fix(rustffi): complete transaction and response parity (#5102)

## Summary

- route collection deletion and active-version changes through the real
Rust transaction instead of applying them after commit
- preserve Rust index lifecycle metadata and collection names in list
responses
- preserve nullable datetime array elements using the Go client’s typed
optional representation
- align document-add and filter mutations with the current Go
integration-test API
- refresh the generated C header and remove the obsolete manual
mutation-event helper

This is the Go integration-test adapter companion to
[sourcenetwork/defradb.rs#1261](sourcenetwork/defradb.rs#1261).
It targets `jack/ffi-rust-compat` because that branch currently carries
the Rust FFI client.

## Verification

- all 4 transactional collection-version tests from defradb.rs#1249
- all 11 index lifecycle/query tests from defradb.rs#1255
- all 3 nullable datetime and mixed-delete-ID tests from defradb.rs#1256
- focused nullable datetime conversion unit test
- project `golangci-lint` configuration for `tests/clients/rustffi`: 0
issues
- generated `defra.h` matches `cbindgen` output from defradb.rs#1261
- `git diff --check`

Author: iverc

tests/clients/rustffi/defra.go

@@ -658,6 +658,72 @@ func (t *Transaction) Mutate(mutation string) (*QueryResult, error) {
 	return t.Query(mutation)
 }
 
+// DeleteCollections deletes collections within the transaction.
+func (t *Transaction) DeleteCollections(identityDID string, targets []string, activeOnly bool) error {
+	cTxnID := C.CString(t.id)
+	defer C.free(unsafe.Pointer(cTxnID))
+
+	var cIdentityDID *C.char
+	if identityDID != "" {
+		cIdentityDID = C.CString(identityDID)
+		defer C.free(unsafe.Pointer(cIdentityDID))
+	}
+
+	targetsJSON, err := json.Marshal(targets)
+	if err != nil {
+		return fmt.Errorf("ffi: failed to marshal collection targets: %w", err)
+	}
+	cTargets := C.CString(string(targetsJSON))
+	defer C.free(unsafe.Pointer(cTargets))
+
+	result := C.delete_collections_in_txn(
+		t.node.ptr,
+		cTxnID,
+		cIdentityDID,
+		cTargets,
+		C.bool(activeOnly),
+	)
+	if result.status != 0 {
+		err := C.GoString(result.error)
+		C.defra_free_string(result.error)
+		return mapFFIError("delete_collections_in_txn", err)
+	}
+
+	C.defra_free_string(result.value)
+	return nil
+}
+
+// SetCollectionActive updates a collection version within the transaction.
+func (t *Transaction) SetCollectionActive(identityDID string, versionID string, isActive bool) error {
+	cTxnID := C.CString(t.id)
+	defer C.free(unsafe.Pointer(cTxnID))
+
+	var cIdentityDID *C.char
+	if identityDID != "" {
+		cIdentityDID = C.CString(identityDID)
+		defer C.free(unsafe.Pointer(cIdentityDID))
+	}
+
+	cVersionID := C.CString(versionID)
+	defer C.free(unsafe.Pointer(cVersionID))
+
+	result := C.set_collection_active_in_txn(
+		t.node.ptr,
+		cTxnID,
+		cIdentityDID,
+		cVersionID,
+		C.bool(isActive),
+	)
+	if result.status != 0 {
+		err := C.GoString(result.error)
+		C.defra_free_string(result.error)
+		return mapFFIError("set_collection_active_in_txn", err)
+	}
+
+	C.defra_free_string(result.value)
+	return nil
+}
+
 // ============================================================================
 // Collection Functions
 // ============================================================================
@@ -1147,6 +1213,12 @@ type IndexDescription struct {
 	Unique bool         `json:"Unique,omitempty"`
 }
 
