3e7eddc074
This commit implements comprehensive production hardening across multiple layers to prepare StemeDB for enterprise pilot deployments: ## API Layer - Add rate limiting middleware with configurable limits per endpoint - Enhance error handling with detailed context and proper HTTP status codes - Add security hardening tests for input validation and boundary conditions - Create store_helpers module for defensive storage access patterns ## Storage & WAL - Optimize group commit batching for higher throughput - Add defensive error handling in hybrid backend with proper fallbacks - Enhance WAL journal durability guarantees with fsync validation - Improve index store query performance with better caching ## Operations & Deployment - Add comprehensive operations documentation (deployment, monitoring, DR) - Create systemd units for backup, WAL archival, and verification - Add monitoring configs (Prometheus alerts, metrics exporters) - Implement backup/restore scripts with verification and S3 archival - Add DR drill automation and runbook procedures - Create load balancer configs (nginx, envoy) with health checks ## Documentation - Update CLAUDE.md with operations and troubleshooting guides - Expand roadmap with production readiness milestones - Add pilot success criteria and deployment reference architecture - Document TLS setup, monitoring integration, and incident response ## Configuration - Add .env.example with all required environment variables - Document resource sizing for different deployment scales - Add configuration examples for various deployment topologies This positions StemeDB for successful enterprise pilots with proper operational discipline, monitoring, backup/DR, and security hardening. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
56 lines
1.6 KiB
TOML
56 lines
1.6 KiB
TOML
[package]
|
|
name = "stemedb-api"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "HTTP API for Episteme (StemeDB)"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[features]
|
|
default = ["aphoria"]
|
|
aphoria = ["dep:aphoria"]
|
|
|
|
[dependencies]
|
|
stemedb-core = { path = "../stemedb-core" }
|
|
stemedb-wal = { path = "../stemedb-wal", features = ["group-commit"] }
|
|
stemedb-storage = { path = "../stemedb-storage" }
|
|
stemedb-ingest = { path = "../stemedb-ingest" }
|
|
stemedb-query = { path = "../stemedb-query" }
|
|
stemedb-lens = { path = "../stemedb-lens" }
|
|
|
|
# Optional: Aphoria code-level truth linting
|
|
aphoria = { path = "../../applications/aphoria", optional = true }
|
|
|
|
axum = { version = "0.7", features = ["json"] }
|
|
axum-server = { version = "0.7", features = ["tls-rustls"] }
|
|
tokio = { version = "1", features = ["full"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
serde_qs = "0.13"
|
|
utoipa = { version = "5", features = ["axum_extras"] }
|
|
utoipa-axum = "0.1"
|
|
utoipa-swagger-ui = { version = "8", features = ["axum"] }
|
|
tower = { version = "0.4", features = ["util"] }
|
|
tower-http = { version = "0.5", features = ["trace", "cors", "limit", "timeout"] }
|
|
rustls = "0.22"
|
|
rustls-pemfile = "2.0"
|
|
futures = "0.3"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
thiserror = "1"
|
|
hex = "0.4"
|
|
blake3 = "1"
|
|
base64 = "0.22"
|
|
getrandom = "0.2"
|
|
metrics = "0.23"
|
|
metrics-exporter-prometheus = "0.15"
|
|
dashmap = "6.0"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
tower = { version = "0.4", features = ["util"] }
|
|
ed25519-dalek = { version = "2", features = ["rand_core"] }
|
|
rand = "0.8"
|
|
hex = "0.4"
|