senke/veza
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
veza/veza-stream-server/Cargo.toml

193 lines
4.1 KiB
TOML
Raw Normal View History

adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
[package]
name = "stream_server"
version = "0.2.0"
edition = "2021"
authors = ["Stream Server Team <team@streamserver.com>"]
description = "High-performance audio streaming server with advanced features"
license = "MIT"
repository = "https://github.com/your-org/veza-stream-server"
default-run = "stream_server"
[[bin]]
name = "stream_server"
path = "src/main.rs"
[[bin]]
name = "simple_stream_server"
path = "src/simple_stream_server.rs"
[dependencies]
# Core web framework
feat(stream): add JWT revocation persistante Redis (P3.1) - Add SessionRevocationStore trait with InMemoryRevocationStore and RedisRevocationStore - Wire Redis store when REDIS_URL in config.cache, fallback in-memory - Session revocation by session_id persists across restarts when using Redis Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 21:10:07 +00:00
axum = { version = "0.8", features = ["macros", "multipart", "ws"] }
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
# ALIGNED WITH ORIGIN: Tokio 1.35 (was 1.0)
tokio = { version = "1.35", features = ["full"] }
tokio-tungstenite = "0.21"
tower = { version = "0.4", features = ["full"] }
tower-http = { version = "0.5", features = ["fs", "cors", "compression-gzip", "compression-br", "trace", "timeout"] }
hyper = { version = "1.0", features = ["full"] }
# Production performance & concurrency
fix(deps): upgrade outdated Rust dependencies across services stream-server (Cargo.toml): - sqlx 0.7 -> 0.8 - redis 0.25 -> 0.27 (fix query_async generic args in revocation_store.rs) - bcrypt 0.15 -> 0.17 - thiserror 1.0 -> 2.0 - dashmap 5.5 -> 6.1 veza-common (Cargo.toml): - sqlx 0.7 -> 0.8 (required to avoid libsqlite3-sys link conflict) - thiserror 1.0 -> 2.0 chat-server (Cargo.toml): - sqlx 0.7 -> 0.8 (alignment with veza-common) Addresses audit findings D2, A06: outdated Rust dependencies. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:18:34 +00:00
dashmap = "6.1"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
parking_lot = "0.12"
rayon = "1.10"
crossbeam = "0.8"
flume = "0.11"
# Serialization
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
toml = "0.8"
bincode = "1.3"
# Async utilities
futures = "0.3"
futures-util = "0.3"
P0: stabilisation backend/chat/stream + nouvelle base migrations v1 Backend Go: - Remplacement complet des anciennes migrations par la base V1 alignée sur ORIGIN. - Durcissement global du parsing JSON (BindAndValidateJSON + RespondWithAppError). - Sécurisation de config.go, CORS, statuts de santé et monitoring. - Implémentation des transactions P0 (RBAC, duplication de playlists, social toggles). - Ajout d’un job worker structuré (emails, analytics, thumbnails) + tests associés. - Nouvelle doc backend : AUDIT_CONFIG, BACKEND_CONFIG, AUTH_PASSWORD_RESET, JOB_WORKER_*. Chat server (Rust): - Refonte du pipeline JWT + sécurité, audit et rate limiting avancé. - Implémentation complète du cycle de message (read receipts, delivered, edit/delete, typing). - Nettoyage des panics, gestion d’erreurs robuste, logs structurés. - Migrations chat alignées sur le schéma UUID et nouvelles features. Stream server (Rust): - Refonte du moteur de streaming (encoding pipeline + HLS) et des modules core. - Transactions P0 pour les jobs et segments, garanties d’atomicité. - Documentation détaillée de la pipeline (AUDIT_STREAM_*, DESIGN_STREAM_PIPELINE, TRANSACTIONS_P0_IMPLEMENTATION). Documentation & audits: - TRIAGE.md et AUDIT_STABILITY.md à jour avec l’état réel des 3 services. - Cartographie complète des migrations et des transactions (DB_MIGRATIONS_*, DB_TRANSACTION_PLAN, AUDIT_DB_TRANSACTIONS, TRANSACTION_TESTS_PHASE3). - Scripts de reset et de cleanup pour la lab DB et la V1. Ce commit fige l’ensemble du travail de stabilisation P0 (UUID, backend, chat et stream) avant les phases suivantes (Coherence Guardian, WS hardening, etc.).
