mirror of
https://github.com/ruvnet/RuView
synced 2026-08-01 19:01:42 +00:00
rUv
df617145d6
* feat(ADR-262 P3): live RuField surface — RuView sensing speaks RuField on /api/field + /ws/field Wire the P1 `wifi-densepose-rufield` bridge into the live `wifi-densepose-sensing-server` so the governed sensing cycle emits real signed RuField `FieldEvent`s on two additive endpoints. - Cargo: add the `wifi-densepose-rufield` path dep (the single coupling point, ADR-262 §5.4 — no new RuView-internal coupling). - New `src/rufield_surface.rs` (kept out of the 8k-line main.rs): `FieldSurface` holds a dedicated ed25519 `Signer` + a bounded ring of recent events + the `/ws/field` broadcast topic; `GET /api/field` and `GET /ws/field` handlers; a standalone `router()` for isolated testing. - Signer (defers the P2 key decision, ADR-262 §8 Q1): a STANDALONE dev/sensing key from `WDP_RUFIELD_SIGNING_SEED`, else a deterministic dev default with a logged WARN. Reusing the `cog-ha-matter` Ed25519 key is the deferred P2 call — P3 does not pre-empt it. - Tap: at the ESP32 governed-trust cycle (`main.rs` ~5886 observe_cycle / ~5938 SensingUpdate build), `emit_rufield_event` joins the cycle's features/classification/signal_field with the engine's effective_class/demoted trust state into a `SensingSnapshot` and surfaces it via the bridge. Existing endpoints (`/ws/sensing` etc.) are unchanged — purely additive. - Privacy egress: `network_egress_allowed` is fail-closed for an unattended live surface — only P1/P2 leave the box; P0 raw and P3/P4/P5 (identity/biometric/aggregate) are held edge-local. A `Derived` cycle maps to P4/P5 and never surfaces. - No-phantom: `emit` drops no-presence cycles (no fabricated events). Gates (tests/rufield_surface_test.rs, tower::oneshot, 4/0): well-formed signed event (WifiCsi, P2 not P1, is_fusable, real timestamp); empty cycle → no phantom; Derived trust never surfaces; mixed stream surfaces only egress-safe events. Honesty (ADR-262 §0/§6): real plumbing on a live endpoint, NOT accuracy. Single-link CSI with its existing caveats (no validated room-coordinate accuracy); dedicated dev signing key pending the P2 ownership decision; no accuracy claim. Co-Authored-By: claude-flow <ruv@ruv.net> * docs(ADR-262 P3): mark P1+P3 implemented; document /api/field + /ws/field; CHANGELOG - ADR-262 Status → "P1 + P3 implemented"; add a P3 implementation-status block (tap site, endpoints, dedicated dev signer deferring the §8 Q1 key decision, fail-closed egress, gates). Keep the honesty framing: real plumbing on a live endpoint, not accuracy. - CHANGELOG [Unreleased]: add the ADR-262 P3 entry. - user-guide: add `/api/field` to the REST table + a "RuField surface (ADR-262 P3)" section covering `/api/field` + `/ws/field`, the fail-closed P1/P2-only egress, the WDP_RUFIELD_SIGNING_SEED dev key, and the no-accuracy honesty note. Co-Authored-By: claude-flow <ruv@ruv.net> * ci: checkout submodules everywhere + Dockerfile copies vendor/rufield Making wifi-densepose-rufield (ADR-262 bridge) a v2 workspace member means EVERY cargo-on-workspace context must have the vendor/rufield submodule present (cargo loads all member manifests). P1 only fixed the rust-tests job; this adds `submodules: recursive` to all workflow checkouts that run cargo (mqtt-integration was failing on the missing submodule manifest), and makes Dockerfile.rust COPY vendor/rufield/ to /vendor/rufield (matches the bridge's ../../../vendor/rufield path-dep under the collapsed Docker layout). update-submodules.yml left alone (it manages submodules itself). Co-Authored-By: claude-flow <ruv@ruv.net> --------- Co-authored-by: ruv <ruvnet@gmail.com>
126 lines
5.6 KiB
TOML
126 lines
5.6 KiB
TOML
[package]
|
|
name = "wifi-densepose-sensing-server"
|
|
version = "0.3.3"
|
|
edition.workspace = true
|
|
description = "Lightweight Axum server for WiFi sensing UI with RuVector signal processing"
|
|
license.workspace = true
|
|
authors = ["rUv <ruv@ruv.net>", "WiFi-DensePose Contributors"]
|
|
repository.workspace = true
|
|
documentation = "https://docs.rs/wifi-densepose-sensing-server"
|
|
keywords = ["wifi", "sensing", "server", "websocket", "csi"]
|
|
categories = ["web-programming::http-server", "science"]
|
|
readme = "README.md"
|
|
|
|
[lib]
|
|
name = "wifi_densepose_sensing_server"
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "sensing-server"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
# Web framework
|
|
axum = { workspace = true }
|
|
tower-http = { version = "0.6", features = ["fs", "cors", "set-header"] }
|
|
tokio = { workspace = true, features = ["full", "process"] }
|
|
futures-util = "0.3"
|
|
ruvector-mincut = { workspace = true }
|
|
|
|
# Serialization
|
|
serde = { workspace = true }
|
|
serde_json.workspace = true
|
|
|
|
# Logging
|
|
tracing.workspace = true
|
|
tracing-subscriber = { workspace = true }
|
|
|
|
# Time
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
|
|
# CLI
|
|
clap = { workspace = true }
|
|
|
|
# Multi-BSSID WiFi scanning pipeline (ADR-022 Phase 3)
|
|
wifi-densepose-wifiscan = { version = "0.3.0", path = "../wifi-densepose-wifiscan" }
