@feltdb/core 0.8.4 → 0.8.6

package/dist/create/server-source/crates/feltdb/src/application.rs

@@ -135,7 +135,9 @@ pub struct CapabilityBinding {
     #[serde(default = "public_capability_visibility")]
     pub visibility: String,
 }
-fn public_capability_visibility() -> String { "public".into() }
+fn public_capability_visibility() -> String {
+    "public".into()
+}
 #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
 pub struct SecretReference {
     pub binding: String,
@@ -381,11 +383,16 @@ pub struct ValidationReport {
 fn is_valid_policy_subject(subject: &str) -> bool {
     subject.split('|').map(str::trim).all(|term| {
         matches!(term, "authenticated" | "owner" | "member")
-            || term.strip_prefix("self(").and_then(|value| value.strip_suffix(')')).is_some_and(|field| {
-                let mut characters = field.chars();
-                characters.next().is_some_and(|value| value == '_' || value.is_ascii_alphabetic())
-                    && characters.all(|value| value == '_' || value.is_ascii_alphanumeric())
-            })
+            || term
+                .strip_prefix("self(")
+                .and_then(|value| value.strip_suffix(')'))
+                .is_some_and(|field| {
+                    let mut characters = field.chars();
+                    characters
+                        .next()
+                        .is_some_and(|value| value == '_' || value.is_ascii_alphabetic())
+                        && characters.all(|value| value == '_' || value.is_ascii_alphanumeric())
+                })
     })
 }
 
@@ -559,8 +566,15 @@ pub fn validate_manifest(
         .map(|v| v.name.as_str())
         .collect();
     for capability in &manifest.capabilities {
-        if !matches!(capability.visibility.as_str(), "public" | "agent" | "workflow" | "internal") {
-            issues.push(issue("semantic", format!("capabilities.{}.visibility", capability.name), "visibility must be public, agent, workflow, or internal"));
+        if !matches!(
+            capability.visibility.as_str(),
+            "public" | "agent" | "workflow" | "internal"
+        ) {
+            issues.push(issue(
+                "semantic",
+                format!("capabilities.{}.visibility", capability.name),
+                "visibility must be public, agent, workflow, or internal",
+            ));
         }
     }
     let workflows: BTreeSet<_> = manifest.workflows.iter().map(|v| v.name.as_str()).collect();
@@ -743,7 +757,11 @@ pub fn validate_manifest(
     }
     for (index, module) in manifest.modules.iter().enumerate() {
         if contains_plaintext_secret(module) || module.get("value").is_some() {
-            issues.push(issue("security", format!("modules.{index}"), "module contracts may declare secret requirements but never secret values"));
+            issues.push(issue(
+                "security",
+                format!("modules.{index}"),
+                "module contracts may declare secret requirements but never secret values",
+            ));
         }
     }
     for environment in &manifest.environments {
@@ -881,7 +899,11 @@ fn sorted(mut manifest: ApplicationManifest) -> ApplicationManifest {
         agent.capabilities.sort();
     }
     sort_name!(manifest.capabilities);
-    manifest.modules.sort_by(|a, b| a.get("id").and_then(Value::as_str).cmp(&b.get("id").and_then(Value::as_str)));
+    manifest.modules.sort_by(|a, b| {
+        a.get("id")
+            .and_then(Value::as_str)
+            .cmp(&b.get("id").and_then(Value::as_str))
+    });
     sort_name!(manifest.connections);
     sort_name!(manifest.policies);
     sort_name!(manifest.ui.bindings);
@@ -1202,14 +1224,20 @@ impl ApplicationStore {
             .records
             .write()
             .map_err(|_| "application store lock poisoned")?;
-        r.drafts.retain(|value| value.application_id != application_id);
-        r.revisions.retain(|value| value.application_id != application_id);
-        r.promotions.retain(|value| value.application_id != application_id);
-        r.previews.retain(|value| value.application_id != application_id);
+        r.drafts
+            .retain(|value| value.application_id != application_id);
+        r.revisions
+            .retain(|value| value.application_id != application_id);
+        r.promotions
+            .retain(|value| value.application_id != application_id);
+        r.previews
+            .retain(|value| value.application_id != application_id);
         r.environment_pointers.remove(application_id);
-        r.audit.retain(|value| value.application_id != application_id);
+        r.audit
+            .retain(|value| value.application_id != application_id);
         r.untrusted_revisions.remove(application_id);
-        r.recoveries.retain(|value| value.application_id != application_id);
+        r.recoveries
+            .retain(|value| value.application_id != application_id);
         self.persist(&r)
     }
     fn event(
@@ -2329,27 +2357,78 @@ mod tests {
         let s = store("revision-recovery");
         let d = s.create_draft("t", "a", "App", "owner", None).unwrap();
         let corrupt = s.commit("t", "a", &d.draft_id, "owner").unwrap();
-        s.move_environment_pointer("t", "a", &corrupt.revision_id, "staging", None,
-            "owner", "initial", true, false).unwrap();
-        let d = s.create_draft("t", "a", "App", "owner", Some(&corrupt.revision_id)).unwrap();
+        s.move_environment_pointer(
+            "t",
+            "a",
+            &corrupt.revision_id,
+            "staging",
+            None,
+            "owner",
+            "initial",
+            true,
+            false,
+        )
+        .unwrap();
+        let d = s
+            .create_draft("t", "a", "App", "owner", Some(&corrupt.revision_id))
+            .unwrap();
         let clean = s.commit("t", "a", &d.draft_id, "owner").unwrap();
 
