@uniglot/wont-let-you-see 0.1.0 → 0.1.1

package/.github/CODEOWNERS

@@ -0,0 +1 @@
+* @uniglot

package/dist/index.js

@@ -114,7 +114,7 @@ function getOriginal(sessionId, token) {
 
 // src/config.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { join as join2 } from "path";
+import { join as join2, dirname } from "path";
 import { homedir as homedir2 } from "os";
 var DEFAULT_CONFIG = {
   enabled: true,
@@ -122,18 +122,39 @@ var DEFAULT_CONFIG = {
   customPatterns: []
 };
 var CONFIG_FILENAME = ".wont-let-you-see.json";
-function loadJsonConfig() {
-  const paths = [
-    join2(process.cwd(), CONFIG_FILENAME),
-    join2(homedir2(), CONFIG_FILENAME)
-  ];
-  for (const configPath of paths) {
+function findConfigInAncestors(startDir) {
+  const home = homedir2();
+  let currentDir = startDir;
+  while (true) {
+    const configPath = join2(currentDir, CONFIG_FILENAME);
     if (existsSync2(configPath)) {
-      try {
-        const content = readFileSync2(configPath, "utf-8");
-        return JSON.parse(content);
-      } catch {}
+      return configPath;
+    }
+    if (currentDir === home) {
+      break;
     }
+    const parentDir = dirname(currentDir);
+    if (parentDir === currentDir) {
+      break;
+    }
+    currentDir = parentDir;
+  }
+  return null;
+}
+function loadJsonConfig() {
+  const ancestorConfig = findConfigInAncestors(process.cwd());
+  if (ancestorConfig) {
+    try {
+      const content = readFileSync2(ancestorConfig, "utf-8");
+      return JSON.parse(content);
+    } catch {}
+  }
+  const homeConfig = join2(homedir2(), CONFIG_FILENAME);
+  if (existsSync2(homeConfig)) {
+    try {
+      const content = readFileSync2(homeConfig, "utf-8");
+      return JSON.parse(content);
+    } catch {}
   }
   return {};
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniglot/wont-let-you-see",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "OpenCode plugin that masks sensitive cloud infrastructure data (AWS, Kubernetes) from LLMs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/__tests__/config.test.ts

@@ -1,16 +1,32 @@
-import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
 import { getConfig, resetConfig, isPatternEnabled } from "../config";
+import * as fs from "fs";
+import * as path from "path";
+
+vi.mock("fs", async () => {
+  const actual = await vi.importActual<typeof fs>("fs");
+  return {
+    ...actual,
+    existsSync: vi.fn(),
+    readFileSync: vi.fn(),
+  };
+});
 
 describe("Config", () => {
   const originalEnv = { ...process.env };
+  const originalCwd = process.cwd;
 
   beforeEach(() => {
     resetConfig();
+    vi.mocked(fs.existsSync).mockReturnValue(false);
+    vi.mocked(fs.readFileSync).mockReturnValue("{}");
   });
 
   afterEach(() => {
     process.env = { ...originalEnv };
+    process.cwd = originalCwd;
     resetConfig();
+    vi.clearAllMocks();
   });
 
