INNER CODE UNIT · Python

_sanitize_for_model

ASCIT31/Dark-Moon · mcp/src/server.py:211

def _sanitize_for_model(value: Any, session_id: Optional[str]) -> Any:
    """Re-tokenize any real value in a tool result/error via the session vault.

    Idempotent: values already turned into placeholders do not match any category
    pattern, so re-running it over already-sanitized execute_command output is a
    no-op. Never raises — sanitization must not turn a working tool into an error.
    """
    if not PRIVACY_ENABLED:
        return value
    try:
        with _vault_lock:
            vault = _get_vault(session_id)
            if vault is None or not (
                _privacy_enabled_for(session_id) or vault.known_placeholders()
            ):
                return value
            return _command_gateway.sanitize_result(value, vault)
    except Exception:  # noqa: BLE001 — sanitization must be fail-safe

View source record →