searched, as the backend does: a host
+ * or path is not a token.
+ */
+function redactGenericTokens(value, pass) {
+    const replace = (text) => text.replace(GENERIC_TOKEN, (token) => (token.length >= 40 ? redacted(pass, "POTENTIAL_TOKEN") : token));
+    if (!value.includes("://"))
+        return replace(value);
+    const query = value.indexOf("?");
+    return query === -1 ? value : value.slice(0, query + 1) + replace(value.slice(query + 1));
+}
+/**
+ * A value in an MCP server's env or headers block, redacted only when it is a secret: a known
+ * format keeps its prefix, type and fingerprint; a credential-named one is a credential; a 40+
+ * character token is a potential token, as the backend reads one. Anything else (`LOG_LEVEL=debug`)
+ * stays readable, as before scrubbing. A reference to a secret stored elsewhere (`${TOKEN}`,
+ * `Bearer ${TOKEN}`) stays readable.
+ */
+function redactBlockValue(value, name, pass) {
+    if (!isRedactable(value))
         return value;
     const formatted = redactFormats(value, pass);
     if (formatted !== value)
         return formatted;
-    return redacted(pass, CREDENTIAL_KEY.test(name) ? "CREDENTIAL_ENV_VAR" : ordinaryType);
+    if (isCredentialName(name, value) && isCredentialValue(value))
+        return redacted(pass, "CREDENTIAL_ENV_VAR");
+    return redactGenericTokens(redactAssignments(value, pass), pass);
 }
-function walkValueBlock(block, ordinaryType, pass, depth) {
+function walkValueBlock(block, pass, depth) {
     const out = {};
     for (const [name, v] of Object.entries(block)) {
-        out[name] = typeof v === "string" ? redactBlockValue(v, name, ordinaryType, pass) : walk(v, pass, name, depth + 1);
+        out[name] = typeof v === "string" ? redactBlockValue(v, name, pass) : walk(v, pass, name, depth + 1);
     }
     return out;
 }
+/** A value in a credential container: a credential whatever its shape (a known format keeps its type). */
+function redactContainerValue(value, pass) {
+    if (!isRedactable(value))
+        return value;
+    const formatted = redactFormats(value, pass);
+    return formatted !== value ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
+}
 /** `["--api-key", "BSA..."]`: the argument after a credential flag is the credential. */
 function walkArgs(args, pass, depth) {
     return args.map((arg, i) => {
         const flag = typeof args[i - 1] === "string" ? CREDENTIAL_FLAG.exec(args[i - 1]) : null;
-        if (flag && CREDENTIAL_KEY.test(flag[1]) && typeof arg === "string" && isCredentialValue(arg)) {
+        if (flag && typeof arg === "string" && isCredentialName(flag[1], arg) && isCredentialValue(arg)) {
             const formatted = redactFormats(arg, pass);
             return formatted !== arg ? formatted : redacted(pass, "CREDENTIAL_ENV_VAR");
         }
         return walk(arg, pass, "args", depth + 1);
     });
 }
-/** One child of an object: an MCP value block and `args` get their structural rule. */
+/**
+ * A credential container (`copilotTokens: {"https://github.com:ada": "gho_..."}`): every string
+ * value is a credential whatever its key, so a token with no known format is still redacted.
+ * Fields ending in `id` stay readable.
+ */
+function walkCredentialContainer(container, pass, depth) {
+    const out = {};
+    for (const [name, v] of Object.entries(container)) {
+        const isCredential = typeof v === "string" && !CONTAINER_KEEP.test(name);
+        out[name] = isCredential ? redactContainerValue(v, pass) : walk(v, pass, name, depth + 1);
+    }
+    return out;
+}
+/** One child of an object: MCP value blocks, credential containers and `args` get their structural rule. */
 function walkChild(key, value, inServer, pass, depth) {
-    const blockType = inServer ? MCP_VALUE_BLOCKS[key] : undefined;
-    if (blockType && isPlainObject(value))
-        return walkValueBlock(value, blockType, pass, depth);
+    const isBlock = inServer && MCP_VALUE_BLOCKS.has(key);
+    const isData = isPlainObject(value) && !isSchemaNode(value);
+    if (isBlock && isData)
+        return walkValueBlock(value, pass, depth);
+    if (CREDENTIAL_CONTAINER.test(key) && isData)
+        return walkCredentialContainer(value, pass, depth);
     if (key === "args" && Array.isArray(value))
         return walkArgs(value, pass, depth);
     return walk(value, pass, key, depth + 1);
 }
 function walkObject(obj, pass, depth) {
-    const inServer = Object.keys(obj).some((k) => MCP_SERVER_KEYS.has(k));
+    const inServer = isServerDefinition(obj);
     const out = {};
     for (const [k, v] of Object.entries(obj))
         out[k] = walkChild(k, v, inServer, pass, depth);
     return out;
 }
 function walk(value, pass, key, depth) {
+    // The TOO_DEEP placeholder a first pass left at this depth stays as it is.