+type IndexResult struct {
+	IndexDescription
+	CollectionName string                 `json:"CollectionName"`
+	Execution      client.ActionExecution `json:"Execution"`
+}
+
 // CreateIndex creates a new index on a collection.
 // Returns the created index description with assigned ID.
 func (n *Node) CreateIndex(identityDID string, collectionName string, indexName string, fields []IndexField, unique bool) (*IndexDescription, error) {
@@ -1221,7 +1293,7 @@ func (n *Node) DropIndex(identityDID string, collectionName string, indexName st
 }
 
 // GetIndexes returns all indexes for a collection.
-func (n *Node) GetIndexes(identityDID string, collectionName string) ([]IndexDescription, error) {
+func (n *Node) GetIndexes(identityDID string, collectionName string) ([]IndexResult, error) {
 	var cIdentityDID *C.char
 	if identityDID != "" {
 		cIdentityDID = C.CString(identityDID)
@@ -1242,7 +1314,7 @@ func (n *Node) GetIndexes(identityDID string, collectionName string) ([]IndexDes
 	value := C.GoString(result.value)
 	C.defra_free_string(result.value)
 
-	var indexes []IndexDescription
+	var indexes []IndexResult
 	if err := json.Unmarshal([]byte(value), &indexes); err != nil {
 		return nil, fmt.Errorf("ffi: failed to parse indexes: %w", err)
 	}
@@ -1251,7 +1323,7 @@ func (n *Node) GetIndexes(identityDID string, collectionName string) ([]IndexDes
 }
 
 // GetAllIndexes returns all indexes across all collections.
-func (n *Node) GetAllIndexes(identityDID string) (map[string][]IndexDescription, error) {
+func (n *Node) GetAllIndexes(identityDID string) (map[string][]IndexResult, error) {
 	var cIdentityDID *C.char
 	if identityDID != "" {
 		cIdentityDID = C.CString(identityDID)
@@ -1269,7 +1341,7 @@ func (n *Node) GetAllIndexes(identityDID string) (map[string][]IndexDescription,
 	value := C.GoString(result.value)
 	C.defra_free_string(result.value)
 
-	var indexes map[string][]IndexDescription
+	var indexes map[string][]IndexResult
 	if err := json.Unmarshal([]byte(value), &indexes); err != nil {
 		return nil, fmt.Errorf("ffi: failed to parse indexes: %w", err)
 	}

tests/clients/rustffi/defra.h

@@ -118,12 +118,12 @@ typedef struct NodeInitOptions {
   int enable_signing;
   /*
    Optional: signing key type string (e.g. "secp256k1", "secp256r1", "ed25519").
-   Null to auto-generate secp256k1.
+   Only used when signing_private_key is provided.
    */
   const char *signing_key_type;
   /*
-   Optional: raw private key bytes for signing.
-   Null to auto-generate.
+   Optional: raw private key bytes used for the node identity.
+   Block signing remains controlled by enable_signing.
    */
   const uint8_t *signing_private_key;
   /*
@@ -587,6 +587,15 @@ struct FfiResult delete_nac_actor_relationship(uintptr_t node_ptr,
                                                const char *relation,
                                                const char *target_did);
 
+/*
+ List actions that are in progress or ended with an error.
+
+ # Safety
+
+ `identity_did` must be null or a valid null-terminated UTF-8 string.
+ */
+struct FfiResult list_actions(uintptr_t node_ptr, const char *identity_did);
+
 /*
  Export the database to a JSON file.
 
@@ -1014,6 +1023,31 @@ struct FfiResult gc_downsample_histories(uintptr_t node_ptr, const char *options
  */
 struct FfiResult delete_collection(uintptr_t node_ptr, const char *identity_did, const char *name);
 
+/*
+ Delete one or more collections by name.
+
+ # Safety
+
+ `names_json` must be a valid null-terminated UTF-8 JSON array of strings.
+ */
+struct FfiResult delete_collections(uintptr_t node_ptr,
+                                    const char *identity_did,
+                                    const char *names_json,
+                                    bool active_only);
+
+/*
+ Delete collections or collection versions within an existing transaction.
+
+ # Safety
+
+ `txn_id` and `targets_json` must be valid null-terminated UTF-8 strings.
+ */
+struct FfiResult delete_collections_in_txn(uintptr_t node_ptr,
+                                           const char *txn_id,
+                                           const char *identity_did,
+                                           const char *targets_json,
+                                           bool active_only);
+
 /*
  Set the active collection version.
 
