Module masking 

Sensitive data masking for log output. Sensitive data masking engine for structured log output.

Provides a Masker trait (adapter pattern) and a DefaultMasker implementation that redacts common secrets, PII, and credentials from log output before it reaches any sink.

Masking is on by default — callers must explicitly disable it via MaskingConfig::enabled.

Examples

use rskit_logging::masking::{DefaultMasker, Masker, MaskingConfig};

let masker = DefaultMasker::default();
assert_eq!(masker.mask_value("password", "hunter2"), "[REDACTED]");
assert_eq!(masker.mask_value("name", "Alice"), "Alice");

Structs

DefaultMasker

Production-ready masker with common patterns for PII and secrets.

MaskingConfig

Configuration for sensitive data masking.

MaskingMakeWriter

A MakeWriter wrapper that masks sensitive data in log output.

MaskingWriter

A writer that buffers output and applies masking on flush / drop.

Traits

Masker

Trait for masking sensitive values in log output.

Functions

mask_value

Convenience: mask a single value using a default masker.