studio/wfe
2
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 1 Activity
Files
496a192198341d59cf25fea38edfe980ea6f8eca
wfe/Cargo.toml

66 lines
2.0 KiB
TOML
Raw Normal View History

chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
[workspace]
feat(wfe-buildkit-protos): generate full BuildKit gRPC API (tonic 0.14) New crate generating Rust gRPC stubs from the official BuildKit proto files (git submodule from moby/buildkit). Control service, LLB definitions, session protocols, and source policy. tonic 0.14 / prost 0.14.
2026-03-26 12:29:00 +00:00
members = ["wfe-core", "wfe-sqlite", "wfe-postgres", "wfe-opensearch", "wfe-valkey", "wfe", "wfe-yaml", "wfe-buildkit", "wfe-containerd", "wfe-containerd-protos", "wfe-buildkit-protos"]
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
resolver = "2"
[workspace.package]
chore: bump version to 1.4.0
2026-03-26 23:52:50 +00:00
version = "1.4.0"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
edition = "2024"
license = "MIT"
chore: bump version to 1.0.0 and add repository metadata
2026-03-26 00:59:20 +00:00
repository = "https://src.sunbeam.pt/studio/wfe"
homepage = "https://src.sunbeam.pt/studio/wfe"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
[workspace.dependencies]
# Core
tokio = { version = "1", features = ["full"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
async-trait = "0.1"
uuid = { version = "1", features = ["v4", "serde"] }
chrono = { version = "0.4", features = ["serde"] }
thiserror = "2"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
feat: add OpenTelemetry tracing support behind otel feature flag - Add tracing::instrument spans to executor (workflow.execute), host (workflow.start, event.publish, event.process) - Add otel feature flag to wfe-core and wfe crates - Add wfe/src/otel.rs helper for OTLP exporter initialization - Dependencies: tracing-opentelemetry, opentelemetry, opentelemetry_sdk, opentelemetry-otlp (all optional behind otel feature) - Step execution stays at info level, executor internals at debug
2026-03-25 20:41:34 +00:00
tracing-opentelemetry = "0.28"
opentelemetry = "0.27"
opentelemetry_sdk = { version = "0.27", features = ["rt-tokio"] }
opentelemetry-otlp = { version = "0.27", features = ["tonic"] }
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
# HTTP
reqwest = { version = "0.12", features = ["json"] }
# Persistence
sqlx = { version = "0.8", features = ["runtime-tokio", "tls-rustls", "sqlite", "postgres", "chrono", "uuid", "json"] }
# Redis/Valkey
redis = { version = "0.27", features = ["tokio-comp", "connection-manager"] }
# Search
opensearch = "2"
# Internal crates
chore: bump version to 1.4.0
2026-03-26 23:52:50 +00:00
wfe-core = { version = "1.4.0", path = "wfe-core" }
wfe-sqlite = { version = "1.4.0", path = "wfe-sqlite" }
wfe-postgres = { version = "1.4.0", path = "wfe-postgres" }
wfe-opensearch = { version = "1.4.0", path = "wfe-opensearch" }
wfe-valkey = { version = "1.4.0", path = "wfe-valkey" }
wfe-yaml = { version = "1.4.0", path = "wfe-yaml" }
wfe-buildkit = { version = "1.4.0", path = "wfe-buildkit" }
wfe-containerd = { version = "1.4.0", path = "wfe-containerd" }
feat(wfe-yaml): add YAML workflow definitions with shell executor Concourse-CI-inspired YAML format for defining workflows. Compiles to standard WorkflowDefinition + step factories. Features: - Schema parsing with serde_yaml (YamlWorkflow, YamlStep, StepConfig) - ((var.path)) interpolation from config maps at load time - YAML anchors (&anchor/*alias) fully supported - Validation at load time (no runtime surprises) - Shell executor: runs commands via tokio::process, captures stdout, parses ##wfe[output name=value] annotations for structured outputs - Compiler: sequential wiring, parallel blocks, on_failure/on_success/ ensure hooks, error behavior mapping - Public API: load_workflow(), load_workflow_from_str() - 23 tests (schema, interpolation, compiler, e2e)
2026-03-25 21:32:00 +00:00
# YAML
serde_yaml = "0.9"
feat(wfe-yaml): add YAML 1.1 merge key support via yaml-merge-keys Preprocesses <<: *anchor merge keys before serde_yaml 0.9 deserialization. serde_yaml implements YAML 1.2 which dropped merge keys; the yaml-merge-keys crate resolves them as a preprocessing step, giving full anchor + merge support for DRY pipeline definitions.
