+6

.gitignore

··· 1 1 + # builds 2 2 + target/ 3 3 + result 4 4 + 5 5 + # testing 6 6 + data/

+3906

Cargo.lock

··· 1 1 + # This file is automatically @generated by Cargo. 2 2 + # It is not intended for manual editing. 3 3 + version = 4 4 4 + 5 5 + [[package]] 6 6 + name = "ahash" 7 7 + version = "0.8.12" 8 8 + source = "registry+https://github.com/rust-lang/crates.io-index" 9 9 + checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75" 10 10 + dependencies = [ 11 11 + "cfg-if", 12 12 + "once_cell", 13 13 + "version_check", 14 14 + "zerocopy", 15 15 + ] 16 16 + 17 17 + [[package]] 18 18 + name = "aho-corasick" 19 19 + version = "1.1.4" 20 20 + source = "registry+https://github.com/rust-lang/crates.io-index" 21 21 + checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301" 22 22 + dependencies = [ 23 23 + "memchr", 24 24 + ] 25 25 + 26 26 + [[package]] 27 27 + name = "allocator-api2" 28 28 + version = "0.2.21" 29 29 + source = "registry+https://github.com/rust-lang/crates.io-index" 30 30 + checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923" 31 31 + 32 32 + [[package]] 33 33 + name = "android_system_properties" 34 34 + version = "0.1.5" 35 35 + source = "registry+https://github.com/rust-lang/crates.io-index" 36 36 + checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311" 37 37 + dependencies = [ 38 38 + "libc", 39 39 + ] 40 40 + 41 41 + [[package]] 42 42 + name = "anyhow" 43 43 + version = "1.0.100" 44 44 + source = "registry+https://github.com/rust-lang/crates.io-index" 45 45 + checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61" 46 46 + 47 47 + [[package]] 48 48 + name = "async-lock" 49 49 + version = "3.4.2" 50 50 + source = "registry+https://github.com/rust-lang/crates.io-index" 51 51 + checksum = "290f7f2596bd5b78a9fec8088ccd89180d7f9f55b94b0576823bbbdc72ee8311" 52 52 + dependencies = [ 53 53 + "event-listener", 54 54 + "event-listener-strategy", 55 55 + "pin-project-lite", 56 56 + ] 57 57 + 58 58 + [[package]] 59 59 + name = "async-trait" 60 60 + version = "0.1.89" 61 61 + source = "registry+https://github.com/rust-lang/crates.io-index" 62 62 + checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb" 63 63 + dependencies = [ 64 64 + "proc-macro2", 65 65 + "quote", 66 66 + "syn", 67 67 + ] 68 68 + 69 69 + [[package]] 70 70 + name = "atoi" 71 71 + version = "2.0.0" 72 72 + source = "registry+https://github.com/rust-lang/crates.io-index" 73 73 + checksum = "f28d99ec8bfea296261ca1af174f24225171fea9664ba9003cbebee704810528" 74 74 + dependencies = [ 75 75 + "num-traits", 76 76 + ] 77 77 + 78 78 + [[package]] 79 79 + name = "atomic-waker" 80 80 + version = "1.1.2" 81 81 + source = "registry+https://github.com/rust-lang/crates.io-index" 82 82 + checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0" 83 83 + 84 84 + [[package]] 85 85 + name = "atrium-api" 86 86 + version = "0.25.7" 87 87 + source = "registry+https://github.com/rust-lang/crates.io-index" 88 88 + checksum = "1f182d9437cd447ed87eca75540151653e332d6753a2a4749d72c0f15aa1f179" 89 89 + dependencies = [ 90 90 + "atrium-common", 91 91 + "atrium-xrpc", 92 92 + "chrono", 93 93 + "http", 94 94 + "ipld-core", 95 95 + "langtag", 96 96 + "regex", 97 97 + "serde", 98 98 + "serde_bytes", 99 99 + "serde_json", 100 100 + "thiserror 1.0.69", 101 101 + "tokio", 102 102 + "trait-variant", 103 103 + ] 104 104 + 105 105 + [[package]] 106 106 + name = "atrium-common" 107 107 + version = "0.1.3" 108 108 + source = "registry+https://github.com/rust-lang/crates.io-index" 109 109 + checksum = "eff94b4ce3e9ba11d8bda83674e75ccaca281d5251ec3816d03e6bb23583ff4f" 110 110 + dependencies = [ 111 111 + "dashmap", 112 112 + "lru", 113 113 + "moka", 114 114 + "thiserror 1.0.69", 115 115 + "tokio", 116 116 + "trait-variant", 117 117 + "web-time", 118 118 + ] 119 119 + 120 120 + [[package]] 121 121 + name = "atrium-lex" 122 122 + version = "0.1.0" 123 123 + source = "git+https://github.com/sugyan/atrium.git?rev=f162f815a04b5ecb0421b390d521c883c41d5f75#f162f815a04b5ecb0421b390d521c883c41d5f75" 124 124 + dependencies = [ 125 125 + "serde", 126 126 + "serde_repr", 127 127 + "serde_with", 128 128 + ] 129 129 + 130 130 + [[package]] 131 131 + name = "atrium-xrpc" 132 132 + version = "0.12.4" 133 133 + source = "registry+https://github.com/rust-lang/crates.io-index" 134 134 + checksum = "944b35cc08732d40ddbb3356be9e38d11aed4b4c40c33f5b0f235e0650eff296" 135 135 + dependencies = [ 136 136 + "http", 137 137 + "serde", 138 138 + "serde_html_form", 139 139 + "serde_json", 140 140 + "thiserror 1.0.69", 141 141 + "trait-variant", 142 142 + ] 143 143 + 144 144 + [[package]] 145 145 + name = "autocfg" 146 146 + version = "1.5.0" 147 147 + source = "registry+https://github.com/rust-lang/crates.io-index" 148 148 + checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8" 149 149 + 150 150 + [[package]] 151 151 + name = "aws-lc-rs" 152 152 + version = "1.15.4" 153 153 + source = "registry+https://github.com/rust-lang/crates.io-index" 154 154 + checksum = "7b7b6141e96a8c160799cc2d5adecd5cbbe5054cb8c7c4af53da0f83bb7ad256" 155 155 + dependencies = [ 156 156 + "aws-lc-sys", 157 157 + "zeroize", 158 158 + ] 159 159 + 160 160 + [[package]] 161 161 + name = "aws-lc-sys" 162 162 + version = "0.37.0" 163 163 + source = "registry+https://github.com/rust-lang/crates.io-index" 164 164 + checksum = "5c34dda4df7017c8db52132f0f8a2e0f8161649d15723ed63fc00c82d0f2081a" 165 165 + dependencies = [ 166 166 + "cc", 167 167 + "cmake", 168 168 + "dunce", 169 169 + "fs_extra", 170 170 + ] 171 171 + 172 172 + [[package]] 173 173 + name = "axum" 174 174 + version = "0.8.8" 175 175 + source = "registry+https://github.com/rust-lang/crates.io-index" 176 176 + checksum = "8b52af3cb4058c895d37317bb27508dccc8e5f2d39454016b297bf4a400597b8" 177 177 + dependencies = [ 178 178 + "axum-core", 179 179 + "bytes", 180 180 + "form_urlencoded", 181 181 + "futures-util", 182 182 + "http", 183 183 + "http-body", 184 184 + "http-body-util", 185 185 + "hyper", 186 186 + "hyper-util", 187 187 + "itoa", 188 188 + "matchit", 189 189 + "memchr", 190 190 + "mime", 191 191 + "percent-encoding", 192 192 + "pin-project-lite", 193 193 + "serde_core", 194 194 + "serde_json", 195 195 + "serde_path_to_error", 196 196 + "serde_urlencoded", 197 197 + "sync_wrapper", 198 198 + "tokio", 199 199 + "tower", 200 200 + "tower-layer", 201 201 + "tower-service", 202 202 + "tracing", 203 203 + ] 204 204 + 205 205 + [[package]] 206 206 + name = "axum-core" 207 207 + version = "0.5.6" 208 208 + source = "registry+https://github.com/rust-lang/crates.io-index" 209 209 + checksum = "08c78f31d7b1291f7ee735c1c6780ccde7785daae9a9206026862dab7d8792d1" 210 210 + dependencies = [ 211 211 + "bytes", 212 212 + "futures-core", 213 213 + "http", 214 214 + "http-body", 215 215 + "http-body-util", 216 216 + "mime", 217 217 + "pin-project-lite", 218 218 + "sync_wrapper", 219 219 + "tower-layer", 220 220 + "tower-service", 221 221 + "tracing", 222 222 + ] 223 223 + 224 224 + [[package]] 225 225 + name = "base-x" 226 226 + version = "0.2.11" 227 227 + source = "registry+https://github.com/rust-lang/crates.io-index" 228 228 + checksum = "4cbbc9d0964165b47557570cce6c952866c2678457aca742aafc9fb771d30270" 229 229 + 230 230 + [[package]] 231 231 + name = "base256emoji" 232 232 + version = "1.0.2" 233 233 + source = "registry+https://github.com/rust-lang/crates.io-index" 234 234 + checksum = "b5e9430d9a245a77c92176e649af6e275f20839a48389859d1661e9a128d077c" 235 235 + dependencies = [ 236 236 + "const-str", 237 237 + "match-lookup", 238 238 + ] 239 239 + 240 240 + [[package]] 241 241 + name = "base64" 242 242 + version = "0.13.1" 243 243 + source = "registry+https://github.com/rust-lang/crates.io-index" 244 244 + checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8" 245 245 + 246 246 + [[package]] 247 247 + name = "base64" 248 248 + version = "0.22.1" 249 249 + source = "registry+https://github.com/rust-lang/crates.io-index" 250 250 + checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" 251 251 + 252 252 + [[package]] 253 253 + name = "base64ct" 254 254 + version = "1.8.3" 255 255 + source = "registry+https://github.com/rust-lang/crates.io-index" 256 256 + checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" 257 257 + 258 258 + [[package]] 259 259 + name = "bitflags" 260 260 + version = "2.10.0" 261 261 + source = "registry+https://github.com/rust-lang/crates.io-index" 262 262 + checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3" 263 263 + dependencies = [ 264 264 + "serde_core", 265 265 + ] 266 266 + 267 267 + [[package]] 268 268 + name = "block-buffer" 269 269 + version = "0.10.4" 270 270 + source = "registry+https://github.com/rust-lang/crates.io-index" 271 271 + checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" 272 272 + dependencies = [ 273 273 + "generic-array", 274 274 + ] 275 275 + 276 276 + [[package]] 277 277 + name = "bumpalo" 278 278 + version = "3.19.1" 279 279 + source = "registry+https://github.com/rust-lang/crates.io-index" 280 280 + checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510" 281 281 + 282 282 + [[package]] 283 283 + name = "byteorder" 284 284 + version = "1.5.0" 285 285 + source = "registry+https://github.com/rust-lang/crates.io-index" 286 286 + checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" 287 287 + 288 288 + [[package]] 289 289 + name = "bytes" 290 290 + version = "1.11.0" 291 291 + source = "registry+https://github.com/rust-lang/crates.io-index" 292 292 + checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3" 293 293 + 294 294 + [[package]] 295 295 + name = "cc" 296 296 + version = "1.2.55" 297 297 + source = "registry+https://github.com/rust-lang/crates.io-index" 298 298 + checksum = "47b26a0954ae34af09b50f0de26458fa95369a0d478d8236d3f93082b219bd29" 299 299 + dependencies = [ 300 300 + "find-msvc-tools", 301 301 + "jobserver", 302 302 + "libc", 303 303 + "shlex", 304 304 + ] 305 305 + 306 306 + [[package]] 307 307 + name = "cfg-if" 308 308 + version = "1.0.4" 309 309 + source = "registry+https://github.com/rust-lang/crates.io-index" 310 310 + checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801" 311 311 + 312 312 + [[package]] 313 313 + name = "chrono" 314 314 + version = "0.4.43" 315 315 + source = "registry+https://github.com/rust-lang/crates.io-index" 316 316 + checksum = "fac4744fb15ae8337dc853fee7fb3f4e48c0fbaa23d0afe49c447b4fab126118" 317 317 + dependencies = [ 318 318 + "iana-time-zone", 319 319 + "js-sys", 320 320 + "num-traits", 321 321 + "serde", 322 322 + "wasm-bindgen", 323 323 + "windows-link", 324 324 + ] 325 325 + 326 326 + [[package]] 327 327 + name = "cid" 328 328 + version = "0.11.1" 329 329 + source = "registry+https://github.com/rust-lang/crates.io-index" 330 330 + checksum = "3147d8272e8fa0ccd29ce51194dd98f79ddfb8191ba9e3409884e751798acf3a" 331 331 + dependencies = [ 332 332 + "core2", 333 333 + "multibase", 334 334 + "multihash", 335 335 + "serde", 336 336 + "serde_bytes", 337 337 + "unsigned-varint", 338 338 + ] 339 339 + 340 340 + [[package]] 341 341 + name = "cmake" 342 342 + version = "0.1.57" 343 343 + source = "registry+https://github.com/rust-lang/crates.io-index" 344 344 + checksum = "75443c44cd6b379beb8c5b45d85d0773baf31cce901fe7bb252f4eff3008ef7d" 345 345 + dependencies = [ 346 346 + "cc", 347 347 + ] 348 348 + 349 349 + [[package]] 350 350 + name = "concurrent-queue" 351 351 + version = "2.5.0" 352 352 + source = "registry+https://github.com/rust-lang/crates.io-index" 353 353 + checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973" 354 354 + dependencies = [ 355 355 + "crossbeam-utils", 356 356 + ] 357 357 + 358 358 + [[package]] 359 359 + name = "const-oid" 360 360 + version = "0.9.6" 361 361 + source = "registry+https://github.com/rust-lang/crates.io-index" 362 362 + checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" 363 363 + 364 364 + [[package]] 365 365 + name = "const-str" 366 366 + version = "0.4.3" 367 367 + source = "registry+https://github.com/rust-lang/crates.io-index" 368 368 + checksum = "2f421161cb492475f1661ddc9815a745a1c894592070661180fdec3d4872e9c3" 369 369 + 370 370 + [[package]] 371 371 + name = "core-foundation" 372 372 + version = "0.9.4" 373 373 + source = "registry+https://github.com/rust-lang/crates.io-index" 374 374 + checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f" 375 375 + dependencies = [ 376 376 + "core-foundation-sys", 377 377 + "libc", 378 378 + ] 379 379 + 380 380 + [[package]] 381 381 + name = "core-foundation" 382 382 + version = "0.10.1" 383 383 + source = "registry+https://github.com/rust-lang/crates.io-index" 384 384 + checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6" 385 385 + dependencies = [ 386 386 + "core-foundation-sys", 387 387 + "libc", 388 388 + ] 389 389 + 390 390 + [[package]] 391 391 + name = "core-foundation-sys" 392 392 + version = "0.8.7" 393 393 + source = "registry+https://github.com/rust-lang/crates.io-index" 394 394 + checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b" 395 395 + 396 396 + [[package]] 397 397 + name = "core2" 398 398 + version = "0.4.0" 399 399 + source = "registry+https://github.com/rust-lang/crates.io-index" 400 400 + checksum = "b49ba7ef1ad6107f8824dbe97de947cbaac53c44e7f9756a1fba0d37c1eec505" 401 401 + dependencies = [ 402 402 + "memchr", 403 403 + ] 404 404 + 405 405 + [[package]] 406 406 + name = "cpufeatures" 407 407 + version = "0.2.17" 408 408 + source = "registry+https://github.com/rust-lang/crates.io-index" 409 409 + checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" 410 410 + dependencies = [ 411 411 + "libc", 412 412 + ] 413 413 + 414 414 + [[package]] 415 415 + name = "crc" 416 416 + version = "3.4.0" 417 417 + source = "registry+https://github.com/rust-lang/crates.io-index" 418 418 + checksum = "5eb8a2a1cd12ab0d987a5d5e825195d372001a4094a0376319d5a0ad71c1ba0d" 419 419 + dependencies = [ 420 420 + "crc-catalog", 421 421 + ] 422 422 + 423 423 + [[package]] 424 424 + name = "crc-catalog" 425 425 + version = "2.4.0" 426 426 + source = "registry+https://github.com/rust-lang/crates.io-index" 427 427 + checksum = "19d374276b40fb8bbdee95aef7c7fa6b5316ec764510eb64b8dd0e2ed0d7e7f5" 428 428 + 429 429 + [[package]] 430 430 + name = "critical-section" 431 431 + version = "1.2.0" 432 432 + source = "registry+https://github.com/rust-lang/crates.io-index" 433 433 + checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b" 434 434 + 435 435 + [[package]] 436 436 + name = "crossbeam-channel" 437 437 + version = "0.5.15" 438 438 + source = "registry+https://github.com/rust-lang/crates.io-index" 439 439 + checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2" 440 440 + dependencies = [ 441 441 + "crossbeam-utils", 442 442 + ] 443 443 + 444 444 + [[package]] 445 445 + name = "crossbeam-epoch" 446 446 + version = "0.9.18" 447 447 + source = "registry+https://github.com/rust-lang/crates.io-index" 448 448 + checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" 449 449 + dependencies = [ 450 450 + "crossbeam-utils", 451 451 + ] 452 452 + 453 453 + [[package]] 454 454 + name = "crossbeam-queue" 455 455 + version = "0.3.12" 456 456 + source = "registry+https://github.com/rust-lang/crates.io-index" 457 457 + checksum = "0f58bbc28f91df819d0aa2a2c00cd19754769c2fad90579b3592b1c9ba7a3115" 458 458 + dependencies = [ 459 459 + "crossbeam-utils", 460 460 + ] 461 461 + 462 462 + [[package]] 463 463 + name = "crossbeam-utils" 464 464 + version = "0.8.21" 465 465 + source = "registry+https://github.com/rust-lang/crates.io-index" 466 466 + checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28" 467 467 + 468 468 + [[package]] 469 469 + name = "crypto-common" 470 470 + version = "0.1.7" 471 471 + source = "registry+https://github.com/rust-lang/crates.io-index" 472 472 + checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" 473 473 + dependencies = [ 474 474 + "generic-array", 475 475 + "typenum", 476 476 + ] 477 477 + 478 478 + [[package]] 479 479 + name = "darling" 480 480 + version = "0.20.11" 481 481 + source = "registry+https://github.com/rust-lang/crates.io-index" 482 482 + checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee" 483 483 + dependencies = [ 484 484 + "darling_core", 485 485 + "darling_macro", 486 486 + ] 487 487 + 488 488 + [[package]] 489 489 + name = "darling_core" 490 490 + version = "0.20.11" 491 491 + source = "registry+https://github.com/rust-lang/crates.io-index" 492 492 + checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e" 493 493 + dependencies = [ 494 494 + "fnv", 495 495 + "ident_case", 496 496 + "proc-macro2", 497 497 + "quote", 498 498 + "strsim", 499 499 + "syn", 500 500 + ] 501 501 + 502 502 + [[package]] 503 503 + name = "darling_macro" 504 504 + version = "0.20.11" 505 505 + source = "registry+https://github.com/rust-lang/crates.io-index" 506 506 + checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead" 507 507 + dependencies = [ 508 508 + "darling_core", 509 509 + "quote", 510 510 + "syn", 511 511 + ] 512 512 + 513 513 + [[package]] 514 514 + name = "dashmap" 515 515 + version = "6.1.0" 516 516 + source = "registry+https://github.com/rust-lang/crates.io-index" 517 517 + checksum = "5041cc499144891f3790297212f32a74fb938e5136a14943f338ef9e0ae276cf" 518 518 + dependencies = [ 519 519 + "cfg-if", 520 520 + "crossbeam-utils", 521 521 + "hashbrown 0.14.5", 522 522 + "lock_api", 523 523 + "once_cell", 524 524 + "parking_lot_core", 525 525 + ] 526 526 + 527 527 + [[package]] 528 528 + name = "data-encoding" 529 529 + version = "2.10.0" 530 530 + source = "registry+https://github.com/rust-lang/crates.io-index" 531 531 + checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea" 532 532 + 533 533 + [[package]] 534 534 + name = "data-encoding-macro" 535 535 + version = "0.1.19" 536 536 + source = "registry+https://github.com/rust-lang/crates.io-index" 537 537 + checksum = "8142a83c17aa9461d637e649271eae18bf2edd00e91f2e105df36c3c16355bdb" 538 538 + dependencies = [ 539 539 + "data-encoding", 540 540 + "data-encoding-macro-internal", 541 541 + ] 542 542 + 543 543 + [[package]] 544 544 + name = "data-encoding-macro-internal" 545 545 + version = "0.1.17" 546 546 + source = "registry+https://github.com/rust-lang/crates.io-index" 547 547 + checksum = "7ab67060fc6b8ef687992d439ca0fa36e7ed17e9a0b16b25b601e8757df720de" 548 548 + dependencies = [ 549 549 + "data-encoding", 550 550 + "syn", 551 551 + ] 552 552 + 553 553 + [[package]] 554 554 + name = "der" 555 555 + version = "0.7.10" 556 556 + source = "registry+https://github.com/rust-lang/crates.io-index" 557 557 + checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" 558 558 + dependencies = [ 559 559 + "const-oid", 560 560 + "pem-rfc7468", 561 561 + "zeroize", 562 562 + ] 563 563 + 564 564 + [[package]] 565 565 + name = "deranged" 566 566 + version = "0.5.5" 567 567 + source = "registry+https://github.com/rust-lang/crates.io-index" 568 568 + checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587" 569 569 + dependencies = [ 570 570 + "powerfmt", 571 571 + "serde_core", 572 572 + ] 573 573 + 574 574 + [[package]] 575 575 + name = "digest" 576 576 + version = "0.10.7" 577 577 + source = "registry+https://github.com/rust-lang/crates.io-index" 578 578 + checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" 579 579 + dependencies = [ 580 580 + "block-buffer", 581 581 + "const-oid", 582 582 + "crypto-common", 583 583 + "subtle", 584 584 + ] 585 585 + 586 586 + [[package]] 587 587 + name = "displaydoc" 588 588 + version = "0.2.5" 589 589 + source = "registry+https://github.com/rust-lang/crates.io-index" 590 590 + checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0" 591 591 + dependencies = [ 592 592 + "proc-macro2", 593 593 + "quote", 594 594 + "syn", 595 595 + ] 596 596 + 597 597 + [[package]] 598 598 + name = "dotenvy" 599 599 + version = "0.15.7" 600 600 + source = "registry+https://github.com/rust-lang/crates.io-index" 601 601 + checksum = "1aaf95b3e5c8f23aa320147307562d361db0ae0d51242340f558153b4eb2439b" 602 602 + 603 603 + [[package]] 604 604 + name = "dunce" 605 605 + version = "1.0.5" 606 606 + source = "registry+https://github.com/rust-lang/crates.io-index" 607 607 + checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813" 608 608 + 609 609 + [[package]] 610 610 + name = "either" 611 611 + version = "1.15.0" 612 612 + source = "registry+https://github.com/rust-lang/crates.io-index" 613 613 + checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719" 614 614 + dependencies = [ 615 615 + "serde", 616 616 + ] 617 617 + 618 618 + [[package]] 619 619 + name = "enum-as-inner" 620 620 + version = "0.6.1" 621 621 + source = "registry+https://github.com/rust-lang/crates.io-index" 622 622 + checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc" 623 623 + dependencies = [ 624 624 + "heck 0.5.0", 625 625 + "proc-macro2", 626 626 + "quote", 627 627 + "syn", 628 628 + ] 629 629 + 630 630 + [[package]] 631 631 + name = "equivalent" 632 632 + version = "1.0.2" 633 633 + source = "registry+https://github.com/rust-lang/crates.io-index" 634 634 + checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" 635 635 + 636 636 + [[package]] 637 637 + name = "errno" 638 638 + version = "0.3.14" 639 639 + source = "registry+https://github.com/rust-lang/crates.io-index" 640 640 + checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" 641 641 + dependencies = [ 642 642 + "libc", 643 643 + "windows-sys 0.61.2", 644 644 + ] 645 645 + 646 646 + [[package]] 647 647 + name = "esquema-codegen" 648 648 + version = "0.1.0" 649 649 + source = "git+https://github.com/fatfingers23/esquema.git?branch=main#9ef00b9d631b746bd6396fb46ba255eb9360e43f" 650 650 + dependencies = [ 651 651 + "atrium-lex", 652 652 + "heck 0.4.1", 653 653 + "itertools", 654 654 + "prettyplease", 655 655 + "proc-macro2", 656 656 + "quote", 657 657 + "serde", 658 658 + "serde_json", 659 659 + "syn", 660 660 + ] 661 661 + 662 662 + [[package]] 663 663 + name = "etcetera" 664 664 + version = "0.8.0" 665 665 + source = "registry+https://github.com/rust-lang/crates.io-index" 666 666 + checksum = "136d1b5283a1ab77bd9257427ffd09d8667ced0570b6f938942bc7568ed5b943" 667 667 + dependencies = [ 668 668 + "cfg-if", 669 669 + "home", 670 670 + "windows-sys 0.48.0", 671 671 + ] 672 672 + 673 673 + [[package]] 674 674 + name = "event-listener" 675 675 + version = "5.4.1" 676 676 + source = "registry+https://github.com/rust-lang/crates.io-index" 677 677 + checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab" 678 678 + dependencies = [ 679 679 + "concurrent-queue", 680 680 + "parking", 681 681 + "pin-project-lite", 682 682 + ] 683 683 + 684 684 + [[package]] 685 685 + name = "event-listener-strategy" 686 686 + version = "0.5.4" 687 687 + source = "registry+https://github.com/rust-lang/crates.io-index" 688 688 + checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93" 689 689 + dependencies = [ 690 690 + "event-listener", 691 691 + "pin-project-lite", 692 692 + ] 693 693 + 694 694 + [[package]] 695 695 + name = "fastrand" 696 696 + version = "2.3.0" 697 697 + source = "registry+https://github.com/rust-lang/crates.io-index" 698 698 + checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be" 699 699 + 700 700 + [[package]] 701 701 + name = "find-msvc-tools" 702 702 + version = "0.1.9" 703 703 + source = "registry+https://github.com/rust-lang/crates.io-index" 704 704 + checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582" 705 705 + 706 706 + [[package]] 707 707 + name = "flume" 708 708 + version = "0.11.1" 709 709 + source = "registry+https://github.com/rust-lang/crates.io-index" 710 710 + checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095" 711 711 + dependencies = [ 712 712 + "futures-core", 713 713 + "futures-sink", 714 714 + "spin", 715 715 + ] 716 716 + 717 717 + [[package]] 718 718 + name = "fnv" 719 719 + version = "1.0.7" 720 720 + source = "registry+https://github.com/rust-lang/crates.io-index" 721 721 + checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1" 722 722 + 723 723 + [[package]] 724 724 + name = "foldhash" 725 725 + version = "0.1.5" 726 726 + source = "registry+https://github.com/rust-lang/crates.io-index" 727 727 + checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2" 728 728 + 729 729 + [[package]] 730 730 + name = "foldhash" 731 731 + version = "0.2.0" 732 732 + source = "registry+https://github.com/rust-lang/crates.io-index" 733 733 + checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb" 734 734 + 735 735 + [[package]] 736 736 + name = "foreign-types" 737 737 + version = "0.3.2" 738 738 + source = "registry+https://github.com/rust-lang/crates.io-index" 739 739 + checksum = "f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1" 740 740 + dependencies = [ 741 741 + "foreign-types-shared", 742 742 + ] 743 743 + 744 744 + [[package]] 745 745 + name = "foreign-types-shared" 746 746 + version = "0.1.1" 747 747 + source = "registry+https://github.com/rust-lang/crates.io-index" 748 748 + checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b" 749 749 + 750 750 + [[package]] 751 751 + name = "form_urlencoded" 752 752 + version = "1.2.2" 753 753 + source = "registry+https://github.com/rust-lang/crates.io-index" 754 754 + checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf" 755 755 + dependencies = [ 756 756 + "percent-encoding", 757 757 + ] 758 758 + 759 759 + [[package]] 760 760 + name = "fs_extra" 761 761 + version = "1.3.0" 762 762 + source = "registry+https://github.com/rust-lang/crates.io-index" 763 763 + checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c" 764 764 + 765 765 + [[package]] 766 766 + name = "futures-channel" 767 767 + version = "0.3.31" 768 768 + source = "registry+https://github.com/rust-lang/crates.io-index" 769 769 + checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10" 770 770 + dependencies = [ 771 771 + "futures-core", 772 772 + "futures-sink", 773 773 + ] 774 774 + 775 775 + [[package]] 776 776 + name = "futures-core" 777 777 + version = "0.3.31" 778 778 + source = "registry+https://github.com/rust-lang/crates.io-index" 779 779 + checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e" 780 780 + 781 781 + [[package]] 782 782 + name = "futures-executor" 783 783 + version = "0.3.31" 784 784 + source = "registry+https://github.com/rust-lang/crates.io-index" 785 785 + checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f" 786 786 + dependencies = [ 787 787 + "futures-core", 788 788 + "futures-task", 789 789 + "futures-util", 790 790 + ] 791 791 + 792 792 + [[package]] 793 793 + name = "futures-intrusive" 794 794 + version = "0.5.0" 795 795 + source = "registry+https://github.com/rust-lang/crates.io-index" 796 796 + checksum = "1d930c203dd0b6ff06e0201a4a2fe9149b43c684fd4420555b26d21b1a02956f" 797 797 + dependencies = [ 798 798 + "futures-core", 799 799 + "lock_api", 800 800 + "parking_lot", 801 801 + ] 802 802 + 803 803 + [[package]] 804 804 + name = "futures-io" 805 805 + version = "0.3.31" 806 806 + source = "registry+https://github.com/rust-lang/crates.io-index" 807 807 + checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6" 808 808 + 809 809 + [[package]] 810 810 + name = "futures-macro" 811 811 + version = "0.3.31" 812 812 + source = "registry+https://github.com/rust-lang/crates.io-index" 813 813 + checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650" 814 814 + dependencies = [ 815 815 + "proc-macro2", 816 816 + "quote", 817 817 + "syn", 818 818 + ] 819 819 + 820 820 + [[package]] 821 821 + name = "futures-sink" 822 822 + version = "0.3.31" 823 823 + source = "registry+https://github.com/rust-lang/crates.io-index" 824 824 + checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7" 825 825 + 826 826 + [[package]] 827 827 + name = "futures-task" 828 828 + version = "0.3.31" 829 829 + source = "registry+https://github.com/rust-lang/crates.io-index" 830 830 + checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988" 831 831 + 832 832 + [[package]] 833 833 + name = "futures-util" 834 834 + version = "0.3.31" 835 835 + source = "registry+https://github.com/rust-lang/crates.io-index" 836 836 + checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81" 837 837 + dependencies = [ 838 838 + "futures-core", 839 839 + "futures-io", 840 840 + "futures-macro", 841 841 + "futures-sink", 842 842 + "futures-task", 843 843 + "memchr", 844 844 + "pin-project-lite", 845 845 + "pin-utils", 846 846 + "slab", 847 847 + ] 848 848 + 849 849 + [[package]] 850 850 + name = "generic-array" 851 851 + version = "0.14.7" 852 852 + source = "registry+https://github.com/rust-lang/crates.io-index" 853 853 + checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" 854 854 + dependencies = [ 855 855 + "typenum", 856 856 + "version_check", 857 857 + ] 858 858 + 859 859 + [[package]] 860 860 + name = "getrandom" 861 861 + version = "0.2.17" 862 862 + source = "registry+https://github.com/rust-lang/crates.io-index" 863 863 + checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" 864 864 + dependencies = [ 865 865 + "cfg-if", 866 866 + "libc", 867 867 + "wasi", 868 868 + ] 869 869 + 870 870 + [[package]] 871 871 + name = "getrandom" 872 872 + version = "0.3.4" 873 873 + source = "registry+https://github.com/rust-lang/crates.io-index" 874 874 + checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd" 875 875 + dependencies = [ 876 876 + "cfg-if", 877 877 + "libc", 878 878 + "r-efi", 879 879 + "wasip2", 880 880 + ] 881 881 + 882 882 + [[package]] 883 883 + name = "h2" 884 884 + version = "0.4.13" 885 885 + source = "registry+https://github.com/rust-lang/crates.io-index" 886 886 + checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54" 887 887 + dependencies = [ 888 888 + "atomic-waker", 889 889 + "bytes", 890 890 + "fnv", 891 891 + "futures-core", 892 892 + "futures-sink", 893 893 + "http", 894 894 + "indexmap 2.13.0", 895 895 + "slab", 896 896 + "tokio", 897 897 + "tokio-util", 898 898 + "tracing", 899 899 + ] 900 900 + 901 901 + [[package]] 902 902 + name = "hashbrown" 903 903 + version = "0.12.3" 904 904 + source = "registry+https://github.com/rust-lang/crates.io-index" 905 905 + checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888" 906 906 + 907 907 + [[package]] 908 908 + name = "hashbrown" 909 909 + version = "0.14.5" 910 910 + source = "registry+https://github.com/rust-lang/crates.io-index" 911 911 + checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1" 912 912 + 913 913 + [[package]] 914 914 + name = "hashbrown" 915 915 + version = "0.15.5" 916 916 + source = "registry+https://github.com/rust-lang/crates.io-index" 917 917 + checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1" 918 918 + dependencies = [ 919 919 + "allocator-api2", 920 920 + "equivalent", 921 921 + "foldhash 0.1.5", 922 922 + ] 923 923 + 924 924 + [[package]] 925 925 + name = "hashbrown" 926 926 + version = "0.16.1" 927 927 + source = "registry+https://github.com/rust-lang/crates.io-index" 928 928 + checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100" 929 929 + dependencies = [ 930 930 + "foldhash 0.2.0", 931 931 + ] 932 932 + 933 933 + [[package]] 934 934 + name = "hashlink" 935 935 + version = "0.10.0" 936 936 + source = "registry+https://github.com/rust-lang/crates.io-index" 937 937 + checksum = "7382cf6263419f2d8df38c55d7da83da5c18aef87fc7a7fc1fb1e344edfe14c1" 938 938 + dependencies = [ 939 939 + "hashbrown 0.15.5", 940 940 + ] 941 941 + 942 942 + [[package]] 943 943 + name = "heck" 944 944 + version = "0.4.1" 945 945 + source = "registry+https://github.com/rust-lang/crates.io-index" 946 946 + checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8" 947 947 + 948 948 + [[package]] 949 949 + name = "heck" 950 950 + version = "0.5.0" 951 951 + source = "registry+https://github.com/rust-lang/crates.io-index" 952 952 + checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" 953 953 + 954 954 + [[package]] 955 955 + name = "hex" 956 956 + version = "0.4.3" 957 957 + source = "registry+https://github.com/rust-lang/crates.io-index" 958 958 + checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" 959 959 + 960 960 + [[package]] 961 961 + name = "hickory-proto" 962 962 + version = "0.25.2" 963 963 + source = "registry+https://github.com/rust-lang/crates.io-index" 964 964 + checksum = "f8a6fe56c0038198998a6f217ca4e7ef3a5e51f46163bd6dd60b5c71ca6c6502" 965 965 + dependencies = [ 966 966 + "async-trait", 967 967 + "cfg-if", 968 968 + "data-encoding", 969 969 + "enum-as-inner", 970 970 + "futures-channel", 971 971 + "futures-io", 972 972 + "futures-util", 973 973 + "idna", 974 974 + "ipnet", 975 975 + "once_cell", 976 976 + "rand 0.9.2", 977 977 + "ring", 978 978 + "serde", 979 979 + "thiserror 2.0.18", 980 980 + "tinyvec", 981 981 + "tokio", 982 982 + "tracing", 983 983 + "url", 984 984 + ] 985 985 + 986 986 + [[package]] 987 987 + name = "hickory-resolver" 988 988 + version = "0.25.2" 989 989 + source = "registry+https://github.com/rust-lang/crates.io-index" 990 990 + checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a" 991 991 + dependencies = [ 992 992 + "cfg-if", 993 993 + "futures-util", 994 994 + "hickory-proto", 995 995 + "ipconfig", 996 996 + "moka", 997 997 + "once_cell", 998 998 + "parking_lot", 999 999 + "rand 0.9.2", 1000 1000 + "resolv-conf", 1001 1001 + "smallvec", 1002 1002 + "thiserror 2.0.18", 1003 1003 + "tokio", 1004 1004 + "tracing", 1005 1005 + ] 1006 1006 + 1007 1007 + [[package]] 1008 1008 + name = "hickory-server" 1009 1009 + version = "0.25.2" 1010 1010 + source = "registry+https://github.com/rust-lang/crates.io-index" 1011 1011 + checksum = "d53e5fe811b941c74ee46b8818228bfd2bc2688ba276a0eaeb0f2c95ea3b2585" 1012 1012 + dependencies = [ 1013 1013 + "async-trait", 1014 1014 + "bytes", 1015 1015 + "cfg-if", 1016 1016 + "data-encoding", 1017 1017 + "enum-as-inner", 1018 1018 + "futures-util", 1019 1019 + "hickory-proto", 1020 1020 + "ipnet", 1021 1021 + "prefix-trie", 1022 1022 + "serde", 1023 1023 + "thiserror 2.0.18", 1024 1024 + "time", 1025 1025 + "tokio", 1026 1026 + "tokio-util", 1027 1027 + "tracing", 1028 1028 + ] 1029 1029 + 1030 1030 + [[package]] 1031 1031 + name = "hkdf" 1032 1032 + version = "0.12.4" 1033 1033 + source = "registry+https://github.com/rust-lang/crates.io-index" 1034 1034 + checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7" 1035 1035 + dependencies = [ 1036 1036 + "hmac", 1037 1037 + ] 1038 1038 + 1039 1039 + [[package]] 1040 1040 + name = "hmac" 1041 1041 + version = "0.12.1" 1042 1042 + source = "registry+https://github.com/rust-lang/crates.io-index" 1043 1043 + checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e" 1044 1044 + dependencies = [ 1045 1045 + "digest", 1046 1046 + ] 1047 1047 + 1048 1048 + [[package]] 1049 1049 + name = "home" 1050 1050 + version = "0.5.12" 1051 1051 + source = "registry+https://github.com/rust-lang/crates.io-index" 1052 1052 + checksum = "cc627f471c528ff0c4a49e1d5e60450c8f6461dd6d10ba9dcd3a61d3dff7728d" 1053 1053 + dependencies = [ 1054 1054 + "windows-sys 0.61.2", 1055 1055 + ] 1056 1056 + 1057 1057 + [[package]] 1058 1058 + name = "http" 1059 1059 + version = "1.4.0" 1060 1060 + source = "registry+https://github.com/rust-lang/crates.io-index" 1061 1061 + checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a" 1062 1062 + dependencies = [ 1063 1063 + "bytes", 1064 1064 + "itoa", 1065 1065 + ] 1066 1066 + 1067 1067 + [[package]] 1068 1068 + name = "http-body" 1069 1069 + version = "1.0.1" 1070 1070 + source = "registry+https://github.com/rust-lang/crates.io-index" 1071 1071 + checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184" 1072 1072 + dependencies = [ 1073 1073 + "bytes", 1074 1074 + "http", 1075 1075 + ] 1076 1076 + 1077 1077 + [[package]] 1078 1078 + name = "http-body-util" 1079 1079 + version = "0.1.3" 1080 1080 + source = "registry+https://github.com/rust-lang/crates.io-index" 1081 1081 + checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a" 1082 1082 + dependencies = [ 1083 1083 + "bytes", 1084 1084 + "futures-core", 1085 1085 + "http", 1086 1086 + "http-body", 1087 1087 + "pin-project-lite", 1088 1088 + ] 1089 1089 + 1090 1090 + [[package]] 1091 1091 + name = "httparse" 1092 1092 + version = "1.10.1" 1093 1093 + source = "registry+https://github.com/rust-lang/crates.io-index" 1094 1094 + checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87" 1095 1095 + 1096 1096 + [[package]] 1097 1097 + name = "httpdate" 1098 1098 + version = "1.0.3" 1099 1099 + source = "registry+https://github.com/rust-lang/crates.io-index" 1100 1100 + checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9" 1101 1101 + 1102 1102 + [[package]] 1103 1103 + name = "hyper" 1104 1104 + version = "1.8.1" 1105 1105 + source = "registry+https://github.com/rust-lang/crates.io-index" 1106 1106 + checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11" 1107 1107 + dependencies = [ 1108 1108 + "atomic-waker", 1109 1109 + "bytes", 1110 1110 + "futures-channel", 1111 1111 + "futures-core", 1112 1112 + "h2", 1113 1113 + "http", 1114 1114 + "http-body", 1115 1115 + "httparse", 1116 1116 + "httpdate", 1117 1117 + "itoa", 1118 1118 + "pin-project-lite", 1119 1119 + "pin-utils", 1120 1120 + "smallvec", 1121 1121 + "tokio", 1122 1122 + "want", 1123 1123 + ] 1124 1124 + 1125 1125 + [[package]] 1126 1126 + name = "hyper-rustls" 1127 1127 + version = "0.27.7" 1128 1128 + source = "registry+https://github.com/rust-lang/crates.io-index" 1129 1129 + checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58" 1130 1130 + dependencies = [ 1131 1131 + "http", 1132 1132 + "hyper", 1133 1133 + "hyper-util", 1134 1134 + "rustls", 1135 1135 + "rustls-native-certs", 1136 1136 + "rustls-pki-types", 1137 1137 + "tokio", 1138 1138 + "tokio-rustls", 1139 1139 + "tower-service", 1140 1140 + ] 1141 1141 + 1142 1142 + [[package]] 1143 1143 + name = "hyper-util" 1144 1144 + version = "0.1.19" 1145 1145 + source = "registry+https://github.com/rust-lang/crates.io-index" 1146 1146 + checksum = "727805d60e7938b76b826a6ef209eb70eaa1812794f9424d4a4e2d740662df5f" 1147 1147 + dependencies = [ 1148 1148 + "base64 0.22.1", 1149 1149 + "bytes", 1150 1150 + "futures-channel", 1151 1151 + "futures-core", 1152 1152 + "futures-util", 1153 1153 + "http", 1154 1154 + "http-body", 1155 1155 + "hyper", 1156 1156 + "ipnet", 1157 1157 + "libc", 1158 1158 + "percent-encoding", 1159 1159 + "pin-project-lite", 1160 1160 + "socket2 0.6.2", 1161 1161 + "tokio", 1162 1162 + "tower-service", 1163 1163 + "tracing", 1164 1164 + ] 1165 1165 + 1166 1166 + [[package]] 1167 1167 + name = "iana-time-zone" 1168 1168 + version = "0.1.65" 1169 1169 + source = "registry+https://github.com/rust-lang/crates.io-index" 1170 1170 + checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470" 1171 1171 + dependencies = [ 1172 1172 + "android_system_properties", 1173 1173 + "core-foundation-sys", 1174 1174 + "iana-time-zone-haiku", 1175 1175 + "js-sys", 1176 1176 + "log", 1177 1177 + "wasm-bindgen", 1178 1178 + "windows-core", 1179 1179 + ] 1180 1180 + 1181 1181 + [[package]] 1182 1182 + name = "iana-time-zone-haiku" 1183 1183 + version = "0.1.2" 1184 1184 + source = "registry+https://github.com/rust-lang/crates.io-index" 1185 1185 + checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f" 1186 1186 + dependencies = [ 1187 1187 + "cc", 1188 1188 + ] 1189 1189 + 1190 1190 + [[package]] 1191 1191 + name = "icu_collections" 1192 1192 + version = "2.1.1" 1193 1193 + source = "registry+https://github.com/rust-lang/crates.io-index" 1194 1194 + checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43" 1195 1195 + dependencies = [ 1196 1196 + "displaydoc", 1197 1197 + "potential_utf", 1198 1198 + "yoke", 1199 1199 + "zerofrom", 1200 1200 + "zerovec", 1201 1201 + ] 1202 1202 + 1203 1203 + [[package]] 1204 1204 + name = "icu_locale_core" 1205 1205 + version = "2.1.1" 1206 1206 + source = "registry+https://github.com/rust-lang/crates.io-index" 1207 1207 + checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6" 1208 1208 + dependencies = [ 1209 1209 + "displaydoc", 1210 1210 + "litemap", 1211 1211 + "tinystr", 1212 1212 + "writeable", 1213 1213 + "zerovec", 1214 1214 + ] 1215 1215 + 1216 1216 + [[package]] 1217 1217 + name = "icu_normalizer" 1218 1218 + version = "2.1.1" 1219 1219 + source = "registry+https://github.com/rust-lang/crates.io-index" 1220 1220 + checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599" 1221 1221 + dependencies = [ 1222 1222 + "icu_collections", 1223 1223 + "icu_normalizer_data", 1224 1224 + "icu_properties", 1225 1225 + "icu_provider", 1226 1226 + "smallvec", 1227 1227 + "zerovec", 1228 1228 + ] 1229 1229 + 1230 1230 + [[package]] 1231 1231 + name = "icu_normalizer_data" 1232 1232 + version = "2.1.1" 1233 1233 + source = "registry+https://github.com/rust-lang/crates.io-index" 1234 1234 + checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a" 1235 1235 + 1236 1236 + [[package]] 1237 1237 + name = "icu_properties" 1238 1238 + version = "2.1.2" 1239 1239 + source = "registry+https://github.com/rust-lang/crates.io-index" 1240 1240 + checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec" 1241 1241 + dependencies = [ 1242 1242 + "icu_collections", 1243 1243 + "icu_locale_core", 1244 1244 + "icu_properties_data", 1245 1245 + "icu_provider", 1246 1246 + "zerotrie", 1247 1247 + "zerovec", 1248 1248 + ] 1249 1249 + 1250 1250 + [[package]] 1251 1251 + name = "icu_properties_data" 1252 1252 + version = "2.1.2" 1253 1253 + source = "registry+https://github.com/rust-lang/crates.io-index" 1254 1254 + checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af" 1255 1255 + 1256 1256 + [[package]] 1257 1257 + name = "icu_provider" 1258 1258 + version = "2.1.1" 1259 1259 + source = "registry+https://github.com/rust-lang/crates.io-index" 1260 1260 + checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614" 1261 1261 + dependencies = [ 1262 1262 + "displaydoc", 1263 1263 + "icu_locale_core", 1264 1264 + "writeable", 1265 1265 + "yoke", 1266 1266 + "zerofrom", 1267 1267 + "zerotrie", 1268 1268 + "zerovec", 1269 1269 + ] 1270 1270 + 1271 1271 + [[package]] 1272 1272 + name = "ident_case" 1273 1273 + version = "1.0.1" 1274 1274 + source = "registry+https://github.com/rust-lang/crates.io-index" 1275 1275 + checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39" 1276 1276 + 1277 1277 + [[package]] 1278 1278 + name = "idna" 1279 1279 + version = "1.1.0" 1280 1280 + source = "registry+https://github.com/rust-lang/crates.io-index" 1281 1281 + checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de" 1282 1282 + dependencies = [ 1283 1283 + "idna_adapter", 1284 1284 + "smallvec", 1285 1285 + "utf8_iter", 1286 1286 + ] 1287 1287 + 1288 1288 + [[package]] 1289 1289 + name = "idna_adapter" 1290 1290 + version = "1.2.1" 1291 1291 + source = "registry+https://github.com/rust-lang/crates.io-index" 1292 1292 + checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344" 1293 1293 + dependencies = [ 1294 1294 + "icu_normalizer", 1295 1295 + "icu_properties", 1296 1296 + ] 1297 1297 + 1298 1298 + [[package]] 1299 1299 + name = "indexmap" 1300 1300 + version = "1.9.3" 1301 1301 + source = "registry+https://github.com/rust-lang/crates.io-index" 1302 1302 + checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99" 1303 1303 + dependencies = [ 1304 1304 + "autocfg", 1305 1305 + "hashbrown 0.12.3", 1306 1306 + "serde", 1307 1307 + ] 1308 1308 + 1309 1309 + [[package]] 1310 1310 + name = "indexmap" 1311 1311 + version = "2.13.0" 1312 1312 + source = "registry+https://github.com/rust-lang/crates.io-index" 1313 1313 + checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017" 1314 1314 + dependencies = [ 1315 1315 + "equivalent", 1316 1316 + "hashbrown 0.16.1", 1317 1317 + ] 1318 1318 + 1319 1319 + [[package]] 1320 1320 + name = "ipconfig" 1321 1321 + version = "0.3.2" 1322 1322 + source = "registry+https://github.com/rust-lang/crates.io-index" 1323 1323 + checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f" 1324 1324 + dependencies = [ 1325 1325 + "socket2 0.5.10", 1326 1326 + "widestring", 1327 1327 + "windows-sys 0.48.0", 1328 1328 + "winreg", 1329 1329 + ] 1330 1330 + 1331 1331 + [[package]] 1332 1332 + name = "ipld-core" 1333 1333 + version = "0.4.2" 1334 1334 + source = "registry+https://github.com/rust-lang/crates.io-index" 1335 1335 + checksum = "104718b1cc124d92a6d01ca9c9258a7df311405debb3408c445a36452f9bf8db" 1336 1336 + dependencies = [ 1337 1337 + "cid", 1338 1338 + "serde", 1339 1339 + "serde_bytes", 1340 1340 + ] 1341 1341 + 1342 1342 + [[package]] 1343 1343 + name = "ipnet" 1344 1344 + version = "2.11.0" 1345 1345 + source = "registry+https://github.com/rust-lang/crates.io-index" 1346 