test(storage): pin dirty journal JSON recursion boundary

Cover the neighboring accepted and rejected nesting depths in an owned
replay frame so a future inner-root decode cannot relax its depth limit.

Co-Authored-By: heihutu <heihutu@gmail.com>
Co-Authored-By: zhi22915 <qiuzgang@gmail.com>

rustfs/src/storage/scanner_dirty_journal.rs

@@ -633,6 +633,27 @@ mod tests {
         assert!(decode_owned_replay_record("owner", &bytes).is_none());
     }
 
+    #[test]
+    fn owned_replay_keeps_the_outer_json_recursion_boundary() {
+        // Ignored scope fields still consume the complete owned frame's depth
+        // budget. Parsing replay from a fresh JSON root must not bypass it.
+        for (depth, accepted) in [(122, true), (123, false)] {
+            let bytes = format!(
+                r#"{{"owner":"owner","replay":{{"schema":1,"cache_key_format":1,"writer_epoch":"epoch","entries":[{{"bucket":"bucket","generation":7,"scope":{{"type":"whole_bucket","ignored":{}0{}}},"producers":["put_object"]}}]}}}}"#,
+                "[".repeat(depth),
+                "]".repeat(depth),
+            );
+            assert!(bytes.len() < DURABLE_DIRTY_USAGE_REPLAY_MAX_BYTES);
+            let decoded = decode_owned_replay_record("owner", bytes.as_bytes());
+            assert_eq!(decoded.is_some(), accepted, "owned frame depth {depth}");
+            if let Some((state, _)) = decoded {
+                assert_eq!(state.buckets.len(), 1);
+                assert_eq!(state.buckets["bucket"].generation, 7);
+                assert_eq!(state.buckets["bucket"].scope, super::JournalScope::WholeBucket);
+            }
+        }
+    }
+
     #[test]
     fn journal_owner_is_stable_and_never_defaults_to_a_shared_identity() {
         assert!(durable_dirty_usage_owner("").is_none());