qubit-redact 0.5.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

// =============================================================================
//    Copyright (c) 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Batch-only process-command redaction.

use std::ffi::OsStr;

use super::admitted_command_items::AdmittedCommandItems;
use super::admitted_environment_pairs::AdmittedEnvironmentPairs;
use crate::RedactionReason;
use crate::formats::argv::ArgvItem;
use crate::formats::argv::redaction::redact_heuristically_with_policy;
use crate::formats::env::redaction::redact_os_pairs_with_policy;
use crate::runtime::BatchSession;
use crate::runtime::OperationSink;
use crate::runtime::RedactionHandle;
use crate::runtime::runtime_session::RuntimeSession;

/// Redacts one process command as a batch item.
pub(crate) fn redact_command<'arguments, 'variables, A, E>(
    session: &mut BatchSession,
    program: &'arguments OsStr,
    arguments: A,
    variables: E,
) -> RedactionHandle
where
    A: IntoIterator<Item = ArgvItem<'arguments>>,
    E: IntoIterator<Item = (&'variables OsStr, &'variables OsStr)>,
{
    if session.is_output_exhausted() {
        return session.stage_exhausted_handle();
    }
    if !session.admit_format_node(1) {
        return session.stage_accounted_text(String::new());
    }
    let policy = session.policy().clone();
    let remaining = session.remaining_output_bytes();
    let (argv, command_failed) = {
        let mut command = AdmittedCommandItems {
            session,
            program: Some(ArgvItem::plain(program)),
            arguments: arguments.into_iter(),
            failed: false,
        };
        let output = redact_heuristically_with_policy(&policy, &mut command, remaining);
        (output, command.failed)
    };
    if command_failed || !session.admit_format_node(1) {
        return session.stage_accounted_text(String::new());
    }
    let remaining = remaining.saturating_sub(argv.text().len());
    if remaining == 0 {
        return session.stage_rendered_operation(
            argv.merge(OperationSink::exhausted("", RedactionReason::OutputLimitReached).finish()),
        );
    }
    let (environment, environment_failed) = {
        let mut pairs = AdmittedEnvironmentPairs {
            session,
            variables: variables.into_iter(),
            failed: false,
            marker: std::marker::PhantomData,
        };
        let output = redact_os_pairs_with_policy(&policy, &mut pairs, remaining);
        (output, pairs.failed)
    };
    if environment_failed {
        return session.stage_accounted_text(String::new());
    }
    session.stage_rendered_operation(argv.merge(environment))
}