| | | 1 | | using AsiBackbone.Core.Results; |
| | | 2 | | |
| | | 3 | | namespace AsiBackbone.Core.Metadata; |
| | | 4 | | |
| | | 5 | | /// <summary> |
| | | 6 | | /// Provides the default provider-neutral governance metadata classification, sanitation, and budget-validation pipeline |
| | | 7 | | /// </summary> |
| | | 8 | | /// <remarks> |
| | | 9 | | /// The pipeline normalizes caller-owned metadata into a new collection, applies classifiers in registration order, |
| | | 10 | | /// removes or redacts values as directed, and then applies <see cref="GovernanceMetadataBudgetValidator" /> to the |
| | | 11 | | /// sanitized collection. Classifier exceptions are not converted into permissive results; they stop the pipeline so |
| | | 12 | | /// hosts do not accidentally persist or emit metadata that was not successfully classified. |
| | | 13 | | /// </remarks> |
| | | 14 | | public sealed class DefaultGovernanceMetadataSanitizer : IGovernanceMetadataSanitizer |
| | | 15 | | { |
| | 2 | 16 | | private static readonly IReadOnlyDictionary<string, string> EmptyMetadata = |
| | 2 | 17 | | GovernanceMetadataBudgetValidator.Normalize(null); |
| | | 18 | | |
| | | 19 | | private readonly IReadOnlyList<IGovernanceMetadataClassifier> classifiers; |
| | | 20 | | private readonly GovernanceMetadataBudget budget; |
| | | 21 | | |
| | | 22 | | /// <summary> |
| | | 23 | | /// Initializes a new instance of the <see cref="DefaultGovernanceMetadataSanitizer" /> class. |
| | | 24 | | /// </summary> |
| | | 25 | | /// <param name="classifiers">The host-owned classifiers applied in registration order.</param> |
| | | 26 | | /// <param name="budget">The metadata budget applied after classification and sanitation.</param> |
| | 10 | 27 | | public DefaultGovernanceMetadataSanitizer( |
| | 10 | 28 | | IEnumerable<IGovernanceMetadataClassifier>? classifiers = null, |
| | 10 | 29 | | GovernanceMetadataBudget? budget = null) |
| | | 30 | | { |
| | 10 | 31 | | IGovernanceMetadataClassifier[] resolvedClassifiers = classifiers?.ToArray() ?? []; |
| | | 32 | | |
| | 30 | 33 | | foreach (IGovernanceMetadataClassifier classifier in resolvedClassifiers) |
| | | 34 | | { |
| | 5 | 35 | | ArgumentNullException.ThrowIfNull(classifier); |
| | | 36 | | } |
| | | 37 | | |
| | 10 | 38 | | this.classifiers = resolvedClassifiers; |
| | 10 | 39 | | this.budget = budget ?? GovernanceMetadataBudget.Recommended; |
| | 10 | 40 | | } |
| | | 41 | | |
| | | 42 | | /// <inheritdoc /> |
| | | 43 | | public async ValueTask<GovernanceMetadataSanitizationResult> SanitizeAsync( |
| | | 44 | | IReadOnlyDictionary<string, string>? metadata, |
| | | 45 | | CancellationToken cancellationToken = default) |
| | | 46 | | { |
| | 8 | 47 | | cancellationToken.ThrowIfCancellationRequested(); |
| | | 48 | | |
| | 8 | 49 | | IReadOnlyDictionary<string, string> normalizedMetadata = |
| | 8 | 50 | | GovernanceMetadataBudgetValidator.Normalize(metadata); |
| | 8 | 51 | | Dictionary<string, string> sanitizedMetadata = new(normalizedMetadata.Count, StringComparer.Ordinal); |
| | 8 | 52 | | List<OperationReason> reasons = []; |
| | 8 | 53 | | GovernanceMetadataSanitizationAction overallAction = GovernanceMetadataSanitizationAction.Allow; |
| | | 54 | | |
| | 38 | 55 | | foreach (KeyValuePair<string, string> item in normalizedMetadata) |
| | | 56 | | { |
| | 11 | 57 | | cancellationToken.ThrowIfCancellationRequested(); |
| | | 58 | | |
| | 11 | 59 | | GovernanceMetadataSanitizationAction entryAction = GovernanceMetadataSanitizationAction.Allow; |