     if (depth > MAX_DEPTH)
-        return redacted(pass, "TOO_DEEP");
+        return value === placeholder("TOO_DEEP") ? value : redacted(pass, "TOO_DEEP");
     if (Array.isArray(value))
         return value.map((item) => walk(item, pass, key, depth + 1));
     if (isPlainObject(value))
@@ -152,8 +234,11 @@ function walk(value, pass, key, depth) {
 /**
  * A deep copy of `value` with every string scrubbed and every value under a credential-named key
  * redacted, and how many of each type were redacted. Non-string leaves are returned as they are.
+ * When the organization has switched scrubbing off, `value` itself, with no hits.
  */
 export function scrub(value, options = {}) {
+    if (scrubbingSwitchedOff())
+        return { value, hits: {} };
     const pass = { options, hits: {} };
     return { value: walk(value, pass, undefined, 0), hits: pass.hits };
 }
@@ -161,8 +246,13 @@ export function scrub(value, options = {}) {
 export function scrubValue(value, options = {}) {
     return scrub(value, options).value;
 }
-/** A copy of `text` with every secret, and with `personalData` emails and usernames, redacted. */
+/**
+ * A copy of `text` with every secret redacted;
+ * `text` itself when the organization has switched scrubbing off.
+ */
 export function scrubText(text, options = {}) {
+    if (scrubbingSwitchedOff())
+        return text;
     return scrubString(text, { options, hits: {} });
 }
 /**
@@ -171,6 +261,8 @@ export function scrubText(text, options = {}) {
  */
 export function scrubFields(record, fields, options = {}) {
     const out = { ...record };
+    if (scrubbingSwitchedOff())
+        return out;
     for (const field of fields) {
         if (typeof out[field] === "string")
             out[field] = scrubText(out[field], options);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,KAAK,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAY,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAE3H,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AA0BlD,+FAA+F;AAC/F,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,WAAoB;IAC5D,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,GAAG,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,IAAY,EAAE,WAAoB;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,MAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACrH,CAAC;AAED,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,OAAO,CAAC,MAAM,IAAI,qBAAqB;QACvC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACnB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,8EAA8E;QAC9E,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAU;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE;YACnE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QAClG,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAU;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE,CACxF,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CACpF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAU;IAClD,mGAAmG;IACnG,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CACvE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAC3C,CAAC;IACF,OAAO,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAU;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAU,EAAE,GAAuB;IACnE,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,kGAAkG;QAClG,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,YAAoB,EAAE,IAAU;IACrF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,YAAoB,EAAE,IAAU,EAAE,KAAa;IACrG,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,IAAe,EAAE,IAAU,EAAE,KAAa;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9F,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,QAAiB,EAAE,IAAU,EAAE,KAAa;IAC1F,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,IAAI,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5F,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B,EAAE,IAAU,EAAE,KAAa;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAU,EAAE,GAAuB,EAAE,KAAa;IAC9E,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAC3D,MAAM,IAAI,GAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,UAAU,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAChE,OAAO,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,UAAwB,EAAE;IAChE,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAS,EACT,MAAyB,EACzB,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAW,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,iBAAiB,EACjB,cAAc,EACd,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAY,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAE3H,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAoBlD;;;GAGG;AACH,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,WAAoB;IAC5D,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,IAAI,GAAG,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,IAAY,EAAE,WAAoB;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,MAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACrH,CAAC;AAED,