orion-server 0.3.0

Declarative services runtime — deploy governed REST/Kafka services as JSON workflows, with rate limiting, circuit breakers, versioning, and observability built in
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use serde::{Deserialize, Serialize};

use crate::config::validation::require_nonzero;
use crate::errors::OrionError;

/// Safety bounds applied to every `data_write` (the portable mutation handler).
///
/// A bulk insert asking for more than `max_rows` is rejected (never silently
/// truncated), and an unfiltered `update`/`delete` is rejected unless the caller
/// both sets `"all": true` on the envelope and `allow_unfiltered` is enabled here.
/// See `proposals/data-write-dialect.md` §6.1–6.2.
#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(default)]
pub struct WriteConfig {
    /// Hard maximum number of rows per bulk `insert`/`upsert`. Over this is rejected.
    pub max_rows: u64,
    /// Permit an intentionally unfiltered `update`/`delete` (still requires the
    /// per-call `"all": true` acknowledgement). Off by default.
    pub allow_unfiltered: bool,
}

impl Default for WriteConfig {
    fn default() -> Self {
        Self {
            max_rows: 1000,
            allow_unfiltered: false,
        }
    }
}

impl WriteConfig {
    pub(crate) fn validate(&self) -> Result<(), OrionError> {
        require_nonzero(self.max_rows, "write.max_rows")?;
        Ok(())
    }
}