liven 0.0.1

High-velocity embedded database with streaming pipelines, vector search, and real-time subscriptions
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

use rand::rngs::OsRng;

pub const CAP_NONE: u8 = 0x00;
pub const CAP_READ: u8 = 0x01; // historical scan, subscribes, list streams, status
pub const CAP_INSERT: u8 = 0x02; // inserts, updates, upserts
pub const CAP_DELETE: u8 = 0x04; // deletes, empties
pub const CAP_ROOT: u8 = 0xFF; // unrestricted/full - admin role

/// Back-compat alias — checks both insert and delete.
pub const CAP_WRITE: u8 = CAP_INSERT | CAP_DELETE;

pub fn generate_nonce() -> [u8; 32] {
    let mut nonce = [0u8; 32];
    let mut rng = OsRng;
    rand::RngCore::fill_bytes(&mut rng, &mut nonce);
    nonce
}

pub fn hex_decode(s: &str) -> Result<Vec<u8>, String> {
    let s = s.trim();
    if !s.len().is_multiple_of(2) {
        return Err("Odd hex length".to_string());
    }
    let mut bytes = Vec::with_capacity(s.len() / 2);
    for i in (0..s.len()).step_by(2) {
        let res = u8::from_str_radix(&s[i..i + 2], 16)
            .map_err(|_| "Invalid hex character".to_string())?;
        bytes.push(res);
    }
    Ok(bytes)
}

pub fn hex_encode(bytes: &[u8]) -> String {
    bytes.iter().map(|b| format!("{:02x}", b)).collect()
}

/// Single source of truth for role-string → capability bitmask.
pub fn capabilities_for_role(role: &str) -> u8 {
    match role {
        "admin" => CAP_ROOT,
        "read-only" => CAP_READ,
        "write" => CAP_READ | CAP_INSERT,
        "write-delete" => CAP_READ | CAP_INSERT | CAP_DELETE,
        _ => CAP_NONE,
    }
}