prisma-risk / tsoracle / 26429948399

95%

push

github

feat(driver-openraft): apply-keyed activation barrier with subset gate (#464)

Adds the committed activation barrier that flips the cluster's active
write version. A new `SetFormatVersion` log command carries the gated
member set; the state-machine apply re-validates that the membership
committed AS OF the bump's own log position is a subset of `gated_members`
and — only on a successful (non-no-op) apply — sets the process-shared
`ActiveWriteVersion` cell to `target`. The leader observes that
successful apply through a new `ApplyOutcome` field on the
`AppDataResponse` and treats the cell update as "the flip"; a no-op
(membership grew an un-gated member between gate and commit) surfaces as
a distinct, operator-actionable error.

There is **no meta key** — durability rides the raft log (deterministic
replay re-runs the subset check) and the snapshot's leading frame byte.

**New command (`log_entry.rs`).**

- `SetFormatVersionPayload { target: u8, gated_members: BTreeSet<u64> }`
  carries the exact member set the leader's activation gate observed as
  capable of reading `target` at proposal time.
- `HighWaterCommand::SetFormatVersion(SetFormatVersionPayload)` is the
  new variant. `Display` and three postcard round-trip tests cover it.

**Apply outcome (`type_config.rs`).**

- `ApplyOutcome { Advanced, FormatActivated { target }, FormatActivationNoop { target } }`
  is the semantic discriminant on every apply response. A bare `Ok` from
  `client_write` proves the entry committed and applied, but not that
  the subset check passed; the leader's activation flip is keyed off
  observing `FormatActivated` — apply-keyed, never commit-keyed.
- `HighWaterApplied` gains an `outcome: ApplyOutcome` field.

**Apply arm (`state_machine.rs`).**

The `SetFormatVersion` arm reads `core.last_membership.membership().nodes()`
— exactly the membership committed at the bump's own log position, since
apply folds the log in index order — and unions voters AND learners. On
a s... (continued)

309 of 312 new or added lines in 4 files covered. (99.04%)

12766 of 13369 relevant lines covered (95.49%)

360207.78 hits per line