Add secrets detection tool pre-invoke hook (#94)

* Add secrets detection tool pre-invoke hook

Signed-off-by: lucarlig <luca.carlig@ibm.com>

* Strengthen secrets detection mutation coverage

Signed-off-by: lucarlig <luca.carlig@ibm.com>

* Address secrets hook review feedback

Signed-off-by: lucarlig <luca.carlig@ibm.com>

* Cover resource findings without redaction

Signed-off-by: lucarlig <luca.carlig@ibm.com>

* Handle copy-on-write dict scanning

Signed-off-by: lucarlig <luca.carlig@ibm.com>

---------

Signed-off-by: lucarlig <luca.carlig@ibm.com>

Author: lucarlig

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "secrets_detection"
-version = "0.3.1"
+version = "0.3.2"
 edition.workspace = true
 authors.workspace = true
 license.workspace = true

plugins/rust/python-package/secrets_detection/Cargo.toml

@@ -1,9 +1,10 @@
 description: "Detect likely credentials and secrets in prompt input, tool output, and resource content"
 author: "ContextForge Contributors"
-version: "0.3.1"
+version: "0.3.2"
 kind: "cpex_secrets_detection.secrets_detection.SecretsDetectionPlugin"
 available_hooks:
   - "prompt_pre_fetch"
+  - "tool_pre_invoke"
   - "tool_post_invoke"
   - "resource_post_fetch"
 default_configs:

plugins/rust/python-package/secrets_detection/cpex_secrets_detection/plugin-manifest.yaml

@@ -20,6 +20,9 @@ def __init__(self, config) -> None:
     async def prompt_pre_fetch(self, payload, context):
         return self._core.prompt_pre_fetch(payload, context)
 
+    async def tool_pre_invoke(self, payload, context):
+        return self._core.tool_pre_invoke(payload, context)
+
     async def tool_post_invoke(self, payload, context):
         return self._core.tool_post_invoke(payload, context)
 

plugins/rust/python-package/secrets_detection/cpex_secrets_detection/secrets_detection.py

@@ -12,6 +12,7 @@ __all__ = [
 class SecretsDetectionPluginCore:
     def __new__(cls, config: typing.Any) -> SecretsDetectionPluginCore: ...
     def prompt_pre_fetch(self, payload: typing.Any, _context: typing.Any) -> typing.Any: ...
+    def tool_pre_invoke(self, payload: typing.Any, _context: typing.Any) -> typing.Any: ...
     def tool_post_invoke(self, payload: typing.Any, _context: typing.Any) -> typing.Any: ...
     def resource_post_fetch(self, payload: typing.Any, _context: typing.Any) -> typing.Any: ...