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,OAAO,CAAC,MAAM,IAAI,qBAAqB;QACvC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACnB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,8EAA8E;QAC9E,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,SAAS,wBAAwB,CAAC,MAAc;IAC9C,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAU;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE;YACnE,6FAA6F;YAC7F,gEAAgE;YAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,OAAO,KAAK,CAAC;YACrD,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChG,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAU;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,MAAc,EAAE,EAAE;IACxG,4FAA4F;IAC5F,qFAAqF;IACrF,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;QACrF,CAAC,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE;QAClD,CAAC,CAAC,KAAK,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAU;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAU,EAAE,GAAuB;IACnE,IAAI,GAAG,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,kGAAkG;QAClG,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAA4B;IACtD,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC9I,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAU;IACpD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CACvC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,IAAU;IAC/D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC3G,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAU,EAAE,KAAa;IAC/E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0GAA0G;AAC1G,SAAS,oBAAoB,CAAC,KAAa,EAAE,IAAU;IACrD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAChF,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,IAAe,EAAE,IAAU,EAAE,KAAa;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,SAAkC,EAAE,IAAU,EAAE,KAAa;IAC5F,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4GAA4G;AAC5G,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,QAAiB,EAAE,IAAU,EAAE,KAAa;IAC1F,MAAM,OAAO,GAAG,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM;QAAE,OAAO,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjG,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B,EAAE,IAAU,EAAE,KAAa;IACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAU,EAAE,GAAuB,EAAE,KAAa;IAC9E,2EAA2E;IAC3E,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAC3D,IAAI,oBAAoB,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvD,MAAM,IAAI,GAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,UAAU,CAAI,KAAQ,EAAE,UAAwB,EAAE;IAChE,OAAO,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,UAAwB,EAAE;IAChE,IAAI,oBAAoB,EAAE;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAS,EACT,MAAyB,EACzB,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACnD,IAAI,oBAAoB,EAAE;QAAE,OAAO,GAAQ,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAW,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/org-setting.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Whether the organization has switched scrubbing off (OPT-942).
+ *
+ * The backend sends `scrub_pii` with the prompt policy on startup and inventory responses, and
+ * the senders store it in the org config file beside `collect_prompts`. Only an explicit `false`
+ * turns scrubbing off: no file yet, an unreadable one or no field means scrub, so an endpoint
+ * that has not heard from its organization yet scrubs.
+ *
+ * Read on every call rather than once per process, so a change reaches a sender as soon as the
+ * file is rewritten. The file is a few hundred bytes.
+ */
+export declare function orgConfigPath(): string;
+export declare function scrubbingSwitchedOff(): boolean;
+//# sourceMappingURL=org-setting.d.ts.map

package/dist/org-setting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-setting.d.ts","sourceRoot":"","sources":["../src/org-setting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAQ9C"}

package/dist/org-setting.js

@@ -0,0 +1,28 @@
+/**
+ * Whether the organization has switched scrubbing off (OPT-942).
+ *
+ * The backend sends `scrub_pii` with the prompt policy on startup and inventory responses, and
+ * the senders store it in the org config file beside `collect_prompts`. Only an explicit `false`
+ * turns scrubbing off: no file yet, an unreadable one or no field means scrub, so an endpoint
+ * that has not heard from its organization yet scrubs.
+ *
+ * Read on every call rather than once per process, so a change reaches a sender as soon as the
+ * file is rewritten. The file is a few hundred bytes.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export function orgConfigPath() {
+    return join(homedir(), ".optimuslabs", "management", "org", "config.json");
+}
+export function scrubbingSwitchedOff() {
+    try {
+        const config = JSON.parse(readFileSync(orgConfigPath(), "utf8"));
+        return Boolean(config) && typeof config === "object" && config.scrub_pii === false;
+    }
+    catch {
+        // No file yet, or not JSON: scrub.
