field-redactor 1.5.0 → 1.6.1

package/dist/engine/objectRedactorTraversal.d.ts

@@ -0,0 +1,41 @@
+import { TraversableJson } from '../types';
+import { SecretManager } from '../rules/secretManager';
+import { CustomObjectManager } from '../rules/customObjectManager';
+import { PrimitiveRedactor } from './primitiveRedactor';
+import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
+import { PathRuleMatcher } from '../rules/pathRuleMatcher';
+/**
+ * Unified JSON traversal for in-place and copy-on-write redaction.
+ * Sync and async paths share one implementation; async mode propagates Promises only when configured.
+ */
+export declare class ObjectRedactorTraversal {
+    private readonly primitiveRedactor;
+    private readonly secretManager;
+    private readonly valuePatternMatcher;
+    private readonly ruleResolver;
+    private readonly arrayRedactor;
+    private readonly customObjectHandler;
+    private readonly services;
+    constructor(primitiveRedactor: PrimitiveRedactor, secretManager: SecretManager, customObjManager: CustomObjectManager, valuePatternMatcher: ValuePatternMatcher, pathRuleMatcher: PathRuleMatcher);
+    usesAsyncRedactor(): boolean;
+    redactInPlace<T extends TraversableJson>(value: T): T;
+    redactCopyOnWrite<T extends TraversableJson>(value: T): T;
+    redactInPlaceAsync<T extends TraversableJson>(value: T): Promise<T>;
+    private get asyncMode();
+    private traverseRedact;
+    private handleCustomObject;
+    private redactArrayInObject;
+    private redactAllArrayValues;
+    private redactPrimitive;
+    private setPrimitive;
+    private setPrimitiveFromValue;
+    private chainHandled;
+    private applyFieldDisposition;
+    private redactFieldValue;
+    private redactSecretFields;
+    private processSecretField;
+    private applyDefaultSecretRules;
+    private redactNestedObject;
+    private setPrimitiveValueIfSecret;
+}
+//# sourceMappingURL=objectRedactorTraversal.d.ts.map

package/dist/engine/objectRedactorTraversal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorTraversal.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorTraversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAY3D;;;GAGG;AACH,qBAAa,uBAAuB;IAOhC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IATtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;gBAG1B,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC7C,gBAAgB,EAAE,mBAAmB,EACpB,mBAAmB,EAAE,mBAAmB,EACzD,eAAe,EAAE,eAAe;IAiClC,iBAAiB,IAAI,OAAO;IAI5B,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASrD,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASzD,kBAAkB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAInE,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,qBAAqB;IAkC7B,OAAO,CAAC,gBAAgB;IAkBxB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,kBAAkB;IAyC1B,OAAO,CAAC,uBAAuB;IA2B/B,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,yBAAyB;CAwBlC"}

