feat: rustify adc

.github/workflows/e2e.yaml

@@ -31,6 +31,7 @@ jobs:
   apisix:
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
         version:
           - 3.2.2
@@ -49,6 +50,7 @@ jobs:
           - 3.15.0
           - 3.16.0
           - 3.17.0
+          - 3.18.0
           - dev
     steps:
       - name: Determine APISIX image tag
@@ -79,17 +81,30 @@ jobs:
       # Run E2E tests
       - name: Run E2E tests
         run: npx nx run backend-apisix:test
+
+      # Run the Rust port's E2E tests against the same live apisix instance
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+      - name: Run Rust E2E tests
+        working-directory: ./rust
+        run: |
+          rustup update stable
+          rustup default stable
+          cargo test -p adc-backend-apisix -- --ignored --test-threads=1
   apisix-standalone:
     runs-on: ubuntu-latest
     if: contains(github.event.pull_request.labels.*.name, 'test/apisix-standalone') || github.event_name == 'push'
     strategy:
+      fail-fast: false
       matrix:
         version:
           - 3.13.0
           - 3.14.1
           - 3.15.0
           - 3.16.0
           - 3.17.0
+          - 3.18.0
           - dev
     steps:
       - name: Determine APISIX image tag
@@ -120,6 +135,28 @@ jobs:
       # Run E2E tests
       - name: Run E2E tests
         run: npx nx run backend-apisix-standalone:test
+
+      # Run the Rust port's E2E tests against the same live cluster. Each
+      # test function restarts every instance itself before it starts
+      # (see adc-backend-apisix-standalone's tests/common/mod.rs), so
+      # running after the TS suite here is safe — nothing from the TS
+      # suite's own state survives into the Rust tests.
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+      - name: Run Rust E2E tests
+        working-directory: ./rust
+        run: |
+          rustup update stable
+          rustup default stable
+          cargo test -p adc-backend-apisix-standalone -- --ignored --test-threads=1
+      # Only useful when the step above fails: a bare 404 from an admin API
+      # request gives no clue why on its own — the container's own error
+      # log does.
+      - name: Dump APISIX standalone container logs
+        if: failure()
+        working-directory: ./libs/backend-apisix-standalone/e2e/assets
+        run: docker compose logs --no-color
   api7:
     runs-on: ubuntu-latest
     if: contains(github.event.pull_request.labels.*.name, 'test/api7') || github.event_name == 'push'
@@ -129,7 +166,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        version: [3.5.5, 3.6.1, 3.7.8, 3.8.23, 3.9.14, 3.10.1, dev]
+        version: [3.5.5, 3.6.1, 3.7.8, 3.8.23, 3.9.18, 3.10.6, dev]
     steps:
       - name: Determine API7 image and license
         run: |
@@ -174,3 +211,91 @@ jobs:
       # Run API7 E2E tests
       - name: Run E2E tests
         run: npx nx run backend-api7:test
+  api7-rust:
+    runs-on: ubuntu-latest
+    if: contains(github.event.pull_request.labels.*.name, 'test/api7') || github.event_name == 'push'
+    permissions:
+      contents: read
+      packages: read
+    strategy:
+      fail-fast: false
+      matrix:
+        version: [3.5.5, 3.6.1, 3.7.8, 3.8.23, 3.9.18, 3.10.6, dev]
+    steps:
+      - name: Determine API7 image and license
+        run: |
+          if [ "${{ matrix.version }}" = "dev" ]; then
+            echo "BACKEND_API7_VERSION=999.999.999" >> $GITHUB_ENV
+            echo "API7_DASHBOARD_IMAGE=ghcr.io/api7/api7-ee-3-integrated" >> $GITHUB_ENV
+            echo "API7_IMAGE_TAG=dev" >> $GITHUB_ENV
+            {
+              echo "BACKEND_API7_LICENSE<<EOLICENSE"
+              echo "${{ secrets.BACKEND_API7_DEV_LICENSE }}"
+              echo "EOLICENSE"
+            } >> $GITHUB_ENV
+          else
+            echo "BACKEND_API7_VERSION=${{ matrix.version }}" >> $GITHUB_ENV
+            echo "API7_DASHBOARD_IMAGE=api7/api7-ee-3-integrated" >> $GITHUB_ENV
+            echo "API7_IMAGE_TAG=v${{ matrix.version }}" >> $GITHUB_ENV
+            {
+              echo "BACKEND_API7_LICENSE<<EOLICENSE"
+              echo "${{ secrets.BACKEND_API7_LICENSE }}"
+              echo "EOLICENSE"
+            } >> $GITHUB_ENV
+          fi
+
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - name: Login to GHCR
+        if: matrix.version == 'dev'
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Runs on its own dashboard instance, independent of the `api7` job's
+      # (rather than reusing that job's live instance after the TS suite runs)
+      # — the Rust e2e suite's `common::client()` performs its own admin
+      # login / password rotation / license activation / token minting on
+      # first use (see adc-backend-api7's tests/common/mod.rs), which would
+      # collide with the TS suite doing the same dance against a shared
+      # instance.
+      - name: Setup API7 Instance via Docker Compose
+        working-directory: ./libs/backend-api7/e2e/assets
+        run: |
+          if [ "${{ matrix.version }}" = "dev" ]; then docker compose pull; fi
+          docker compose up -d
+
+      # Run the Rust port's E2E tests
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+      # Each test file below is its own process with no state shared
+      # between them, but they all talk to the one dashboard instance
+      # started above — so the admin login / password rotation / license
+      # activation / token minting dance runs here exactly once, and its
+      # result is shared with every other test file as `TOKEN` (see
+      # tests/e2e_init.rs), instead of each independently repeating it
+      # against a dashboard the first one to run already mutated.
+      - name: Bootstrap a shared API7 token
+        working-directory: ./rust
+        run: |
+          rustup update stable
+          rustup default stable
+          cargo test -p adc-backend-api7 --test e2e_init -- --ignored
+      - name: Run Rust E2E tests
+        working-directory: ./rust
+        run: |
+          rustup update stable
+          rustup default stable
+          cargo test -p adc-backend-api7 -- --ignored --test-threads=1
+      # Only useful when the step above fails: `BackendError::Api`'s
+      # message is empty for a 500 with no response body, which the
+      # dashboard's own logs can actually explain.
+      - name: Dump API7 dashboard logs
+        if: failure()
+        working-directory: ./libs/backend-api7/e2e/assets
+        run: docker compose logs --no-color

