@feltdb/core 0.8.3 → 0.8.5

package/dist/create/server-source/crates/feltdb/tests/pr7_self_authorization_proof.rs

@@ -17,10 +17,8 @@
 
 use feltdb::{
     state_contract::{
-        StateSchema, CollectionSchema, FieldSchema, FieldType, PrimitiveType,
-        FieldConstraints,
-        AuthorizationContext, CanonicalQuery, begin_read, execute_query,
-        QueryFilter,
+        begin_read, execute_query, AuthorizationContext, CanonicalQuery, CollectionSchema,
+        FieldConstraints, FieldSchema, FieldType, PrimitiveType, QueryFilter, StateSchema,
     },
     FeltDb,
 };
@@ -324,8 +322,7 @@ fn pr7_phase3_self_authorization_proof() -> Result<(), Box<dyn std::error::Error
         field_projections: Default::default(),
     };
 
-    let _bob_context = begin_read(&db, &schema, "app", bob_auth)
-        .map_err(|e| format!("{:?}", e))?;
+    let _bob_context = begin_read(&db, &schema, "app", bob_auth).map_err(|e| format!("{:?}", e))?;
 
     // Query as Bob with self(user) policy
     let _query = CanonicalQuery {
@@ -360,8 +357,8 @@ fn pr7_phase3_self_authorization_proof() -> Result<(), Box<dyn std::error::Error
         field_projections: Default::default(),
     };
 
-    let _alice_context = begin_read(&db, &schema, "app", alice_auth)
-        .map_err(|e| format!("{:?}", e))?;
+    let _alice_context =
+        begin_read(&db, &schema, "app", alice_auth).map_err(|e| format!("{:?}", e))?;
 
     println!("  • Alice is member of Org A");
     println!("  • Invitation.organization = {}", org_a_id);

package/dist/create/server-source/crates/feltdb/tests/pr8_vocabulary_assessment.rs

@@ -17,8 +17,7 @@
 
 use feltdb::{
     state_contract::{
-        StateSchema, CollectionSchema, FieldSchema, FieldType, PrimitiveType,
-        FieldConstraints,
+        CollectionSchema, FieldConstraints, FieldSchema, FieldType, PrimitiveType, StateSchema,
     },
     FeltDb,
 };
@@ -150,10 +149,7 @@ fn pr8_resource_inventory_and_pattern_mapping() -> Result<(), Box<dyn std::error
     for primitive in primitives {
         let count = resources
             .iter()
-            .filter(|r| {
-                r.read_policy.contains(primitive)
-                    || r.write_policy.contains(primitive)
-            })
+            .filter(|r| r.read_policy.contains(primitive) || r.write_policy.contains(primitive))
             .count();
         if count > 0 {
             println!("  ✓ {} - Used in {} resources", primitive, count);
@@ -184,37 +180,35 @@ fn pr8_pattern_class_1_personal_identity_scoped() -> Result<(), Box<dyn std::err
         schema_version: 1,
         application_id: "saas-portal".to_string(),
         revision_id: "rev-1".to_string(),
-        collections: vec![
-            CollectionSchema {
-                name: "User".to_string(),
-                version: 1,
-                fields: vec![
-                    FieldSchema {
-                        name: "_id".to_string(),
-                        field_type: FieldType::Primitive {
-                            primitive: PrimitiveType::String,
-                        },
-                        nullable: false,
-                        required: true,
-                        default: None,
-                        constraints: FieldConstraints::default(),
-                        computed: None,
+        collections: vec![CollectionSchema {
+            name: "User".to_string(),
+            version: 1,
+            fields: vec![
+                FieldSchema {
+                    name: "_id".to_string(),
+                    field_type: FieldType::Primitive {
+                        primitive: PrimitiveType::String,
                     },
-                    FieldSchema {
-                        name: "email".to_string(),
-                        field_type: FieldType::Primitive {
-                            primitive: PrimitiveType::String,
-                        },
-                        nullable: false,
-                        required: true,
-                        default: None,
-                        constraints: FieldConstraints::default(),
-                        computed: None,
+                    nullable: false,
+                    required: true,
+                    default: None,
+                    constraints: FieldConstraints::default(),
+                    computed: None,
+                },
+                FieldSchema {
+                    name: "email".to_string(),
+                    field_type: FieldType::Primitive {
+                        primitive: PrimitiveType::String,
                     },
-                ],
-                indexes: vec![],
-            },
-        ],
+                    nullable: false,
+                    required: true,
+                    default: None,
+                    constraints: FieldConstraints::default(),
+                    computed: None,
+                },
+            ],
+            indexes: vec![],
+        }],
     };
 
