@wrongstack/plugins 0.306.3 → 0.306.4

package/dist/index.js

@@ -16033,7 +16033,29 @@ var CREDENTIAL_PATTERNS = [
     regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
   },
   { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g }
+  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
+  {
+    // Credentials serialised as JSON, keyed rather than prefixed. Every other
+    // entry in this table recognises a credential by its SHAPE (`ghp_`, `sk-`,
+    // `eyJ`), which means a key with no distinctive prefix — Azure, a
+    // self-hosted gateway, an Anthropic/Codex OAuth token — was invisible to
+    // both surfaces. `prompt-firewall` guards the outgoing provider request, so
+    // this is what stops a JSON-shaped tool result carrying such a value to a
+    // third party.
+    //
+    // The key is matched in a LOOKBEHIND, so the reported match is the secret
+    // itself and the pattern keeps zero capturing groups — `secret-scanner`
+    // maps a combined-regex group index back to the pattern that fired, and an
+    // inner group would shift that mapping (see the style note above, enforced
+    // by credential-pattern-parity.test.ts).
+    //
+    // Mirrors `json_credential_key` in
+    // `@wrongstack/core` → `src/security/secret-scrubber.ts`. Keep the two key
+    // lists in step; the core side additionally preserves the key name when it
+    // rewrites, which is why it is written with capture groups instead.
+    type: "json_credential_key",
+    regex: /(?<="[A-Za-z0-9_]{0,64}(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s{0,8}:\s{0,8}")[^"\\]{8,512}(?=")/gi
+  }
 ];
 function cloneCredentialPatterns() {
   return CREDENTIAL_PATTERNS.map((p) => ({

package/dist/prompt-firewall.js

@@ -99,7 +99,29 @@ var CREDENTIAL_PATTERNS = [
     regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
   },
   { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g }
+  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
+  {
+    // Credentials serialised as JSON, keyed rather than prefixed. Every other
+    // entry in this table recognises a credential by its SHAPE (`ghp_`, `sk-`,
+    // `eyJ`), which means a key with no distinctive prefix — Azure, a
+    // self-hosted gateway, an Anthropic/Codex OAuth token — was invisible to
+    // both surfaces. `prompt-firewall` guards the outgoing provider request, so
+    // this is what stops a JSON-shaped tool result carrying such a value to a
+    // third party.
+    //
+    // The key is matched in a LOOKBEHIND, so the reported match is the secret
+    // itself and the pattern keeps zero capturing groups — `secret-scanner`
+    // maps a combined-regex group index back to the pattern that fired, and an
+    // inner group would shift that mapping (see the style note above, enforced
+    // by credential-pattern-parity.test.ts).
+    //
+    // Mirrors `json_credential_key` in
+    // `@wrongstack/core` → `src/security/secret-scrubber.ts`. Keep the two key
+    // lists in step; the core side additionally preserves the key name when it
+    // rewrites, which is why it is written with capture groups instead.
+    type: "json_credential_key",
+    regex: /(?<="[A-Za-z0-9_]{0,64}(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s{0,8}:\s{0,8}")[^"\\]{8,512}(?=")/gi
+  }
 ];
 function cloneCredentialPatterns() {
   return CREDENTIAL_PATTERNS.map((p) => ({

package/dist/secret-scanner.js

@@ -99,7 +99,29 @@ var CREDENTIAL_PATTERNS = [
     regex: /postgres(?:ql)?:\/\/(?:[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+|[^&\s?"'`#]{1,2048}\?(?:(?!(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=)[^&\s#"'`]{1,256}&){0,32}(?:p|%70)(?:a|%61)(?:s|%73)(?:s|%73)(?:w|%77)(?:o|%6[fF])(?:r|%72)(?:d|%64)=[^&\s#"'`]{1,4096})/g
   },
   { type: "mysql_uri", regex: /mysql:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
-  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g }
+  { type: "redis_uri", regex: /redis:\/\/[^\s:/@"'`]*:[^\s/@"'`]+@[^\s"'`]+/g },
+  {
+    // Credentials serialised as JSON, keyed rather than prefixed. Every other
+    // entry in this table recognises a credential by its SHAPE (`ghp_`, `sk-`,
+    // `eyJ`), which means a key with no distinctive prefix — Azure, a
+    // self-hosted gateway, an Anthropic/Codex OAuth token — was invisible to
+    // both surfaces. `prompt-firewall` guards the outgoing provider request, so
+    // this is what stops a JSON-shaped tool result carrying such a value to a
+    // third party.
+    //
+    // The key is matched in a LOOKBEHIND, so the reported match is the secret
+    // itself and the pattern keeps zero capturing groups — `secret-scanner`
+    // maps a combined-regex group index back to the pattern that fired, and an
+    // inner group would shift that mapping (see the style note above, enforced
+    // by credential-pattern-parity.test.ts).
+    //
+    // Mirrors `json_credential_key` in
+    // `@wrongstack/core` → `src/security/secret-scrubber.ts`. Keep the two key
+    // lists in step; the core side additionally preserves the key name when it
+    // rewrites, which is why it is written with capture groups instead.
+    type: "json_credential_key",
+    regex: /(?<="[A-Za-z0-9_]{0,64}(?:apiKey|api_key|token|secret|password|authorization|bearer|private_key|access_token|refresh_token|client_secret)"\s{0,8}:\s{0,8}")[^"\\]{8,512}(?=")/gi
+  }
 ];
 function cloneCredentialPatterns() {
   return CREDENTIAL_PATTERNS.map((p) => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/plugins",
-  "version": "0.306.3",
+  "version": "0.306.4",
   "description": "Official WrongStack collection of focused plugins for code quality, security, observability, planning, and agent coordination",
   "license": "MIT",
   "author": "ECOSTACK TECHNOLOGY OÜ",
@@ -303,8 +303,8 @@
     "vitest": "^4.1.10"
   },
   "dependencies": {
-    "@wrongstack/tools": "0.306.3",
-    "@wrongstack/core": "0.306.3"
+    "@wrongstack/core": "0.306.4",
+    "@wrongstack/tools": "0.306.4"
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",