Documentation / @super-line/core / SUPER_LINE_REDACT_FIELDS

Variable: SUPER_LINE_REDACT_FIELDS

const SUPER_LINE_REDACT_FIELDS: RegExp[]

Defined in: packages/core/src/log.ts:19

Field-name patterns redacted by default (matched at any nesting depth). Curated for super-line rather than LogTape's broad DEFAULT_REDACT_FIELDS, whose /auth/i would strip the very fields we log for diagnostics (authMethod, authId) and whose bare /key/i would strip nodeKey. This targets actual secret-bearing names — plaintext passwords, minted tokens/keys, JWEs, credentials, PII email — while letting identifiers through. (Per ADR-0017 we also never attach a raw minted secret as its own prop; this is defense-in-depth for the rich objects — handshakes, rows — that a debug log may carry.)