1346 + checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130" 1347 1347 + dependencies = [ 1348 1348 + "serde", 1349 1349 + ] 1350 1350 + 1351 1351 + [[package]] 1352 1352 + name = "iri-string" 1353 1353 + version = "0.7.10" 1354 1354 + source = "registry+https://github.com/rust-lang/crates.io-index" 1355 1355 + checksum = "c91338f0783edbd6195decb37bae672fd3b165faffb89bf7b9e6942f8b1a731a" 1356 1356 + dependencies = [ 1357 1357 + "memchr", 1358 1358 + "serde", 1359 1359 + ] 1360 1360 + 1361 1361 + [[package]] 1362 1362 + name = "itertools" 1363 1363 + version = "0.10.5" 1364 1364 + source = "registry+https://github.com/rust-lang/crates.io-index" 1365 1365 + checksum = "b0fd2260e829bddf4cb6ea802289de2f86d6a7a690192fbe91b3f46e0f2c8473" 1366 1366 + dependencies = [ 1367 1367 + "either", 1368 1368 + ] 1369 1369 + 1370 1370 + [[package]] 1371 1371 + name = "itoa" 1372 1372 + version = "1.0.17" 1373 1373 + source = "registry+https://github.com/rust-lang/crates.io-index" 1374 1374 + checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2" 1375 1375 + 1376 1376 + [[package]] 1377 1377 + name = "jobserver" 1378 1378 + version = "0.1.34" 1379 1379 + source = "registry+https://github.com/rust-lang/crates.io-index" 1380 1380 + checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33" 1381 1381 + dependencies = [ 1382 1382 + "getrandom 0.3.4", 1383 1383 + "libc", 1384 1384 + ] 1385 1385 + 1386 1386 + [[package]] 1387 1387 + name = "js-sys" 1388 1388 + version = "0.3.85" 1389 1389 + source = "registry+https://github.com/rust-lang/crates.io-index" 1390 1390 + checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3" 1391 1391 + dependencies = [ 1392 1392 + "once_cell", 1393 1393 + "wasm-bindgen", 1394 1394 + ] 1395 1395 + 1396 1396 + [[package]] 1397 1397 + name = "langtag" 1398 1398 + version = "0.3.4" 1399 1399 + source = "registry+https://github.com/rust-lang/crates.io-index" 1400 1400 + checksum = "ed60c85f254d6ae8450cec15eedd921efbc4d1bdf6fcf6202b9a58b403f6f805" 1401 1401 + dependencies = [ 1402 1402 + "serde", 1403 1403 + ] 1404 1404 + 1405 1405 + [[package]] 1406 1406 + name = "lazy_static" 1407 1407 + version = "1.5.0" 1408 1408 + source = "registry+https://github.com/rust-lang/crates.io-index" 1409 1409 + checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe" 1410 1410 + dependencies = [ 1411 1411 + "spin", 1412 1412 + ] 1413 1413 + 1414 1414 + [[package]] 1415 1415 + name = "libc" 1416 1416 + version = "0.2.180" 1417 1417 + source = "registry+https://github.com/rust-lang/crates.io-index" 1418 1418 + checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc" 1419 1419 + 1420 1420 + [[package]] 1421 1421 + name = "libm" 1422 1422 + version = "0.2.16" 1423 1423 + source = "registry+https://github.com/rust-lang/crates.io-index" 1424 1424 + checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981" 1425 1425 + 1426 1426 + [[package]] 1427 1427 + name = "libredox" 1428 1428 + version = "0.1.12" 1429 1429 + source = "registry+https://github.com/rust-lang/crates.io-index" 1430 1430 + checksum = "3d0b95e02c851351f877147b7deea7b1afb1df71b63aa5f8270716e0c5720616" 1431 1431 + dependencies = [ 1432 1432 + "bitflags", 1433 1433 + "libc", 1434 1434 + "redox_syscall 0.7.0", 1435 1435 + ] 1436 1436 + 1437 1437 + [[package]] 1438 1438 + name = "libsqlite3-sys" 1439 1439 + version = "0.30.1" 1440 1440 + source = "registry+https://github.com/rust-lang/crates.io-index" 1441 1441 + checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149" 1442 1442 + dependencies = [ 1443 1443 + "cc", 1444 1444 + "pkg-config", 1445 1445 + "vcpkg", 1446 1446 + ] 1447 1447 + 1448 1448 + [[package]] 1449 1449 + name = "linux-raw-sys" 1450 1450 + version = "0.11.0" 1451 1451 + source = "registry+https://github.com/rust-lang/crates.io-index" 1452 1452 + checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039" 1453 1453 + 1454 1454 + [[package]] 1455 1455 + name = "litemap" 1456 1456 + version = "0.8.1" 1457 1457 + source = "registry+https://github.com/rust-lang/crates.io-index" 1458 1458 + checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77" 1459 1459 + 1460 1460 + [[package]] 1461 1461 + name = "lock_api" 1462 1462 + version = "0.4.14" 1463 1463 + source = "registry+https://github.com/rust-lang/crates.io-index" 1464 1464 + checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965" 1465 1465 + dependencies = [ 1466 1466 + "scopeguard", 1467 1467 + ] 1468 1468 + 1469 1469 + [[package]] 1470 1470 + name = "log" 1471 1471 + version = "0.4.29" 1472 1472 + source = "registry+https://github.com/rust-lang/crates.io-index" 1473 1473 + checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897" 1474 1474 + 1475 1475 + [[package]] 1476 1476 + name = "lru" 1477 1477 + version = "0.12.5" 1478 1478 + source = "registry+https://github.com/rust-lang/crates.io-index" 1479 1479 + checksum = "234cf4f4a04dc1f57e24b96cc0cd600cf2af460d4161ac5ecdd0af8e1f3b2a38" 1480 1480 + dependencies = [ 1481 1481 + "hashbrown 0.15.5", 1482 1482 + ] 1483 1483 + 1484 1484 + [[package]] 1485 1485 + name = "match-lookup" 1486 1486 + version = "0.1.2" 1487 1487 + source = "registry+https://github.com/rust-lang/crates.io-index" 1488 1488 + checksum = "757aee279b8bdbb9f9e676796fd459e4207a1f986e87886700abf589f5abf771" 1489 1489 + dependencies = [ 1490 1490 + "proc-macro2", 1491 1491 + "quote", 1492 1492 + "syn", 1493 1493 + ] 1494 1494 + 1495 1495 + [[package]] 1496 1496 + name = "matchers" 1497 1497 + version = "0.2.0" 1498 1498 + source = "registry+https://github.com/rust-lang/crates.io-index" 1499 1499 + checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9" 1500 1500 + dependencies = [ 1501 1501 + "regex-automata", 1502 1502 + ] 1503 1503 + 1504 1504 + [[package]] 1505 1505 + name = "matchit" 1506 1506 + version = "0.8.4" 1507 1507 + source = "registry+https://github.com/rust-lang/crates.io-index" 1508 1508 + checksum = "47e1ffaa40ddd1f3ed91f717a33c8c0ee23fff369e3aa8772b9605cc1d22f4c3" 1509 1509 + 1510 1510 + [[package]] 1511 1511 + name = "md-5" 1512 1512 + version = "0.10.6" 1513 1513 + source = "registry+https://github.com/rust-lang/crates.io-index" 1514 1514 + checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf" 1515 1515 + dependencies = [ 1516 1516 + "cfg-if", 1517 1517 + "digest", 1518 1518 + ] 1519 1519 + 1520 1520 + [[package]] 1521 1521 + name = "memchr" 1522 1522 + version = "2.7.6" 1523 1523 + source = "registry+https://github.com/rust-lang/crates.io-index" 1524 1524 + checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273" 1525 1525 + 1526 1526 + [[package]] 1527 1527 + name = "metrics" 1528 1528 + version = "0.24.3" 1529 1529 + source = "registry+https://github.com/rust-lang/crates.io-index" 1530 1530 + checksum = "5d5312e9ba3771cfa961b585728215e3d972c950a3eed9252aa093d6301277e8" 1531 1531 + dependencies = [ 1532 1532 + "ahash", 1533 1533 + "portable-atomic", 1534 1534 + ] 1535 1535 + 1536 1536 + [[package]] 1537 1537 + name = "metrics-exporter-prometheus" 1538 1538 + version = "0.18.1" 1539 1539 + source = "registry+https://github.com/rust-lang/crates.io-index" 1540 1540 + checksum = "3589659543c04c7dc5526ec858591015b87cd8746583b51b48ef4353f99dbcda" 1541 1541 + dependencies = [ 1542 1542 + "base64 0.22.1", 1543 1543 + "http-body-util", 1544 1544 + "hyper", 1545 1545 + "hyper-rustls", 1546 1546 + "hyper-util", 1547 1547 + "indexmap 2.13.0", 1548 1548 + "ipnet", 1549 1549 + "metrics", 1550 1550 + "metrics-util", 1551 1551 + "quanta", 1552 1552 + "rustls", 1553 1553 + "thiserror 2.0.18", 1554 1554 + "tokio", 1555 1555 + "tracing", 1556 1556 + ] 1557 1557 + 1558 1558 + [[package]] 1559 1559 + name = "metrics-util" 1560 1560 + version = "0.20.1" 1561 1561 + source = "registry+https://github.com/rust-lang/crates.io-index" 1562 1562 + checksum = "cdfb1365fea27e6dd9dc1dbc19f570198bc86914533ad639dae939635f096be4" 1563 1563 + dependencies = [ 1564 1564 + "crossbeam-epoch", 1565 1565 + "crossbeam-utils", 1566 1566 + "hashbrown 0.16.1", 1567 1567 + "metrics", 1568 1568 + "quanta", 1569 1569 + "rand 0.9.2", 1570 1570 + "rand_xoshiro", 1571 1571 + "sketches-ddsketch", 1572 1572 + ] 1573 1573 + 1574 1574 + [[package]] 1575 1575 + name = "mime" 1576 1576 + version = "0.3.17" 1577 1577 + source = "registry+https://github.com/rust-lang/crates.io-index" 1578 1578 + checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a" 1579 1579 + 1580 1580 + [[package]] 1581 1581 + name = "mio" 1582 1582 + version = "1.1.1" 1583 1583 + source = "registry+https://github.com/rust-lang/crates.io-index" 1584 1584 + checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc" 1585 1585 + dependencies = [ 1586 1586 + "libc", 1587 1587 + "wasi", 1588 1588 + "windows-sys 0.61.2", 1589 1589 + ] 1590 1590 + 1591 1591 + [[package]] 1592 1592 + name = "moka" 1593 1593 + version = "0.12.13" 1594 1594 + source = "registry+https://github.com/rust-lang/crates.io-index" 1595 1595 + checksum = "b4ac832c50ced444ef6be0767a008b02c106a909ba79d1d830501e94b96f6b7e" 1596 1596 + dependencies = [ 1597 1597 + "async-lock", 1598 1598 + "crossbeam-channel", 1599 1599 + "crossbeam-epoch", 1600 1600 + "crossbeam-utils", 1601 1601 + "equivalent", 1602 1602 + "event-listener", 1603 1603 + "futures-util", 1604 1604 + "parking_lot", 1605 1605 + "portable-atomic", 1606 1606 + "smallvec", 1607 1607 + "tagptr", 1608 1608 + "uuid", 1609 1609 + ] 1610 1610 + 1611 1611 + [[package]] 1612 1612 + name = "multibase" 1613 1613 + version = "0.9.2" 1614 1614 + source = "registry+https://github.com/rust-lang/crates.io-index" 1615 1615 + checksum = "8694bb4835f452b0e3bb06dbebb1d6fc5385b6ca1caf2e55fd165c042390ec77" 1616 1616 + dependencies = [ 1617 1617 + "base-x", 1618 1618 + "base256emoji", 1619 1619 + "data-encoding", 1620 1620 + "data-encoding-macro", 1621 1621 + ] 1622 1622 + 1623 1623 + [[package]] 1624 1624 + name = "multihash" 1625 1625 + version = "0.19.3" 1626 1626 + source = "registry+https://github.com/rust-lang/crates.io-index" 1627 1627 + checksum = "6b430e7953c29dd6a09afc29ff0bb69c6e306329ee6794700aee27b76a1aea8d" 1628 1628 + dependencies = [ 1629 1629 + "core2", 1630 1630 + "serde", 1631 1631 + "unsigned-varint", 1632 1632 + ] 1633 1633 + 1634 1634 + [[package]] 1635 1635 + name = "native-tls" 1636 1636 + version = "0.2.14" 1637 1637 + source = "registry+https://github.com/rust-lang/crates.io-index" 1638 1638 + checksum = "87de3442987e9dbec73158d5c715e7ad9072fda936bb03d19d7fa10e00520f0e" 1639 1639 + dependencies = [ 1640 1640 + "libc", 1641 1641 + "log", 1642 1642 + "openssl", 1643 1643 + "openssl-probe 0.1.6", 1644 1644 + "openssl-sys", 1645 1645 + "schannel", 1646 1646 + "security-framework 2.11.1", 1647 1647 + "security-framework-sys", 1648 1648 + "tempfile", 1649 1649 + ] 1650 1650 + 1651 1651 + [[package]] 1652 1652 + name = "nu-ansi-term" 1653 1653 + version = "0.50.3" 1654 1654 + source = "registry+https://github.com/rust-lang/crates.io-index" 1655 1655 + checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" 1656 1656 + dependencies = [ 1657 1657 + "windows-sys 0.61.2", 1658 1658 + ] 1659 1659 + 1660 1660 + [[package]] 1661 1661 + name = "num-bigint-dig" 1662 1662 + version = "0.8.6" 1663 1663 + source = "registry+https://github.com/rust-lang/crates.io-index" 1664 1664 + checksum = "e661dda6640fad38e827a6d4a310ff4763082116fe217f279885c97f511bb0b7" 1665 1665 + dependencies = [ 1666 1666 + "lazy_static", 1667 1667 + "libm", 1668 1668 + "num-integer", 1669 1669 + "num-iter", 1670 1670 + "num-traits", 1671 1671 + "rand 0.8.5", 1672 1672 + "smallvec", 1673 1673 + "zeroize", 1674 1674 + ] 1675 1675 + 1676 1676 + [[package]] 1677 1677 + name = "num-conv" 1678 1678 + version = "0.2.0" 1679 1679 + source = "registry+https://github.com/rust-lang/crates.io-index" 1680 1680 + checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050" 1681 1681 + 1682 1682 + [[package]] 1683 1683 + name = "num-integer" 1684 1684 + version = "0.1.46" 1685 1685 + source = "registry+https://github.com/rust-lang/crates.io-index" 1686 1686 + checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f" 1687 1687 + dependencies = [ 1688 1688 + "num-traits", 1689 1689 + ] 1690 1690 + 1691 1691 + [[package]] 1692 1692 + name = "num-iter" 1693 1693 + version = "0.1.45" 1694 1694 + source = "registry+https://github.com/rust-lang/crates.io-index" 1695 1695 + checksum = "1429034a0490724d0075ebb2bc9e875d6503c3cf69e235a8941aa757d83ef5bf" 1696 1696 + dependencies = [ 1697 1697 + "autocfg", 1698 1698 + "num-integer", 1699 1699 + "num-traits", 1700 1700 + ] 1701 1701 + 1702 1702 + [[package]] 1703 1703 + name = "num-traits" 1704 1704 + version = "0.2.19" 1705 1705 + source = "registry+https://github.com/rust-lang/crates.io-index" 1706 1706 + checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841" 1707 1707 + dependencies = [ 1708 1708 + "autocfg", 1709 1709 + "libm", 1710 1710 + ] 1711 1711 + 1712 1712 + [[package]] 1713 1713 + name = "once_cell" 1714 1714 + version = "1.21.3" 1715 1715 + source = "registry+https://github.com/rust-lang/crates.io-index" 1716 1716 + checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d" 1717 1717 + dependencies = [ 1718 1718 + "critical-section", 1719 1719 + "portable-atomic", 1720 1720 + ] 1721 1721 + 1722 1722 + [[package]] 1723 1723 + name = "onis-appview" 1724 1724 + version = "0.1.0" 1725 1725 + dependencies = [ 1726 1726 + "anyhow", 1727 1727 + "axum", 1728 1728 + "chrono", 1729 1729 + "futures-util", 1730 1730 + "metrics", 1731 1731 + "onis-common", 1732 1732 + "serde", 1733 1733 + "serde_json", 1734 1734 + "sqlx", 1735 1735 + "tokio", 1736 1736 + "tokio-tungstenite", 1737 1737 + "tracing", 1738 1738 + "tracing-subscriber", 1739 1739 + ] 1740 1740 + 1741 1741 + [[package]] 1742 1742 + name = "onis-common" 1743 1743 + version = "0.1.0" 1744 1744 + dependencies = [ 1745 1745 + "atrium-api", 1746 1746 + "axum", 1747 1747 + "esquema-codegen", 1748 1748 + "metrics-exporter-prometheus", 1749 1749 + "serde", 1750 1750 + "serde_json", 1751 1751 + "sqlx", 1752 1752 + "thiserror 2.0.18", 1753 1753 + "tokio", 1754 1754 + "toml", 1755 1755 + "tracing", 1756 1756 + ] 1757 1757 + 1758 1758 + [[package]] 1759 1759 + name = "onis-dns" 1760 1760 + version = "0.1.0" 1761 1761 + dependencies = [ 1762 1762 + "anyhow", 1763 1763 + "async-trait", 1764 1764 + "axum", 1765 1765 + "hickory-proto", 1766 1766 + "hickory-server", 1767 1767 + "metrics", 1768 1768 + "onis-common", 1769 1769 + "reqwest", 1770 1770 + "serde", 1771 1771 + "serde_json", 1772 1772 + "sqlx", 1773 1773 + "tokio", 1774 1774 + "tracing", 1775 1775 + "tracing-subscriber", 1776 1776 + ] 1777 1777 + 1778 1778 + [[package]] 1779 1779 + name = "onis-verify" 1780 1780 + version = "0.1.0" 1781 1781 + dependencies = [ 1782 1782 + "anyhow", 1783 1783 + "axum", 1784 1784 + "chrono", 1785 1785 + "hickory-resolver", 1786 1786 + "metrics", 1787 1787 + "onis-common", 1788 1788 + "reqwest", 1789 1789 + "serde", 1790 1790 + "serde_json", 1791 1791 + "sqlx", 1792 1792 + "tokio", 1793 1793 + "tracing", 1794 1794 + "tracing-subscriber", 1795 1795 + ] 1796 1796 + 1797 1797 + [[package]] 1798 1798 + name = "openssl" 1799 1799 + version = "0.10.75" 1800 1800 + source = "registry+https://github.com/rust-lang/crates.io-index" 1801 1801 + checksum = "08838db121398ad17ab8531ce9de97b244589089e290a384c900cb9ff7434328" 1802 1802 + dependencies = [ 1803 1803 + "bitflags", 1804 1804 + "cfg-if", 1805 1805 + "foreign-types", 1806 1806 + "libc", 1807 1807 + "once_cell", 1808 1808 + "openssl-macros", 1809 1809 + "openssl-sys", 1810 1810 + ] 1811 1811 + 1812 1812 + [[package]] 1813 1813 + name = "openssl-macros" 1814 1814 + version = "0.1.1" 1815 1815 + source = "registry+https://github.com/rust-lang/crates.io-index" 1816 1816 + checksum = "a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c" 1817 1817 + dependencies = [ 1818 1818 + "proc-macro2", 1819 1819 + "quote", 1820 1820 + "syn", 1821 1821 + ] 1822 1822 + 1823 1823 + [[package]] 1824 1824 + name = "openssl-probe" 1825 1825 + version = "0.1.6" 1826 1826 + source = "registry+https://github.com/rust-lang/crates.io-index" 1827 1827 + checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e" 1828 1828 + 1829 1829 + [[package]] 1830 1830 + name = "openssl-probe" 1831 1831 + version = "0.2.1" 1832 1832 + source = "registry+https://github.com/rust-lang/crates.io-index" 1833 1833 + checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe" 1834 1834 + 1835 1835 + [[package]] 1836 1836 + name = "openssl-sys" 1837 1837 + version = "0.9.111" 1838 1838 + source = "registry+https://github.com/rust-lang/crates.io-index" 1839 1839 + checksum = "82cab2d520aa75e3c58898289429321eb788c3106963d0dc886ec7a5f4adc321" 1840 1840 + dependencies = [ 1841 1841 + "cc", 1842 1842 + "libc", 1843 1843 + "pkg-config", 1844 1844 + "vcpkg", 1845 1845 + ] 1846 1846 + 1847 1847 + [[package]] 1848 1848 + name = "parking" 1849 1849 + version = "2.2.1" 1850 1850 + source = "registry+https://github.com/rust-lang/crates.io-index" 1851 1851 + checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba" 1852 1852 + 1853 1853 + [[package]] 1854 1854 + name = "parking_lot" 1855 1855 + version = "0.12.5" 1856 1856 + source = "registry+https://github.com/rust-lang/crates.io-index" 1857 1857 + checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a" 1858 1858 + dependencies = [ 1859 1859 + "lock_api", 1860 1860 + "parking_lot_core", 1861 1861 + ] 1862 1862 + 1863 1863 + [[package]] 1864 1864 + name = "parking_lot_core" 1865 1865 + version = "0.9.12" 1866 1866 + source = "registry+https://github.com/rust-lang/crates.io-index" 1867 1867 + checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1" 1868 1868 + dependencies = [ 1869 1869 + "cfg-if", 1870 1870 + "libc", 1871 1871 + "redox_syscall 0.5.18", 1872 1872 + "smallvec", 1873 1873 + "windows-link", 1874 1874 + ] 1875 1875 + 1876 1876 + [[package]] 1877 1877 + name = "pem-rfc7468" 1878 1878 + version = "0.7.0" 1879 1879 + source = "registry+https://github.com/rust-lang/crates.io-index" 1880 1880 + checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412" 1881 1881 + dependencies = [ 1882 1882 + "base64ct", 1883 1883 + ] 1884 1884 + 1885 1885 + [[package]] 1886 1886 + name = "percent-encoding" 1887 1887 + version = "2.3.2" 1888 1888 + source = "registry+https://github.com/rust-lang/crates.io-index" 1889 1889 + checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220" 1890 1890 + 1891 1891 + [[package]] 1892 1892 + name = "pin-project-lite" 1893 1893 + version = "0.2.16" 1894 1894 + source = "registry+https://github.com/rust-lang/crates.io-index" 1895 1895 + checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b" 1896 1896 + 1897 1897 + [[package]] 1898 1898 + name = "pin-utils" 1899 1899 + version = "0.1.0" 1900 1900 + source = "registry+https://github.com/rust-lang/crates.io-index" 1901 1901 + checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184" 1902 1902 + 1903 1903 + [[package]] 1904 1904 + name = "pkcs1" 1905 1905 + version = "0.7.5" 1906 1906 + source = "registry+https://github.com/rust-lang/crates.io-index" 1907 1907 + checksum = "c8ffb9f10fa047879315e6625af03c164b16962a5368d724ed16323b68ace47f" 1908 1908 + dependencies = [ 1909 1909 + "der", 1910 1910 + "pkcs8", 1911 1911 + "spki", 1912 1912 + ] 1913 1913 + 1914 1914 + [[package]] 1915 1915 + name = "pkcs8" 1916 1916 + version = "0.10.2" 1917 1917 + source = "registry+https://github.com/rust-lang/crates.io-index" 1918 1918 + checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" 1919 1919 + dependencies = [ 1920 1920 + "der", 1921 1921 + "spki", 1922 1922 + ] 1923 1923 + 1924 1924 + [[package]] 1925 1925 + name = "pkg-config" 1926 1926 + version = "0.3.32" 1927 1927 + source = "registry+https://github.com/rust-lang/crates.io-index" 1928 1928 + checksum = "7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c" 1929 1929 + 1930 1930 + [[package]] 1931 1931 + name = "portable-atomic" 1932 1932 + version = "1.13.1" 1933 1933 + source = "registry+https://github.com/rust-lang/crates.io-index" 1934 1934 + checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49" 1935 1935 + 1936 1936 + [[package]] 1937 1937 + name = "potential_utf" 1938 1938 + version = "0.1.4" 1939 1939 + source = "registry+https://github.com/rust-lang/crates.io-index" 1940 1940 + checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77" 1941 1941 + dependencies = [ 1942 1942 + "zerovec", 1943 1943 + ] 1944 1944 + 1945 1945 + [[package]] 1946 1946 + name = "powerfmt" 1947 1947 + version = "0.2.0" 1948 1948 + source = "registry+https://github.com/rust-lang/crates.io-index" 1949 1949 + checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391" 1950 1950 + 1951 1951 + [[package]] 1952 1952 + name = "ppv-lite86" 1953 1953 + version = "0.2.21" 1954 1954 + source = "registry+https://github.com/rust-lang/crates.io-index" 1955 1955 + checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" 1956 1956 + dependencies = [ 1957 1957 + "zerocopy", 1958 1958 + ] 1959 1959 + 1960 1960 + [[package]] 1961 1961 + name = "prefix-trie" 1962 1962 + version = "0.7.0" 1963 1963 + source = "registry+https://github.com/rust-lang/crates.io-index" 1964 1964 + checksum = "85cf4c7c25f1dd66c76b451e9041a8cfce26e4ca754934fa7aed8d5a59a01d20" 1965 1965 + dependencies = [ 1966 1966 + "ipnet", 1967 1967 + "num-traits", 1968 1968 + ] 1969 1969 + 1970 1970 + [[package]] 1971 1971 + name = "prettyplease" 1972 1972 + version = "0.2.37" 1973 1973 + source = "registry+https://github.com/rust-lang/crates.io-index" 1974 1974 + checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b" 1975 1975 + dependencies = [ 1976 1976 + "proc-macro2", 1977 1977 + "syn", 1978 1978 + ] 1979 1979 + 1980 1980 + [[package]] 1981 1981 + name = "proc-macro2" 1982 1982 + version = "1.0.106" 1983 1983 + source = "registry+https://github.com/rust-lang/crates.io-index" 1984 1984 + checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934" 1985 1985 + dependencies = [ 1986 1986 + "unicode-ident", 1987 1987 + ] 1988 1988 + 1989 1989 + [[package]] 1990 1990 + name = "quanta" 1991 1991 + version = "0.12.6" 1992 1992 + source = "registry+https://github.com/rust-lang/crates.io-index" 1993 1993 + checksum = "f3ab5a9d756f0d97bdc89019bd2e4ea098cf9cde50ee7564dde6b81ccc8f06c7" 1994 1994 + dependencies = [ 1995 1995 + "crossbeam-utils", 1996 1996 + "libc", 1997 1997 + "once_cell", 1998 1998 + "raw-cpuid", 1999 1999 + "wasi", 2000 2000 + "web-sys", 2001 2001 + "winapi", 2002 2002 + ] 2003 2003 + 2004 2004 + [[package]] 2005 2005 + name = "quote" 2006 2006 + version = "1.0.44" 2007 2007 + source = "registry+https://github.com/rust-lang/crates.io-index" 2008 2008 + checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4" 2009 2009 + dependencies = [ 2010 2010 + "proc-macro2", 2011 2011 + ] 2012 2012 + 2013 2013 + [[package]] 2014 2014 + name = "r-efi" 2015 2015 + version = "5.3.0" 2016 2016 + source = "registry+https://github.com/rust-lang/crates.io-index" 2017 2017 + checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f" 2018 2018 + 2019 2019 + [[package]] 2020 2020 + name = "rand" 2021 2021 + version = "0.8.5" 2022 2022 + source = "registry+https://github.com/rust-lang/crates.io-index" 2023 2023 + checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404" 2024 2024 + dependencies = [ 2025 2025 + "libc", 2026 2026 + "rand_chacha 0.3.1", 2027 2027 + "rand_core 0.6.4", 2028 2028 + ] 2029 2029 + 2030 2030 + [[package]] 2031 2031 + name = "rand" 2032 2032 + version = "0.9.2" 2033 2033 + source = "registry+https://github.com/rust-lang/crates.io-index" 2034 2034 + checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1" 2035 2035 + dependencies = [ 2036 2036 + "rand_chacha 0.9.0", 2037 2037 + "rand_core 0.9.5", 2038 2038 + ] 2039 2039 + 2040 2040 + [[package]] 2041 2041 + name = "rand_chacha" 2042 2042 + version = "0.3.1" 2043 2043 + source = "registry+https://github.com/rust-lang/crates.io-index" 2044 2044 + checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" 2045 2045 + dependencies = [ 2046 2046 + "ppv-lite86", 2047 2047 + "rand_core 0.6.4", 2048 2048 + ] 2049 2049 + 2050 2050 + [[package]] 2051 2051 + name = "rand_chacha" 2052 2052 + version = "0.9.0" 2053 2053 + source = "registry+https://github.com/rust-lang/crates.io-index" 2054 2054 + checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb" 2055 2055 + dependencies = [ 2056 2056 + "ppv-lite86", 2057 2057 + "rand_core 0.9.5", 2058 2058 + ] 2059 2059 + 2060 2060 + [[package]] 2061 2061 + name = "rand_core" 2062 2062 + version = "0.6.4" 2063 2063 + source = "registry+https://github.com/rust-lang/crates.io-index" 2064 2064 + checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" 2065 2065 + dependencies = [ 2066 2066 + "getrandom 0.2.17", 2067 2067 + ] 2068 2068 + 2069 2069 + [[package]] 2070 2070 + name = "rand_core" 2071 2071 + version = "0.9.5" 2072 2072 + source = "registry+https://github.com/rust-lang/crates.io-index" 2073 2073 + checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c" 2074 2074 + dependencies = [ 2075 2075 + "getrandom 0.3.4", 2076 2076 + ] 2077 2077 + 2078 2078 + [[package]] 2079 2079 + name = "rand_xoshiro" 2080 2080 + version = "0.7.0" 2081 2081 + source = "registry+https://github.com/rust-lang/crates.io-index" 2082 2082 + checksum = "f703f4665700daf5512dcca5f43afa6af89f09db47fb56be587f80636bda2d41" 2083 2083 + dependencies = [ 2084 2084 + "rand_core 0.9.5", 2085 2085 + ] 2086 2086 + 2087 2087 + [[package]] 2088 2088 + name = "raw-cpuid" 2089 2089 + version = "11.6.0" 2090 2090 + source = "registry+https://github.com/rust-lang/crates.io-index" 2091 2091 + checksum = "498cd0dc59d73224351ee52a95fee0f1a617a2eae0e7d9d720cc622c73a54186" 2092 2092 + dependencies = [ 2093 2093 + "bitflags", 2094 2094 + ] 2095 2095 + 2096 2096 + [[package]] 2097 2097 + name = "redox_syscall" 2098 2098 + version = "0.5.18" 2099 2099 + source = "registry+https://github.com/rust-lang/crates.io-index" 2100 2100 + checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d" 2101 2101 + dependencies = [ 2102 2102 + "bitflags", 2103 2103 + ] 2104 2104 + 2105 2105 + [[package]] 2106 2106 + name = "redox_syscall" 2107 2107 + version = "0.7.0" 2108 2108 + source = "registry+https://github.com/rust-lang/crates.io-index" 2109 2109 + checksum = "49f3fe0889e69e2ae9e41f4d6c4c0181701d00e4697b356fb1f74173a5e0ee27" 2110 2110 + dependencies = [ 2111 2111 + "bitflags", 2112 2112 + ] 2113 2113 + 2114 2114 + [[package]] 2115 2115 + name = "regex" 2116 2116 + version = "1.12.2" 2117 2117 + source = "registry+https://github.com/rust-lang/crates.io-index" 2118 2118 + checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4" 2119 2119 + dependencies = [ 2120 2120 + "aho-corasick", 2121 2121 + "memchr", 2122 2122 + "regex-automata", 2123 2123 + "regex-syntax", 2124 2124 + ] 2125 2125 + 2126 2126 + [[package]] 2127 2127 + name = "regex-automata" 2128 2128 + version = "0.4.13" 2129 2129 + source = "registry+https://github.com/rust-lang/crates.io-index" 2130 2130 + checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c" 2131 2131 + dependencies = [ 2132 2132 + "aho-corasick", 2133 2133 + "memchr", 2134 2134 + "regex-syntax", 2135 2135 + ] 2136 2136 + 2137 2137 + [[package]] 2138 2138 + name = "regex-syntax" 2139 2139 + version = "0.8.8" 2140 2140 + source = "registry+https://github.com/rust-lang/crates.io-index" 2141 2141 + checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58" 2142 2142 + 2143 2143 + [[package]] 2144 2144 + name = "reqwest" 2145 2145 + version = "0.13.1" 2146 2146 + source = "registry+https://github.com/rust-lang/crates.io-index" 2147 2147 + checksum = "04e9018c9d814e5f30cc16a0f03271aeab3571e609612d9fe78c1aa8d11c2f62" 2148 2148 + dependencies = [ 2149 2149 + "base64 0.22.1", 2150 2150 + "bytes", 2151 2151 + "futures-core", 2152 2152 + "http", 2153 2153 + "http-body", 2154 2154 + "http-body-util", 2155 2155 + "hyper", 2156 2156 + "hyper-util", 2157 2157 + "js-sys", 2158 2158 + "log", 2159 2159 + "percent-encoding", 2160 2160 + "pin-project-lite", 2161 2161 + "serde", 2162 2162 + "serde_json", 2163 2163 + "sync_wrapper", 2164 2164 + "tokio", 2165 2165 + "tower", 2166 2166 + "tower-http", 2167 2167 + "tower-service", 2168 2168 + "url", 2169 2169 + "wasm-bindgen", 2170 2170 + "wasm-bindgen-futures", 2171 2171 + "web-sys", 2172 2172 + ] 2173 2173 + 2174 2174 + [[package]] 2175 2175 + name = "resolv-conf" 2176 2176 + version = "0.7.6" 2177 2177 + source = "registry+https://github.com/rust-lang/crates.io-index" 2178 2178 + checksum = "1e061d1b48cb8d38042de4ae0a7a6401009d6143dc80d2e2d6f31f0bdd6470c7" 2179 2179 + 2180 2180 + [[package]] 2181 2181 + name = "ring" 2182 2182 + version = "0.17.14" 2183 2183 + source = "registry+https://github.com/rust-lang/crates.io-index" 2184 2184 + checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7" 2185 2185 + dependencies = [ 2186 2186 + "cc", 2187 2187 + "cfg-if", 2188 2188 + "getrandom 0.2.17", 2189 2189 + "libc", 2190 2190 + "untrusted", 2191 2191 + "windows-sys 0.52.0", 2192 2192 + ] 2193 2193 + 2194 2194 + [[package]] 2195 2195 + name = "rsa" 2196 2196 + version = "0.9.10" 2197 2197 + source = "registry+https://github.com/rust-lang/crates.io-index" 2198 2198 + checksum = "b8573f03f5883dcaebdfcf4725caa1ecb9c15b2ef50c43a07b816e06799bb12d" 2199 2199 + dependencies = [ 2200 2200 + "const-oid", 2201 2201 + "digest", 2202 2202 + "num-bigint-dig", 2203 2203 + "num-integer", 2204 2204 + "num-traits", 2205 2205 + "pkcs1", 2206 2206 + "pkcs8", 2207 2207 + "rand_core 0.6.4", 2208 2208 + "signature", 2209 2209 + "spki", 2210 2210 + "subtle", 2211 2211 + "zeroize", 2212 2212 + ] 2213 2213 + 2214 2214 + [[package]] 2215 2215 + name = "rustix" 2216 2216 + version = "1.1.3" 2217 2217 + source = "registry+https://github.com/rust-lang/crates.io-index" 2218 2218 + checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34" 2219 2219 + dependencies = [ 2220 2220 + "bitflags", 2221 2221 + "errno", 2222 2222 + "libc", 2223 2223 + "linux-raw-sys", 2224 2224 + "windows-sys 0.61.2", 2225 2225 + ] 2226 2226 + 2227 2227 + [[package]] 2228 2228 + name = "rustls" 2229 2229 + version = "0.23.36" 2230 2230 + source = "registry+https://github.com/rust-lang/crates.io-index" 2231 2231 + checksum = "c665f33d38cea657d9614f766881e4d510e0eda4239891eea56b4cadcf01801b" 2232 2232 + dependencies = [ 2233 2233 + "aws-lc-rs", 2234 2234 + "once_cell", 2235 2235 + "rustls-pki-types", 2236 2236 + "rustls-webpki", 2237 2237 + "subtle", 2238 2238 + "zeroize", 2239 2239 + ] 2240 2240 + 2241 2241 + [[package]] 2242 2242 + name = "rustls-native-certs" 2243 2243 + version = "0.8.3" 2244 2244 + source = "registry+https://github.com/rust-lang/crates.io-index" 2245 2245 + checksum = "612460d5f7bea540c490b2b6395d8e34a953e52b491accd6c86c8164c5932a63" 2246 2246 + dependencies = [ 2247 2247 + "openssl-probe 0.2.1", 2248 2248 + "rustls-pki-types", 2249 2249 + "schannel", 2250 2250 + "security-framework 3.5.1", 2251 2251 + ] 2252 2252 + 2253 2253 + [[package]] 2254 2254 + name = "rustls-pki-types" 2255 2255 + version = "1.14.0" 2256 2256 + source = "registry+https://github.com/rust-lang/crates.io-index" 2257 2257 + checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd" 2258 2258 + dependencies = [ 2259 2259 + "zeroize", 2260 2260 + ] 2261 2261 + 2262 2262 + [[package]] 2263 2263 + name = "rustls-webpki" 2264 2264 + version = "0.103.9" 2265 2265 + source = "registry+https://github.com/rust-lang/crates.io-index" 2266 2266 + checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53" 2267 2267 + dependencies = [ 2268 2268 + "aws-lc-rs", 2269 2269 + "ring", 2270 2270 + "rustls-pki-types", 2271 2271 + "untrusted", 2272 2272 + ] 2273 2273 + 2274 2274 + [[package]] 2275 2275 + name = "rustversion" 2276 2276 + version = "1.0.22" 2277 2277 + source = "registry+https://github.com/rust-lang/crates.io-index" 2278 2278 + checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d" 2279 2279 + 2280 2280 + [[package]] 2281 2281 + name = "ryu" 2282 2282 + version = "1.0.22" 2283 2283 + source = "registry+https://github.com/rust-lang/crates.io-index" 2284 2284 + checksum = "a50f4cf475b65d88e057964e0e9bb1f0aa9bbb2036dc65c64596b42932536984" 2285 2285 + 2286 2286 + [[package]] 2287 2287 + name = "schannel" 2288 2288 + version = "0.1.28" 2289 2289 + source = "registry+https://github.com/rust-lang/crates.io-index" 2290 2290 + checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1" 2291 2291 + dependencies = [ 2292 2292 + "windows-sys 0.61.2", 2293 2293 + ] 2294 2294 + 2295 2295 + [[package]] 2296 2296 + name = "scopeguard" 2297 2297 + version = "1.2.0" 2298 2298 + source = "registry+https://github.com/rust-lang/crates.io-index" 2299 2299 + checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49" 2300 2300 + 2301 2301 + [[package]] 2302 2302 + name = "security-framework" 2303 2303 + version = "2.11.1" 2304 2304 + source = "registry+https://github.com/rust-lang/crates.io-index" 2305 2305 + checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02" 2306 2306 + dependencies = [ 2307 2307 + "bitflags", 2308 2308 + "core-foundation 0.9.4", 2309 2309 + "core-foundation-sys", 2310 2310 + "libc", 2311 2311 + "security-framework-sys", 2312 2312 + ] 2313 2313 + 2314 2314 + [[package]] 2315 2315 + name = "security-framework" 2316 2316 + version = "3.5.1" 2317 2317 + source = "registry+https://github.com/rust-lang/crates.io-index" 2318 2318 + checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef" 2319 2319 + dependencies = [ 2320 2320 + "bitflags", 2321 2321 + "core-foundation 0.10.1", 2322 2322 + "core-foundation-sys", 2323 2323 + "libc", 2324 2324 + "security-framework-sys", 2325 2325 + ] 2326 2326 + 2327 2327 + [[package]] 2328 2328 + name = "security-framework-sys" 2329 2329 + version = "2.15.0" 2330 2330 + source = "registry+https://github.com/rust-lang/crates.io-index" 2331 2331 + checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0" 2332 2332 + dependencies = [ 2333 2333 + "core-foundation-sys", 2334 2334 + "libc", 2335 2335 + ] 2336 2336 + 2337 2337 + [[package]] 2338 2338 + name = "serde" 2339 2339 + version = "1.0.228" 2340 2340 + source = "registry+https://github.com/rust-lang/crates.io-index" 2341 2341 + checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e" 2342 2342 + dependencies = [ 2343 2343 + "serde_core", 2344 2344 + "serde_derive", 2345 2345 + ] 2346 2346 + 2347 2347 + [[package]] 2348 2348 + name = "serde_bytes" 2349 2349 + version = "0.11.19" 2350 2350 + source = "registry+https://github.com/rust-lang/crates.io-index" 2351 2351 + checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8" 2352 2352 + dependencies = [ 2353 2353 + "serde", 2354 2354 + "serde_core", 2355 2355 + ] 2356 2356 + 2357 2357 + [[package]] 2358 2358 + name = "serde_core" 2359 2359 + version = "1.0.228" 2360 2360 + source = "registry+https://github.com/rust-lang/crates.io-index" 2361 2361 + checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad" 2362 2362 + dependencies = [ 2363 2363 + "serde_derive", 2364 2364 + ] 2365 2365 + 2366 2366 + [[package]] 2367 2367 + name = "serde_derive" 2368 2368 + version = "1.0.228" 2369 2369 + source = "registry+https://github.com/rust-lang/crates.io-index" 2370 2370 + checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79" 2371 2371 + dependencies = [ 2372 2372 + "proc-macro2", 2373 2373 + "quote", 2374 2374 + "syn", 2375 2375 + ] 2376 2376 + 2377 2377 + [[package]] 2378 2378 + name = "serde_html_form" 2379 2379 + version = "0.2.8" 2380 2380 + source = "registry+https://github.com/rust-lang/crates.io-index" 2381 2381 + checksum = "b2f2d7ff8a2140333718bb329f5c40fc5f0865b84c426183ce14c97d2ab8154f" 2382 2382 + dependencies = [ 2383 2383 + "form_urlencoded", 2384 2384 + "indexmap 2.13.0", 2385 2385 + "itoa", 2386 2386 + "ryu", 2387 2387 + "serde_core", 2388 2388 + ] 2389 2389 + 2390 2390 + [[package]] 2391 2391 + name = "serde_json" 2392 2392 + version = "1.0.149" 2393 2393 + source = "registry+https://github.com/rust-lang/crates.io-index" 2394 2394 + checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86" 2395 2395 + dependencies = [ 2396 2396 + "itoa", 2397 2397 + "memchr", 2398 2398 + "serde", 2399 2399 + "serde_core", 2400 2400 + "zmij", 2401 2401 + ] 2402 2402 + 2403 2403 + [[package]] 2404 2404 + name = "serde_path_to_error" 2405 2405 + version = "0.1.20" 2406 2406 + source = "registry+https://github.com/rust-lang/crates.io-index" 2407 2407 + checksum = "10a9ff822e371bb5403e391ecd83e182e0e77ba7f6fe0160b795797109d1b457" 2408 2408 + dependencies = [ 2409 2409 + "itoa", 2410 2410 + "serde", 2411 2411 + "serde_core", 2412 2412 + ] 2413 2413 + 2414 2414 + [[package]] 2415 2415 + name = "serde_repr" 2416 2416 + version = "0.1.20" 2417 2417 + source = "registry+https://github.com/rust-lang/crates.io-index" 2418 2418 + checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c" 2419 2419 + dependencies = [ 2420 2420 + "proc-macro2", 2421 2421 + "quote", 2422 2422 + "syn", 2423 2423 + ] 2424 2424 + 2425 2425 + [[package]] 2426 2426 + name = "serde_spanned" 2427 2427 + version = "1.0.4" 2428 2428 + source = "registry+https://github.com/rust-lang/crates.io-index" 2429 2429 + checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776" 2430 2430 + dependencies = [ 2431 2431 + "serde_core", 2432 2432 + ] 2433 2433 + 2434 2434 + [[package]] 2435 2435 + name = "serde_urlencoded" 2436 2436 + version = "0.7.1" 2437 2437 + source = "registry+https://github.com/rust-lang/crates.io-index" 2438 2438 + checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd" 2439 2439 + dependencies = [ 2440 2440 + "form_urlencoded", 2441 2441 + "itoa", 2442 2442 + "ryu", 2443 2443 + "serde", 2444 2444 + ] 2445 2445 + 2446 2446 + [[package]] 2447 2447 + name = "serde_with" 2448 2448 + version = "2.3.3" 2449 2449 + source = "registry+https://github.com/rust-lang/crates.io-index" 2450 2450 + checksum = "07ff71d2c147a7b57362cead5e22f772cd52f6ab31cfcd9edcd7f6aeb2a0afbe" 2451 2451 + dependencies = [ 2452 2452 + "base64 0.13.1", 2453 2453 + "chrono", 2454 2454 + "hex", 2455 2455 + "indexmap 1.9.3", 2456 2456 + "serde", 2457 2457 + "serde_json", 2458 2458 + "serde_with_macros", 2459 2459 + "time", 2460 2460 + ] 2461 2461 + 2462 2462 + [[package]] 2463 2463 + name = "serde_with_macros" 2464 2464 + version = "2.3.3" 2465 2465 + source = "registry+https://github.com/rust-lang/crates.io-index" 2466 2466 + checksum = "881b6f881b17d13214e5d494c939ebab463d01264ce1811e9d4ac3a882e7695f" 2467 2467 + dependencies = [ 2468 2468 + "darling", 2469 2469 + "proc-macro2", 2470 2470 + "quote", 2471 2471 + "syn", 2472 2472 + ] 2473 2473 + 2474 2474 + [[package]] 2475 2475 + name = "sha1" 2476 2476 + version = "0.10.6" 2477 2477 + source = "registry+https://github.com/rust-lang/crates.io-index" 2478 2478 + checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba" 2479 2479 + dependencies = [ 2480 2480 + "cfg-if", 2481 2481 + "cpufeatures", 2482 2482 + "digest", 2483 2483 + ] 2484 2484 + 2485 2485 + [[package]] 2486 2486 + name = "sha2" 2487 2487 + version = "0.10.9" 2488 2488 + source = "registry+https://github.com/rust-lang/crates.io-index" 2489 2489 + checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" 2490 2490 + dependencies = [ 2491 2491 + "cfg-if", 2492 2492 + "cpufeatures", 2493 2493 + "digest", 2494 2494 + ] 2495 2495 + 2496 2496 + [[package]] 2497 2497 + name = "sharded-slab" 2498 2498 + version = "0.1.7" 2499 2499 + source = "registry+https://github.com/rust-lang/crates.io-index" 2500 2500 + checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6" 2501 2501 + dependencies = [ 2502 2502 + "lazy_static", 2503 2503 + ] 2504 2504 + 2505 2505 + [[package]] 2506 2506 + name = "shlex" 2507 2507 + version = "1.3.0" 2508 2508 + source = "registry+https://github.com/rust-lang/crates.io-index" 2509 2509 + checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" 2510 2510 + 2511 2511 + [[package]] 2512 2512 + name = "signal-hook-registry" 2513 2513 + version = "1.4.8" 2514 2514 + source = "registry+https://github.com/rust-lang/crates.io-index" 2515 2515 + checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b" 2516 2516 + dependencies = [ 2517 2517 + "errno", 2518 2518 + "libc", 2519 2519 + ] 2520 2520 + 2521 2521 + [[package]] 2522 2522 + name = "signature" 2523 2523 + version = "2.2.0" 2524 2524 + source = "registry+https://github.com/rust-lang/crates.io-index" 2525 2525 + checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" 2526 2526 + dependencies = [ 2527 2527 + "digest", 2528 2528 + "rand_core 0.6.4", 2529 2529 + ] 2530 2530 + 2531 2531 + [[package]] 2532 2532 + name = "sketches-ddsketch" 2533 2533 + version = "0.3.0" 2534 2534 + source = "registry+https://github.com/rust-lang/crates.io-index" 2535 2535 + checksum = "c1e9a774a6c28142ac54bb25d25562e6bcf957493a184f15ad4eebccb23e410a" 2536 2536 + 2537 2537 + [[package]] 2538 2538 + name = "slab" 2539 2539 + version = "0.4.12" 2540 2540 + source = "registry+https://github.com/rust-lang/crates.io-index" 2541 2541 + checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5" 2542 2542 + 2543 2543 + [[package]] 2544 2544 + name = "smallvec" 2545 2545 + version = "1.15.1" 2546 2546 + source = "registry+https://github.com/rust-lang/crates.io-index" 2547 2547 + checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03" 2548 2548 + dependencies = [ 2549 2549 + "serde", 2550 2550 + ] 2551 2551 + 2552 2552 + [[package]] 2553 2553 + name = "socket2" 2554 2554 + version = "0.5.10" 2555 2555 + source = "registry+https://github.com/rust-lang/crates.io-index" 2556 2556 + checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678" 2557 2557 + dependencies = [ 2558 2558 + "libc", 2559 2559 + "windows-sys 0.52.0", 2560 2560 + ] 2561 2561 + 2562 2562 + [[package]] 2563 2563 + name = "socket2" 2564 2564 + version = "0.6.2" 2565 2565 + source = "registry+https://github.com/rust-lang/crates.io-index" 2566 2566 + checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0" 2567 2567 + dependencies = [ 2568 2568 + "libc", 2569 2569 + "windows-sys 0.60.2", 2570 2570 + ] 2571 2571 + 2572 2572 + [[package]] 2573 2573 + name = "spin" 2574 2574 + version = "0.9.8" 2575 2575 + source = "registry+https://github.com/rust-lang/crates.io-index" 2576 2576 + checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67" 2577 2577 + dependencies = [ 2578 2578 + "lock_api", 2579 2579 + ] 2580 2580 + 2581 2581 + [[package]] 2582 2582 + name = "spki" 2583 2583 + version = "0.7.3" 2584 2584 + source = "registry+https://github.com/rust-lang/crates.io-index" 2585 2585 + checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" 2586 2586 + dependencies = [ 2587 2587 + "base64ct", 2588 2588 + "der", 2589 2589 + ] 2590 2590 + 2591 2591 + [[package]] 2592 2592 + name = "sqlx" 2593 2593 + version = "0.8.6" 2594 2594 + source = "registry+https://github.com/rust-lang/crates.io-index" 2595 2595 + checksum = "1fefb893899429669dcdd979aff487bd78f4064e5e7907e4269081e0ef7d97dc" 2596 2596 + dependencies = [ 2597 2597 + "sqlx-core", 2598 2598 + "sqlx-macros", 2599 2599 + "sqlx-mysql", 2600 2600 + "sqlx-postgres", 2601 2601 + "sqlx-sqlite", 2602 2602 + ] 2603 2603 + 2604 2604 + [[package]] 2605 2605 + name = "sqlx-core" 2606 2606 + version = "0.8.6" 2607 2607 + source = "registry+https://github.com/rust-lang/crates.io-index" 2608 2608 + checksum = "ee6798b1838b6a0f69c007c133b8df5866302197e404e8b6ee8ed3e3a5e68dc6" 2609 2609 + dependencies = [ 2610 2610 + "base64 0.22.1", 2611 2611 + "bytes", 2612 2612 + "crc", 2613 2613 + "crossbeam-queue", 2614 2614 + "either", 2615 2615 + "event-listener", 2616 2616 + "futures-core", 2617 2617 + "futures-intrusive", 2618 2618 + "futures-io", 2619 2619 + "futures-util", 2620 2620 + "hashbrown 0.15.5", 2621 2621 + "hashlink", 2622 2622 + "indexmap 2.13.0", 2623 2623 + "log", 2624 2624 + "memchr", 2625 2625 + "once_cell", 2626 2626 + "percent-encoding", 2627 2627 + "serde", 2628 2628 + "serde_json", 2629 2629 + "sha2", 2630 2630 + "smallvec", 2631 2631 + "thiserror 2.0.18", 2632 2632 + "tokio", 2633 2633 + "tokio-stream", 2634 2634 + "tracing", 2635 2635 + "url", 2636 2636 + ] 2637 2637 + 2638 2638 + [[package]] 2639 2639 + name = "sqlx-macros" 2640 2640 + version = "0.8.6" 2641 2641 + source = "registry+https://github.com/rust-lang/crates.io-index" 2642 2642 + checksum = "a2d452988ccaacfbf5e0bdbc348fb91d7c8af5bee192173ac3636b5fb6e6715d" 2643 2643 + dependencies = [ 2644 2644 + "proc-macro2", 2645 2645 + "quote", 2646 2646 + "sqlx-core", 2647 2647 + "sqlx-macros-core", 2648 2648 + "syn", 2649 2649 + ] 2650 2650 + 2651 2651 + [[package]] 2652 2652 + name = "sqlx-macros-core" 2653 2653 + version = "0.8.6" 2654 2654 + source = "registry+https://github.com/rust-lang/crates.io-index" 2655 2655 + checksum = "19a9c1841124ac5a61741f96e1d9e2ec77424bf323962dd894bdb93f37d5219b" 2656 2656 + dependencies = [ 2657 2657 + "dotenvy", 2658 2658 + "either", 2659 2659 + "heck 0.5.0", 2660 2660 + "hex", 2661 2661 + "once_cell", 2662 2662 + "proc-macro2", 2663 2663 + "quote", 2664 2664 + "serde", 2665 2665 + "serde_json", 2666 2666 + "sha2", 2667 2667 + "sqlx-core", 2668 2668 + "sqlx-mysql", 2669 2669 + "sqlx-postgres", 2670 2670 + "sqlx-sqlite", 2671 2671 + "syn", 2672 2672 + "tokio", 2673 2673 + "url", 2674 2674 + ] 2675 2675 + 2676 2676 + [[package]] 2677 2677 + name = "sqlx-mysql" 2678 2678 + version = "0.8.6" 2679 2679 + source = "registry+https://github.com/rust-lang/crates.io-index" 2680 2680 + checksum = "aa003f0038df784eb8fecbbac13affe3da23b45194bd57dba231c8f48199c526" 2681 2681 + dependencies = [ 2682 2682 + "atoi", 2683 2683 + "base64 0.22.1", 2684 2684 + "bitflags", 2685 2685 + "byteorder", 2686 2686 + "bytes", 2687 2687 + "crc", 2688 2688 + "digest", 2689 2689 + "dotenvy", 2690 2690 + "either", 2691 2691 + "futures-channel", 2692 2692 + "futures-core", 2693 2693 + "futures-io", 2694 2694 + "futures-util", 2695 2695 + "generic-array", 2696 2696 + "hex", 2697 2697 + "hkdf", 2698 2698 + "hmac", 2699 2699 + "itoa", 2700 2700 + "log", 2701 2701 + "md-5", 2702 2702 + "memchr", 2703 2703 + "once_cell", 2704 2704 + "percent-encoding", 2705 2705 + "rand 0.8.5", 2706 2706 + "rsa", 2707 2707 + "serde", 2708 2708 + "sha1", 2709 2709 + "sha2", 2710 2710 + "smallvec", 2711 2711 + "sqlx-core", 2712 2712 + "stringprep", 2713 2713 + "thiserror 2.0.18", 2714 2714 + "tracing", 2715 2715 + "whoami", 2716 2716 + ] 2717 2717 + 2718 2718 + [[package]] 2719 2719 + name = "sqlx-postgres" 2720 2720 + version = "0.8.6" 2721 2721 + source = "registry+https://github.com/rust-lang/crates.io-index" 2722 2722 + checksum = "db58fcd5a53cf07c184b154801ff91347e4c30d17a3562a635ff028ad5deda46" 2723 2723 + dependencies = [ 2724 2724 + "atoi", 2725 2725 + "base64 0.22.1", 2726 2726 + "bitflags", 2727 2727 + "byteorder", 2728 2728 + "crc", 2729 2729 + "dotenvy", 2730 2730 + "etcetera", 2731 2731 + "futures-channel", 2732 2732 + "futures-core", 2733 2733 + "futures-util", 2734 2734 + "hex", 2735 2735 + "hkdf", 2736 2736 + "hmac", 2737 2737 + "home", 2738 2738 + "itoa", 2739 2739 + "log", 2740 2740 + "md-5", 2741 2741 + "memchr", 2742 2742 + "once_cell", 2743 2743 + "rand 0.8.5", 2744 2744 + "serde", 2745 2745 + "serde_json", 2746 2746 + "sha2", 2747 2747 + "smallvec", 2748 2748 + "sqlx-core", 2749 2749 + "stringprep", 2750 2750 + "thiserror 2.0.18", 2751 2751 + "tracing", 2752 2752 + "whoami", 2753 2753 + ] 2754 2754 + 2755 2755 + [[package]] 2756 2756 + name = "sqlx-sqlite" 2757 2757 + version = "0.8.6" 2758 2758 + source = "registry+https://github.com/rust-lang/crates.io-index" 2759 2759 + checksum = "c2d12fe70b2c1b4401038055f90f151b78208de1f9f89a7dbfd41587a10c3eea" 2760 2760 + dependencies = [ 2761 2761 + "atoi", 2762 2762 + "flume", 2763 2763 + "futures-channel", 2764 2764 + "futures-core", 2765 2765 + "futures-executor", 2766 2766 + "futures-intrusive", 2767 2767 + "futures-util", 2768 2768 + "libsqlite3-sys", 2769 2769 + "log", 2770 2770 + "percent-encoding", 2771 2771 + "serde", 2772 2772 + "serde_urlencoded", 2773 2773 + "sqlx-core", 2774 2774 + "thiserror 2.0.18", 2775 2775 + "tracing", 2776 2776 + "url", 2777 2777 + ] 2778 2778 + 2779 2779 + [[package]] 2780 2780 + name = "stable_deref_trait" 2781 2781 + version = "1.2.1" 2782 2782 + source = "registry+https://github.com/rust-lang/crates.io-index" 2783 2783 + checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596" 2784 2784 + 2785 2785 + [[package]] 2786 2786 + name = "stringprep" 2787 2787 + version = "0.1.5" 2788 2788 + source = "registry+https://github.com/rust-lang/crates.io-index" 2789 2789 + checksum = "7b4df3d392d81bd458a8a621b8bffbd2302a12ffe288a9d931670948749463b1" 2790 2790 + dependencies = [ 2791 2791 + "unicode-bidi", 2792 2792 + "unicode-normalization", 2793 2793 + "unicode-properties", 2794 2794 + ] 2795 2795 + 2796 2796 + [[package]] 2797 2797 + name = "strsim" 2798 2798 + version = "0.11.1" 2799 2799 + source = "registry+https://github.com/rust-lang/crates.io-index" 2800 2800 + checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" 2801 2801 + 2802 2802 + [[package]] 2803 2803 + name = "subtle" 2804 2804 + version = "2.6.1" 2805 2805 + source = "registry+https://github.com/rust-lang/crates.io-index" 2806 2806 + checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" 2807 2807 + 2808 2808 + [[package]] 2809 2809 + name = "syn" 2810 2810 + version = "2.0.114" 2811 2811 + source = "registry+https://github.com/rust-lang/crates.io-index" 2812 2812 + checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a" 2813 2813 + dependencies = [ 2814 2814 + "proc-macro2", 2815 2815 + "quote", 2816 2816 + "unicode-ident", 2817 2817 + ] 2818 2818 + 2819 2819 + [[package]] 2820 2820 + name = "sync_wrapper" 2821 2821 + version = "1.0.2" 2822 2822 + source = "registry+https://github.com/rust-lang/crates.io-index" 2823 2823 + checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263" 2824 2824 + dependencies = [ 2825 2825 + "futures-core", 2826 2826 + ] 2827 2827 + 2828 2828 + [[package]] 2829 2829 + name = "synstructure" 2830 2830 + version = "0.13.2" 2831 2831 + source = "registry+https://github.com/rust-lang/crates.io-index" 2832 2832 + checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2" 2833 2833 + dependencies = [ 2834 2834 + "proc-macro2", 2835 2835 + "quote", 2836 2836 + "syn", 2837 2837 + ] 2838 2838 + 2839 2839 + [[package]] 2840 2840 + name = "tagptr" 2841 2841 + version = "0.2.0" 2842 2842 + source = "registry+https://github.com/rust-lang/crates.io-index" 2843 2843 + checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417" 2844 2844 + 2845 2845 + [[package]] 2846 2846 + name = "tempfile" 2847 2847 + version = "3.24.0" 2848 2848 + source = "registry+https://github.com/rust-lang/crates.io-index" 2849 2849 + checksum = "655da9c7eb6305c55742045d5a8d2037996d61d8de95806335c7c86ce0f82e9c" 2850 2850 + dependencies = [ 2851 2851 + "fastrand", 2852 2852 + "getrandom 0.3.4", 2853 2853 + "once_cell", 2854 2854 + "rustix", 2855 2855 + "windows-sys 0.61.2", 2856 2856 + ] 2857 2857 + 2858 2858 + [[package]] 2859 2859 + name = "thiserror" 2860 2860 + version = "1.0.69" 2861 2861 + source = "registry+https://github.com/rust-lang/crates.io-index" 2862 2862 + checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52" 2863 2863 + dependencies = [ 2864 2864 + "thiserror-impl 1.0.69", 2865 2865 + ] 2866 2866 + 2867 2867 + [[package]] 2868 2868 + name = "thiserror" 2869 2869 + version = "2.0.18" 2870 2870 + source = "registry+https://github.com/rust-lang/crates.io-index" 2871 2871 + checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4" 2872 2872 + dependencies = [ 2873 2873 + "thiserror-impl 2.0.18", 2874 2874 + ] 2875 2875 + 2876 2876 + [[package]] 2877 2877 + name = "thiserror-impl" 2878 2878 + version = "1.0.69" 2879 2879 + source = "registry+https://github.com/rust-lang/crates.io-index" 2880 2880 + checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1" 2881 2881 + dependencies = [ 2882 2882 + "proc-macro2", 2883 2883 + "quote", 2884 2884 + "syn", 2885 2885 + ] 2886 2886 + 2887 2887 + [[package]] 2888 2888 + name = "thiserror-impl" 2889 2889 + version = "2.0.18" 2890 2890 + source = "registry+https://github.com/rust-lang/crates.io-index" 2891 2891 + checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5" 2892 2892 + dependencies = [ 2893 2893 + "proc-macro2", 2894 2894 + "quote", 2895 2895 + "syn", 2896 2896 + ] 2897 2897 + 2898 2898 + [[package]] 2899 2899 + name = "thread_local" 2900 2900 + version = "1.1.9" 2901 2901 + source = "registry+https://github.com/rust-lang/crates.io-index" 2902 2902 + checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185" 2903 2903 + dependencies = [ 2904 2904 + "cfg-if", 2905 2905 + ] 2906 2906 + 2907 2907 + [[package]] 2908 2908 + name = "time" 2909 2909 + version = "0.3.46" 2910 2910 + source = "registry+https://github.com/rust-lang/crates.io-index" 2911 2911 + checksum = "9da98b7d9b7dad93488a84b8248efc35352b0b2657397d4167e7ad67e5d535e5" 2912 2912 + dependencies = [ 2913 2913 + "deranged", 2914 2914 + "itoa", 2915 2915 + "num-conv", 2916 2916 + "powerfmt", 2917 2917 + "serde_core", 2918 2918 + "time-core", 2919 2919 + "time-macros", 2920 2920 + ] 2921 2921 + 2922 2922 + [[package]] 2923 2923 + name = "time-core" 2924 2924 + version = "0.1.8" 2925 2925 + source = "registry+https://github.com/rust-lang/crates.io-index" 2926 2926 + checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca" 2927 2927 + 2928 2928 + [[package]] 2929 2929 + name = "time-macros" 2930 2930 + version = "0.2.26" 2931 2931 + source = "registry+https://github.com/rust-lang/crates.io-index" 2932 2932 + checksum = "78cc610bac2dcee56805c99642447d4c5dbde4d01f752ffea0199aee1f601dc4" 2933 2933 + dependencies = [ 2934 2934 + "num-conv", 2935 2935 + "time-core", 2936 2936 + ] 2937 2937 + 2938 2938 + [[package]] 2939 2939 + name = "tinystr" 2940 2940 + version = "0.8.2" 2941 2941 + source = "registry+https://github.com/rust-lang/crates.io-index" 2942 2942 + checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869" 2943 2943 + dependencies = [ 2944 2944 + "displaydoc", 2945 2945 + "zerovec", 2946 2946 + ] 2947 2947 + 2948 2948 + [[package]] 2949 2949 + name = "tinyvec" 2950 2950 + version = "1.10.0" 2951 2951 + source = "registry+https://github.com/rust-lang/crates.io-index" 2952 2952 + checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa" 2953 2953 + dependencies = [ 2954 2954 + "tinyvec_macros", 2955 2955 + ] 2956 2956 + 2957 2957 + [[package]] 2958 2958 + name = "tinyvec_macros" 2959 2959 + version = "0.1.1" 2960 2960 + source = "registry+https://github.com/rust-lang/crates.io-index" 2961 2961 + checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20" 2962 2962 + 2963 2963 + [[package]] 2964 2964 + name = "tokio" 2965 2965 + version = "1.49.0" 2966 2966 + source = "registry+https://github.com/rust-lang/crates.io-index" 2967 2967 + checksum = "72a2903cd7736441aac9df9d7688bd0ce48edccaadf181c3b90be801e81d3d86" 2968 2968 + dependencies = [ 2969 2969 + "bytes", 2970 2970 + "libc", 2971 2971 + "mio", 2972 2972 + "parking_lot", 2973 2973 + "pin-project-lite", 2974 2974 + "signal-hook-registry", 2975 2975 + "socket2 0.6.2", 2976 2976 + "tokio-macros", 2977 2977 + "windows-sys 0.61.2", 2978 2978 + ] 2979 2979 + 2980 2980 + [[package]] 2981 2981 + name = "tokio-macros" 2982 2982 + version = "2.6.0" 2983 2983 + source = "registry+https://github.com/rust-lang/crates.io-index" 2984 2984 + checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5" 2985 2985 + dependencies = [ 2986 2986 + "proc-macro2", 2987 2987 + "quote", 2988 2988 + "syn", 2989 2989 + ] 2990 2990 + 2991 2991 + [[package]] 2992 2992 + name = "tokio-native-tls" 2993 2993 + version = "0.3.1" 2994 2994 + source = "registry+https://github.com/rust-lang/crates.io-index" 2995 2995 + checksum = "bbae76ab933c85776efabc971569dd6119c580d8f5d448769dec1764bf796ef2" 2996 2996 + dependencies = [ 2997 2997 + "native-tls", 2998 2998 + "tokio", 2999 2999 + ] 3000 3000 + 3001 3001 + [[package]] 3002 3002 + name = "tokio-rustls" 3003 3003 + version = "0.26.4" 3004 3004 + source = "registry+https://github.com/rust-lang/crates.io-index" 3005 3005 + checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61" 3006 3006 + dependencies = [ 3007 3007 + "rustls", 3008 3008 + "tokio", 3009 3009 + ] 3010 3010 + 3011 3011 + [[package]] 3012 3012 + name = "tokio-stream" 3013 3013 + version = "0.1.18" 3014 3014 + source = "registry+https://github.com/rust-lang/crates.io-index" 3015 3015 + checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70" 3016 3016 + dependencies = [ 3017 3017 + "futures-core", 3018 3018 + "pin-project-lite", 3019 3019 + "tokio", 3020 3020 + ] 3021 3021 + 3022 3022 + [[package]] 3023 3023 + name = "tokio-tungstenite" 3024 3024 + version = "0.28.0" 3025 3025 + source = "registry+https://github.com/rust-lang/crates.io-index" 3026 3026 + checksum = "d25a406cddcc431a75d3d9afc6a7c0f7428d4891dd973e4d54c56b46127bf857" 3027 3027 + dependencies = [ 3028 3028 + "futures-util", 3029 3029 + "log", 3030 3030 + "native-tls", 3031 3031 + "tokio", 3032 3032 + "tokio-native-tls", 3033 3033 + "tungstenite", 3034 3034 + ] 3035 3035 + 3036 3036 + [[package]] 3037 3037 + name = "tokio-util" 3038 3038 + version = "0.7.18" 3039 3039 + source = "registry+https://github.com/rust-lang/crates.io-index" 3040 3040 + checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098" 3041 3041 + dependencies = [ 3042 3042 + "bytes", 3043 3043 + "futures-core", 3044 3044 + "futures-sink", 3045 3045 + "pin-project-lite", 3046 3046 + "tokio", 3047 3047 + ] 3048 3048 + 3049 3049 + [[package]] 3050 3050 + name = "toml" 3051 3051 + version = "0.9.11+spec-1.1.0" 3052 3052 + source = "registry+https://github.com/rust-lang/crates.io-index" 3053 3053 + checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46" 3054 3054 + dependencies = [ 3055 3055 + "indexmap 2.13.0", 3056 3056 + "serde_core", 3057 3057 + "serde_spanned", 3058 3058 + "toml_datetime", 3059 3059 + "toml_parser", 3060 3060 + "toml_writer", 3061 3061 + "winnow", 3062 3062 + ] 3063 3063 + 3064 3064 + [[package]] 3065 3065 + name = "toml_datetime" 3066 3066 + version = "0.7.5+spec-1.1.0" 3067 3067 + source = "registry+https://github.com/rust-lang/crates.io-index" 3068 3068 + checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347" 3069 3069 + dependencies = [ 3070 3070 + "serde_core", 3071 3071 + ] 3072 3072 + 3073 3073 + [[package]] 3074 3074 + name = "toml_parser" 3075 3075 + version = "1.0.6+spec-1.1.0" 3076 3076 + source = "registry+https://github.com/rust-lang/crates.io-index" 3077 3077 + checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44" 3078 3078 + dependencies = [ 3079 3079 + "winnow", 3080 3080 + ] 3081 3081 + 3082 3082 + [[package]] 3083 3083 + name = "toml_writer" 3084 3084 + version = "1.0.6+spec-1.1.0" 3085 3085 + source = "registry+https://github.com/rust-lang/crates.io-index" 3086 3086 + checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607" 3087 3087 + 3088 3088 + [[package]] 3089 3089 + name = "tower" 3090 3090 + version = "0.5.3" 3091 3091 + source = "registry+https://github.com/rust-lang/crates.io-index" 3092 3092 + checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4" 3093 3093 + dependencies = [ 3094 3094 + "futures-core", 3095 3095 + "futures-util", 3096 3096 + "pin-project-lite", 3097 3097 + "sync_wrapper", 3098 3098 + "tokio", 3099 3099 + "tower-layer", 3100 3100 + "tower-service", 3101 3101 + "tracing", 3102 3102 + ] 3103 3103 + 3104 3104 + [[package]] 3105 3105 + name = "tower-http" 3106 3106 + version = "0.6.8" 3107 3107 + source = "registry+https://github.com/rust-lang/crates.io-index" 3108 3108 + checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8" 3109 3109 + dependencies = [ 3110 3110 + "bitflags", 3111 3111 + "bytes", 3112 3112 + "futures-util", 3113 3113 + "http", 3114 3114 + "http-body", 3115 3115 + "iri-string", 3116 3116 + "pin-project-lite", 3117 3117 + "tower", 3118 3118 + "tower-layer", 3119 3119 + "tower-service", 3120 3120 + ] 3121 3121 + 3122 3122 + [[package]] 3123 3123 + name = "tower-layer" 3124 3124 + version = "0.3.3" 3125 3125 + source = "registry+https://github.com/rust-lang/crates.io-index" 3126 3126 + checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e" 3127 3127 + 3128 3128 + [[package]] 3129 3129 + name = "tower-service" 3130 3130 + version = "0.3.3" 3131 3131 + source = "registry+https://github.com/rust-lang/crates.io-index" 3132 3132 + checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3" 3133 3133 + 3134 3134 + [[package]] 3135 3135 + name = "tracing" 3136 3136 + version = "0.1.44" 3137 3137 + source = "registry+https://github.com/rust-lang/crates.io-index" 3138 3138 + checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100" 3139 3139 + dependencies = [ 3140 3140 + "log", 3141 3141 + "pin-project-lite", 3142 3142 + "tracing-attributes", 3143 3143 + "tracing-core", 3144 3144 + ] 3145 3145 + 3146 3146 + [[package]] 3147 3147 + name = "tracing-attributes" 3148 3148 + version = "0.1.31" 3149 3149 + source = "registry+https://github.com/rust-lang/crates.io-index" 3150 3150 + checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da" 3151 3151 + dependencies = [ 3152 3152 + "proc-macro2", 3153 3153 + "quote", 3154 3154 + "syn", 3155 3155 + ] 3156 3156 + 3157 3157 + [[package]] 3158 3158 + name = "tracing-core" 3159 3159 + version = "0.1.36" 3160 3160 + source = "registry+https://github.com/rust-lang/crates.io-index" 3161 3161 + checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a" 3162 3162 + dependencies = [ 3163 3163 + "once_cell", 3164 3164 + "valuable", 3165 3165 + ] 3166 3166 + 3167 3167 + [[package]] 3168 3168 + name = "tracing-log" 3169 3169 + version = "0.2.0" 3170 3170 + source = "registry+https://github.com/rust-lang/crates.io-index" 3171 3171 + checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3" 3172 3172 + dependencies = [ 3173 3173 + "log", 3174 3174 + "once_cell", 3175 3175 + "tracing-core", 3176 3176 + ] 3177 3177 + 3178 3178 + [[package]] 3179 3179 + name = "tracing-serde" 3180 3180 + version = "0.2.0" 3181 3181 + source = "registry+https://github.com/rust-lang/crates.io-index" 3182 3182 + checksum = "704b1aeb7be0d0a84fc9828cae51dab5970fee5088f83d1dd7ee6f6246fc6ff1" 3183 3183 + dependencies = [ 3184 3184 + "serde", 3185 3185 + "tracing-core", 3186 3186 + ] 3187 3187 + 3188 3188 + [[package]] 3189 3189 + name = "tracing-subscriber" 3190 3190 + version = "0.3.22" 3191 3191 + source = "registry+https://github.com/rust-lang/crates.io-index" 3192 3192 + checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e" 3193 3193 + dependencies = [ 3194 3194 + "matchers", 3195 3195 + "nu-ansi-term", 3196 3196 + "once_cell", 3197 3197 + "regex-automata", 3198 3198 + "serde", 3199 3199 + "serde_json", 3200 3200 + "sharded-slab", 3201 3201 + "smallvec", 3202 3202 + "thread_local", 3203 3203 + "tracing", 3204 3204 + "tracing-core", 3205 3205 + "tracing-log", 3206 3206 + "tracing-serde", 3207 3207 + ] 3208 3208 + 3209 3209 + [[package]] 3210 3210 + name = "trait-variant" 3211 3211 + version = "0.1.2" 3212 3212 + source = "registry+https://github.com/rust-lang/crates.io-index" 3213 3213 + checksum = "70977707304198400eb4835a78f6a9f928bf41bba420deb8fdb175cd965d77a7" 3214 3214 + dependencies = [ 3215 3215 + "proc-macro2", 3216 3216 + "quote", 3217 3217 + "syn", 3218 3218 + ] 3219 3219 + 3220 3220 + [[package]] 3221 3221 + name = "try-lock" 3222 3222 + version = "0.2.5" 3223 3223 + source = "registry+https://github.com/rust-lang/crates.io-index" 3224 3224 + checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" 3225 3225 + 3226 3226 + [[package]] 3227 3227 + name = "tungstenite" 3228 3228 + version = "0.28.0" 3229 3229 + source = "registry+https://github.com/rust-lang/crates.io-index" 3230 3230 + checksum = "8628dcc84e5a09eb3d8423d6cb682965dea9133204e8fb3efee74c2a0c259442" 3231 3231 + dependencies = [ 3232 3232 + "bytes", 3233 3233 + "data-encoding", 3234 3234 + "http", 3235 3235 + "httparse", 3236 3236 + "log", 3237 3237 + "native-tls", 3238 3238 + "rand 0.9.2", 3239 3239 + "sha1", 3240 3240 + "thiserror 2.0.18", 3241 3241 + "utf-8", 3242 3242 + ] 3243 3243 + 3244 3244 + [[package]] 3245 3245 + name = "typenum" 3246 3246 + version = "1.19.0" 3247 3247 + source = "registry+https://github.com/rust-lang/crates.io-index" 3248 3248 + checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb" 3249 3249 + 3250 3250 + [[package]] 3251 3251 + name = "unicode-bidi" 3252 3252 + version = "0.3.18" 3253 3253 + source = "registry+https://github.com/rust-lang/crates.io-index" 3254 3254 + checksum = "5c1cb5db39152898a79168971543b1cb5020dff7fe43c8dc468b0885f5e29df5" 3255 3255 + 3256 3256 + [[package]] 3257 3257 + name = "unicode-ident" 3258 3258 + version = "1.0.22" 3259 3259 + source = "registry+https://github.com/rust-lang/crates.io-index" 3260 3260 + checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5" 3261 3261 + 3262 3262 + [[package]] 3263 3263 + name = "unicode-normalization" 3264 3264 + version = "0.1.25" 3265 3265 + source = "registry+https://github.com/rust-lang/crates.io-index" 3266 3266 + checksum = "5fd4f6878c9cb28d874b009da9e8d183b5abc80117c40bbd187a1fde336be6e8" 3267 3267 + dependencies = [ 3268 3268 + "tinyvec", 3269 3269 + ] 3270 3270 + 3271 3271 + [[package]] 3272 3272 + name = "unicode-properties" 3273 3273 + version = "0.1.4" 3274 3274 + source = "registry+https://github.com/rust-lang/crates.io-index" 3275 3275 + checksum = "7df058c713841ad818f1dc5d3fd88063241cc61f49f5fbea4b951e8cf5a8d71d" 3276 3276 + 3277 3277 + [[package]] 3278 3278 + name = "unsigned-varint" 3279 3279 + version = "0.8.0" 3280 3280 + source = "registry+https://github.com/rust-lang/crates.io-index" 3281 3281 + checksum = "eb066959b24b5196ae73cb057f45598450d2c5f71460e98c49b738086eff9c06" 3282 3282 + 3283 3283 + [[package]] 3284 3284 + name = "untrusted" 3285 3285 + version = "0.9.0" 3286 3286 + source = "registry+https://github.com/rust-lang/crates.io-index" 3287 3287 + checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" 3288 3288 + 3289 3289 + [[package]] 3290 3290 + name = "url" 3291 3291 + version = "2.5.8" 3292 3292 + source = "registry+https://github.com/rust-lang/crates.io-index" 3293 3293 + checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed" 3294 3294 + dependencies = [ 3295 3295 + "form_urlencoded", 3296 3296 + "idna", 3297 3297 + "percent-encoding", 3298 3298 + "serde", 3299 3299 + "serde_derive", 3300 3300 + ] 3301 3301 + 3302 3302 + [[package]] 3303 3303 + name = "utf-8" 3304 3304 + version = "0.7.6" 3305 3305 + source = "registry+https://github.com/rust-lang/crates.io-index" 3306 3306 + checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9" 3307 3307 + 3308 3308 + [[package]] 3309 3309 + name = "utf8_iter" 3310 3310 + version = "1.0.4" 3311 3311 + source = "registry+https://github.com/rust-lang/crates.io-index" 3312 3312 + checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" 3313 3313 + 3314 3314 + [[package]] 3315 3315 + name = "uuid" 3316 3316 + version = "1.20.0" 3317 3317 + source = "registry+https://github.com/rust-lang/crates.io-index" 3318 3318 + checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f" 3319 3319 + dependencies = [ 3320 3320 + "getrandom 0.3.4", 3321 3321 + "js-sys", 3322 3322 + "wasm-bindgen", 3323 3323 + ] 3324 3324 + 3325 3325 + [[package]] 3326 3326 + name = "valuable" 3327 3327 + version = "0.1.1" 3328 3328 + source = "registry+https://github.com/rust-lang/crates.io-index" 3329 3329 + checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65" 3330 3330 + 3331 3331 + [[package]] 3332 3332 + name = "vcpkg" 3333 3333 + version = "0.2.15" 3334 3334 + source = "registry+https://github.com/rust-lang/crates.io-index" 3335 3335 + checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426" 3336 3336 + 3337 3337 + [[package]] 3338 3338 + name = "version_check" 3339 3339 + version = "0.9.5" 3340 3340 + source = "registry+https://github.com/rust-lang/crates.io-index" 3341 3341 + checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" 3342 3342 + 3343 3343 + [[package]] 3344 3344 + name = "want" 3345 3345 + version = "0.3.1" 3346 3346 + source = "registry+https://github.com/rust-lang/crates.io-index" 3347 3347 + checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e" 3348 3348 + dependencies = [ 3349 3349 + "try-lock", 3350 3350 + ] 3351 3351 + 3352 3352 + [[package]] 3353 3353 + name = "wasi" 3354 3354 + version = "0.11.1+wasi-snapshot-preview1" 3355 3355 + source = "registry+https://github.com/rust-lang/crates.io-index" 3356 3356 + checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" 3357 3357 + 3358 3358 + [[package]] 3359 3359 + name = "wasip2" 3360 3360 + version = "1.0.2+wasi-0.2.9" 3361 3361 + source = "registry+https://github.com/rust-lang/crates.io-index" 3362 3362 + checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5" 3363 3363 + dependencies = [ 3364 3364 + "wit-bindgen", 3365 3365 + ] 3366 3366 + 3367 3367 + [[package]] 3368 3368 + name = "wasite" 3369 3369 + version = "0.1.0" 3370 3370 + source = "registry+https://github.com/rust-lang/crates.io-index" 3371 3371 + checksum = "b8dad83b4f25e74f184f64c43b150b91efe7647395b42289f38e50566d82855b" 3372 3372 + 3373 3373 + [[package]] 3374 3374 + name = "wasm-bindgen" 3375 3375 + version = "0.2.108" 3376 3376 + source = "registry+https://github.com/rust-lang/crates.io-index" 3377 3377 + checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566" 3378 3378 + dependencies = [ 3379 3379 + "cfg-if", 3380 3380 + "once_cell", 3381 3381 + "rustversion", 3382 3382 + "wasm-bindgen-macro", 3383 3383 + "wasm-bindgen-shared", 3384 3384 + ] 3385 3385 + 3386 3386 + [[package]] 3387 3387 + name = "wasm-bindgen-futures" 3388 3388 + version = "0.4.58" 3389 3389 + source = "registry+https://github.com/rust-lang/crates.io-index" 3390 3390 + checksum = "70a6e77fd0ae8029c9ea0063f87c46fde723e7d887703d74ad2616d792e51e6f" 3391 3391 + dependencies = [ 3392 3392 + "cfg-if", 3393 3393 + "futures-util", 3394 3394 + "js-sys", 3395 3395 + "once_cell", 3396 3396 + "wasm-bindgen", 3397 3397 + "web-sys", 3398 3398 + ] 3399 3399 + 3400 3400 + [[package]] 3401 3401 + name = "wasm-bindgen-macro" 3402 3402 + version = "0.2.108" 3403 3403 + source = "registry+https://github.com/rust-lang/crates.io-index" 3404 3404 + checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608" 3405 3405 + dependencies = [ 3406 3406 + "quote", 3407 3407 + "wasm-bindgen-macro-support", 3408 3408 + ] 3409 3409 + 3410 3410 + [[package]] 3411 3411 + name = "wasm-bindgen-macro-support" 3412 3412 + version = "0.2.108" 3413 3413 + source = "registry+https://github.com/rust-lang/crates.io-index" 3414 3414 + checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55" 3415 3415 + dependencies = [ 3416 3416 + "bumpalo", 3417 3417 + "proc-macro2", 3418 3418 + "quote", 3419 3419 + "syn", 3420 3420 + "wasm-bindgen-shared", 3421 3421 + ] 3422 3422 + 3423 3423 + [[package]] 3424 3424 + name = "wasm-bindgen-shared" 3425 3425 + version = "0.2.108" 3426 3426 + source = "registry+https://github.com/rust-lang/crates.io-index" 3427 3427 + checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12" 3428 3428 + dependencies = [ 3429 3429 + "unicode-ident", 3430 3430 + ] 3431 3431 + 3432 3432 + [[package]] 3433 3433 + name = "web-sys" 3434 3434 + version = "0.3.85" 3435 3435 + source = "registry+https://github.com/rust-lang/crates.io-index" 3436 3436 + checksum = "312e32e551d92129218ea9a2452120f4aabc03529ef03e4d0d82fb2780608598" 3437 3437 + dependencies = [ 3438 3438 + "js-sys", 3439 3439 + "wasm-bindgen", 3440 3440 + ] 3441 3441 + 3442 3442 + [[package]] 3443 3443 + name = "web-time" 3444 3444 + version = "1.1.0" 3445 3445 + source = "registry+https://github.com/rust-lang/crates.io-index" 3446 3446 + checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb" 3447 3447 + dependencies = [ 3448 3448 + "js-sys", 3449 3449 + "wasm-bindgen", 3450 3450 + ] 3451 3451 + 3452 3452 + [[package]] 3453 3453 + name = "whoami" 3454 3454 + version = "1.6.1" 3455 3455 + source = "registry+https://github.com/rust-lang/crates.io-index" 3456 3456 + checksum = "5d4a4db5077702ca3015d3d02d74974948aba2ad9e12ab7df718ee64ccd7e97d" 3457 3457 + dependencies = [ 3458 3458 + "libredox", 3459 3459 + "wasite", 3460 3460 + ] 3461 3461 + 3462 3462 + [[package]] 3463 3463 + name = "widestring" 3464 3464 + version = "1.2.1" 3465 3465 + source = "registry+https://github.com/rust-lang/crates.io-index" 3466 3466 + checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471" 3467 3467 + 3468 3468 + [[package]] 3469 3469 + name = "winapi" 3470 3470 + version = "0.3.9" 3471 3471 + source = "registry+https://github.com/rust-lang/crates.io-index" 3472 3472 + checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419" 3473 3473 + dependencies = [ 3474 3474 + "winapi-i686-pc-windows-gnu", 3475 3475 + "winapi-x86_64-pc-windows-gnu", 3476 3476 + ] 3477 3477 + 3478 3478 + [[package]] 3479 3479 + name = "winapi-i686-pc-windows-gnu" 3480 3480 + version = "0.4.0" 3481 3481 + source = "registry+https://github.com/rust-lang/crates.io-index" 3482 3482 + checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" 3483 3483 + 3484 3484 + [[package]] 3485 3485 + name = "winapi-x86_64-pc-windows-gnu" 3486 3486 + version = "0.4.0" 3487 3487 + source = "registry+https://github.com/rust-lang/crates.io-index" 3488 3488 + checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" 3489 3489 + 3490 3490 + [[package]] 3491 3491 + name = "windows-core" 3492 3492 + version = "0.62.2" 3493 3493 + source = "registry+https://github.com/rust-lang/crates.io-index" 3494 3494 + checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb" 3495 3495 + dependencies = [ 3496 3496 + "windows-implement", 3497 3497 + "windows-interface", 3498 3498 + "windows-link", 3499 3499 + "windows-result", 3500 3500 + "windows-strings", 3501 3501 + ] 3502 3502 + 3503 3503 + [[package]] 3504 3504 + name = "windows-implement" 3505 3505 + version = "0.60.2" 3506 3506 + source = "registry+https://github.com/rust-lang/crates.io-index" 3507 3507 + checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf" 3508 3508 + dependencies = [ 3509 3509 + "proc-macro2", 3510 3510 + "quote", 3511 3511 + "syn", 3512 3512 + ] 3513 3513 + 3514 3514 + [[package]] 3515 3515 + name = "windows-interface" 3516 3516 + version = "0.59.3" 3517 3517 + source = "registry+https://github.com/rust-lang/crates.io-index" 3518 3518 + checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358" 3519 3519 + dependencies = [ 3520 3520 + "proc-macro2", 3521 3521 + "quote", 3522 3522 + "syn", 3523 3523 + ] 3524 3524 + 3525 3525 + [[package]] 3526 3526 + name = "windows-link" 3527 3527 + version = "0.2.1" 3528 3528 + source = "registry+https://github.com/rust-lang/crates.io-index" 3529 3529 + checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" 3530 3530 + 3531 3531 + [[package]] 3532 3532 + name = "windows-result" 3533 3533 + version = "0.4.1" 3534 3534 + source = "registry+https://github.com/rust-lang/crates.io-index" 3535 3535 + checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5" 3536 3536 + dependencies = [ 3537 3537 + "windows-link", 3538 3538 + ] 3539 3539 + 3540 3540 + [[package]] 3541 3541 + name = "windows-strings" 3542 3542 + version = "0.5.1" 3543 3543 + source = "registry+https://github.com/rust-lang/crates.io-index" 3544 3544 + checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091" 3545 3545 + dependencies = [ 3546 3546 + "windows-link", 3547 3547 + ] 3548 3548 + 3549 3549 + [[package]] 3550 3550 + name = "windows-sys" 3551 3551 + version = "0.48.0" 3552 3552 + source = "registry+https://github.com/rust-lang/crates.io-index" 3553 3553 + checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9" 3554 3554 + dependencies = [ 3555 3555 + "windows-targets 0.48.5", 3556 3556 + ] 3557 3557 + 3558 3558 + [[package]] 3559 3559 + name = "windows-sys" 3560 3560 + version = "0.52.0" 3561 3561 + source = "registry+https://github.com/rust-lang/crates.io-index" 3562 3562 + checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d" 3563 3563 + dependencies = [ 3564 3564 + "windows-targets 0.52.6", 3565 3565 + ] 3566 3566 + 3567 3567 + [[package]] 3568 3568 + name = "windows-sys" 3569 3569 + version = "0.60.2" 3570 3570 + source = "registry+https://github.com/rust-lang/crates.io-index" 3571 3571 + checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb" 3572 3572 + dependencies = [ 3573 3573 + "windows-targets 0.53.5", 3574 3574 + ] 3575 3575 + 3576 3576 + [[package]] 3577 3577 + name = "windows-sys" 3578 3578 + version = "0.61.2" 3579 3579 + source = "registry+https://github.com/rust-lang/crates.io-index" 3580 3580 + checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" 3581 3581 + dependencies = [ 3582 3582 + "windows-link", 3583 3583 + ] 3584 3584 + 3585 3585 + [[package]] 3586 3586 + name = "windows-targets" 3587 3587 + version = "0.48.5" 3588 3588 + source = "registry+https://github.com/rust-lang/crates.io-index" 3589 3589 + checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c" 3590 3590 + dependencies = [ 3591 3591 + "windows_aarch64_gnullvm 0.48.5", 3592 3592 + "windows_aarch64_msvc 0.48.5", 3593 3593 + "windows_i686_gnu 0.48.5", 3594 3594 + "windows_i686_msvc 0.48.5", 3595 3595 + "windows_x86_64_gnu 0.48.5", 3596 3596 + "windows_x86_64_gnullvm 0.48.5", 3597 3597 + "windows_x86_64_msvc 0.48.5", 3598 3598 + ] 3599 3599 + 3600 3600 + [[package]] 3601 3601 + name = "windows-targets" 3602 3602 + version = "0.52.6" 3603 3603 + source = "registry+https://github.com/rust-lang/crates.io-index" 3604 3604 + checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973" 3605 3605 + dependencies = [ 3606 3606 + "windows_aarch64_gnullvm 0.52.6", 3607 3607 + "windows_aarch64_msvc 0.52.6", 3608 3608 + "windows_i686_gnu 0.52.6", 3609 3609 + "windows_i686_gnullvm 0.52.6", 3610 3610 + "windows_i686_msvc 0.52.6", 3611 3611 + "windows_x86_64_gnu 0.52.6", 3612 3612 + "windows_x86_64_gnullvm 0.52.6", 3613 3613 + "windows_x86_64_msvc 0.52.6", 3614 3614 + ] 3615 3615 + 3616 3616 + [[package]] 3617 3617 + name = "windows-targets" 3618 3618 + version = "0.53.5" 3619 3619 + source = "registry+https://github.com/rust-lang/crates.io-index" 3620 3620 + checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3" 3621 3621 + dependencies = [ 3622 3622 + "windows-link", 3623 3623 + "windows_aarch64_gnullvm 0.53.1", 3624 3624 + "windows_aarch64_msvc 0.53.1", 3625 3625 + "windows_i686_gnu 0.53.1", 3626 3626 + "windows_i686_gnullvm 0.53.1", 3627 3627 + "windows_i686_msvc 0.53.1", 3628 3628 + "windows_x86_64_gnu 0.53.1", 3629 3629 + "windows_x86_64_gnullvm 0.53.1", 3630 3630 + "windows_x86_64_msvc 0.53.1", 3631 3631 + ] 3632 3632 + 3633 3633 + [[package]] 3634 3634 + name = "windows_aarch64_gnullvm" 3635 3635 + version = "0.48.5" 3636 3636 + source = "registry+https://github.com/rust-lang/crates.io-index" 3637 3637 + checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8" 3638 3638 + 3639 3639 + [[package]] 3640 3640 + name = "windows_aarch64_gnullvm" 3641 3641 + version = "0.52.6" 3642 3642 + source = "registry+https://github.com/rust-lang/crates.io-index" 3643 3643 + checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" 3644 3644 + 3645 3645 + [[package]] 3646 3646 + name = "windows_aarch64_gnullvm" 3647 3647 + version = "0.53.1" 3648 3648 + source = "registry+https://github.com/rust-lang/crates.io-index" 3649 3649 + checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53" 3650 3650 + 3651 3651 + [[package]] 3652 3652 + name = "windows_aarch64_msvc" 3653 3653 + version = "0.48.5" 3654 3654 + source = "registry+https://github.com/rust-lang/crates.io-index" 3655 3655 + checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc" 3656 3656 + 3657 3657 + [[package]] 3658 3658 + name = "windows_aarch64_msvc" 3659 3659 + version = "0.52.6" 3660 3660 + source = "registry+https://github.com/rust-lang/crates.io-index" 3661 3661 + checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" 3662 3662 + 3663 3663 + [[package]] 3664 3664 + name = "windows_aarch64_msvc" 3665 3665 + version = "0.53.1" 3666 3666 + source = "registry+https://github.com/rust-lang/crates.io-index" 3667 3667 + checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006" 3668 3668 + 3669 3669 + [[package]] 3670 3670 + name = "windows_i686_gnu" 3671 3671 + version = "0.48.5" 3672 3672 + source = "registry+https://github.com/rust-lang/crates.io-index" 3673 3673 + checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e" 3674 3674 + 3675 3675 + [[package]] 3676 3676 + name = "windows_i686_gnu" 3677 3677 + version = "0.52.6" 3678 3678 + source = "registry+https://github.com/rust-lang/crates.io-index" 3679 3679 + checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" 3680 3680 + 3681 3681 + [[package]] 3682 3682 + name = "windows_i686_gnu" 3683 3683 + version = "0.53.1" 3684 3684 + source = "registry+https://github.com/rust-lang/crates.io-index" 3685 3685 + checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3" 3686 3686 + 3687 3687 + [[package]] 3688 3688 + name = "windows_i686_gnullvm" 3689 3689 + version = "0.52.6" 3690 3690 + source = "registry+https://github.com/rust-lang/crates.io-index" 3691 3691 + checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" 3692 3692 + 3693 3693 + [[package]] 3694 3694 + name = "windows_i686_gnullvm" 3695 3695 + version = "0.53.1" 3696 3696 + source = "registry+https://github.com/rust-lang/crates.io-index" 3697 3697 + checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c" 3698 3698 + 3699 3699 + [[package]] 3700 3700 + name = "windows_i686_msvc" 3701 3701 + version = "0.48.5" 3702 3702 + source = "registry+https://github.com/rust-lang/crates.io-index" 3703 3703 + checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406" 3704 3704 + 3705 3705 + [[package]] 3706 3706 + name = "windows_i686_msvc" 3707 3707 + version = "0.52.6" 3708 3708 + source = "registry+https://github.com/rust-lang/crates.io-index" 3709 3709 + checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" 3710 3710 + 3711 3711 + [[package]] 3712 3712 + name = "windows_i686_msvc" 3713 3713 + version = "0.53.1" 3714 3714 + source = "registry+https://github.com/rust-lang/crates.io-index" 3715 3715 + checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2" 3716 3716 + 3717 3717 + [[package]] 3718 3718 + name = "windows_x86_64_gnu" 3719 3719 + version = "0.48.5" 3720 3720 + source = "registry+https://github.com/rust-lang/crates.io-index" 3721 3721 + checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e" 3722 3722 + 3723 3723 + [[package]] 3724 3724 + name = "windows_x86_64_gnu" 3725 3725 + version = "0.52.6" 3726 3726 + source = "registry+https://github.com/rust-lang/crates.io-index" 3727 3727 + checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" 3728 3728 + 3729 3729 + [[package]] 3730 3730 + name = "windows_x86_64_gnu" 3731 3731 + version = "0.53.1" 3732 3732 + source = "registry+https://github.com/rust-lang/crates.io-index" 3733 3733 + checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499" 3734 3734 + 3735 3735 + [[package]] 3736 3736 + name = "windows_x86_64_gnullvm" 3737 3737 + version = "0.48.5" 3738 3738 + source = "registry+https://github.com/rust-lang/crates.io-index" 3739 3739 + checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc" 3740 3740 + 3741 3741 + [[package]] 3742 3742 + name = "windows_x86_64_gnullvm" 3743 3743 + version = "0.52.6" 3744 3744 + source = "registry+https://github.com/rust-lang/crates.io-index" 3745 3745 + checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" 3746 3746 + 3747 3747 + [[package]] 3748 3748 + name = "windows_x86_64_gnullvm" 3749 3749 + version = "0.53.1" 3750 3750 + source = "registry+https://github.com/rust-lang/crates.io-index" 3751 3751 + checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1" 3752 3752 + 3753 3753 + [[package]] 3754 3754 + name = "windows_x86_64_msvc" 3755 3755 + version = "0.48.5" 3756 3756 + source = "registry+https://github.com/rust-lang/crates.io-index" 3757 3757 + checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538" 3758 3758 + 3759 3759 + [[package]] 3760 3760 + name = "windows_x86_64_msvc" 3761 3761 + version = "0.52.6" 3762 3762 + source = "registry+https://github.com/rust-lang/crates.io-index" 3763 3763 + checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" 3764 3764 + 3765 3765 + [[package]] 3766 3766 + name = "windows_x86_64_msvc" 3767 3767 + version = "0.53.1" 3768 3768 + source = "registry+https://github.com/rust-lang/crates.io-index" 3769 3769 + checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650" 3770 3770 + 3771 3771 + [[package]] 3772 3772 + name = "winnow" 3773 3773 + version = "0.7.14" 3774 3774 + source = "registry+https://github.com/rust-lang/crates.io-index" 3775 3775 + checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829" 3776 3776 + 3777 3777 + [[package]] 3778 3778 + name = "winreg" 3779 3779 + version = "0.50.0" 3780 3780 + source = "registry+https://github.com/rust-lang/crates.io-index" 3781 3781 + checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1" 3782 3782 + dependencies = [ 3783 3783 + "cfg-if", 3784 3784 + "windows-sys 0.48.0", 3785 3785 + ] 3786 3786 + 3787 3787 + [[package]] 3788 3788 + name = "wit-bindgen" 3789 3789 + version = "0.51.0" 3790 3790 + source = "registry+https://github.com/rust-lang/crates.io-index" 3791 3791 + checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5" 3792 3792 + 3793 3793 + [[package]] 3794 3794 + name = "writeable" 3795 3795 + version = "0.6.2" 3796 3796 + source = "registry+https://github.com/rust-lang/crates.io-index" 3797 3797 + checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9" 3798 3798 + 3799 3799 + [[package]] 3800 3800 + name = "yoke" 3801 3801 + version = "0.8.1" 3802 3802 + source = "registry+https://github.com/rust-lang/crates.io-index" 3803 3803 + checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954" 3804 3804 + dependencies = [ 3805 3805 + "stable_deref_trait", 3806 3806 + "yoke-derive", 3807 3807 + "zerofrom", 3808 3808 + ] 3809 3809 + 3810 3810 + [[package]] 3811 3811 + name = "yoke-derive" 3812 3812 + version = "0.8.1" 3813 3813 + source = "registry+https://github.com/rust-lang/crates.io-index" 3814 3814 + checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d" 3815 3815 + dependencies = [ 3816 3816 + "proc-macro2", 3817 3817 + "quote", 3818 3818 + "syn", 3819 3819 + "synstructure", 3820 3820 + ] 3821 3821 + 3822 3822 + [[package]] 3823 3823 + name = "zerocopy" 3824 3824 + version = "0.8.37" 3825 3825 + source = "registry+https://github.com/rust-lang/crates.io-index" 3826 3826 + checksum = "7456cf00f0685ad319c5b1693f291a650eaf345e941d082fc4e03df8a03996ac" 3827 3827 + dependencies = [ 3828 3828 + "zerocopy-derive", 3829 3829 + ] 3830 3830 + 3831 3831 + [[package]] 3832 3832 + name = "zerocopy-derive" 3833 3833 + version = "0.8.37" 3834 3834 + source = "registry+https://github.com/rust-lang/crates.io-index" 3835 3835 + checksum = "1328722bbf2115db7e19d69ebcc15e795719e2d66b60827c6a69a117365e37a0" 3836 3836 + dependencies = [ 3837 3837 + "proc-macro2", 3838 3838 + "quote", 3839 3839 + "syn", 3840 3840 + ] 3841 3841 + 3842 3842 + [[package]] 3843 3843 + name = "zerofrom" 3844 3844 + version = "0.1.6" 3845 3845 + source = "registry+https://github.com/rust-lang/crates.io-index" 3846 3846 + checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5" 3847 3847 + dependencies = [ 3848 3848 + "zerofrom-derive", 3849 3849 + ] 3850 3850 + 3851 3851 + [[package]] 3852 3852 + name = "zerofrom-derive" 3853 3853 + version = "0.1.6" 3854 3854 + source = "registry+https://github.com/rust-lang/crates.io-index" 3855 3855 + checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502" 3856 3856 + dependencies = [ 3857 3857 + "proc-macro2", 3858 3858 + "quote", 3859 3859 + "syn", 3860 3860 + "synstructure", 3861 3861 + ] 3862 3862 + 3863 3863 + [[package]] 3864 3864 + name = "zeroize" 3865 3865 + version = "1.8.2" 3866 3866 + source = "registry+https://github.com/rust-lang/crates.io-index" 3867 3867 + checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0" 3868 3868 + 3869 3869 + [[package]] 3870 3870 + name = "zerotrie" 3871 3871 + version = "0.2.3" 3872 3872 + source = "registry+https://github.com/rust-lang/crates.io-index" 3873 3873 + checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851" 3874 3874 + dependencies = [ 3875 3875 + "displaydoc", 3876 3876 + "yoke", 3877 3877 + "zerofrom", 3878 3878 + ] 3879 3879 + 3880 3880 + [[package]] 3881 3881 + name = "zerovec" 3882 3882 + version = "0.11.5" 3883 3883 + source = "registry+https://github.com/rust-lang/crates.io-index" 3884 3884 + checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002" 3885 3885 + dependencies = [ 3886 3886 + "yoke", 3887 3887 + "zerofrom", 3888 3888 + "zerovec-derive", 3889 3889 + ] 3890 3890 + 3891 3891 + [[package]] 3892 3892 + name = "zerovec-derive" 3893 3893 + version = "0.11.2" 3894 3894 + source = "registry+https://github.com/rust-lang/crates.io-index" 3895 3895 + checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3" 3896 3896 + dependencies = [ 3897 3897 + "proc-macro2", 3898 3898 + "quote", 3899 3899 + "syn", 3900 3900 + ] 3901 3901 + 3902 3902 + [[package]] 3903 3903 + name = "zmij" 3904 3904 + version = "1.0.18" 3905 3905 + source = "registry+https://github.com/rust-lang/crates.io-index" 3906 3906 + checksum = "1966f8ac2c1f76987d69a74d0e0f929241c10e78136434e3be70ff7f58f64214"

