qubit-redact 0.3.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

// =============================================================================
//    Copyright (c) 2025 - 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Complete immutable state shared by redaction policy clones.

use std::collections::{
    BTreeMap,
    BTreeSet,
};

use crate::policy::{
    FieldNameMatching,
    MaskingPolicy,
    Sensitivity,
    UnknownFieldPolicy,
};

/// Complete immutable state shared by policy clones.
#[derive(Debug, Clone, PartialEq, Eq)]
pub(in crate::policy) struct RedactionPolicyInner {
    /// Canonical sensitive fields and their levels.
    pub(in crate::policy) sensitive: BTreeMap<String, Sensitivity>,
    /// Canonical fields allowed only as complete names.
    pub(in crate::policy) allow_exact: BTreeSet<String>,
    /// Canonical fields allowed at exact and token-suffix boundaries.
    pub(in crate::policy) allow_suffix: BTreeSet<String>,
    /// Candidate-generation breadth for sensitive-field matching.
    pub(in crate::policy) matching: FieldNameMatching,
    /// Fallback behavior for fields with no matching rule.
    pub(in crate::policy) unknown_field_policy: UnknownFieldPolicy,
    /// Value masks selected by sensitivity level.
    pub(in crate::policy) masking: MaskingPolicy,
}