+        return false;
+    }
+}
+//# sourceMappingURL=org-setting.js.map

package/dist/org-setting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-setting.js","sourceRoot":"","sources":["../src/org-setting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAY,CAAC;QAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAAkC,CAAC,SAAS,KAAK,KAAK,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/rules.d.ts

@@ -13,20 +13,27 @@
 export interface SecretFormat {
     type: string;
     fingerprint: boolean;
+    skipPlaceholders: boolean;
     /** Global, for `replace`. */
     pattern: RegExp;
 }
 export declare const SECRET_FORMATS: readonly SecretFormat[];
 export declare const CREDENTIAL_KEY: RegExp;
+export declare const WEAK_CREDENTIAL_KEY: RegExp;
+export declare const NOT_A_SECRET_UNDER_WEAK_KEY: RegExp;
+export declare const CREDENTIAL_CONTAINER: RegExp;
+export declare const CONTAINER_KEEP: RegExp;
 export declare const CREDENTIAL_ASSIGNMENT: RegExp;
+export declare const CODE_VALUE: RegExp;
 export declare const ENV_REFERENCE: RegExp;
 export declare const CONTAINS_REFERENCE: RegExp;
+export declare const PLACEHOLDER_VALUE: RegExp;
 export declare const CREDENTIAL_FLAG: RegExp;
-/** Block key (`env`, `headers`) to the placeholder type for an ordinary value in it. */
-export declare const MCP_VALUE_BLOCKS: Readonly<Record<string, string>>;
+/** The blocks of an MCP server definition whose values are checked for secrets (`env`, `headers`). */
+export declare const MCP_VALUE_BLOCKS: ReadonlySet<string>;
+/** The backend's generic token shape; a match of 40 or more characters is a potential token. */
+export declare const GENERIC_TOKEN: RegExp;
 export declare const MCP_SERVER_KEYS: ReadonlySet<string>;
-export declare const EMAIL: RegExp;
-export declare const RESERVED_EMAIL_DOMAIN: RegExp;
-export declare const HOME_DIRECTORY: RegExp;
+export declare const JSON_SCHEMA_TYPES: ReadonlySet<string>;
 export declare const MIN_CREDENTIAL_LENGTH: number;
 //# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA6BH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAWD,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAI/C,CAAC;AACJ,eAAO,MAAM,cAAc,QAAuC,CAAC;AACnE,eAAO,MAAM,qBAAqB,QAA6C,CAAC;AAChF,eAAO,MAAM,aAAa,QAAsC,CAAC;AACjE,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAC3E,eAAO,MAAM,eAAe,QAAwC,CAAC;AACrE,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAiC,CAAC;AAChG,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAA+C,CAAC;AAChG,eAAO,MAAM,KAAK,QAA6B,CAAC;AAChD,eAAO,MAAM,qBAAqB,QAA8C,CAAC;AACjF,eAAO,MAAM,cAAc,QAAsC,CAAC;AAClE,eAAO,MAAM,qBAAqB,QAA8B,CAAC"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkCH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAWD,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAK/C,CAAC;AACJ,eAAO,MAAM,cAAc,QAAuC,CAAC;AACnE,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAC7E,eAAO,MAAM,2BAA2B,QAA6D,CAAC;AACtG,eAAO,MAAM,oBAAoB,QAA6C,CAAC;AAC/E,eAAO,MAAM,cAAc,QAAsD,CAAC;AAClF,eAAO,MAAM,qBAAqB,QAA6C,CAAC;AAChF,eAAO,MAAM,UAAU,QAAmC,CAAC;AAC3D,eAAO,MAAM,aAAa,QAAsC,CAAC;AACjE,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAC3E,eAAO,MAAM,iBAAiB,QAA0C,CAAC;AACzE,eAAO,MAAM,eAAe,QAAwC,CAAC;AACrE,sGAAsG;AACtG,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAC5F,gGAAgG;AAChG,eAAO,MAAM,aAAa,QAAqC,CAAC;AAChE,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAA+C,CAAC;AAChG,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAC7F,eAAO,MAAM,qBAAqB,QAA8B,CAAC"}

package/dist/rules.js

@@ -21,18 +21,25 @@ function compile(spec, global) {
 export const SECRET_FORMATS = RULES.formats.map((f) => ({
