backbone-bucket 0.8.0

Bucket Bounded Context: File Storage Module for Backbone Framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

//! Application service for Bucket entities
//!
//! Generated by metaphor-schema. Do not edit manually.
//!
//! Type alias over `GenericCrudService` — all CRUD logic lives in backbone-core.
//! For custom behaviour, create `bucket_service_custom.rs` (preserved on regen).

use backbone_core::GenericCrudService;

use crate::presentation::dto::{CreateBucketDto, UpdateBucketDto};
use crate::domain::entity::Bucket;
use crate::infrastructure::persistence::BucketRepository;

/// Application service for Bucket entities.
///
/// All 12 standard CRUD operations (list, create, get, update, patch,
/// soft_delete, restore, empty_trash, bulk_create, upsert, find_by_id,
/// list_deleted) are provided by `GenericCrudService`.
///
/// Custom extensions go in `bucket_service_custom.rs`:
///
/// ```rust,ignore
/// pub struct BucketServiceCustom {
///     inner: Arc<BucketService>,
///     // add domain-specific dependencies here
/// }
/// ```
pub type BucketService = GenericCrudService<
    Bucket,
    CreateBucketDto,
    UpdateBucketDto,
    BucketRepository,
>;

/// The rules the schema declares for Bucket, checked against the row a create or update
/// would store. The generated build attaches it to [`BucketService`]. A refusing rule's
/// break answers 422; a rule in shadow is logged under `backbone::write_guard` and the
/// write goes ahead.
pub struct BucketRowRules;

