@feltdb/core 0.8.1 → 0.8.3

package/dist/create/server-source/crates/feltdb-server/src/tenancy.rs

@@ -41,6 +41,41 @@ pub struct Application {
     pub active_revision: Option<String>,
     #[serde(default)]
     pub environment_revisions: std::collections::BTreeMap<String, String>,
+    #[serde(default)]
+    pub qualification: Option<QualificationMarker>,
+}
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+pub struct QualificationMarker {
+    pub purpose: String,
+    pub disposable: bool,
+    pub environment: String,
+    pub proof_run_id: String,
+    pub expires_at: u64,
+}
+impl QualificationMarker {
+    fn valid_for_creation(&self, timestamp: u64) -> bool {
+        self.purpose == "qualification"
+            && self.disposable
+            && self.environment == "qualification"
+            && !self.proof_run_id.trim().is_empty()
+            && self.expires_at > timestamp
+    }
+
+    fn authorize_destruction(&self, proof_run_id: &str, timestamp: u64) -> Result<(), String> {
+        if self.purpose != "qualification" || !self.disposable {
+            return Err("refusing destructive qualification: application is not marked disposable".into());
+        }
+        if self.environment != "qualification" {
+            return Err("refusing destructive qualification: environment is not qualification".into());
+        }
+        if self.proof_run_id.trim().is_empty() || proof_run_id.trim().is_empty() || self.proof_run_id != proof_run_id {
+            return Err("refusing destructive qualification: proof run does not match".into());
+        }
+        if self.expires_at <= timestamp {
+            return Err("refusing destructive qualification: disposable marker has expired".into());
+        }
+        Ok(())
+    }
 }
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct TenantMembership {
@@ -765,10 +800,25 @@ impl TenancyStore {
         actor: &str,
         tenant_id: &str,
         name: &str,
+    ) -> Result<Application, String> {
+        self.create_application_with_qualification(actor, tenant_id, name, None)
+    }
+
+    pub fn create_application_with_qualification(
+        &self,
+        actor: &str,
+        tenant_id: &str,
+        name: &str,
+        qualification: Option<QualificationMarker>,
     ) -> Result<Application, String> {
         if !self.authorize_tenant(actor, tenant_id, "applications:write") {
             return Err("forbidden".into());
         }
+        if let Some(marker) = qualification.as_ref() {
+            if !marker.valid_for_creation(now()) {
+                return Err("invalid disposable qualification marker".into());
+            }
+        }
         let mut records = self
             .records
             .write()
@@ -794,6 +844,7 @@ impl TenancyStore {
             status: application_status(),
             active_revision: None,
             environment_revisions: Default::default(),
+            qualification,
         };
         records.application_memberships.push(ApplicationMembership {
             application_id: application.id.clone(),
@@ -816,6 +867,22 @@ impl TenancyStore {
         Ok(application)
     }
 
+    pub fn delete_qualification_application(
+        &self,
+        actor: &str,
+        application_id: &str,
+        proof_run_id: &str,
+    ) -> Result<(), String> {
+        let application = self
+            .application_for(actor, application_id)
+            .ok_or_else(|| "application not found".to_string())?;
+        let marker = application.qualification.ok_or_else(|| {
+            "refusing destructive qualification: application is not marked disposable".to_string()
+        })?;
+        marker.authorize_destruction(proof_run_id, now())?;
+        self.delete_application(actor, application_id)
+    }
+
     pub fn delete_application(&self, actor: &str, application_id: &str) -> Result<(), String> {
         let tenant_id = self
             .application_tenant(application_id)
@@ -1238,6 +1305,73 @@ mod tests {
         assert!(!store.authorize_application("user_a", &tenant_a.id, &app_b.id, "state:read"));
     }
 
+    #[test]
+    fn destructive_qualification_requires_an_unexpired_matching_marker() {
+        let valid_marker = QualificationMarker {
+            purpose: "qualification".into(), disposable: true, environment: "qualification".into(), proof_run_id: "proof-1".into(), expires_at: now() + 300,
+        };
+        assert!(valid_marker.authorize_destruction("", now()).unwrap_err().contains("does not match"));
+        assert!(valid_marker.authorize_destruction("proof-other", now()).unwrap_err().contains("does not match"));
+        let mut wrong_environment = valid_marker.clone();
+        wrong_environment.environment = "production".into();
+        assert!(wrong_environment.authorize_destruction("proof-1", now()).unwrap_err().contains("environment"));
+        let mut not_disposable = valid_marker.clone();
+        not_disposable.disposable = false;
+        assert!(not_disposable.authorize_destruction("proof-1", now()).unwrap_err().contains("not marked disposable"));
+        let mut expired = valid_marker.clone();
+        expired.expires_at = now().saturating_sub(1);
+        assert!(expired.authorize_destruction("proof-1", now()).unwrap_err().contains("expired"));
+        assert!(valid_marker.authorize_destruction("proof-1", now()).is_ok());
+
+        let store = store("qualification-guard");
+        let tenant = store.create_tenant("owner", "Qualification").unwrap();
+        let normal = store
+            .create_application("owner", &tenant.id, "Normal")
+            .unwrap();
+        assert!(store
+            .delete_qualification_application("owner", &normal.id, "proof-1")
+            .unwrap_err()
+            .contains("not marked disposable"));
+        assert!(store
+            .create_application_with_qualification(
+                "owner",
+                &tenant.id,
+                "Expired",
+                Some(QualificationMarker {
+                    purpose: "qualification".into(),
+                    disposable: true,
+                    environment: "qualification".into(),
+                    proof_run_id: "proof-expired".into(),
+                    expires_at: now().saturating_sub(1),
+                }),
+            )
+            .unwrap_err()
+            .contains("invalid disposable"));
+
+        let proof = store
+            .create_application_with_qualification(
+                "owner",
+                &tenant.id,
+                "Proof",
+                Some(QualificationMarker {
+                    purpose: "qualification".into(),
+                    disposable: true,
+                    environment: "qualification".into(),
+                    proof_run_id: "proof-1".into(),
+                    expires_at: now() + 300,
+                }),
+            )
+            .unwrap();
+        assert!(store
+            .delete_qualification_application("owner", &proof.id, "proof-other")
+            .unwrap_err()
+            .contains("does not match"));
+        store
+            .delete_qualification_application("owner", &proof.id, "proof-1")
+            .unwrap();
+        assert!(store.application_for("owner", &proof.id).is_none());
+    }
+
     #[test]
     fn invitation_acceptance_and_revocation_change_authorization() {
         let store = store("invitation");