     // Setup test data
@@ -415,11 +409,17 @@ fn pr8_pattern_class_2_organizational_relational() -> Result<(), Box<dyn std::er
     let org_a_id = "org-a";
     let proj_id = "proj-1";
 
-    db.insert("User#user-alice", json!({ "_id": alice_id, "email": "alice@example.com" }))
-        .map_err(|e| format!("{:?}", e))?;
+    db.insert(
+        "User#user-alice",
+        json!({ "_id": alice_id, "email": "alice@example.com" }),
+    )
+    .map_err(|e| format!("{:?}", e))?;
 
-    db.insert("User#user-bob", json!({ "_id": bob_id, "email": "bob@example.com" }))
-        .map_err(|e| format!("{:?}", e))?;
+    db.insert(
+        "User#user-bob",
+        json!({ "_id": bob_id, "email": "bob@example.com" }),
+    )
+    .map_err(|e| format!("{:?}", e))?;
 
     db.insert(
         "Organization#org-a",
@@ -672,11 +672,17 @@ fn pr8_pattern_class_4_composition_multiple_audiences() -> Result<(), Box<dyn st
     let org_a_id = "org-a";
     let inv_id = "inv-1";
 
-    db.insert("User#user-alice", json!({ "_id": alice_id, "email": "alice@example.com" }))
-        .map_err(|e| format!("{:?}", e))?;
+    db.insert(
+        "User#user-alice",
+        json!({ "_id": alice_id, "email": "alice@example.com" }),
+    )
+    .map_err(|e| format!("{:?}", e))?;
 
-    db.insert("User#user-bob", json!({ "_id": bob_id, "email": "bob@example.com" }))
-        .map_err(|e| format!("{:?}", e))?;
+    db.insert(
+        "User#user-bob",
+        json!({ "_id": bob_id, "email": "bob@example.com" }),
+    )
+    .map_err(|e| format!("{:?}", e))?;
 
     db.insert(
         "Organization#org-a",
@@ -853,7 +859,9 @@ fn pr8_final_conclusion() -> Result<(), Box<dyn std::error::Error>> {
 
     println!("RESULTS\n");
     println!("  Gaps: NONE");
-    println!("  Redundancies: owner (minor - can be expressed as self, but kept for convenience)\n");
+    println!(
+        "  Redundancies: owner (minor - can be expressed as self, but kept for convenience)\n"
+    );
 
     println!("VERDICT: VOCABULARY IS COMPLETE ✓\n");
 

package/dist/create/server-source/crates/feltdb/tests/pr9_phase2_boundary_tests.rs

@@ -22,15 +22,14 @@
 
 use feltdb::{
     state_contract::{
-        StateSchema, CollectionSchema, FieldSchema, FieldType, PrimitiveType,
-        FieldConstraints, AuthorizationContext, begin_read, execute_query,
-        CanonicalQuery, QueryFilter,
+        begin_read, execute_query, AuthorizationContext, CanonicalQuery, CollectionSchema,
+        FieldConstraints, FieldSchema, FieldType, PrimitiveType, QueryFilter, StateSchema,
     },
     FeltDb,
 };
 use serde_json::{json, Value};
-use tempfile::TempDir;
 use std::fmt;
+use tempfile::TempDir;
 
 /// Result of testing an operation at the FeltDB boundary
 #[derive(Debug, Clone, PartialEq, Eq)]
@@ -322,19 +321,31 @@ impl TeamBoundaryTestFixture {
         let team_id = "team-backend".to_string();
 