         // Historical source corruption must not prevent recovery away from it.
         {
             let mut records = s.records.write().unwrap();
-            records.revisions.iter_mut().find(|value| value.revision_id == corrupt.revision_id)
-                .unwrap().manifest.metadata.name = "corrupted without updating its integrity hash".into();
+            records
+                .revisions
+                .iter_mut()
+                .find(|value| value.revision_id == corrupt.revision_id)
+                .unwrap()
+                .manifest
+                .metadata
+                .name = "corrupted without updating its integrity hash".into();
             s.persist(&records).unwrap();
         }
-        let recovered = s.recover_environment_pointer("t", "a", "staging", &corrupt.revision_id,
-            &clean.revision_id, "sherpa", "Replace corrupt historical revision", "ELEVATED",
-            "recovery-1").unwrap();
+        let recovered = s
+            .recover_environment_pointer(
+                "t",
+                "a",
+                "staging",
+                &corrupt.revision_id,
+                &clean.revision_id,
+                "sherpa",
+                "Replace corrupt historical revision",
+                "ELEVATED",
+                "recovery-1",
+            )
+            .unwrap();
         assert_eq!(recovered.target_revision, clean.revision_id);
-        assert_eq!(s.recover_environment_pointer("t", "a", "staging", &corrupt.revision_id,
-            &clean.revision_id, "sherpa", "Replace corrupt historical revision", "ELEVATED",
-            "recovery-1").unwrap(), recovered);
-        assert!(s.move_environment_pointer("t", "a", &corrupt.revision_id, "staging",
-            Some(&clean.revision_id), "owner", "rollback", true, true).unwrap_err()
+        assert_eq!(
+            s.recover_environment_pointer(
+                "t",
+                "a",
+                "staging",
+                &corrupt.revision_id,
+                &clean.revision_id,
+                "sherpa",
+                "Replace corrupt historical revision",
+                "ELEVATED",
+                "recovery-1"
+            )
+            .unwrap(),
+            recovered
+        );
+        assert!(s
+            .move_environment_pointer(
+                "t",
+                "a",
+                &corrupt.revision_id,
+                "staging",
+                Some(&clean.revision_id),
+                "owner",
+                "rollback",
+                true,
+                true
+            )
+            .unwrap_err()
             .contains("untrusted"));
 
         let reloaded = ApplicationStore::load(s.path.clone()).unwrap();
@@ -2528,7 +2607,11 @@ mod tests {
         });
 
         let report = validate_manifest(&manifest, "tenant", "app", None);
-        assert!(report.valid, "composed identity policy should be valid: {:?}", report.issues);
+        assert!(
+            report.valid,
+            "composed identity policy should be valid: {:?}",
+            report.issues
+        );
     }
 
     #[test]