field-redactor 1.2.0 → 1.6.0

package/dist/dryrun/dryRunAttribution.d.ts

@@ -0,0 +1,10 @@
+import { CustomObjectManager } from '../rules/customObjectManager';
+import { PathRuleMatcher } from '../rules/pathRuleMatcher';
+import { SecretManager } from '../rules/secretManager';
+import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
+import { DryRunPathRule, JsonValue } from '../types';
+export { RuleResolver } from '../rules/ruleResolver';
+export declare const buildPathRules: (before: JsonValue | undefined, redactedPaths: readonly string[], deletedPaths: readonly string[], secretManager: SecretManager, manager: CustomObjectManager, valuePatternMatcher: ValuePatternMatcher, pathRuleMatcher: PathRuleMatcher) => DryRunPathRule[];
+export declare const attributeDeletePathRule: (before: JsonValue | undefined, path: string, secretManager: SecretManager, pathRuleMatcher: PathRuleMatcher, manager: CustomObjectManager, valuePatternMatcher: ValuePatternMatcher) => DryRunPathRule;
+export declare const attributeRedactPathRule: (before: JsonValue | undefined, path: string, secretManager: SecretManager, manager: CustomObjectManager, valuePatternMatcher: ValuePatternMatcher, pathRuleMatcher: PathRuleMatcher) => DryRunPathRule;
+//# sourceMappingURL=dryRunAttribution.d.ts.map

package/dist/dryrun/dryRunAttribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dryRunAttribution.d.ts","sourceRoot":"","sources":["../../src/dryrun/dryRunAttribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AASrD,eAAO,MAAM,cAAc,WACjB,SAAS,GAAG,SAAS,iBACd,SAAS,MAAM,EAAE,gBAClB,SAAS,MAAM,EAAE,iBAChB,aAAa,WACnB,mBAAmB,uBACP,mBAAmB,mBACvB,eAAe,KAC/B,cAAc,EAMd,CAAC;AAEJ,eAAO,MAAM,uBAAuB,WAC1B,SAAS,GAAG,SAAS,QACvB,MAAM,iBACG,aAAa,mBACX,eAAe,WACvB,mBAAmB,uBACP,mBAAmB,KACvC,cAC6G,CAAC;AAEjH,eAAO,MAAM,uBAAuB,WAC1B,SAAS,GAAG,SAAS,QACvB,MAAM,iBACG,aAAa,WACnB,mBAAmB,uBACP,mBAAmB,mBACvB,eAAe,KAC/B,cAC6G,CAAC"}

package/dist/dryrun/dryRunAttribution.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.attributeRedactPathRule = exports.attributeDeletePathRule = exports.buildPathRules = exports.RuleResolver = void 0;
+const ruleResolver_1 = require("../rules/ruleResolver");
+var ruleResolver_2 = require("../rules/ruleResolver");
+Object.defineProperty(exports, "RuleResolver", { enumerable: true, get: function () { return ruleResolver_2.RuleResolver; } });
+const createResolver = (secretManager, pathRuleMatcher, valuePatternMatcher, manager) => new ruleResolver_1.RuleResolver(secretManager, pathRuleMatcher, valuePatternMatcher, manager);
+const buildPathRules = (before, redactedPaths, deletedPaths, secretManager, manager, valuePatternMatcher, pathRuleMatcher) => (0, ruleResolver_1.buildPathRules)(before, redactedPaths, deletedPaths, createResolver(secretManager, pathRuleMatcher, valuePatternMatcher, manager));
+exports.buildPathRules = buildPathRules;
+const attributeDeletePathRule = (before, path, secretManager, pathRuleMatcher, manager, valuePatternMatcher) => createResolver(secretManager, pathRuleMatcher, valuePatternMatcher, manager).attributeDeletePath(before, path);
+exports.attributeDeletePathRule = attributeDeletePathRule;
+const attributeRedactPathRule = (before, path, secretManager, manager, valuePatternMatcher, pathRuleMatcher) => createResolver(secretManager, pathRuleMatcher, valuePatternMatcher, manager).attributeRedactPath(before, path);
+exports.attributeRedactPathRule = attributeRedactPathRule;
+//# sourceMappingURL=dryRunAttribution.js.map

package/dist/dryrun/dryRunAttribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dryRunAttribution.js","sourceRoot":"","sources":["../../src/dryrun/dryRunAttribution.ts"],"names":[],"mappings":";;;AAEA,wDAAmG;AAKnG,sDAAqD;AAA5C,4GAAA,YAAY,OAAA;AAErB,MAAM,cAAc,GAAG,CACrB,aAA4B,EAC5B,eAAgC,EAChC,mBAAwC,EACxC,OAA4B,EACd,EAAE,CAAC,IAAI,2BAAY,CAAC,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;AAE3F,MAAM,cAAc,GAAG,CAC5B,MAA6B,EAC7B,aAAgC,EAChC,YAA+B,EAC/B,aAA4B,EAC5B,OAA4B,EAC5B,mBAAwC,EACxC,eAAgC,EACd,EAAE,CACpB,IAAA,6BAA0B,EACxB,MAAM,EACN,aAAa,EACb,YAAY,EACZ,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAC7E,CAAC;AAdS,QAAA,cAAc,kBAcvB;AAEG,MAAM,uBAAuB,GAAG,CACrC,MAA6B,EAC7B,IAAY,EACZ,aAA4B,EAC5B,eAAgC,EAChC,OAA4B,EAC5B,mBAAwC,EACxB,EAAE,CAClB,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AARpG,QAAA,uBAAuB,2BAQ6E;AAE1G,MAAM,uBAAuB,GAAG,CACrC,MAA6B,EAC7B,IAAY,EACZ,aAA4B,EAC5B,OAA4B,EAC5B,mBAAwC,EACxC,eAAgC,EAChB,EAAE,CAClB,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AARpG,QAAA,uBAAuB,2BAQ6E"}