         // Create users
-        db.insert("User#user-owner", json!({ "_id": owner_id, "email": "owner@example.com" }))
-            .map_err(|e| format!("{:?}", e))?;
-        db.insert("User#user-admin", json!({ "_id": admin_id, "email": "admin@example.com" }))
-            .map_err(|e| format!("{:?}", e))?;
-        db.insert("User#user-member", json!({ "_id": member_id, "email": "member@example.com" }))
-            .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "User#user-owner",
+            json!({ "_id": owner_id, "email": "owner@example.com" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "User#user-admin",
+            json!({ "_id": admin_id, "email": "admin@example.com" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "User#user-member",
+            json!({ "_id": member_id, "email": "member@example.com" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
         db.insert(
             "User#user-non-member",
             json!({ "_id": non_member_id, "email": "nonmember@example.com" }),
         )
         .map_err(|e| format!("{:?}", e))?;
-        db.insert("User#user-revoked", json!({ "_id": revoked_id, "email": "revoked@example.com" }))
-            .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "User#user-revoked",
+            json!({ "_id": revoked_id, "email": "revoked@example.com" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
         db.insert(
             "User#user-cross-tenant",
             json!({ "_id": cross_tenant_id, "email": "cross@example.com" }),
@@ -342,10 +353,16 @@ impl TeamBoundaryTestFixture {
         .map_err(|e| format!("{:?}", e))?;
 
         // Create organizations
-        db.insert("Organization#org-main", json!({ "_id": org_id, "name": "Main Org" }))
-            .map_err(|e| format!("{:?}", e))?;
-        db.insert("Organization#org-other", json!({ "_id": cross_org_id, "name": "Other Org" }))
-            .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "Organization#org-main",
+            json!({ "_id": org_id, "name": "Main Org" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
+        db.insert(
+            "Organization#org-other",
+            json!({ "_id": cross_org_id, "name": "Other Org" }),
+        )
+        .map_err(|e| format!("{:?}", e))?;
 
         // Create org memberships (establishes organization access)
         db.insert(

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3a_path_a_tests.rs

@@ -18,8 +18,8 @@
 
 use feltdb::{
     state_contract::{
-        StateSchema, CollectionSchema, FieldSchema, FieldType, PrimitiveType,
-        FieldConstraints, AuthorizationContext,
+        AuthorizationContext, CollectionSchema, FieldConstraints, FieldSchema, FieldType,
+        PrimitiveType, StateSchema,
     },
     FeltDb,
 };
@@ -66,13 +66,28 @@ impl PathATestFixture {
         let team_id = "team-backend".to_string();
 
         // Create users
-        db.insert("User#user-owner", json!({"_id": owner_id, "email": "owner@example.com"}))?;
-        db.insert("User#user-admin", json!({"_id": admin_id, "email": "admin@example.com"}))?;
-        db.insert("User#user-member", json!({"_id": member_id, "email": "member@example.com"}))?;
-        db.insert("User#user-non-member", json!({"_id": non_member_id, "email": "non-member@example.com"}))?;
+        db.insert(
+            "User#user-owner",
+            json!({"_id": owner_id, "email": "owner@example.com"}),
+        )?;
+        db.insert(
+            "User#user-admin",
+            json!({"_id": admin_id, "email": "admin@example.com"}),
+        )?;
+        db.insert(
+            "User#user-member",
+            json!({"_id": member_id, "email": "member@example.com"}),
+        )?;
+        db.insert(
+            "User#user-non-member",
+            json!({"_id": non_member_id, "email": "non-member@example.com"}),
+        )?;
 
         // Create organization
-        db.insert("Organization#org-1", json!({"_id": org_id, "name": "Org 1"}))?;
+        db.insert(
+            "Organization#org-1",
+            json!({"_id": org_id, "name": "Org 1"}),
+        )?;
 
         // Create memberships for all users in the organization
         db.insert(

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3c_authorized_mutations.rs

@@ -3,10 +3,7 @@
 //! Test that the new authorized mutation API properly enforces authorization.
 //! Authorization evaluation happens INSIDE the FeltDB boundary, before mutations are applied.
 