     type: f.type,
     fingerprint: f.fingerprint,
+    skipPlaceholders: Boolean(f.skip_placeholders),
     pattern: compile(f, true),
 }));
 export const CREDENTIAL_KEY = compile(RULES.credential_key, false);
+export const WEAK_CREDENTIAL_KEY = compile(RULES.weak_credential_key, false);
+export const NOT_A_SECRET_UNDER_WEAK_KEY = new RegExp(RULES.weak_credential_key.not_a_secret_pattern);
+export const CREDENTIAL_CONTAINER = compile(RULES.credential_container, false);
+export const CONTAINER_KEEP = new RegExp(RULES.credential_container.keep_pattern);
 export const CREDENTIAL_ASSIGNMENT = compile(RULES.credential_assignment, true);
+export const CODE_VALUE = compile(RULES.code_value, false);
 export const ENV_REFERENCE = compile(RULES.env_reference, false);
 export const CONTAINS_REFERENCE = compile(RULES.contains_reference, false);
+export const PLACEHOLDER_VALUE = compile(RULES.placeholder_value, false);
 export const CREDENTIAL_FLAG = compile(RULES.credential_flag, false);
-/** Block key (`env`, `headers`) to the placeholder type for an ordinary value in it. */
-export const MCP_VALUE_BLOCKS = RULES.mcp_value_blocks.blocks;
+/** The blocks of an MCP server definition whose values are checked for secrets (`env`, `headers`). */
+export const MCP_VALUE_BLOCKS = new Set(RULES.mcp_value_blocks.blocks);
+/** The backend's generic token shape; a match of 40 or more characters is a potential token. */
+export const GENERIC_TOKEN = compile(RULES.generic_token, true);
 export const MCP_SERVER_KEYS = new Set(RULES.mcp_value_blocks.server_keys);
-export const EMAIL = compile(RULES.email, true);
-export const RESERVED_EMAIL_DOMAIN = compile(RULES.reserved_email_domain, false);
-export const HOME_DIRECTORY = compile(RULES.home_directory, true);
+export const JSON_SCHEMA_TYPES = new Set(RULES.json_schema_types.types);
 export const MIN_CREDENTIAL_LENGTH = RULES.min_credential_length;
 //# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAkC5C,gGAAgG;AAChG,0EAA0E;AAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAc,CAAC;AAE3E,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAAiB,EAAE,MAAe;IACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAA4B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC;CAC1B,CAAC,CAAC,CAAC;AACJ,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AACrE,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAqC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;AAChG,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwC5C,gGAAgG;AAChG,0EAA0E;AAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAc,CAAC;AAE3E,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAAiB,EAAE,MAAe;IACjD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAA4B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC;CAC1B,CAAC,CAAC,CAAC;AACJ,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AACrE,sGAAsG;AACtG,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC5F,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optimuslabs/pii-scrub-staging",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Redacts secrets and personal data from what an Optimus endpoint sends, before it leaves the machine.",
   "type": "module",
   "main": "./dist/index.js",

package/rules.json

@@ -14,7 +14,15 @@
       "type": "URL_CREDENTIALS",
       "pattern": "\\b([a-z][a-z0-9+.-]{0,31}:\\/\\/[^\\s:@/\"'`]{1,256}:)[^\\s@/\"'`]{1,256}(?=@)",
       "ignore_case": true,
-      "fingerprint": false
+      "fingerprint": false,
+      "skip_placeholders": true
+    },
+    {
+      "type": "URL_CREDENTIALS",
+      "pattern": "\\b([a-z][a-z0-9+.-]{0,31}:\\/\\/)[^\\s:@/\"'`]{16,255}(?=@)",