package/dist/file-db.d.ts

@@ -25,6 +25,7 @@ export declare class FileJsDb implements JsDb {
     private readonly origin;
     private readonly peers;
     private lockFd;
+    private lockToken;
     private readonly applied;
     constructor(path: string);
     private loadState;
@@ -34,6 +35,10 @@ export declare class FileJsDb implements JsDb {
     private cleanupStaleLock;
     private acquireLockAsync;
     private releaseLockAsync;
+    private ownsLock;
+    private acquireLockSync;
+    private withMutationLock;
+    private refresh;
     private saveState;
     private event;
     /**
@@ -64,21 +69,9 @@ export declare class FileJsDb implements JsDb {
     instance_id(): string;
     get_sequence(): number;
     /**
-     * The file runtime declines revision validation, and this is the honest answer
-     * rather than a missing feature.
-     *
-     * A shared directory has no serialization authority over its writers.
-     * `insert`, `update`, `delete`, and `commit_transaction` do not take the
-     * cross-process lock, and publication is a whole-snapshot rename, so two
-     * processes writing the same directory lose data. `state.sequence` therefore
-     * cannot distinguish "one writer committed 50" from "two writers committed 50
-     * each and one snapshot won" — it produces a plausible but false answer,
-     * which is worse than producing none.
-     *
-     * Measured in tools/cli/test/file-runtime-concurrency.test.mjs and analysed in
-     * docs/architecture/freshness-revision-investigation.md. Making this runtime
-     * revision-capable requires fixing lock discipline and publication together;
-     * advertising `refresh` is correct until then, not a placeholder.
+     * The file runtime uses explicit refresh validation. Cross-process mutations
+     * are serialized and reads reload the committed snapshot, but the public read
+     * contract does not yet return a scoped revision alongside its value.
      */
     freshness(): FreshnessCapability;
     audit_events(): PortableEvent[];

package/dist/file-db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-db.d.ts","sourceRoot":"","sources":["../src/file-db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EAG1B,MAAM,0BAA0B,CAAC;AAYlC,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAkB1F,UAAU,QAAQ;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AA4BrK,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEjC,IAAI,EAAE,MAAM;IAmCxB,OAAO,CAAC,SAAS;IAkCjB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,gBAAgB;YAWV,gBAAgB;IA6B9B,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,SAAS;IAsDjB,OAAO,CAAC,KAAK;IAeb;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA0D7F,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;IAa5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;IAO5C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IAO1B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IAW7B,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ;IAQnC,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ;IAIpD,UAAU,IAAI,QAAQ;IAItB,SAAS,IAAI,QAAQ;IAiBrB,QAAQ,IAAI,QAAQ;IAIpB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAKvC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAK1C,2BAA2B,IAAI,QAAQ;IAIvC,oBAAoB,IAAI,QAAQ;IAIhC,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,MAAM;IAItB;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,IAAI,mBAAmB;IAUhC,YAAY;IAIZ,iBAAiB,CAAC,aAAa,EAAE,MAAM;IAIvC,uBAAuB,CAAC,UAAU,EAAE,aAAa,EAAE;;;;IA0C7C,gBAAgB,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAS7E,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAwCtF,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA2DjF,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA0FxF,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0F7P,KAAK,IAAI,IAAI;CAId"}
+{"version":3,"file":"file-db.d.ts","sourceRoot":"","sources":["../src/file-db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EAG1B,MAAM,0BAA0B,CAAC;AAYlC,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAkB1F,UAAU,QAAQ;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AA4BrK,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEjC,IAAI,EAAE,MAAM;IAmCxB,OAAO,CAAC,SAAS;IAkCjB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,gBAAgB;YAWV,gBAAgB;IAiC9B,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,eAAe;IAqBvB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,SAAS;IAsDjB,OAAO,CAAC,KAAK;IAeb;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA4D7F,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;IAe5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;IAa5C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IAQ1B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IAY7B,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ;IASnC,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ;IAIpD,UAAU,IAAI,QAAQ;IAItB,SAAS,IAAI,QAAQ;IAkBrB,QAAQ,IAAI,QAAQ;IAIpB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAIvC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAI1C,2BAA2B,IAAI,QAAQ;IAIvC,oBAAoB,IAAI,QAAQ;IAIhC,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,MAAM;IAKtB;;;;OAIG;IACH,SAAS,IAAI,mBAAmB;IAUhC,YAAY;IAKZ,iBAAiB,CAAC,aAAa,EAAE,MAAM;IAKvC,uBAAuB,CAAC,UAAU,EAAE,aAAa,EAAE;;;;IA4C7C,gBAAgB,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAY7E,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAwCtF,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAkEjF,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA0FxF,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0F7P,KAAK,IAAI,IAAI;CAId"}