package/dist/engine/objectRedactorTraversal.js

@@ -0,0 +1,201 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ObjectRedactorTraversal = void 0;
+const types_1 = require("../types");
+const objectRedactorMutation_1 = require("./objectRedactorMutation");
+const objectRedactorHelpers_1 = require("./objectRedactorHelpers");
+const ruleResolver_1 = require("../rules/ruleResolver");
+const maybeAsync_1 = require("../util/maybeAsync");
+const arrayRedaction_1 = require("./arrayRedaction");
+const customObjectFieldHandler_1 = require("./customObjectFieldHandler");
+/**
+ * Unified JSON traversal for in-place and copy-on-write redaction.
+ * Sync and async paths share one implementation; async mode propagates Promises only when configured.
+ */
+class ObjectRedactorTraversal {
+    constructor(primitiveRedactor, secretManager, customObjManager, valuePatternMatcher, pathRuleMatcher) {
+        this.primitiveRedactor = primitiveRedactor;
+        this.secretManager = secretManager;
+        this.valuePatternMatcher = valuePatternMatcher;
+        this.ruleResolver = new ruleResolver_1.RuleResolver(secretManager, pathRuleMatcher, valuePatternMatcher, customObjManager);
+        this.services = {
+            get asyncMode() {
+                return primitiveRedactor.usesAsyncRedactor();
+            },
+            ruleResolver: this.ruleResolver,
+            secretManager,
+            valuePatternMatcher,
+            setPrimitive: (container, key, primitive) => this.setPrimitive(container, key, primitive),
+            setPrimitiveFromValue: (container, key, value) => this.setPrimitiveFromValue(container, key, value),
+            setPrimitiveValueIfSecret: (container, key, secretKey, value, forceDeepRedaction) => this.setPrimitiveValueIfSecret(container, key, secretKey, value, forceDeepRedaction),
+            redactSecretFields: (container, forceDeepRedaction, pathSegments) => this.redactSecretFields(container, forceDeepRedaction, pathSegments),
+            handleCustomObject: (container, customObject) => this.handleCustomObject(container, customObject),
+            redactArrayInObject: (array, key, forceDeepRedaction, parent, pathSegments) => this.redactArrayInObject(array, key, forceDeepRedaction, parent, pathSegments),
+            redactAllArrayValues: (array, forceDeepRedaction, copyOnWrite, pathSegments) => this.redactAllArrayValues(array, forceDeepRedaction, copyOnWrite, pathSegments)
+        };
+        this.arrayRedactor = new arrayRedaction_1.ArrayRedactor(this.services);
+        this.customObjectHandler = new customObjectFieldHandler_1.CustomObjectFieldHandler(this.services);
+    }
+    usesAsyncRedactor() {
+        return this.primitiveRedactor.usesAsyncRedactor();
+    }
+    redactInPlace(value) {
+        const result = this.traverseRedact(value, false);
+        if (result instanceof Promise) {
+            throw new Error('Unexpected async work on sync traversal path');
+        }
+        return result;
+    }
+    redactCopyOnWrite(value) {
+        const result = this.traverseRedact(value, true);
+        if (result instanceof Promise) {
+            throw new Error('Unexpected async work on sync traversal path');
+        }
+        return result;
+    }
+    redactInPlaceAsync(value) {
+        return Promise.resolve(this.traverseRedact(value, false));
+    }
+    get asyncMode() {
+        return this.primitiveRedactor.usesAsyncRedactor();
+    }
+    traverseRedact(value, copyOnWrite) {
+        const container = (0, objectRedactorMutation_1.createContainerMutation)(value, copyOnWrite);
+        const customObject = this.ruleResolver.getMatchingSchema(value);
+        const work = customObject && (0, types_1.isJsonObject)(value)
+            ? this.handleCustomObject(container, customObject)
+            : this.redactSecretFields(container, false, []);
+        return (0, maybeAsync_1.finalizeMaybeAsync)(work, () => (copyOnWrite ? container.result() : value), this.asyncMode);
+    }
+    handleCustomObject(container, customObject) {
+        return this.customObjectHandler.handleCustomObject(container, customObject);
+    }
+    redactArrayInObject(array, key, forceDeepRedaction, parent, pathSegments) {
+        return this.arrayRedactor.redactArrayInObject(array, key, forceDeepRedaction, parent, pathSegments);
+    }
+    redactAllArrayValues(array, forceDeepRedaction, copyOnWrite, pathSegments) {
+        return this.arrayRedactor.redactAllArrayValues(array, forceDeepRedaction, copyOnWrite, pathSegments);
+    }
+    redactPrimitive(value) {
+        return this.asyncMode ? this.primitiveRedactor.redactValue(value) : this.primitiveRedactor.redactValueSync(value);
+    }
+    setPrimitive(container, key, primitive) {
+        const redacted = this.redactPrimitive(primitive);
+        if (redacted instanceof Promise) {
+            return redacted.then((result) => {
+                container.set(key, result);
+            });
+        }
+        container.set(key, redacted);
+    }
+    setPrimitiveFromValue(container, key, value) {
+        return this.setPrimitive(container, key, (0, objectRedactorHelpers_1.getStringValue)(value));
+    }
+    chainHandled(work) {
+        if (work instanceof Promise) {
+            return work.then(() => 'handled');
+        }
+        return 'handled';
+    }
+    applyFieldDisposition(disposition, value, key, fieldPath, container) {
+        switch (disposition.action) {
+            case 'skip':