package/dist/engine/arrayRedaction.d.ts

@@ -0,0 +1,12 @@
+import { JsonArray, JsonObject } from '../types';
+import { ContainerMutation } from './objectRedactorMutation';
+import { MaybeAsync } from '../util/maybeAsync';
+import { TraversalServices } from './traversalServices';
+export declare class ArrayRedactor {
+    private readonly services;
+    constructor(services: TraversalServices);
+    redactArrayInObject(array: JsonArray, key: string, forceDeepRedaction: boolean, parent: ContainerMutation<JsonObject | JsonArray>, pathSegments: Array<string | number>): MaybeAsync<void>;
+    redactObjectsInArray(array: JsonArray, copyOnWrite: boolean, pathSegments: Array<string | number>): MaybeAsync<JsonArray>;
+    redactAllArrayValues(array: JsonArray, forceDeepRedaction: boolean, copyOnWrite: boolean, pathSegments: Array<string | number>): MaybeAsync<JsonArray>;
+}
+//# sourceMappingURL=arrayRedaction.d.ts.map

package/dist/engine/arrayRedaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arrayRedaction.d.ts","sourceRoot":"","sources":["../../src/engine/arrayRedaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAsB,UAAU,EAAiB,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,iBAAiB;IAExD,mBAAmB,CACjB,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,MAAM,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACjD,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,IAAI,CAAC;IAmBnB,oBAAoB,CAClB,KAAK,EAAE,SAAS,EAChB,WAAW,EAAE,OAAO,EACpB,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,SAAS,CAAC;IA6BxB,oBAAoB,CAClB,KAAK,EAAE,SAAS,EAChB,kBAAkB,EAAE,OAAO,EAC3B,WAAW,EAAE,OAAO,EACpB,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,SAAS,CAAC;CA0CzB"}

package/dist/engine/arrayRedaction.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArrayRedactor = void 0;
+const types_1 = require("../types");
+const objectRedactorMutation_1 = require("./objectRedactorMutation");
+const maybeAsync_1 = require("../util/maybeAsync");
+const objectRedactorHelpers_1 = require("./objectRedactorHelpers");
+class ArrayRedactor {
+    constructor(services) {
+        this.services = services;
+    }
+    redactArrayInObject(array, key, forceDeepRedaction, parent, pathSegments) {
+        const redacted = this.services.ruleResolver.shouldTraverseContainerByKey(key, forceDeepRedaction)
+            ? this.redactAllArrayValues(array, this.services.ruleResolver.containerForceDeepRedaction(key, forceDeepRedaction), parent.copyOnWrite, pathSegments)
+            : this.redactObjectsInArray(array, parent.copyOnWrite, pathSegments);
+        if (redacted instanceof Promise) {
+            return redacted.then((result) => {
+                parent.set(key, result);
+            });
+        }
+        parent.set(key, redacted);
+    }
+    redactObjectsInArray(array, copyOnWrite, pathSegments) {
+        const container = (0, objectRedactorMutation_1.createContainerMutation)(array, copyOnWrite);
+        const work = (0, maybeAsync_1.runSequential)(array, (item, index) => {
+            if (!(0, types_1.isJsonObject)(item)) {
+                return;
+            }
+            const customObject = this.services.ruleResolver.getMatchingSchema(item);
+            const child = (0, objectRedactorMutation_1.createContainerMutation)(item, copyOnWrite);
+            const itemPath = [...pathSegments, index];
+            return (0, maybeAsync_1.finalizeMaybeAsync)(customObject
+                ? this.services.handleCustomObject(child, customObject)
+                : this.services.redactSecretFields(child, false, itemPath), () => {
+                container.set(String(index), child.result());
+            }, this.services.asyncMode);
+        }, this.services.asyncMode);
+        return (0, maybeAsync_1.finalizeMaybeAsync)(work, () => container.result(), this.services.asyncMode);
+    }
+    redactAllArrayValues(array, forceDeepRedaction, copyOnWrite, pathSegments) {
+        const container = (0, objectRedactorMutation_1.createContainerMutation)(array, copyOnWrite);
+        const work = (0, maybeAsync_1.runSequential)(array, (item, index) => {
+            const key = String(index);
+            const itemPath = [...pathSegments, index];
+            if (Array.isArray(item)) {
+                const nested = this.redactAllArrayValues(item, forceDeepRedaction, copyOnWrite, itemPath);
+                if (nested instanceof Promise) {
+                    return nested.then((result) => {
+                        container.set(key, result);
+                    });
+                }
+                container.set(key, nested);
+                return;
+            }
+            if (!(0, types_1.isJsonObject)(item)) {
+                return this.services.setPrimitive(container, key, (0, objectRedactorHelpers_1.toRedactablePrimitive)(item));
+            }
+            const customObject = this.services.ruleResolver.getMatchingSchema(item);
+            const child = (0, objectRedactorMutation_1.createContainerMutation)(item, copyOnWrite);
+            return (0, maybeAsync_1.finalizeMaybeAsync)(customObject
+                ? this.services.handleCustomObject(child, customObject)
+                : this.services.redactSecretFields(child, forceDeepRedaction, itemPath), () => {
+                container.set(key, child.result());
+            }, this.services.asyncMode);
+        }, this.services.asyncMode);
+        return (0, maybeAsync_1.finalizeMaybeAsync)(work, () => container.result(), this.services.asyncMode);
+    }
+}
+exports.ArrayRedactor = ArrayRedactor;
+//# sourceMappingURL=arrayRedaction.js.map

