Interface RedactOptions

src/security/redact.ts:195–210

}

export interface RedactOptions {
  /** Replaces the default column list entirely. */
  columns?: readonly string[];
  /** Appended to the default column list. Ignored when `columns` is provided. */
  extraColumns?: readonly string[];
  /** Additional regex patterns tested against the lowercased column name. */
  columnPatterns?: readonly RegExp[];
  /**
   * When true (the default), string values that contain a valid JSON object or
   * array are parsed and recursively redacted before being re-serialised. This
   * catches PII inside audit-table columns like `new_value` / `old_value` whose
   * column name alone does not trigger a PII heuristic. Set to false to opt out
   * if JSON parsing overhead is a concern.
   */
  parseJsonStrings?: boolean;
}

/**
 * Recursively walk arrays/objects and redact detected PII in place (returning