feat(logs): redact PII from workflow logs via configurable rules

apps/sim/app/api/organizations/[id]/data-retention/route.ts

@@ -1,37 +1,40 @@
 import { AuditAction, AuditResourceType, recordAudit } from '@sim/audit'
 import { db } from '@sim/db'
+import type { DataRetentionSettings } from '@sim/db/schema'
 import { member, organization } from '@sim/db/schema'
 import { createLogger } from '@sim/logger'
 import { and, eq } from 'drizzle-orm'
 import { type NextRequest, NextResponse } from 'next/server'
-import { updateOrganizationDataRetentionContract } from '@/lib/api/contracts/organization'
+import {
+ type OrganizationRetentionValues,
+ updateOrganizationDataRetentionContract,
+} from '@/lib/api/contracts/organization'
 import { parseRequest, validationErrorResponse } from '@/lib/api/server'
 import { getSession } from '@/lib/auth'
-import {
- CLEANUP_CONFIG,
- type OrganizationRetentionSettings,
-} from '@/lib/billing/cleanup-dispatcher'
+import { CLEANUP_CONFIG } from '@/lib/billing/cleanup-dispatcher'
 import { isOrganizationOnEnterprisePlan } from '@/lib/billing/core/subscription'
 import { isBillingEnabled } from '@/lib/core/config/env-flags'
 import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
 
 const logger = createLogger('DataRetentionAPI')
 
-function enterpriseDefaults(): OrganizationRetentionSettings {
+function enterpriseDefaults(): OrganizationRetentionValues {
  return {
  logRetentionHours: CLEANUP_CONFIG['cleanup-logs'].defaults.enterprise,
  softDeleteRetentionHours: CLEANUP_CONFIG['cleanup-soft-deletes'].defaults.enterprise,
  taskCleanupHours: CLEANUP_CONFIG['cleanup-tasks'].defaults.enterprise,
+ piiRedaction: null,
  }
 }
 
 function normalizeConfigured(
- settings: Partial<OrganizationRetentionSettings> | null | undefined
-): OrganizationRetentionSettings {
+ settings: DataRetentionSettings | null | undefined
+): OrganizationRetentionValues {
  return {
  logRetentionHours: settings?.logRetentionHours ?? null,
  softDeleteRetentionHours: settings?.softDeleteRetentionHours ?? null,
  taskCleanupHours: settings?.taskCleanupHours ?? null,
+ piiRedaction: settings?.piiRedaction?.rules ? { rules: settings.piiRedaction.rules } : null,
  }
 }
 
@@ -152,7 +155,7 @@ export const PUT = withRouteHandler(
  }
 
  const current = normalizeConfigured(currentOrg.dataRetentionSettings)
- const merged: OrganizationRetentionSettings = { ...current }
+ const merged: DataRetentionSettings = { ...current }
  if (body.logRetentionHours !== undefined) {
  merged.logRetentionHours = body.logRetentionHours
  }
@@ -162,6 +165,9 @@ export const PUT = withRouteHandler(
  if (body.taskCleanupHours !== undefined) {
  merged.taskCleanupHours = body.taskCleanupHours
  }
+ if (body.piiRedaction !== undefined) {
+ merged.piiRedaction = body.piiRedaction
+ }
 
  const [updated] = await db
  .update(organization)