package/dist/engine/arrayRedaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arrayRedaction.js","sourceRoot":"","sources":["../../src/engine/arrayRedaction.ts"],"names":[],"mappings":";;;AAAA,oCAA+D;AAC/D,qEAAsF;AACtF,mDAAmF;AACnF,mEAAgE;AAGhE,MAAa,aAAa;IACxB,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE5D,mBAAmB,CACjB,KAAgB,EAChB,GAAW,EACX,kBAA2B,EAC3B,MAAiD,EACjD,YAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,4BAA4B,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAC/F,CAAC,CAAC,IAAI,CAAC,oBAAoB,CACvB,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,2BAA2B,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAC/E,MAAM,CAAC,WAAW,EAClB,YAAY,CACb;YACH,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,oBAAoB,CAClB,KAAgB,EAChB,WAAoB,EACpB,YAAoC;QAEpC,MAAM,SAAS,GAAG,IAAA,gDAAuB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAA,0BAAa,EACxB,KAAK,EACL,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACd,IAAI,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,IAAA,+BAAkB,EACvB,YAAY;gBACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAC5D,GAAG,EAAE;gBACH,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QAEF,OAAO,IAAA,+BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,oBAAoB,CAClB,KAAgB,EAChB,kBAA2B,EAC3B,WAAoB,EACpB,YAAoC;QAEpC,MAAM,SAAS,GAAG,IAAA,gDAAuB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAA,0BAAa,EACxB,KAAK,EACL,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,KAAK,CAAC,CAAC;YAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1F,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;oBAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC5B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC7B,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,IAAA,6CAAqB,EAAC,IAAI,CAAC,CAAC,CAAC;YACjF,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACzD,OAAO,IAAA,+BAAkB,EACvB,YAAY;gBACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EACzE,GAAG,EAAE;gBACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QAEF,OAAO,IAAA,+BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;CACF;AA5GD,sCA4GC"}

package/dist/engine/customObjectFieldHandler.d.ts

@@ -0,0 +1,35 @@
+import { CustomObject, JsonObject, SecretSpecifierValue } from '../types';
+import { ContainerMutation } from './objectRedactorMutation';
+import { MaybeAsync } from '../util/maybeAsync';
+import { TraversalServices } from './traversalServices';
+import { SecretManager } from '../rules/secretManager';
+type StringKeyAction = {
+    type: 'remove';
+} | {
+    type: 'opaque';
+} | {
+    type: 'traverse';
+    forceDeep: boolean;
+} | {
+    type: 'none';
+};
+/** Shared delete/opaque/deep/shallow ladder for schema sibling-key rules. */
+export declare const resolveCustomObjectStringKeyAction: (secretManager: SecretManager, stringKey: SecretSpecifierValue) => StringKeyAction;
+export declare class CustomObjectFieldHandler {
+    private readonly services;
+    constructor(services: TraversalServices);
+    handleCustomObject(container: ContainerMutation<JsonObject>, customObject: CustomObject): MaybeAsync<void>;
+    private handleCustomObjectValueIfArray;
+    private handleCustomObjectArrayValueIfStringKeySpecified;
+    private handleCustomObjectArrayValueIfMatchTypeSpecified;
+    private setRedactedArray;
+    private handleCustomObjectValueIfObject;
+    private handleCustomObjectObjectValueIfStringKeySpecified;
+    private handleCustomObjectObjectValueIfMatchTypeSpecified;
+    private setRedactedObject;
+    private handleCustomObjectValueIfPrimitive;
+    private handleCustomObjectPrimitiveValueIfMatchTypeSpecified;
+    private handleCustomObjectPrimitiveValueIfStringKeySpecified;
+}
+export {};
+//# sourceMappingURL=customObjectFieldHandler.d.ts.map

package/dist/engine/customObjectFieldHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customObjectFieldHandler.d.ts","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAIZ,UAAU,EAEV,oBAAoB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAA2B,MAAM,0BAA0B,CAAC;AAOtF,OAAO,EAAsB,UAAU,EAAoC,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,KAAK,eAAe,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,kBAC9B,aAAa,aACjB,oBAAoB,KAC9B,eAeF,CAAC;AAEF,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,iBAAiB;IAExD,kBAAkB,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;IAmB1G,OAAO,CAAC,8BAA8B;IAiBtC,OAAO,CAAC,gDAAgD;IAwBxD,OAAO,CAAC,gDAAgD;IAsBxD,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,+BAA+B;IAiBvC,OAAO,CAAC,iDAAiD;IAoCzD,OAAO,CAAC,iDAAiD;IAsBzD,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,kCAAkC;IAiB1C,OAAO,CAAC,oDAAoD;IAgB5D,OAAO,CAAC,oDAAoD;CAoB7D"}

