meerkat-runtime 0.7.2

v9 runtime control-plane for Meerkat agent lifecycle
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

// @generated — protocol helpers for `auth_release_oauth_flow_drain`
// Composition: auth_lease_bundle, Producer: auth_machine, Effect: CancelOAuthFlowsForRelease
// Closure policy: AckRequired
// Liveness: eventual feedback: release_lease discharges the drain by firing a terminal Expire* feedback per drained flow id before committing `Release`; the Release guard `oauth_release_drained` is the machine-side completion witness

use crate::auth_machine::dsl::{
    AuthMachineAuthority, AuthMachineEffect, AuthMachineInput, AuthMachineMutator,
    AuthMachineTransition, AuthMachineTransitionError,
};

#[derive(Debug, Clone)]
pub struct AuthReleaseOauthFlowDrainObligation {
    pub browser_flow_ids: std::collections::BTreeSet<String>,
    pub device_flow_ids: std::collections::BTreeSet<String>,
}

#[macro_export]
macro_rules! auth_release_oauth_flow_drain_feedback_input_patterns {
    () => {
        $crate::auth_machine::AuthMachineInput::ExpireOAuthBrowserFlow { .. }
            | $crate::auth_machine::AuthMachineInput::ExpireOAuthDeviceFlow { .. }
    };
}

pub fn extract_obligations(
    transition: &AuthMachineTransition,
) -> Vec<AuthReleaseOauthFlowDrainObligation> {
    transition
        .effects()
        .iter()
        .filter_map(|effect| match effect {
            AuthMachineEffect::CancelOAuthFlowsForRelease {
                browser_flow_ids,
                device_flow_ids,
            } => Some(AuthReleaseOauthFlowDrainObligation {
                browser_flow_ids: browser_flow_ids.clone(),
                device_flow_ids: device_flow_ids.clone(),
            }),
            _ => None,
        })
        .collect()
}

pub fn submit_expire_o_auth_browser_flow(
    authority: &mut AuthMachineAuthority,
    _obligation: AuthReleaseOauthFlowDrainObligation,
    browser_flow_id: String,
) -> Result<AuthMachineTransition, AuthMachineTransitionError> {
    let transition = authority.apply(AuthMachineInput::ExpireOAuthBrowserFlow {
        flow_id: browser_flow_id,
    })?;
    Ok(transition)
}

pub fn submit_expire_o_auth_device_flow(
    authority: &mut AuthMachineAuthority,
    _obligation: AuthReleaseOauthFlowDrainObligation,
    device_flow_id: String,
) -> Result<AuthMachineTransition, AuthMachineTransitionError> {
    let transition = authority.apply(AuthMachineInput::ExpireOAuthDeviceFlow {
        flow_id: device_flow_id,
    })?;
    Ok(transition)
}