Rustfmt

src/web/manager/admission.rs

@@ -2,9 +2,7 @@ use std::net::{IpAddr, SocketAddr};
 use std::sync::atomic::Ordering;
 use std::time::Instant;
 
-use super::state::{
-    allocate_stream_port, allow_rate, decrement_map, release_stream_port,
-};
+use super::state::{allocate_stream_port, allow_rate, decrement_map, release_stream_port};
 use super::{ProfileKey, WebProcessRuntime};
 
 impl WebProcessRuntime {
@@ -43,10 +41,7 @@ impl WebProcessRuntime {
             return None;
         };
         state.streams_live += 1;
-        *state
-            .streams_per_profile
-            .entry(profile_key)
-            .or_insert(0) += 1;
+        *state.streams_per_profile.entry(profile_key).or_insert(0) += 1;
         self.streams_opened.fetch_add(1, Ordering::Relaxed);
         Some(peer_port)
     }
@@ -105,12 +100,7 @@ mod tests {
         let downlink_bytes = data_bytes - uplink_bytes;
         let downlink_items = data_items - runtime.limits.max_frames_per_body;
 
-        assert!(runtime.try_reserve_pending(
-            downlink_bytes,
-            downlink_items,
-            false,
-            true,
-        ));
+        assert!(runtime.try_reserve_pending(downlink_bytes, downlink_items, false, true,));
         assert!(runtime.try_reserve_pending(
             uplink_bytes,
             runtime.limits.max_frames_per_body,
@@ -120,11 +110,7 @@ mod tests {
         assert!(!runtime.try_reserve_pending(1, 1, false, true));
 
         runtime.release_pending(downlink_bytes, downlink_items, false);
-        runtime.release_pending(
-            uplink_bytes,
-            runtime.limits.max_frames_per_body,
-            false,
-        );
+        runtime.release_pending(uplink_bytes, runtime.limits.max_frames_per_body, false);
         runtime.shutdown().await;
     }
 }

src/web/manager/lifecycle.rs

@@ -4,10 +4,8 @@ use std::time::{Duration, Instant};
 
 use tracing::info;
 
+use super::state::{ClosedToken, decrement_map, remove_bootstrap_locked, remove_expired_locked};
 use super::{ProfileKey, TokenHash, WebProcessRuntime};
-use super::state::{
-    ClosedToken, decrement_map, remove_bootstrap_locked, remove_expired_locked,
-};
 
 impl WebProcessRuntime {
     /// Removes one closed session and retains a bounded host-bound replay marker.

src/web/manager/state.rs

@@ -135,17 +135,11 @@ pub(super) fn matching_profile(
 }
 
 /// Applies one token-bucket admission decision at a caller-supplied monotonic time.
-pub(super) fn allow_rate(
-    state: &mut RateState,
-    now: Instant,
-    per_minute: u32,
-    burst: u32,
-) -> bool {
+pub(super) fn allow_rate(state: &mut RateState, now: Instant, per_minute: u32, burst: u32) -> bool {
     let burst = f64::from(burst);
     if let Some(last) = state.last {
         let elapsed = now.saturating_duration_since(last).as_secs_f64();
-        state.tokens =
-            (state.tokens + elapsed * f64::from(per_minute) / 60.0).min(burst);
+        state.tokens = (state.tokens + elapsed * f64::from(per_minute) / 60.0).min(burst);
     } else {
         state.tokens = burst;
     }
@@ -216,9 +210,9 @@ where
 
 /// Computes the process-wide item reserve required for session control progress.
 pub(super) fn control_item_reserve(limits: &WebLimitsConfig) -> usize {
-    limits.max_sessions_global.saturating_mul(
-        16usize.saturating_add(limits.max_streams_per_session.saturating_mul(3)),
-    )
+    limits
+        .max_sessions_global
+        .saturating_mul(16usize.saturating_add(limits.max_streams_per_session.saturating_mul(3)))
 }
 
 /// Allocates a non-zero source port unique among live streams for one KDF route.