package/dist/engine/customObjectFieldHandler.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CustomObjectFieldHandler = exports.resolveCustomObjectStringKeyAction = void 0;
+const types_1 = require("../types");
+const objectRedactorMutation_1 = require("./objectRedactorMutation");
+const objectRedactorCustomObject_1 = require("./objectRedactorCustomObject");
+const objectRedactorHelpers_1 = require("./objectRedactorHelpers");
+const maybeAsync_1 = require("../util/maybeAsync");
+/** Shared delete/opaque/deep/shallow ladder for schema sibling-key rules. */
+const resolveCustomObjectStringKeyAction = (secretManager, stringKey) => {
+    if (secretManager.isDeleteSecretKey(stringKey)) {
+        return { type: 'remove' };
+    }
+    if (secretManager.isFullSecretKey(stringKey)) {
+        return { type: 'opaque' };
+    }
+    const forceDeep = secretManager.isDeepSecretKey(stringKey);
+    if (forceDeep || secretManager.isSecretKey(stringKey)) {
+        return { type: 'traverse', forceDeep };
+    }
+    return { type: 'none' };
+};
+exports.resolveCustomObjectStringKeyAction = resolveCustomObjectStringKeyAction;
+class CustomObjectFieldHandler {
+    constructor(services) {
+        this.services = services;
+    }
+    handleCustomObject(container, customObject) {
+        return (0, maybeAsync_1.runSequential)(Object.keys(customObject), (key) => {
+            const fieldValue = container.source[key];
+            if (Array.isArray(fieldValue)) {
+                return this.handleCustomObjectValueIfArray(container, key, customObject);
+            }
+            if ((0, types_1.isJsonObject)(fieldValue)) {
+                return this.handleCustomObjectValueIfObject(container, key, customObject);
+            }
+            return this.handleCustomObjectValueIfPrimitive(container, customObject, key);
+        }, this.services.asyncMode);
+    }
+    handleCustomObjectValueIfArray(container, key, customObject) {
+        const stringKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
+        if (stringKey !== undefined) {
+            return this.handleCustomObjectArrayValueIfStringKeySpecified(container, key, stringKey);
+        }
+        return this.handleCustomObjectArrayValueIfMatchTypeSpecified(container, key, customObject[key]);
+    }
+    handleCustomObjectArrayValueIfStringKeySpecified(container, key, stringKey) {
+        const fieldValue = container.source[key];
+        if (!Array.isArray(fieldValue)) {
+            return;
+        }
+        const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, stringKey);
+        switch (action.type) {
+            case 'remove':
+                container.remove(key);
+                return;
+            case 'opaque':
+                return this.services.setPrimitiveFromValue(container, key, fieldValue);
+            case 'traverse':
+                return this.setRedactedArray(container, key, fieldValue, action.forceDeep);
+            case 'none':
+                return;
+        }
+    }
+    handleCustomObjectArrayValueIfMatchTypeSpecified(container, key, matchType) {
+        const fieldValue = container.source[key];
+        if (!Array.isArray(fieldValue)) {
+            return;
+        }
+        return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectArrayMatchType)(matchType, {
+            deleteKey: () => container.remove(key),
+            redactFull: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
+            redactDeep: () => this.setRedactedArray(container, key, fieldValue, true),
+            redactShallow: () => this.setRedactedArray(container, key, fieldValue, false),
+            passThrough: () => this.services.redactArrayInObject(fieldValue, key, false, container, [])
+        }), this.services.asyncMode);
+    }
+    setRedactedArray(container, key, fieldValue, forceDeepRedaction) {
+        const redacted = this.services.redactAllArrayValues(fieldValue, forceDeepRedaction, container.copyOnWrite, []);
+        if (redacted instanceof Promise) {
+            return redacted.then((result) => {
+                container.set(key, result);
+            });
+        }
+        container.set(key, redacted);
+    }
+    handleCustomObjectValueIfObject(container, key, customObject) {
+        const stringKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
+        if (stringKey !== undefined) {
+            return this.handleCustomObjectObjectValueIfStringKeySpecified(container, key, stringKey);
+        }
+        return this.handleCustomObjectObjectValueIfMatchTypeSpecified(container, key, customObject[key]);
+    }
+    handleCustomObjectObjectValueIfStringKeySpecified(container, key, stringKey) {
+        const fieldValue = container.source[key];
+        if (!(0, types_1.isJsonObject)(fieldValue)) {
+            return;
+        }
+        const nestedSchema = this.services.ruleResolver.getMatchingSchema(fieldValue);
+        if (nestedSchema) {
+            const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
+            return (0, maybeAsync_1.finalizeMaybeAsync)(this.handleCustomObject(child, nestedSchema), () => {
+                container.set(key, child.result());
+            }, this.services.asyncMode);
+        }
+        const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, stringKey);
+        switch (action.type) {
+            case 'remove':
+                container.remove(key);
+                return;
+            case 'opaque':
+                return this.services.setPrimitiveFromValue(container, key, fieldValue);
+            case 'traverse':
+                return this.setRedactedObject(container, key, fieldValue, action.forceDeep);
+            case 'none':
+                return;
+        }
+    }
+    handleCustomObjectObjectValueIfMatchTypeSpecified(container, key, matchType) {
+        const fieldValue = container.source[key];
+        if (!(0, types_1.isJsonObject)(fieldValue)) {
+            return;
+        }
+        return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectObjectMatchType)(matchType, {
+            deleteKey: () => container.remove(key),
+            redactFull: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
+            redactDeep: () => this.setRedactedObject(container, key, fieldValue, true),
+            redactShallowOrPass: () => this.setRedactedObject(container, key, fieldValue, false),
+            ignore: () => undefined
+        }), this.services.asyncMode);
+    }
+    setRedactedObject(container, key, fieldValue, forceDeepRedaction) {
+        const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
+        return (0, maybeAsync_1.finalizeMaybeAsync)(this.services.redactSecretFields(child, forceDeepRedaction, []), () => {
+            container.set(key, child.result());
+        }, this.services.asyncMode);
+    }
+    handleCustomObjectValueIfPrimitive(container, customObject, key) {
+        if (typeof customObject[key] === 'number') {
+            return this.handleCustomObjectPrimitiveValueIfMatchTypeSpecified(container, key, customObject[key]);
+        }
+        const secretKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
+        if (secretKey === undefined) {
+            return;
+        }
+        return this.handleCustomObjectPrimitiveValueIfStringKeySpecified(container, secretKey, key);
+    }
+    handleCustomObjectPrimitiveValueIfMatchTypeSpecified(container, key, matchValue) {
+        return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectPrimitiveMatchType)(matchValue, {
+            deleteKey: () => container.remove(key),
+            redactFull: () => this.services.setPrimitiveFromValue(container, key, container.source[key]),
+            redactScalar: () => this.services.setPrimitive(container, key, container.source[key]),
+            passThrough: () => undefined
+        }), this.services.asyncMode);
+    }
+    handleCustomObjectPrimitiveValueIfStringKeySpecified(container, secretKey, key) {
+        const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, secretKey);
+        if (action.type === 'remove') {
+            container.remove(key);
+            return;
+        }
+        // Opaque/shallow/deep scalar handling stays in setPrimitiveValueIfSecret for value-pattern fallthrough.
+        return this.services.setPrimitiveValueIfSecret(container, key, secretKey, container.source[key], false);
+    }
+}
+exports.CustomObjectFieldHandler = CustomObjectFieldHandler;
+//# sourceMappingURL=customObjectFieldHandler.js.map