-use feltdb::{
-    state_contract::AuthorizationContext,
-    FeltDb,
-};
+use feltdb::{state_contract::AuthorizationContext, FeltDb};
 use serde_json::json;
 use tempfile::TempDir;
 
@@ -43,7 +40,11 @@ fn authorized_insert_requires_state_write_capability() -> Result<(), Box<dyn std
         json!({"_id": "user-1", "name": "Alice"}),
         &authorized_context,
     );
-    assert!(result.is_ok(), "Authorized insert should succeed: {:?}", result);
+    assert!(
+        result.is_ok(),
+        "Authorized insert should succeed: {:?}",
+        result
+    );
 
     // Verify record was inserted
     let value = db.get::<serde_json::Value>("User#user-1")?;
@@ -63,7 +64,10 @@ fn authorized_insert_requires_state_write_capability() -> Result<(), Box<dyn std
 
     // Verify unauthorized insert did not create record
     let value = db.get::<serde_json::Value>("User#user-2")?;
-    assert!(value.is_none(), "Unauthorized insert should not create record");
+    assert!(
+        value.is_none(),
+        "Unauthorized insert should not create record"
+    );
 
     Ok(())
 }
@@ -123,11 +127,18 @@ fn authorized_delete_requires_state_write_capability() -> Result<(), Box<dyn std
 
     // Authorized delete should succeed
     let result = db.delete_with_authorization("Team#team-1", &authorized_context);
-    assert!(result.is_ok(), "Authorized delete should succeed: {:?}", result);
+    assert!(
+        result.is_ok(),
+        "Authorized delete should succeed: {:?}",
+        result
+    );
 
     // Verify record is deleted
     let value = db.get::<serde_json::Value>("Team#team-1")?;
-    assert!(value.is_none(), "Record should be deleted after authorized delete");
+    assert!(
+        value.is_none(),
+        "Record should be deleted after authorized delete"
+    );
 
     Ok(())
 }
@@ -167,7 +178,13 @@ fn authorized_update_requires_state_write_capability() -> Result<(), Box<dyn std
     )?;
 
     let original = db.get::<serde_json::Value>("Organization#org-1")?;
-    assert_eq!(original.as_ref().and_then(|v| v.get("name")).and_then(|v| v.as_str()), Some("Acme Corp"));
+    assert_eq!(
+        original
+            .as_ref()
+            .and_then(|v| v.get("name"))
+            .and_then(|v| v.as_str()),
+        Some("Acme Corp")
+    );
 
     // Unauthorized update should fail
     let result = db.update_with_authorization(
@@ -184,7 +201,10 @@ fn authorized_update_requires_state_write_capability() -> Result<(), Box<dyn std
     // Verify record was not changed
     let value = db.get::<serde_json::Value>("Organization#org-1")?;
     assert_eq!(
-        value.as_ref().and_then(|v| v.get("name")).and_then(|v| v.as_str()),
+        value
+            .as_ref()
+            .and_then(|v| v.get("name"))
+            .and_then(|v| v.as_str()),
         Some("Acme Corp"),
         "Unauthorized update should not change record"
     );
@@ -195,12 +215,19 @@ fn authorized_update_requires_state_write_capability() -> Result<(), Box<dyn std
         json!({"_id": "org-1", "name": "Acme Inc"}),
         &authorized_context,
     );
-    assert!(result.is_ok(), "Authorized update should succeed: {:?}", result);
+    assert!(
+        result.is_ok(),
+        "Authorized update should succeed: {:?}",
+        result
+    );
 
     // Verify record was updated
     let value = db.get::<serde_json::Value>("Organization#org-1")?;
     assert_eq!(
-        value.as_ref().and_then(|v| v.get("name")).and_then(|v| v.as_str()),
+        value
+            .as_ref()
+            .and_then(|v| v.get("name"))
+            .and_then(|v| v.as_str()),
         Some("Acme Inc"),
         "Authorized update should change record"
     );
@@ -276,16 +303,8 @@ fn atomic_transaction_with_authorization_denies_on_any_mutation_failure(
     };
 
     // Create initial records
-    db.insert_with_authorization(
-        "User#user-1",
-        json!({"_id": "user-1"}),
-        &authorized_context,
-    )?;
-    db.insert_with_authorization(
-        "Team#team-1",
-        json!({"_id": "team-1"}),
-        &authorized_context,
-    )?;
+    db.insert_with_authorization("User#user-1", json!({"_id": "user-1"}), &authorized_context)?;
+    db.insert_with_authorization("Team#team-1", json!({"_id": "team-1"}), &authorized_context)?;
 