+51

Cargo.toml

··· 1 1 + [workspace] 2 2 + resolver = "2" 3 3 + members = [ 4 4 + "onis-common", 5 5 + "onis-appview", 6 6 + "onis-dns", 7 7 + "onis-verify", 8 8 + ] 9 9 + 10 10 + [workspace.metadata.crane] 11 11 + name = "onis" 12 12 + 13 13 + [workspace.package] 14 14 + version = "0.1.0" 15 15 + edition = "2024" 16 16 + license = "MIT" 17 17 + repository = "https://github.com/blu/onis" 18 18 + 19 19 + [workspace.lints.clippy] 20 20 + unwrap_used = "deny" 21 21 + expect_used = "deny" 22 22 + panic = "deny" 23 23 + todo = "deny" 24 24 + indexing_slicing = "deny" 25 25 + unwrap_in_result = "deny" 26 26 + pedantic = "warn" 27 27 + 28 28 + [workspace.dependencies] 29 29 + onis-common = { path = "onis-common" } 30 30 + serde = { version = "1.0.228", features = ["derive"] } 31 31 + serde_json = "1.0.149" 32 32 + tracing = "0.1.44" 33 33 + tracing-subscriber = { version = "0.3.22", features = ["json", "env-filter"] } 34 34 + sqlx = { version = "0.8.6", features = ["runtime-tokio", "sqlite"] } 35 35 + anyhow = "1.0.100" 36 36 + thiserror = "2.0.18" 37 37 + tokio = { version = "1.49.0", features = ["full"] } 38 38 + tokio-tungstenite = { version = "0.28", features = ["native-tls"] } 39 39 + futures-util = "0.3.31" 40 40 + async-trait = "0.1.89" 41 41 + atrium-api = "0.25.7" 42 42 + axum = "0.8.8" 43 43 + reqwest = { version = "0.13.1", default-features = false, features = ["json"] } 44 44 + chrono = "0.4.43" 45 45 + toml = "0.9.8" 46 46 + hickory-server = "0.25.1" 47 47 + hickory-proto = "0.25.1" 48 48 + hickory-resolver = "0.25.1" 49 49 + metrics = "0.24" 50 50 + metrics-exporter-prometheus = "0.18" 51 51 +

+172

README.md

··· 1 1 + # onis 2 2 + 3 3 + decentralized dns over atproto :3 4 4 + 5 5 + [pdsls](https://pdsls.dev) is the easiest way to manage your records currently. 6 6 + 7 7 + needed: 8 8 + - atproto account 9 9 + - domain 10 10 + - access to the domain's current NS settings 11 11 + 12 12 + ## 1. declare your zone 13 13 + 14 14 + create a `systems.kiri.zone` record on your PDS: 15 15 + 16 16 + ```json 17 17 + { 18 18 + "$type": "systems.kiri.zone", 19 19 + "domain": "example.com" 20 20 + } 21 21 + ``` 22 22 + 23 23 + ## 2. set up verification 24 24 + 25 25 + onis needs to confirm you actually control the domain two things are checked: 26 26 + 27 27 + **a) NS delegation** 28 28 + 29 29 + ``` 30 30 + ns1.kiri.systems 31 31 + ns2.kiri.systems 32 32 + ``` 33 33 + 34 34 + if you are running this yourself it should match your `expected_ns` config 35 35 + 36 36 + **b) TXT ownership proof** 37 37 + 38 38 + ``` 39 39 + _onis-verify.example.com. TXT "did:plc:your-did-here" 40 40 + ``` 41 41 + 42 42 + once both of these are passing your domain is verified :D 43 43 + 44 44 + ## 3. publish dns records 45 45 + 46 46 + you will also need to copy the TXT `_onis-verify.example.com` verification check to a `systems.kiri.dns#txtRecord` as well. 47 47 + 48 48 + **A record:** 49 49 + 50 50 + ```json 51 51 + { 52 52 + "$type": "systems.kiri.dns", 53 53 + "domain": "example.com", 54 54 + "ttl": 300, 55 55 + "record": { 56 56 + "$type": "systems.kiri.dns#aRecord", 57 57 + "address": "93.184.216.34" 58 58 + } 59 59 + } 60 60 + ``` 61 61 + 62 62 + **AAAA record:** 63 63 + 64 64 + ```json 65 65 + { 66 66 + "$type": "systems.kiri.dns", 67 67 + "domain": "example.com", 68 68 + "ttl": 300, 69 69 + "record": { 70 70 + "$type": "systems.kiri.dns#aaaaRecord", 71 71 + "address": "2001:db8::1" 72 72 + } 73 73 + } 74 74 + ``` 75 75 + 76 76 + **CNAME record:** 77 77 + 78 78 + ```json 79 79 + { 80 80 + "$type": "systems.kiri.dns", 81 81 + "domain": "www.example.com", 82 82 + "ttl": 300, 83 83 + "record": { 84 84 + "$type": "systems.kiri.dns#cnameRecord", 85 85 + "cname": "example.com" 86 86 + } 87 87 + } 88 88 + ``` 89 89 + 90 90 + **MX record:** 91 91 + 92 92 + ```json 93 93 + { 94 94 + "$type": "systems.kiri.dns", 95 95 + "domain": "example.com", 96 96 + "ttl": 300, 97 97 + "record": { 98 98 + "$type": "systems.kiri.dns#mxRecord", 99 99 + "preference": 10, 100 100 + "exchange": "mail.example.com" 101 101 + } 102 102 + } 103 103 + ``` 104 104 + 105 105 + **TXT record:** 106 106 + 107 107 + ```json 108 108 + { 109 109 + "$type": "systems.kiri.dns", 110 110 + "domain": "example.com", 111 111 + "ttl": 300, 112 112 + "record": { 113 113 + "$type": "systems.kiri.dns#txtRecord", 114 114 + "values": ["v=spf1 include:example.com ~all"] 115 115 + } 116 116 + } 117 117 + ``` 118 118 + 119 119 + **SRV record:** 120 120 + 121 121 + ```json 122 122 + { 123 123 + "$type": "systems.kiri.dns", 124 124 + "domain": "_sip._tcp.example.com", 125 125 + "ttl": 300, 126 126 + "record": { 127 127 + "$type": "systems.kiri.dns#srvRecord", 128 128 + "priority": 10, 129 129 + "weight": 60, 130 130 + "port": 5060, 131 131 + "target": "sip.example.com" 132 132 + } 133 133 + } 134 134 + ``` 135 135 + 136 136 + `ttl` is optional on all records — if you leave it out, the zone's SOA minimum is used (default 300s). 137 137 + *WARNING* => on ns1.kiri.systems and ns2.kiri.systems this is a floor of 60 seconds. 138 138 + 139 139 + ## full example 140 140 + 141 141 + Here's what a real setup looks like. User `did:plc:adtzorbhmmjbzxsl2y4vqlqs` setting up `blu.red`: 142 142 + 143 143 + 144 144 + **zone declaration** (`systems.kiri.zone` collection): 145 145 + https://pds.ls/at://did:plc:adtzorbhmmjbzxsl2y4vqlqs/systems.kiri.zone/3mdr6rm2trm2y 146 146 + 147 147 + ```json 148 148 + { 149 149 + "$type": "systems.kiri.zone", 150 150 + "domain": "blu.red" 151 151 + } 152 152 + ``` 153 153 + 154 154 + 155 155 + **verification TXT** (`systems.kiri.dns` collection): 156 156 + https://pds.ls/at://did:plc:adtzorbhmmjbzxsl2y4vqlqs/systems.kiri.dns/3mdt7enp5nu2y 157 157 + 158 158 + ```json 159 159 + { 160 160 + "$type": "systems.kiri.dns", 161 161 + "domain": "_onis-verify.blu.red", 162 162 + "record": { 163 163 + "$type": "systems.kiri.dns#txtRecord", 164 164 + "values": [ 165 165 + "did:plc:adtzorbhmmjbzxsl2y4vqlqs" 166 166 + ] 167 167 + } 168 168 + } 169 169 + ``` 170 170 + ## License 171 171 + 172 172 + MIT