+                return 'handled';
+            case 'remove':
+                container.remove(key);
+                return 'handled';
+            case 'opaque':
+                return this.chainHandled(this.setPrimitiveFromValue(container, key, value));
+            case 'deep':
+                return this.chainHandled(this.redactFieldValue(value, key, true, container, fieldPath));
+            case 'shallow':
+                if (Array.isArray(value) || (0, types_1.isJsonObject)(value)) {
+                    return this.chainHandled(this.redactFieldValue(value, key, false, container, fieldPath));
+                }
+                return this.chainHandled(this.setPrimitive(container, key, (0, objectRedactorHelpers_1.toRedactablePrimitive)(value)));
+            case 'pass-key-recurse':
+                if (Array.isArray(value) || (0, types_1.isJsonObject)(value)) {
+                    return this.chainHandled(this.redactFieldValue(value, key, false, container, fieldPath));
+                }
+                return 'handled';
+            default:
+                return 'default';
+        }
+    }
+    redactFieldValue(value, key, forceDeepRedaction, container, fieldPath) {
+        if (Array.isArray(value)) {
+            return this.redactArrayInObject(value, key, forceDeepRedaction, container, fieldPath);
+        }
+        if ((0, types_1.isJsonObject)(value)) {
+            return this.redactNestedObject(value, key, forceDeepRedaction, container, fieldPath);
+        }
+        return this.setPrimitiveValueIfSecret(container, key, key, value, forceDeepRedaction);
+    }
+    redactSecretFields(container, forceDeepRedaction, pathSegments) {
+        const record = container.source;
+        return (0, maybeAsync_1.runSequential)(Object.keys(record), (key) => this.processSecretField(record, key, forceDeepRedaction, pathSegments, container), this.asyncMode);
+    }
+    processSecretField(record, key, forceDeepRedaction, pathSegments, container) {
+        const fieldValue = record[key];
+        const fieldPath = [...pathSegments, key];
+        const customObject = (0, types_1.isJsonObject)(fieldValue) ? this.ruleResolver.getMatchingSchema(fieldValue) : undefined;
+        if (customObject && (0, types_1.isJsonObject)(fieldValue)) {
+            const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
+            return (0, maybeAsync_1.finalizeMaybeAsync)(this.handleCustomObject(child, customObject), () => {
+                if (container.copyOnWrite) {
+                    container.set(key, child.result());
+                }
+            }, this.asyncMode);
+        }
+        const disposition = this.ruleResolver.resolvePathDisposition(pathSegments, key, forceDeepRedaction);
+        const dispositionResult = this.applyFieldDisposition(disposition, fieldValue, key, fieldPath, container);
+        if (dispositionResult instanceof Promise) {
+            return dispositionResult.then((handled) => handled === 'handled'
+                ? undefined
+                : this.applyDefaultSecretRules(fieldValue, key, forceDeepRedaction, container, fieldPath));
+        }
+        if (dispositionResult === 'handled') {
+            return;
+        }
+        return this.applyDefaultSecretRules(fieldValue, key, forceDeepRedaction, container, fieldPath);
+    }
+    applyDefaultSecretRules(fieldValue, key, forceDeepRedaction, container, fieldPath) {
+        if (this.ruleResolver.shouldRemoveByKey(key)) {
+            container.remove(key);
+            return;
+        }
+        if (this.ruleResolver.shouldOpaqueByKey(key)) {
+            return this.setPrimitiveFromValue(container, key, fieldValue);
+        }
+        if (Array.isArray(fieldValue)) {
+            return this.redactArrayInObject(fieldValue, key, forceDeepRedaction, container, fieldPath);
+        }
+        if ((0, types_1.isJsonObject)(fieldValue)) {
+            return this.redactNestedObject(fieldValue, key, forceDeepRedaction, container, fieldPath);
+        }
+        return this.setPrimitiveValueIfSecret(container, key, key, fieldValue, forceDeepRedaction);
+    }
+    redactNestedObject(value, key, forceDeepRedaction, parent, pathSegments) {
+        const child = (0, objectRedactorMutation_1.createContainerMutation)(value, parent.copyOnWrite);
+        const customObject = this.ruleResolver.getMatchingSchema(value);
+        const work = customObject
+            ? this.handleCustomObject(child, customObject)
+            : this.redactSecretFields(child, this.ruleResolver.forceDeepForKey(key, forceDeepRedaction), pathSegments);
+        return (0, maybeAsync_1.finalizeMaybeAsync)(work, () => {
+            if (parent.copyOnWrite) {
+                parent.set(key, child.result());
+            }
+        }, this.asyncMode);
+    }
+    setPrimitiveValueIfSecret(container, key, secretKey, value, forceDeepRedaction) {
+        const redacted = (0, objectRedactorHelpers_1.redactPrimitiveValueIfSecret)(this.secretManager, this.valuePatternMatcher, (primitive) => this.redactPrimitive(primitive), secretKey, value, forceDeepRedaction);
+        if (redacted instanceof Promise) {
+            return redacted.then((result) => {
+                container.set(key, result);
+            });
+        }
+        container.set(key, redacted);
+    }
+}
+exports.ObjectRedactorTraversal = ObjectRedactorTraversal;
+//# sourceMappingURL=objectRedactorTraversal.js.map

