[fylorn]

What this changes

thinkwatch-core moves to v0.85.0, which grows the shared redaction catalog from 30 built-in rules to 120 in 20 groups (more prefixed credentials, credentials by position, cryptocurrency keys, and personal information). The gateway now recognises the API keys saved for its providers by value, and the console shows rule names and descriptions as core writes them, in English and Chinese.

Why

Many providers' keys have no prefix (32 hex digits, UUIDs), so no pattern rule can find them, yet the gateway knows each one exactly. Keeping a second copy of rule names in the console meant every new core rule showed up here as a bare id.

Details

Saved upstream keys

• Collected from each active provider's credential headers (Authorization with the scheme left out, x-api-key, api-key, x-goog-api-key, and custom headers whose name says key/token/secret/auth/password) and a Bedrock provider's secret access key; values shorter than 12 characters are left out. Configuration headers such as anthropic-version are not collected.
• Built when the providers load (startup, provider CRUD, the cross-instance router reload); the guards and the at-rest redactor are recompiled only when the list changes. One compiled set (tw_guard Saved) is shared by outbound redaction, the at-rest redactor, dangerous commands ("credential sent to an unknown host" allows each key to its provider's host) and the console trial (trial::run_with).
• Audit: the thinkwatch-saved-secret event carries sources: [{"kind": "upstream-key", "name": <provider>}] from core's Finding::source, and never a value, masked or not. Per-rule aggregation is unchanged.

Console

• Rule names, reasons, descriptions (name_zh, why_zh, about / about_zh) and group names (kinds) come from the rule view. The console's own tables (contentSecurity.kind, check, redactRule, contentRule, contentWhy, toolRule, cardNetwork) and the per-matcher redaction descriptions are removed; check-i18n.mjs is updated accordingly.
• Security-log rows and trial hits look the rule name up by id. A saved-key hit shows the provider whose key it was. The rule search also matches prefixes, field names and descriptions.

Other

• The one-time conversion of the old PII pattern list switches on or off only the four personal-information rules that list could express; new personal rules keep their factory setting.
• CHANGELOG: entry under Unreleased, including the "Read before upgrading" notes (new credential rules ship on; some keys now report under their own rule id and the metric's kind label follows the new groups).

How it was verified

• cargo fmt --check, cargo clippy --workspace --all-targets: clean.
• Unit tests: 900 passed. New tests cover collection (credential vs. configuration headers, scheme stripping, short values, duplicates, Bedrock secret, Debug without values), matching a saved key as written and JSON-escaped with its source named, and per-rule audit aggregation with sources and no masked values.
• Integration suite against fresh Postgres, Redis and ClickHouse containers: 482 passed. The new provider_credentials_reach_redaction_when_the_providers_load covers collection with the provider's host, guard recompilation, the key replaced on the wire and restored for the caller, the trial reporting thinkwatch-saved-secret, no recompilation when nothing changed, and removal when the provider is deactivated.
• Web: check-i18n, eslint, vitest (202 passed), tsc -b, vite build.

🤖 Generated with Claude Code