studio/wfe
2
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 1 Activity
Files
71d9821c4c0a222ed15cc1315ff68a98c5e6b487
wfe/Cargo.toml

63 lines
1.6 KiB
TOML
Raw Normal View History

chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
[workspace]
feat(wfe-yaml): add YAML workflow definitions with shell executor Concourse-CI-inspired YAML format for defining workflows. Compiles to standard WorkflowDefinition + step factories. Features: - Schema parsing with serde_yaml (YamlWorkflow, YamlStep, StepConfig) - ((var.path)) interpolation from config maps at load time - YAML anchors (&anchor/*alias) fully supported - Validation at load time (no runtime surprises) - Shell executor: runs commands via tokio::process, captures stdout, parses ##wfe[output name=value] annotations for structured outputs - Compiler: sequential wiring, parallel blocks, on_failure/on_success/ ensure hooks, error behavior mapping - Public API: load_workflow(), load_workflow_from_str() - 23 tests (schema, interpolation, compiler, e2e)
2026-03-25 21:32:00 +00:00
members = ["wfe-core", "wfe-sqlite", "wfe-postgres", "wfe-opensearch", "wfe-valkey", "wfe", "wfe-yaml"]
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
resolver = "2"
[workspace.package]
chore: bump version to 1.0.0 and add repository metadata
2026-03-26 00:59:20 +00:00
version = "1.0.0"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
edition = "2024"
license = "MIT"
chore: bump version to 1.0.0 and add repository metadata
2026-03-26 00:59:20 +00:00
repository = "https://src.sunbeam.pt/studio/wfe"
homepage = "https://src.sunbeam.pt/studio/wfe"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
[workspace.dependencies]
# Core
tokio = { version = "1", features = ["full"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
async-trait = "0.1"
uuid = { version = "1", features = ["v4", "serde"] }
chrono = { version = "0.4", features = ["serde"] }
thiserror = "2"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
feat: add OpenTelemetry tracing support behind otel feature flag - Add tracing::instrument spans to executor (workflow.execute), host (workflow.start, event.publish, event.process) - Add otel feature flag to wfe-core and wfe crates - Add wfe/src/otel.rs helper for OTLP exporter initialization - Dependencies: tracing-opentelemetry, opentelemetry, opentelemetry_sdk, opentelemetry-otlp (all optional behind otel feature) - Step execution stays at info level, executor internals at debug
2026-03-25 20:41:34 +00:00
tracing-opentelemetry = "0.28"
opentelemetry = "0.27"
opentelemetry_sdk = { version = "0.27", features = ["rt-tokio"] }
opentelemetry-otlp = { version = "0.27", features = ["tonic"] }
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
# HTTP
reqwest = { version = "0.12", features = ["json"] }
# Persistence
sqlx = { version = "0.8", features = ["runtime-tokio", "tls-rustls", "sqlite", "postgres", "chrono", "uuid", "json"] }
# Redis/Valkey
redis = { version = "0.27", features = ["tokio-comp", "connection-manager"] }
# Search
opensearch = "2"
# Internal crates
wfe-core = { path = "wfe-core" }
wfe-sqlite = { path = "wfe-sqlite" }
wfe-postgres = { path = "wfe-postgres" }
wfe-opensearch = { path = "wfe-opensearch" }
wfe-valkey = { path = "wfe-valkey" }
feat(wfe-yaml): add YAML workflow definitions with shell executor Concourse-CI-inspired YAML format for defining workflows. Compiles to standard WorkflowDefinition + step factories. Features: - Schema parsing with serde_yaml (YamlWorkflow, YamlStep, StepConfig) - ((var.path)) interpolation from config maps at load time - YAML anchors (&anchor/*alias) fully supported - Validation at load time (no runtime surprises) - Shell executor: runs commands via tokio::process, captures stdout, parses ##wfe[output name=value] annotations for structured outputs - Compiler: sequential wiring, parallel blocks, on_failure/on_success/ ensure hooks, error behavior mapping - Public API: load_workflow(), load_workflow_from_str() - 23 tests (schema, interpolation, compiler, e2e)
2026-03-25 21:32:00 +00:00
wfe-yaml = { path = "wfe-yaml" }
# YAML
serde_yaml = "0.9"
regex = "1"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
feat(wfe-yaml): add deno_core JS/TS executor with sandboxed permissions Secure JavaScript/TypeScript execution in workflow steps via deno_core, behind the `deno` feature flag. Security features: - Per-step permission system: net host allowlist, filesystem read/write path restrictions, env var allowlist, subprocess spawn control - V8 heap limits (64MB default) prevent memory exhaustion - Execution timeout with V8 isolate termination for sync infinite loops - Path traversal detection blocks ../ escape attempts - Dynamic import rejection unless explicitly enabled Workflow I/O ops: - inputs() — read workflow data as JSON - output(key, value) — set step outputs - log(message) — structured tracing Architecture: - JsRuntime runs on dedicated thread (V8 is !Send) - PermissionChecker enforced on every I/O op via OpState - DenoStep implements StepBody, integrates with existing compiler - Step type dispatch: "shell" or "deno" in YAML 34 new tests (12 permission unit, 3 config, 2 runtime, 18 integration).
