forjar 1.4.2

Rust-native Infrastructure as Code — bare-metal first, BLAKE3 state, provenance tracing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167

//! Runtime tests for Kani proof stubs (FJ-041, FJ-2201, FJ-2202).
//!
//! These run with regular `cargo test`, not Kani. They verify the same
//! invariants as the bounded model-checking proofs.

use super::kani_proofs::*;

#[test]
fn test_blake3_idempotency_runtime() {
    let data = b"hello world";
    let h1 = blake3::hash(data);
    let h2 = blake3::hash(data);
    assert_eq!(h1, h2);
}

#[test]
fn test_converged_state_noop_runtime() {
    let content = b"test content";
    let h1 = blake3::hash(content).to_hex().to_string();
    let h2 = blake3::hash(content).to_hex().to_string();
    assert_eq!(h1, h2);
}

#[test]
fn test_topo_sort_stability_runtime() {
    let o1 = compute_order(true, false, true);
    let o2 = compute_order(true, false, true);
    assert_eq!(o1, o2);
}

#[test]
fn test_topo_sort_no_edges() {
    let order = compute_order(false, false, false);
    assert_eq!(order, [0, 1, 2]);
}

#[test]
fn test_topo_sort_chain() {
    // 0 → 1 → 2
    let order = compute_order(true, false, true);
    assert_eq!(order, [0, 1, 2]);
}

#[test]
fn test_topo_sort_fan_out() {
    // 0 → 1, 0 → 2
    let order = compute_order(true, true, false);
    assert_eq!(order, [0, 1, 2]);
}

#[test]
fn test_handler_invariant_file_runtime() {
    use crate::core::planner::hash_desired_state;
    use crate::core::types::{Resource, ResourceType};

    let r = Resource {
        resource_type: ResourceType::File,
        path: Some("/etc/test.conf".into()),
        content: Some("key=value".into()),
        ..Default::default()
    };
    let h_base = hash_desired_state(&r);

    let r_tags = Resource {
        tags: vec!["web".into()],
        ..r.clone()
    };
    assert_eq!(
        h_base,
        hash_desired_state(&r_tags),
        "tags must not affect hash"
    );

    let r_deps = Resource {
        depends_on: vec!["dep".into()],
        ..r_tags
    };
    assert_eq!(
        h_base,
        hash_desired_state(&r_deps),
        "deps must not affect hash"
    );
}

#[test]
fn test_handler_invariant_package_runtime() {
    use crate::core::planner::hash_desired_state;
    use crate::core::types::{Resource, ResourceType};

    let r1 = Resource {
        resource_type: ResourceType::Package,
        packages: vec!["nginx".into()],
        ..Default::default()
    };

    let r2 = Resource {
        tags: vec!["web".into()],
        ..r1.clone()
    };

    assert_eq!(
        hash_desired_state(&r1),
        hash_desired_state(&r2),
        "tags must not affect package hash"
    );
}

#[test]
fn test_handler_invariant_service_runtime() {
    use crate::core::planner::hash_desired_state;
    use crate::core::types::{Resource, ResourceType};

    let r = Resource {
        resource_type: ResourceType::Service,
        name: Some("nginx".into()),
        ..Default::default()
    };
    let h_base = hash_desired_state(&r);

    let r2 = Resource {
        tags: vec!["production".into()],
        depends_on: vec!["nginx-pkg".into()],
        ..r.clone()
    };
    assert_eq!(
        h_base,
        hash_desired_state(&r2),
        "tags/deps must not affect service hash"
    );
}

#[test]
fn test_dag_ordering_determinism_runtime() {
    use crate::core::resolver::build_execution_order;
    use crate::core::types::*;

    let yaml = r#"
version: "1.0"
name: dag-test
machines:
  local:
    hostname: localhost
    addr: 127.0.0.1
    user: root
    arch: x86_64
resources:
  res-a:
    type: file
    machine: local
    path: /etc/a
    content: "a"
  res-b:
    type: file
    machine: local
    path: /etc/b
    content: "b"
    depends_on: [res-a]
"#;
    let config: ForjarConfig = serde_yaml_ng::from_str(yaml).unwrap();

    let o1 = build_execution_order(&config).unwrap();
    let o2 = build_execution_order(&config).unwrap();
    assert_eq!(o1, o2);
    let pos_a = o1.iter().position(|s| s == "res-a").unwrap();
    let pos_b = o1.iter().position(|s| s == "res-b").unwrap();
    assert!(pos_a < pos_b, "dependency must come first");
}