package/dist/engine/objectRedactorTraversal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectRedactorTraversal.js","sourceRoot":"","sources":["../../src/engine/objectRedactorTraversal.ts"],"names":[],"mappings":";;;AAAA,oCAWkB;AAIlB,qEAAsF;AAGtF,mEAIiC;AACjC,wDAAuE;AACvE,mDAAmF;AACnF,qDAAiD;AACjD,yEAAsE;AAGtE;;;GAGG;AACH,MAAa,uBAAuB;IAMlC,YACmB,iBAAoC,EACpC,aAA4B,EAC7C,gBAAqC,EACpB,mBAAwC,EACzD,eAAgC;QAJf,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,kBAAa,GAAb,aAAa,CAAe;QAE5B,wBAAmB,GAAnB,mBAAmB,CAAqB;QAGzD,IAAI,CAAC,YAAY,GAAG,IAAI,2BAAY,CAClC,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,gBAAgB,CACjB,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,IAAI,SAAS;gBACX,OAAO,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;YAC/C,CAAC;YACD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa;YACb,mBAAmB;YACnB,YAAY,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC;YACzF,qBAAqB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC;YACnG,yBAAyB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAClF,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC;YACtF,kBAAkB,EAAE,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,EAAE,CAClE,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,CAAC;YACtE,kBAAkB,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC;YACjG,mBAAmB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAC5E,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,CAAC;YAChF,oBAAoB,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CAC7E,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC;SAClF,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,mBAAmB,GAAG,IAAI,mDAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;IACpD,CAAC;IAED,aAAa,CAA4B,KAAQ;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CAA4B,KAAQ;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB,CAA4B,KAAQ;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAY,SAAS;QACnB,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;IACpD,CAAC;IAEO,cAAc,CAA4B,KAAQ,EAAE,WAAoB;QAC9E,MAAM,SAAS,GAAG,IAAA,gDAAuB,EAAC,KAA+B,EAAE,WAAW,CAAC,CAAC;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,IAAI,GACR,YAAY,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAA0C,EAAE,YAAY,CAAC;YACnF,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAEpD,OAAO,IAAA,+BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzG,CAAC;IAEO,kBAAkB,CAAC,SAAwC,EAAE,YAA0B;QAC7F,OAAO,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IAEO,mBAAmB,CACzB,KAAgB,EAChB,GAAW,EACX,kBAA2B,EAC3B,MAAiD,EACjD,YAAoC;QAEpC,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACtG,CAAC;IAEO,oBAAoB,CAC1B,KAAgB,EAChB,kBAA2B,EAC3B,WAAoB,EACpB,YAAoC;QAEpC,OAAO,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACvG,CAAC;IAEO,eAAe,CAAC,KAA0B;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACpH,CAAC;IAEO,YAAY,CAClB,SAAoD,EACpD,GAAW,EACX,SAA8B;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAEO,qBAAqB,CAC3B,SAAoD,EACpD,GAAW,EACX,KAA4B;QAE5B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,IAAA,sCAAc,EAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,YAAY,CAAC,IAAsB;QACzC,IAAI,IAAI,YAAY,OAAO,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,qBAAqB,CAC3B,WAA6B,EAC7B,KAA4B,EAC5B,GAAW,EACX,SAAiC,EACjC,SAAoD;QAEpD,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM;gBACT,OAAO,SAAS,CAAC;YACnB,KAAK,QAAQ;gBACX,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO,SAAS,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9E,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1F,KAAK,SAAS;gBACZ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC3F,CAAC;gBAED,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,IAAA,6CAAqB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5F,KAAK,kBAAkB;gBACrB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC3F,CAAC;gBAED,OAAO,SAAS,CAAC;YACnB;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,gBAAgB,CACtB,KAA4B,EAC5B,GAAW,EACX,kBAA2B,EAC3B,SAAoD,EACpD,SAAiC;QAEjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxF,CAAC;IAEO,kBAAkB,CACxB,SAAoD,EACpD,kBAA2B,EAC3B,YAAoC;QAEpC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAoB,CAAC;QAE9C,OAAO,IAAA,0BAAa,EAClB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACnB,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,CAAC,EAC1F,IAAI,CAAC,SAAS,CACf,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,MAAkB,EAClB,GAAW,EACX,kBAA2B,EAC3B,YAAoC,EACpC,SAAoD;QAEpD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAA,oBAAY,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5G,IAAI,YAAY,IAAI,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YACzE,OAAO,IAAA,+BAAkB,EACvB,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,EAC5C,GAAG,EAAE;gBACH,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;oBAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,EACD,IAAI,CAAC,SAAS,CACf,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,YAAY,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpG,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACzG,IAAI,iBAAiB,YAAY,OAAO,EAAE,CAAC;YACzC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAC5F,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,OAAO,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjG,CAAC;IAEO,uBAAuB,CAC7B,UAAiC,EACjC,GAAW,EACX,kBAA2B,EAC3B,SAAoD,EACpD,SAAiC;QAEjC,IAAI,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,IAAI,CAAC,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC7F,CAAC;IAEO,kBAAkB,CACxB,KAAiB,EACjB,GAAW,EACX,kBAA2B,EAC3B,MAAiD,EACjD,YAAoC;QAEpC,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,YAAY;YACvB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,kBAAkB,CACrB,KAAK,EACL,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAC1D,YAAY,CACb,CAAC;QAEN,OAAO,IAAA,+BAAkB,EACvB,IAAI,EACJ,GAAG,EAAE;YACH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,EACD,IAAI,CAAC,SAAS,CACf,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAC/B,SAAoD,EACpD,GAAW,EACX,SAA+B,EAC/B,KAAgC,EAChC,kBAA2B;QAE3B,MAAM,QAAQ,GAAG,IAAA,oDAA4B,EAC3C,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,mBAAmB,EACxB,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAC9C,SAAS,EACT,KAAK,EACL,kBAAkB,CACnB,CAAC;QAEF,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;CACF;AAzUD,0DAyUC"}

