Documentation / @zerotal/devtools / index / RedactionOptions

Interface: RedactionOptions

Defined in: devtools/src/redaction.ts:18

Query-binding redaction.

A trace does not stay on screen: it is streamed to the browser and written to .zerotal/devtools.sqlite, where it sits for a day. Bindings are the request's actual values — the password on a registration, a reset token, a session payload, every customer email a listing selects by. An ephemeral dev panel and a plaintext file with a day's worth of credentials in it are different risks, so the values are masked by default and you opt individual columns back in.

Matching is on the column each binding belongs to, recovered by pairing the SQL's placeholders with the identifiers around them. When a binding cannot be attributed to a column — a raw expression, a dialect this does not parse — it is masked, because guessing wrong in the other direction is what writes a password to disk.

Properties

enabled?

optional enabled?: boolean

Defined in: devtools/src/redaction.ts:23

Turn masking off entirely. Only reasonable when you are debugging the values themselves and nothing sensitive is in the database.

allow?

optional allow?: string[]

Defined in: devtools/src/redaction.ts:28

Column names whose values are safe to show in full. Matched case-insensitively against the column each binding belongs to.

deny?

optional deny?: string[]

Defined in: devtools/src/redaction.ts:32

Extra column names to mask, added to the built-in list.