@optimuslabs/runtime-staging 0.3.10 → 0.3.11

package/dist/test/wire-metadata.test.js

@@ -0,0 +1,105 @@
+import { test } from "node:test";
+import assert from "node:assert";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { persistCollectPromptsFromResponse } from "../lib/prompt-collection-policy.js";
+import { cloneToolCallMetadataForWire } from "../lib/telemetry/wire-metadata.js";
+// Assembled at runtime so no real-looking key sits in the source.
+const ANTHROPIC = `sk-ant-api03-${"A".repeat(40)}`;
+test("cloneToolCallMetadataForWire - secrets in the content never leave the machine; emails and paths go as they are", () => {
+    const command = `curl -H "x-api-key: ${ANTHROPIC}" https://api.anthropic.com && mail ada@gmail.com`;
+    const wire = cloneToolCallMetadataForWire({
+        tool_name: "Bash",
+        tool_input: { command },
+        raw_event: { hook_event_name: "PreToolUse", command, cwd: "/Users/ada/src" },
+        user_prompt: `use OPENAI_API_KEY=sk-${"b".repeat(30)} please`,
+    });
+    const expected = 'curl -H "x-api-key: sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY]" https://api.anthropic.com && mail ada@gmail.com';
+    assert.deepStrictEqual(wire?.tool_input, { command: expected });
+    assert.deepStrictEqual(wire?.raw_event, { hook_event_name: "PreToolUse", command: expected });
+    assert.strictEqual(wire?.user_prompt, "use OPENAI_API_KEY=sk-[OL_REDACTED:OPENAI_KEY] please");
+    assert.ok(!JSON.stringify(wire).includes(ANTHROPIC));
+    assert.match(String(wire?.scrubber_version), /^\d+\.\d+\.\d+$/);
+});
+test("cloneToolCallMetadataForWire - server-owned keys are still dropped", () => {
+    const wire = cloneToolCallMetadataForWire({ tool_name: "Read", user_profile: { email: "x@y.z" }, action_type: "read" });
+    assert.deepStrictEqual(Object.keys(wire ?? {}).sort(), ["scrubber_version", "tool_name"]);
+});
+test("cloneToolCallMetadataForWire - vendor secrets get the org's fingerprint once its key is stored", () => {
+    const saved = process.env.HOME;
+    process.env.HOME = fs.mkdtempSync(path.join(os.tmpdir(), "wire-key-"));
+    try {
+        const command = `export ANTHROPIC_API_KEY=${ANTHROPIC}`;
+        assert.deepStrictEqual(cloneToolCallMetadataForWire({ tool_input: { command } })?.tool_input, {
+            command: "export ANTHROPIC_API_KEY=sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY]",
+        });
+        persistCollectPromptsFromResponse({ fingerprint_key: "ef".repeat(32) });
+        const keyed = cloneToolCallMetadataForWire({ tool_input: { command } })?.tool_input;
+        assert.match(keyed.command, /^export ANTHROPIC_API_KEY=sk-ant-api03-\[OL_REDACTED:ANTHROPIC_KEY:[0-9a-f]{24}\]$/);
+    }
+    finally {
+        process.env.HOME = saved;
+    }
+});
+test("cloneToolCallMetadataForWire - the running identity is sent as it is, never scrubbed", () => {
+    const identity = {
+        login: { tenant_id: "org-uuid", email: "ada@acme.io" },
+        os_user: { uid: 501, username: "ada.lovelace" },
+    };
+    const wire = cloneToolCallMetadataForWire({ tool_name: "Read", ...identity });
+    assert.deepStrictEqual(wire?.login, identity.login);
+    assert.deepStrictEqual(wire?.os_user, identity.os_user);
+});
+test("cloneToolCallMetadataForWire - only allowlisted fields are sent; a field added later stays on the Mac", () => {
+    const wire = cloneToolCallMetadataForWire({
+        tool_name: "Write",
+        tool_input: { file_path: "/tmp/a.txt", content: "hello" },
+        hook_hash: "a".repeat(64),
+        some_future_field: { anything: "x" },
+        user_profile: { email: "spoof@x.io" },
+        action_type: "spoofed",
+    });
+    assert.deepStrictEqual(Object.keys(wire ?? {}).sort(), ["hook_hash", "scrubber_version", "tool_input", "tool_name"]);
+});
+test("cloneToolCallMetadataForWire - raw_event keeps only what the backend reads", () => {
+    const wire = cloneToolCallMetadataForWire({
+        tool_name: "Shell",
+        raw_event: {
+            hookEventName: "beforeShellExecution",
+            tool_name: "Shell",
+            command: `curl -H "Authorization: Bearer ${ANTHROPIC}" https://x.io`,
+            tool_response: { stdout: "file contents" },
+            transcript_path: "/Users/ada/.cursor/transcript.jsonl",
+            tool_input: { content: "the agent's own copy" },
+        },
+    });
+    assert.deepStrictEqual(wire?.raw_event, {
+        hookEventName: "beforeShellExecution",
+        tool_name: "Shell",
+        command: 'curl -H "Authorization: Bearer sk-ant-api03-[OL_REDACTED:ANTHROPIC_KEY]" https://x.io',
+    });
+});
+test("cloneToolCallMetadataForWire - a Cursor write of a file with a key in it is sent scrubbed", () => {
+    const wire = cloneToolCallMetadataForWire({
+        tool_name: "write",
+        tool_input: { file_path: ".env", content: `OPENAI_API_KEY=sk-proj-${"c".repeat(40)}\nDEBUG=1\n` },
+    });
+    assert.deepStrictEqual(wire?.tool_input, {
+        file_path: ".env",
+        content: "OPENAI_API_KEY=sk-proj-[OL_REDACTED:OPENAI_KEY]\nDEBUG=1\n",
+    });
+});
+test("cloneToolCallMetadataForWire - home directories, the running account's or another's, are not redacted", () => {
+    const wire = cloneToolCallMetadataForWire({
+        tool_name: "Read",
+        tool_input: { file_path: "/Users/ada/.claude/plugins/cache/tools/deploy/1.0.0/skills/deploy/SKILL.md" },
+        user_prompt: "Base directory for this skill: /Users/ada/.claude/skills/deploy and see /Users/bob/notes",
+        os_user: { uid: 501, username: "ada" },
+    });
+    assert.deepStrictEqual(wire?.tool_input, {
+        file_path: "/Users/ada/.claude/plugins/cache/tools/deploy/1.0.0/skills/deploy/SKILL.md",
+    });
+    assert.strictEqual(wire?.user_prompt, "Base directory for this skill: /Users/ada/.claude/skills/deploy and see /Users/bob/notes");
+});
+//# sourceMappingURL=wire-metadata.test.js.map

