Skip to main content

MaskMap

Struct MaskMap 

Source
pub struct MaskMap { /* private fields */ }
Expand description

A reversible mask map: the placeholder↔original mapping built while redacting an inbound request, used to unmask the response (buffered and streamed) back to the caller’s own values. The provider only ever sees placeholders; the client gets its data restored — the round-trip an irreversible [REDACTED] tag (and any unmask that can restore another caller’s value) cannot do.

Identical source values collapse to one placeholder (so the model sees a consistent token and the unmask is unambiguous). The map is per-request and short-lived; it holds plaintext PII in memory only for the life of the request, exactly as the un-redacted body already does.

Implementations§

Source§

impl MaskMap

Source

pub fn is_empty(&self) -> bool

True when nothing was masked (the response then needs no unmasking).

Source

pub fn placeholder_for(&mut self, cat: &str, value: &str) -> String

The placeholder for value (category cat), minting a new <edgeguard-<cat>-<n>> on first sight and reusing it thereafter so equal values map to one token.

Source

pub fn unmask(&self, text: &str) -> String

Unmask a complete buffer: replace every known placeholder with its original value in a single left-to-right pass (an original value is never re-scanned, so it can’t cascade).

Source

pub fn unmask_stream(&self, carry: &mut Vec<u8>, data: &[u8]) -> Vec<u8>

Streaming unmask: append data to the held-back carry, unmask everything up to any trailing incomplete placeholder, and return the bytes to emit now. The dangling tail (a placeholder that may finish in the next frame) stays in carry. When the map is empty this is a pass-through, so a non-reversible stream pays nothing.

Source

pub fn flush_unmask(&self, carry: &mut Vec<u8>) -> Vec<u8>

End-of-stream flush: unmask and return whatever is still held in carry (a never-closed <edgeguard-… tail is emitted verbatim).

Trait Implementations§

Source§

impl Clone for MaskMap

Source§

fn clone(&self) -> MaskMap

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for MaskMap

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for MaskMap

Source§

fn default() -> MaskMap

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> FromRef<T> for T
where T: Clone,

Source§

fn from_ref(input: &T) -> T

Converts to this type from a reference to the input type.
Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = !

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, !>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more