use backbone_core::GenericCrudService;
use crate::presentation::dto::{CreateBucketDto, UpdateBucketDto};
use crate::domain::entity::Bucket;
use crate::infrastructure::persistence::BucketRepository;
pub type BucketService = GenericCrudService<
Bucket,
CreateBucketDto,
UpdateBucketDto,
BucketRepository,
>;
pub struct BucketRowRules;
#[async_trait::async_trait]
impl backbone_core::write_guard::WriteGuard<Bucket> for BucketRowRules {
async fn check(
&self,
ctx: &backbone_core::write_guard::WriteCtx<'_, Bucket>,
) -> backbone_core::write_guard::GuardOutcome {
use backbone_core::row_rule as r;
use backbone_core::violation::Violation;
use backbone_core::write_guard::{GuardOutcome, WriteKind};
let (create, update) = (ctx.kind == WriteKind::Create, ctx.kind == WriteKind::Update);
let Some(after) = ctx.after.filter(|_| create || update) else {
return GuardOutcome::allow();
};
let Ok(row) = serde_json::to_value(after) else {
return GuardOutcome::allow();
};
let row = &row;
let old = ctx.before.and_then(|b| serde_json::to_value(b).ok());
let mut shadow = Vec::new();
if update && ctx.transition.is_none() && r::changed(old.as_ref(), row, &["status"]) {
shadow.push(Violation::new("status", "state_field_verbs_only", "the state field moves only through its verbs"));
}
if (create || update) && !r::holds(&r::and(r::ge(r::length(r::field(row, "name")), r::Val::Num(1.0_f64)), r::le(r::length(r::field(row, "name")), r::Val::Num(255.0_f64)))) {
shadow.push(Violation::new("name", "invalid_name_length", "Bucket name must be 1-255 characters"));
}
if (create || update) && !r::holds(&r::matches(r::field(row, "name"), "^[a-zA-Z0-9_-]+$")) {
shadow.push(Violation::new("name", "invalid_name_chars", "Bucket name must contain only alphanumeric characters, underscores, and hyphens"));
}
if (create || update) && !r::holds(&r::and(r::ge(r::length(r::field(row, "slug")), r::Val::Num(1.0_f64)), r::le(r::length(r::field(row, "slug")), r::Val::Num(255.0_f64)))) {
shadow.push(Violation::new("slug", "invalid_slug_length", "Bucket slug must be 1-255 characters"));
}
if (create) && !r::holds(&r::matches(r::field(row, "slug"), "^[a-z0-9-]+$")) {
shadow.push(Violation::new("slug", "invalid_slug_chars", "Bucket slug must be lowercase with hyphens only"));
}
if (create) && !r::holds(&r::le(r::length(r::field(row, "root_path")), r::Val::Num(1024.0_f64))) {
shadow.push(Violation::new("root_path", "path_too_long", "Root path too long"));
}
if (create) && !r::holds(&r::not(r::contains(r::field(row, "root_path"), r::text("..")))) {
shadow.push(Violation::new("root_path", "path_traversal", "Path traversal not allowed in root path"));
}
if (update) && !r::holds(&r::ne(r::field(row, "status"), r::text("deleted"))) {
shadow.push(Violation::new("status", "bucket_deleted", "Cannot modify deleted buckets"));
}
GuardOutcome { refuse: Vec::new(), shadow }
}
}