@@ -1038,6 +1072,19 @@ struct FfiResult set_active_collection_version(uintptr_t node_ptr,
                                                const char *identity_did,
                                                const char *version_id);
 
+/*
+ Set a collection version's active state within an existing transaction.
+
+ # Safety
+
+ `txn_id` and `version_id` must be valid null-terminated UTF-8 strings.
+ */
+struct FfiResult set_collection_active_in_txn(uintptr_t node_ptr,
+                                              const char *txn_id,
+                                              const char *identity_did,
+                                              const char *version_id,
+                                              bool is_active);
+
 /*
  Patch a collection's schema using JSON patch operations.
 
@@ -1692,6 +1739,24 @@ struct FfiResult exec_request(uintptr_t node_ptr,
                               const char *variables,
                               const char *batch_session_id);
 
+/*
+ Execute a GraphQL query or mutation with a request-scoped signing override.
+
+ `signing_override` accepts `-1` for the node default, `0` to disable signing,
+ and `1` to enable signing.
+
+ # Safety
+
+ All string pointers must be either null or valid null-terminated UTF-8 strings.
+ */
+struct FfiResult exec_request_with_signing(uintptr_t node_ptr,
+                                           const char *identity_did,
+                                           const char *request_query,
+                                           const char *operation_name,
+                                           const char *variables,
+                                           const char *batch_session_id,
+                                           int signing_override);
+
 /*
  Add a schema to the database.
 
@@ -1885,6 +1950,25 @@ struct FfiResult exec_request_in_txn(uintptr_t node_ptr,
                                      const char *variables,
                                      const char *batch_session_id);
 
+/*
+ Execute a GraphQL query or mutation within a transaction with a signing override.
+
+ `signing_override` accepts `-1` for the node default, `0` to disable signing,
+ and `1` to enable signing.
+
+ # Safety
+
+ All string pointers must be either null or valid null-terminated UTF-8 strings.
+ */
+struct FfiResult exec_request_in_txn_with_signing(uintptr_t node_ptr,
+                                                  const char *txn_id,
+                                                  const char *identity_did,
+                                                  const char *request_query,
+                                                  const char *operation_name,
+                                                  const char *variables,
+                                                  const char *batch_session_id,
+                                                  int signing_override);
+
 /*
  Begin a new transaction.
 

tests/clients/rustffi/response_values_test.go

@@ -0,0 +1,46 @@
+// Copyright 2026 Democratized Data Foundation
+//
+// This file is part of the DefraDB test suite.
+//
+// The DefraDB test suite is licensed under either:
+//
+//   (1) GNU Affero General Public License v3
+//   (2) Business Source License 1.1
+//
+// See tests/LICENSE for details.
+
+//go:build rust_ffi
+
+package rustffi
+
+import (
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+
+	"github.com/sourcenetwork/defradb/client"
+	"github.com/sourcenetwork/immutable"
+)
+
+func TestNormalizeCollectionDateTimesPreservesNullableElements(t *testing.T) {
+	first := time.Date(2026, time.July, 30, 12, 0, 0, 0, time.UTC)
+	second := first.Add(time.Hour)
+	value := map[string]any{
+		"times": []any{first, nil, second},
+	}
+	version := client.CollectionVersion{
+		Fields: []client.CollectionFieldDescription{{
+			Name: "times",
+			Kind: client.FieldKind_NILLABLE_DATETIME_ARRAY,
+		}},
+	}
+
+	normalizeCollectionDateTimes(value, version)
+
+	require.Equal(t, []immutable.Option[time.Time]{
+		immutable.Some(first),
+		immutable.None[time.Time](),
+		immutable.Some(second),
+	}, value["times"])
+}