+77

flake.lock

··· 1 1 + { 2 2 + "nodes": { 3 3 + "crane": { 4 4 + "locked": { 5 5 + "lastModified": 1769737823, 6 6 + "narHash": "sha256-DrBaNpZ+sJ4stXm+0nBX7zqZT9t9P22zbk6m5YhQxS4=", 7 7 + "owner": "ipetkov", 8 8 + "repo": "crane", 9 9 + "rev": "b2f45c3830aa96b7456a4c4bc327d04d7a43e1ba", 10 10 + "type": "github" 11 11 + }, 12 12 + "original": { 13 13 + "owner": "ipetkov", 14 14 + "repo": "crane", 15 15 + "type": "github" 16 16 + } 17 17 + }, 18 18 + "flake-utils": { 19 19 + "inputs": { 20 20 + "systems": "systems" 21 21 + }, 22 22 + "locked": { 23 23 + "lastModified": 1731533236, 24 24 + "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=", 25 25 + "owner": "numtide", 26 26 + "repo": "flake-utils", 27 27 + "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b", 28 28 + "type": "github" 29 29 + }, 30 30 + "original": { 31 31 + "owner": "numtide", 32 32 + "repo": "flake-utils", 33 33 + "type": "github" 34 34 + } 35 35 + }, 36 36 + "nixpkgs": { 37 37 + "locked": { 38 38 + "lastModified": 1769740369, 39 39 + "narHash": "sha256-xKPyJoMoXfXpDM5DFDZDsi9PHArf2k5BJjvReYXoFpM=", 40 40 + "owner": "NixOS", 41 41 + "repo": "nixpkgs", 42 42 + "rev": "6308c3b21396534d8aaeac46179c14c439a89b8a", 43 43 + "type": "github" 44 44 + }, 45 45 + "original": { 46 46 + "owner": "NixOS", 47 47 + "ref": "nixpkgs-unstable", 48 48 + "repo": "nixpkgs", 49 49 + "type": "github" 50 50 + } 51 51 + }, 52 52 + "root": { 53 53 + "inputs": { 54 54 + "crane": "crane", 55 55 + "flake-utils": "flake-utils", 56 56 + "nixpkgs": "nixpkgs" 57 57 + } 58 58 + }, 59 59 + "systems": { 60 60 + "locked": { 61 61 + "lastModified": 1681028828, 62 62 + "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=", 63 63 + "owner": "nix-systems", 64 64 + "repo": "default", 65 65 + "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e", 66 66 + "type": "github" 67 67 + }, 68 68 + "original": { 69 69 + "owner": "nix-systems", 70 70 + "repo": "default", 71 71 + "type": "github" 72 72 + } 73 73 + } 74 74 + }, 75 75 + "root": "root", 76 76 + "version": 7 77 77 + }

+411

flake.nix

··· 1 1 + { 2 2 + description = "onis — decentralized DNS over ATProto"; 3 3 + 4 4 + inputs = { 5 5 + nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable"; 6 6 + crane.url = "github:ipetkov/crane"; 7 7 + flake-utils.url = "github:numtide/flake-utils"; 8 8 + }; 9 9 + 10 10 + outputs = { self, nixpkgs, crane, flake-utils, ... }: 11 11 + let 12 12 + perSystem = flake-utils.lib.eachSystem [ "x86_64-linux" ] (system: 13 13 + let 14 14 + pkgs = import nixpkgs { 15 15 + inherit system; 16 16 + }; 17 17 + 18 18 + craneLib = crane.mkLib pkgs; 19 19 + 20 20 + commonArgs = { 21 21 + src = craneLib.cleanCargoSource ./.; 22 22 + 23 23 + buildInputs = with pkgs; [ 24 24 + openssl 25 25 + ]; 26 26 + 27 27 + nativeBuildInputs = with pkgs; [ 28 28 + pkg-config 29 29 + ]; 30 30 + }; 31 31 + 32 32 + cargoArtifacts = craneLib.buildDepsOnly commonArgs; 33 33 + 34 34 + onis-appview = craneLib.buildPackage (commonArgs // { 35 35 + inherit cargoArtifacts; 36 36 + cargoExtraArgs = "--bin onis-appview"; 37 37 + }); 38 38 + 39 39 + onis-dns = craneLib.buildPackage (commonArgs // { 40 40 + inherit cargoArtifacts; 41 41 + cargoExtraArgs = "--bin onis-dns"; 42 42 + }); 43 43 + 44 44 + onis-verify = craneLib.buildPackage (commonArgs // { 45 45 + inherit cargoArtifacts; 46 46 + cargoExtraArgs = "--bin onis-verify"; 47 47 + }); 48 48 + in 49 49 + { 50 50 + packages = { 51 51 + inherit onis-appview onis-dns onis-verify; 52 52 + default = pkgs.symlinkJoin { 53 53 + name = "onis"; 54 54 + paths = [ onis-appview onis-dns onis-verify ]; 55 55 + }; 56 56 + }; 57 57 + 58 58 + checks = { 59 59 + onis-clippy = craneLib.cargoClippy (commonArgs // { 60 60 + inherit cargoArtifacts; 61 61 + cargoClippyExtraArgs = "-- --deny warnings"; 62 62 + }); 63 63 + 64 64 + onis-fmt = craneLib.cargoFmt { 65 65 + src = commonArgs.src; 66 66 + }; 67 67 + 68 68 + onis-test = craneLib.cargoNextest (commonArgs // { 69 69 + inherit cargoArtifacts; 70 70 + }); 71 71 + }; 72 72 + 73 73 + devShells.default = craneLib.devShell { 74 74 + checks = self.checks.${system}; 75 75 + 76 76 + packages = with pkgs; [ 77 77 + clippy 78 78 + rust-analyzer 79 79 + sqlx-cli 80 80 + cargo-watch 81 81 + pkg-config 82 82 + openssl 83 83 + sqlite 84 84 + dig 85 85 + ]; 86 86 + }; 87 87 + } 88 88 + ); 89 89 + in 90 90 + perSystem // { 91 91 + 92 92 + nixosModules.default = { config, lib, pkgs, ... }: 93 93 + let 94 94 + inherit (lib) mkEnableOption mkOption types mkIf mkMerge; 95 95 + cfg = config.services.onis; 96 96 + settingsFormat = pkgs.formats.toml { }; 97 97 + 98 98 + configFile = settingsFormat.generate "onis.toml" { 99 99 + appview = { 100 100 + inherit (cfg.appview) bind tap_url tap_acks tap_reconnect_delay index_path db_dir; 101 101 + database = { 102 102 + inherit (cfg.appview.database) busy_timeout user_max_connections index_max_connections; 103 103 + }; 104 104 + }; 105 105 + dns = { 106 106 + inherit (cfg.dns) appview_url bind port tcp_timeout ttl_floor slow_query_threshold_ms ns metrics_bind; 107 107 + soa = { 108 108 + inherit (cfg.dns.soa) ttl refresh retry expire minimum mname rname; 109 109 + }; 110 110 + }; 111 111 + verify = { 112 112 + inherit (cfg.verify) appview_url bind port check_interval recheck_interval expected_ns nameservers dns_port; 113 113 + }; 114 114 + }; 115 115 + in 116 116 + { 117 117 + options.services.onis = { 118 118 + 119 119 + # ----------------------------------------------------------------- 120 120 + # Appview 121 121 + # ----------------------------------------------------------------- 122 122 + appview = { 123 123 + enable = mkEnableOption "onis appview service"; 124 124 + 125 125 + package = mkOption { 126 126 + type = types.package; 127 127 + default = self.packages.${pkgs.system}.onis-appview; 128 128 + defaultText = lib.literalExpression "self.packages.\${pkgs.system}.onis-appview"; 129 129 + description = "The onis-appview package to use."; 130 130 + }; 131 131 + 132 132 + bind = mkOption { 133 133 + type = types.str; 134 134 + default = "localhost:3000"; 135 135 + description = "Address and port for the appview HTTP server."; 136 136 + }; 137 137 + 138 138 + tap_url = mkOption { 139 139 + type = types.str; 140 140 + default = "ws://localhost:2480/channel"; 141 141 + description = "WebSocket URL for the TAP firehose."; 142 142 + }; 143 143 + 144 144 + tap_acks = mkOption { 145 145 + type = types.bool; 146 146 + default = true; 147 147 + description = "Whether to acknowledge TAP messages."; 148 148 + }; 149 149 + 150 150 + tap_reconnect_delay = mkOption { 151 151 + type = types.int; 152 152 + default = 5; 153 153 + description = "Seconds to wait before reconnecting after a TAP connection error."; 154 154 + }; 155 155 + 156 156 + index_path = mkOption { 157 157 + type = types.str; 158 158 + default = "/var/lib/onis-appview/index.db"; 159 159 + description = "Path to the shared index SQLite database."; 160 160 + }; 161 161 + 162 162 + db_dir = mkOption { 163 163 + type = types.str; 164 164 + default = "/var/lib/onis-appview/dbs"; 165 165 + description = "Directory for per-user SQLite databases."; 166 166 + }; 167 167 + 168 168 + database = { 169 169 + busy_timeout = mkOption { 170 170 + type = types.int; 171 171 + default = 5; 172 172 + description = "Seconds to wait when the database is locked."; 173 173 + }; 174 174 + 175 175 + user_max_connections = mkOption { 176 176 + type = types.int; 177 177 + default = 5; 178 178 + description = "Max connections for per-user database pools."; 179 179 + }; 180 180 + 181 181 + index_max_connections = mkOption { 182 182 + type = types.int; 183 183 + default = 10; 184 184 + description = "Max connections for the shared index database pool."; 185 185 + }; 186 186 + }; 187 187 + }; 188 188 + 189 189 + # ----------------------------------------------------------------- 190 190 + # DNS 191 191 + # ----------------------------------------------------------------- 192 192 + dns = { 193 193 + enable = mkEnableOption "onis DNS server"; 194 194 + 195 195 + package = mkOption { 196 196 + type = types.package; 197 197 + default = self.packages.${pkgs.system}.onis-dns; 198 198 + defaultText = lib.literalExpression "self.packages.\${pkgs.system}.onis-dns"; 199 199 + description = "The onis-dns package to use."; 200 200 + }; 201 201 + 202 202 + appview_url = mkOption { 203 203 + type = types.str; 204 204 + default = "http://localhost:3000"; 205 205 + description = "URL of the onis appview API."; 206 206 + }; 207 207 + 208 208 + bind = mkOption { 209 209 + type = types.str; 210 210 + default = "0.0.0.0"; 211 211 + description = "Address for the DNS server to listen on."; 212 212 + }; 213 213 + 214 214 + port = mkOption { 215 215 + type = types.port; 216 216 + default = 53; 217 217 + description = "Port for the DNS server."; 218 218 + }; 219 219 + 220 220 + tcp_timeout = mkOption { 221 221 + type = types.int; 222 222 + default = 30; 223 223 + description = "Seconds before a TCP connection times out."; 224 224 + }; 225 225 + 226 226 + ttl_floor = mkOption { 227 227 + type = types.int; 228 228 + default = 60; 229 229 + description = "Minimum TTL enforced on all DNS responses."; 230 230 + }; 231 231 + 232 232 + slow_query_threshold_ms = mkOption { 233 233 + type = types.int; 234 234 + default = 50; 235 235 + description = "Log a warning for queries slower than this (milliseconds)."; 236 236 + }; 237 237 + 238 238 + ns = mkOption { 239 239 + type = types.listOf types.str; 240 240 + default = [ "ns1.example.com." "ns2.example.com." ]; 241 241 + description = "NS records to serve for all zones (fully qualified, trailing dot)."; 242 242 + }; 243 243 + 244 244 + metrics_bind = mkOption { 245 245 + type = types.str; 246 246 + default = "0.0.0.0:9100"; 247 247 + description = "Address and port for the DNS metrics HTTP server."; 248 248 + }; 249 249 + 250 250 + soa = { 251 251 + ttl = mkOption { 252 252 + type = types.int; 253 253 + default = 3600; 254 254 + description = "SOA record TTL in seconds."; 255 255 + }; 256 256 + 257 257 + refresh = mkOption { 258 258 + type = types.int; 259 259 + default = 3600; 260 260 + description = "SOA refresh interval in seconds."; 261 261 + }; 262 262 + 263 263 + retry = mkOption { 264 264 + type = types.int; 265 265 + default = 900; 266 266 + description = "SOA retry interval in seconds."; 267 267 + }; 268 268 + 269 269 + expire = mkOption { 270 270 + type = types.int; 271 271 + default = 604800; 272 272 + description = "SOA expire interval in seconds."; 273 273 + }; 274 274 + 275 275 + minimum = mkOption { 276 276 + type = types.int; 277 277 + default = 300; 278 278 + description = "SOA minimum (negative cache) TTL in seconds."; 279 279 + }; 280 280 + 281 281 + mname = mkOption { 282 282 + type = types.str; 283 283 + default = "ns1.example.com."; 284 284 + description = "SOA MNAME — primary nameserver, fully qualified."; 285 285 + }; 286 286 + 287 287 + rname = mkOption { 288 288 + type = types.str; 289 289 + default = "admin.example.com."; 290 290 + description = "SOA RNAME — admin email in DNS format, fully qualified."; 291 291 + }; 292 292 + }; 293 293 + }; 294 294 + 295 295 + # ----------------------------------------------------------------- 296 296 + # Verify 297 297 + # ----------------------------------------------------------------- 298 298 + verify = { 299 299 + enable = mkEnableOption "onis verify service"; 300 300 + 301 301 + package = mkOption { 302 302 + type = types.package; 303 303 + default = self.packages.${pkgs.system}.onis-verify; 304 304 + defaultText = lib.literalExpression "self.packages.\${pkgs.system}.onis-verify"; 305 305 + description = "The onis-verify package to use."; 306 306 + }; 307 307 + 308 308 + appview_url = mkOption { 309 309 + type = types.str; 310 310 + default = "http://localhost:3000"; 311 311 + description = "URL of the onis appview API."; 312 312 + }; 313 313 + 314 314 + bind = mkOption { 315 315 + type = types.str; 316 316 + default = "0.0.0.0"; 317 317 + description = "Address for the verify HTTP server to listen on."; 318 318 + }; 319 319 + 320 320 + port = mkOption { 321 321 + type = types.port; 322 322 + default = 3001; 323 323 + description = "Port for the verify HTTP server."; 324 324 + }; 325 325 + 326 326 + check_interval = mkOption { 327 327 + type = types.int; 328 328 + default = 60; 329 329 + description = "Seconds between scheduled verification runs."; 330 330 + }; 331 331 + 332 332 + recheck_interval = mkOption { 333 333 + type = types.int; 334 334 + default = 3600; 335 335 + description = "Seconds a zone must be stale before rechecking."; 336 336 + }; 337 337 + 338 338 + expected_ns = mkOption { 339 339 + type = types.listOf types.str; 340 340 + default = [ "ns1.example.com" "ns2.example.com" ]; 341 341 + description = "Expected NS records that indicate correct delegation."; 342 342 + }; 343 343 + 344 344 + nameservers = mkOption { 345 345 + type = types.listOf types.str; 346 346 + default = [ ]; 347 347 + description = "Optional custom resolver IP addresses."; 348 348 + }; 349 349 + 350 350 + dns_port = mkOption { 351 351 + type = types.port; 352 352 + default = 53; 353 353 + description = "Port used when resolving against custom nameservers."; 354 354 + }; 355 355 + }; 356 356 + }; 357 357 + 358 358 + config = mkMerge [ 359 359 + (mkIf cfg.appview.enable { 360 360 + systemd.services.onis-appview = { 361 361 + description = "onis appview — ATProto DNS appview"; 362 362 + wantedBy = [ "multi-user.target" ]; 363 363 + after = [ "network.target" ]; 364 364 + environment.ONIS_CONFIG = "${configFile}"; 365 365 + serviceConfig = { 366 366 + ExecStart = "${cfg.appview.package}/bin/onis-appview"; 367 367 + DynamicUser = true; 368 368 + StateDirectory = "onis-appview"; 369 369 + Restart = "on-failure"; 370 370 + RestartSec = 5; 371 371 + }; 372 372 + }; 373 373 + }) 374 374 + 375 375 + (mkIf cfg.dns.enable { 376 376 + systemd.services.onis-dns = { 377 377 + description = "onis DNS — authoritative DNS server"; 378 378 + wantedBy = [ "multi-user.target" ]; 379 379 + after = [ "network.target" ]; 380 380 + environment.ONIS_CONFIG = "${configFile}"; 381 381 + serviceConfig = { 382 382 + ExecStart = "${cfg.dns.package}/bin/onis-dns"; 383 383 + DynamicUser = true; 384 384 + StateDirectory = "onis-dns"; 385 385 + Restart = "on-failure"; 386 386 + RestartSec = 5; 387 387 + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; 388 388 + }; 389 389 + }; 390 390 + }) 391 391 + 392 392 + (mkIf cfg.verify.enable { 393 393 + systemd.services.onis-verify = { 394 394 + description = "onis verify — DNS delegation checker"; 395 395 + wantedBy = [ "multi-user.target" ]; 396 396 + after = [ "network.target" ]; 397 397 + environment.ONIS_CONFIG = "${configFile}"; 398 398 + serviceConfig = { 399 399 + ExecStart = "${cfg.verify.package}/bin/onis-verify"; 400 400 + DynamicUser = true; 401 401 + StateDirectory = "onis-verify"; 402 402 + Restart = "on-failure"; 403 403 + RestartSec = 5; 404 404 + }; 405 405 + }; 406 406 + }) 407 407 + ]; 408 408 + }; 409 409 + 410 410 + }; 411 411 + }

+185

lexicons/systems/kiri/dns.json

··· 1 1 + { 2 2 + "lexicon": 1, 3 3 + "id": "systems.kiri.dns", 4 4 + "defs": { 5 5 + "main": { 6 6 + "type": "record", 7 7 + "key": "tid", 8 8 + "description": "A DNS record managed through ATProto.", 9 9 + "record": { 10 10 + "type": "object", 11 11 + "required": ["domain", "record"], 12 12 + "properties": { 13 13 + "domain": { 14 14 + "type": "string", 15 15 + "description": "Fully qualified domain name, lowercase, no trailing dot.", 16 16 + "maxLength": 253 17 17 + }, 18 18 + "ttl": { 19 19 + "type": "integer", 20 20 + "description": "Time to live in seconds. Optional — falls back to SOA minimum for the zone if omitted. Server enforces a 60s floor.", 21 21 + "minimum": 0, 22 22 + "maximum": 2147483647 23 23 + }, 24 24 + "note": { 25 25 + "type": "string", 26 26 + "description": "Attached note for informational reasons, not used by dns.", 27 27 + "maxGraphemes": 256 28 28 + }, 29 29 + "record": { 30 30 + "type": "union", 31 31 + "description": "The DNS record data.", 32 32 + "refs": [ 33 33 + "#aRecord", 34 34 + "#aaaaRecord", 35 35 + "#cnameRecord", 36 36 + "#mxRecord", 37 37 + "#txtRecord", 38 38 + "#srvRecord", 39 39 + "#soaRecord" 40 40 + ] 41 41 + } 42 42 + } 43 43 + } 44 44 + }, 45 45 + 46 46 + "aRecord": { 47 47 + "type": "object", 48 48 + "description": "A 32 bit Internet address.", 49 49 + "required": ["address"], 50 50 + "properties": { 51 51 + "address": { 52 52 + "type": "string", 53 53 + "description": "IPv4 address in dotted-decimal notation.", 54 54 + "maxLength": 15 55 55 + } 56 56 + } 57 57 + }, 58 58 + 59 59 + "aaaaRecord": { 60 60 + "type": "object", 61 61 + "description": "An 128 bit Internet address.", 62 62 + "required": ["address"], 63 63 + "properties": { 64 64 + "address": { 65 65 + "type": "string", 66 66 + "description": "IPv6 address in standard notation.", 67 67 + "maxLength": 45 68 68 + } 69 69 + } 70 70 + }, 71 71 + 72 72 + "cnameRecord": { 73 73 + "type": "object", 74 74 + "description": "A domain name which specifies the canonical or primary name for the owner.", 75 75 + "required": ["cname"], 76 76 + "properties": { 77 77 + "cname": { 78 78 + "type": "string", 79 79 + "description": "The canonical domain name.", 80 80 + "maxLength": 253 81 81 + } 82 82 + } 83 83 + }, 84 84 + 85 85 + "mxRecord": { 86 86 + "type": "object", 87 87 + "description": "A mail exchange record.", 88 88 + "required": ["preference", "exchange"], 89 89 + "properties": { 90 90 + "preference": { 91 91 + "type": "integer", 92 92 + "description": "Priority value. Lower is preferred.", 93 93 + "minimum": 0, 94 94 + "maximum": 65535 95 95 + }, 96 96 + "exchange": { 97 97 + "type": "string", 98 98 + "description": "The mail server hostname.", 99 99 + "maxLength": 253 100 100 + } 101 101 + } 102 102 + }, 103 103 + 104 104 + "txtRecord": { 105 105 + "type": "object", 106 106 + "description": "A text record. TXT-DATA is one or more character strings.", 107 107 + "required": ["values"], 108 108 + "properties": { 109 109 + "values": { 110 110 + "type": "array", 111 111 + "description": "One or more character strings. Each string has a 255-byte max on the wire.", 112 112 + "items": { 113 113 + "type": "string", 114 114 + "maxLength": 255 115 115 + }, 116 116 + "minLength": 1, 117 117 + "maxLength": 16 118 118 + } 119 119 + } 120 120 + }, 121 121 + 122 122 + "srvRecord": { 123 123 + "type": "object", 124 124 + "description": "A service locator record.", 125 125 + "required": ["priority", "weight", "port", "target"], 126 126 + "properties": { 127 127 + "priority": { 128 128 + "type": "integer", 129 129 + "minimum": 0, 130 130 + "maximum": 65535 131 131 + }, 132 132 + "weight": { 133 133 + "type": "integer", 134 134 + "minimum": 0, 135 135 + "maximum": 65535 136 136 + }, 137 137 + "port": { 138 138 + "type": "integer", 139 139 + "minimum": 0, 140 140 + "maximum": 65535 141 141 + }, 142 142 + "target": { 143 143 + "type": "string", 144 144 + "description": "The target hostname.", 145 145 + "maxLength": 253 146 146 + } 147 147 + } 148 148 + }, 149 149 + 150 150 + "soaRecord": { 151 151 + "type": "object", 152 152 + "description": "Start of authority. Optional — system generates defaults if absent. Serial is also generated.", 153 153 + "required": ["mname", "rname", "refresh", "retry", "expire", "minimum"], 154 154 + "properties": { 155 155 + "mname": { 156 156 + "type": "string", 157 157 + "description": "Primary nameserver.", 158 158 + "maxLength": 253 159 159 + }, 160 160 + "rname": { 161 161 + "type": "string", 162 162 + "description": "Responsible person email in DNS format (e.g. admin.example.com).", 163 163 + "maxLength": 253 164 164 + }, 165 165 + "refresh": { 166 166 + "type": "integer", 167 167 + "minimum": 0 168 168 + }, 169 169 + "retry": { 170 170 + "type": "integer", 171 171 + "minimum": 0 172 172 + }, 173 173 + "expire": { 174 174 + "type": "integer", 175 175 + "minimum": 0 176 176 + }, 177 177 + "minimum": { 178 178 + "type": "integer", 179 179 + "description": "Minimum TTL / negative cache TTL. Also used as the fallback TTL for records in this zone that don't specify one.", 180 180 + "minimum": 0 181 181 + } 182 182 + } 183 183 + } 184 184 + } 185 185 + }

+26

lexicons/systems/kiri/zone.json

··· 1 1 + { 2 2 + "lexicon": 1, 3 3 + "id": "systems.kiri.zone", 4 4 + "defs": { 5 5 + "main": { 6 6 + "type": "record", 7 7 + "key": "tid", 8 8 + "record": { 9 9 + "type": "object", 10 10 + "required": ["domain"], 11 11 + "properties": { 12 12 + "domain": { 13 13 + "type": "string", 14 14 + "description": "The zone apex domain. Lowercase, no trailing dot.", 15 15 + "maxLength": 253 16 16 + }, 17 17 + "note": { 18 18 + "type": "string", 19 19 + "description": "Attached note for informational reasons, not used by dns.", 20 20 + "maxGraphemes": 256 21 21 + } 22 22 + } 23 23 + } 24 24 + } 25 25 + } 26 26 + }

+13

migrations/index/001_init.sql

··· 1 1 + -- Shared reverse index schema 2 2 + 3 3 + CREATE TABLE IF NOT EXISTS zone_index ( 4 4 + zone TEXT NOT NULL, 5 5 + did TEXT NOT NULL, 6 6 + verified INTEGER NOT NULL DEFAULT 0, 7 7 + first_seen INTEGER NOT NULL, 8 8 + last_verified INTEGER, 9 9 + PRIMARY KEY (zone, did) 10 10 + ); 11 11 + 12 12 + CREATE INDEX IF NOT EXISTS idx_zone_index_did 13 13 + ON zone_index(did);

+22

migrations/user/001_init.sql

··· 1 1 + -- Per-DID database schema 2 2 + 3 3 + CREATE TABLE IF NOT EXISTS records ( 4 4 + rkey TEXT PRIMARY KEY, 5 5 + domain TEXT NOT NULL, 6 6 + record_type TEXT NOT NULL, 7 7 + data TEXT NOT NULL, -- JSON-encoded full DnsRecord (domain + ttl + record) 8 8 + created_at INTEGER NOT NULL, 9 9 + updated_at INTEGER NOT NULL 10 10 + ); 11 11 + 12 12 + CREATE TABLE IF NOT EXISTS zones ( 13 13 + rkey TEXT PRIMARY KEY, 14 14 + domain TEXT NOT NULL UNIQUE, 15 15 + created_at INTEGER NOT NULL 16 16 + ); 17 17 + 18 18 + CREATE INDEX IF NOT EXISTS idx_records_domain 19 19 + ON records(domain); 20 20 + 21 21 + CREATE INDEX IF NOT EXISTS idx_records_domain_type 22 22 + ON records(domain, record_type);

+26

onis-appview/Cargo.toml

··· 1 1 + [package] 2 2 + name = "onis-appview" 3 3 + version.workspace = true 4 4 + edition.workspace = true 5 5 + 6 6 + [lints] 7 7 + workspace = true 8 8 + 9 9 + [[bin]] 10 10 + name = "onis-appview" 11 11 + path = "src/main.rs" 12 12 + 13 13 + [dependencies] 14 14 + onis-common.workspace = true 15 15 + serde.workspace = true 16 16 + serde_json.workspace = true 17 17 + sqlx.workspace = true 18 18 + tokio.workspace = true 19 19 + tracing.workspace = true 20 20 + tracing-subscriber.workspace = true 21 21 + anyhow.workspace = true 22 22 + axum.workspace = true 23 23 + tokio-tungstenite.workspace = true 24 24 + futures-util.workspace = true 25 25 + chrono.workspace = true 26 26 + metrics.workspace = true

+298

onis-appview/src/api.rs

··· 1 1 + use std::sync::Arc; 2 2 + use std::time::Instant; 3 3 + 4 4 + use axum::{ 5 5 + Json, Router, 6 6 + extract::{Query, Request, State}, 7 7 + http::StatusCode, 8 8 + middleware::{self, Next}, 9 9 + response::IntoResponse, 10 10 + routing::{get, put}, 11 11 + }; 12 12 + use serde::{Deserialize, Serialize}; 13 13 + 14 14 + use crate::materializer::{AppState, domain_ancestors}; 15 15 + 16 16 + pub fn router(state: Arc<AppState>) -> Router { 17 17 + let metrics_router = onis_common::metrics::router(state.metrics_handle.clone()); 18 18 + 19 19 + Router::new() 20 20 + .route("/v1/resolve", get(resolve)) 21 21 + .route("/v1/health", get(health)) 22 22 + .route("/v1/zones", get(zones)) 23 23 + .route("/v1/zones/stale", get(stale_zones)) 24 24 + .route("/v1/verification", put(verification)) 25 25 + .layer(middleware::from_fn(track_request_duration)) 26 26 + .with_state(state) 27 27 + .merge(metrics_router) 28 28 + } 29 29 + 30 30 + async fn track_request_duration(request: Request, next: Next) -> impl IntoResponse { 31 31 + let path = request.uri().path().to_owned(); 32 32 + let start = Instant::now(); 33 33 + let response = next.run(request).await; 34 34 + metrics::histogram!("appview_api_request_duration_seconds", "path" => path) 35 35 + .record(start.elapsed().as_secs_f64()); 36 36 + response 37 37 + } 38 38 + 39 39 + // --------------------------------------------------------------------------- 40 40 + // GET /v1/resolve?name={name}&type={type} 41 41 + // --------------------------------------------------------------------------- 42 42 + 43 43 + #[derive(Deserialize)] 44 44 + struct ResolveParams { 45 45 + name: String, 46 46 + #[serde(rename = "type")] 47 47 + record_type: Option<String>, 48 48 + } 49 49 + 50 50 + #[derive(Serialize)] 51 51 + struct ResolveResponse { 52 52 + zone: Option<String>, 53 53 + verified: bool, 54 54 + records: Vec<serde_json::Value>, 55 55 + name_exists: bool, 56 56 + } 57 57 + 58 58 + /// Walk up the domain tree to find the matching zone in zone_index. 59 59 + async fn find_zone( 60 60 + index: &sqlx::SqlitePool, 61 61 + name: &str, 62 62 + ) -> Result<Option<(String, String, bool)>, sqlx::Error> { 63 63 + for candidate in domain_ancestors(name) { 64 64 + let row: Option<(String, i64)> = 65 65 + sqlx::query_as( 66 66 + "SELECT did, verified FROM zone_index WHERE zone = ? ORDER BY verified DESC, first_seen ASC LIMIT 1" 67 67 + ) 68 68 + .bind(&candidate) 69 69 + .fetch_optional(index) 70 70 + .await?; 71 71 + if let Some((did, verified)) = row { 72 72 + return Ok(Some((candidate, did, verified != 0))); 73 73 + } 74 74 + } 75 75 + Ok(None) 76 76 + } 77 77 + 78 78 + async fn resolve( 79 79 + State(state): State<Arc<AppState>>, 80 80 + Query(params): Query<ResolveParams>, 81 81 + ) -> Result<Json<ResolveResponse>, StatusCode> { 82 82 + let name = params.name.to_lowercase(); 83 83 + 84 84 + let zone_match = find_zone(&state.index, &name) 85 85 + .await 86 86 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 87 87 + 88 88 + let (zone, did, verified) = match zone_match { 89 89 + Some(z) => z, 90 90 + None => { 91 91 + return Ok(Json(ResolveResponse { 92 92 + zone: None, 93 93 + verified: false, 94 94 + records: vec![], 95 95 + name_exists: false, 96 96 + })); 97 97 + } 98 98 + }; 99 99 + 100 100 + if !verified { 101 101 + return Ok(Json(ResolveResponse { 102 102 + zone: Some(zone), 103 103 + verified: false, 104 104 + records: vec![], 105 105 + name_exists: false, 106 106 + })); 107 107 + } 108 108 + 109 109 + let user_db = state 110 110 + .get_user_db(&did) 111 111 + .await 112 112 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 113 113 + 114 114 + let records: Vec<(String,)> = if let Some(ref rt) = params.record_type { 115 115 + sqlx::query_as( 116 116 + "SELECT data FROM records WHERE domain = ? AND record_type = ?", 117 117 + ) 118 118 + .bind(&name) 119 119 + .bind(rt) 120 120 + .fetch_all(&user_db) 121 121 + .await 122 122 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)? 123 123 + } else { 124 124 + sqlx::query_as("SELECT data FROM records WHERE domain = ?") 125 125 + .bind(&name) 126 126 + .fetch_all(&user_db) 127 127 + .await 128 128 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)? 129 129 + }; 130 130 + 131 131 + let name_exists: Option<(i64,)> = 132 132 + sqlx::query_as("SELECT 1 FROM records WHERE domain = ? LIMIT 1") 133 133 + .bind(&name) 134 134 + .fetch_optional(&user_db) 135 135 + .await 136 136 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 137 137 + 138 138 + let records: Vec<serde_json::Value> = records 139 139 + .into_iter() 140 140 + .filter_map(|(data,)| serde_json::from_str(&data).ok()) 141 141 + .collect(); 142 142 + 143 143 + Ok(Json(ResolveResponse { 144 144 + zone: Some(zone), 145 145 + verified: true, 146 146 + records, 147 147 + name_exists: name_exists.is_some(), 148 148 + })) 149 149 + } 150 150 + 151 151 + // --------------------------------------------------------------------------- 152 152 + // GET /v1/health 153 153 + // --------------------------------------------------------------------------- 154 154 + 155 155 + #[derive(Serialize)] 156 156 + struct HealthResponse { 157 157 + status: String, 158 158 + zones: i64, 159 159 + users: i64, 160 160 + } 161 161 + 162 162 + async fn health( 163 163 + State(state): State<Arc<AppState>>, 164 164 + ) -> Result<Json<HealthResponse>, StatusCode> { 165 165 + let (zones,): (i64,) = 166 166 + sqlx::query_as("SELECT COUNT(*) FROM zone_index") 167 167 + .fetch_one(&state.index) 168 168 + .await 169 169 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 170 170 + 171 171 + let (users,): (i64,) = 172 172 + sqlx::query_as("SELECT COUNT(DISTINCT did) FROM zone_index") 173 173 + .fetch_one(&state.index) 174 174 + .await 175 175 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 176 176 + 177 177 + Ok(Json(HealthResponse { 178 178 + status: "ok".to_string(), 179 179 + zones, 180 180 + users, 181 181 + })) 182 182 + } 183 183 + 184 184 + // --------------------------------------------------------------------------- 185 185 + // GET /v1/zones?did={did} 186 186 + // --------------------------------------------------------------------------- 187 187 + 188 188 + #[derive(Deserialize)] 189 189 + struct ZonesParams { 190 190 + did: String, 191 191 + } 192 192 + 193 193 + #[derive(Serialize, sqlx::FromRow)] 194 194 + struct ZoneEntry { 195 195 + zone: String, 196 196 + verified: bool, 197 197 + } 198 198 + 199 199 + #[derive(Serialize)] 200 200 + struct ZonesResponse { 201 201 + zones: Vec<ZoneEntry>, 202 202 + } 203 203 + 204 204 + async fn zones( 205 205 + State(state): State<Arc<AppState>>, 206 206 + Query(params): Query<ZonesParams>, 207 207 + ) -> Result<Json<ZonesResponse>, StatusCode> { 208 208 + let zones: Vec<ZoneEntry> = 209 209 + sqlx::query_as("SELECT zone, verified FROM zone_index WHERE did = ?") 210 210 + .bind(&params.did) 211 211 + .fetch_all(&state.index) 212 212 + .await 213 213 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 214 214 + 215 215 + Ok(Json(ZonesResponse { zones })) 216 216 + } 217 217 + 218 218 + // --------------------------------------------------------------------------- 219 219 + // GET /v1/zones/stale?checked_before={unix_timestamp} 220 220 + // --------------------------------------------------------------------------- 221 221 + 222 222 + #[derive(Deserialize)] 223 223 + struct StaleZonesParams { 224 224 + checked_before: i64, 225 225 + } 226 226 + 227 227 + #[derive(Serialize, sqlx::FromRow)] 228 228 + struct StaleZoneEntry { 229 229 + zone: String, 230 230 + did: String, 231 231 + verified: bool, 232 232 + first_seen: i64, 233 233 + last_verified: Option<i64>, 234 234 + } 235 235 + 236 236 + #[derive(Serialize)] 237 237 + struct StaleZonesResponse { 238 238 + zones: Vec<StaleZoneEntry>, 239 239 + } 240 240 + 241 241 + async fn stale_zones( 242 242 + State(state): State<Arc<AppState>>, 243 243 + Query(params): Query<StaleZonesParams>, 244 244 + ) -> Result<Json<StaleZonesResponse>, StatusCode> { 245 245 + let zones: Vec<StaleZoneEntry> = sqlx::query_as( 246 246 + "SELECT zone, did, verified, first_seen, last_verified FROM zone_index \ 247 247 + WHERE last_verified < ? OR last_verified IS NULL", 248 248 + ) 249 249 + .bind(params.checked_before) 250 250 + .fetch_all(&state.index) 251 251 + .await 252 252 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 253 253 + 254 254 + Ok(Json(StaleZonesResponse { zones })) 255 255 + } 256 256 + 257 257 + // --------------------------------------------------------------------------- 258 258 + // PUT /v1/verification 259 259 + // --------------------------------------------------------------------------- 260 260 + 261 261 + #[derive(Deserialize)] 262 262 + struct VerificationBody { 263 263 + zone: String, 264 264 + did: String, 265 265 + verified: bool, 266 266 + } 267 267 + 268 268 + async fn verification( 269 269 + State(state): State<Arc<AppState>>, 270 270 + Json(body): Json<VerificationBody>, 271 271 + ) -> Result<StatusCode, StatusCode> { 272 272 + let now = chrono::Utc::now().timestamp(); 273 273 + let verified_int: i64 = if body.verified { 1 } else { 0 }; 274 274 + 275 275 + let result = sqlx::query( 276 276 + "UPDATE zone_index SET verified = ?, last_verified = ? WHERE zone = ? AND did = ?", 277 277 + ) 278 278 + .bind(verified_int) 279 279 + .bind(now) 280 280 + .bind(&body.zone) 281 281 + .bind(&body.did) 282 282 + .execute(&state.index) 283 283 + .await 284 284 + .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?; 285 285 + 286 286 + if result.rows_affected() == 0 { 287 287 + return Err(StatusCode::NOT_FOUND); 288 288 + } 289 289 + 290 290 + tracing::info!( 291 291 + zone = %body.zone, 292 292 + did = %body.did, 293 293 + verified = body.verified, 294 294 + "verification status updated" 295 295 + ); 296 296 + 297 297 + Ok(StatusCode::NO_CONTENT) 298 298 + }