.github/workflows/release.yaml

@@ -100,3 +100,157 @@ jobs:
           files: |
             release/adc_${{ env.RELEASE_VERSION }}_darwin_arm64.tar.gz
             release/adc_${{ env.RELEASE_VERSION }}_darwin_amd64.tar.gz
+
+  adc-rust-linux:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            arch: amd64
+          - os: ubuntu-24.04-arm
+            arch: arm64
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Setup release flow
+        run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV
+
+      - name: Setup Rust toolchain
+        run: |
+          rustup update stable
+          rustup default stable
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+          key: ${{ matrix.arch }}
+      - name: Build adc-cli
+        working-directory: ./rust
+        run: cargo build --release -p adc-cli
+
+      - name: Split debug info
+        run: |
+          BIN_DIR=rust/target/release
+          objcopy --only-keep-debug "$BIN_DIR/adc" "$BIN_DIR/adc.debug"
+          objcopy --strip-debug --strip-unneeded "$BIN_DIR/adc"
+          objcopy --add-gnu-debuglink="$BIN_DIR/adc.debug" "$BIN_DIR/adc"
+
+      - name: Compress adc
+        run: |
+          mkdir -p release
+          BIN_DIR=rust/target/release
+          tar -czf release/adc_rust_${{ env.RELEASE_VERSION }}_linux_${{ matrix.arch }}.tar.gz -C "$BIN_DIR" adc
+          tar -czf release/adc_rust_${{ env.RELEASE_VERSION }}_linux_${{ matrix.arch }}_debuginfo.tar.gz -C "$BIN_DIR" adc.debug
+
+      - name: Upload adc to GitHub release
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
+        if: startsWith(github.ref, 'refs/tags/')
+        with:
+          files: |
+            release/adc_rust_${{ env.RELEASE_VERSION }}_linux_${{ matrix.arch }}.tar.gz
+            release/adc_rust_${{ env.RELEASE_VERSION }}_linux_${{ matrix.arch }}_debuginfo.tar.gz
+
+  adc-rust-windows:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: windows-latest
+            arch: amd64
+          - os: windows-11-arm
+            arch: arm64
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Setup release flow
+        shell: bash
+        run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV
+
+      - name: Setup Rust toolchain
+        shell: bash
+        run: |
+          rustup update stable
+          rustup default stable
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+          key: ${{ matrix.arch }}
+      - name: Build adc-cli
+        working-directory: ./rust
+        run: cargo build --release -p adc-cli
+
+      - name: Compress adc
+        shell: pwsh
+        run: |
+          New-Item -ItemType Directory -Force -Path release | Out-Null
+          $binDir = "rust/target/release"
+          Compress-Archive -Path "$binDir/adc.exe" -DestinationPath "release/adc_rust_${{ env.RELEASE_VERSION }}_windows_${{ matrix.arch }}.zip"
+          Compress-Archive -Path "$binDir/adc.pdb" -DestinationPath "release/adc_rust_${{ env.RELEASE_VERSION }}_windows_${{ matrix.arch }}_debuginfo.zip"
+
+      - name: Upload adc to GitHub release
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
+        if: startsWith(github.ref, 'refs/tags/')
+        with:
+          files: |
+            release/adc_rust_${{ env.RELEASE_VERSION }}_windows_${{ matrix.arch }}.zip
+            release/adc_rust_${{ env.RELEASE_VERSION }}_windows_${{ matrix.arch }}_debuginfo.zip
+
+  adc-rust-macos:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: aarch64-apple-darwin
+            arch: arm64
+          - target: x86_64-apple-darwin
+            arch: amd64
+    runs-on: macos-26
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Setup release flow
+        run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV
+
+      - name: Setup Rust toolchain
+        run: |
+          rustup update stable
+          rustup default stable
+          rustup target add ${{ matrix.target }}
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+      - name: Build adc-cli
+        working-directory: ./rust
+        run: cargo build --release -p adc-cli --target ${{ matrix.target }}
+
+      - name: Split debug info
+        run: |
+          BIN_DIR=rust/target/${{ matrix.target }}/release
+          dsymutil "$BIN_DIR/adc" -o "$BIN_DIR/adc.dSYM"
+          strip -S "$BIN_DIR/adc"
+
+      - name: Compress adc
+        run: |
+          mkdir -p release
+          BIN_DIR=rust/target/${{ matrix.target }}/release
+          tar -czf release/adc_rust_${{ env.RELEASE_VERSION }}_darwin_${{ matrix.arch }}.tar.gz -C "$BIN_DIR" adc
+          tar -czf release/adc_rust_${{ env.RELEASE_VERSION }}_darwin_${{ matrix.arch }}_debuginfo.tar.gz -C "$BIN_DIR" adc.dSYM
+
+      - name: Upload adc to GitHub release
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
+        if: startsWith(github.ref, 'refs/tags/')
+        with:
+          files: |
+            release/adc_rust_${{ env.RELEASE_VERSION }}_darwin_${{ matrix.arch }}.tar.gz
+            release/adc_rust_${{ env.RELEASE_VERSION }}_darwin_${{ matrix.arch }}_debuginfo.tar.gz