+      "ignore_case": true,
+      "fingerprint": false,
+      "skip_placeholders": true
     },
     {
       "type": "ANTHROPIC_KEY",
@@ -86,6 +94,11 @@
       "pattern": "\\b(pplx-)[A-Za-z0-9]{32,}",
       "fingerprint": true
     },
+    {
+      "type": "BRAVE_KEY",
+      "pattern": "\\b(BSA)[A-Za-z0-9_-]{20,}",
+      "fingerprint": true
+    },
     {
       "type": "JWT",
       "pattern": "\\beyJ[A-Za-z0-9_-]{8,}\\.eyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}",
@@ -95,22 +108,39 @@
       "type": "BEARER_TOKEN",
       "pattern": "\\b(Bearer\\s+)[A-Za-z0-9._~+/=-]{16,}",
       "ignore_case": true,
-      "fingerprint": false
+      "fingerprint": false,
+      "skip_placeholders": true
     },
     {
       "type": "BASIC_AUTH",
-      "pattern": "\\b(Basic\\s+)[A-Za-z0-9+/=]{12,}",
+      "pattern": "\\b(Basic\\s+)(?=[A-Za-z0-9+/=]{0,512}(?:[0-9+/=]|[a-z][A-Z]))(?:[A-Za-z0-9+/]{4}){2,128}(?:[A-Za-z0-9+/]{4}|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{2}==)(?![A-Za-z0-9+/=])",
       "fingerprint": false
     }
   ],
   "credential_key": {
-    "pattern": "(?:[_.-]key|api[_-]?key|apikey|secret|token|password|passwd|credential|private[_-]?key|access[_-]?key|authorization|token[_-]?cache(?:v\\d+)?)$",
+    "pattern": "(?:api[_-]?key|apikey|secret|token|password|passwd|credential|private[_-]?key|(?:secret|signing|encryption)[_-]?key|access[_-]?key|authorization|token[_-]?cache(?:v\\d+)?)$",
     "ignore_case": true
   },
+  "weak_credential_key": {
+    "description": "A name ending in `_key` (DEPLOY_SSH_KEY, LICENSE_KEY) is a credential only when its value is not an identifier of something else: an issue key (INCIDENT-31138) or a session key of three or more colon-separated lowercase parts (agent:main:slack). Secret, signing and encryption keys are always credentials (credential_key).",
+    "pattern": "[_.-]key$",
+    "ignore_case": true,
+    "not_a_secret_pattern": "^[a-z0-9_-]+(?::[a-z0-9_+.-]+){2,}$|^[A-Z][A-Z0-9]{1,15}-[0-9]{1,9}$"
+  },
+  "credential_container": {
+    "description": "An object whose every string value is a credential, whatever its own key (Copilot's copilotTokens maps host:user to a token). Fields ending in id stay (Codex tokens.account_id).",
+    "pattern": "(?:tokens|secrets|credentials|api[_-]?keys)$",
+    "ignore_case": true,
+    "keep_pattern": "(?:^|[_-])id$|[a-z]Id$"
+  },
   "credential_assignment": {
     "pattern": "((?:api[_-]?key|apikey|secret|token|password|passwd|credential|private[_-]?key|access[_-]?key)[\"']?\\s*[:=]\\s*[\"']?)([^\\s\"'`,;&)}\\]]{8,})",
     "ignore_case": true
   },
+  "code_value": {
+    "description": "A value after a credential name in text that is code, not a secret: a call or block opener (`os.environ.get(`, `T.type_alias{`), a template (`{client_private_key}`, `<paste_key_here>`), or a variable named for a credential (`data.credential`, `walletKey`, `this.env.VAPID_PRIVATE_KEY`). A secret that merely contains `(` or `{` is still one.",
+    "pattern": "^[A-Za-z_$][\\w$.]*[({]$|^\\{[\\w.]{1,128}$|^<[^<>]{1,64}>$|^(?=[\\w$.]{0,256}(?:\\.|[a-z][A-Z]))(?=[\\w$.]{0,256}(?:[Kk]ey|KEY|[Ss]ecret|SECRET|[Tt]oken|TOKEN|[Pp]assw|PASSW|[Cc]redential|CREDENTIAL|\\.env\\.|\\.environ\\b))[A-Za-z_$][\\w$]*(?:\\.[A-Za-z_$][\\w$]*)*$"
+  },
   "env_reference": {
     "pattern": "^(?:\\$|\\{\\{|process\\.env\\.)|^[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+$"
   },
@@ -118,18 +148,22 @@
     "description": "A reference to a secret stored elsewhere anywhere in a value (`Bearer ${TOKEN}`): the value stays readable.",
     "pattern": "\\$\\{[^}]{1,128}\\}|\\$env:|process\\.env\\."