   describe("getConfig", () => {
@@ -95,4 +111,77 @@ describe("Config", () => {
       expect(isPatternEnabled("vpc")).toBe(true);
     });
   });
+
+  describe("ancestor directory config lookup", () => {
+    it("should find config in parent directory when cwd is subdirectory", () => {
+      process.cwd = () => "/project/packages/app";
+
+      vi.mocked(fs.existsSync).mockImplementation((p) => {
+        return p === path.join("/project", ".wont-let-you-see.json");
+      });
+      vi.mocked(fs.readFileSync).mockReturnValue(
+        JSON.stringify({ enabled: false, customPatterns: ["secret123"] }),
+      );
+
+      const config = getConfig();
+      expect(config.enabled).toBe(false);
+      expect(config.customPatterns).toEqual(["secret123"]);
+    });
+
+    it("should find config in grandparent directory", () => {
+      process.cwd = () => "/project/packages/app/src/components";
+
+      vi.mocked(fs.existsSync).mockImplementation((p) => {
+        return p === path.join("/project", ".wont-let-you-see.json");
+      });
+      vi.mocked(fs.readFileSync).mockReturnValue(
+        JSON.stringify({ revealedPatterns: ["ipv4"] }),
+      );
+
+      const config = getConfig();
+      expect(config.revealedPatterns).toEqual(["ipv4"]);
+    });
+
+    it("should prefer config in closer ancestor over distant ancestor", () => {
+      process.cwd = () => "/project/packages/app";
+
+      vi.mocked(fs.existsSync).mockImplementation((p) => {
+        return (
+          p === path.join("/project/packages/app", ".wont-let-you-see.json") ||
+          p === path.join("/project", ".wont-let-you-see.json")
+        );
+      });
+      vi.mocked(fs.readFileSync).mockImplementation((p) => {
+        if (
+          p === path.join("/project/packages/app", ".wont-let-you-see.json")
+        ) {
+          return JSON.stringify({ customPatterns: ["app-secret"] });
+        }
+        return JSON.stringify({ customPatterns: ["root-secret"] });
+      });
+
+      const config = getConfig();
+      expect(config.customPatterns).toEqual(["app-secret"]);
+    });
+
+    it("should prefer cwd config over parent config", () => {
+      process.cwd = () => "/project/subdir";
+
+      vi.mocked(fs.existsSync).mockImplementation((p) => {
+        return (
+          p === path.join("/project/subdir", ".wont-let-you-see.json") ||
+          p === path.join("/project", ".wont-let-you-see.json")
+        );
+      });
+      vi.mocked(fs.readFileSync).mockImplementation((p) => {
+        if (p === path.join("/project/subdir", ".wont-let-you-see.json")) {
+          return JSON.stringify({ enabled: false });
+        }
+        return JSON.stringify({ enabled: true });
+      });
+
+      const config = getConfig();
+      expect(config.enabled).toBe(false);
+    });
+  });
 });

package/src/config.ts

@@ -1,5 +1,5 @@
 import { existsSync, readFileSync } from "fs";
-import { join } from "path";
+import { join, dirname, parse } from "path";
 import { homedir } from "os";
 
 export interface Config {
@@ -16,19 +16,47 @@ const DEFAULT_CONFIG: Config = {
 
 const CONFIG_FILENAME = ".wont-let-you-see.json";
 
-function loadJsonConfig(): Partial<Config> {
-  const paths = [
-    join(process.cwd(), CONFIG_FILENAME),
-    join(homedir(), CONFIG_FILENAME),
-  ];
+function findConfigInAncestors(startDir: string): string | null {
+  const home = homedir();
+  let currentDir = startDir;
 
-  for (const configPath of paths) {
+  while (true) {
+    const configPath = join(currentDir, CONFIG_FILENAME);
     if (existsSync(configPath)) {
-      try {
-        const content = readFileSync(configPath, "utf-8");
-        return JSON.parse(content);
-      } catch {}
+      return configPath;
+    }
+
+    if (currentDir === home) {
+      break;
     }
+
+    const parentDir = dirname(currentDir);
+    if (parentDir === currentDir) {
+      break;
+    }
+    currentDir = parentDir;
+  }
+
+  return null;
+}
+
+function loadJsonConfig(): Partial<Config> {
+  // First, search up from cwd to find nearest config
+  const ancestorConfig = findConfigInAncestors(process.cwd());
+  if (ancestorConfig) {
+    try {
+      const content = readFileSync(ancestorConfig, "utf-8");
+      return JSON.parse(content);
+    } catch {}
+  }
+
+  // Fall back to home directory
+  const homeConfig = join(homedir(), CONFIG_FILENAME);
+  if (existsSync(homeConfig)) {
+    try {
+      const content = readFileSync(homeConfig, "utf-8");
+      return JSON.parse(content);
+    } catch {}
   }
 
   return {};