mirror of
https://github.com/ruvnet/RuVector.git
synced 2026-05-25 06:36:37 +00:00
Unblocks the 7 stacked PRs (#381-#387) and turns `main`'s CI green
for the first time in days. Two issues fixed:
## Failure 1 — Security audit (was: 8 vulnerabilities)
`cargo audit` is now exit 0. 4 of the 5 critical advisories were
fixed by version bumps; only the unfixable one is ignored.
**Dep-bumped:**
- `rustls-webpki 0.101.7` + `0.103.10` → `0.103.13` via
`cargo update -p rustls-webpki@0.103.10`. Patches:
RUSTSEC-2026-0098 (URI name constraints)
RUSTSEC-2026-0099 (wildcard name constraints)
RUSTSEC-2026-0104 (CRL parsing panic)
- `idna 0.5.0` → `1.1.0` via `validator 0.18 → 0.20` in
`examples/scipix`. Patches RUSTSEC-2024-0421 (Punycode acceptance).
- Bonus: `reqwest 0.11 → 0.12` (in `ruvector-core` + `examples/benchmarks`)
and `hf-hub 0.3 → 0.4` (in `ruvector-core` + `ruvllm` +
`ruvllm-cli`). Removes the entire legacy `rustls 0.21` /
`rustls-webpki 0.101.7` subtree from the lockfile.
**Ignored** (single advisory, with rationale):
- `RUSTSEC-2023-0071` (rsa Marvin timing sidechannel) — no upstream
fix available; we don't expose RSA decryption services. Documented
in `.cargo/audit.toml`.
**Unmaintained warnings** (16 total — proc-macro-error, derivative,
instant, paste, bincode 1, pqcrypto-{kyber,dilithium}, rustls-pemfile 1,
rusttype, wee_alloc, number_prefix, rand_os, core2, lru, pprof, rand) —
each given a one-line justification in `.cargo/audit.toml` so CI stays
green on them while the team decides whether to chase upstream
replacements.
## Failure 2 — Tests timeout (was: 30-min job timeout cancellation)
`.github/workflows/ci.yml` `test` job is now a `matrix` with
`fail-fast: false` and `timeout-minutes: 45`. Six parallel shards
under `cargo nextest run` (installed via `taiki-e/install-action@v2`)
plus a separate `cargo test --doc` step (nextest doesn't run
doctests):
| Shard | Crates |
|------------------|---------------------------------------------|
| vector-index | rabitq, rulake, diskann, graph, gnn, cnn |
| rvagent | 10 rvagent-* crates |
| ruvix | 16 ruvix-* crates |
| ruqu-quantum | 5 ruqu* crates |
| ml-research | attention, mincut, scipix, fpga-transformer,|
| | sparse-inference, sparsifier, solver, |
| | graph-transformer, domain-expansion, |
| | robotics |
| core-and-rest | --workspace minus the above |
`Swatinem/rust-cache@v2` is keyed per shard. Audit job switched to
`taiki-e/install-action` for `cargo-audit` (faster than
`cargo install --locked`).
## Verification
cargo audit → exit 0
cargo build --workspace --exclude ruvector-postgres → clean
cargo clippy --workspace --exclude ruvector-postgres --no-deps -- -D warnings → exit 0
cargo fmt --all --check → exit 0
## Cargo.lock churn
166-line diff, net ~120 lines removed (more deletions than
additions). Removed: `idna 0.5.0`, `rustls-webpki 0.101.7`,
`validator 0.18`, `validator_derive 0.18`, `proc-macro-error 1.0.4`.
Added: `rustls-webpki 0.103.13`, `validator 0.20`,
`proc-macro-error2`, `hf-hub 0.4.3`, `reqwest 0.12.28`. No
suspicious crates.
## Recommended merge order
1. **This PR first** — unblocks every other PR's CI.
2. After this lands and main is green, rebase the 7 open PRs
(#381-#387) one at a time. The DiskANN stack (#383→#384→#385→#386)
must merge in numeric order. #381 (Python SDK), #382 (research),
#387 (graph property index) are independent and can merge in
any order after their CI goes green on the rebase.