   },
+  "placeholder_value": {
+    "description": "A documentation placeholder where a secret goes (`<your_key>`, `YOUR_API_TOKEN`, `my_secret`): not a secret, so not redacted and never a finding.",
+    "pattern": "^<[^<>]{1,64}>$|(?:^|[_.-])(?:YOUR|your|MY|my)[_-]|_(?:TOKEN|KEY|SECRET|PASSWORD)$"
+  },
   "credential_flag": {
     "description": "A command-line flag whose next argument is a credential (`--api-key`, `--token`); group 1 is the name, tested against credential_key.",
     "pattern": "^-{1,2}([A-Za-z0-9_.-]{1,64})$"
   },
   "mcp_value_blocks": {
-    "description": "Blocks inside an MCP server definition whose every value is redacted: block key to the placeholder type for a value that is neither a known format nor under a credential-named key. A server definition is an object with one of server_keys.",
-    "blocks": {
-      "env": "ENV_VALUE",
-      "environment": "ENV_VALUE",
-      "headers": "HEADER_VALUE",
-      "http_headers": "HEADER_VALUE"
-    },
+    "description": "Blocks inside an MCP server definition whose values are checked for secrets: a known format, a value under a credential-named key, or a generic token (generic_token) is redacted; any other value stays. A server definition is an object with one of server_keys. A server key counts only when its value is a string or a list, so a JSON Schema `properties` map with a `type` or `url` property is not a server.",
+    "blocks": [
+      "env",
+      "environment",
+      "headers",
+      "http_headers"
+    ],
     "server_keys": [
       "command",
       "args",
@@ -140,15 +174,88 @@
       "type"
     ]
   },
-  "email": {
-    "pattern": "\\b[A-Za-z0-9._%+-]{1,64}@([A-Za-z0-9-]{1,63}(?:\\.[A-Za-z0-9-]{1,63})*\\.[A-Za-z]{2,24})\\b"
+  "generic_token": {
+    "description": "The backend's generic token (HardcodedSecretRule.GENERIC_TOKEN_PATTERN): in an MCP env or headers value, a match of 40 or more characters is redacted as POTENTIAL_TOKEN, which the backend reads as a potential token/secret. In a URL only the query is searched.",
+    "pattern": "\\b[a-zA-Z0-9][a-zA-Z0-9_-]{31,}\\b"
   },
-  "reserved_email_domain": {
-    "pattern": "(?:^|\\.)(?:example\\.(?:com|org|net)|example|test|invalid|localhost)$",
-    "ignore_case": true
-  },
-  "home_directory": {
-    "pattern": "(\\/(?:Users|home)\\/)([A-Za-z0-9._-]{1,64})"
+  "json_schema_types": {
+    "description": "An object whose `type` is one of these is a JSON Schema node (an MCP tool's input schema), not data: never a credential container or an MCP value block.",
+    "types": [
+      "object",
+      "array",
+      "string",
+      "number",
+      "integer",
+      "boolean",
+      "null"
+    ]
   },
-  "min_credential_length": 8
+  "min_credential_length": 8,
+  "admin_summary": {
+    "description": "What admins are told is redacted (org settings, Data redaction; OPT-953): one item per kind, naming the rule groups it describes; \"list\": \"formats\" adds the format types as a list. \"items\" are the names or kinds the other items remove. The backend sends these items; a backend test fails when a rule group that redacts has no item here.",
+    "lines": [
+      {
+        "title": "API keys and tokens",
+        "rules": [
+          "formats"
+        ],
+        "list": "formats",
+        "text": "Known vendor formats, replaced by [OL_REDACTED:<format>]. The vendor's prefix stays."
+      },
+      {
+        "title": "Credentials by name",
+        "rules": [
+          "credential_key",
+          "weak_credential_key",
+          "credential_assignment",
+          "credential_flag"
+        ],
+        "text": "Values named like a credential (api_key, token, secret, password), in any format.",
+        "items": [
+          "api_key",
+          "apikey",
+          "secret",
+          "token",
+          "password",
+          "passwd",
+          "credential",
+          "private_key",
+          "secret_key",
+          "signing_key",
+          "encryption_key",
+          "access_key",
+          "authorization",
+          "token_cache",
+          "*_key"
+        ]
+      },
+      {
+        "title": "Token maps",
+        "rules": [
+          "credential_container"
+        ],
+        "text": "Every value in a map of tokens, such as Copilot's copilotTokens.",
+        "items": [
+          "*tokens",
+          "*secrets",
+          "*credentials",
+          "*api_keys"
+        ]
+      },
+      {
+        "title": "MCP server env and headers",
+        "rules": [
+          "mcp_value_blocks",
+          "generic_token"
+        ],
+        "text": "Secrets in an MCP server's env and headers: known formats, credential names and long tokens. Other values stay.",
+        "items": [
+          "env",
+          "environment",
+          "headers",
+          "http_headers"
+        ]
+      }
+    ]
+  }
 }