philiprehberger-log_filter 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d87e6f862d6fe0d39c516f49c18c2aecf3917d28fbfb9a074a0f9a06ce627c33
-  data.tar.gz: c3e42d136400a6a0c54f8ff7b342a9340c0b34171e368718236c1043858a32bf
+  metadata.gz: 1ded3c219f5f5509ea3cf4813493cd6450dc9cdf7a2ecda8e670e85aff637143
+  data.tar.gz: 94e643e2a2127d90ab99c910dd5e0c6052599e2bd15004f387d64e8b60ca0cc0
 SHA512:
-  metadata.gz: 884ed562f6e2f290dcb92689273bc9785db1a7523b3da0c139e70e10c774e9558fc0840e8d1664ffacd48a2706a2b037cf0c4ac7cb9d71cbfdc76e9c03db8253
-  data.tar.gz: da68ea62830a8e198194bd13daaaf9a4604fcec21284597f0b21e2de13bb32d2f1e493b349a2a360e5e07368814c2794d8f24055e025dccaaffa882aaa3d1b65
+  metadata.gz: 9de7b0858d9b8af17a4723625f6cc60a71d049c4f927759f243f24e61d8598c2f3d08eec20a8d3126a3de4feb4227251037eff4db28587f2e90e94f9d8b7f2b5
+  data.tar.gz: 2d8436630ec16af0cd964e01aca8c075b9609aced3236eceb15713779d43a930f5c2502b28836fd0bffc0ed76a88d8f77d48232d66a383464950ede2051f4675

data/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-04-30
+
+### Added
+- `Presets.pii` — redacts emails, US Social Security Numbers, and 13–19 digit credit-card-shaped numbers with `[REDACTED]`
+- `Presets.secrets` — redacts `Bearer` tokens, `api_key=`/`access_token=` parameters, and AWS-style access key IDs (`AKIA…`) with `[REDACTED]`
+
 ## [0.3.0] - 2026-04-17
 
 ### Added

data/README.md

@@ -138,6 +138,22 @@ pipeline.apply("login password=abc123")           # => "login password=[REDACTED
 
 The chained filter tracks its own `stats` independently of the source filters.
 
+### PII and Secret Redaction Presets
+
+```ruby
+require "philiprehberger/log_filter"
+
+pii = Philiprehberger::LogFilter::Presets.pii
+pii.apply("login user=alice@example.com")     # => "login user=[REDACTED]"
+pii.apply("SSN 123-45-6789 lookup")           # => "SSN [REDACTED] lookup"
+pii.apply("card 4242424242424242 charged")    # => "card [REDACTED] charged"
+
+secrets = Philiprehberger::LogFilter::Presets.secrets
+secrets.apply("Authorization: Bearer abc.def-_xyz")  # => "Authorization: Bearer [REDACTED]"
+secrets.apply("GET /v1?api_key=sk_live_xyz123 200")  # => "GET /v1?api_key=[REDACTED] 200"
+secrets.apply("AKIAIOSFODNN7EXAMPLE in env")          # => "[REDACTED] in env"
+```
+
 ### Filter Statistics
 
 ```ruby
@@ -175,6 +191,8 @@ filter.stats  # => { dropped: 0, passed: 0, replaced: 0, sampled: 0 }
 | `Presets.health_check` | Filter dropping health-check paths |
 | `Presets.assets` | Filter dropping static-asset requests |
 | `Presets.bots` | Filter dropping bot/crawler traffic |
+| `Presets.pii` | Filter redacting emails, SSNs, and credit-card-shaped numbers with `[REDACTED]` |
+| `Presets.secrets` | Filter redacting Bearer tokens, `api_key=`/`access_token=` values, and AWS access keys |
 | `LogFilter.wrap(logger, filter)` | Convenience wrapper constructor |
 | `LogFilter.health_check_filter` | Shortcut for `Presets.health_check` |
 | `LogFilter.asset_filter` | Shortcut for `Presets.assets` |

data/lib/philiprehberger/log_filter/presets.rb

@@ -25,6 +25,32 @@ module Philiprehberger
       def self.bots
         Filter.new.drop(/bot|crawler|spider|slurp|googlebot|bingbot/i)
       end
+
+      # Filter that redacts common PII patterns from log lines.
+      #
+      # Replaces email addresses, US Social Security Numbers, and 13–19 digit
+      # credit-card-shaped numbers with `[REDACTED]`.
+      #
+      # @return [Filter] a filter replacing PII with `[REDACTED]`
+      def self.pii
+        Filter.new
+              .replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i, '[REDACTED]')
+              .replace(/\b\d{3}-\d{2}-\d{4}\b/, '[REDACTED]')
+              .replace(/\b\d(?:[ -]?\d){12,18}\b/, '[REDACTED]')
+      end
+
+      # Filter that redacts common secret patterns from log lines.
+      #
+      # Replaces Bearer tokens, `api_key=...`/`api-key=...` values, and
+      # AWS-style access key IDs with `[REDACTED]`.
+      #
+      # @return [Filter] a filter replacing secrets with `[REDACTED]`
+      def self.secrets
+        Filter.new
+              .replace(/Bearer\s+[A-Za-z0-9._-]+/, 'Bearer [REDACTED]')
+              .replace(/\b(api[_-]?key|access[_-]?token)=([A-Za-z0-9._-]+)/i, '\1=[REDACTED]')
+              .replace(/\bAKIA[0-9A-Z]{16}\b/, '[REDACTED]')
+      end
     end
   end
 end

data/lib/philiprehberger/log_filter/version.rb

@@ -2,6 +2,6 @@
 
 module Philiprehberger
   module LogFilter
-    VERSION = '0.3.0'
+    VERSION = '0.4.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: philiprehberger-log_filter
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Philip Rehberger
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-18 00:00:00.000000000 Z
+date: 2026-05-01 00:00:00.000000000 Z
 dependencies: []
 description: Pattern-based log filtering — drop or transform log lines matching rules.
   Includes preset filters for health checks, static assets, and bot traffic.