qubit-json 0.7.0

Lenient JSON decoder for non-fully-trusted JSON text inputs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

// =============================================================================
//    Copyright (c) 2025 - 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Smoke tests for crate-level exports in `lib.rs`.

use crate::fixtures::{
    MAX_FUZZ_INPUT_BYTES,
    is_fuzz_input_within_limit,
};

use qubit_json::{
    ErrorPrivacyPolicy,
    JsonDecodeError,
    JsonDecodeErrorKind,
    JsonDecodeOptions,
    JsonDecodeStage,
    JsonTopLevelKind,
    LenientJsonDecoder,
};

/// Verifies that the crate re-exports its documented public API types.
///
/// # Panics
///
/// Panics when an exported type does not preserve its documented behavior.
#[test]
fn test_lib_exports_public_types() {
    let decoder = LenientJsonDecoder::default();
    let options = JsonDecodeOptions::default();
    let kind = JsonTopLevelKind::Other;
    let error_kind = JsonDecodeErrorKind::EmptyInput;
    let privacy_policy = ErrorPrivacyPolicy::Redacted;
    let error: JsonDecodeError = decoder
        .decode_value("")
        .expect_err("empty input should produce an exported error type");

    assert_eq!(decoder.options(), &options);
    assert_eq!(kind.to_string(), "other");
    assert_eq!(error.kind(), error_kind);
    assert_eq!(error.stage(), JsonDecodeStage::Normalize);
    assert_eq!(privacy_policy, ErrorPrivacyPolicy::default());
}

/// Verifies that pull-request CI enforces the repository's coverage thresholds.
///
/// # Panics
///
/// Panics when the workflow does not download and validate the coverage report.
#[test]
fn test_ci_workflow_enforces_coverage_thresholds() {
    let workflow = include_str!("../.github/workflows/ci.yml");

    assert!(workflow.contains("coverage-thresholds:"));
    assert!(workflow.contains("needs: rust-ci"));
    assert!(workflow.contains("actions/download-artifact@v8"));
    assert!(workflow.contains("name: coverage-reports"));
    assert!(workflow.contains("functions.percent < 100"));
    assert!(workflow.contains("lines.percent <= 95"));
    assert!(workflow.contains("regions.percent <= 95"));
}

/// Verifies that scheduled fuzzing preserves its corpus, bounds execution, and
/// retains failure artifacts.
///
/// # Panics
///
/// Panics when the workflow omits the corpus cache, execution bounds, or
/// decoder failure artifacts.
#[test]
fn test_fuzz_workflow_preserves_decoder_corpus() {
    let workflow = include_str!("../.github/workflows/fuzz.yml");

    assert!(workflow.contains("timeout-minutes: 15"));
    assert!(workflow.contains("actions/cache/restore@v4"));
    assert!(workflow.contains("actions/cache/save@v4"));
    assert!(workflow.contains("fuzz/corpus/decoder"));
    assert!(workflow.contains("github.run_id"));
    assert!(workflow.contains("if: always()"));
    assert!(workflow.contains("-max_len=4096"));
    assert!(workflow.contains("if: failure()"));
    assert!(workflow.contains("actions/upload-artifact@v7"));
    assert!(workflow.contains("fuzz/artifacts/**"));
}

/// Verifies that both README files use the pinned local fuzz toolchain.
///
/// # Panics
///
/// Panics when either README drifts from the scheduled fuzz workflow's
/// toolchain, `cargo-fuzz` version, or bounded decoder command.
#[test]
fn test_readme_fuzz_commands_match_workflow_contract() {
    let readmes = [
        include_str!("../README.md"),
        include_str!("../README.zh_CN.md"),
    ];

    for readme in readmes {
        assert!(readme.contains(
            "rustup toolchain install nightly-2026-06-05 --profile minimal",
        ));
        assert!(
            readme
                .contains("cargo install cargo-fuzz --version 0.13.2 --locked")
        );
        assert!(
            readme.contains("cargo +nightly-2026-06-05 fuzz build decoder")
        );
        assert!(readme.contains(
            "cargo +nightly-2026-06-05 fuzz run decoder -- -max_len=4096",
        ));
    }
}

/// Verifies that the decoder fuzz target accepts its exact input bound.
///
/// # Panics
///
/// Panics when the shared fuzz input boundary changes or is not inclusive.
#[test]
fn test_decoder_fuzz_input_limit_includes_exact_boundary() {
    assert_eq!(MAX_FUZZ_INPUT_BYTES, 4_096);
    assert!(is_fuzz_input_within_limit(&vec![0; 4_095]));
    assert!(is_fuzz_input_within_limit(&vec![0; 4_096]));
    assert!(!is_fuzz_input_within_limit(&vec![0; 4_097]));
}