v0.3.3-pre.004

crates/ksp-store-postgres-lib/tests/dependency_boundary.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-store-postgres-lib/tests/dependency_boundary.rs
-// version: 8
+// version: 9
 
 #![warn(missing_docs)]
 #![deny(unreachable_pub)]
@@ -38,6 +38,7 @@ fn pre_005_backend_keeps_environment_sql_migrations_and_physical_types_private()
     assert!(crate_root.contains("mod error;"));
     assert!(crate_root.contains("mod health;"));
     assert!(crate_root.contains("mod migration;"));
+    assert!(crate_root.contains("mod raw_transaction;"));
     assert!(crate_root.contains("mod runtime;"));
     assert!(crate_root.contains("mod schema;"));
     assert!(crate_root.contains("const _: &str = crate::TRACING_TARGET;"));
@@ -122,3 +123,26 @@ fn pre_003_fix_001_migration_engine_uses_split_schema_contract_and_binds_network
     }
     return;
 }
+
+#[test]
+fn pre_004_raw_read_sql_and_mapping_remain_backend_private_and_read_only() {
+    let crate_root = include_str!("../src/lib.rs");
+    let raw = include_str!("../src/raw_transaction.rs");
+    assert!(crate_root.contains("mod raw_transaction;"));
+    assert!(!crate_root.contains("pub mod raw_transaction"));
+    for required in [
+        "SELECT transaction_row.signature",
+        "ksp_raw_transaction_observations",
+        "slot::text AS slot_text",
+        "RawPayload::try_new",
+        "RawTransactionTombstone::try_new",
+        "PostgresBackendErrorKind::DataInvalid",
+        "PostgresBackendErrorKind::WrongNetwork",
+    ] {
+        assert!(raw.contains(required), "missing private RAW read mapping contract: {required}");
+    }
+    for forbidden in ["INSERT INTO", "UPDATE ", "DELETE FROM", "std::env", "dotenv", "ksp_store_lib", "ksp_config_lib"] {
+        assert!(!raw.contains(forbidden), "pre.004 RAW read module contains forbidden ownership/write material: {forbidden}");
+    }
+    return;
+}