Co-Authored-By: claude-flow <ruv@ruv.net>
|
||
|---|---|---|
| .. | ||
| a2a-swarm | ||
| agentic-jujutsu | ||
| apify | ||
| app-clip | ||
| benchmarks | ||
| boundary-discovery | ||
| brain-boundary-discovery | ||
| climate-consciousness | ||
| cmb-boundary-discovery | ||
| cmb-consciousness | ||
| data | ||
| decompiler-dashboard | ||
| delta-behavior | ||
| dna | ||
| docs | ||
| dragnes | ||
| earthquake-boundary-discovery | ||
| ecosystem-consciousness | ||
| edge | ||
| edge-full/pkg | ||
| edge-net | ||
| exo-ai-2025 | ||
| frb-boundary-discovery | ||
| gene-consciousness | ||
| google-cloud | ||
| graph | ||
| gw-consciousness | ||
| health-boundary-discovery | ||
| infrastructure-boundary-discovery | ||
| market-boundary-discovery | ||
| meta-cognition-spiking-neural-network | ||
| mincut | ||
| music-boundary-discovery | ||
| neural-trader | ||
| nodejs | ||
| onnx-embeddings | ||
| onnx-embeddings-wasm | ||
| OSpipe | ||
| pandemic-boundary-discovery | ||
| prime-radiant | ||
| pwa-loader | ||
| quantum-consciousness | ||
| real-eeg-analysis | ||
| real-eeg-multi-seizure | ||
| refrag-pipeline | ||
| robotics | ||
| rust | ||
| ruvLLM | ||
| rvf | ||
| rvf-desktop | ||
| rvf-kernel-optimized | ||
| scipix | ||
| seizure-clinical-report | ||
| seizure-therapeutic-sim | ||
| seti-boundary-discovery | ||
| seti-exotic-signals | ||
| spiking-network | ||
| subpolynomial-time | ||
| temporal-attractor-discovery | ||
| train-discoveries | ||
| ultra-low-latency-sim | ||
| vectorvroom@4c2527b452 | ||
| verified-applications | ||
| vibecast-7sense | ||
| void-boundary-discovery | ||
| vwm-viewer | ||
| wasm/ios | ||
| wasm-react | ||
| wasm-vanilla | ||
| weather-boundary-discovery | ||
| bounded_instance_demo.rs | ||
| README.md | ||
| security_hardened.rvf | ||
RuVector Examples
Comprehensive examples demonstrating RuVector's capabilities across multiple platforms and use cases.
Directory Structure
examples/
├── rust/ # Rust SDK examples
├── nodejs/ # Node.js SDK examples
├── graph/ # Graph database features
├── wasm-react/ # React + WebAssembly integration
├── wasm-vanilla/ # Vanilla JS + WebAssembly
├── agentic-jujutsu/ # AI agent version control
├── exo-ai-2025/ # Advanced cognitive substrate
├── refrag-pipeline/ # Document processing pipeline
└── docs/ # Additional documentation
Quick Start by Platform
Rust
cd rust
cargo run --example basic_usage
cargo run --example advanced_features
cargo run --example agenticdb_demo
Node.js
cd nodejs
npm install
node basic_usage.js
node semantic_search.js
WebAssembly (React)
cd wasm-react
npm install
npm run dev
WebAssembly (Vanilla)
cd wasm-vanilla
# Open index.html in browser
Example Categories
| Category | Directory | Description |
|---|---|---|
| Core API | rust/basic_usage.rs |
Vector DB fundamentals |
| Batch Ops | rust/batch_operations.rs |
High-throughput ingestion |
| RAG Pipeline | rust/rag_pipeline.rs |
Retrieval-Augmented Generation |
| Advanced | rust/advanced_features.rs |
Hypergraphs, neural hashing |
| AgenticDB | rust/agenticdb_demo.rs |
AI agent memory system |
| GNN | rust/gnn_example.rs |
Graph Neural Networks |
| Graph | graph/ |
Cypher queries, clustering |
| Node.js | nodejs/ |
JavaScript integration |
| WASM React | wasm-react/ |
Modern React apps |
| WASM Vanilla | wasm-vanilla/ |
Browser without framework |
| Agentic Jujutsu | agentic-jujutsu/ |
Multi-agent version control |
| EXO-AI 2025 | exo-ai-2025/ |
Cognitive substrate research |
| Refrag | refrag-pipeline/ |
Document fragmentation |
Feature Highlights
Vector Database Core
- High-performance similarity search
- Multiple distance metrics (Cosine, Euclidean, Dot Product)
- Metadata filtering
- Batch operations
Advanced Features
- Hypergraph Index: Multi-entity relationships
- Temporal Hypergraph: Time-aware relationships
- Causal Memory: Cause-effect chains
- Learned Index: ML-optimized indexing
- Neural Hash: Locality-sensitive hashing
- Topological Analysis: Persistent homology
AgenticDB
- Reflexion episodes (self-critique)
- Skill library (consolidated patterns)
- Causal memory (hypergraph relationships)
- Learning sessions (RL training data)
- Vector embeddings (core storage)
EXO-AI Cognitive Substrate
- exo-core: IIT consciousness, thermodynamics
- exo-temporal: Causal memory coordination
- exo-hypergraph: Topological structures
- exo-manifold: Continuous deformation
- exo-exotic: 10 cutting-edge experiments
- exo-wasm: Browser deployment
- exo-federation: Distributed consensus
- exo-node: Native bindings
- exo-backend-classical: Classical compute
Running Benchmarks
# Rust benchmarks
cargo bench --example advanced_features
# Refrag pipeline benchmarks
cd refrag-pipeline
cargo bench
# EXO-AI benchmarks
cd exo-ai-2025
cargo bench
Related Documentation
License
MIT OR Apache-2.0