| | 11 | 60 | | string replacementValue = item.Value; |
| | 11 | 61 | | var context = new GovernanceMetadataClassificationContext( |
| | 11 | 62 | | item.Key, |
| | 11 | 63 | | item.Value, |
| | 11 | 64 | | normalizedMetadata); |
| | | 65 | | |
| | 40 | 66 | | foreach (IGovernanceMetadataClassifier classifier in classifiers) |
| | | 67 | | { |
| | 9 | 68 | | GovernanceMetadataClassificationResult classification = await classifier |
| | 9 | 69 | | .ClassifyAsync(context, cancellationToken) |
| | 9 | 70 | | .ConfigureAwait(false); |
| | | 71 | | |
| | 9 | 72 | | ArgumentNullException.ThrowIfNull(classification); |
| | | 73 | | |
| | 9 | 74 | | entryAction = GetStricterAction(entryAction, classification.Action); |
| | | 75 | | |
| | 9 | 76 | | if (classification.Reason is not null) |
| | | 77 | | { |
| | 9 | 78 | | reasons.Add(classification.Reason); |
| | | 79 | | } |
| | | 80 | | |
| | 9 | 81 | | if (classification.Action is GovernanceMetadataSanitizationAction.Redact) |
| | | 82 | | { |
| | 2 | 83 | | replacementValue = classification.ReplacementValue |
| | 2 | 84 | | ?? GovernanceMetadataClassificationResult.DefaultRedactedValue; |
| | | 85 | | } |
| | | 86 | | } |
| | | 87 | | |
| | 11 | 88 | | overallAction = GetStricterAction(overallAction, entryAction); |
| | | 89 | | |
| | 11 | 90 | | if (entryAction is GovernanceMetadataSanitizationAction.Allow |
| | 11 | 91 | | or GovernanceMetadataSanitizationAction.Warn) |
| | | 92 | | { |
| | 2 | 93 | | sanitizedMetadata[item.Key] = item.Value; |
| | | 94 | | } |
| | 9 | 95 | | else if (entryAction is GovernanceMetadataSanitizationAction.Redact) |
| | | 96 | | { |
| | 2 | 97 | | sanitizedMetadata[item.Key] = replacementValue; |
| | | 98 | | } |
| | 11 | 99 | | } |
| | | 100 | | |
| | 8 | 101 | | GovernanceMetadataBudgetValidationResult budgetValidation = |
| | 8 | 102 | | GovernanceMetadataBudgetValidator.Validate(sanitizedMetadata, budget); |
| | | 103 | | |
| | 8 | 104 | | if (!budgetValidation.IsValid) |
| | | 105 | | { |
| | 2 | 106 | | overallAction = GovernanceMetadataSanitizationAction.Deny; |
| | 2 | 107 | | reasons.Add(OperationReason.Create( |
| | 2 | 108 | | GovernanceMetadataSanitizationReasonCodes.BudgetViolation, |
| | 2 | 109 | | "Governance metadata failed the configured shape or reserved-key budget.")); |
| | | 110 | | } |
| | | 111 | | |
| | 8 | 112 | | IReadOnlyDictionary<string, string> forwardMetadata = |
| | 8 | 113 | | overallAction is GovernanceMetadataSanitizationAction.Deny |
| | 8 | 114 | | ? EmptyMetadata |
| | 8 | 115 | | : budgetValidation.NormalizedMetadata; |
| | | 116 | | |
| | 8 | 117 | | IReadOnlyList<OperationReason> resultReasons = reasons.Count == 0 |
| | 8 | 118 | | ? [] |
| | 8 | 119 | | : reasons.AsReadOnly(); |
| | | 120 | | |
| | 8 | 121 | | return GovernanceMetadataSanitizationResult.Create( |
| | 8 | 122 | | overallAction, |
| | 8 | 123 | | forwardMetadata, |
| | 8 | 124 | | resultReasons, |
| | 8 | 125 | | budgetValidation); |
| | 8 | 126 | | } |
| | | 127 | | |
| | | 128 | | private static GovernanceMetadataSanitizationAction GetStricterAction( |
| | | 129 | | GovernanceMetadataSanitizationAction current, |
| | | 130 | | GovernanceMetadataSanitizationAction candidate) |
| | | 131 | | { |
| | 20 | 132 | | return !Enum.IsDefined(candidate) |
| | 20 | 133 | | ? throw new ArgumentOutOfRangeException( |
| | 20 | 134 | | nameof(candidate), |
| | 20 | 135 | | candidate, |
| | 20 | 136 | | "Metadata sanitation action must be defined.") |
| | 20 | 137 | | : candidate > current ? candidate : current; |
| | | 138 | | } |
| | | 139 | | } |