+123

onis-appview/src/main.rs

··· 1 1 + use std::path::PathBuf; 2 2 + use std::sync::Arc; 3 3 + 4 4 + use anyhow::Result; 5 5 + use onis_common::config::OnisConfig; 6 6 + use tracing_subscriber::EnvFilter; 7 7 + 8 8 + mod api; 9 9 + mod materializer; 10 10 + mod tap; 11 11 + 12 12 + use materializer::AppState; 13 13 + use tap::TapConsumer; 14 14 + 15 15 + #[tokio::main] 16 16 + async fn main() -> Result<()> { 17 17 + tracing_subscriber::fmt() 18 18 + .with_env_filter(EnvFilter::from_default_env()) 19 19 + .json() 20 20 + .init(); 21 21 + 22 22 + let metrics_handle = onis_common::metrics::init() 23 23 + .map_err(|e| anyhow::anyhow!("failed to install metrics recorder: {e}"))?; 24 24 + 25 25 + metrics::describe_counter!( 26 26 + "appview_firehose_events_total", 27 27 + "Total firehose events processed" 28 28 + ); 29 29 + metrics::describe_counter!( 30 30 + "appview_records_skipped_no_zone_total", 31 31 + "DNS records skipped due to missing zone declaration" 32 32 + ); 33 33 + metrics::describe_histogram!( 34 34 + "appview_sqlite_write_duration_seconds", 35 35 + "SQLite write duration" 36 36 + ); 37 37 + metrics::describe_histogram!( 38 38 + "appview_api_request_duration_seconds", 39 39 + "API request duration" 40 40 + ); 41 41 + metrics::describe_gauge!("appview_zones_total", "Total declared zones"); 42 42 + metrics::describe_gauge!("appview_users_total", "Total unique DIDs with zones"); 43 43 + 44 44 + let config = OnisConfig::load()?; 45 45 + let cfg = &config.appview; 46 46 + 47 47 + tracing::info!( 48 48 + bind = %cfg.bind, 49 49 + tap_url = %cfg.tap_url, 50 50 + "onis-appview starting" 51 51 + ); 52 52 + 53 53 + let state = Arc::new( 54 54 + AppState::new( 55 55 + &PathBuf::from(&cfg.index_path), 56 56 + PathBuf::from(&cfg.db_dir), 57 57 + cfg.database.clone(), 58 58 + metrics_handle, 59 59 + ) 60 60 + .await?, 61 61 + ); 62 62 + 63 63 + let api_bind = cfg.bind.clone(); 64 64 + let api_state = state.clone(); 65 65 + let api_handle = tokio::spawn(async move { 66 66 + let app = api::router(api_state); 67 67 + let listener = tokio::net::TcpListener::bind(&api_bind).await.unwrap(); 68 68 + tracing::info!("API listening on {api_bind}"); 69 69 + axum::serve(listener, app).await.unwrap(); 70 70 + }); 71 71 + 72 72 + let consumer = TapConsumer::new( 73 73 + cfg.tap_url.clone(), 74 74 + cfg.tap_acks, 75 75 + cfg.tap_reconnect_delay, 76 76 + ); 77 77 + let tap_state = state.clone(); 78 78 + let tap_handle = tokio::spawn(async move { 79 79 + consumer 80 80 + .run(|event| { 81 81 + let s = tap_state.clone(); 82 82 + async move { materializer::handle_event(s, event).await } 83 83 + }) 84 84 + .await 85 85 + .unwrap(); 86 86 + }); 87 87 + 88 88 + let gauge_state = state.clone(); 89 89 + let gauge_handle = tokio::spawn(async move { 90 90 + update_gauges(gauge_state).await; 91 91 + }); 92 92 + 93 93 + tokio::select! { 94 94 + _ = api_handle => tracing::error!("API server exited unexpectedly"), 95 95 + _ = tap_handle => tracing::error!("tap consumer exited unexpectedly"), 96 96 + _ = gauge_handle => tracing::error!("gauge updater exited unexpectedly"), 97 97 + } 98 98 + 99 99 + Ok(()) 100 100 + } 101 101 + 102 102 + /// Periodically query zone/user counts and update Prometheus gauges. 103 103 + async fn update_gauges(state: Arc<AppState>) { 104 104 + loop { 105 105 + tokio::time::sleep(std::time::Duration::from_secs(30)).await; 106 106 + 107 107 + let zones: Result<(i64,), _> = 108 108 + sqlx::query_as("SELECT COUNT(*) FROM zone_index") 109 109 + .fetch_one(&state.index) 110 110 + .await; 111 111 + let users: Result<(i64,), _> = 112 112 + sqlx::query_as("SELECT COUNT(DISTINCT did) FROM zone_index") 113 113 + .fetch_one(&state.index) 114 114 + .await; 115 115 + 116 116 + if let Ok((count,)) = zones { 117 117 + metrics::gauge!("appview_zones_total").set(count as f64); 118 118 + } 119 119 + if let Ok((count,)) = users { 120 120 + metrics::gauge!("appview_users_total").set(count as f64); 121 121 + } 122 122 + } 123 123 + }

+339

onis-appview/src/materializer.rs

··· 1 1 + use std::path::PathBuf; 2 2 + use std::sync::Arc; 3 3 + use std::time::Instant; 4 4 + 5 5 + use anyhow::{Context, Result}; 6 6 + use onis_common::metrics::PrometheusHandle; 7 7 + use sqlx::SqlitePool; 8 8 + use tokio::sync::RwLock; 9 9 + 10 10 + use onis_common::config::DatabaseConfig; 11 11 + use onis_common::db; 12 12 + 13 13 + use crate::tap::{RecordAction, TapEvent, TapRecordEvent}; 14 14 + 15 15 + pub struct AppState { 16 16 + /// Reverse index: domain → DID, verification status 17 17 + pub index: SqlitePool, 18 18 + /// Base directory for per-DID SQLite databases 19 19 + pub db_dir: PathBuf, 20 20 + /// Database pool configuration 21 21 + pub db_config: DatabaseConfig, 22 22 + /// Cache of open per-DID database pools 23 23 + pub user_dbs: RwLock<std::collections::HashMap<String, SqlitePool>>, 24 24 + /// Prometheus metrics handle for /metrics endpoint 25 25 + pub metrics_handle: PrometheusHandle, 26 26 + } 27 27 + 28 28 + impl AppState { 29 29 + pub async fn new( 30 30 + index_path: &std::path::Path, 31 31 + db_dir: PathBuf, 32 32 + db_config: DatabaseConfig, 33 33 + metrics_handle: PrometheusHandle, 34 34 + ) -> Result<Self> { 35 35 + let index = db::open_index_db(index_path, &db_config).await?; 36 36 + Ok(Self { 37 37 + index, 38 38 + db_dir, 39 39 + db_config, 40 40 + user_dbs: RwLock::new(std::collections::HashMap::new()), 41 41 + metrics_handle, 42 42 + }) 43 43 + } 44 44 + 45 45 + /// Get or create a per-DID database pool. 46 46 + pub async fn get_user_db(&self, did: &str) -> Result<SqlitePool> { 47 47 + { 48 48 + let dbs = self.user_dbs.read().await; 49 49 + if let Some(pool) = dbs.get(did) { 50 50 + return Ok(pool.clone()); 51 51 + } 52 52 + } 53 53 + 54 54 + let path = db::did_to_db_path(&self.db_dir, did); 55 55 + let pool = db::open_user_db(&path, &self.db_config).await?; 56 56 + 57 57 + let mut dbs = self.user_dbs.write().await; 58 58 + dbs.insert(did.to_string(), pool.clone()); 59 59 + Ok(pool) 60 60 + } 61 61 + } 62 62 + 63 63 + /// Look up the domain for a record by rkey, then delete the row. 64 64 + /// Returns the domain if the record existed. 65 65 + async fn delete_by_rkey(pool: &SqlitePool, table: &str, rkey: &str) -> Result<Option<String>> { 66 66 + let select = format!("SELECT domain FROM {table} WHERE rkey = ?"); 67 67 + let domain: Option<(String,)> = sqlx::query_as(&select) 68 68 + .bind(rkey) 69 69 + .fetch_optional(pool) 70 70 + .await?; 71 71 + 72 72 + let delete = format!("DELETE FROM {table} WHERE rkey = ?"); 73 73 + sqlx::query(&delete) 74 74 + .bind(rkey) 75 75 + .execute(pool) 76 76 + .await 77 77 + .with_context(|| format!("failed to delete from {table}"))?; 78 78 + 79 79 + Ok(domain.map(|(d,)| d)) 80 80 + } 81 81 + 82 82 + /// Yield each candidate zone for a domain by walking up the tree. 83 83 + /// e.g. "a.b.example.com" → ["a.b.example.com", "b.example.com", "example.com"] 84 84 + pub(crate) fn domain_ancestors(domain: &str) -> impl Iterator<Item = String> + '_ { 85 85 + let parts: Vec<&str> = domain.split('.').collect(); 86 86 + (0..parts.len().saturating_sub(1)).map(move |i| parts[i..].join(".")) 87 87 + } 88 88 + 89 89 + /// Check if the user has a declared zone that covers the given domain. 90 90 + async fn has_zone_for(pool: &SqlitePool, domain: &str) -> Result<bool> { 91 91 + for candidate in domain_ancestors(domain) { 92 92 + let found: Option<(i64,)> = 93 93 + sqlx::query_as("SELECT 1 FROM zones WHERE domain = ?") 94 94 + .bind(&candidate) 95 95 + .fetch_optional(pool) 96 96 + .await?; 97 97 + if found.is_some() { 98 98 + return Ok(true); 99 99 + } 100 100 + } 101 101 + Ok(false) 102 102 + } 103 103 + 104 104 + pub async fn handle_event(state: Arc<AppState>, event: TapEvent) -> Result<()> { 105 105 + match event.event_type.as_str() { 106 106 + "record" => { 107 107 + let rec = event.record.context("record event missing record field")?; 108 108 + let collection = match rec.collection.as_str() { 109 109 + "systems.kiri.zone" => "zone", 110 110 + "systems.kiri.dns" => "dns", 111 111 + _ => return Ok(()), 112 112 + }; 113 113 + let action = match rec.action { 114 114 + RecordAction::Create => "create", 115 115 + RecordAction::Update => "update", 116 116 + RecordAction::Delete => "delete", 117 117 + }; 118 118 + 119 119 + let result = match collection { 120 120 + "zone" => handle_zone_event(state, rec).await, 121 121 + _ => handle_record_event(state, rec).await, 122 122 + }; 123 123 + 124 124 + let status = if result.is_ok() { "success" } else { "error" }; 125 125 + metrics::counter!( 126 126 + "appview_firehose_events_total", 127 127 + "collection" => collection, 128 128 + "action" => action, 129 129 + "status" => status, 130 130 + ) 131 131 + .increment(1); 132 132 + 133 133 + result 134 134 + } 135 135 + "identity" => { 136 136 + if let Some(ident) = event.identity { 137 137 + tracing::debug!( 138 138 + did = %ident.did, 139 139 + handle = %ident.handle, 140 140 + active = ident.is_active, 141 141 + "identity event" 142 142 + ); 143 143 + } 144 144 + Ok(()) 145 145 + } 146 146 + other => { 147 147 + tracing::debug!("ignoring tap event type: {other}"); 148 148 + Ok(()) 149 149 + } 150 150 + } 151 151 + } 152 152 + 153 153 + async fn handle_record_event(state: Arc<AppState>, event: TapRecordEvent) -> Result<()> { 154 154 + let did = &event.did; 155 155 + let rkey = &event.rkey; 156 156 + 157 157 + match event.action { 158 158 + RecordAction::Create | RecordAction::Update => { 159 159 + let record_value = event 160 160 + .record 161 161 + .context("create/update event missing record payload")?; 162 162 + 163 163 + let domain = record_value 164 164 + .get("domain") 165 165 + .and_then(|v| v.as_str()) 166 166 + .context("record missing domain field")? 167 167 + .to_lowercase(); 168 168 + 169 169 + let record_type = record_value 170 170 + .get("record") 171 171 + .and_then(|v| v.get("$type")) 172 172 + .and_then(|v| v.as_str()) 173 173 + .context("record missing $type")?; 174 174 + 175 175 + let type_name = record_type 176 176 + .strip_prefix("systems.kiri.dns#") 177 177 + .context("unexpected $type prefix")? 178 178 + .trim_end_matches("Record"); 179 179 + 180 180 + let user_db = state.get_user_db(did).await?; 181 181 + 182 182 + if !has_zone_for(&user_db, &domain).await? { 183 183 + tracing::warn!( 184 184 + did = %did, 185 185 + domain = %domain, 186 186 + "record for {domain} has no matching zone, skipping" 187 187 + ); 188 188 + metrics::counter!("appview_records_skipped_no_zone_total").increment(1); 189 189 + return Ok(()); 190 190 + } 191 191 + 192 192 + let data = serde_json::to_string(&record_value)?; 193 193 + let now = chrono::Utc::now().timestamp(); 194 194 + 195 195 + let write_start = Instant::now(); 196 196 + sqlx::query( 197 197 + "INSERT INTO records (rkey, domain, record_type, data, created_at, updated_at) 198 198 + VALUES (?, ?, ?, ?, ?, ?) 199 199 + ON CONFLICT(rkey) DO UPDATE SET 200 200 + domain = excluded.domain, 201 201 + record_type = excluded.record_type, 202 202 + data = excluded.data, 203 203 + updated_at = excluded.updated_at", 204 204 + ) 205 205 + .bind(rkey) 206 206 + .bind(&domain) 207 207 + .bind(type_name) 208 208 + .bind(&data) 209 209 + .bind(now) 210 210 + .bind(now) 211 211 + .execute(&user_db) 212 212 + .await 213 213 + .context("failed to upsert record")?; 214 214 + metrics::histogram!("appview_sqlite_write_duration_seconds") 215 215 + .record(write_start.elapsed().as_secs_f64()); 216 216 + 217 217 + tracing::info!( 218 218 + did = %did, 219 219 + rkey = %rkey, 220 220 + domain = %domain, 221 221 + record_type = %type_name, 222 222 + live = event.live, 223 223 + "record upserted" 224 224 + ); 225 225 + } 226 226 + 227 227 + RecordAction::Delete => { 228 228 + let Ok(user_db) = state.get_user_db(did).await else { 229 229 + tracing::debug!(did = %did, rkey = %rkey, "delete for unknown DID, skipping"); 230 230 + return Ok(()); 231 231 + }; 232 232 + 233 233 + let write_start = Instant::now(); 234 234 + let domain = delete_by_rkey(&user_db, "records", rkey).await?; 235 235 + metrics::histogram!("appview_sqlite_write_duration_seconds") 236 236 + .record(write_start.elapsed().as_secs_f64()); 237 237 + 238 238 + if let Some(domain) = domain { 239 239 + tracing::info!( 240 240 + did = %did, 241 241 + rkey = %rkey, 242 242 + domain = %domain, 243 243 + live = event.live, 244 244 + "record deleted" 245 245 + ); 246 246 + } 247 247 + } 248 248 + } 249 249 + 250 250 + Ok(()) 251 251 + } 252 252 + 253 253 + async fn handle_zone_event(state: Arc<AppState>, event: TapRecordEvent) -> Result<()> { 254 254 + let did = &event.did; 255 255 + let rkey = &event.rkey; 256 256 + 257 257 + match event.action { 258 258 + RecordAction::Create | RecordAction::Update => { 259 259 + let record_value = event 260 260 + .record 261 261 + .context("create/update zone event missing record payload")?; 262 262 + 263 263 + let domain = record_value 264 264 + .get("domain") 265 265 + .and_then(|v| v.as_str()) 266 266 + .context("zone record missing domain field")? 267 267 + .to_lowercase(); 268 268 + 269 269 + let now = chrono::Utc::now().timestamp(); 270 270 + let user_db = state.get_user_db(did).await?; 271 271 + 272 272 + let write_start = Instant::now(); 273 273 + sqlx::query( 274 274 + "INSERT INTO zones (rkey, domain, created_at) 275 275 + VALUES (?, ?, ?) 276 276 + ON CONFLICT(rkey) DO UPDATE SET domain = excluded.domain", 277 277 + ) 278 278 + .bind(rkey) 279 279 + .bind(&domain) 280 280 + .bind(now) 281 281 + .execute(&user_db) 282 282 + .await 283 283 + .context("failed to upsert zone")?; 284 284 + 285 285 + sqlx::query( 286 286 + "INSERT INTO zone_index (zone, did, first_seen) 287 287 + VALUES (?, ?, ?) 288 288 + ON CONFLICT(zone, did) DO NOTHING", 289 289 + ) 290 290 + .bind(&domain) 291 291 + .bind(did) 292 292 + .bind(now) 293 293 + .execute(&state.index) 294 294 + .await 295 295 + .context("failed to update zone index")?; 296 296 + metrics::histogram!("appview_sqlite_write_duration_seconds") 297 297 + .record(write_start.elapsed().as_secs_f64()); 298 298 + 299 299 + tracing::info!( 300 300 + did = %did, 301 301 + rkey = %rkey, 302 302 + domain = %domain, 303 303 + live = event.live, 304 304 + "zone upserted" 305 305 + ); 306 306 + } 307 307 + 308 308 + RecordAction::Delete => { 309 309 + let Ok(user_db) = state.get_user_db(did).await else { 310 310 + tracing::debug!(did = %did, rkey = %rkey, "zone delete for unknown DID, skipping"); 311 311 + return Ok(()); 312 312 + }; 313 313 + 314 314 + let write_start = Instant::now(); 315 315 + let domain = delete_by_rkey(&user_db, "zones", rkey).await?; 316 316 + 317 317 + if let Some(domain) = domain { 318 318 + sqlx::query("DELETE FROM zone_index WHERE zone = ? AND did = ?") 319 319 + .bind(&domain) 320 320 + .bind(did) 321 321 + .execute(&state.index) 322 322 + .await 323 323 + .context("failed to delete from zone index")?; 324 324 + metrics::histogram!("appview_sqlite_write_duration_seconds") 325 325 + .record(write_start.elapsed().as_secs_f64()); 326 326 + 327 327 + tracing::info!( 328 328 + did = %did, 329 329 + rkey = %rkey, 330 330 + domain = %domain, 331 331 + live = event.live, 332 332 + "zone deleted" 333 333 + ); 334 334 + } 335 335 + } 336 336 + } 337 337 + 338 338 + Ok(()) 339 339 + }

+160

onis-appview/src/tap.rs

··· 1 1 + use anyhow::{Context, Result}; 2 2 + use futures_util::{SinkExt, StreamExt}; 3 3 + use serde::Deserialize; 4 4 + use tokio_tungstenite::{connect_async, tungstenite::Message}; 5 5 + 6 6 + /// A single event received from the TAP firehose websocket. 7 7 + #[derive(Debug, Deserialize)] 8 8 + pub struct TapEvent { 9 9 + /// Monotonically increasing event sequence number. 10 10 + pub id: u64, 11 11 + /// Event kind, e.g. `"record"` or `"identity"`. 12 12 + #[serde(rename = "type")] 13 13 + pub event_type: String, 14 14 + /// Present when event_type == "record". 15 15 + pub record: Option<TapRecordEvent>, 16 16 + /// Present when event_type == "identity". 17 17 + pub identity: Option<TapIdentityEvent>, 18 18 + } 19 19 + 20 20 + /// Payload for a TAP record event (create, update, or delete). 21 21 + #[derive(Debug, Deserialize)] 22 22 + pub struct TapRecordEvent { 23 23 + /// Whether this event comes from the live stream (true) or backfill (false). 24 24 + pub live: bool, 25 25 + /// DID of the repository that owns this record. 26 26 + pub did: String, 27 27 + /// Repository revision (commit CID) that produced this event. 28 28 + pub rev: String, 29 29 + /// Lexicon collection NSID, e.g. `"systems.kiri.zone"`. 30 30 + pub collection: String, 31 31 + /// Record key within the collection. 32 32 + pub rkey: String, 33 33 + /// The action performed on the record. 34 34 + pub action: RecordAction, 35 35 + /// The full record value; present on create and update, absent on delete. 36 36 + pub record: Option<serde_json::Value>, 37 37 + /// Content hash (CID) of the record; present on create and update. 38 38 + pub cid: Option<String>, 39 39 + } 40 40 + 41 41 + /// The type of mutation performed on a record. 42 42 + #[derive(Debug, Deserialize, PartialEq)] 43 43 + #[serde(rename_all = "lowercase")] 44 44 + pub enum RecordAction { 45 45 + /// A new record was created. 46 46 + Create, 47 47 + /// An existing record was updated. 48 48 + Update, 49 49 + /// A record was deleted. 50 50 + Delete, 51 51 + } 52 52 + 53 53 + /// Payload for a TAP identity event (handle or status change). 54 54 + #[derive(Debug, Deserialize)] 55 55 + pub struct TapIdentityEvent { 56 56 + /// DID of the identity that changed. 57 57 + pub did: String, 58 58 + /// Current handle for this identity. 59 59 + pub handle: String, 60 60 + /// Whether the account is currently active. 61 61 + pub is_active: bool, 62 62 + /// Account status string, e.g. `"active"`, `"deactivated"`. 63 63 + pub status: String, 64 64 + } 65 65 + 66 66 + /// Persistent WebSocket consumer for the TAP firehose. 67 67 + /// 68 68 + /// Connects to the relay, deserializes events, dispatches them to a handler, 69 69 + /// and sends acknowledgements. Automatically reconnects on failure. 70 70 + pub struct TapConsumer { 71 71 + /// WebSocket URL of the TAP firehose endpoint. 72 72 + url: String, 73 73 + /// Whether to send ack messages after processing each event. 74 74 + acks_enabled: bool, 75 75 + /// Delay before reconnecting after a connection error. 76 76 + reconnect_delay: std::time::Duration, 77 77 + } 78 78 + 79 79 + impl TapConsumer { 80 80 + pub fn new(url: String, acks_enabled: bool, reconnect_delay_secs: u64) -> Self { 81 81 + Self { 82 82 + url, 83 83 + acks_enabled, 84 84 + reconnect_delay: std::time::Duration::from_secs(reconnect_delay_secs), 85 85 + } 86 86 + } 87 87 + 88 88 + pub async fn run<F, Fut>(&self, handler: F) -> Result<()> 89 89 + where 90 90 + F: Fn(TapEvent) -> Fut + Send + Sync, 91 91 + Fut: std::future::Future<Output = Result<()>> + Send, 92 92 + { 93 93 + loop { 94 94 + match self.connect_and_consume(&handler).await { 95 95 + Ok(()) => { 96 96 + tracing::info!("tap connection closed cleanly, reconnecting..."); 97 97 + } 98 98 + Err(e) => { 99 99 + tracing::error!( 100 100 + delay_secs = self.reconnect_delay.as_secs(), 101 101 + "tap connection error: {e:#}, reconnecting..." 102 102 + ); 103 103 + tokio::time::sleep(self.reconnect_delay).await; 104 104 + } 105 105 + } 106 106 + } 107 107 + } 108 108 + 109 109 + async fn connect_and_consume<F, Fut>(&self, handler: &F) -> Result<()> 110 110 + where 111 111 + F: Fn(TapEvent) -> Fut + Send + Sync, 112 112 + Fut: std::future::Future<Output = Result<()>> + Send, 113 113 + { 114 114 + let (ws, _) = connect_async(&self.url) 115 115 + .await 116 116 + .context("failed to connect to tap")?; 117 117 + 118 118 + tracing::info!("connected to tap at {}", self.url); 119 119 + 120 120 + let (mut sink, mut stream) = ws.split(); 121 121 + 122 122 + while let Some(msg) = stream.next().await { 123 123 + let msg = msg.context("websocket read error")?; 124 124 + 125 125 + let text = match msg { 126 126 + Message::Text(t) => t, 127 127 + Message::Ping(_) => continue, 128 128 + Message::Pong(_) => continue, 129 129 + Message::Close(_) => { 130 130 + tracing::info!("tap sent close frame"); 131 131 + break; 132 132 + } 133 133 + _ => continue, 134 134 + }; 135 135 + 136 136 + let event: TapEvent = match serde_json::from_str(&text) { 137 137 + Ok(e) => e, 138 138 + Err(e) => { 139 139 + tracing::warn!("failed to deserialize tap event: {e}, raw: {text}"); 140 140 + continue; 141 141 + } 142 142 + }; 143 143 + 144 144 + let event_id = event.id; 145 145 + 146 146 + if let Err(e) = handler(event).await { 147 147 + tracing::error!("error handling tap event {event_id}: {e:#}"); 148 148 + } 149 149 + 150 150 + if self.acks_enabled { 151 151 + let ack = serde_json::json!({ "type": "ack", "id": event_id }); 152 152 + sink.send(Message::Text(ack.to_string().into())) 153 153 + .await 154 154 + .context("failed to send ack")?; 155 155 + } 156 156 + } 157 157 + 158 158 + Ok(()) 159 159 + } 160 160 + }

+22

onis-common/Cargo.toml

··· 1 1 + [package] 2 2 + name = "onis-common" 3 3 + version.workspace = true 4 4 + edition.workspace = true 5 5 + 6 6 + [lints] 7 7 + workspace = true 8 8 + 9 9 + [dependencies] 10 10 + serde.workspace = true 11 11 + serde_json.workspace = true 12 12 + sqlx.workspace = true 13 13 + tokio.workspace = true 14 14 + thiserror.workspace = true 15 15 + tracing.workspace = true 16 16 + toml.workspace = true 17 17 + atrium-api.workspace = true 18 18 + axum.workspace = true 19 19 + metrics-exporter-prometheus.workspace = true 20 20 + 21 21 + [build-dependencies] 22 22 + esquema-codegen = { git = "https://github.com/fatfingers23/esquema.git", branch = "main" }

+16

onis-common/build.rs

··· 1 1 + use std::fs; 2 2 + use std::path::PathBuf; 3 3 + 4 4 + use esquema_codegen::genapi; 5 5 + 6 6 + fn main() { 7 7 + let lex_dir = PathBuf::from("../lexicons"); 8 8 + let out_dir = PathBuf::from("src"); 9 9 + 10 10 + fs::create_dir_all(&out_dir.join("lexicons")).unwrap(); 11 11 + 12 12 + println!("cargo:rerun-if-changed=../lexicons/"); 13 13 + 14 14 + let module_name = Some("lexicons".to_string()); 15 15 + let _ = genapi(&lex_dir, &out_dir, &module_name).unwrap(); 16 16 + }

+304

onis-common/src/config.rs

··· 1 1 + use std::net::IpAddr; 2 2 + use std::path::Path; 3 3 + 4 4 + use serde::Deserialize; 5 5 + use thiserror::Error; 6 6 + 7 7 + #[derive(Debug, Error)] 8 8 + pub enum ConfigError { 9 9 + #[error("io error: {0}")] 10 10 + Io(#[from] std::io::Error), 11 11 + #[error("toml parse error: {0}")] 12 12 + Toml(#[from] toml::de::Error), 13 13 + } 14 14 + 15 15 + /// Top-level config covering all onis services. 16 16 + /// 17 17 + /// Load from a TOML file with [`OnisConfig::load`]. Every field has a default, 18 18 + /// so an empty (or missing) file produces a usable config. 19 19 + #[derive(Debug, Deserialize)] 20 20 + #[serde(default)] 21 21 + pub struct OnisConfig { 22 22 + /// Configuration for the appview service. 23 23 + pub appview: AppviewConfig, 24 24 + /// Configuration for the DNS server. 25 25 + pub dns: DnsConfig, 26 26 + /// Configuration for the verification service. 27 27 + pub verify: VerifyConfig, 28 28 + } 29 29 + 30 30 + impl OnisConfig { 31 31 + /// Load config from `ONIS_CONFIG` env var path, or `onis.toml` in the 32 32 + /// current directory. Returns defaults if the file does not exist. 33 33 + pub fn load() -> Result<Self, ConfigError> { 34 34 + let path = std::env::var("ONIS_CONFIG").unwrap_or_else(|_| "onis.toml".to_string()); 35 35 + let path = Path::new(&path); 36 36 + 37 37 + if path.exists() { 38 38 + let content = std::fs::read_to_string(path)?; 39 39 + Ok(toml::from_str(&content)?) 40 40 + } else { 41 41 + Ok(Self::default()) 42 42 + } 43 43 + } 44 44 + } 45 45 + 46 46 + impl Default for OnisConfig { 47 47 + fn default() -> Self { 48 48 + Self { 49 49 + appview: AppviewConfig::default(), 50 50 + dns: DnsConfig::default(), 51 51 + verify: VerifyConfig::default(), 52 52 + } 53 53 + } 54 54 + } 55 55 + 56 56 + #[derive(Debug, Deserialize)] 57 57 + #[serde(default)] 58 58 + pub struct AppviewConfig { 59 59 + /// Address and port for the appview HTTP server. 60 60 + pub bind: String, 61 61 + /// WebSocket URL for the TAP firehose. 62 62 + pub tap_url: String, 63 63 + /// Whether to acknowledge TAP messages. 64 64 + pub tap_acks: bool, 65 65 + /// Seconds to wait before reconnecting after a TAP connection error. 66 66 + pub tap_reconnect_delay: u64, 67 67 + /// Path to the shared zone index SQLite database. 68 68 + pub index_path: String, 69 69 + /// Directory for per-DID SQLite databases. 70 70 + pub db_dir: String, 71 71 + /// Database pool configuration. 72 72 + pub database: DatabaseConfig, 73 73 + } 74 74 + 75 75 + impl Default for AppviewConfig { 76 76 + fn default() -> Self { 77 77 + Self { 78 78 + bind: "0.0.0.0:3000".to_string(), 79 79 + tap_url: "ws://localhost:2480/channel".to_string(), 80 80 + tap_acks: true, 81 81 + tap_reconnect_delay: 5, 82 82 + index_path: "./data/index.db".to_string(), 83 83 + db_dir: "./data/dbs".to_string(), 84 84 + database: DatabaseConfig::default(), 85 85 + } 86 86 + } 87 87 + } 88 88 + 89 89 + #[derive(Debug, Clone, Deserialize)] 90 90 + #[serde(default)] 91 91 + pub struct DatabaseConfig { 92 92 + /// Seconds to wait when the database is locked. 93 93 + pub busy_timeout: u64, 94 94 + /// Max connections for per-user database pools. 95 95 + pub user_max_connections: u32, 96 96 + /// Max connections for the shared index database pool. 97 97 + pub index_max_connections: u32, 98 98 + } 99 99 + 100 100 + impl Default for DatabaseConfig { 101 101 + fn default() -> Self { 102 102 + Self { 103 103 + busy_timeout: 5, 104 104 + user_max_connections: 5, 105 105 + index_max_connections: 10, 106 106 + } 107 107 + } 108 108 + } 109 109 + 110 110 + #[derive(Debug, Deserialize)] 111 111 + #[serde(default)] 112 112 + pub struct DnsConfig { 113 113 + /// URL of the appview API. 114 114 + pub appview_url: String, 115 115 + /// Address for the DNS server to listen on. 116 116 + pub bind: String, 117 117 + /// Port for the DNS server. 118 118 + pub port: u16, 119 119 + /// Seconds before a TCP connection times out. 120 120 + pub tcp_timeout: u64, 121 121 + /// Minimum TTL enforced on all DNS responses. 122 122 + pub ttl_floor: u32, 123 123 + /// Log a warning for queries slower than this (milliseconds). 124 124 + pub slow_query_threshold_ms: u64, 125 125 + /// SOA record defaults for zones without a user-published SOA. 126 126 + pub soa: SoaConfig, 127 127 + /// NS records to serve for all zones (fully qualified, trailing dot). 128 128 + pub ns: Vec<String>, 129 129 + /// Bind address for the metrics HTTP server (e.g. "0.0.0.0:9100"). 130 130 + pub metrics_bind: String, 131 131 + } 132 132 + 133 133 + impl Default for DnsConfig { 134 134 + fn default() -> Self { 135 135 + Self { 136 136 + appview_url: "http://localhost:3000".to_string(), 137 137 + bind: "0.0.0.0".to_string(), 138 138 + port: 5353, 139 139 + tcp_timeout: 30, 140 140 + ttl_floor: 60, 141 141 + slow_query_threshold_ms: 50, 142 142 + soa: SoaConfig::default(), 143 143 + ns: vec![ 144 144 + "ns1.kiri.systems.".to_string(), 145 145 + "ns2.kiri.systems.".to_string(), 146 146 + ], 147 147 + metrics_bind: "0.0.0.0:9100".to_string(), 148 148 + } 149 149 + } 150 150 + } 151 151 + 152 152 + #[derive(Debug, Deserialize)] 153 153 + #[serde(default)] 154 154 + pub struct SoaConfig { 155 155 + /// SOA record TTL in seconds. 156 156 + pub ttl: u32, 157 157 + /// SOA refresh interval in seconds. 158 158 + pub refresh: i32, 159 159 + /// SOA retry interval in seconds. 160 160 + pub retry: i32, 161 161 + /// SOA expire interval in seconds. 162 162 + pub expire: i32, 163 163 + /// SOA minimum (negative cache) TTL in seconds. 164 164 + pub minimum: u32, 165 165 + /// SOA MNAME (primary nameserver, fully qualified). 166 166 + pub mname: String, 167 167 + /// SOA RNAME (admin email in DNS format, fully qualified). 168 168 + pub rname: String, 169 169 + } 170 170 + 171 171 + impl Default for SoaConfig { 172 172 + fn default() -> Self { 173 173 + Self { 174 174 + ttl: 3600, 175 175 + refresh: 3600, 176 176 + retry: 900, 177 177 + expire: 604800, 178 178 + minimum: 300, 179 179 + mname: "ns1.kiri.systems.".to_string(), 180 180 + rname: "admin.kiri.systems.".to_string(), 181 181 + } 182 182 + } 183 183 + } 184 184 + 185 185 + #[derive(Debug, Deserialize)] 186 186 + #[serde(default)] 187 187 + pub struct VerifyConfig { 188 188 + /// Onis appview to call. 189 189 + pub appview_url: String, 190 190 + /// Address to start listening on for api. 191 191 + pub bind: String, 192 192 + /// Port used for api. 193 193 + pub port: u16, 194 194 + /// Seconds between scheduled verification runs. 195 195 + pub check_interval: u64, 196 196 + /// Seconds a zone must be stale before rechecking. 197 197 + pub recheck_interval: i64, 198 198 + /// Expected NS records that indicate correct delegation. 199 199 + pub expected_ns: Vec<String>, 200 200 + /// Optional custom resolver IP addresses. 201 201 + pub nameservers: Vec<String>, 202 202 + /// Port used when resolving against custom nameservers. 203 203 + pub dns_port: u16, 204 204 + } 205 205 + 206 206 + impl Default for VerifyConfig { 207 207 + fn default() -> Self { 208 208 + Self { 209 209 + appview_url: "http://localhost:3000".to_string(), 210 210 + bind: "0.0.0.0".to_string(), 211 211 + port: 3001, 212 212 + check_interval: 60, 213 213 + recheck_interval: 3600, 214 214 + expected_ns: vec![ 215 215 + "curitiba.ns.porkbun.com".to_string(), 216 216 + "maceio.ns.porkbun.com".to_string(), 217 217 + ], 218 218 + nameservers: vec![], 219 219 + dns_port: 53, 220 220 + } 221 221 + } 222 222 + } 223 223 + 224 224 + impl VerifyConfig { 225 225 + /// Parse the nameservers list into IP addresses. 226 226 + /// Returns None if the list is empty. 227 227 + pub fn parse_nameservers(&self) -> Result<Option<Vec<IpAddr>>, std::net::AddrParseError> { 228 228 + if self.nameservers.is_empty() { 229 229 + return Ok(None); 230 230 + } 231 231 + let addrs: Result<Vec<IpAddr>, _> = self 232 232 + .nameservers 233 233 + .iter() 234 234 + .map(|s| s.parse()) 235 235 + .collect(); 236 236 + addrs.map(Some) 237 237 + } 238 238 + } 239 239 + 240 240 + #[cfg(test)] 241 241 + #[allow(clippy::unwrap_used)] 242 242 + mod tests { 243 243 + use super::*; 244 244 + 245 245 + #[test] 246 246 + fn parse_nameservers_empty_returns_none() { 247 247 + let config = VerifyConfig::default(); 248 248 + let result = config.parse_nameservers().unwrap(); 249 249 + assert_eq!(result, None); 250 250 + } 251 251 + 252 252 + #[test] 253 253 + fn parse_nameservers_valid_ipv4() { 254 254 + let config = VerifyConfig { 255 255 + nameservers: vec!["1.1.1.1".to_string(), "8.8.8.8".to_string()], 256 256 + ..Default::default() 257 257 + }; 258 258 + let result = config.parse_nameservers().unwrap().unwrap(); 259 259 + assert_eq!(result.len(), 2); 260 260 + assert_eq!(result, vec![ 261 261 + "1.1.1.1".parse::<IpAddr>().unwrap(), 262 262 + "8.8.8.8".parse::<IpAddr>().unwrap(), 263 263 + ]); 264 264 + } 265 265 + 266 266 + #[test] 267 267 + fn parse_nameservers_valid_ipv6() { 268 268 + let config = VerifyConfig { 269 269 + nameservers: vec!["2001:4860:4860::8888".to_string()], 270 270 + ..Default::default() 271 271 + }; 272 272 + let result = config.parse_nameservers().unwrap().unwrap(); 273 273 + assert_eq!(result.len(), 1); 274 274 + assert_eq!(result, vec!["2001:4860:4860::8888".parse::<IpAddr>().unwrap()]); 275 275 + } 276 276 + 277 277 + #[test] 278 278 + fn parse_nameservers_mixed_v4_v6() { 279 279 + let config = VerifyConfig { 280 280 + nameservers: vec!["1.1.1.1".to_string(), "::1".to_string()], 281 281 + ..Default::default() 282 282 + }; 283 283 + let result = config.parse_nameservers().unwrap().unwrap(); 284 284 + assert_eq!(result.len(), 2); 285 285 + } 286 286 + 287 287 + #[test] 288 288 + fn parse_nameservers_invalid_returns_err() { 289 289 + let config = VerifyConfig { 290 290 + nameservers: vec!["not-an-ip".to_string()], 291 291 + ..Default::default() 292 292 + }; 293 293 + assert!(config.parse_nameservers().is_err()); 294 294 + } 295 295 + 296 296 + #[test] 297 297 + fn parse_nameservers_one_invalid_fails_all() { 298 298 + let config = VerifyConfig { 299 299 + nameservers: vec!["1.1.1.1".to_string(), "bad".to_string()], 300 300 + ..Default::default() 301 301 + }; 302 302 + assert!(config.parse_nameservers().is_err()); 303 303 + } 304 304 + }

