zerodegress/dsh-model-redactor

Install

The package ships `cordis.patch.yml` and declares `dsh.bundle.patch` for bundle
profiles.

## Configuration

| Field | Type | Default | Description |
| --- | --- | --- | --- |
| `enabled` | `boolean` | `true` | Master switch. |
| `replacement` | `string` | `[REDACTED]` | Replacement text (1..128 chars). Must not itself match a built-in secret pattern. |
| `customRegexes` | `Array<{ pattern, flags?, replacement? }>` | `[]` | Extra regex rules. |
| `customWords` | `Array<string \| { word, replacement? }>` | `[]` | Exact-word rules. |

Built-in rules are fixed and cannot be disabled. They cover OpenAI-style `sk-`,
`Bearer`, `Basic`, GitHub tokens, Slack tokens, JWTs, assignment patterns,
PEM private-key blocks, and AWS `AKIA` access key IDs.

## Build and test

Add zerodegress/dsh-model-redactor to your DSH config (web profile) to enable.