qubit-redact 0.9.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

// =============================================================================
//    Copyright (c) 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Batch-only JSON redaction.

use serde_json::Value;

use super::JsonAdmissionError;
use super::json_redaction_writer::admit_json_text_value;
use super::json_redaction_writer::invalid_json_output;
use super::json_redaction_writer::passthrough_json_text_with_limit;
use super::json_redaction_writer::redact_json_value_with_limit;
use crate::runtime::BatchSession;
use crate::runtime::RedactionHandle;
use crate::runtime::runtime_session::RuntimeSession;

/// Redacts JSON text as a batch item.
pub(crate) fn redact_text(session: &mut BatchSession, text: &str) -> RedactionHandle {
    if session.is_output_exhausted() {
        return session.stage_exhausted_handle();
    }
    if !session.admit_input(text.len()) {
        return session.stage_rendered_operation(
            crate::runtime::OperationSink::truncated("<truncated>", crate::RedactionReason::InputLimitReached).finish(),
        );
    }
    let result = if session.policy().is_disabled() {
        passthrough_json_text_with_limit(text, session.remaining_output_bytes())
    } else {
        match admit_json_text_value(session, text) {
            Ok(value) => redact_json_value_with_limit(session.policy(), &value, session.remaining_output_bytes()),
            Err(JsonAdmissionError::Invalid) => invalid_json_output(session.policy(), session.remaining_output_bytes()),
            Err(JsonAdmissionError::Limit) => {
                return session.stage_accounted_text("<truncated>");
            }
        }
    };
    session.stage_rendered_operation(result)
}

/// Redacts a parsed JSON value as a batch item.
pub(crate) fn redact_value(session: &mut BatchSession, value: &Value) -> RedactionHandle {
    if session.is_output_exhausted() {
        session.stage_exhausted_handle()
    } else if !session.admit_json_value(value) {
        session.stage_accounted_text("<truncated>")
    } else {
        let result = redact_json_value_with_limit(session.policy(), value, session.remaining_output_bytes());
        session.stage_rendered_operation(result)
    }
}