2025-12-06 10:14:38 +00:00
async-channel = "2.1"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
# Logging and tracing
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter", "json", "chrono"] }
tracing-appender = "0.2"
# Audio processing & codecs
symphonia = { version = "0.5", features = ["all"] }
hound = "3.5"
minimp3 = "0.5"
rubato = "0.15"
# opus = "0.3" # Requires cmake
# lame = "0.1" # May require native dependencies
# fdkaac = { version = "0.7", optional = true } # Not available on crates.io
fix(backend): re-enable audio streaming dependencies - Uncommented m3u8-rs in stream-server configuration - This unblocks the audio streaming capability for the MVP
2026-01-11 02:19:18 +00:00
# Streaming protocols
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
# webrtc = "0.7" # Complex native dependencies
# webrtc-util = "0.7"
m3u8-rs = "5.0"
# FFT and signal processing
rustfft = "6.2"
apodize = "1.0"
dasp = "0.11"
# Compression
brotli = "3.4"
lz4_flex = "0.11"
zstd = "0.13"
# Database & Cache
fix(deps): upgrade outdated Rust dependencies across services stream-server (Cargo.toml): - sqlx 0.7 -> 0.8 - redis 0.25 -> 0.27 (fix query_async generic args in revocation_store.rs) - bcrypt 0.15 -> 0.17 - thiserror 1.0 -> 2.0 - dashmap 5.5 -> 6.1 veza-common (Cargo.toml): - sqlx 0.7 -> 0.8 (required to avoid libsqlite3-sys link conflict) - thiserror 1.0 -> 2.0 chat-server (Cargo.toml): - sqlx 0.7 -> 0.8 (alignment with veza-common) Addresses audit findings D2, A06: outdated Rust dependencies. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:18:34 +00:00
sqlx = { version = "0.8", features = ["runtime-tokio-rustls", "postgres", "chrono", "uuid"] }
fix(ci): correct Rust service paths and reactivate CD pipeline - Fix chat-ci.yml and stream-ci.yml to reference veza-chat-server/ and veza-stream-server/ instead of non-existent apps/ paths - Add veza-common/ to CI triggers so shared library changes are tested - Reactivate CD pipeline with Docker registry push and Kubernetes deployment steps (gated on secrets availability) - Standardize Redis dependency to v0.32 across both Rust services Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-12 21:44:56 +00:00
redis = { version = "0.32", features = ["tokio-comp", "connection-manager"] }
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
deadpool-redis = "0.15"
# Metadata extraction
id3 = "1.13"
metaflac = "0.2"
# Memory management and optimization
fix(release): v1.0.1 — Conformité complète ROADMAP checklist - Sécurité: npm 0 CRITICAL, cargo audit 0 vulnérabilités - OpenAPI: @Param id corrigé pour /tracks/quota/{id} - Tests: Payment E2E passe, OAuth DATABASE_URL fallback - Migrations: 000_mark_consolidated.sql - veza-stream-server: prometheus 0.14, validator 0.19 - docs: SECURITY_SCAN_RC1, V1_SIGNOFF, PROJECT_STATE
2026-03-03 19:17:54 +00:00
bytes = "1.11"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
memmap2 = "0.9"
# HTTP client
reqwest = { version = "0.11", features = ["json", "stream"] }
# Utilities
refonte: backend-api go first; phase 1
2025-12-13 02:34:34 +00:00
veza-common = { path = "../veza-common" }
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
uuid = { version = "1.6", features = ["v4", "serde"] }
chrono = { version = "0.4", features = ["serde"] }
fix(deps): upgrade outdated Rust dependencies across services stream-server (Cargo.toml): - sqlx 0.7 -> 0.8 - redis 0.25 -> 0.27 (fix query_async generic args in revocation_store.rs) - bcrypt 0.15 -> 0.17 - thiserror 1.0 -> 2.0 - dashmap 5.5 -> 6.1 veza-common (Cargo.toml): - sqlx 0.7 -> 0.8 (required to avoid libsqlite3-sys link conflict) - thiserror 1.0 -> 2.0 chat-server (Cargo.toml): - sqlx 0.7 -> 0.8 (alignment with veza-common) Addresses audit findings D2, A06: outdated Rust dependencies. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:18:34 +00:00
thiserror = "2.0"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
anyhow = "1.0"
feat(stream): add JWT revocation persistante Redis (P3.1) - Add SessionRevocationStore trait with InMemoryRevocationStore and RedisRevocationStore - Wire Redis store when REDIS_URL in config.cache, fallback in-memory - Session revocation by session_id persists across restarts when using Redis Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 21:10:07 +00:00
async-trait = "0.1"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
# Cryptography and security
sha2 = "0.10"
hmac = "0.12"