package/dist/engine/primitiveRedactor.d.ts

@@ -0,0 +1,33 @@
+import { PrimitiveRedactorConfig, RedactablePrimitive, RedactedPrimitive } from '../types';
+/**
+ * Redacts primitive values based on the configuration provided in the constructor. Uses the redactor
+ * privded in the constructor to redact values, or a basic redactor which returns 'REDACTED' if no redactor
+ * provided. Null and undefined values are ignored by default.
+ */
+export declare class PrimitiveRedactor {
+    private static DEFAULT_REDACTED_TEXT;
+    private readonly ignoreBooleans;
+    private readonly ignoreNullOrUndefined;
+    private readonly useAsyncRedactor;
+    private readonly syncRedactor;
+    private readonly asyncRedactor?;
+    /**
+     * Creates a PrimitiveRedactor with the specified configuration.
+     * @param config The PrimitiveRedactor configuration which specifies the redactor to use, whether to
+     * ignore booleans, and whether to ignore null or undefined values.
+     */
+    constructor(config: PrimitiveRedactorConfig);
+    usesAsyncRedactor(): boolean;
+    /**
+     * Redacts the primitive value based on the configuration provided in the constructor.
+     * @param value The value to redact.
+     * @returns The redacted value.
+     */
+    redactValue(value: RedactablePrimitive): Promise<RedactedPrimitive>;
+    /**
+     * Synchronously redacts a primitive value without Promise allocation.
+     */
+    redactValueSync(value: RedactablePrimitive): RedactedPrimitive;
+    private redactWith;
+}
+//# sourceMappingURL=primitiveRedactor.d.ts.map

package/dist/engine/primitiveRedactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitiveRedactor.d.ts","sourceRoot":"","sources":["../../src/engine/primitiveRedactor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EAIlB,MAAM,UAAU,CAAC;AAElB;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAc;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAW;IAE1C;;;;OAIG;gBACS,MAAM,EAAE,uBAAuB;IAepC,iBAAiB,IAAI,OAAO;IAInC;;;;OAIG;IACU,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQhF;;OAEG;IACI,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB;IAIrE,OAAO,CAAC,UAAU;CAkBnB"}