package/dist/engine/customObjectFieldHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customObjectFieldHandler.js","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":";;;AAAA,oCAQkB;AAClB,qEAAsF;AACtF,6EAIsC;AACtC,mEAA+F;AAC/F,mDAAsG;AAUtG,6EAA6E;AACtE,MAAM,kCAAkC,GAAG,CAChD,aAA4B,EAC5B,SAA+B,EACd,EAAE;IACnB,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,SAAS,IAAI,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC,CAAC;AAlBW,QAAA,kCAAkC,sCAkB7C;AAEF,MAAa,wBAAwB;IACnC,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE5D,kBAAkB,CAAC,SAAwC,EAAE,YAA0B;QACrF,OAAO,IAAA,0BAAa,EAClB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EACzB,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,8BAA8B,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YAC5E,CAAC;YAED,OAAO,IAAI,CAAC,kCAAkC,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,8BAA8B,CACpC,SAAwC,EACxC,GAAW,EACX,YAA0B;QAE1B,MAAM,SAAS,GAAG,IAAA,4EAAoD,EAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,gDAAgD,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,IAAI,CAAC,gDAAgD,CAC1D,SAAS,EACT,GAAG,EACH,YAAY,CAAC,GAAG,CAA0B,CAC3C,CAAC;IACJ,CAAC;IAEO,gDAAgD,CACtD,SAAwC,EACxC,GAAW,EACX,SAA+B;QAE/B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC1F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YACzE,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7E,KAAK,MAAM;gBACT,OAAO;QACX,CAAC;IACH,CAAC;IAEO,gDAAgD,CACtD,SAAwC,EACxC,GAAW,EACX,SAAgC;QAEhC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,OAAO,IAAA,8BAAiB,EACtB,IAAA,4DAA+B,EAAC,SAAS,EAAE;YACzC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YACtC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC;YACjF,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC;YACzE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC;YAC7E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;SAC5F,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,SAAwC,EACxC,GAAW,EACX,UAAqB,EACrB,kBAA2B;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/G,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAEO,+BAA+B,CACrC,SAAwC,EACxC,GAAW,EACX,YAA0B;QAE1B,MAAM,SAAS,GAAG,IAAA,4EAAoD,EAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,iDAAiD,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,IAAI,CAAC,iDAAiD,CAC3D,SAAS,EACT,GAAG,EACH,YAAY,CAAC,GAAG,CAA0B,CAC3C,CAAC;IACJ,CAAC;IAEO,iDAAiD,CACvD,SAAwC,EACxC,GAAW,EACX,SAA+B;QAE/B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YACzE,OAAO,IAAA,+BAAkB,EACvB,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,EAC5C,GAAG,EAAE;gBACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC1F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YACzE,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9E,KAAK,MAAM;gBACT,OAAO;QACX,CAAC;IACH,CAAC;IAEO,iDAAiD,CACvD,SAAwC,EACxC,GAAW,EACX,SAAgC;QAEhC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,IAAA,8BAAiB,EACtB,IAAA,6DAAgC,EAAC,SAAS,EAAE;YAC1C,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YACtC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC;YACjF,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC;YAC1E,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC;YACpF,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS;SACxB,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,SAAwC,EACxC,GAAW,EACX,UAAsB,EACtB,kBAA2B;QAE3B,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO,IAAA,+BAAkB,EACvB,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAC/D,GAAG,EAAE;YACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,kCAAkC,CACxC,SAAwC,EACxC,YAA0B,EAC1B,GAAW;QAEX,IAAI,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,oDAAoD,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,4EAAoD,EAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,OAAO,IAAI,CAAC,oDAAoD,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9F,CAAC;IAEO,oDAAoD,CAC1D,SAAwC,EACxC,GAAW,EACX,UAAiC;QAEjC,OAAO,IAAA,8BAAiB,EACtB,IAAA,gEAAmC,EAAC,UAAU,EAAE;YAC9C,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YACtC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5F,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,CAAC;YAC5G,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;SAC7B,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,oDAAoD,CAC1D,SAAwC,EACxC,SAA+B,EAC/B,GAAW;QAEX,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,wGAAwG;QACxG,OAAO,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAC5C,SAAS,EACT,GAAG,EACH,SAAS,EACT,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,EAC5C,KAAK,CACN,CAAC;IACJ,CAAC;CACF;AArPD,4DAqPC"}