feat(stream): add JWT revocation persistante Redis (P3.1) - Add SessionRevocationStore trait with InMemoryRevocationStore and RedisRevocationStore - Wire Redis store when REDIS_URL in config.cache, fallback in-memory - Session revocation by session_id persists across restarts when using Redis Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 21:10:07 +00:00
jsonwebtoken = { version = "10", features = ["aws_lc_rs"] }
fix(deps): upgrade outdated Rust dependencies across services stream-server (Cargo.toml): - sqlx 0.7 -> 0.8 - redis 0.25 -> 0.27 (fix query_async generic args in revocation_store.rs) - bcrypt 0.15 -> 0.17 - thiserror 1.0 -> 2.0 - dashmap 5.5 -> 6.1 veza-common (Cargo.toml): - sqlx 0.7 -> 0.8 (required to avoid libsqlite3-sys link conflict) - thiserror 1.0 -> 2.0 chat-server (Cargo.toml): - sqlx 0.7 -> 0.8 (alignment with veza-common) Addresses audit findings D2, A06: outdated Rust dependencies. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:18:34 +00:00
bcrypt = "0.17"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
ring = "0.17"
# Configuration
clap = { version = "4.4", features = ["derive"] }
# Metrics and monitoring
fix(release): v1.0.1 — Conformité complète ROADMAP checklist - Sécurité: npm 0 CRITICAL, cargo audit 0 vulnérabilités - OpenAPI: @Param id corrigé pour /tracks/quota/{id} - Tests: Payment E2E passe, OAuth DATABASE_URL fallback - Migrations: 000_mark_consolidated.sql - veza-stream-server: prometheus 0.14, validator 0.19 - docs: SECURITY_SCAN_RC1, V1_SIGNOFF, PROJECT_STATE
2026-03-03 19:17:54 +00:00
prometheus = "0.14"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
metrics-exporter-prometheus = "0.13"
metrics = "0.22"
# File watching
notify = "6.1"
# Rate limiting
governor = "0.6"
# Environment variables
fix(v0.12.6.1): remediate remaining 15 MEDIUM + LOW pentest findings MEDIUM-002: Remove manual X-Forwarded-For parsing in metrics_protection.go, use c.ClientIP() only (respects SetTrustedProxies) MEDIUM-003: Pin ClamAV Docker image to 1.4 across all compose files MEDIUM-004: Add clampLimit(100) to 15+ handlers that parsed limit directly MEDIUM-006: Remove unsafe-eval from CSP script-src on Swagger routes MEDIUM-007: Pin all GitHub Actions to SHA in 11 workflow files MEDIUM-008: Replace rabbitmq:3-management-alpine with rabbitmq:3-alpine in prod MEDIUM-009: Add trial-already-used check in subscription service MEDIUM-010: Add 60s periodic token re-validation to WebSocket connections MEDIUM-011: Mask email in auth handler logs with maskEmail() helper MEDIUM-012: Add k-anonymity threshold (k=5) to playback analytics stats LOW-001: Align frontend password policy to 12 chars (matching backend) LOW-003: Replace deprecated dotenv with dotenvy crate in Rust stream server LOW-004: Enable xpack.security in Elasticsearch dev/local compose files LOW-005: Accept context.Context in CleanupExpiredSessions instead of Background() LOW-002: Noted — Hyperswitch version update deferred (requires payment integration tests) 29/30 findings remediated. 1 noted (LOW-002). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 05:13:38 +00:00
# SECURITY(LOW-003): Updated from deprecated 0.15 to maintained dotenvy fork
dotenvy = "0.15"
adding initial stream server (Rust)
2025-12-03 19:36:56 +00:00
# Regex
regex = "1.10"
# Random number generation
rand = "0.8"
# System information
sysinfo = "0.30"
num_cpus = "1.0"
# LRU Cache
lru = "0.12"
# Process management
daemonize = "0.5"
# Lazy static initialization
once_cell = "1.19"
lazy_static = "1.4"
# Validation et sécurité
subtle = "2.4"
mime_guess = "2.0"
tokio-util = { version = "0.7", features = ["codec"] }
headers = "0.4"
axum-extra = { version = "0.9", features = ["typed-header"] }
hex = "0.4"
url = "2.5"
# gRPC support
tonic = { version = "0.11", features = ["transport", "prost"] }
prost = "0.12"
prost-types = "0.12"
tokio-stream = { version = "0.1", features = ["sync"] }
# RabbitMQ client (ORIGIN Architecture - Event Bus)
lapin = "2.3"
[build-dependencies]
tonic-build = "0.11"
[dev-dependencies]
tokio-test = "0.4"
tempfile = "3.8"
criterion = "0.5"
[[bench]]
name = "http_range_bench"
harness = false
[profile.release]
opt-level = 3
lto = true
codegen-units = 1
panic = "abort"
strip = true
[profile.dev]
opt-level = 0
debug = true
overflow-checks = true
[features]
default = ["tracing"]
metrics = []
tracing = ["tracing-subscriber/json"]
redis = []
jaeger = []
Reference in a new issue Copy permalink