shadowgraph_redact
Generate a redacted export of store data, replacing secret-like keys and values with placeholders to prevent secrets from appearing in audit trails or shared files.
Instructions
Return a redacted copy of the store export, with secret-looking keys and values replaced. shadowgraph_backup writes an unredacted snapshot to disk, shadowgraph_purge actually removes data. Reads only, writes no file, and redacts journal payloads too, so a secret cannot survive in the audit trail.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project | No | Limit the export to one project. Omit to redact everything. | |
| patterns | No | Case-insensitive regular expressions matched against key names, replacing the default set (password, secret, token, api[-_]?key, authorization, private[-_]?key). Supplying this replaces the defaults rather than adding to them; idempotency keys, evidence references, and signatures are always redacted. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| facts | Yes | Observed facts with their provenance claims. | |
| events | Yes | Compatibility event log. | |
| journal | Yes | The append-oriented journal. | |
| records | Yes | Decisions, attempts, and memories. | |
| revision | Yes | Concurrency token of the state this export was taken from. | |
| relations | Yes | Relationships. | |
| journalSeq | Yes | Highest journal sequence issued. | |
| idempotency | Yes | Retry-key entries, each { key, value }. | |
| journalEpoch | Yes | First replayable sequence, or null when nothing is replayable. | |
| reviewSignals | Yes | Persisted review signals. | |
| schemaVersion | Yes | Storage schema version of this export. |