Function maskCollected

apps/sim/lib/logs/execution/pii-redaction.ts:147–170

* Mask a batch of collected strings via Presidio. On a hard failure, either scrub * to REDACTION_FAILED_MARKER or throw PiiRedactionError, per * `options.onFailure`. Returns masked values aligned 1:1 with `collected`. * * There is no total-size ceiling — the batching layer chunks

(
  collected: string[],
  options: PiiRedactionOptions
)

 * rather than scrubbed. The per-chunk request timeout is the real backstop.
 */
async function maskCollected(
  collected: string[],
  options: PiiRedactionOptions
): Promise<{ masked: string[]; scrubbed: boolean }> {
  const onFailure = options.onFailure ?? 'scrub'
  const language = options.language ?? 'en'

  try {
    // Presidio runs only in the app container; the persist + execution paths also
    // run in the trigger.dev runtime, so masking always goes over HTTP to the app.
    const masked = await maskPIIBatchViaHttp(collected, options.entityTypes, language)
    return { masked, scrubbed: false }
  } catch (error) {
    logger.error('PII masking failed', {
      error: getErrorMessage(error),
      stringCount: collected.length,
      onFailure,
    })
    if (onFailure === 'throw') {
      throw new PiiRedactionError(`PII redaction failed: ${getErrorMessage(error)}`)
    }
    return { masked: collected.map(() => REDACTION_FAILED_MARKER), scrubbed: true }
  }
}

/**
 * Mask every eligible string leaf of an arbitrary object in place-preserving