Claude
601fbdedf9
This reverts ee51b32. The create_new change showed no measurable throughput
benefit — three 9-rep interleaved runs on the same ext4 device swung −12%..+21%
at the 256 KiB CDC size (a negative stat on a warm dentry cache is ~µs, below
the shared-disk noise floor). Applying the same "no change without a measured
win" bar used for the pool-sizing revert: the idiom/TOCTOU angle is real but the
race is already prevented upstream by the PG pin-or-classify serialisation, so
it's defence-in-depth only — not enough to keep an unmeasured change. Reverts
the production change, the bench, and its doc together.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JG5yYZ9s868mJwqT2Qz7ez
223 lines
8.8 KiB
TOML
223 lines
8.8 KiB
TOML
[package]
|
|
name = "oxicloud"
|
|
version = "0.8.0"
|
|
edition = "2024"
|
|
default-run = "oxicloud"
|
|
|
|
|
|
[dependencies]
|
|
mimalloc = { version = "0.1.52", default-features = false }
|
|
axum = { version = "0.8.9", features = ["multipart", "http1", "http2", "tokio", "macros"] }
|
|
tokio = { version = "1.52.3", features = ["rt-multi-thread", "macros", "io-util", "net", "time", "sync", "fs"] }
|
|
tokio-util = { version = "0.7.18", features = ["io", "codec", "compat"] }
|
|
tokio-stream = { version = "0.1.18", features = ["fs", "sync"] }
|
|
bytes = "1.11.1"
|
|
tempfile = "3.27.0"
|
|
tower = "0.5.3"
|
|
tower-http = { version = "0.6.11", features = ["fs", "compression-gzip", "compression-br", "trace", "cors", "add-extension", "request-id", "set-header", "limit"] }
|
|
flate2 = "1.1.9"
|
|
tracing = "0.1.44"
|
|
tracing-subscriber = { version = "0.3.23", features = ["env-filter"] }
|
|
chrono = { version = "0.4.45", features = ["serde"] }
|
|
http-body = "1.0.1"
|
|
serde = { version = "1.0.228", features = ["derive"] }
|
|
serde_json = "1.0.150"
|
|
futures = "0.3.32"
|
|
async-stream = "0.3.6"
|
|
async-trait = "0.1.89"
|
|
mime_guess = "2.0.5"
|
|
uuid = { version = "1.23.3", features = ["v4", "v7", "serde"] }
|
|
thiserror = "2.0.18"
|
|
|
|
mockall = { version = "0.14.0", optional = true }
|
|
sqlx = { version = "0.8.6", features = ["postgres", "runtime-tokio", "tls-rustls", "chrono", "uuid", "json", "migrate"] }
|
|
jsonwebtoken = { version = "10.4.0", features = ["rust_crypto"] }
|
|
argon2 = "0.5.3"
|
|
rand_core = { version = "0.6", features = ["std", "getrandom"] }
|
|
quick-xml = "0.39.4"
|
|
dotenvy = "0.15.7"
|
|
moka = { version = "0.12.15", features = ["future", "sync"] }
|
|
http-range-header = "0.4"
|
|
image = { version = "0.25.10", default-features = false, features = ["jpeg", "png", "gif", "webp"] }
|
|
# Shrink-on-load JPEG decode (DCT 1/2·1/4·1/8 scaling) for thumbnails — pure
|
|
# Rust, no C toolchain. The `image` crate's zune-jpeg backend can't scale during
|
|
# decode; this can, cutting decode time/RAM ~order-of-magnitude on large photos.
|
|
jpeg-decoder = "0.3"
|
|
# SIMD (AVX2/SSE4.1/NEON) image resizing for thumbnails — far faster than the
|
|
# `image` crate's scalar resampler, and it speeds every format (incl. PNG/WebP).
|
|
fast_image_resize = "5"
