phoxal 0.32.3

Phoxal - production-oriented autonomous robot framework: the runtime engine and model (the api contract tree lives in phoxal-api, the typed bus in phoxal-bus).
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145

//! Shared deserialization of the participant linker-section
//! metadata JSON (coherence-gate design doc §2/§5).
//!
//! A participant attribute (`phoxal-macros/src/authoring.rs`) embeds one JSON
//! manifest per participant binary in a dedicated linker section - see
//! `phoxal::participant::api::__meta` for the const-eval mechanism that
//! resolves it. The entry shape is `{"role","generation","contract","external"}`:
//! generation and contract are recorded as SEPARATE fields (never a joined
//! name a reader would have to parse). The shape is strict: this pre-1.0
//! writer/parser cut has no compatibility fallback.
//!
//! This module owns ONLY the JSON shape, not the object-file section-BYTES
//! extraction, which stays host-specific (an `object`-crate walk over an
//! ELF/Mach-O binary or a release tarball) in each consumer:
//! `xtask/src/release/metadata.rs` for the release pipeline (`cargo xtask
//! catalog generate`/`release package`), and `phoxal-cli`'s own
//! `participant_metadata.rs` for the CLI (not yet switched to this shared
//! type - a later slice, per the coherence-gate design doc §5). Both extract
//! the section's raw bytes their own way, then hand them to
//! [`parse_participant_metadata`] here so the JSON shape has exactly one
//! definition shared by every reader.

use serde::Deserialize;

/// One `{"role","generation","contract","external"}` entry from the embedded
/// manifest: one participant `Api` struct field's role for one contract (a
/// `Server<Req, Resp>`/`Querier<Req, Resp>` field contributes two entries -
/// one per side). Deduplicated per `(role, contract)` by the derive
/// (`phoxal-macros/src/authoring.rs`); there is no `field` key - dedup already
/// made it name an arbitrary first field, and nothing read it (coherence-gate
/// design doc §2).
#[derive(Clone, Debug, Deserialize, Eq, PartialEq)]
#[serde(deny_unknown_fields)]
pub struct ParticipantMetaContract {
    /// `"publish"`, `"subscribe"`, `"serve"`, or `"ask"`
    /// (`phoxal::participant::ContractRole`, snake_case).
    pub role: String,
    /// The contract's generation, e.g. `"y2026_1"`
    /// (`<Body as phoxal_bus::ContractBody>::GENERATION`).
    pub generation: String,
    /// The contract's path within its generation, e.g. `"drive::Target"`
    /// (`<Body as phoxal_bus::ContractBody>::CONTRACT`). The **logical
    /// contract** for coherence purposes is this field alone - two entries
    /// with the same `contract` but different `generation` name the same
    /// logical contract at different generations; the version-qualified
    /// identity is the `generation`/`contract` join.
    pub contract: String,
    /// Whether this edge is excused from the coherence check
    /// (`#[phoxal(external)]`, coherence-gate design doc §1): the counterpart
    /// is known, at authoring time, to legitimately live outside the checked
    /// participant set. Only ever `true` for a `subscribe`/`ask` entry - the
    /// derive rejects the attribute on `publish`/`serve` fields.
    pub external: bool,
}

/// The embedded metadata manifest for one participant. This is a strict
/// pre-1.0 format whose writer and parsers move in lockstep.
#[derive(Clone, Debug, Deserialize, Eq, PartialEq)]
#[serde(deny_unknown_fields)]
pub struct ParticipantMeta {
    /// The `Api` struct's type name (e.g. `"Api"`), recorded purely as
    /// provenance by `#[derive(phoxal::Api)]`.
    pub participant_api: String,
    pub contracts: Vec<ParticipantMetaContract>,
    /// The participant's compile-time Draft 2020-12 config schema.
    pub config_schema: serde_json::Value,
}

/// Parses the metadata section's raw JSON bytes - already extracted from an
/// object file's linker section by the caller (see the module docs for why
/// that extraction stays out of this crate) - into a [`ParticipantMeta`].
pub fn parse_participant_metadata(section_bytes: &[u8]) -> serde_json::Result<ParticipantMeta> {
    serde_json::from_slice(section_bytes)
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn parses_the_current_section_shape() {
        let json = br#"{"participant_api":"Api","contracts":[
            {"role":"subscribe","generation":"y2026_1","contract":"drive::Target","external":false},
            {"role":"publish","generation":"y2026_1","contract":"drive::State","external":false}
        ],"config_schema":{"type":"object","properties":{"speed":{"type":"number"}}}}"#;
        let meta = parse_participant_metadata(json).expect("valid metadata JSON");
        assert_eq!(meta.participant_api, "Api");
        assert_eq!(meta.config_schema["type"], "object");
        assert_eq!(
            meta.contracts,
            vec![
                ParticipantMetaContract {
                    role: "subscribe".to_string(),
                    generation: "y2026_1".to_string(),
                    contract: "drive::Target".to_string(),
                    external: false,
                },
                ParticipantMetaContract {
                    role: "publish".to_string(),
                    generation: "y2026_1".to_string(),
                    contract: "drive::State".to_string(),
                    external: false,
                },
            ]
        );
    }

    #[test]
    fn external_true_is_recorded() {
        let json = br#"{"participant_api":"Api","contracts":[
            {"role":"subscribe","generation":"y2026_1","contract":"drive::Target","external":true}
        ],"config_schema":{"type":"null"}}"#;
        let meta = parse_participant_metadata(json).expect("valid metadata JSON");
        assert!(meta.contracts[0].external);
    }

    #[test]
    fn missing_external_key_is_rejected() {
        let json = br#"{"participant_api":"Api","contracts":[
            {"role":"publish","generation":"y2026_1","contract":"drive::State"}
        ],"config_schema":{"type":"null"}}"#;
        let err = parse_participant_metadata(json).unwrap_err();
        assert!(err.to_string().contains("external"));
    }

    #[test]
    fn empty_contracts_list_parses() {
        let json = br#"{"participant_api":"()","contracts":[],"config_schema":{"type":"null"}}"#;
        let meta = parse_participant_metadata(json).expect("valid metadata JSON");
        assert!(meta.contracts.is_empty());
    }

    #[test]
    fn malformed_json_is_a_clear_error() {
        let err = parse_participant_metadata(b"not json").unwrap_err();
        assert!(err.to_string().contains("expected"));
    }

    #[test]
    fn missing_config_schema_is_rejected() {
        let err =
            parse_participant_metadata(br#"{"participant_api":"Api","contracts":[]}"#).unwrap_err();
        assert!(err.to_string().contains("config_schema"));
    }
}