earl 0.5.2

AI-safe CLI for AI agents
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use earl_core::Redactor;
use serde_json::json;

#[test]
fn plaintext_secret_removed_from_output() {
    let redactor = Redactor::new(vec!["token-abc".to_string()]);
    let input = "Authorization: Bearer token-abc";
    let output = redactor.redact(input);
    assert!(!output.contains("token-abc"));
}

#[test]
fn plaintext_secret_replaced_with_redacted_marker() {
    let redactor = Redactor::new(vec!["token-abc".to_string()]);
    let input = "Authorization: Bearer token-abc";
    let output = redactor.redact(input);
    assert!(output.contains("[REDACTED]"));
}

#[test]
fn overlapping_secrets_removed_from_output() {
    let redactor = Redactor::new(vec!["token-abc".to_string(), "abc".to_string()]);
    let input = "Authorization: Bearer token-abc";
    let output = redactor.redact(input);
    assert!(!output.contains("token-abc"));
}

#[test]
fn json_top_level_value_replaced_with_redacted_marker() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let payload = json!({
        "token": "super-secret",
        "nested": {
            "arr": ["ok", "super-secret"]
        }
    });

    let redacted = redactor.redact_json(&payload);
    assert_eq!(redacted["token"], json!("[REDACTED]"));
}

#[test]
fn json_nested_array_value_replaced_with_redacted_marker() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let payload = json!({
        "token": "super-secret",
        "nested": {
            "arr": ["ok", "super-secret"]
        }
    });

    let redacted = redactor.redact_json(&payload);
    assert_eq!(redacted["nested"]["arr"][1], json!("[REDACTED]"));
}

#[test]
fn base64_encoded_secret_removed_from_output() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let input = "b64=c3VwZXItc2VjcmV0";
    let output = redactor.redact(input);
    assert!(!output.contains("c3VwZXItc2VjcmV0"));
}

#[test]
fn base64_encoded_secret_replaced_with_redacted_marker() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let input = "b64=c3VwZXItc2VjcmV0";
    let output = redactor.redact(input);
    assert!(output.contains("[REDACTED]"));
}

#[test]
fn hex_encoded_secret_removed_from_output() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let input = "hex=73757065722d736563726574";
    let output = redactor.redact(input);
    assert!(!output.contains("73757065722d736563726574"));
}

#[test]
fn hex_encoded_secret_replaced_with_redacted_marker() {
    let redactor = Redactor::new(vec!["super-secret".to_string()]);
    let input = "hex=73757065722d736563726574";
    let output = redactor.redact(input);
    assert!(output.contains("[REDACTED]"));
}