package/dist/engine/objectRedactor.d.ts

@@ -0,0 +1,18 @@
+import { TraversableJson } from '../types';
+import { CustomObjectManager } from '../rules/customObjectManager';
+import { PrimitiveRedactor } from './primitiveRedactor';
+import { SecretManager } from '../rules/secretManager';
+import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
+import { PathRuleMatcher } from '../rules/pathRuleMatcher';
+/**
+ * Redacts fields in a JSON object using the secretManager, primitiveRedactor, and CustomObjectManager provided in the
+ * constructor. CustomObjects take highest precedence, followed by opaque (`fullSecretKeys`), then deep, then shallow.
+ */
+export declare class ObjectRedactor {
+    private readonly traversal;
+    constructor(primitiveRedactor: PrimitiveRedactor, secretManager: SecretManager, customObjManager: CustomObjectManager, valuePatternMatcher: ValuePatternMatcher, pathRuleMatcher: PathRuleMatcher);
+    redactInPlace<T extends TraversableJson>(value: T): Promise<T>;
+    redactInPlaceSync<T extends TraversableJson>(value: T): T;
+    redactCopyOnWrite<T extends TraversableJson>(value: T): T;
+}
+//# sourceMappingURL=objectRedactor.d.ts.map

package/dist/engine/objectRedactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactor.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;gBAGlD,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC5B,gBAAgB,EAAE,mBAAmB,EACrC,mBAAmB,EAAE,mBAAmB,EACxC,eAAe,EAAE,eAAe;IAWrB,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpE,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAIzD,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;CAGjE"}

package/dist/engine/objectRedactor.js

@@ -0,0 +1,38 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ObjectRedactor = void 0;
+const objectRedactorTraversal_1 = require("./objectRedactorTraversal");
+/**
+ * Redacts fields in a JSON object using the secretManager, primitiveRedactor, and CustomObjectManager provided in the
+ * constructor. CustomObjects take highest precedence, followed by opaque (`fullSecretKeys`), then deep, then shallow.
+ */
+class ObjectRedactor {
+    constructor(primitiveRedactor, secretManager, customObjManager, valuePatternMatcher, pathRuleMatcher) {
+        this.traversal = new objectRedactorTraversal_1.ObjectRedactorTraversal(primitiveRedactor, secretManager, customObjManager, valuePatternMatcher, pathRuleMatcher);
+    }
+    redactInPlace(value) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.traversal.usesAsyncRedactor()) {
+                return Promise.resolve(this.redactInPlaceSync(value));
+            }
+            return this.traversal.redactInPlaceAsync(value);
+        });
+    }
+    redactInPlaceSync(value) {
+        return this.traversal.redactInPlace(value);
+    }
+    redactCopyOnWrite(value) {
+        return this.traversal.redactCopyOnWrite(value);
+    }
+}
+exports.ObjectRedactor = ObjectRedactor;
+//# sourceMappingURL=objectRedactor.js.map

package/dist/engine/objectRedactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactor.js","sourceRoot":"","sources":["../../src/engine/objectRedactor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,uEAAoE;AAEpE;;;GAGG;AACH,MAAa,cAAc;IAGzB,YACE,iBAAoC,EACpC,aAA4B,EAC5B,gBAAqC,EACrC,mBAAwC,EACxC,eAAgC;QAEhC,IAAI,CAAC,SAAS,GAAG,IAAI,iDAAuB,CAC1C,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,CAChB,CAAC;IACJ,CAAC;IAEY,aAAa,CAA4B,KAAQ;;YAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBACxC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;KAAA;IAEM,iBAAiB,CAA4B,KAAQ;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEM,iBAAiB,CAA4B,KAAQ;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;CACF;AAlCD,wCAkCC"}

package/dist/engine/objectRedactorCustomObject.d.ts

@@ -0,0 +1,27 @@
+import { CustomObjectMatchType } from '../types';
+import { MaybeAsync } from '../util/maybeAsync';
+type CustomObjectArrayHandlers = {
+    deleteKey(): MaybeAsync<void>;
+    redactFull(): MaybeAsync<void>;
+    redactDeep(): MaybeAsync<void>;
+    redactShallow(): MaybeAsync<void>;
+    passThrough(): MaybeAsync<void>;
+};
+type CustomObjectObjectHandlers = {
+    deleteKey(): MaybeAsync<void>;
+    redactFull(): MaybeAsync<void>;
+    redactDeep(): MaybeAsync<void>;
+    redactShallowOrPass(): MaybeAsync<void>;
+    ignore(): MaybeAsync<void>;
+};
+type CustomObjectPrimitiveHandlers = {
+    deleteKey(): MaybeAsync<void>;
+    redactFull(): MaybeAsync<void>;
+    redactScalar(): MaybeAsync<void>;
+    passThrough(): MaybeAsync<void>;
+};
+export declare const applyCustomObjectArrayMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectArrayHandlers) => MaybeAsync<void>;
+export declare const applyCustomObjectObjectMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectObjectHandlers) => MaybeAsync<void>;
+export declare const applyCustomObjectPrimitiveMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectPrimitiveHandlers) => MaybeAsync<void>;
+export {};
+//# sourceMappingURL=objectRedactorCustomObject.d.ts.map