#[async_trait::async_trait]
impl backbone_core::write_guard::WriteGuard<Bucket> for BucketRowRules {
    async fn check(
        &self,
        ctx: &backbone_core::write_guard::WriteCtx<'_, Bucket>,
    ) -> backbone_core::write_guard::GuardOutcome {
        use backbone_core::row_rule as r;
        use backbone_core::violation::Violation;
        use backbone_core::write_guard::{GuardOutcome, WriteKind};
        let (create, update) = (ctx.kind == WriteKind::Create, ctx.kind == WriteKind::Update);
        let Some(after) = ctx.after.filter(|_| create || update) else {
            return GuardOutcome::allow();
        };
        let Ok(row) = serde_json::to_value(after) else {
            return GuardOutcome::allow();
        };
        let row = &row;
        let old = ctx.before.and_then(|b| serde_json::to_value(b).ok());
        let mut shadow = Vec::new();
        let mut refuse = Vec::new();
        // `status` belongs to a state machine: only its verbs move it
        if update && ctx.transition.is_none() && r::changed(old.as_ref(), row, &["status"]) {
            shadow.push(Violation::new("status", "state_field_verbs_only", "the state field moves only through its verbs"));
        }
        // `name_required` (@required on Bucket.name)
        if (create || (update && r::changed(old.as_ref(), row, &["name"]))) && !r::holds(&r::and(r::is_not_null(r::field(row, "name")), r::not(r::is_empty(r::trim(r::field(row, "name")))))) {
            refuse.push(Violation::new("name", "required", "name is required"));
        }
        // `name_max_length` (@max(255) on Bucket.name)
        if (create || (update && r::changed(old.as_ref(), row, &["name"]))) && !r::holds(&r::le(r::length(r::field(row, "name")), r::Val::Num(255.0_f64))) {
            refuse.push(Violation::new("name", "max_length", "name must be at most 255 characters").with_param("max", 255_i64));
        }
        // `slug_required` (@required on Bucket.slug)
        if (create || (update && r::changed(old.as_ref(), row, &["slug"]))) && !r::holds(&r::and(r::is_not_null(r::field(row, "slug")), r::not(r::is_empty(r::trim(r::field(row, "slug")))))) {
            refuse.push(Violation::new("slug", "required", "slug is required"));
        }
        // `slug_max_length` (@max(255) on Bucket.slug)
        if (create || (update && r::changed(old.as_ref(), row, &["slug"]))) && !r::holds(&r::le(r::length(r::field(row, "slug")), r::Val::Num(255.0_f64))) {
            refuse.push(Violation::new("slug", "max_length", "slug must be at most 255 characters").with_param("max", 255_i64));
        }
        // `owner_id_required` (@required on Bucket.owner_id)
        if (create || (update && r::changed(old.as_ref(), row, &["owner_id"]))) && !r::holds(&r::and(r::is_not_null(r::field(row, "owner_id")), r::not(r::is_empty(r::trim(r::field(row, "owner_id")))))) {
            refuse.push(Violation::new("owner_id", "required", "owner_id is required"));
        }
        // `root_path_required` (@required on Bucket.root_path)
        if (create || (update && r::changed(old.as_ref(), row, &["root_path"]))) && !r::holds(&r::and(r::is_not_null(r::field(row, "root_path")), r::not(r::is_empty(r::trim(r::field(row, "root_path")))))) {
            refuse.push(Violation::new("root_path", "required", "root_path is required"));
        }
        // `root_path_max_length` (@max(1024) on Bucket.root_path)
        if (create || (update && r::changed(old.as_ref(), row, &["root_path"]))) && !r::holds(&r::le(r::length(r::field(row, "root_path")), r::Val::Num(1024.0_f64))) {
            refuse.push(Violation::new("root_path", "max_length", "root_path must be at most 1024 characters").with_param("max", 1024_i64));
        }
        // `file_count_non_negative` (@non_negative on Bucket.file_count)
        if (create || (update && r::changed(old.as_ref(), row, &["file_count"]))) && !r::holds(&r::ge(r::field(row, "file_count"), r::Val::Num(0.0_f64))) {
            refuse.push(Violation::new("file_count", "non_negative", "file_count must not be negative"));
        }
        // `total_size_bytes_non_negative` (@non_negative on Bucket.total_size_bytes)
        if (create || (update && r::changed(old.as_ref(), row, &["total_size_bytes"]))) && !r::holds(&r::ge(r::field(row, "total_size_bytes"), r::Val::Num(0.0_f64))) {
            refuse.push(Violation::new("total_size_bytes", "non_negative", "total_size_bytes must not be negative"));
        }
        // `name_format` (bucket.hook.yaml:72)
        if (create || update) && !r::holds(&r::and(r::ge(r::length(r::field(row, "name")), r::Val::Num(1.0_f64)), r::le(r::length(r::field(row, "name")), r::Val::Num(255.0_f64)))) {
            refuse.push(Violation::new("name", "invalid_name_length", "Bucket name must be 1-255 characters"));
        }
        // `slug_format` (bucket.hook.yaml:81)
        if (create || update) && !r::holds(&r::and(r::ge(r::length(r::field(row, "slug")), r::Val::Num(1.0_f64)), r::le(r::length(r::field(row, "slug")), r::Val::Num(255.0_f64)))) {
            refuse.push(Violation::new("slug", "invalid_slug_length", "Bucket slug must be 1-255 characters"));
        }
        // `slug_characters` (bucket.hook.yaml:87)
        if (create || update) && !r::holds(&r::matches(r::field(row, "slug"), "^[a-z0-9-]+$")) {
            refuse.push(Violation::new("slug", "invalid_slug_chars", "Bucket slug must be lowercase with hyphens only"));
        }
        // `root_path_length` (bucket.hook.yaml:93)
        if (create) && !r::holds(&r::le(r::length(r::field(row, "root_path")), r::Val::Num(1024.0_f64))) {
            refuse.push(Violation::new("root_path", "path_too_long", "Root path too long"));
        }
        // `no_path_traversal` (bucket.hook.yaml:99)
        if (create) && !r::holds(&r::not(r::contains(r::field(row, "root_path"), r::text("..")))) {
            refuse.push(Violation::new("root_path", "path_traversal", "Path traversal not allowed in root path"));
        }
        // `cannot_modify_deleted` (bucket.hook.yaml:105)
        if (update) && !r::holds(&r::ne(r::field(row, "status"), r::text("deleted"))) {
            refuse.push(Violation::new("status", "bucket_deleted", "Cannot modify deleted buckets"));
        }
        GuardOutcome { refuse, shadow }
    }
}