|
|
# Lossy WebP encoding for thumbnails. The `image` crate's webp feature is
|
|
# lossless-only; this binds libwebp (vendored + built via `cc`, no system dep)
|
|
# for quality-controlled lossy output (~25-30% smaller than JPEG at equal SSIM).
|
|
webp = "0.3"
|
|
id3 = "1.17"
|
|
mp3-duration = "0.1"
|
|
kamadak-exif = "0.6.1"
|
|
md-5 = "0.11.0"
|
|
sha2 = "0.11.0"
|
|
unicode-normalization = "0.1.25"
|
|
blake3 = { version = "1.8.5", features = ["rayon", "mmap"] }
|
|
hex = "0.4.3"
|
|
http-body-util = "0.1.3"
|
|
percent-encoding = "2.3.2"
|
|
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-webpki-roots","rustls-tls-native-roots"] }
|
|
base64 = "0.22.1"
|
|
fs2 = "0.4"
|
|
rayon = "1.12.0"
|
|
infer = "0.19"
|
|
async-compression = { version = "0.4.42", features = ["tokio", "gzip"] }
|
|
async_zip = { version = "0.0.18", features = ["tokio", "deflate"] }
|
|
dashmap = "6.2.1"
|
|
socket2 = { version = "0.6.4", features = ["all"] }
|
|
urlencoding = "2.1.3"
|
|
utoipa = { version = "5.5.0", features = ["axum_extras", "uuid", "chrono"] }
|
|
aws-sdk-s3 = "1.136.0"
|
|
aws-config = { version = "1.8.18", features = ["behavior-version-latest"] }
|
|
aws-smithy-types = "1.5.0"
|
|
azure_core = { version = "0.21", default-features = false, features = ["enable_reqwest_rustls", "hmac_rust"] }
|
|
azure_storage = { version = "0.21", default-features = false, features = ["enable_reqwest_rustls", "hmac_rust"] }
|
|
azure_storage_blobs = { version = "0.21", default-features = false, features = ["enable_reqwest_rustls", "hmac_rust"] }
|
|
aes-gcm = "0.10.3"
|
|
lru = "0.16.4"
|
|
fastcdc = { version = "4.0.0", features = ["tokio"] }
|
|
lettre = { version = "0.11.18", default-features = false, features = ["smtp-transport", "tokio1-rustls-tls", "rustls-native-certs", "builder"] }
|
|
idna = "1.1"
|
|
smol_str = { version = "0.3.6", features = ["serde"] }
|
|
accept-language = "3.1.0"
|
|
askama = "0.16.0"
|
|
tantivy = "0.26.1"
|
|
zip = { version = "8.6.0", default-features = false, features = ["deflate"] }
|
|
pdf-extract = "0.10.0"
|
|
nom-exif = "3.6.1"
|
|
extism = { version = "1.30.0", optional = true }
|
|
toml = { version = "1.1.2", optional = true }
|
|
file-rotate = { version = "0.7.6", optional = true }
|
|
ort = { version = "2.0.0-rc.12", default-features = false, features = ["load-dynamic", "ndarray", "tracing", "api-24"], optional = true }
|
|
ndarray = { version = "0.17.2", optional = true }
|
|
|
|
[features]
|
|
default = []
|
|
test_utils = ["mockall"]
|
|
integration_tests = []
|
|
# WASM plugin runtime (Extism). Opt-in: bundles wasmtime, a large engine most
|
|
# deployments won't use. Activation also requires OXICLOUD_ENABLE_PLUGINS=true.
|
|
plugins = ["dep:extism", "dep:toml", "dep:file-rotate"]
|
|
# Empty marker feature that gates the `load-seed` binary so it isn't built
|
|
# by default (and skipped in prod Docker builds). Kept separate from
|
|
# test_utils so enabling it doesn't change the oxicloud dependency graph —
|
|
# this lets one `cargo build` produce both `oxicloud` and `load-seed`
|
|
# without recompiling oxicloud with mockall in scope.
|
|
load_seed_bin = []
|
|
# Real ONNX-backed face analyzer (detector + embedder) for the People feature.
|
|
# Opt-in: pulls `ort` (ONNX Runtime, load-dynamic — dlopen's libonnxruntime at
|
|
# runtime) + `ndarray`, a heavy stack most deployments won't use. Activation also
|
|
# requires OXICLOUD_ENABLE_FACES=true *and* operator-provided ONNX models; without
|
|
# this feature the People pipeline falls back to the inert NoopFaceAnalyzer.
|
|
faces-onnx = ["dep:ort", "dep:ndarray"]