.github/workflows/unit.yaml

@@ -35,3 +35,28 @@ jobs:
         run: npx nx run backend-api7:test
       - name: Run OpenAPI Converter unit tests
         run: npx nx run converter-openapi:test
+  rust:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Setup Rust toolchain
+        run: |
+          rustup update stable
+          rustup default stable
+      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: rust -> target
+
+      - name: Build
+        working-directory: ./rust
+        run: cargo build --workspace
+      - name: Clippy
+        working-directory: ./rust
+        run: cargo clippy --workspace --all-targets -- -D warnings
+      - name: Run unit tests
+        working-directory: ./rust
+        run: cargo test --workspace

.gitignore

@@ -55,4 +55,6 @@ vitest.config.*.timestamp*
 
 .nx/polygraph
 .nx/self-healing
-.nx/migrate-runs
+.nx/migrate-runs
+
+rust/target/

fixtures/differ/basic.adapts_to_default_core_values.json

@@ -0,0 +1,5 @@
+{
+  "local": { "consumers": [{ "username": "alice", "plugins": {} }] },
+  "remote": { "consumers": [{ "username": "alice", "description": "", "plugins": {} }] },
+  "defaultValue": { "core": { "consumer": { "description": "" } }, "plugins": {} }
+}

fixtures/differ/basic.adapts_to_default_plugin_values.json

@@ -0,0 +1,5 @@
+{
+  "local": { "consumers": [{ "username": "alice", "plugins": { "key-auth": { "key": "key" } } }] },
+  "remote": { "consumers": [{ "username": "alice", "plugins": { "key-auth": { "key": "key", "added": "added" } } }] },
+  "defaultValue": { "core": {}, "plugins": { "key-auth": { "added": "added" } } }
+}

fixtures/differ/basic.boolean_defaults_merged_correctly.json

@@ -0,0 +1,12 @@
+{
+  "local": { "services": [{ "name": "HTTP", "path_prefix": "/test", "strip_path_prefix": false }] },
+  "remote": {
+    "services": [{
+      "id": "f40b27d6b8b9a4fc3827264c1da16a04ecf4d094",
+      "name": "HTTP",
+      "path_prefix": "/test",
+      "strip_path_prefix": true
+    }]
+  },
+  "defaultValue": { "core": { "service": { "strip_path_prefix": true } }, "plugins": {} }
+}