[thekevinm]

Summary

Admin screens for the commercial df-masking package (GOLD). The backend is in the private dreamfactorysoftware/df-masking repository (PR #1 there).

• Security > Data Masking
  • First run and scan progress.
  • Columns review with the evidence for each verdict.
  • Masks, detection rules, real-value access with expiry, and activity.
  • The Off / Preview / On mode switch.
• Security > Compliance
  • HIPAA, PCI DSS, GLBA, CJIS, GDPR, SOC 2 and ISO 27001 baselines.
  • Each has Apply, a live checklist and an evidence export.
• Data Explorer: one-line notes when columns are masked, or when a filter or sort on a masked column was dropped.
• Security overview: a Data Masking status card.
• Command palette: new keywords (pii, phi, pci, mask).

Paywall

Both pages use the standard <df-paywall> whenever the df-masking resources are missing, as Rate Limiting and Scheduler do. That covers open source, Silver, and GOLD without the package. On open source and Silver they are also locked in the menu.

Testing

• npm run test:ci: 57/57 suites and 596/596 tests pass.
• Full npx jest: 0 new failures. The same 23 suites already fail on develop.
• ng build -c production passes. prettier is clean. eslint shows no new errors; the touched files have the same counts as on develop.
• Playwright suites are opt-in (e2e/_data-masking-*, ignored by the main config):
  • Mocked screens: 34/34, plus r2, r3 and r4: 18/18, 7/7 and 3/3.
  • Live journey 10/10 and live audit 20/20 against a GOLD 7.7.1 instance with the package.
• Checked live on three instances:
  • GOLD without the package: the paywall matches the Scheduler paywall in text, DOM and network calls.
  • GOLD with the package: the full pages load and no paywall appears.
  • Open source: the paywall and lock icons appear.

dist is not rebuilt. Merge together with the df-masking package.

https://claude.ai/code/session_01D3YUvzLr35XYve3pZwT3SW