package/dist/engine/objectRedactorCustomObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorCustomObject.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD,KAAK,yBAAyB,GAAG;IAC/B,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,mBAAmB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACnC,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,+BAA+B,cAC/B,qBAAqB,YACtB,yBAAyB,KAClC,UAAU,CAAC,IAAI,CAejB,CAAC;AAEF,eAAO,MAAM,gCAAgC,cAChC,qBAAqB,YACtB,0BAA0B,KACnC,UAAU,CAAC,IAAI,CAcjB,CAAC;AAEF,eAAO,MAAM,mCAAmC,cACnC,qBAAqB,YACtB,6BAA6B,KACtC,UAAU,CAAC,IAAI,CAajB,CAAC"}

package/dist/engine/objectRedactorCustomObject.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyCustomObjectPrimitiveMatchType = exports.applyCustomObjectObjectMatchType = exports.applyCustomObjectArrayMatchType = void 0;
+const types_1 = require("../types");
+const run = (handler) => handler();
+const applyCustomObjectArrayMatchType = (matchType, handlers) => {
+    switch (matchType) {
+        case types_1.CustomObjectMatchType.Remove:
+            return run(handlers.deleteKey);
+        case types_1.CustomObjectMatchType.Opaque:
+            return run(handlers.redactFull);
+        case types_1.CustomObjectMatchType.Deep:
+            return run(handlers.redactDeep);
+        case types_1.CustomObjectMatchType.Shallow:
+            return run(handlers.redactShallow);
+        case types_1.CustomObjectMatchType.Pass:
+            return run(handlers.passThrough);
+        default:
+            return undefined;
+    }
+};
+exports.applyCustomObjectArrayMatchType = applyCustomObjectArrayMatchType;
+const applyCustomObjectObjectMatchType = (matchType, handlers) => {
+    switch (matchType) {
+        case types_1.CustomObjectMatchType.Remove:
+            return run(handlers.deleteKey);
+        case types_1.CustomObjectMatchType.Opaque:
+            return run(handlers.redactFull);
+        case types_1.CustomObjectMatchType.Deep:
+            return run(handlers.redactDeep);
+        case types_1.CustomObjectMatchType.Shallow:
+        case types_1.CustomObjectMatchType.Pass:
+            return run(handlers.redactShallowOrPass);
+        case types_1.CustomObjectMatchType.Ignore:
+            return run(handlers.ignore);
+    }
+};
+exports.applyCustomObjectObjectMatchType = applyCustomObjectObjectMatchType;
+const applyCustomObjectPrimitiveMatchType = (matchType, handlers) => {
+    switch (matchType) {
+        case types_1.CustomObjectMatchType.Remove:
+            return run(handlers.deleteKey);
+        case types_1.CustomObjectMatchType.Opaque:
+            return run(handlers.redactFull);
+        case types_1.CustomObjectMatchType.Deep:
+        case types_1.CustomObjectMatchType.Shallow:
+            return run(handlers.redactScalar);
+        case types_1.CustomObjectMatchType.Pass:
+        default:
+            return run(handlers.passThrough);
+    }
+};
+exports.applyCustomObjectPrimitiveMatchType = applyCustomObjectPrimitiveMatchType;
+//# sourceMappingURL=objectRedactorCustomObject.js.map

package/dist/engine/objectRedactorCustomObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorCustomObject.js","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":";;;AAAA,oCAAiD;AAGjD,MAAM,GAAG,GAAG,CAAI,OAA4B,EAAiB,EAAE,CAAC,OAAO,EAAE,CAAC;AAyBnE,MAAM,+BAA+B,GAAG,CAC7C,SAAgC,EAChC,QAAmC,EACjB,EAAE;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,6BAAqB,CAAC,OAAO;YAChC,OAAO,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACrC,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAlBW,QAAA,+BAA+B,mCAkB1C;AAEK,MAAM,gCAAgC,GAAG,CAC9C,SAAgC,EAChC,QAAoC,EAClB,EAAE;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,6BAAqB,CAAC,OAAO,CAAC;QACnC,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC3C,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,gCAAgC,oCAiB3C;AAEK,MAAM,mCAAmC,GAAG,CACjD,SAAgC,EAChC,QAAuC,EACrB,EAAE;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,6BAAqB,CAAC,IAAI,CAAC;QAChC,KAAK,6BAAqB,CAAC,OAAO;YAChC,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpC,KAAK,6BAAqB,CAAC,IAAI,CAAC;QAChC;YACE,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;AACH,CAAC,CAAC;AAhBW,QAAA,mCAAmC,uCAgB9C"}

package/dist/engine/objectRedactorHelpers.d.ts

@@ -0,0 +1,9 @@
+import { CustomObject, JsonLeafValue, JsonObject, JsonValue, RedactablePrimitive, SecretSpecifierValue } from '../types';
+import { SecretManager } from '../rules/secretManager';
+import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
+export type RedactPrimitiveFn<T> = (value: RedactablePrimitive) => T;
+export declare function toRedactablePrimitive(value: JsonLeafValue | undefined): RedactablePrimitive;
+export declare function getStringValue(val: JsonValue | undefined): RedactablePrimitive;
+export declare function getStringSpecifiedCustomObjectSecretKeyValueIfExists(value: JsonObject, customObject: CustomObject, key: string): SecretSpecifierValue | undefined;
+export declare function redactPrimitiveValueIfSecret<T>(secretManager: SecretManager, valuePatternMatcher: ValuePatternMatcher, redact: RedactPrimitiveFn<T>, key: SecretSpecifierValue, value: JsonLeafValue | undefined, forceDeepRedaction: boolean): JsonValue | undefined | T;
+//# sourceMappingURL=objectRedactorHelpers.d.ts.map