|
|
# Performance benchmark harness (Phase 0). Exposes `bench_support` + thin public
|
|
# wrappers over the private thumbnail render functions so `benches/` and
|
|
# `examples/` can measure them. Off by default — adds nothing to prod builds.
|
|
# Run with: `cargo bench --features bench` / `cargo run --release --features bench --example bench_thumbnails_mem`.
|
|
bench = []
|
|
|
|
[dev-dependencies]
|
|
criterion = "0.5"
|
|
|
|
[lints.rust]
|
|
unexpected_cfgs = { level = "warn", check-cfg = ['cfg(integration_tests)'] }
|
|
|
|
[[bin]]
|
|
name = "generate-openapi"
|
|
path = "src/bin/generate-openapi.rs"
|
|
|
|
[[bin]]
|
|
name = "migrate-nfc-filenames"
|
|
path = "src/bin/migrate-nfc-filenames.rs"
|
|
|
|
[[bin]]
|
|
name = "load-seed"
|
|
path = "src/bin/load-seed.rs"
|
|
# Test fixture seeder. Gated behind the empty `load_seed_bin` feature so
|
|
# `cargo build --release` (and the prod Dockerfile) skip it. tests/load/run.sh
|
|
# and load-nightly.yml build it explicitly with --features load_seed_bin.
|
|
required-features = ["load_seed_bin"]
|
|
|
|
# Phase 0 perf harness — Task 0.2 (criterion latency + output-size bench).
|
|
[[bench]]
|
|
name = "thumbnails"
|
|
path = "benches/thumbnails.rs"
|
|
harness = false
|
|
required-features = ["bench"]
|
|
|
|
# Phase 0 perf harness — Task 0.3 (peak-RAM + saturated-throughput baseline).
|
|
[[example]]
|
|
name = "bench_thumbnails_mem"
|
|
path = "examples/bench_thumbnails_mem.rs"
|
|
required-features = ["bench"]
|
|
|
|
# Video thumbnail benchmark — Option B (server-side ffmpeg frame → WebP). Needs
|
|
# `ffmpeg` on PATH (libx264/libx265/libvpx-vp9 to synthesize the test corpus).
|
|
[[example]]
|
|
name = "bench_video_thumbnails"
|
|
path = "examples/bench_video_thumbnails.rs"
|
|
required-features = ["bench"]
|
|
|
|
# DB connection-pool tail-latency benchmark (needs the dev Postgres up).
|
|
[[example]]
|
|
name = "bench_db_pool"
|
|
path = "examples/bench_db_pool.rs"
|
|
required-features = ["bench"]
|
|
|
|
# Blob-manifest read round-trip benchmark: OLD 2 queries vs NEW 1 (needs dev Postgres).
|
|
[[example]]
|
|
name = "bench_blob_manifest"
|
|
path = "examples/bench_blob_manifest.rs"
|
|
required-features = ["bench"]
|
|
|
|
# Blob download read-ahead benchmark — sweeps the local backend's chunk prefetch
|
|
# depth (read_prefetch / buffered(N)) under disk-bound vs network-bound consumers
|
|
# and warm vs cold page cache. No Postgres needed.
|
|
[[example]]
|
|
name = "bench_blob_prefetch"
|
|
path = "examples/bench_blob_prefetch.rs"
|
|
required-features = ["bench"]
|
|
|
|
# Tokio runtime tuning benchmark — worker over-subscription (throughput + p99
|
|
# under CPU contention) and blocking-pool RSS blast radius, default vs tuned.
|
|
# No Postgres needed; run under `taskset -c 0,1` to model a 2-core quota.
|
|
[[example]]
|
|
name = "bench_tokio_runtime"
|
|
path = "examples/bench_tokio_runtime.rs"
|
|
required-features = ["bench"]
|
|
|
|
# CPU pool concurrency benchmark — thumbnail decode throughput + p99 as the
|
|
# decode-permit count is swept, showing the effect of sizing the image pools to
|
|
# the CFS quota (effective_parallelism) vs the host core count. No Postgres;
|
|
# run under `taskset -c 0,1` to model a 2-core quota.
|
|
[[example]]
|
|
name = "bench_pool_concurrency"
|
|
path = "examples/bench_pool_concurrency.rs"
|
|
required-features = ["bench"]
|
|
|
|
# ACL owner-cache benchmark — owner query vs moka hit (needs the dev Postgres up).
|
|
[[example]]
|
|
name = "bench_owner_cache"
|
|
path = "examples/bench_owner_cache.rs"
|
|
required-features = ["bench"]
|
|
|
|
[profile.release]
|
|
lto = "thin"
|
|
codegen-units = 1
|
|
opt-level = 3
|
|
panic = "abort"
|
|
strip = true
|
|
|
|
[profile.dev]
|
|
opt-level = 1
|
|
debug = true
|
|
|
|
[profile.bench]
|
|
lto = "fat"
|
|
codegen-units = 1
|
|
opt-level = 3
|