     // Attempt atomic transaction with unauthorized context
     // Should be rejected without applying ANY mutations

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3c_role_based_authorization.rs

@@ -24,8 +24,8 @@
 
 use feltdb::{
     state_contract::{
-        StateSchema, CollectionSchema, FieldSchema, FieldType, PrimitiveType,
-        FieldConstraints, AuthorizationContext,
+        AuthorizationContext, CollectionSchema, FieldConstraints, FieldSchema, FieldType,
+        PrimitiveType, StateSchema,
     },
     FeltDb,
 };
@@ -72,13 +72,28 @@ impl RoleAuthTestFixture {
         let team_id = "team-backend".to_string();
 
         // Create users
-        db.insert("User#user-owner", json!({"_id": owner_id, "email": "owner@example.com"}))?;
-        db.insert("User#user-admin", json!({"_id": admin_id, "email": "admin@example.com"}))?;
-        db.insert("User#user-member", json!({"_id": member_id, "email": "member@example.com"}))?;
-        db.insert("User#user-non-member", json!({"_id": non_member_id, "email": "non-member@example.com"}))?;
+        db.insert(
+            "User#user-owner",
+            json!({"_id": owner_id, "email": "owner@example.com"}),
+        )?;
+        db.insert(
+            "User#user-admin",
+            json!({"_id": admin_id, "email": "admin@example.com"}),
+        )?;
+        db.insert(
+            "User#user-member",
+            json!({"_id": member_id, "email": "member@example.com"}),
+        )?;
+        db.insert(
+            "User#user-non-member",
+            json!({"_id": non_member_id, "email": "non-member@example.com"}),
+        )?;
 
         // Create organization
-        db.insert("Organization#org-1", json!({"_id": org_id, "name": "Org 1"}))?;
+        db.insert(
+            "Organization#org-1",
+            json!({"_id": org_id, "name": "Org 1"}),
+        )?;
 
         // Create organization memberships (all users are org members except non_member)
         db.insert(
@@ -280,7 +295,9 @@ fn pr9_phase3c_evidence_template() {
     println!("For each actor, record:\n");
 
     println!("Actor\t\tRole\t\tTeam.owner?\tOrg Member?\tExpected\tActual\tPolicy Evaluated\tPath");
-    println!("─────────────────────────────────────────────────────────────────────────────────────────");
+    println!(
+        "─────────────────────────────────────────────────────────────────────────────────────────"
+    );
     println!("owner\t\towner\t\tYES\t\tYES\t\tPERMIT\t\t?\t\t?\t\t\t?\n");
 
     println!("Analysis for each result:\n");

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3c_simple_auth_delete.rs

@@ -2,10 +2,7 @@
 //!
 //! Minimal test to verify authorized deletion works
 
-use feltdb::{
-    state_contract::AuthorizationContext,
-    FeltDb,
-};
+use feltdb::{state_contract::AuthorizationContext, FeltDb};
 use serde_json::json;
 use tempfile::TempDir;
 
@@ -15,7 +12,10 @@ fn simple_authorized_delete() -> Result<(), Box<dyn std::error::Error>> {
     let db = FeltDb::open(temp_dir.path().join("test.db"))?;
 
     // Create a simple record
-    db.insert("Team#team-1", json!({"_id": "team-1", "name": "Engineering"}))?;
+    db.insert(
+        "Team#team-1",
+        json!({"_id": "team-1", "name": "Engineering"}),
+    )?;
     println!("Created Team#team-1");
 
     // Verify it exists
@@ -83,7 +83,10 @@ fn authorized_delete_unauthorized_context() -> Result<(), Box<dyn std::error::Er
 
     // Verify record still exists
     let value = db.get::<serde_json::Value>("Team#team-2")?;
-    assert!(value.is_some(), "Record should still exist after denied delete");
+    assert!(
+        value.is_some(),
+        "Record should still exist after denied delete"
+    );
     println!("✓ Record unchanged after authorization denial");
 
     Ok(())