package/dist/engine/primitiveRedactor.js

@@ -0,0 +1,75 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrimitiveRedactor = void 0;
+/**
+ * Redacts primitive values based on the configuration provided in the constructor. Uses the redactor
+ * privded in the constructor to redact values, or a basic redactor which returns 'REDACTED' if no redactor
+ * provided. Null and undefined values are ignored by default.
+ */
+class PrimitiveRedactor {
+    /**
+     * Creates a PrimitiveRedactor with the specified configuration.
+     * @param config The PrimitiveRedactor configuration which specifies the redactor to use, whether to
+     * ignore booleans, and whether to ignore null or undefined values.
+     */
+    constructor(config) {
+        var _a;
+        this.ignoreBooleans = config.ignoreBooleans;
+        this.ignoreNullOrUndefined = config.ignoreNullOrUndefined;
+        this.useAsyncRedactor = !!config.redactor && !config.syncRedactor;
+        this.syncRedactor = (_a = config.syncRedactor) !== null && _a !== void 0 ? _a : (config.redactor
+            ? () => {
+                throw new Error('Sync redaction is not available without syncRedactor configuration');
+            }
+            : () => PrimitiveRedactor.DEFAULT_REDACTED_TEXT);
+        if (config.redactor) {
+            this.asyncRedactor = config.redactor;
+        }
+    }
+    usesAsyncRedactor() {
+        return this.useAsyncRedactor;
+    }
+    /**
+     * Redacts the primitive value based on the configuration provided in the constructor.
+     * @param value The value to redact.
+     * @returns The redacted value.
+     */
+    redactValue(value) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.useAsyncRedactor) {
+                return this.redactValueSync(value);
+            }
+            return this.redactWith(value, (input) => this.asyncRedactor(input));
+        });
+    }
+    /**
+     * Synchronously redacts a primitive value without Promise allocation.
+     */
+    redactValueSync(value) {
+        return this.redactWith(value, (input) => this.syncRedactor(input));
+    }
+    redactWith(value, apply) {
+        if (typeof value === 'boolean') {
+            return this.ignoreBooleans ? value : apply(value);
+        }
+        if (value === null || value === undefined) {
+            return this.ignoreNullOrUndefined ? value : apply(value);
+        }
+        if (value === '' || value === 0) {
+            return this.ignoreNullOrUndefined ? value : apply(value);
+        }
+        return apply(value);
+    }
+}
+exports.PrimitiveRedactor = PrimitiveRedactor;
+PrimitiveRedactor.DEFAULT_REDACTED_TEXT = 'REDACTED';
+//# sourceMappingURL=primitiveRedactor.js.map

package/dist/engine/primitiveRedactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitiveRedactor.js","sourceRoot":"","sources":["../../src/engine/primitiveRedactor.ts"],"names":[],"mappings":";;;;;;;;;;;;AASA;;;;GAIG;AACH,MAAa,iBAAiB;IAQ5B;;;;OAIG;IACH,YAAY,MAA+B;;QACzC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClE,IAAI,CAAC,YAAY,GAAG,MAAA,MAAM,CAAC,YAAY,mCAAI,CAAC,MAAM,CAAC,QAAQ;YACzD,CAAC,CAAC,GAAG,EAAE;gBACH,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACxF,CAAC;YACH,CAAC,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAEnD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvC,CAAC;IACH,CAAC;IAEM,iBAAiB;QACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACU,WAAW,CAAC,KAA0B;;YACjD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAc,CAAC,KAAK,CAAC,CAA+B,CAAC;QACrG,CAAC;KAAA;IAED;;OAEG;IACI,eAAe,CAAC,KAA0B;QAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAsB,CAAC;IAC1F,CAAC;IAEO,UAAU,CAChB,KAA0B,EAC1B,KAA+E;QAE/E,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;;AArEH,8CAsEC;AArEgB,uCAAqB,GAAG,UAAU,CAAC"}

