mask

type ActiveHasher interface {
	Version() int
	Fingerprint(value string) string
}

type Algorithm string

type ColumnSource struct {
	Column string
	Source model.ObjectRef
}

type Identity struct {
	AlgorithmID         string
	SemanticVersion     string
	KeyID               string
	KeyVersion          int
	CanonicalParameters string
	InputType           string
	OutputType          string
}

type IdentityOnlyRedactor interface {
	Redactor
	BuildIdentityPlan([]IdentityRequest) ([]IdentityPlan, error)
	ApplyIdentityPlan(model.QueryResult, []IdentityPlan) (model.QueryResult, RedactReport, error)
}

type IdentityPlan struct {
	OutputIndex int
	Identity    Identity
	// contains filtered or unexported fields
}

type IdentityRequest struct {
	OutputIndex int
	ResultName  string
	Sources     []PhysicalColumn
}

type Option func(*redactorOptions)

type PhysicalColumn struct {
	Schema    string
	Table     string
	Column    string
	InputType string
}

type ProjectionLineageAwareRedactor interface {
	Redactor
	ApplyWithProjectionLineages(result model.QueryResult, aligned [][]model.LineageArm) (model.QueryResult, RedactReport)
}

type RangeGranularity string

type RangeParams struct {
	BucketWidth  *int64
	BucketOffset *int64
	Granularity  *RangeGranularity
}

type RedactReport struct {
	// TouchedColumns includes columns whose values are all empty/null sentinels.
	TouchedColumns map[int]SensitiveType
	// MaskedCells is the number of non-empty cells successfully processed or
	// replaced fail-closed.
	MaskedCells       int
	HashFallbackCount int `json:"hash_fallback_count,omitempty"`
	// HashKeyVersion is present only when at least one non-empty cell was
	// successfully fingerprinted with the assembled active key.
	HashKeyVersion *int `json:"-"`
	// UnresolvedScopedColumns records scoped-rule columns that were protected
	// by the fixed block fallback because their physical source was unresolved.
	// A column is included only when at least one non-empty cell was replaced.
	UnresolvedScopedColumns map[int]SensitiveType `json:"unresolved_scoped_columns,omitempty"`
}

type RedactionPlan struct {
	// contains filtered or unexported fields
}

type Redactor interface {
	Apply(result model.QueryResult) (model.QueryResult, RedactReport)
}

type RelationSourceAwareRedactor interface {
	Redactor
	ApplyWithColumnSources(result model.QueryResult, sources []ColumnSource, possibleRelations []model.ObjectRef) (model.QueryResult, RedactReport)
}

type Rule struct {
	Schema        string
	Table         string
	Column        string
	SensitiveType SensitiveType
	Algorithm     Algorithm
	Range         *RangeParams
}

type SensitiveType string

type SourceAwareRedactor interface {
	Redactor
	ApplyWithSourceColumns(result model.QueryResult, sources []string) (model.QueryResult, RedactReport)
}