2026-03-25 22:32:07 +00:00
# Deno runtime
deno_core = "0.394"
feat(wfe-yaml): add HTTP ops, module loader, and npm support via esm.sh Phase 4 — Permission-gated HTTP fetch op: - op_fetch with net permission check on every request - globalThis.fetch() wrapper with .json()/.text() methods - Supports GET/POST/PUT/DELETE with headers and body Phase 5 — Module loader: - WfeModuleLoader resolving npm: → esm.sh, https://, file://, relative paths - All resolution paths permission-checked - Bare path resolution (/) for esm.sh sub-module redirects - Dynamic import rejection unless permissions.dynamic_import: true - esm.sh auto-added to net allowlist when modules declared Mandatory npm integration test (is-number via esm.sh). 25 new tests. 133 total deno tests, 326 total workspace tests.
2026-03-25 23:02:51 +00:00
deno_error = "0.7"
feat(wfe-yaml): add deno_core JS/TS executor with sandboxed permissions Secure JavaScript/TypeScript execution in workflow steps via deno_core, behind the `deno` feature flag. Security features: - Per-step permission system: net host allowlist, filesystem read/write path restrictions, env var allowlist, subprocess spawn control - V8 heap limits (64MB default) prevent memory exhaustion - Execution timeout with V8 isolate termination for sync infinite loops - Path traversal detection blocks ../ escape attempts - Dynamic import rejection unless explicitly enabled Workflow I/O ops: - inputs() — read workflow data as JSON - output(key, value) — set step outputs - log(message) — structured tracing Architecture: - JsRuntime runs on dedicated thread (V8 is !Send) - PermissionChecker enforced on every I/O op via OpState - DenoStep implements StepBody, integrates with existing compiler - Step type dispatch: "shell" or "deno" in YAML 34 new tests (12 permission unit, 3 config, 2 runtime, 18 integration).
2026-03-25 22:32:07 +00:00
url = "2"
chore: scaffold workspace with nextest and docker compose Workspace with 6 crates: wfe-core, wfe-sqlite, wfe-postgres, wfe-opensearch, wfe-valkey, and wfe (umbrella). Nextest profiles for default, integration, and CI. Docker compose for PostgreSQL, Valkey, and OpenSearch integration tests.
2026-03-25 20:05:34 +00:00
# Dev/Test
pretty_assertions = "1"
rstest = "0.23"
wiremock = "0.6"
tokio-stream = "0.1"
feat(wfe-yaml): add HTTP ops, module loader, and npm support via esm.sh Phase 4 — Permission-gated HTTP fetch op: - op_fetch with net permission check on every request - globalThis.fetch() wrapper with .json()/.text() methods - Supports GET/POST/PUT/DELETE with headers and body Phase 5 — Module loader: - WfeModuleLoader resolving npm: → esm.sh, https://, file://, relative paths - All resolution paths permission-checked - Bare path resolution (/) for esm.sh sub-module redirects - Dynamic import rejection unless permissions.dynamic_import: true - esm.sh auto-added to net allowlist when modules declared Mandatory npm integration test (is-number via esm.sh). 25 new tests. 133 total deno tests, 326 total workspace tests.
2026-03-25 23:02:51 +00:00
tempfile = "3"
Reference in New Issue Copy Permalink