package/dist/engine/traversalServices.d.ts

@@ -0,0 +1,21 @@
+import { CustomObject, JsonArray, JsonLeafValue, JsonObject, JsonValue, RedactablePrimitive, SecretSpecifierValue } from '../types';
+import { ContainerMutation } from './objectRedactorMutation';
+import { RuleResolver } from '../rules/ruleResolver';
+import { SecretManager } from '../rules/secretManager';
+import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
+import { MaybeAsync } from '../util/maybeAsync';
+/** Shared capabilities used by array and custom-object redaction modules. */
+export type TraversalServices = {
+    readonly asyncMode: boolean;
+    readonly ruleResolver: RuleResolver;
+    readonly secretManager: SecretManager;
+    readonly valuePatternMatcher: ValuePatternMatcher;
+    setPrimitive(container: ContainerMutation<JsonObject | JsonArray>, key: string, primitive: RedactablePrimitive): MaybeAsync<void>;
+    setPrimitiveFromValue(container: ContainerMutation<JsonObject | JsonArray>, key: string, value: JsonValue | undefined): MaybeAsync<void>;
+    setPrimitiveValueIfSecret(container: ContainerMutation<JsonObject | JsonArray>, key: string, secretKey: SecretSpecifierValue, value: JsonLeafValue | undefined, forceDeepRedaction: boolean): MaybeAsync<void>;
+    redactSecretFields(container: ContainerMutation<JsonObject | JsonArray>, forceDeepRedaction: boolean, pathSegments: Array<string | number>): MaybeAsync<void>;
+    handleCustomObject(container: ContainerMutation<JsonObject>, customObject: CustomObject): MaybeAsync<void>;
+    redactArrayInObject(array: JsonArray, key: string, forceDeepRedaction: boolean, parent: ContainerMutation<JsonObject | JsonArray>, pathSegments: Array<string | number>): MaybeAsync<void>;
+    redactAllArrayValues(array: JsonArray, forceDeepRedaction: boolean, copyOnWrite: boolean, pathSegments: Array<string | number>): MaybeAsync<JsonArray>;
+};
+//# sourceMappingURL=traversalServices.d.ts.map

package/dist/engine/traversalServices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traversalServices.d.ts","sourceRoot":"","sources":["../../src/engine/traversalServices.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,SAAS,EACT,aAAa,EACb,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,6EAA6E;AAC7E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,YAAY,CACV,SAAS,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACpD,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,mBAAmB,GAC7B,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,qBAAqB,CACnB,SAAS,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACpD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAAG,SAAS,GAC3B,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,yBAAyB,CACvB,SAAS,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACpD,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,oBAAoB,EAC/B,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,kBAAkB,EAAE,OAAO,GAC1B,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,kBAAkB,CAChB,SAAS,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACpD,kBAAkB,EAAE,OAAO,EAC3B,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,kBAAkB,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3G,mBAAmB,CACjB,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,MAAM,EAAE,iBAAiB,CAAC,UAAU,GAAG,SAAS,CAAC,EACjD,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,oBAAoB,CAClB,KAAK,EAAE,SAAS,EAChB,kBAAkB,EAAE,OAAO,EAC3B,WAAW,EAAE,OAAO,EACpB,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GACnC,UAAU,CAAC,SAAS,CAAC,CAAC;CAC1B,CAAC"}

package/dist/engine/traversalServices.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=traversalServices.js.map

package/dist/engine/traversalServices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traversalServices.js","sourceRoot":"","sources":["../../src/engine/traversalServices.ts"],"names":[],"mappings":""}

package/dist/fieldDisposition.d.ts

@@ -0,0 +1,3 @@
+export type { FieldDisposition } from './ruleResolver';
+export { resolvePathDisposition as resolveFieldDisposition } from './ruleResolver';
+//# sourceMappingURL=fieldDisposition.d.ts.map

package/dist/fieldDisposition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldDisposition.d.ts","sourceRoot":"","sources":["../src/fieldDisposition.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,IAAI,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/fieldDisposition.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFieldDisposition = void 0;
+var ruleResolver_1 = require("./ruleResolver");
+Object.defineProperty(exports, "resolveFieldDisposition", { enumerable: true, get: function () { return ruleResolver_1.resolvePathDisposition; } });
+//# sourceMappingURL=fieldDisposition.js.map

package/dist/fieldDisposition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldDisposition.js","sourceRoot":"","sources":["../src/fieldDisposition.ts"],"names":[],"mappings":";;;AACA,+CAAmF;AAA1E,uHAAA,sBAAsB,OAA2B"}

