mirror of
https://github.com/ruvnet/RuVector.git
synced 2026-07-09 17:28:42 +00:00
eafba64fa5
* fix(security): RUSTSEC advisories + clippy hardening in RuVector - Replace all bare `partial_cmp().unwrap()` calls on f32/f64 with `.unwrap_or(Ordering::Equal)` to prevent panics on NaN values in sorting/max-by operations across ruvllm, ruvector-dag, prime-radiant, and rvagent-wasm (12 sites in production code). - Add input validation guards to the HTTP search endpoint: reject k=0, k > 10_000, empty vectors, and vectors exceeding 65_536 dimensions, preventing memory exhaustion via unbounded allocations. - Harden LocalFsBackend::execute in rvagent-cli with env_clear() + safe-env allowlist (SEC-005), deadline-based timeout enforcement, and 1 MB output truncation, matching the security posture of LocalShellBackend. - Remove 129 occurrences of the deprecated `unused_unit = "allow"` lint and 3 occurrences of the removed `clippy::match_on_vec_items` lint from Cargo.toml files workspace-wide; both are no-ops in current Rust/Clippy. - All 653+ tests across ruvector-core, ruvector-server, ruvector-dag, rvagent-cli, and prime-radiant pass with zero failures. Note: `bytes` is already at 1.11.1 (>= 1.10.0); `paste` 1.0.15 is a transitive dependency with no semver fix available upstream; `cargo audit` returns clean. Co-Authored-By: claude-flow <ruv@ruv.net> * fix(ci): cargo fmt + restore workspace unused_unit lint allow - Run cargo fmt --all across all 9 files that drifted from rustfmt style (prime-radiant/energy.rs, ruvector-dag/bottleneck.rs+reasoning_bank.rs, ruvector-server/points.rs, ruvllm/pretrain_pipeline.rs+report.rs+registry.rs, rvagent-cli/app.rs, rvagent-wasm/gallery.rs) - Add [workspace.lints.clippy] unused_unit = "allow" to root Cargo.toml; the per-crate entries removed in the security commit were still needed — moving to workspace-level is cleaner and restores -D warnings CI pass Co-Authored-By: claude-flow <ruv@ruv.net> * fix(ci): remove unneeded unit return type in ruvix bench Removes `-> ()` from the Fn bound in run_benchmark_with_kernel (crates/ruvix/benches/src/ruvix.rs:50) — triggers clippy::unused_unit under -D warnings. Clippy prefers `Fn(&mut Kernel)` without explicit unit return. Co-Authored-By: claude-flow <ruv@ruv.net> * fix(ci): resolve rustfmt and clippy unused_unit failures - Run cargo fmt --all to fix long closure formatting in 9 files (energy.rs, bottleneck.rs, reasoning_bank.rs, points.rs, pretrain_pipeline.rs, report.rs, registry.rs, app.rs, gallery.rs) - Add unused_unit = "allow" to [lints.clippy] in ruvix-bench and ruvector-mincut Cargo.toml files to suppress the unused_unit lint that was previously suppressed globally and now fires on two Fn(&mut T) -> () and FnMut() -> () function bounds Co-Authored-By: claude-flow <ruv@ruv.net> |
||
|---|---|---|
| .. | ||
| src | ||
| tests | ||
| Cargo.toml | ||
| README.md | ||
ruvector-verified-wasm
WebAssembly bindings for ruvector-verified — proof-carrying vector operations in the browser. Verify vector dimensions, build typed HNSW indices, and create 82-byte proof attestations entirely client-side with sub-microsecond overhead.
Quick Start
import init, { JsProofEnv } from "ruvector-verified-wasm";
await init();
const env = new JsProofEnv();
// Prove dimension equality (~500ns)
const proofId = env.prove_dim_eq(384, 384);
// Verify a batch of vectors (flat f32 array)
const flat = new Float32Array(384 * 100); // 100 vectors
const count = env.verify_batch_flat(384, flat);
console.log(`Verified ${count} vectors`);
// Create 82-byte proof attestation
const att = env.create_attestation(proofId);
console.log(att.bytes.length); // 82
// Route proof to cheapest tier
const routing = env.route_proof("dimension");
console.log(routing); // { tier: "reflex", reason: "...", estimated_steps: 1 }
// Get statistics
console.log(env.stats());
API
| Method | Returns | Description |
|---|---|---|
new JsProofEnv() |
JsProofEnv |
Create environment with all ultra optimizations |
.prove_dim_eq(a, b) |
number |
Prove dimensions equal, returns proof ID |
.mk_vector_type(dim) |
number |
Build RuVec n type term |
.mk_distance_metric(m) |
number |
Build metric type: "L2", "Cosine", "Dot" |
.verify_dim_check(dim, vec) |
number |
Verify single vector dimension |
.verify_batch_flat(dim, flat) |
number |
Verify N vectors (flat f32 array) |
.arena_intern(hi, lo) |
[id, cached] |
Intern into FastTermArena |
.route_proof(kind) |
object |
Route to Reflex/Standard/Deep tier |
.create_attestation(id) |
object |
Create 82-byte proof witness |
.stats() |
object |
Get verification statistics |
.reset() |
void |
Reset environment |
.terms_allocated() |
number |
Count of allocated proof terms |
Building
# With wasm-pack
wasm-pack build crates/ruvector-verified-wasm --target web
# With cargo (for crates.io)
cargo build -p ruvector-verified-wasm --target wasm32-unknown-unknown
License
MIT OR Apache-2.0