@zedtech/zedkit-server

Redact secrets before logging

Deep-redact secrets and PII from any value before it reaches the logs.

At a glance

Who: Server developers who log objects that may contain tokens or PII.
What: Deep-redact secrets and PII from any value before it reaches the logs.
Use when: On every object logged outside a trusted debug session.
Avoid when: When you need the real values — debug locally, never in shared logs.
See also: Ship request logs without leaking credentials

Install

pnpm add @zedtech/zedkit-server

Latest: 1.3.1 (via changesets).

Example

Usage

import { redactValue } from "@zedtech/zedkit-server";
logger.info(redactValue({ user, token, headers }));

// Add your own credential shape (replaces every match, before bearer/basic).
const valuePatterns = [{ pattern: /\bsk_[A-Za-z0-9_-]{8,}\b/, replacement: "[redacted-key]" }];
logger.info(redactValue(record, undefined, { valuePatterns }));

Wraps: (none)

Rate-limit calls per key

In-process per-key rate limiting with a two-line check.

Retry with exponential backoff

Compute exponential-backoff delays with jitter from the attempt number.

On this page

At a glance Install Example