package/dist/fieldRedactor.d.ts

@@ -8,12 +8,7 @@ import { DryRunResult, FieldRedactorConfig, RedactableInput } from './types';
  */
 export declare class FieldRedactor {
     private readonly deepCopy;
-    private readonly objectRedactor;
-    private readonly customObjectManager;
-    private readonly secretManager;
-    private readonly usesAsyncRedactor;
-    private readonly cloneInput;
-    private readonly valuePatternMatcher;
+    private readonly deps;
     /** Non-fatal configuration warnings from the last construction (empty when `strict` threw). */
     readonly configWarnings: readonly string[];
     constructor(config?: FieldRedactorConfig);
@@ -24,22 +19,17 @@ export declare class FieldRedactor {
      * Unlike `new FieldRedactor()`, omitting all rules does not default to redacting every value.
      */
     static createSafe(config: FieldRedactorConfig): FieldRedactor;
-    /**
-     * Redacts a copy of the input and returns an audit report of affected paths without mutating the original.
-     */
+    /** Redacts a copy of the input and returns an audit report of affected paths without mutating the original. */
     dryRun<T extends RedactableInput>(value: T): Promise<DryRunResult<T>>;
-    /**
-     * Synchronous {@link FieldRedactor.dryRun} without per-field Promise overhead.
-     */
+    /** Synchronous {@link FieldRedactor.dryRun} without per-field Promise overhead. */
     dryRunSync<T extends RedactableInput>(value: T): DryRunResult<T>;
+    private runDryRun;
     private emptyDryRunResult;
     private toDryRunResult;
     /**
      * Conditionally redacts fields in the JSON object based on the configuration provided in the constructor and returns the
      * redacted result.
      * If the value is a primitive, undefined, or date, returns the value as-is.
-     * @param value The JSON value to redact. If primitive it will be resolved as-is.
-     * @returns The redacted JSON object.
      */
     redact<T extends RedactableInput>(value: T): Promise<T>;
     /**
@@ -47,19 +37,14 @@ export declare class FieldRedactor {
      * Uses copy-on-write structural sharing by default so only mutated branches are cloned.
      */
     redactSync<T extends RedactableInput>(value: T): T;
-    /**
-     * Conditionally redacts fields in the JSON object in place based on the configuration provided in the constructor.
-     * If the value is a primitive, undefined, or date, returns the value as-is.
-     * @param value The JSON value to redact in place. If primitive it will be resolved as-is.
-     */
+    /** Conditionally redacts fields in the JSON object in place based on the configuration provided in the constructor. */
     redactInPlace<T extends RedactableInput>(value: T): Promise<void>;
     /**
      * Synchronously redacts fields in the JSON object in place without per-field Promise overhead.
      * Requires a `syncRedactor` or the default redactor; throws when only an async `redactor` is configured.
      */
     redactInPlaceSync<T extends RedactableInput>(value: T): void;
-    private runTraversableRedactionSync;
-    private runTraversableRedactionAsync;
+    private runTraversableRedaction;
     private toFieldRedactorError;
     private isPrimitiveOrUndefined;
 }

package/dist/fieldRedactor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fieldRedactor.d.ts","sourceRoot":"","sources":["../src/fieldRedactor.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,mBAAmB,EAInB,eAAe,EAEhB,MAAM,SAAS,CAAC;AASjB;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAmE;IAEvG,+FAA+F;IAC/F,SAAgB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEtC,MAAM,CAAC,EAAE,mBAAmB;IAgBxC;;;;;OAKG;WACW,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa;IAUpE;;OAEG;IACU,MAAM,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IASlF;;OAEG;IACI,UAAU,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;IASvE,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,cAAc;IAatB;;;;;;OAMG;IACU,MAAM,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBpE;;;OAGG;IACI,UAAU,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAazD;;;;OAIG;IACU,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9E;;;OAGG;IACI,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAQnE,OAAO,CAAC,2BAA2B;YAYrB,4BAA4B;IAe1C,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,sBAAsB;CAG/B"}
+{"version":3,"file":"fieldRedactor.d.ts","sourceRoot":"","sources":["../src/fieldRedactor.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,mBAAmB,EAInB,eAAe,EAEhB,MAAM,SAAS,CAAC;AAKjB;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IAEzC,+FAA+F;IAC/F,SAAgB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEtC,MAAM,CAAC,EAAE,mBAAmB;IASxC;;;;;OAKG;WACW,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa;IAUpE,+GAA+G;IAClG,MAAM,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAIlF,mFAAmF;IAC5E,UAAU,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;IASvE,OAAO,CAAC,SAAS;IAiBjB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,cAAc;IActB;;;;OAIG;IACU,MAAM,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBpE;;;OAGG;IACI,UAAU,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAazD,uHAAuH;IAC1G,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9E;;;OAGG;IACI,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAQnE,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,sBAAsB;CAG/B"}