redact

type Engine ¶

type Engine struct {
	// contains filtered or unexported fields
}

Engine handles sensitive data detection and replacement

func NewEngine(s *session.Manager, prefix string) *Engine

func (e *Engine) AddBuiltin(name string) error

func (e *Engine) AddExclude(pattern string)

func (e *Engine) AddKeyword(keyword, category string)

func (e *Engine) AddRegex(pattern, category string) error

func (e *Engine) Redact(input []byte) ([]byte, int)

func (e *Engine) RedactWithMatches(input []byte) ([]byte, []Match)

type Match ¶

type Match struct {
	Start    int
	End      int
	Original string
	Category string
	// Placeholder is the generated placeholder (e.g. "__VG_EMAIL_...").
	// It is only generated during replacement; used for audit/inspection displays that need to show redaction hits.
	Placeholder string
}

Match represents a detected sensitive data match

type Redactor ¶ added in v0.2.0

type Redactor interface {
	RedactWithMatches(input []byte) (out []byte, matches []Match)
}

Redactor is the minimal interface for a redaction engine (used by the proxy to switch implementations).

Contract: implementations must populate matches with Original/Placeholder for audit display and later restore.