2026-03-26 15:59:28 +00:00
yaml-merge-keys = { version = "0.8", features = ["serde_yaml"] }
feat(wfe-yaml): add YAML workflow definitions with shell executor Concourse-CI-inspired YAML format for defining workflows. Compiles to standard WorkflowDefinition + step factories. Features: - Schema parsing with serde_yaml (YamlWorkflow, YamlStep, StepConfig) - ((var.path)) interpolation from config maps at load time - YAML anchors (&anchor/*alias) fully supported - Validation at load time (no runtime surprises) - Shell executor: runs commands via tokio::process, captures stdout, parses ##wfe[output name=value] annotations for structured outputs - Compiler: sequential wiring, parallel blocks, on_failure/on_success/ ensure hooks, error behavior mapping - Public API: load_workflow(), load_workflow_from_str() - 23 tests (schema, interpolation, compiler, e2e)
2026-03-25 21:32:00 +00:00
regex = "1"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
feat(wfe-yaml): add deno_core JS/TS executor with sandboxed permissions Secure JavaScript/TypeScript execution in workflow steps via deno_core, behind the `deno` feature flag. Security features: - Per-step permission system: net host allowlist, filesystem read/write path restrictions, env var allowlist, subprocess spawn control - V8 heap limits (64MB default) prevent memory exhaustion - Execution timeout with V8 isolate termination for sync infinite loops - Path traversal detection blocks ../ escape attempts - Dynamic import rejection unless explicitly enabled Workflow I/O ops: - inputs() — read workflow data as JSON - output(key, value) — set step outputs - log(message) — structured tracing Architecture: - JsRuntime runs on dedicated thread (V8 is !Send) - PermissionChecker enforced on every I/O op via OpState - DenoStep implements StepBody, integrates with existing compiler - Step type dispatch: "shell" or "deno" in YAML 34 new tests (12 permission unit, 3 config, 2 runtime, 18 integration).
2026-03-25 22:32:07 +00:00
# Deno runtime
deno_core = "0.394"
feat(wfe-yaml): add HTTP ops, module loader, and npm support via esm.sh Phase 4 — Permission-gated HTTP fetch op: - op_fetch with net permission check on every request - globalThis.fetch() wrapper with .json()/.text() methods - Supports GET/POST/PUT/DELETE with headers and body Phase 5 — Module loader: - WfeModuleLoader resolving npm: → esm.sh, https://, file://, relative paths - All resolution paths permission-checked - Bare path resolution (/) for esm.sh sub-module redirects - Dynamic import rejection unless permissions.dynamic_import: true - esm.sh auto-added to net allowlist when modules declared Mandatory npm integration test (is-number via esm.sh). 25 new tests. 133 total deno tests, 326 total workspace tests.
2026-03-25 23:02:51 +00:00
deno_error = "0.7"
feat(wfe-yaml): add deno_core JS/TS executor with sandboxed permissions Secure JavaScript/TypeScript execution in workflow steps via deno_core, behind the `deno` feature flag. Security features: - Per-step permission system: net host allowlist, filesystem read/write path restrictions, env var allowlist, subprocess spawn control - V8 heap limits (64MB default) prevent memory exhaustion - Execution timeout with V8 isolate termination for sync infinite loops - Path traversal detection blocks ../ escape attempts - Dynamic import rejection unless explicitly enabled Workflow I/O ops: - inputs() — read workflow data as JSON - output(key, value) — set step outputs - log(message) — structured tracing Architecture: - JsRuntime runs on dedicated thread (V8 is !Send) - PermissionChecker enforced on every I/O op via OpState - DenoStep implements StepBody, integrates with existing compiler - Step type dispatch: "shell" or "deno" in YAML 34 new tests (12 permission unit, 3 config, 2 runtime, 18 integration).
2026-03-25 22:32:07 +00:00
url = "2"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
# Dev/Test
pretty_assertions = "1"
rstest = "0.23"
wiremock = "0.6"
tokio-stream = "0.1"
feat(wfe-yaml): add HTTP ops, module loader, and npm support via esm.sh Phase 4 — Permission-gated HTTP fetch op: - op_fetch with net permission check on every request - globalThis.fetch() wrapper with .json()/.text() methods - Supports GET/POST/PUT/DELETE with headers and body Phase 5 — Module loader: - WfeModuleLoader resolving npm: → esm.sh, https://, file://, relative paths - All resolution paths permission-checked - Bare path resolution (/) for esm.sh sub-module redirects - Dynamic import rejection unless permissions.dynamic_import: true - esm.sh auto-added to net allowlist when modules declared Mandatory npm integration test (is-number via esm.sh). 25 new tests. 133 total deno tests, 326 total workspace tests.
2026-03-25 23:02:51 +00:00
tempfile = "3"
Reference in New Issue Copy Permalink