package/dist/test/wire-metadata.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-metadata.test.js","sourceRoot":"","sources":["../../src/test/wire-metadata.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,kEAAkE;AAClE,MAAM,SAAS,GAAG,gBAAgB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAEnD,IAAI,CAAC,gHAAgH,EAAE,GAAG,EAAE;IAC1H,MAAM,OAAO,GAAG,uBAAuB,SAAS,mDAAmD,CAAC;IACpG,MAAM,IAAI,GAAG,4BAA4B,CAAC;QACxC,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE,OAAO,EAAE;QACvB,SAAS,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE;QAC5E,WAAW,EAAE,yBAAyB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS;KAC9D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,+GAA+G,CAAC;IACjI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,uDAAuD,CAAC,CAAC;IAC/F,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IACxH,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gGAAgG,EAAE,GAAG,EAAE;IAC1G,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,4BAA4B,SAAS,EAAE,CAAC;QACxD,MAAM,CAAC,eAAe,CAAC,4BAA4B,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE;YAC5F,OAAO,EAAE,mEAAmE;SAC7E,CAAC,CAAC;QACH,iCAAiC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,4BAA4B,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,UAAiC,CAAC;QAC3G,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,oFAAoF,CAAC,CAAC;IACpH,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE;QACtD,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE;KAChD,CAAC;IACF,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uGAAuG,EAAE,GAAG,EAAE;IACjH,MAAM,IAAI,GAAG,4BAA4B,CAAC;QACxC,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE;QACzD,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,iBAAiB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;QACpC,YAAY,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;QACrC,WAAW,EAAE,SAAS;KACvB,CAAC,CAAC;IACH,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,GAAG,EAAE;IACtF,MAAM,IAAI,GAAG,4BAA4B,CAAC;QACxC,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE;YACT,aAAa,EAAE,sBAAsB;YACrC,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,kCAAkC,SAAS,gBAAgB;YACpE,aAAa,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;YAC1C,eAAe,EAAE,qCAAqC;YACtD,UAAU,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;SAChD;KACF,CAAC,CAAC;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE;QACtC,aAAa,EAAE,sBAAsB;QACrC,SAAS,EAAE,OAAO;QAClB,OAAO,EAAE,uFAAuF;KACjG,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,MAAM,IAAI,GAAG,4BAA4B,CAAC;QACxC,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE;KAClG,CAAC,CAAC;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE;QACvC,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,4DAA4D;KACtE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uGAAuG,EAAE,GAAG,EAAE;IACjH,MAAM,IAAI,GAAG,4BAA4B,CAAC;QACxC,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE,SAAS,EAAE,4EAA4E,EAAE;QACvG,WAAW,EAAE,0FAA0F;QACvG,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;KACvC,CAAC,CAAC;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE;QACvC,SAAS,EAAE,4EAA4E;KACxF,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,0FAA0F,CAAC,CAAC;AACpI,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optimuslabs/runtime-staging",
-  "version": "0.3.10",
+  "version": "0.3.11",
   "description": "Agentic audit sensor — streams raw tool call metadata; the Optimus backend classifies on ingest",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
   "scripts": {
     "build": "rm -rf dist && tsc && node ../../../scripts/ensure-bin-executable.mjs",
     "dev": "tsx src/index.ts",
-    "pretest": "npm run build --prefix ../tofu && npm run build",
+    "pretest": "npm run build --prefix ../tofu && npm run build --prefix ../pii-scrub && npm run build",
     "test": "node --test dist/test/*.test.js",
     "prepare": "npm run build"
   },
@@ -46,6 +46,7 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
+    "@optimuslabs/pii-scrub-staging": "^0.1.0",
     "@optimuslabs/tofu-staging": "^0.1.18"
   },
   "publishConfig": {