feat: Support version history and rollback for traffic rules

.github/workflows/ci.yml

@@ -69,21 +69,9 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
-      - name: Cache dependencies
-        # ref: https://github.com/actions/cache/blob/main/examples.md#go---module
-        uses: actions/cache@v4
-        with:
-          # Cache, works only on Linux
-          path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          # Cache key
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-          # An ordered list of keys to use for restoring the cache if no cache hit occurred for key
-          restore-keys: |
-            ${{ runner.os }}-go-
+          cache-dependency-path: go.sum
       - name: Check Code Format
-        run: make fmt && git status && [[ -z `git status -s` ]]
+        run: make fmt && git status && [[ -z $(git status -s) ]]
       - name: Run Unit Test
         run: make test
       # TODO(marsevilspirit): add lint

api/mesh/v1alpha1/rule_version.proto

@@ -0,0 +1,56 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements.  See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+syntax = "proto3";
+
+package dubbo.mesh.v1alpha1;
+
+option go_package = "github.com/apache/dubbo-admin/api/mesh/v1alpha1";
+
+import "google/protobuf/timestamp.proto";
+
+// RuleVersion is a traffic-rule version entry. Entries are immutable after
+// creation. Rollback appends a new RuleVersion, while retention may delete the
+// oldest entries.
+message RuleVersion {
+  // Parent rule information
+  string parent_rule_kind = 1;      // e.g., "ConditionRoute"
+  string parent_rule_mesh = 2;      // Mesh name
+  string parent_rule_name = 3;      // Rule name
+
+  // Version metadata
+  int64 version_no = 4;             // Sequential version number (1, 2, 3...)
+  string content_hash = 5;          // SHA256 of normalized spec JSON
+
+  // Spec snapshot
+  string spec_json = 6;             // JSON-serialized rule spec at this version
+
+  // Mutation context
+  string operation = 7;             // CREATE, UPDATE, DELETE
+  string source = 8;                // ADMIN, BOOTSTRAP, ROLLBACK
+  string author = 9;                // User or system identifier
+  string reason = 10;               // Change description
+
+  // rolled_back_from_id records the historical version whose snapshot was
+  // re-published to produce this version. It is audit metadata only and MUST NOT
+  // be used as a live-state pointer.
+  int64 rolled_back_from_id = 11;
+
+  // Timestamps
+  google.protobuf.Timestamp created_at = 12;
+  google.protobuf.Timestamp recorded_at = 13;
+}

app/dubbo-admin/dubbo-admin.yaml

@@ -63,6 +63,13 @@ store:
 #  type: mysql
 #  address: root:123456@tcp(127.0.0.1:23306)/dubbo-admin?charset=utf8mb4&parseTime=True&loc=Asia%2FShanghai
 
+# [Optional] version history and rollback for traffic rules.
+# This records RuleVersion audit history. Supported governance rule mutations
+# fail closed if the version ledger is unavailable or cannot record the
+# mutation. Set maxVersionsPerRule to 0 to disable retention trimming.
+ruleVersioning:
+  maxVersionsPerRule: 20
+
 # [Necessary] configs for service discovery
 discovery:
   # [Necessary] discovery type, options are nacos2, zookeeper, mock(only for dev)

docs/server-develop.md

@@ -43,8 +43,17 @@ If you're using GoLand, you can run it locally by following steps:
 2. Fill the block with the config that screenshot shows below:
 ![ide_configuration.png](./static/images/ide-config.png)
 3. Modify the config file(app/dubbo-admin/dubbo-admin.yaml), make sure that the discovery, engine, store is configured.
+   Traffic-rule version history records RuleVersion audit entries for history, diff, and rollback material. Supported governance rule mutations fail closed if the version ledger is unavailable or cannot record the mutation.
 4. Run the application, you can open the browser and visit localhost:8888/admin if everything works.
 
+### Traffic-rule versioning notes
+
+Traffic-rule versioning is always enabled for supported governance rule mutations. It uses the existing `RuleVersion` resource store to create a baseline/import entry for existing `ConditionRoute`, `TagRoute`, and `DynamicConfig` rules that have no history yet. Bootstrap is not reconciliation and does not record external registry changes after history exists.
+
+Version entries are immutable after creation. Create, update, delete, and rollback first record the corresponding ledger entry and then use the normal ResourceManager write path. If the version ledger cannot record the entry, the registry mutation is rejected. DELETE versions are absence markers kept for audit/history continuity and cannot be used as rollback targets. `maxVersionsPerRule` retention may physically delete the oldest entries, so this is a bounded audit history and rollback aid, not a permanent compliance audit log or source of truth for current rule state.
+
+The traffic-form field preservation fix stays with this versioning PR because version history smoke tests depend on round-tripping `priority`, `force`, and `configVersion` without losing fields. These notes document the review boundary instead of splitting the PR.
+
 
 ### Project catalog
 We are currently restructuring the entire project, so the directory structure of the project will be changed in the near future.