Fastly chunked-config GC: reclaim orphaned chunk entries on re-push (last-writer-wins)

.github/workflows/format.yml

@@ -52,6 +52,16 @@ jobs:
       - name: Run cargo clippy
         run: cargo clippy --workspace --all-targets --all-features -- -D warnings
 
+      # The all-features build unifies the fastly adapter's `cli` and `fastly`
+      # features, which can MASK a dead-code or cfg mistake that only surfaces in
+      # one supported mode. Gate the two the matrix above does not: `cli` alone
+      # (native CLI host code) and no features at all (the declared default).
+      - name: Run cargo clippy (fastly adapter, cli feature only)
+        run: cargo clippy -p edgezero-adapter-fastly --features cli --all-targets -- -D warnings
+
+      - name: Run cargo clippy (fastly adapter, no default features)
+        run: cargo clippy -p edgezero-adapter-fastly --no-default-features --lib -- -D warnings
+
       # Plan task 8.3 corollary: `examples/app-demo` is excluded
       # from the root workspace, so the fmt/clippy steps above
       # don't cover it. Run the same gates against it explicitly
@@ -74,10 +84,19 @@ jobs:
         include:
           - adapter: cloudflare
             target: wasm32-unknown-unknown
+            features: cloudflare
+          - adapter: fastly
+            target: wasm32-wasip1
+            features: fastly
+          # The `cli` feature is a valid wasip1 build combination (the CLI host
+          # code compiled for the guest target); gate it so a dead-code or
+          # portability regression there is caught, not only in the fastly-only build.
           - adapter: fastly
             target: wasm32-wasip1
+            features: fastly cli
           - adapter: spin
             target: wasm32-wasip2
+            features: spin
     steps:
       - uses: actions/checkout@v6
 
@@ -110,8 +129,8 @@ jobs:
       - name: Fetch dependencies (locked)
         run: cargo fetch --locked
 
-      - name: Clippy ${{ matrix.adapter }} on ${{ matrix.target }}
-        run: cargo clippy -p edgezero-adapter-${{ matrix.adapter }} --features ${{ matrix.adapter }} --target ${{ matrix.target }} --all-targets -- -D warnings
+      - name: Clippy ${{ matrix.adapter }} (${{ matrix.features }}) on ${{ matrix.target }}
+        run: cargo clippy -p edgezero-adapter-${{ matrix.adapter }} --features "${{ matrix.features }}" --target ${{ matrix.target }} --all-targets -- -D warnings
 
   format-docs:
     runs-on: ubuntu-latest

.github/workflows/test.yml

@@ -224,5 +224,15 @@ jobs:
           ${{ matrix.runner_env }}: ${{ matrix.runner_value }}
         run: cargo test -p edgezero-adapter-${{ matrix.adapter }} --features ${{ matrix.adapter }} --target ${{ matrix.target }} --test contract
 
+      # The colocated runtime unit tests (config-store resolver, chunk
+      # remediation) need the `fastly` feature and only RUN under Viceroy — the
+      # `--test contract` line above never exercises them. Run the lib target so
+      # the runtime fail-closed/remediation behaviour is actually verified in CI.
+      - name: Run fastly wasm runtime unit tests
+        if: matrix.adapter == 'fastly'
+        env:
+          ${{ matrix.runner_env }}: ${{ matrix.runner_value }}
+        run: cargo test -p edgezero-adapter-fastly --features fastly --target wasm32-wasip1 --lib
+
       - name: Check ${{ matrix.adapter }} wasm target
         run: cargo check -p edgezero-adapter-${{ matrix.adapter }} --features ${{ matrix.adapter }} --target ${{ matrix.target }}

crates/edgezero-adapter-fastly/Cargo.toml

@@ -49,4 +49,5 @@ walkdir = { workspace = true, optional = true }
 
 [dev-dependencies]
 edgezero-core = { path = "../edgezero-core", features = ["test-utils"] }
+handlebars = { workspace = true }
 tempfile = { workspace = true }