93b0e5225c
New crates
- platform-nats: async_nats JetStream bridge; pull/push consumers, explicit ACK,
subject prefixing under provisioning.>, 6 stream definitions on startup
- platform-db: SurrealDB pool (embedded RocksDB solo, Surreal<Mem> tests,
WebSocket server multi-user); migrate() with DEFINE TABLE IF NOT EXISTS DDL
Service integrations
- orchestrator: NATS pub on task state transitions, execution_logs → SurrealDB,
webhook handler (HMAC-SHA256), AuditCollector (batch INSERT, 100-event/1s flush)
- control-center: solo_auth_middleware (intentional bypass, --mode solo only),
NATS session events, WebSocket bridge via JetStream subscription (no polling)
- vault-service: NATS lease flow; credentials over HTTPS only (lease_id in NATS);
SurrealDB storage backend with MVCC retry + exponential backoff
- secretumvault: complete SurrealDB backend replacing HashMap; 9 unit + 19 integration tests
- extension-registry: NATS lifecycle events, vault:// credential resolver with TTL cache,
cache invalidation via provisioning.workspace.*.deploy.done
Clippy workspace clean
cargo clippy --workspace -- -D warnings: 0 errors
Patterns fixed: derivable_impls (#[default] on enum variants), excessive_nesting
(let-else, boolean arithmetic in retain, extracted helpers), io_error_other,
redundant_closure, iter_kv_map, manual_range_contains, pathbuf_instead_of_path
87 lines
2.0 KiB
TOML
87 lines
2.0 KiB
TOML
[package]
|
|
authors.workspace = true
|
|
description = "OCI-compliant extension registry proxy for managing provisioning system extensions and artifacts"
|
|
edition.workspace = true
|
|
name = "extension-registry"
|
|
version.workspace = true
|
|
|
|
[[bin]]
|
|
name = "provisioning-extension-registry"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
# Workspace dependencies
|
|
async-trait = { workspace = true }
|
|
futures = { workspace = true }
|
|
tokio = { workspace = true, features = ["full"] }
|
|
|
|
# Web server and API
|
|
axum = { workspace = true }
|
|
tower = { workspace = true, features = ["full"] }
|
|
tower-http = { workspace = true, features = ["cors", "trace"] }
|
|
|
|
# Serialization
|
|
serde = { workspace = true, features = ["derive"] }
|
|
serde_json = { workspace = true }
|
|
|
|
# Platform configuration
|
|
platform-config = { workspace = true }
|
|
|
|
# Centralized observability (logging, metrics, health, tracing)
|
|
observability = { workspace = true, features = ["logging", "metrics-prometheus", "health"] }
|
|
|
|
# Error handling
|
|
anyhow = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
|
|
# Logging
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true }
|
|
|
|
# UUID and time
|
|
chrono = { workspace = true, features = ["serde"] }
|
|
uuid = { workspace = true, features = ["v4", "serde"] }
|
|
|
|
# CLI
|
|
clap = { workspace = true, features = ["derive"] }
|
|
|
|
# HTTP client for OCI registry operations
|
|
reqwest = { workspace = true }
|
|
|
|
# Cryptography for digest validation
|
|
hex = { workspace = true }
|
|
sha2 = { workspace = true }
|
|
|
|
# URL parsing
|
|
url = { workspace = true }
|
|
|
|
# Bytes manipulation
|
|
bytes = { workspace = true }
|
|
|
|
# LRU caching
|
|
lru = { workspace = true }
|
|
|
|
# Parking lot for synchronization
|
|
parking_lot = { workspace = true }
|
|
|
|
# Platform NATS bridge (optional)
|
|
platform-nats = { workspace = true, optional = true }
|
|
|
|
# TOML parsing
|
|
toml = { workspace = true }
|
|
|
|
[features]
|
|
nats = ["dep:platform-nats"]
|
|
default = []
|
|
|
|
[dev-dependencies]
|
|
http-body-util = { workspace = true }
|
|
hyper = { workspace = true }
|
|
tempfile = { workspace = true }
|
|
tokio-test = { workspace = true }
|
|
|
|
# Library target
|
|
[lib]
|
|
name = "extension_registry"
|
|
path = "src/lib.rs"
|