+183

onis-common/src/db.rs

··· 1 1 + //! SQLite database helpers for onis using sqlx. 2 2 + //! 3 3 + //! Two database types: 4 4 + //! - Per-DID databases: one per user, stores their DNS records 5 5 + //! - Reverse index: shared database mapping domains → DIDs + verification status 6 6 + //! 7 7 + //! Migrations live in: 8 8 + //! migrations/user/ — per-DID database migrations 9 9 + //! migrations/index/ — reverse index migrations 10 10 + 11 11 + use std::path::Path; 12 12 + 13 13 + use sqlx::sqlite::{SqliteConnectOptions, SqlitePool, SqlitePoolOptions}; 14 14 + use thiserror::Error; 15 15 + 16 16 + use crate::config::DatabaseConfig; 17 17 + 18 18 + #[derive(Debug, Error)] 19 19 + pub enum DbError { 20 20 + #[error("sqlx error: {0}")] 21 21 + Sqlx(#[from] sqlx::Error), 22 22 + #[error("migrate error: {0}")] 23 23 + Migrate(#[from] sqlx::migrate::MigrateError), 24 24 + #[error("io error: {0}")] 25 25 + Io(#[from] std::io::Error), 26 26 + } 27 27 + 28 28 + /// Opens (or creates) a per-DID SQLite database. 29 29 + /// 30 30 + /// Runs migrations from `migrations/user/` on first open. 31 31 + pub async fn open_user_db(path: &Path, db_config: &DatabaseConfig) -> Result<SqlitePool, DbError> { 32 32 + if let Some(parent) = path.parent() { 33 33 + tokio::fs::create_dir_all(parent).await?; 34 34 + } 35 35 + 36 36 + let opts = SqliteConnectOptions::new() 37 37 + .filename(path) 38 38 + .create_if_missing(true) 39 39 + .journal_mode(sqlx::sqlite::SqliteJournalMode::Wal) 40 40 + .busy_timeout(std::time::Duration::from_secs(db_config.busy_timeout)); 41 41 + 42 42 + let pool = SqlitePoolOptions::new() 43 43 + .max_connections(db_config.user_max_connections) 44 44 + .connect_with(opts) 45 45 + .await?; 46 46 + 47 47 + let migrator = sqlx::migrate!("../migrations/user"); 48 48 + tracing::info!("migrations to run: {}", migrator.migrations.len()); 49 49 + migrator.run(&pool).await?; 50 50 + 51 51 + Ok(pool) 52 52 + } 53 53 + 54 54 + /// Opens (or creates) the shared reverse index database. 55 55 + /// 56 56 + /// Runs migrations from `migrations/index/` on first open. 57 57 + pub async fn open_index_db(path: &Path, db_config: &DatabaseConfig) -> Result<SqlitePool, DbError> { 58 58 + if let Some(parent) = path.parent() { 59 59 + tokio::fs::create_dir_all(parent).await?; 60 60 + } 61 61 + 62 62 + let opts = SqliteConnectOptions::new() 63 63 + .filename(path) 64 64 + .create_if_missing(true) 65 65 + .journal_mode(sqlx::sqlite::SqliteJournalMode::Wal) 66 66 + .busy_timeout(std::time::Duration::from_secs(db_config.busy_timeout)); 67 67 + 68 68 + let pool = SqlitePoolOptions::new() 69 69 + .max_connections(db_config.index_max_connections) 70 70 + .connect_with(opts) 71 71 + .await?; 72 72 + 73 73 + sqlx::migrate!("../migrations/index").run(&pool).await?; 74 74 + 75 75 + Ok(pool) 76 76 + } 77 77 + 78 78 + /// Converts a DID to a filesystem-safe path for its database. 79 79 + /// 80 80 + /// e.g. `did:plc:adtzorbhmmjbzxsl2y4vqlqs` → `{base}/ad/tz/did_plc_adtzorbhmmjbzxsl2y4vqlqs.db` 81 81 + /// e.g. `did:web:vim.sh` → `{base}/vi/m./did_web_vim.sh.db` 82 82 + pub fn did_to_db_path(base: &Path, did: &str) -> std::path::PathBuf { 83 83 + let safe = did.replace(':', "_"); 84 84 + 85 85 + // use first 4 chars after "did_(plc|web)_" for sharding 86 86 + // XXX: this will break if another did method is added 87 87 + // thats method is longer than 3 characters. 88 88 + let shard = if safe.len() > 8 { 89 89 + &safe[8..] 90 90 + } else { 91 91 + &safe 92 92 + }; 93 93 + 94 94 + let (a, b) = if shard.len() >= 4 { 95 95 + (&shard[..2], &shard[2..4]) 96 96 + } else { 97 97 + ("xx", "xx") 98 98 + }; 99 99 + base.join(a).join(b).join(format!("{safe}.db")) 100 100 + } 101 101 + 102 102 + #[cfg(test)] 103 103 + mod tests { 104 104 + use super::*; 105 105 + use std::path::PathBuf; 106 106 + 107 107 + #[test] 108 108 + fn did_plc_standard() { 109 109 + let base = PathBuf::from("/data/dbs"); 110 110 + let path = did_to_db_path(&base, "did:plc:adtzorbhmmjbzxsl2y4vqlqs"); 111 111 + assert_eq!( 112 112 + path, 113 113 + PathBuf::from("/data/dbs/ad/tz/did_plc_adtzorbhmmjbzxsl2y4vqlqs.db") 114 114 + ); 115 115 + } 116 116 + 117 117 + #[test] 118 118 + fn did_web_domain() { 119 119 + let base = PathBuf::from("/data/dbs"); 120 120 + let path = did_to_db_path(&base, "did:web:example.com"); 121 121 + assert_eq!( 122 122 + path, 123 123 + PathBuf::from("/data/dbs/ex/am/did_web_example.com.db") 124 124 + ); 125 125 + } 126 126 + 127 127 + #[test] 128 128 + fn did_web_short_domain() { 129 129 + let base = PathBuf::from("/data/dbs"); 130 130 + let path = did_to_db_path(&base, "did:web:vim.sh"); 131 131 + assert_eq!( 132 132 + path, 133 133 + PathBuf::from("/data/dbs/vi/m./did_web_vim.sh.db") 134 134 + ); 135 135 + } 136 136 + 137 137 + #[test] 138 138 + fn did_web_subdomain() { 139 139 + let base = PathBuf::from("/data/dbs"); 140 140 + let path = did_to_db_path(&base, "did:web:sub.example.com"); 141 141 + assert_eq!( 142 142 + path, 143 143 + PathBuf::from("/data/dbs/su/b./did_web_sub.example.com.db") 144 144 + ); 145 145 + } 146 146 + 147 147 + #[test] 148 148 + fn did_web_very_short_falls_back() { 149 149 + let base = PathBuf::from("/data/dbs"); 150 150 + let path = did_to_db_path(&base, "did:web:a.b"); 151 151 + assert_eq!( 152 152 + path, 153 153 + PathBuf::from("/data/dbs/xx/xx/did_web_a.b.db") 154 154 + ); 155 155 + } 156 156 + 157 157 + #[test] 158 158 + fn did_plc_short_falls_back() { 159 159 + let base = PathBuf::from("/data/dbs"); 160 160 + let path = did_to_db_path(&base, "did:plc:abc"); 161 161 + assert_eq!( 162 162 + path, 163 163 + PathBuf::from("/data/dbs/xx/xx/did_plc_abc.db") 164 164 + ); 165 165 + } 166 166 + 167 167 + #[test] 168 168 + fn different_dids_produce_different_paths() { 169 169 + let base = PathBuf::from("/data/dbs"); 170 170 + let a = did_to_db_path(&base, "did:plc:aaaa1111bbbb2222"); 171 171 + let b = did_to_db_path(&base, "did:plc:cccc3333dddd4444"); 172 172 + assert_ne!(a, b); 173 173 + } 174 174 + 175 175 + #[test] 176 176 + fn same_identifier_different_method_produces_different_paths() { 177 177 + let base = PathBuf::from("/data/dbs"); 178 178 + let plc = did_to_db_path(&base, "did:plc:example.com"); 179 179 + let web = did_to_db_path(&base, "did:web:example.com"); 180 180 + assert_ne!(plc, web); 181 181 + assert_eq!(plc.parent(), web.parent()); 182 182 + } 183 183 + }

+3

onis-common/src/lexicons/mod.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + pub mod record; 3 3 + pub mod systems;

+35

onis-common/src/lexicons/record.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + //!A collection of known record types. 3 3 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 4 4 + #[serde(tag = "$type")] 5 5 + pub enum KnownRecord { 6 6 + #[serde(rename = "systems.kiri.dns")] 7 7 + LexiconsSystemsKiriDns(Box<crate::lexicons::systems::kiri::dns::Record>), 8 8 + #[serde(rename = "systems.kiri.zone")] 9 9 + LexiconsSystemsKiriZone(Box<crate::lexicons::systems::kiri::zone::Record>), 10 10 + } 11 11 + impl From<crate::lexicons::systems::kiri::dns::Record> for KnownRecord { 12 12 + fn from(record: crate::lexicons::systems::kiri::dns::Record) -> Self { 13 13 + KnownRecord::LexiconsSystemsKiriDns(Box::new(record)) 14 14 + } 15 15 + } 16 16 + impl From<crate::lexicons::systems::kiri::dns::RecordData> for KnownRecord { 17 17 + fn from(record_data: crate::lexicons::systems::kiri::dns::RecordData) -> Self { 18 18 + KnownRecord::LexiconsSystemsKiriDns(Box::new(record_data.into())) 19 19 + } 20 20 + } 21 21 + impl From<crate::lexicons::systems::kiri::zone::Record> for KnownRecord { 22 22 + fn from(record: crate::lexicons::systems::kiri::zone::Record) -> Self { 23 23 + KnownRecord::LexiconsSystemsKiriZone(Box::new(record)) 24 24 + } 25 25 + } 26 26 + impl From<crate::lexicons::systems::kiri::zone::RecordData> for KnownRecord { 27 27 + fn from(record_data: crate::lexicons::systems::kiri::zone::RecordData) -> Self { 28 28 + KnownRecord::LexiconsSystemsKiriZone(Box::new(record_data.into())) 29 29 + } 30 30 + } 31 31 + impl Into<atrium_api::types::Unknown> for KnownRecord { 32 32 + fn into(self) -> atrium_api::types::Unknown { 33 33 + atrium_api::types::TryIntoUnknown::try_into_unknown(&self).unwrap() 34 34 + } 35 35 + }

+3

onis-common/src/lexicons/systems.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + //!Definitions for the `systems` namespace. 3 3 + pub mod kiri;

+16

onis-common/src/lexicons/systems/kiri.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + //!Definitions for the `systems.kiri` namespace. 3 3 + pub mod dns; 4 4 + pub mod zone; 5 5 + #[derive(Debug)] 6 6 + pub struct Dns; 7 7 + impl atrium_api::types::Collection for Dns { 8 8 + const NSID: &'static str = "systems.kiri.dns"; 9 9 + type Record = dns::Record; 10 10 + } 11 11 + #[derive(Debug)] 12 12 + pub struct Zone; 13 13 + impl atrium_api::types::Collection for Zone { 14 14 + const NSID: &'static str = "systems.kiri.zone"; 15 15 + type Record = zone::Record; 16 16 + }

+109

onis-common/src/lexicons/systems/kiri/dns.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + //!Definitions for the `systems.kiri.dns` namespace. 3 3 + use atrium_api::types::TryFromUnknown; 4 4 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 5 5 + #[serde(rename_all = "camelCase")] 6 6 + pub struct RecordData { 7 7 + ///Fully qualified domain name, lowercase, no trailing dot. 8 8 + pub domain: String, 9 9 + ///Attached note for informational reasons, not used by dns. 10 10 + #[serde(skip_serializing_if = "core::option::Option::is_none")] 11 11 + pub note: core::option::Option<String>, 12 12 + ///The DNS record data. 13 13 + pub record: atrium_api::types::Union<RecordRecordRefs>, 14 14 + ///Time to live in seconds. Optional — falls back to SOA minimum for the zone if omitted. Server enforces a 60s floor. 15 15 + #[serde(skip_serializing_if = "core::option::Option::is_none")] 16 16 + pub ttl: core::option::Option<atrium_api::types::LimitedU32<2147483647u32>>, 17 17 + } 18 18 + pub type Record = atrium_api::types::Object<RecordData>; 19 19 + impl From<atrium_api::types::Unknown> for RecordData { 20 20 + fn from(value: atrium_api::types::Unknown) -> Self { 21 21 + Self::try_from_unknown(value).unwrap() 22 22 + } 23 23 + } 24 24 + ///A 32 bit Internet address. 25 25 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 26 26 + #[serde(rename_all = "camelCase")] 27 27 + pub struct ARecordData { 28 28 + ///IPv4 address in dotted-decimal notation. 29 29 + pub address: String, 30 30 + } 31 31 + pub type ARecord = atrium_api::types::Object<ARecordData>; 32 32 + ///An 128 bit Internet address. 33 33 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 34 34 + #[serde(rename_all = "camelCase")] 35 35 + pub struct AaaaRecordData { 36 36 + ///IPv6 address in standard notation. 37 37 + pub address: String, 38 38 + } 39 39 + pub type AaaaRecord = atrium_api::types::Object<AaaaRecordData>; 40 40 + ///A domain name which specifies the canonical or primary name for the owner. 41 41 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 42 42 + #[serde(rename_all = "camelCase")] 43 43 + pub struct CnameRecordData { 44 44 + ///The canonical domain name. 45 45 + pub cname: String, 46 46 + } 47 47 + pub type CnameRecord = atrium_api::types::Object<CnameRecordData>; 48 48 + ///A mail exchange record. 49 49 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 50 50 + #[serde(rename_all = "camelCase")] 51 51 + pub struct MxRecordData { 52 52 + ///The mail server hostname. 53 53 + pub exchange: String, 54 54 + ///Priority value. Lower is preferred. 55 55 + pub preference: u16, 56 56 + } 57 57 + pub type MxRecord = atrium_api::types::Object<MxRecordData>; 58 58 + ///Start of authority. Optional — system generates defaults if absent. Serial is also generated. 59 59 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 60 60 + #[serde(rename_all = "camelCase")] 61 61 + pub struct SoaRecordData { 62 62 + pub expire: usize, 63 63 + ///Minimum TTL / negative cache TTL. Also used as the fallback TTL for records in this zone that don't specify one. 64 64 + pub minimum: usize, 65 65 + ///Primary nameserver. 66 66 + pub mname: String, 67 67 + pub refresh: usize, 68 68 + pub retry: usize, 69 69 + ///Responsible person email in DNS format (e.g. admin.example.com). 70 70 + pub rname: String, 71 71 + } 72 72 + pub type SoaRecord = atrium_api::types::Object<SoaRecordData>; 73 73 + ///A service locator record. 74 74 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 75 75 + #[serde(rename_all = "camelCase")] 76 76 + pub struct SrvRecordData { 77 77 + pub port: u16, 78 78 + pub priority: u16, 79 79 + ///The target hostname. 80 80 + pub target: String, 81 81 + pub weight: u16, 82 82 + } 83 83 + pub type SrvRecord = atrium_api::types::Object<SrvRecordData>; 84 84 + ///A text record. TXT-DATA is one or more character strings. 85 85 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 86 86 + #[serde(rename_all = "camelCase")] 87 87 + pub struct TxtRecordData { 88 88 + ///One or more character strings. Each string has a 255-byte max on the wire. 89 89 + pub values: Vec<String>, 90 90 + } 91 91 + pub type TxtRecord = atrium_api::types::Object<TxtRecordData>; 92 92 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 93 93 + #[serde(tag = "$type")] 94 94 + pub enum RecordRecordRefs { 95 95 + #[serde(rename = "systems.kiri.dns#aRecord")] 96 96 + ARecord(Box<ARecord>), 97 97 + #[serde(rename = "systems.kiri.dns#aaaaRecord")] 98 98 + AaaaRecord(Box<AaaaRecord>), 99 99 + #[serde(rename = "systems.kiri.dns#cnameRecord")] 100 100 + CnameRecord(Box<CnameRecord>), 101 101 + #[serde(rename = "systems.kiri.dns#mxRecord")] 102 102 + MxRecord(Box<MxRecord>), 103 103 + #[serde(rename = "systems.kiri.dns#txtRecord")] 104 104 + TxtRecord(Box<TxtRecord>), 105 105 + #[serde(rename = "systems.kiri.dns#srvRecord")] 106 106 + SrvRecord(Box<SrvRecord>), 107 107 + #[serde(rename = "systems.kiri.dns#soaRecord")] 108 108 + SoaRecord(Box<SoaRecord>), 109 109 + }

+18

onis-common/src/lexicons/systems/kiri/zone.rs

··· 1 1 + // @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT. 2 2 + //!Definitions for the `systems.kiri.zone` namespace. 3 3 + use atrium_api::types::TryFromUnknown; 4 4 + #[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)] 5 5 + #[serde(rename_all = "camelCase")] 6 6 + pub struct RecordData { 7 7 + ///The zone apex domain. Lowercase, no trailing dot. 8 8 + pub domain: String, 9 9 + ///Attached note for informational reasons, not used by dns. 10 10 + #[serde(skip_serializing_if = "core::option::Option::is_none")] 11 11 + pub note: core::option::Option<String>, 12 12 + } 13 13 + pub type Record = atrium_api::types::Object<RecordData>; 14 14 + impl From<atrium_api::types::Unknown> for RecordData { 15 15 + fn from(value: atrium_api::types::Unknown) -> Self { 16 16 + Self::try_from_unknown(value).unwrap() 17 17 + } 18 18 + }

+4

onis-common/src/lib.rs

··· 1 1 + pub mod config; 2 2 + pub mod db; 3 3 + pub mod lexicons; 4 4 + pub mod metrics;

+30

onis-common/src/metrics.rs

··· 1 1 + use axum::extract::State; 2 2 + use axum::http::StatusCode; 3 3 + use axum::response::IntoResponse; 4 4 + use axum::routing::get; 5 5 + use axum::Router; 6 6 + 7 7 + pub use metrics_exporter_prometheus::PrometheusHandle; 8 8 + 9 9 + use metrics_exporter_prometheus::PrometheusBuilder; 10 10 + 11 11 + /// Initialize the global metrics recorder and return a handle for rendering. 12 12 + pub fn init() -> Result<PrometheusHandle, metrics_exporter_prometheus::BuildError> { 13 13 + PrometheusBuilder::new().install_recorder() 14 14 + } 15 15 + 16 16 + /// Axum handler that renders all registered metrics in Prometheus exposition format. 17 17 + pub async fn metrics_handler(State(handle): State<PrometheusHandle>) -> impl IntoResponse { 18 18 + ( 19 19 + StatusCode::OK, 20 20 + [("content-type", "text/plain; version=0.0.4; charset=utf-8")], 21 21 + handle.render(), 22 22 + ) 23 23 + } 24 24 + 25 25 + /// Returns a minimal axum router with just `GET /metrics`. 26 26 + pub fn router(handle: PrometheusHandle) -> Router { 27 27 + Router::new() 28 28 + .route("/metrics", get(metrics_handler)) 29 29 + .with_state(handle) 30 30 + }

+27

onis-dns/Cargo.toml

··· 1 1 + [package] 2 2 + name = "onis-dns" 3 3 + version.workspace = true 4 4 + edition.workspace = true 5 5 + 6 6 + [lints] 7 7 + workspace = true 8 8 + 9 9 + [[bin]] 10 10 + name = "onis-dns" 11 11 + path = "src/main.rs" 12 12 + 13 13 + [dependencies] 14 14 + onis-common.workspace = true 15 15 + serde.workspace = true 16 16 + serde_json.workspace = true 17 17 + sqlx.workspace = true 18 18 + tokio.workspace = true 19 19 + tracing.workspace = true 20 20 + tracing-subscriber.workspace = true 21 21 + anyhow.workspace = true 22 22 + hickory-server.workspace = true 23 23 + hickory-proto.workspace = true 24 24 + reqwest.workspace = true 25 25 + async-trait.workspace = true 26 26 + axum.workspace = true 27 27 + metrics.workspace = true

+44

onis-dns/src/client.rs

··· 1 1 + use serde::Deserialize; 2 2 + 3 3 + /// HTTP client for querying the onis appview resolve API. 4 4 + #[derive(Clone)] 5 5 + pub struct AppviewClient { 6 6 + /// Underlying HTTP client. 7 7 + client: reqwest::Client, 8 8 + /// Base URL of the appview, e.g. `"http://localhost:3000"`. 9 9 + base_url: String, 10 10 + } 11 11 + 12 12 + /// Response from the appview `GET /v1/resolve` endpoint. 13 13 + #[derive(Debug, Deserialize)] 14 14 + pub struct ResolveResponse { 15 15 + /// The zone that covers the queried name, if any. 16 16 + pub zone: Option<String>, 17 17 + /// Whether the zone has been verified via DNS delegation. 18 18 + pub verified: bool, 19 19 + /// Matching DNS records as raw JSON values. 20 20 + pub records: Vec<serde_json::Value>, 21 21 + /// Whether any records exist for the exact queried name. 22 22 + pub name_exists: bool, 23 23 + } 24 24 + 25 25 + impl AppviewClient { 26 26 + pub fn new(base_url: String) -> Self { 27 27 + Self { 28 28 + client: reqwest::Client::new(), 29 29 + base_url, 30 30 + } 31 31 + } 32 32 + 33 33 + pub async fn resolve( 34 34 + &self, 35 35 + name: &str, 36 36 + record_type: Option<&str>, 37 37 + ) -> Result<ResolveResponse, reqwest::Error> { 38 38 + let mut url = format!("{}/v1/resolve?name={}", self.base_url, name); 39 39 + if let Some(rt) = record_type { 40 40 + url.push_str(&format!("&type={}", rt)); 41 41 + } 42 42 + self.client.get(&url).send().await?.json().await 43 43 + } 44 44 + }

+852

onis-dns/src/handler.rs

··· 1 1 + use std::net::{Ipv4Addr, Ipv6Addr}; 2 2 + use std::str::FromStr; 3 3 + use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH}; 4 4 + 5 5 + use async_trait::async_trait; 6 6 + use hickory_proto::op::{Header, MessageType, OpCode, ResponseCode}; 7 7 + use hickory_proto::rr::rdata::{A, AAAA, CNAME, MX, NS, SOA, SRV, TXT}; 8 8 + use hickory_proto::rr::{LowerName, Name, RData, Record, RecordType}; 9 9 + use hickory_server::authority::MessageResponseBuilder; 10 10 + use hickory_server::server::{Request, RequestHandler, ResponseHandler, ResponseInfo}; 11 11 + use tracing::{debug, info, warn}; 12 12 + 13 13 + use onis_common::config::DnsConfig; 14 14 + 15 15 + use crate::client::AppviewClient; 16 16 + 17 17 + /// Authoritative DNS request handler backed by the onis appview. 18 18 + /// 19 19 + /// Translates incoming DNS queries into appview resolve calls and converts 20 20 + /// the JSON records back into wire-format DNS responses. 21 21 + pub struct OnisHandler { 22 22 + /// HTTP client for querying the appview resolve API. 23 23 + client: AppviewClient, 24 24 + /// Minimum TTL enforced on all outgoing DNS records. 25 25 + ttl_floor: u32, 26 26 + /// Queries exceeding this duration are logged as slow. 27 27 + slow_query_threshold: Duration, 28 28 + /// TTL used for synthesized SOA records. 29 29 + soa_ttl: u32, 30 30 + /// SOA refresh interval in seconds. 31 31 + soa_refresh: i32, 32 32 + /// SOA retry interval in seconds. 33 33 + soa_retry: i32, 34 34 + /// SOA expire interval in seconds. 35 35 + soa_expire: i32, 36 36 + /// SOA minimum (negative cache) TTL in seconds. 37 37 + soa_minimum: u32, 38 38 + /// SOA MNAME — primary nameserver. 39 39 + soa_mname: Name, 40 40 + /// SOA RNAME — admin contact in DNS format. 41 41 + soa_rname: Name, 42 42 + /// NS records served for all zones. 43 43 + ns_records: Vec<Name>, 44 44 + } 45 45 + 46 46 + impl OnisHandler { 47 47 + pub fn new(client: AppviewClient, config: &DnsConfig) -> Self { 48 48 + let ns_records: Vec<Name> = config 49 49 + .ns 50 50 + .iter() 51 51 + .filter_map(|ns| Name::from_str(ns).ok()) 52 52 + .collect(); 53 53 + 54 54 + Self { 55 55 + client, 56 56 + ttl_floor: config.ttl_floor, 57 57 + slow_query_threshold: Duration::from_millis(config.slow_query_threshold_ms), 58 58 + soa_ttl: config.soa.ttl, 59 59 + soa_refresh: config.soa.refresh, 60 60 + soa_retry: config.soa.retry, 61 61 + soa_expire: config.soa.expire, 62 62 + soa_minimum: config.soa.minimum, 63 63 + soa_mname: Name::from_str(&config.soa.mname).unwrap_or_else(|_| Name::root()), 64 64 + soa_rname: Name::from_str(&config.soa.rname).unwrap_or_else(|_| Name::root()), 65 65 + ns_records, 66 66 + } 67 67 + } 68 68 + 69 69 + fn enforce_ttl(&self, ttl: u32) -> u32 { 70 70 + ttl.max(self.ttl_floor) 71 71 + } 72 72 + 73 73 + fn name_to_domain(name: &LowerName) -> String { 74 74 + name.to_string().trim_end_matches('.').to_string() 75 75 + } 76 76 + 77 77 + fn map_record_type(rtype: RecordType) -> Option<&'static str> { 78 78 + match rtype { 79 79 + RecordType::A => Some("a"), 80 80 + RecordType::AAAA => Some("aaaa"), 81 81 + RecordType::CNAME => Some("cname"), 82 82 + RecordType::MX => Some("mx"), 83 83 + RecordType::TXT => Some("txt"), 84 84 + RecordType::SRV => Some("srv"), 85 85 + RecordType::SOA => Some("soa"), 86 86 + _ => None, 87 87 + } 88 88 + } 89 89 + 90 90 + fn to_fqdn(name: &str) -> Option<Name> { 91 91 + Name::from_str(&format!("{name}.")).ok() 92 92 + } 93 93 + 94 94 + fn now_serial() -> u32 { 95 95 + SystemTime::now() 96 96 + .duration_since(UNIX_EPOCH) 97 97 + .unwrap_or_default() 98 98 + .as_secs() as u32 99 99 + } 100 100 + 101 101 + fn synthesize_soa(&self, zone: &str) -> Record { 102 102 + let name = Self::to_fqdn(zone).unwrap_or_else(Name::root); 103 103 + Record::from_rdata( 104 104 + name, 105 105 + self.enforce_ttl(self.soa_ttl), 106 106 + RData::SOA(SOA::new( 107 107 + self.soa_mname.clone(), 108 108 + self.soa_rname.clone(), 109 109 + Self::now_serial(), 110 110 + self.soa_refresh, 111 111 + self.soa_retry, 112 112 + self.soa_expire, 113 113 + self.soa_minimum, 114 114 + )), 115 115 + ) 116 116 + } 117 117 + 118 118 + fn synthesize_ns(&self, zone: &str) -> Vec<Record> { 119 119 + let name = Self::to_fqdn(zone).unwrap_or_else(Name::root); 120 120 + let ttl = self.enforce_ttl(self.soa_ttl); 121 121 + self.ns_records 122 122 + .iter() 123 123 + .map(|ns| { 124 124 + Record::from_rdata(name.clone(), ttl, RData::NS(NS(ns.clone()))) 125 125 + }) 126 126 + .collect() 127 127 + } 128 128 + 129 129 + fn convert_record(&self, value: &serde_json::Value) -> Option<Record> { 130 130 + let domain = value.get("domain")?.as_str()?; 131 131 + let name = Self::to_fqdn(domain)?; 132 132 + 133 133 + let ttl_raw = value 134 134 + .get("ttl") 135 135 + .and_then(|v| v.as_u64()) 136 136 + .unwrap_or(self.soa_minimum as u64); 137 137 + let ttl = self.enforce_ttl(ttl_raw as u32); 138 138 + 139 139 + let record = value.get("record")?; 140 140 + let rtype = record.get("$type")?.as_str()?; 141 141 + 142 142 + let rdata: RData = match rtype { 143 143 + "systems.kiri.dns#aRecord" => { 144 144 + let addr: Ipv4Addr = record.get("address")?.as_str()?.parse().ok()?; 145 145 + RData::A(A(addr)) 146 146 + } 147 147 + "systems.kiri.dns#aaaaRecord" => { 148 148 + let addr: Ipv6Addr = record.get("address")?.as_str()?.parse().ok()?; 149 149 + RData::AAAA(AAAA(addr)) 150 150 + } 151 151 + "systems.kiri.dns#cnameRecord" => { 152 152 + let target = record.get("cname")?.as_str()?; 153 153 + RData::CNAME(CNAME(Self::to_fqdn(target)?)) 154 154 + } 155 155 + "systems.kiri.dns#mxRecord" => { 156 156 + let pref = record.get("preference")?.as_u64()? as u16; 157 157 + let exchange = record.get("exchange")?.as_str()?; 158 158 + RData::MX(MX::new( 159 159 + pref, 160 160 + Self::to_fqdn(exchange)?, 161 161 + )) 162 162 + } 163 163 + "systems.kiri.dns#txtRecord" => { 164 164 + let values = record.get("values")?.as_array()?; 165 165 + let strings: Vec<String> = values 166 166 + .iter() 167 167 + .filter_map(|v| v.as_str()) 168 168 + .map(String::from) 169 169 + .collect(); 170 170 + RData::TXT(TXT::new(strings)) 171 171 + } 172 172 + "systems.kiri.dns#srvRecord" => { 173 173 + let priority = record.get("priority")?.as_u64()? as u16; 174 174 + let weight = record.get("weight")?.as_u64()? as u16; 175 175 + let port = record.get("port")?.as_u64()? as u16; 176 176 + let target = record.get("target")?.as_str()?; 177 177 + RData::SRV(SRV::new( 178 178 + priority, 179 179 + weight, 180 180 + port, 181 181 + Self::to_fqdn(target)?, 182 182 + )) 183 183 + } 184 184 + "systems.kiri.dns#soaRecord" => { 185 185 + let mname = record.get("mname")?.as_str()?; 186 186 + let rname = record.get("rname")?.as_str()?; 187 187 + let refresh = record.get("refresh")?.as_u64()? as i32; 188 188 + let retry = record.get("retry")?.as_u64()? as i32; 189 189 + let expire = record.get("expire")?.as_u64()? as i32; 190 190 + let minimum = record.get("minimum")?.as_u64()? as u32; 191 191 + RData::SOA(SOA::new( 192 192 + Self::to_fqdn(mname)?, 193 193 + Self::to_fqdn(rname)?, 194 194 + Self::now_serial(), 195 195 + refresh, 196 196 + retry, 197 197 + expire, 198 198 + minimum, 199 199 + )) 200 200 + } 201 201 + _ => return None, 202 202 + }; 203 203 + 204 204 + Some(Record::from_rdata(name, ttl, rdata)) 205 205 + } 206 206 + 207 207 + /// Get the SOA record for a zone, synthesizing if the user hasn't published one. 208 208 + async fn get_soa(&self, zone: &str) -> Record { 209 209 + if let Ok(resp) = self.client.resolve(zone, Some("soa")).await { 210 210 + for val in &resp.records { 211 211 + if let Some(record) = self.convert_record(val) { 212 212 + return record; 213 213 + } 214 214 + } 215 215 + } 216 216 + self.synthesize_soa(zone) 217 217 + } 218 218 + 219 219 + fn response_header(request: &Request, rcode: ResponseCode) -> Header { 220 220 + let mut header = Header::new(); 221 221 + header.set_id(request.header().id()); 222 222 + header.set_message_type(MessageType::Response); 223 223 + header.set_op_code(OpCode::Query); 224 224 + header.set_authoritative(true); 225 225 + header.set_recursion_desired(request.header().recursion_desired()); 226 226 + header.set_recursion_available(false); 227 227 + header.set_response_code(rcode); 228 228 + header 229 229 + } 230 230 + 231 231 + fn error_response_info(rcode: ResponseCode) -> ResponseInfo { 232 232 + let mut header = Header::new(); 233 233 + header.set_response_code(rcode); 234 234 + header.into() 235 235 + } 236 236 + 237 237 + async fn send_error<R: ResponseHandler>( 238 238 + request: &Request, 239 239 + response_handle: &mut R, 240 240 + start: &Instant, 241 241 + qtype_str: &str, 242 242 + rcode: ResponseCode, 243 243 + rcode_label: &str, 244 244 + ) -> ResponseInfo { 245 245 + let builder = MessageResponseBuilder::from_message_request(request); 246 246 + let response = builder.error_msg(request.header(), rcode); 247 247 + record_query_metrics(start, qtype_str, rcode_label); 248 248 + response_handle 249 249 + .send_response(response) 250 250 + .await 251 251 + .unwrap_or_else(|e| { 252 252 + warn!(error = %e, rcode = rcode_label, "failed to send error response"); 253 253 + Self::error_response_info(ResponseCode::ServFail) 254 254 + }) 255 255 + } 256 256 + 257 257 + async fn send_dns_response<R: ResponseHandler>( 258 258 + &self, 259 259 + request: &Request, 260 260 + response_handle: &mut R, 261 261 + start: &Instant, 262 262 + domain: &str, 263 263 + qtype_str: &str, 264 264 + rcode: ResponseCode, 265 265 + rcode_label: &str, 266 266 + answers: &[Record], 267 267 + nameservers: &[Record], 268 268 + authority: &[Record], 269 269 + ) -> ResponseInfo { 270 270 + let header = Self::response_header(request, rcode); 271 271 + let builder = MessageResponseBuilder::from_message_request(request); 272 272 + let response = builder.build( 273 273 + header, 274 274 + answers.iter(), 275 275 + nameservers.iter(), 276 276 + authority.iter(), 277 277 + std::iter::empty(), 278 278 + ); 279 279 + 280 280 + let elapsed = start.elapsed(); 281 281 + info!( 282 282 + domain = %domain, 283 283 + qtype = %qtype_str, 284 284 + rcode = rcode_label, 285 285 + answers = answers.len(), 286 286 + duration_ms = elapsed.as_millis() as u64, 287 287 + src = %request.src(), 288 288 + "query complete" 289 289 + ); 290 290 + 291 291 + if elapsed > self.slow_query_threshold { 292 292 + warn!( 293 293 + domain = %domain, 294 294 + qtype = %qtype_str, 295 295 + duration_ms = elapsed.as_millis() as u64, 296 296 + "slow query" 297 297 + ); 298 298 + } 299 299 + 300 300 + record_query_metrics(start, qtype_str, rcode_label); 301 301 + response_handle 302 302 + .send_response(response) 303 303 + .await 304 304 + .unwrap_or_else(|e| { 305 305 + warn!(error = %e, "failed to send DNS response"); 306 306 + Self::error_response_info(ResponseCode::ServFail) 307 307 + }) 308 308 + } 309 309 + } 310 310 + 311 311 + #[async_trait] 312 312 + impl RequestHandler for OnisHandler { 313 313 + async fn handle_request<R: ResponseHandler>( 314 314 + &self, 315 315 + request: &Request, 316 316 + mut response_handle: R, 317 317 + ) -> ResponseInfo { 318 318 + let start = Instant::now(); 319 319 + 320 320 + // Only handle standard queries 321 321 + if request.header().message_type() != MessageType::Query 322 322 + || request.header().op_code() != OpCode::Query 323 323 + { 324 324 + return Self::send_error( 325 325 + request, &mut response_handle, &start, 326 326 + "UNKNOWN", ResponseCode::NotImp, "NOTIMP", 327 327 + ).await; 328 328 + } 329 329 + 330 330 + let queries = request.queries(); 331 331 + if queries.is_empty() { 332 332 + return Self::send_error( 333 333 + request, &mut response_handle, &start, 334 334 + "UNKNOWN", ResponseCode::FormErr, "FORMERR", 335 335 + ).await; 336 336 + } 337 337 + 338 338 + let query = &queries[0]; 339 339 + let qname = query.name(); 340 340 + let qtype = query.query_type(); 341 341 + let qtype_str = format!("{qtype:?}"); 342 342 + let domain = Self::name_to_domain(qname); 343 343 + 344 344 + debug!( 345 345 + domain = %domain, 346 346 + qtype = ?qtype, 347 347 + src = %request.src(), 348 348 + "query" 349 349 + ); 350 350 + 351 351 + // Resolve against the appview — single call, appview walks the zone tree 352 352 + let resp = match self.client.resolve(&domain, None).await { 353 353 + Ok(r) => r, 354 354 + Err(e) => { 355 355 + warn!(error = %e, domain = %domain, "appview request failed"); 356 356 + return Self::send_error( 357 357 + request, &mut response_handle, &start, 358 358 + &qtype_str, ResponseCode::ServFail, "SERVFAIL", 359 359 + ).await; 360 360 + } 361 361 + }; 362 362 + 363 363 + // No zone found or zone not verified → REFUSED 364 364 + let zone = match resp.zone { 365 365 + Some(ref z) if resp.verified => z.clone(), 366 366 + _ => { 367 367 + debug!(domain = %domain, "no verified zone, refusing"); 368 368 + return self.send_dns_response( 369 369 + request, &mut response_handle, &start, 370 370 + &domain, &qtype_str, 371 371 + ResponseCode::Refused, "REFUSED", 372 372 + &[], &[], &[], 373 373 + ).await; 374 374 + } 375 375 + }; 376 376 + 377 377 + let soa_record = self.get_soa(&zone).await; 378 378 + let ns_records = self.synthesize_ns(&zone); 379 379 + 380 380 + // Handle NS queries — always return auto-generated NS records 381 381 + if qtype == RecordType::NS { 382 382 + return self.send_dns_response( 383 383 + request, &mut response_handle, &start, 384 384 + &domain, &qtype_str, 385 385 + ResponseCode::NoError, "NOERROR", 386 386 + &ns_records, &[], std::slice::from_ref(&soa_record), 387 387 + ).await; 388 388 + } 389 389 + 390 390 + // Handle SOA queries 391 391 + if qtype == RecordType::SOA { 392 392 + return self.send_dns_response( 393 393 + request, &mut response_handle, &start, 394 394 + &domain, &qtype_str, 395 395 + ResponseCode::NoError, "NOERROR", 396 396 + std::slice::from_ref(&soa_record), &ns_records, &[], 397 397 + ).await; 398 398 + } 399 399 + 400 400 + // Map query type to appview type string 401 401 + let type_str = match Self::map_record_type(qtype) { 402 402 + Some(t) => t, 403 403 + None => { 404 404 + // Unsupported type for a zone we serve → NODATA 405 405 + return self.send_dns_response( 406 406 + request, &mut response_handle, &start, 407 407 + &domain, &qtype_str, 408 408 + ResponseCode::NoError, "NOERROR/NODATA", 409 409 + &[], &[], std::slice::from_ref(&soa_record), 410 410 + ).await; 411 411 + } 412 412 + }; 413 413 + 414 414 + // Query the appview API for the specific record type 415 415 + let typed_resp = match self.client.resolve(&domain, Some(type_str)).await { 416 416 + Ok(r) => r, 417 417 + Err(e) => { 418 418 + warn!(error = %e, domain = %domain, "appview typed request failed"); 419 419 + return Self::send_error( 420 420 + request, &mut response_handle, &start, 421 421 + &qtype_str, ResponseCode::ServFail, "SERVFAIL", 422 422 + ).await; 423 423 + } 424 424 + }; 425 425 + 426 426 + // Convert appview records to DNS records 427 427 + let answers: Vec<Record> = typed_resp 428 428 + .records 429 429 + .iter() 430 430 + .filter_map(|v| self.convert_record(v)) 431 431 + .collect(); 432 432 + 433 433 + if answers.is_empty() { 434 434 + let (rcode, label) = if resp.name_exists { 435 435 + (ResponseCode::NoError, "NOERROR/NODATA") 436 436 + } else { 437 437 + (ResponseCode::NXDomain, "NXDOMAIN") 438 438 + }; 439 439 + self.send_dns_response( 440 440 + request, &mut response_handle, &start, 441 441 + &domain, &qtype_str, 442 442 + rcode, label, 443 443 + &[], &[], std::slice::from_ref(&soa_record), 444 444 + ).await 445 445 + } else { 446 446 + self.send_dns_response( 447 447 + request, &mut response_handle, &start, 448 448 + &domain, &qtype_str, 449 449 + ResponseCode::NoError, "NOERROR", 450 450 + &answers, &ns_records, &[], 451 451 + ).await 452 452 + } 453 453 + } 454 454 + } 455 455 + 456 456 + fn record_query_metrics(start: &Instant, qtype: &str, rcode: &str) { 457 457 + metrics::counter!("dns_queries_total", "qtype" => qtype.to_owned(), "rcode" => rcode.to_owned()) 458 458 + .increment(1); 459 459 + metrics::histogram!("dns_query_duration_seconds") 460 460 + .record(start.elapsed().as_secs_f64()); 461 461 + } 462 462 + 463 463 + #[cfg(test)] 464 464 + #[allow(clippy::unwrap_used)] 465 465 + mod tests { 466 466 + use std::net::{Ipv4Addr, Ipv6Addr}; 467 467 + use std::str::FromStr; 468 468 + 469 469 + use hickory_proto::rr::{LowerName, Name, RData, RecordType}; 470 470 + use serde_json::json; 471 471 + 472 472 + use crate::client::AppviewClient; 473 473 + use onis_common::config::DnsConfig; 474 474 + 475 475 + use super::OnisHandler; 476 476 + 477 477 + fn test_handler() -> OnisHandler { 478 478 + let client = AppviewClient::new("http://test:3000".to_string()); 479 479 + let config = DnsConfig::default(); 480 480 + OnisHandler::new(client, &config) 481 481 + } 482 482 + 483 483 + #[test] 484 484 + fn enforce_ttl_below_floor() { 485 485 + let handler = test_handler(); 486 486 + assert_eq!(handler.enforce_ttl(10), 60); 487 487 + } 488 488 + 489 489 + #[test] 490 490 + fn enforce_ttl_above_floor() { 491 491 + let handler = test_handler(); 492 492 + assert_eq!(handler.enforce_ttl(300), 300); 493 493 + } 494 494 + 495 495 + #[test] 496 496 + fn enforce_ttl_at_floor() { 497 497 + let handler = test_handler(); 498 498 + assert_eq!(handler.enforce_ttl(60), 60); 499 499 + } 500 500 + 501 501 + #[test] 502 502 + fn enforce_ttl_zero() { 503 503 + let handler = test_handler(); 504 504 + assert_eq!(handler.enforce_ttl(0), 60); 505 505 + } 506 506 + 507 507 + #[test] 508 508 + fn name_to_domain_strips_trailing_dot() { 509 509 + let name = LowerName::from(Name::from_str("example.com.").unwrap()); 510 510 + assert_eq!(OnisHandler::name_to_domain(&name), "example.com"); 511 511 + } 512 512 + 513 513 + #[test] 514 514 + fn name_to_domain_subdomain() { 515 515 + let name = LowerName::from(Name::from_str("sub.example.com.").unwrap()); 516 516 + assert_eq!(OnisHandler::name_to_domain(&name), "sub.example.com"); 517 517 + } 518 518 + 519 519 + #[test] 520 520 + fn name_to_domain_root() { 521 521 + let name = LowerName::from(Name::root()); 522 522 + assert_eq!(OnisHandler::name_to_domain(&name), ""); 523 523 + } 524 524 + 525 525 + #[test] 526 526 + fn map_record_type_supported() { 527 527 + assert_eq!(OnisHandler::map_record_type(RecordType::A), Some("a")); 528 528 + assert_eq!(OnisHandler::map_record_type(RecordType::AAAA), Some("aaaa")); 529 529 + assert_eq!(OnisHandler::map_record_type(RecordType::CNAME), Some("cname")); 530 530 + assert_eq!(OnisHandler::map_record_type(RecordType::MX), Some("mx")); 531 531 + assert_eq!(OnisHandler::map_record_type(RecordType::TXT), Some("txt")); 532 532 + assert_eq!(OnisHandler::map_record_type(RecordType::SRV), Some("srv")); 533 533 + assert_eq!(OnisHandler::map_record_type(RecordType::SOA), Some("soa")); 534 534 + } 535 535 + 536 536 + #[test] 537 537 + fn map_record_type_unsupported_returns_none() { 538 538 + assert_eq!(OnisHandler::map_record_type(RecordType::NS), None); 539 539 + assert_eq!(OnisHandler::map_record_type(RecordType::PTR), None); 540 540 + } 541 541 + 542 542 + #[test] 543 543 + fn convert_a_record() { 544 544 + let handler = test_handler(); 545 545 + let value = json!({ 546 546 + "domain": "example.com", 547 547 + "ttl": 300, 548 548 + "record": { 549 549 + "$type": "systems.kiri.dns#aRecord", 550 550 + "address": "1.2.3.4" 551 551 + } 552 552 + }); 553 553 + let record = handler.convert_record(&value).unwrap(); 554 554 + assert_eq!(record.name(), &Name::from_str("example.com.").unwrap()); 555 555 + assert_eq!(record.ttl(), 300); 556 556 + match record.data() { 557 557 + RData::A(a) => assert_eq!(a.0, Ipv4Addr::new(1, 2, 3, 4)), 558 558 + other => unreachable!("expected A record, got {other:?}"), 559 559 + } 560 560 + } 561 561 + 562 562 + #[test] 563 563 + fn convert_aaaa_record() { 564 564 + let handler = test_handler(); 565 565 + let value = json!({ 566 566 + "domain": "example.com", 567 567 + "ttl": 300, 568 568 + "record": { 569 569 + "$type": "systems.kiri.dns#aaaaRecord", 570 570 + "address": "2001:db8::1" 571 571 + } 572 572 + }); 573 573 + let record = handler.convert_record(&value).unwrap(); 574 574 + match record.data() { 575 575 + RData::AAAA(aaaa) => { 576 576 + assert_eq!(aaaa.0, Ipv6Addr::from_str("2001:db8::1").unwrap()); 577 577 + } 578 578 + other => unreachable!("expected AAAA record, got {other:?}"), 579 579 + } 580 580 + } 581 581 + 582 582 + #[test] 583 583 + fn convert_cname_record() { 584 584 + let handler = test_handler(); 585 585 + let value = json!({ 586 586 + "domain": "www.example.com", 587 587 + "ttl": 300, 588 588 + "record": { 589 589 + "$type": "systems.kiri.dns#cnameRecord", 590 590 + "cname": "example.com" 591 591 + } 592 592 + }); 593 593 + let record = handler.convert_record(&value).unwrap(); 594 594 + assert_eq!(record.name(), &Name::from_str("www.example.com.").unwrap()); 595 595 + match record.data() { 596 596 + RData::CNAME(cname) => { 597 597 + assert_eq!(cname.0, Name::from_str("example.com.").unwrap()); 598 598 + } 599 599 + other => unreachable!("expected CNAME record, got {other:?}"), 600 600 + } 601 601 + } 602 602 + 603 603 + #[test] 604 604 + fn convert_mx_record() { 605 605 + let handler = test_handler(); 606 606 + let value = json!({ 607 607 + "domain": "example.com", 608 608 + "ttl": 300, 609 609 + "record": { 610 610 + "$type": "systems.kiri.dns#mxRecord", 611 611 + "preference": 10, 612 612 + "exchange": "mail.example.com" 613 613 + } 614 614 + }); 615 615 + let record = handler.convert_record(&value).unwrap(); 616 616 + match record.data() { 617 617 + RData::MX(mx) => { 618 618 + assert_eq!(mx.preference(), 10); 619 619 + assert_eq!( 620 620 + mx.exchange(), 621 621 + &Name::from_str("mail.example.com.").unwrap() 622 622 + ); 623 623 + } 624 624 + other => unreachable!("expected MX record, got {other:?}"), 625 625 + } 626 626 + } 627 627 + 628 628 + #[test] 629 629 + fn convert_txt_record() { 630 630 + let handler = test_handler(); 631 631 + let value = json!({ 632 632 + "domain": "example.com", 633 633 + "ttl": 300, 634 634 + "record": { 635 635 + "$type": "systems.kiri.dns#txtRecord", 636 636 + "values": ["v=spf1 include:example.com ~all"] 637 637 + } 638 638 + }); 639 639 + let record = handler.convert_record(&value).unwrap(); 640 640 + match record.data() { 641 641 + RData::TXT(txt) => { 642 642 + let text: String = txt 643 643 + .txt_data() 644 644 + .iter() 645 645 + .map(|d| String::from_utf8_lossy(d).to_string()) 646 646 + .collect::<Vec<_>>() 647 647 + .join(""); 648 648 + assert_eq!(text, "v=spf1 include:example.com ~all"); 649 649 + } 650 650 + other => unreachable!("expected TXT record, got {other:?}"), 651 651 + } 652 652 + } 653 653 + 654 654 + #[test] 655 655 + fn convert_srv_record() { 656 656 + let handler = test_handler(); 657 657 + let value = json!({ 658 658 + "domain": "_sip._tcp.example.com", 659 659 + "ttl": 300, 660 660 + "record": { 661 661 + "$type": "systems.kiri.dns#srvRecord", 662 662 + "priority": 10, 663 663 + "weight": 60, 664 664 + "port": 5060, 665 665 + "target": "sip.example.com" 666 666 + } 667 667 + }); 668 668 + let record = handler.convert_record(&value).unwrap(); 669 669 + match record.data() { 670 670 + RData::SRV(srv) => { 671 671 + assert_eq!(srv.priority(), 10); 672 672 + assert_eq!(srv.weight(), 60); 673 673 + assert_eq!(srv.port(), 5060); 674 674 + assert_eq!(srv.target(), &Name::from_str("sip.example.com.").unwrap()); 675 675 + } 676 676 + other => unreachable!("expected SRV record, got {other:?}"), 677 677 + } 678 678 + } 679 679 + 680 680 + #[test] 681 681 + fn convert_soa_record() { 682 682 + let handler = test_handler(); 683 683 + let value = json!({ 684 684 + "domain": "example.com", 685 685 + "ttl": 3600, 686 686 + "record": { 687 687 + "$type": "systems.kiri.dns#soaRecord", 688 688 + "mname": "ns1.example.com", 689 689 + "rname": "admin.example.com", 690 690 + "refresh": 3600, 691 691 + "retry": 900, 692 692 + "expire": 604800, 693 693 + "minimum": 300 694 694 + } 695 695 + }); 696 696 + let record = handler.convert_record(&value).unwrap(); 697 697 + match record.data() { 698 698 + RData::SOA(soa) => { 699 699 + assert_eq!(soa.mname(), &Name::from_str("ns1.example.com.").unwrap()); 700 700 + assert_eq!(soa.rname(), &Name::from_str("admin.example.com.").unwrap()); 701 701 + assert_eq!(soa.refresh(), 3600); 702 702 + assert_eq!(soa.retry(), 900); 703 703 + assert_eq!(soa.expire(), 604800); 704 704 + assert_eq!(soa.minimum(), 300); 705 705 + } 706 706 + other => unreachable!("expected SOA record, got {other:?}"), 707 707 + } 708 708 + } 709 709 + 710 710 + #[test] 711 711 + fn convert_record_missing_domain_returns_none() { 712 712 + let handler = test_handler(); 713 713 + let value = json!({ 714 714 + "record": { 715 715 + "$type": "systems.kiri.dns#aRecord", 716 716 + "address": "1.2.3.4" 717 717 + } 718 718 + }); 719 719 + assert!(handler.convert_record(&value).is_none()); 720 720 + } 721 721 + 722 722 + #[test] 723 723 + fn convert_record_missing_record_returns_none() { 724 724 + let handler = test_handler(); 725 725 + let value = json!({ 726 726 + "domain": "example.com" 727 727 + }); 728 728 + assert!(handler.convert_record(&value).is_none()); 729 729 + } 730 730 + 731 731 + #[test] 732 732 + fn convert_record_missing_type_returns_none() { 733 733 + let handler = test_handler(); 734 734 + let value = json!({ 735 735 + "domain": "example.com", 736 736 + "record": { 737 737 + "address": "1.2.3.4" 738 738 + } 739 739 + }); 740 740 + assert!(handler.convert_record(&value).is_none()); 741 741 + } 742 742 + 743 743 + #[test] 744 744 + fn convert_record_unknown_type_returns_none() { 745 745 + let handler = test_handler(); 746 746 + let value = json!({ 747 747 + "domain": "example.com", 748 748 + "record": { 749 749 + "$type": "systems.kiri.dns#ptrRecord", 750 750 + "name": "1.2.3.4.in-addr.arpa" 751 751 + } 752 752 + }); 753 753 + assert!(handler.convert_record(&value).is_none()); 754 754 + } 755 755 + 756 756 + #[test] 757 757 + fn convert_record_invalid_ip_returns_none() { 758 758 + let handler = test_handler(); 759 759 + let value = json!({ 760 760 + "domain": "example.com", 761 761 + "record": { 762 762 + "$type": "systems.kiri.dns#aRecord", 763 763 + "address": "not-an-ip" 764 764 + } 765 765 + }); 766 766 + assert!(handler.convert_record(&value).is_none()); 767 767 + } 768 768 + 769 769 + #[test] 770 770 + fn convert_record_ttl_defaults_to_soa_minimum() { 771 771 + let handler = test_handler(); 772 772 + let value = json!({ 773 773 + "domain": "example.com", 774 774 + "record": { 775 775 + "$type": "systems.kiri.dns#aRecord", 776 776 + "address": "1.2.3.4" 777 777 + } 778 778 + }); 779 779 + let record = handler.convert_record(&value).unwrap(); 780 780 + // Default soa_minimum is 300, above the ttl_floor of 60 781 781 + assert_eq!(record.ttl(), 300); 782 782 + } 783 783 + 784 784 + #[test] 785 785 + fn convert_record_ttl_enforces_floor() { 786 786 + let handler = test_handler(); 787 787 + let value = json!({ 788 788 + "domain": "example.com", 789 789 + "ttl": 10, 790 790 + "record": { 791 791 + "$type": "systems.kiri.dns#aRecord", 792 792 + "address": "1.2.3.4" 793 793 + } 794 794 + }); 795 795 + let record = handler.convert_record(&value).unwrap(); 796 796 + assert_eq!(record.ttl(), 60); 797 797 + } 798 798 + 799 799 + #[test] 800 800 + fn synthesize_soa_uses_config_defaults() { 801 801 + let handler = test_handler(); 802 802 + let record = handler.synthesize_soa("example.com"); 803 803 + assert_eq!(record.name(), &Name::from_str("example.com.").unwrap()); 804 804 + assert_eq!(record.ttl(), 3600); 805 805 + match record.data() { 806 806 + RData::SOA(soa) => { 807 807 + assert_eq!(soa.mname(), &Name::from_str("ns1.kiri.systems.").unwrap()); 808 808 + assert_eq!(soa.rname(), &Name::from_str("admin.kiri.systems.").unwrap()); 809 809 + assert_eq!(soa.refresh(), 3600); 810 810 + assert_eq!(soa.retry(), 900); 811 811 + assert_eq!(soa.expire(), 604800); 812 812 + assert_eq!(soa.minimum(), 300); 813 813 + } 814 814 + other => unreachable!("expected SOA record, got {other:?}"), 815 815 + } 816 816 + } 817 817 + 818 818 + #[test] 819 819 + fn synthesize_ns_returns_configured_nameservers() { 820 820 + let handler = test_handler(); 821 821 + let records = handler.synthesize_ns("example.com"); 822 822 + assert_eq!(records.len(), 2); 823 823 + let names: Vec<String> = records 824 824 + .iter() 825 825 + .map(|r| match r.data() { 826 826 + RData::NS(ns) => ns.0.to_string(), 827 827 + other => unreachable!("expected NS record, got {other:?}"), 828 828 + }) 829 829 + .collect(); 830 830 + assert!(names.contains(&"ns1.kiri.systems.".to_string())); 831 831 + assert!(names.contains(&"ns2.kiri.systems.".to_string())); 832 832 + } 833 833 + 834 834 + #[test] 835 835 + fn synthesize_ns_uses_zone_name() { 836 836 + let handler = test_handler(); 837 837 + let records = handler.synthesize_ns("example.com"); 838 838 + let expected = Name::from_str("example.com.").unwrap(); 839 839 + for record in &records { 840 840 + assert_eq!(record.name(), &expected); 841 841 + } 842 842 + } 843 843 + 844 844 + #[test] 845 845 + fn synthesize_ns_ttl_matches_soa() { 846 846 + let handler = test_handler(); 847 847 + let records = handler.synthesize_ns("example.com"); 848 848 + for record in &records { 849 849 + assert_eq!(record.ttl(), 3600); 850 850 + } 851 851 + } 852 852 + }

