style: apply rustfmt and gofmt

Signed-off-by: Frederico Araujo <frederico.araujo@ibm.com>

Author: araujof

crates/apl-core/src/parser.rs

@@ -2082,17 +2082,6 @@ fn parse_stage(src: &str) -> Result<Stage, ParseError> {
         ("redact", None) => Ok(Stage::Redact { condition: None }),
         ("omit", None) => Ok(Stage::Omit),
         ("hash", None) => Ok(Stage::Hash),
-        // Scan placeholders parse as bare identifiers.
-        ("pii.redact", None) => Ok(Stage::Scan {
-            kind: ScanKind::PiiRedact,
-        }),
-        ("pii.detect", None) => Ok(Stage::Scan {
-            kind: ScanKind::PiiDetect,
-        }),
-        ("injection.scan", None) => Ok(Stage::Scan {
-            kind: ScanKind::InjectionScan,
-        }),
-
         ("mask", Some(a)) => parse_stage_mask(a, &bad),
         ("redact", Some(a)) => parse_stage_redact_cond(a, src),
         ("hash", Some(_)) => Err(bad("hash takes no arguments")),
@@ -2103,10 +2092,20 @@ fn parse_stage(src: &str) -> Result<Stage, ParseError> {
         ("enum", Some(a)) => parse_stage_enum(a, &bad),
         ("regex", Some(a)) => Ok(parse_stage_regex(a)),
         ("validate", Some(a)) => Err(parse_stage_validate_rejected(a, &bad)),
-        // `run` is an alias for `plugin` (mirrors the policy-step alias).
         ("plugin" | "run", Some(a)) => parse_stage_plugin(head, a, &bad),
         ("taint", Some(a)) => parse_taint(a, src),
 
+        // Scan placeholders parse as bare identifiers.
+        ("pii.redact", None) => Ok(Stage::Scan {
+            kind: ScanKind::PiiRedact,
+        }),
+        ("pii.detect", None) => Ok(Stage::Scan {
+            kind: ScanKind::PiiDetect,
+        }),
+        ("injection.scan", None) => Ok(Stage::Scan {
+            kind: ScanKind::InjectionScan,
+        }),
+
         (other, _) => Err(bad(&format!("unknown stage `{}`", other))),
     }
 }

go/cpex/manager_test.go

@@ -1187,13 +1187,13 @@ func TestLoadConfigInvalidYAML(t *testing.T) {
 // handle survives.
 //
 // This test:
-//   1. Performs a successful invoke to get a real ContextTable.
-//   2. Calls InvokeByName again with that ContextTable PLUS an
-//      invalid payload_type that forces Rust to return RC_PARSE_ERROR
-//      AFTER the consumption point.
-//   3. Confirms the second call errored (sanity).
-//   4. Calls Close() on the original ContextTable — must NOT crash.
-//      Pre-fix this was a UAF (free of already-freed memory).
+//  1. Performs a successful invoke to get a real ContextTable.
+//  2. Calls InvokeByName again with that ContextTable PLUS an
+//     invalid payload_type that forces Rust to return RC_PARSE_ERROR
+//     AFTER the consumption point.
+//  3. Confirms the second call errored (sanity).
+//  4. Calls Close() on the original ContextTable — must NOT crash.
+//     Pre-fix this was a UAF (free of already-freed memory).
 func TestInvokeByNameErrorDoesNotUAFContextTable(t *testing.T) {
 	mgr, err := NewPluginManagerDefault()
 	if err != nil {