Add property-level OpenAPI-to-Rust contract coverage (#83)

Enrich the pinned OpenAPI snapshot with normalized structural
schemas and per-operation request and response schema graphs.

Add a machine-readable contract for 34 generated and handwritten Rust
wire models. hubuum_reconcile now parses the actual Rust structs and
fails on field, Serde direction, requiredness, operation reachability,
or stale documented-exception drift.

Document the intentional point/list projection and runtime/OpenAPI
differences, and add regressions for relation cardinalities, import
timestamps, and export timings that were previously omitted in v0.0.8.

This adds repository validation without changing the public client API,
runtime behavior, declared v0.0.9 server target, or MSRV.

Closes #65

Author: terjekv

CHANGELOG.md

@@ -8,6 +8,10 @@ The format is based on Keep a Changelog, and this project aims to follow Semanti
 
 ### Added
 
+- Add machine-checked property-level reconciliation between pinned OpenAPI
+  schemas and 34 generated or handwritten Rust wire models, including explicit
+  point/list projection exceptions and regressions for relation cardinalities,
+  import timestamps, and export timings.
 - Create or update a GitHub Release from the matching dated changelog section
   after crate publication, with an idempotent backfill for existing stable tags
   and the newest stable release marked as `Latest`.

Cargo.lock

@@ -13,6 +13,12 @@ do not run a procedural macro or a build script.
   reconciliation behavior.
 - `hubuum_reconcile/src/generate.rs` contains the specification model,
   validation, and rendering rules.
+- `openapi/operations.json` is the normalized operation and structural schema
+  inventory generated from the pinned server specification.
+- `openapi/model-contract.json` maps relevant OpenAPI schemas to generated and
+  handwritten Rust wire structs. The reconciler parses the actual Rust source
+  and verifies field names, Serde behavior, requiredness, and documented
+  exceptions.
 - `src/resources/generated/*.rs` is generated, reviewed, and committed.
 - The handwritten files under `src/resources` include the generated output and
   continue to own resource-specific behavior.
@@ -60,6 +66,9 @@ CI and the release preflight run `check`, which fails when committed output is
 missing or stale. Generation uses the repository's `rustfmt`; it performs no
 network access and is not part of `hubuum_client`'s crates.io package.
 
-OpenAPI operation reconciliation remains a separate contract check in
-`scripts/openapi-contract.py`. The normalized OpenAPI snapshot does not contain
-enough property-level detail to generate these resource models directly.
+When the pinned server target changes, update `openapi/operations.json`, update
+the affected Rust models and `openapi/model-contract.json`, and document every
+intentional omission or projection difference in `openapi/known-gaps.md`. Run
+`cargo run -p hubuum_reconcile --locked -- check` to verify both generated
+resource files and property-level model reconciliation. Matching endpoint paths
+alone is not sufficient evidence that the wire models still match the server.

docs/code-generation.md

@@ -10,4 +10,6 @@ description = "Repository-local generator for hubuum_client resource code."
 [dependencies]
 proc-macro2 = "1.0"
 quote = "1.0"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
 syn = { version = "3", features = ["full"] }

hubuum_reconcile/Cargo.toml

@@ -1,6 +1,7 @@
 #![forbid(unsafe_code)]
 
 mod generate;
+mod openapi_contract;
 
 use std::{
     env, fs, io,
@@ -34,6 +35,7 @@ fn main() -> Result<(), DynError> {
 
 fn reconcile(mode: Mode) -> Result<(), DynError> {
     let root = repository_root()?;
+    openapi_contract::check(&root)?;
     let mut stale = Vec::new();
     let mut updated = 0;