radrootsd

commit cbb08c1f5b2f0e7bbc3c545756294b81754b8e89
parent 73b2e305181f53cb4c05fb5d40725b4ca63a4b6d
Author: triesap <tyson@radroots.org>
Date:   Tue,  4 Aug 2026 20:23:35 +0000

build: pin lib dependencies by revision

- resolve public runtime crates from the approved Lib commit
- retain exact alpha package-version constraints
- keep coverage artifacts under extbuild-owned routing
- enforce the immutable transport dependency boundary in tests

Diffstat:
M
Cargo.lock
 | 
10
++++++++++
M
Cargo.toml
 | 
16
++++++++--------
M
flake.nix
 | 
3
---
M
tests/source_boundary.rs
 | 
6
++++--

4 files changed, 22 insertions(+), 13 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
@@ -1604,6 +1604,7 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 [[package]]
 name = "radroots_blossom"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "mediatype",
  "serde",
@@ -1615,6 +1616,7 @@ dependencies = [
 [[package]]
 name = "radroots_core"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "rust_decimal",
  "serde",
@@ -1623,6 +1625,7 @@ dependencies = [
 [[package]]
 name = "radroots_event"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "hex",
  "jiff-tzdb",
@@ -1640,6 +1643,7 @@ dependencies = [
 [[package]]
 name = "radroots_event_codec"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "radroots_blossom",
  "radroots_core",
@@ -1654,6 +1658,7 @@ dependencies = [
 [[package]]
 name = "radroots_identity"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "k256",
  "serde",
@@ -1663,6 +1668,7 @@ dependencies = [
 [[package]]
 name = "radroots_nostr"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "nostr",
  "radroots_event",
@@ -1676,6 +1682,7 @@ dependencies = [
 [[package]]
 name = "radroots_protocol"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "serde",
 ]
@@ -1683,6 +1690,7 @@ dependencies = [
 [[package]]
 name = "radroots_secrets"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "chacha20poly1305",
  "zeroize",
@@ -1691,6 +1699,7 @@ dependencies = [
 [[package]]
 name = "radroots_transport"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "radroots_event",
  "radroots_identity",
@@ -1701,6 +1710,7 @@ dependencies = [
 [[package]]
 name = "radroots_transport_nostr"
 version = "0.1.0-alpha"
+source = "git+https://github.com/radrootslabs/lib.git?rev=74f5c91cbc80248df1f51f644004daaf8ae8e9be#74f5c91cbc80248df1f51f644004daaf8ae8e9be"
 dependencies = [
  "async-wsocket",
  "nostr-relay-pool",
diff --git a/Cargo.toml b/Cargo.toml
@@ -11,14 +11,14 @@ description = "Radroots local runtime daemon for storage, sync, and relay publis
 resolver = "3"
 
 [workspace.dependencies]
-radroots_event = { version = "=0.1.0-alpha" }
-radroots_event_codec = { version = "=0.1.0-alpha" }
-radroots_identity = { version = "=0.1.0-alpha" }
-radroots_nostr = { version = "=0.1.0-alpha" }
-radroots_protocol = { version = "=0.1.0-alpha", default-features = false }
-radroots_secrets = { version = "=0.1.0-alpha", default-features = false }
-radroots_transport_nostr = { version = "=0.1.0-alpha", default-features = false }
-radroots_transport = { version = "=0.1.0-alpha", default-features = false }
+radroots_event = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha" }
+radroots_event_codec = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha" }
+radroots_identity = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha" }
+radroots_nostr = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha" }
+radroots_protocol = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha", default-features = false }
+radroots_secrets = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha", default-features = false }
+radroots_transport_nostr = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha", default-features = false }
+radroots_transport = { git = "https://github.com/radrootslabs/lib.git", rev = "74f5c91cbc80248df1f51f644004daaf8ae8e9be", version = "=0.1.0-alpha", default-features = false }
 
 [lints.rust]
 unexpected_cfgs = { level = "warn", check-cfg = ['cfg(coverage_nightly)'] }
diff --git a/flake.nix b/flake.nix
@@ -122,9 +122,6 @@
               }
               export LLVM_COV="${llvmToolsBin}/llvm-cov"
               export LLVM_PROFDATA="${llvmToolsBin}/llvm-profdata"
-              coverage_target_dir="$(mktemp -d "''${TMPDIR:-/tmp}/radrootsd-llvm-cov.XXXXXX")"
-              trap 'rm -rf "$coverage_target_dir"' EXIT
-              export CARGO_TARGET_DIR="$coverage_target_dir"
               mkdir -p target/coverage
               cargo +nightly llvm-cov clean --workspace
               cargo +nightly llvm-cov --workspace --all-features --branch --no-report
diff --git a/tests/source_boundary.rs b/tests/source_boundary.rs
@@ -197,8 +197,10 @@ fn transport_publish_sources_reject_removed_protocol_identifiers() {
         }
     }
     assert!(
-        manifest_source.contains("radroots_transport_nostr = { version = \"=0.1.0-alpha\""),
-        "Cargo.toml must depend on the exact radroots_transport_nostr registry version"
+        manifest_source.contains(
+            "radroots_transport_nostr = { git = \"https://github.com/radrootslabs/lib.git\", rev = \"74f5c91cbc80248df1f51f644004daaf8ae8e9be\", version = \"=0.1.0-alpha\""
+        ),
+        "Cargo.toml must pin radroots_transport_nostr to the approved Lib revision and exact version"
     );
     assert!(
         !manifest_source.contains("package = \"radroots_transport_nostr\""),