qubit-redact 0.9.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

// =============================================================================
//    Copyright (c) 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Compile-time regression tests for the sealed map field boundary.

mod support;

use std::env;
use std::fs;
use std::process;
use std::process::Command;

use support::compile_diagnostics::source_error_matches;

/// Verifies arbitrary pair iterators cannot bypass `RedactMapValue`.
#[test]
fn test_vec_pairs_are_not_accepted_as_redaction_maps() {
    let directory = env::temp_dir().join(format!("qubit-redact-map-api-{}", process::id()));
    fs::create_dir_all(directory.join("src")).expect("temporary dependent crate directory");
    fs::write(
        directory.join("Cargo.toml"),
        format!(
            "[package]\nname = \"qubit-redact-map-api\"\nversion = \"0.0.0\"\nedition = \"2024\"\n\n[workspace]\n\n[dependencies]\nqubit-redact = {{ path = \"{}\" }}\n",
            env!("CARGO_MANIFEST_DIR"),
        ),
    )
    .expect("temporary manifest");
    fs::write(
        directory.join("src/main.rs"),
        r#"
use qubit_redact::Redact;
use qubit_redact::RedactionWriter;

struct PairList {
    values: Vec<(String, String)>,
}

impl Redact for PairList {
    fn write_redacted(&self, writer: &mut RedactionWriter<'_>) {
        writer.record("PairList", |fields| {
            fields.map("values", &self.values);
        });
    }
}

fn main() {}
"#,
    )
    .expect("temporary source");

    let output = Command::new(env!("CARGO"))
        .args(["check", "--offline", "--message-format=json"])
        .current_dir(&directory)
        .output()
        .expect("cargo check for temporary dependent crate");
    let diagnostics = format!(
        "{}\n{}",
        String::from_utf8_lossy(&output.stderr),
        String::from_utf8_lossy(&output.stdout)
    );

    assert!(!output.status.success(), "Vec pairs must not be a supported map field");
    assert!(
        source_error_matches(&output.stdout, "RedactMapValue", Some("E0277")),
        "compiler diagnostics must identify the rejected map call: {diagnostics}",
    );
    fs::remove_dir_all(directory).expect("temporary dependent crate cleanup");
}