|
|
|
|
# Signal processing with RuvSense pose tracker (accuracy sprint).
|
|
# default-features = false drops the optional ndarray-linalg/BLAS chain so that
|
|
# `--no-default-features` at the workspace root can produce a Windows-friendly
|
|
# build without vcpkg/openblas (issue #366, #415).
|
|
wifi-densepose-signal = { version = "0.3.1", path = "../wifi-densepose-signal", default-features = false }
|
|
|
|
# Hardware crate — SyncPacket decoder for ADR-110 §A0.12 mesh-aligned timestamps.
|
|
wifi-densepose-hardware = { version = "0.3.0", path = "../wifi-densepose-hardware" }
|
|
|
|
# Governed streaming engine (ADR-135..146): fusion + privacy demotion +
|
|
# WorldGraph belief + deterministic witness. The live server data runs through
|
|
# this as a governed path whose Restricted-class decision strips per-node raw
|
|
# amplitudes from the live publish; full output gating is a tracked follow-up —
|
|
# see engine_bridge.rs ("Honest scope of the live-path governance").
|
|
wifi-densepose-engine = { version = "0.3.0", path = "../wifi-densepose-engine" }
|
|
wifi-densepose-worldgraph = { version = "0.3.0", path = "../wifi-densepose-worldgraph" }
|
|
wifi-densepose-bfld = { version = "0.3.1", path = "../wifi-densepose-bfld", default-features = false }
|
|
wifi-densepose-geo = { version = "0.1.0", path = "../wifi-densepose-geo" }
|
|
|
|
# ADR-262 P3: live RuField surface. The thin anti-corruption bridge that turns
|
|
# this server's governed sensing cycle into signed RuField `FieldEvent`s on
|
|
# `/api/field` + `/ws/field`. It path-deps the standalone `vendor/rufield`
|
|
# submodule (it is the single coupling point — ADR-262 §5.4) and pulls in no
|
|
# RuView internal crate, so the dep surface added here is just the bridge.
|
|
wifi-densepose-rufield = { version = "0.3.0", path = "../wifi-densepose-rufield" }
|
|
|
|
# midstream — real-time introspection / low-latency tap (ADR-099 D1).
|
|
# Two crates only, on purpose: scheduler / neural-solver / strange-loop are
|
|
# explicitly out of scope of ADR-099 (D5).
|
|
midstreamer-temporal-compare = "0.2" # DTW / LCS / Edit-Distance pattern matching
|
|
midstreamer-attractor = "0.2" # Lyapunov + regime classification
|
|
|
|
# ADR-102: Edge Module Registry — fetch the canonical Cognitum cog catalog
|
|
# at `https://storage.googleapis.com/cognitum-apps/app-registry.json`,
|
|
# cache with TTL, surface via /api/v1/edge/registry. ureq is the smallest
|
|
# blocking HTTP client we can use without dragging a tokio HTTP stack in;
|
|
# rustls is enabled implicitly via the `tls` default feature.
|
|
ureq = { version = "2", default-features = false, features = ["tls", "json"] }
|
|
sha2 = "0.10"
|
|
thiserror = "1"
|
|
|
|
# ADR-115 §3.8 — MQTT publisher (HA-DISCO).
|
|
# Gated behind the `mqtt` feature so the default binary stays small for users
|
|
# who don't need Home Assistant integration. `rumqttc` is the chosen Rust MQTT
|
|
# client (ADR-115 §10 references). `rustls` is preferred over openssl on
|
|
# Windows to keep parity with the rest of the workspace (`ureq` above also
|
|
# uses rustls).
|
|
rumqttc = { version = "0.24", default-features = false, features = ["use-rustls"], optional = true }
|
|
|
|
[features]
|
|
default = []
|
|
# Enables the ADR-115 §2 MQTT auto-discovery publisher. Without this feature
|
|
# all `--mqtt-*` CLI flags still parse (cli.rs declares them unconditionally),
|
|
# but enabling `--mqtt` at runtime logs a `WARN` and the publisher is a no-op.
|
|
mqtt = ["dep:rumqttc"]
|
|
# ADR-115 §3.11 — Matter Bridge (HA-FABRIC). Same gating principle: flags
|
|
# parse unconditionally; the bridge is a no-op without this feature.
|
|
# matter-rs is added in P7; intentionally absent in P1 to keep the dep
|
|
# surface small until the SDK choice is validated.
|
|
matter = []
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3.10"
|
|
# `tower::ServiceExt::oneshot` for in-process Router tests (bearer_auth).
|
|
tower = { workspace = true }
|
|
# ADR-115 P9 — micro-benchmarks for MQTT hot paths + semantic bus.
|
|
# Heavy dep tree (~80 transitive crates) so it's dev-only; benches live
|
|
# behind --features mqtt because they bench the mqtt module.
|
|
criterion = { version = "0.5", features = ["html_reports"] }
|
|
# ADR-115 P9 — property-based fuzzing for the wire-boundary security
|
|
# audit. Catches edge cases the example-based unit tests would miss
|
|
# (random Unicode, control chars, etc.). Pinned to a small version that
|
|
# doesn't pull in proptest-derive (we don't need it).
|
|
proptest = { version = "1.5", default-features = false, features = ["std"] }
|
|
|
|
[[bench]]
|
|
name = "mqtt_throughput"
|
|
harness = false
|
|
required-features = ["mqtt"]
|