santh-error 0.2.2

Actionable error primitives - stable error codes, fix hints, and built-in secret redaction
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

# Changelog

## [0.2.2] - 2026-08-07

### Security
- Expanded secret redaction (Slack/GCP/Stripe/compound KV).

### Changed
- Crate authors set to Santh noreply.


All notable changes to this crate are documented here, following
[Keep a Changelog](https://keepachangelog.com/) and semantic versioning.

## 0.2.1

### Fixed

- `actionable_message` now caps the `source()` chain walk at 64 links. A
  custom error type that returns itself (or a pathologically long chain) from
  `source()` previously made the renderer loop forever while the message grew
  without bound. Past the cap the chain is cut with a visible
  `(source chain truncated after 64 links)` marker.

### Security

- `redact_secrets` now redacts dotted bearer tokens (`Bearer abc.def.ghi`).
  The pattern previously accepted only URL-safe base64, so OAuth access tokens
  whose bodies contain dots leaked in full.
- `redact_secrets` now redacts Slack API tokens (`xoxb-`, `xoxp-`, `xapp-`, etc.),
  GCP API keys (`AIzaSy...`), Stripe API keys (`sk_live_...`, `rk_live_...`), and
  compound KV secret pairs (`client_secret=`, `secret_key=`, `access_token=`,
  `passphrase=`, `signing_key=`).

## 0.2.0

### Added

- `SanthErrorContract` trait: a domain error enum joins the fleet-wide error
  contract (`error_code`, `fix_hint`, and a shared `actionable_message`
  renderer) by implementing two methods, without folding its variants into
  `SanthError`.
- `impl SanthErrorContract for SanthError`, so the canonical type and every
  domain error render through the same formatter.
- `redact_secrets` now also masks credentials embedded in URL userinfo
  (`scheme://user:pass@host` becomes `scheme://***@host`), preserving the scheme
  and host. Redaction is documented and property-tested as idempotent.

### Changed

- `actionable_message` now delegates to a shared `compose_message` helper, so
  the inherent method and the trait default produce identical output.
- `SanthErrorBuilder::build` no longer calls `expect`; the `HasFix` typestate
  already guarantees a fix hint, and an empty hint is normalised to the
  `"Fix: "` prefix.

## 0.1.0

- Initial release: `SanthError`, the typestate `SanthErrorBuilder`,
  `ErrorLocation`, and `redact_secrets`.