package/dist/engine/objectRedactorHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorHelpers.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAEZ,aAAa,EACb,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,KAAK,CAAC,CAAC;AAErE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,mBAAmB,CAM3F;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAU9E;AAED,wBAAgB,oDAAoD,CAClE,KAAK,EAAE,UAAU,EACjB,YAAY,EAAE,YAAY,EAC1B,GAAG,EAAE,MAAM,GACV,oBAAoB,GAAG,SAAS,CAgBlC;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,aAAa,EAAE,aAAa,EAC5B,mBAAmB,EAAE,mBAAmB,EACxC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC5B,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,kBAAkB,EAAE,OAAO,GAC1B,SAAS,GAAG,SAAS,GAAG,CAAC,CA+B3B"}

package/dist/engine/objectRedactorHelpers.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toRedactablePrimitive = toRedactablePrimitive;
+exports.getStringValue = getStringValue;
+exports.getStringSpecifiedCustomObjectSecretKeyValueIfExists = getStringSpecifiedCustomObjectSecretKeyValueIfExists;
+exports.redactPrimitiveValueIfSecret = redactPrimitiveValueIfSecret;
+const types_1 = require("../types");
+function toRedactablePrimitive(value) {
+    if (value instanceof Date || typeof value === 'function') {
+        return getStringValue(value);
+    }
+    return value;
+}
+function getStringValue(val) {
+    if ((0, types_1.isJsonObject)(val) || Array.isArray(val)) {
+        return JSON.stringify(val);
+    }
+    if (val instanceof Date || typeof val === 'function') {
+        return val.toString();
+    }
+    return val;
+}
+function getStringSpecifiedCustomObjectSecretKeyValueIfExists(value, customObject, key) {
+    const siblingKeyName = customObject[key];
+    if (typeof siblingKeyName !== 'string') {
+        return undefined;
+    }
+    if (!Object.prototype.hasOwnProperty.call(value, siblingKeyName)) {
+        return undefined;
+    }
+    const siblingValue = value[siblingKeyName];
+    if (typeof siblingValue === 'string' || typeof siblingValue === 'number' || typeof siblingValue === 'boolean') {
+        return siblingValue;
+    }
+    return undefined;
+}
+function redactPrimitiveValueIfSecret(secretManager, valuePatternMatcher, redact, key, value, forceDeepRedaction) {
+    if (value instanceof Date || typeof value === 'function') {
+        if (secretManager.isFullSecretKey(key) ||
+            forceDeepRedaction ||
+            secretManager.isSecretKey(key) ||
+            secretManager.isDeepSecretKey(key)) {
+            return redact(getStringValue(value));
+        }
+        return value;
+    }
+    if (secretManager.isFullSecretKey(key)) {
+        return redact(getStringValue(value));
+    }
+    if (forceDeepRedaction || secretManager.isSecretKey(key) || secretManager.isDeepSecretKey(key)) {
+        if (secretManager.isPassKey(key)) {
+            return value;
+        }
+        return redact(value);
+    }
+    if (valuePatternMatcher.findMatching(toRedactablePrimitive(value))) {
+        return redact(value);
+    }
+    return value;
+}
+//# sourceMappingURL=objectRedactorHelpers.js.map

package/dist/engine/objectRedactorHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorHelpers.js","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":";;AAcA,sDAMC;AAED,wCAUC;AAED,oHAoBC;AAED,oEAsCC;AA9FD,oCAQkB;AAMlB,SAAgB,qBAAqB,CAAC,KAAgC;IACpE,IAAI,KAAK,YAAY,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,cAAc,CAAC,GAA0B;IACvD,IAAI,IAAA,oBAAY,EAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,GAAG,YAAY,IAAI,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,oDAAoD,CAClE,KAAiB,EACjB,YAA0B,EAC1B,GAAW;IAEX,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9G,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,4BAA4B,CAC1C,aAA4B,EAC5B,mBAAwC,EACxC,MAA4B,EAC5B,GAAyB,EACzB,KAAgC,EAChC,kBAA2B;IAE3B,IAAI,KAAK,YAAY,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QACzD,IACE,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC;YAClC,kBAAkB;YAClB,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC;YAC9B,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAClC,CAAC;YACD,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,kBAAkB,IAAI,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/F,IAAI,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,KAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,mBAAmB,CAAC,YAAY,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,KAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/engine/objectRedactorMutation.d.ts

@@ -0,0 +1,10 @@
+import { JsonArray, JsonObject, JsonValue } from '../types';
+export type ContainerMutation<T extends JsonObject | JsonArray> = {
+    readonly copyOnWrite: boolean;
+    readonly source: T;
+    set(key: string, value: JsonValue | undefined): void;
+    remove(key: string): void;
+    result(): T;
+};
+export declare const createContainerMutation: <T extends JsonObject | JsonArray>(source: T, copyOnWrite: boolean) => ContainerMutation<T>;
+//# sourceMappingURL=objectRedactorMutation.d.ts.map

package/dist/engine/objectRedactorMutation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorMutation.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAc,SAAS,EAAE,MAAM,UAAU,CAAC;AAcxE,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,UAAU,GAAG,SAAS,IAAI;IAChE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,IAAI,CAAC,CAAC;CACb,CAAC;AAsCF,eAAO,MAAM,uBAAuB,GAAI,CAAC,SAAS,UAAU,GAAG,SAAS,UAC9D,CAAC,eACI,OAAO,KACnB,iBAAiB,CAAC,CAAC,CA2DrB,CAAC"}