@uniglot/wont-let-you-see 0.3.1 → 1.0.0

package/dist/index.js

@@ -349,6 +349,9 @@ var plugin = async (input) => {
         return;
       }
       output.output = mask(hookInput.sessionID, output.output);
+      if (output.metadata?.output) {
+        output.metadata.output = mask(hookInput.sessionID, output.metadata.output);
+      }
     },
     "chat.message": async (hookInput, output) => {
       for (const part of output.parts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniglot/wont-let-you-see",
-  "version": "0.3.1",
+  "version": "1.0.0",
   "description": "OpenCode plugin that masks sensitive cloud infrastructure data (AWS, Kubernetes) from LLMs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/__tests__/masker.test.ts

@@ -172,7 +172,8 @@ describe("masker", () => {
     });
 
     it("should not mask ARN when both eks-cluster and arn are revealed", () => {
-      process.env.WONT_LET_YOU_SEE_REVEALED_PATTERNS = "eks-cluster,arn";
+      process.env.WONT_LET_YOU_SEE_REVEALED_PATTERNS =
+        "eks-cluster,arn,phone-us";
       resetConfig();
 
       const input =

package/src/__tests__/patterns.test.ts

@@ -210,14 +210,6 @@ describe("Kubernetes Patterns", () => {
     resetPatternCache();
   });
 
-  describe("Service Account Token", () => {
-    it("should match JWT format", () => {
-      const jwt =
-        "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZWZhdWx0Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImRlZmF1bHQtdG9rZW4tYWJjZGUiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGVmYXVsdCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjEyMzQ1Njc4LTEyMzQtMTIzNC0xMjM0LTEyMzQ1Njc4OTAxMiIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpkZWZhdWx0OmRlZmF1bHQifQ.signature";
-      expect(getPattern("k8s-token").test(jwt)).toBe(true);
-    });
-  });
-
   describe("Node Names", () => {
     it("should match AWS node name", () => {
       expect(
@@ -334,8 +326,8 @@ describe("loadPatterns", () => {
 
   it("should load Kubernetes patterns", () => {
     const patterns = loadPatterns();
-    const k8sTokenPattern = patterns.find((p) => p.name === "k8s-token");
-    expect(k8sTokenPattern).toBeDefined();
+    const k8sNodePattern = patterns.find((p) => p.name === "k8s-node");
+    expect(k8sNodePattern).toBeDefined();
   });
 
   it("should load common patterns", () => {

package/src/index.ts

@@ -30,7 +30,16 @@ export const plugin: Plugin = async (input: PluginInput): Promise<Hooks> => {
         return;
       }
 
+      // Mask output sent to LLM
       output.output = mask(hookInput.sessionID, output.output);
+
+      // Also mask TUI display (metadata.output is used as fallback in TUI rendering)
+      if (output.metadata?.output) {
+        output.metadata.output = mask(
+          hookInput.sessionID,
+          output.metadata.output,
+        );
+      }
     },
 
     "chat.message": async (hookInput, output) => {