Struct SurrogateVault 

pub struct SurrogateVault(/* private fields */);

Thread-safe, host-pinned vault mapping opaque <surrogate:kind:id> tokens to raw values.

Implementations

impl SurrogateVault

pub fn new() -> Self

Create a new, empty SurrogateVault.

pub fn mint( &self, kind: &str, raw_value: impl Into<String>, ) -> Result<SurrogateHandle, ToolError>

Mint or retrieve an existing SurrogateHandle for (kind, raw_value).

Errors

Returns ToolError if kind is empty or contains characters outside [a-zA-Z0-9_-], raw_value is empty, or the vault lock is poisoned.

pub fn resolve_token(&self, token: &str) -> Result<String, ToolError>

Resolve an exact <surrogate:kind:id> token to its bound raw value.

Fails closed with ToolError if the token was not minted in this vault.

Errors

Returns ToolError if token is unknown or the vault lock is poisoned.

pub fn resolve_in_str_counted( &self, input: &str, ) -> Result<(String, usize), ToolError>

Resolve all <surrogate:kind:id> tokens embedded in input.

Returns Ok((resolved_string, replacement_count)) or fails closed with ToolError if any <surrogate:...> token in input is malformed or unknown.

Errors

Returns ToolError if an unknown/malformed surrogate token is encountered or the vault lock is poisoned.

pub fn resolve_in_str(&self, input: &str) -> Result<String, ToolError>

Resolve all <surrogate:kind:id> tokens embedded in input.

Errors

Returns ToolError if an unknown/malformed surrogate token is encountered or the vault lock is poisoned.

pub fn resolve_in_json(&self, value: &mut Value) -> Result<usize, ToolError>

Recursively resolve all <surrogate:kind:id> tokens across string values inside value.

Returns the total number of resolved tokens. Fails closed with ToolError if any surrogate token is unknown or malformed.

Errors

Returns ToolError if an unknown/malformed surrogate token is encountered or the vault lock is poisoned.

pub fn redact_str(&self, output: &str) -> Result<String, ToolError>

Replace any registered raw values occurring in output with their <surrogate:kind:id> tokens (longest raw values first so overlapping prefixes cannot leak partial secrets).

Errors

Returns ToolError if the vault lock is poisoned.

Trait Implementations

impl Clone for SurrogateVault

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SurrogateVault

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SurrogateVault

fn default() -> Self

Returns the “default value” for a type.