+67

onis-dns/src/main.rs

··· 1 1 + use std::time::Duration; 2 2 + 3 3 + use anyhow::Result; 4 4 + use hickory_server::ServerFuture; 5 5 + use onis_common::config::OnisConfig; 6 6 + use tokio::net::{TcpListener, UdpSocket}; 7 7 + use tracing_subscriber::EnvFilter; 8 8 + 9 9 + mod client; 10 10 + mod handler; 11 11 + 12 12 + #[tokio::main] 13 13 + async fn main() -> Result<()> { 14 14 + tracing_subscriber::fmt() 15 15 + .with_env_filter(EnvFilter::from_default_env()) 16 16 + .json() 17 17 + .init(); 18 18 + 19 19 + let metrics_handle = onis_common::metrics::init() 20 20 + .map_err(|e| anyhow::anyhow!("failed to install metrics recorder: {e}"))?; 21 21 + 22 22 + metrics::describe_counter!("dns_queries_total", "Total DNS queries"); 23 23 + metrics::describe_histogram!( 24 24 + "dns_query_duration_seconds", 25 25 + "DNS query duration" 26 26 + ); 27 27 + 28 28 + let config = OnisConfig::load()?; 29 29 + let cfg = &config.dns; 30 30 + 31 31 + tracing::info!( 32 32 + appview_url = %cfg.appview_url, 33 33 + port = cfg.port, 34 34 + "onis-dns starting" 35 35 + ); 36 36 + 37 37 + let client = client::AppviewClient::new(cfg.appview_url.clone()); 38 38 + let handler = handler::OnisHandler::new(client, cfg); 39 39 + 40 40 + let mut server = ServerFuture::new(handler); 41 41 + 42 42 + let udp_addr = format!("{}:{}", cfg.bind, cfg.port); 43 43 + let tcp_addr = format!("{}:{}", cfg.bind, cfg.port); 44 44 + 45 45 + let udp = UdpSocket::bind(&udp_addr).await?; 46 46 + let tcp = TcpListener::bind(&tcp_addr).await?; 47 47 + 48 48 + tracing::info!("listening on UDP and TCP {udp_addr}"); 49 49 + 50 50 + server.register_socket(udp); 51 51 + server.register_listener(tcp, Duration::from_secs(cfg.tcp_timeout)); 52 52 + 53 53 + let metrics_bind = cfg.metrics_bind.clone(); 54 54 + let metrics_server = tokio::spawn(async move { 55 55 + let app = onis_common::metrics::router(metrics_handle); 56 56 + let listener = tokio::net::TcpListener::bind(&metrics_bind).await.unwrap(); 57 57 + tracing::info!("metrics listening on {metrics_bind}"); 58 58 + axum::serve(listener, app).await.unwrap(); 59 59 + }); 60 60 + 61 61 + tokio::select! { 62 62 + _ = tokio::signal::ctrl_c() => tracing::info!("shutting down"), 63 63 + _ = metrics_server => tracing::error!("metrics server exited unexpectedly"), 64 64 + } 65 65 + 66 66 + Ok(()) 67 67 + }

+26

onis-verify/Cargo.toml

··· 1 1 + [package] 2 2 + name = "onis-verify" 3 3 + version.workspace = true 4 4 + edition.workspace = true 5 5 + 6 6 + [lints] 7 7 + workspace = true 8 8 + 9 9 + [[bin]] 10 10 + name = "onis-verify" 11 11 + path = "src/main.rs" 12 12 + 13 13 + [dependencies] 14 14 + onis-common.workspace = true 15 15 + serde.workspace = true 16 16 + serde_json.workspace = true 17 17 + sqlx.workspace = true 18 18 + tokio.workspace = true 19 19 + tracing.workspace = true 20 20 + tracing-subscriber.workspace = true 21 21 + anyhow.workspace = true 22 22 + hickory-resolver.workspace = true 23 23 + reqwest.workspace = true 24 24 + axum.workspace = true 25 25 + chrono.workspace = true 26 26 + metrics.workspace = true

+103

onis-verify/src/api.rs

··· 1 1 + use std::sync::Arc; 2 2 + use std::time::Instant; 3 3 + 4 4 + use axum::{Json, Router, extract::State, http::StatusCode, routing::post}; 5 5 + use onis_common::metrics::PrometheusHandle; 6 6 + use serde::{Deserialize, Serialize}; 7 7 + 8 8 + use crate::checker::Checker; 9 9 + use crate::client::AppviewClient; 10 10 + 11 11 + /// Shared state for the verification HTTP API. 12 12 + pub struct VerifyState { 13 13 + /// DNS delegation checker used for on-demand and scheduled verification. 14 14 + pub checker: Checker, 15 15 + /// HTTP client for communicating verification results to the appview. 16 16 + pub client: AppviewClient, 17 17 + /// Prometheus metrics handle for the `/metrics` endpoint. 18 18 + pub metrics_handle: PrometheusHandle, 19 19 + } 20 20 + 21 21 + pub fn router(state: Arc<VerifyState>) -> Router { 22 22 + let metrics_router = onis_common::metrics::router(state.metrics_handle.clone()); 23 23 + 24 24 + Router::new() 25 25 + .route("/verify", post(verify)) 26 26 + .with_state(state) 27 27 + .merge(metrics_router) 28 28 + } 29 29 + 30 30 + /// Request body for the `POST /verify` endpoint. 31 31 + #[derive(Deserialize)] 32 32 + struct VerifyRequest { 33 33 + /// Domain name of the zone to verify. 34 34 + zone: String, 35 35 + /// DID of the zone owner. 36 36 + did: String, 37 37 + } 38 38 + 39 39 + /// Response body returned by the `POST /verify` endpoint. 40 40 + #[derive(Serialize)] 41 41 + struct VerifyResponse { 42 42 + /// Domain name of the zone that was checked. 43 43 + zone: String, 44 44 + /// Whether the zone passed delegation verification. 45 45 + verified: bool, 46 46 + /// NS records found for the zone during the check. 47 47 + ns_records: Vec<String>, 48 48 + /// Whether a matching TXT proof record was found. 49 49 + txt_match: bool, 50 50 + } 51 51 + 52 52 + async fn verify( 53 53 + State(state): State<Arc<VerifyState>>, 54 54 + Json(body): Json<VerifyRequest>, 55 55 + ) -> Result<Json<VerifyResponse>, StatusCode> { 56 56 + let start = Instant::now(); 57 57 + 58 58 + let result = state 59 59 + .checker 60 60 + .check_zone(&body.zone, &body.did) 61 61 + .await 62 62 + .map_err(|e| { 63 63 + tracing::error!(zone = %body.zone, error = %e, "on-demand verification failed"); 64 64 + metrics::counter!("verification_checks_total", "result" => "error").increment(1); 65 65 + metrics::histogram!("verification_check_duration_seconds") 66 66 + .record(start.elapsed().as_secs_f64()); 67 67 + StatusCode::INTERNAL_SERVER_ERROR 68 68 + })?; 69 69 + 70 70 + let result_label = if result.verified { "verified" } else { "unverified" }; 71 71 + metrics::counter!("verification_checks_total", "result" => result_label).increment(1); 72 72 + metrics::histogram!("verification_check_duration_seconds") 73 73 + .record(start.elapsed().as_secs_f64()); 74 74 + 75 75 + if let Err(e) = state 76 76 + .client 77 77 + .set_verification(&body.zone, &body.did, result.verified) 78 78 + .await 79 79 + { 80 80 + tracing::error!( 81 81 + zone = %body.zone, 82 82 + did = %body.did, 83 83 + error = %e, 84 84 + "failed to update verification status" 85 85 + ); 86 86 + return Err(StatusCode::INTERNAL_SERVER_ERROR); 87 87 + } 88 88 + 89 89 + tracing::info!( 90 90 + zone = %body.zone, 91 91 + did = %body.did, 92 92 + verified = result.verified, 93 93 + ns = ?result.ns_records, 94 94 + "on-demand verification complete" 95 95 + ); 96 96 + 97 97 + Ok(Json(VerifyResponse { 98 98 + zone: body.zone, 99 99 + verified: result.verified, 100 100 + ns_records: result.ns_records, 101 101 + txt_match: result.txt_match, 102 102 + })) 103 103 + }

+158

onis-verify/src/checker.rs

··· 1 1 + use std::net::IpAddr; 2 2 + 3 3 + use anyhow::{Context, Result}; 4 4 + use hickory_resolver::config::{NameServerConfigGroup, ResolverConfig}; 5 5 + use hickory_resolver::name_server::TokioConnectionProvider; 6 6 + use hickory_resolver::TokioResolver; 7 7 + 8 8 + pub struct Checker { 9 9 + expected_ns: Vec<String>, 10 10 + nameservers: Option<Vec<IpAddr>>, 11 11 + dns_port: u16, 12 12 + } 13 13 + 14 14 + pub struct CheckResult { 15 15 + pub verified: bool, 16 16 + pub ns_records: Vec<String>, 17 17 + pub txt_match: bool, 18 18 + } 19 19 + 20 20 + impl Checker { 21 21 + pub fn new(expected_ns: Vec<String>, nameservers: Option<Vec<IpAddr>>, dns_port: u16) -> Self { 22 22 + let expected_ns = expected_ns 23 23 + .into_iter() 24 24 + .map(|ns| ns.to_lowercase().trim_end_matches('.').to_string()) 25 25 + .collect(); 26 26 + 27 27 + Self { 28 28 + expected_ns, 29 29 + nameservers, 30 30 + dns_port, 31 31 + } 32 32 + } 33 33 + 34 34 + fn build_resolver(&self) -> Result<TokioResolver> { 35 35 + let resolver = match &self.nameservers { 36 36 + Some(addrs) => { 37 37 + let ns_group = NameServerConfigGroup::from_ips_clear(addrs, self.dns_port, true); 38 38 + let config = ResolverConfig::from_parts(None, vec![], ns_group); 39 39 + TokioResolver::builder_with_config(config, TokioConnectionProvider::default()) 40 40 + .build() 41 41 + } 42 42 + None => TokioResolver::builder_tokio() 43 43 + .context("failed to read system resolver config")? 44 44 + .build(), 45 45 + }; 46 46 + 47 47 + Ok(resolver) 48 48 + } 49 49 + 50 50 + pub async fn check_zone(&self, zone: &str, did: &str) -> Result<CheckResult> { 51 51 + let resolver = self.build_resolver()?; 52 52 + 53 53 + let fqdn = if zone.ends_with('.') { 54 54 + zone.to_string() 55 55 + } else { 56 56 + format!("{zone}.") 57 57 + }; 58 58 + 59 59 + let ns_lookup = resolver 60 60 + .ns_lookup(&fqdn) 61 61 + .await 62 62 + .context("NS lookup failed")?; 63 63 + 64 64 + let ns_records: Vec<String> = ns_lookup 65 65 + .iter() 66 66 + .map(|ns| ns.to_string().to_lowercase().trim_end_matches('.').to_string()) 67 67 + .collect(); 68 68 + 69 69 + tracing::debug!( 70 70 + zone = %zone, 71 71 + ns = ?ns_records, 72 72 + "NS lookup result" 73 73 + ); 74 74 + 75 75 + let ns_valid = self.expected_ns.iter().all(|expected| { 76 76 + ns_records.iter().any(|actual| actual == expected) 77 77 + }); 78 78 + 79 79 + let txt_name = format!("_onis-verify.{fqdn}"); 80 80 + let txt_match = match resolver.txt_lookup(&txt_name).await { 81 81 + Ok(txt_lookup) => txt_lookup.iter().any(|txt| { 82 82 + let value: String = txt 83 83 + .txt_data() 84 84 + .iter() 85 85 + .map(|d| String::from_utf8_lossy(d)) 86 86 + .collect(); 87 87 + value.trim() == did 88 88 + }), 89 89 + Err(e) => { 90 90 + tracing::debug!( 91 91 + zone = %zone, 92 92 + name = %txt_name, 93 93 + error = %e, 94 94 + "TXT ownership lookup failed or no record found" 95 95 + ); 96 96 + false 97 97 + } 98 98 + }; 99 99 + 100 100 + tracing::debug!( 101 101 + zone = %zone, 102 102 + ns_valid, 103 103 + txt_match, 104 104 + did = %did, 105 105 + "verification check result" 106 106 + ); 107 107 + 108 108 + let verified = ns_valid && txt_match; 109 109 + 110 110 + Ok(CheckResult { 111 111 + verified, 112 112 + ns_records, 113 113 + txt_match, 114 114 + }) 115 115 + } 116 116 + } 117 117 + 118 118 + #[cfg(test)] 119 119 + mod tests { 120 120 + use super::*; 121 121 + 122 122 + #[test] 123 123 + fn new_normalizes_trailing_dots() { 124 124 + let checker = Checker::new( 125 125 + vec![ 126 126 + "ns1.example.com.".to_string(), 127 127 + "ns2.example.com.".to_string(), 128 128 + ], 129 129 + None, 130 130 + 53, 131 131 + ); 132 132 + assert_eq!(checker.expected_ns, vec!["ns1.example.com", "ns2.example.com"]); 133 133 + } 134 134 + 135 135 + #[test] 136 136 + fn new_normalizes_to_lowercase() { 137 137 + let checker = Checker::new(vec!["NS1.Example.COM".to_string()], None, 53); 138 138 + assert_eq!(checker.expected_ns, vec!["ns1.example.com"]); 139 139 + } 140 140 + 141 141 + #[test] 142 142 + fn new_normalizes_case_and_dots() { 143 143 + let checker = Checker::new(vec!["NS1.Example.COM.".to_string()], None, 53); 144 144 + assert_eq!(checker.expected_ns, vec!["ns1.example.com"]); 145 145 + } 146 146 + 147 147 + #[test] 148 148 + fn new_empty_expected_ns() { 149 149 + let checker = Checker::new(vec![], None, 53); 150 150 + assert!(checker.expected_ns.is_empty()); 151 151 + } 152 152 + 153 153 + #[test] 154 154 + fn new_preserves_dns_port() { 155 155 + let checker = Checker::new(vec![], None, 5353); 156 156 + assert_eq!(checker.dns_port, 5353); 157 157 + } 158 158 + }

+93

onis-verify/src/client.rs

··· 1 1 + use anyhow::{Context, Result}; 2 2 + use serde::{Deserialize, Serialize}; 3 3 + 4 4 + /// HTTP client for communicating with the onis appview API. 5 5 + #[derive(Clone)] 6 6 + pub struct AppviewClient { 7 7 + /// Underlying HTTP client. 8 8 + client: reqwest::Client, 9 9 + /// Base URL of the appview, e.g. `"http://localhost:3000"`. 10 10 + base_url: String, 11 11 + } 12 12 + 13 13 + /// A zone that is due for re-verification, returned by the appview stale zones endpoint. 14 14 + #[derive(Debug, Deserialize)] 15 15 + pub struct StaleZoneEntry { 16 16 + /// Domain name of the zone. 17 17 + pub zone: String, 18 18 + /// DID of the zone owner. 19 19 + pub did: String, 20 20 + /// Current verification status. 21 21 + pub verified: bool, 22 22 + /// Unix timestamp when the zone was first seen. 23 23 + pub first_seen: i64, 24 24 + /// Unix timestamp of the last successful verification, if any. 25 25 + pub last_verified: Option<i64>, 26 26 + } 27 27 + 28 28 + /// Wire format for the `GET /v1/zones/stale` response. 29 29 + #[derive(Debug, Deserialize)] 30 30 + struct StaleZonesResponse { 31 31 + /// List of zones needing re-verification. 32 32 + zones: Vec<StaleZoneEntry>, 33 33 + } 34 34 + 35 35 + /// Request body for `PUT /v1/verification`. 36 36 + #[derive(Serialize)] 37 37 + struct VerificationBody { 38 38 + /// Domain name of the zone. 39 39 + zone: String, 40 40 + /// DID of the zone owner. 41 41 + did: String, 42 42 + /// Whether the zone passed delegation verification. 43 43 + verified: bool, 44 44 + } 45 45 + 46 46 + impl AppviewClient { 47 47 + pub fn new(base_url: String) -> Self { 48 48 + Self { 49 49 + client: reqwest::Client::new(), 50 50 + base_url, 51 51 + } 52 52 + } 53 53 + 54 54 + pub async fn get_stale_zones(&self, checked_before: i64) -> Result<Vec<StaleZoneEntry>> { 55 55 + let url = format!( 56 56 + "{}/v1/zones/stale?checked_before={}", 57 57 + self.base_url, checked_before 58 58 + ); 59 59 + 60 60 + let body: StaleZonesResponse = self 61 61 + .client 62 62 + .get(&url) 63 63 + .send() 64 64 + .await 65 65 + .context("failed to fetch stale zones")? 66 66 + .error_for_status() 67 67 + .context("stale zones request failed")? 68 68 + .json() 69 69 + .await 70 70 + .context("failed to deserialize stale zones response")?; 71 71 + 72 72 + Ok(body.zones) 73 73 + } 74 74 + 75 75 + pub async fn set_verification(&self, zone: &str, did: &str, verified: bool) -> Result<()> { 76 76 + let url = format!("{}/v1/verification", self.base_url); 77 77 + 78 78 + self.client 79 79 + .put(&url) 80 80 + .json(&VerificationBody { 81 81 + zone: zone.to_string(), 82 82 + did: did.to_string(), 83 83 + verified, 84 84 + }) 85 85 + .send() 86 86 + .await 87 87 + .context("failed to set verification")? 88 88 + .error_for_status() 89 89 + .with_context(|| format!("set verification for {zone} failed"))?; 90 90 + 91 91 + Ok(()) 92 92 + } 93 93 + }

+182

onis-verify/src/main.rs

··· 1 1 + use std::sync::Arc; 2 2 + use std::time::{Duration, Instant}; 3 3 + 4 4 + use anyhow::Result; 5 5 + use onis_common::config::OnisConfig; 6 6 + use tracing_subscriber::EnvFilter; 7 7 + 8 8 + mod api; 9 9 + mod checker; 10 10 + mod client; 11 11 + 12 12 + use checker::Checker; 13 13 + use client::AppviewClient; 14 14 + 15 15 + #[tokio::main] 16 16 + async fn main() -> Result<()> { 17 17 + tracing_subscriber::fmt() 18 18 + .with_env_filter(EnvFilter::from_default_env()) 19 19 + .json() 20 20 + .init(); 21 21 + 22 22 + let metrics_handle = onis_common::metrics::init() 23 23 + .map_err(|e| anyhow::anyhow!("failed to install metrics recorder: {e}"))?; 24 24 + 25 25 + metrics::describe_counter!( 26 26 + "verification_checks_total", 27 27 + "Total verification checks" 28 28 + ); 29 29 + metrics::describe_histogram!( 30 30 + "verification_check_duration_seconds", 31 31 + "Verification check duration" 32 32 + ); 33 33 + metrics::describe_gauge!( 34 34 + "verification_zones_verified", 35 35 + "Number of verified zones" 36 36 + ); 37 37 + metrics::describe_gauge!( 38 38 + "verification_zones_unverified", 39 39 + "Number of unverified zones" 40 40 + ); 41 41 + 42 42 + let config = OnisConfig::load()?; 43 43 + let cfg = &config.verify; 44 44 + 45 45 + let nameservers = cfg.parse_nameservers() 46 46 + .map_err(|e| anyhow::anyhow!("invalid nameserver address: {e}"))?; 47 47 + 48 48 + tracing::info!( 49 49 + appview_url = %cfg.appview_url, 50 50 + port = cfg.port, 51 51 + check_interval = cfg.check_interval, 52 52 + recheck_interval = cfg.recheck_interval, 53 53 + expected_ns = ?cfg.expected_ns, 54 54 + "onis-verify starting" 55 55 + ); 56 56 + 57 57 + let client = AppviewClient::new(cfg.appview_url.clone()); 58 58 + let checker = Checker::new(cfg.expected_ns.clone(), nameservers, cfg.dns_port); 59 59 + 60 60 + let state = Arc::new(api::VerifyState { 61 61 + checker, 62 62 + client, 63 63 + metrics_handle, 64 64 + }); 65 65 + 66 66 + let api_bind = format!("{}:{}", cfg.bind, cfg.port); 67 67 + let api_state = state.clone(); 68 68 + let api_handle = tokio::spawn(async move { 69 69 + let app = api::router(api_state); 70 70 + let listener = tokio::net::TcpListener::bind(&api_bind).await.unwrap(); 71 71 + tracing::info!("verify API listening on {api_bind}"); 72 72 + axum::serve(listener, app).await.unwrap(); 73 73 + }); 74 74 + 75 75 + let check_interval = Duration::from_secs(cfg.check_interval); 76 76 + let recheck_interval = cfg.recheck_interval; 77 77 + let scheduler_state = state.clone(); 78 78 + let scheduler_handle = tokio::spawn(async move { 79 79 + run_scheduler(scheduler_state, check_interval, recheck_interval).await; 80 80 + }); 81 81 + 82 82 + tokio::select! { 83 83 + _ = api_handle => tracing::error!("verify API exited unexpectedly"), 84 84 + _ = scheduler_handle => tracing::error!("scheduler exited unexpectedly"), 85 85 + _ = tokio::signal::ctrl_c() => tracing::info!("shutting down"), 86 86 + } 87 87 + 88 88 + Ok(()) 89 89 + } 90 90 + 91 91 + async fn run_scheduler(state: Arc<api::VerifyState>, interval: Duration, recheck_interval: i64) { 92 92 + loop { 93 93 + tokio::time::sleep(interval).await; 94 94 + 95 95 + let now = chrono::Utc::now().timestamp(); 96 96 + let stale_threshold = now - recheck_interval; 97 97 + 98 98 + let zones = match state.client.get_stale_zones(stale_threshold).await { 99 99 + Ok(z) => z, 100 100 + Err(e) => { 101 101 + tracing::error!(error = %e, "failed to fetch stale zones"); 102 102 + continue; 103 103 + } 104 104 + }; 105 105 + 106 106 + if zones.is_empty() { 107 107 + tracing::debug!("no stale zones to check"); 108 108 + continue; 109 109 + } 110 110 + 111 111 + tracing::info!(count = zones.len(), "checking stale zones"); 112 112 + 113 113 + let mut verified_count: u64 = 0; 114 114 + let mut unverified_count: u64 = 0; 115 115 + 116 116 + for zone_entry in &zones { 117 117 + let check_start = Instant::now(); 118 118 + 119 119 + let result = match state.checker.check_zone(&zone_entry.zone, &zone_entry.did).await { 120 120 + Ok(r) => r, 121 121 + Err(e) => { 122 122 + tracing::warn!( 123 123 + zone = %zone_entry.zone, 124 124 + did = %zone_entry.did, 125 125 + error = %e, 126 126 + "verification check failed" 127 127 + ); 128 128 + metrics::counter!("verification_checks_total", "result" => "error") 129 129 + .increment(1); 130 130 + metrics::histogram!("verification_check_duration_seconds") 131 131 + .record(check_start.elapsed().as_secs_f64()); 132 132 + continue; 133 133 + } 134 134 + }; 135 135 + 136 136 + let result_label = if result.verified { "verified" } else { "unverified" }; 137 137 + metrics::counter!("verification_checks_total", "result" => result_label).increment(1); 138 138 + metrics::histogram!("verification_check_duration_seconds") 139 139 + .record(check_start.elapsed().as_secs_f64()); 140 140 + 141 141 + if result.verified { 142 142 + verified_count += 1; 143 143 + } else { 144 144 + unverified_count += 1; 145 145 + } 146 146 + 147 147 + if let Err(e) = state 148 148 + .client 149 149 + .set_verification(&zone_entry.zone, &zone_entry.did, result.verified) 150 150 + .await 151 151 + { 152 152 + tracing::error!( 153 153 + zone = %zone_entry.zone, 154 154 + did = %zone_entry.did, 155 155 + error = %e, 156 156 + "failed to update verification status" 157 157 + ); 158 158 + continue; 159 159 + } 160 160 + 161 161 + if result.verified != zone_entry.verified { 162 162 + tracing::info!( 163 163 + zone = %zone_entry.zone, 164 164 + did = %zone_entry.did, 165 165 + old = zone_entry.verified, 166 166 + new = result.verified, 167 167 + ns = ?result.ns_records, 168 168 + "verification status changed" 169 169 + ); 170 170 + } else { 171 171 + tracing::debug!( 172 172 + zone = %zone_entry.zone, 173 173 + verified = result.verified, 174 174 + "verification status unchanged" 175 175 + ); 176 176 + } 177 177 + } 178 178 + 179 179 + metrics::gauge!("verification_zones_verified").set(verified_count as f64); 180 180 + metrics::gauge!("verification_zones_unverified").set(unverified_count as f64); 181 181 + } 182 182 + }