feat(rust): migrate wire, identity and atomic SQLite metadata storage

.github/workflows/rust-wire.yml

@@ -0,0 +1,101 @@
+name: Rust native conformance
+on:
+  # Daily changes are accepted locally; retain explicit conformance reproduction.
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: rust-wire-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: false
+jobs:
+  conformance:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: msg_test
+          POSTGRES_PASSWORD: msg_test_local_only
+          POSTGRES_DB: postgres
+        ports: ['5432:5432']
+        options: >-
+          --health-cmd "pg_isready -U msg_test -d postgres"
+          --health-interval 5s --health-timeout 5s --health-retries 12
+    env:
+      MSG_PG_TEST_ADMIN_DSN: 'host=127.0.0.1 port=5432 user=msg_test password=msg_test_local_only dbname=postgres sslmode=disable'
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v7
+        with:
+          python-version: '3.15'
+          allow-prereleases: true
+      - name: Install Rust toolchain and Python reference dependencies
+        run: |
+          rustup toolchain install 1.85.0 --profile minimal --component rustfmt,clippy
+          python -m pip install cryptography==46.0.3 jsonschema==4.25.1 ruff==0.16.9 "psycopg[binary]==3.3.6"
+      - name: Record exact tested revision and environment
+        run: |
+          mkdir -p rust/artifacts
+          git rev-parse HEAD > rust/artifacts/source-commit.txt
+          git rev-parse HEAD^{tree} > rust/artifacts/source-tree.txt
+          rustc +1.85.0 --version > rust/artifacts/toolchains.txt
+          python --version >> rust/artifacts/toolchains.txt
+      - name: Check Rust formatting without modifying sources
+        working-directory: rust
+        run: cargo +1.85.0 fmt --all -- --check
+      - name: Check Python reference harness style
+        if: ${{ !cancelled() }}
+        run: |
+          python -m ruff check rust/tests
+          python -m ruff format --check rust/tests
+      - name: Native tests
+        if: ${{ !cancelled() }}
+        working-directory: rust
+        run: |
+          set -euo pipefail
+          cargo +1.85.0 test --locked --workspace --all-targets 2>&1 | tee artifacts/native-tests.txt
+          cargo +1.85.0 test --locked --workspace --doc 2>&1 | tee artifacts/doc-tests.txt
+      - name: Clippy
+        if: ${{ !cancelled() }}
+        working-directory: rust
+        run: cargo +1.85.0 clippy --locked --workspace --all-targets -- -D warnings
+      - name: Python and Rust differential checks
+        if: ${{ !cancelled() }}
+        env:
+          PYTHONPATH: src
+        run: |
+          cargo +1.85.0 build --locked --manifest-path rust/Cargo.toml --workspace --examples
+          python rust/tests/test_python_parity.py --binary rust/target/debug/examples/wire_check --report rust/artifacts/parity.json
+          python rust/tests/test_identity_parity.py --binary rust/target/debug/examples/authority_check --report rust/artifacts/identity-parity.json
+          python rust/tests/test_storage_parity.py --binary rust/target/debug/examples/writer_check --report rust/artifacts/storage-parity.json
+          python rust/tests/test_authorization_parity.py --binary rust/target/debug/examples/authority_check --report rust/artifacts/authorization.json
+          python rust/tests/test_authorization_parity.py --postgres --binary rust/target/debug/examples/authority_check --report rust/artifacts/authorization-pg.json
+          python rust/tests/test_postgres_parity.py --binary rust/target/debug/examples/pg_writer_check --report rust/artifacts/postgres.json
+          python rust/tests/test_postgres_process.py --binary rust/target/debug/examples/pg_writer_check --report rust/artifacts/postgres-process.json
+          python rust/tests/test_content_parity.py rust/target/debug/examples/content_check --report rust/artifacts/content-debug.json
+      - name: Optimized native differential checks
+        if: ${{ !cancelled() }}
+        env:
+          PYTHONPATH: src
+        run: |
+          cargo +1.85.0 build --release --locked --manifest-path rust/Cargo.toml --workspace --examples
+          python rust/tests/test_python_parity.py --binary rust/target/release/examples/wire_check --report rust/artifacts/parity-release.json
+          python rust/tests/test_identity_parity.py --binary rust/target/release/examples/authority_check --report rust/artifacts/identity-parity-release.json
+          python rust/tests/test_storage_parity.py --binary rust/target/release/examples/writer_check --report rust/artifacts/storage-parity-release.json
+          python rust/tests/test_authorization_parity.py --binary rust/target/release/examples/authority_check --report rust/artifacts/authorization-release.json
+          python rust/tests/test_authorization_parity.py --postgres --binary rust/target/release/examples/authority_check --report rust/artifacts/authorization-pg-release.json
+          python rust/tests/test_postgres_parity.py --binary rust/target/release/examples/pg_writer_check --report rust/artifacts/postgres-release.json
+          python rust/tests/test_postgres_process.py --binary rust/target/release/examples/pg_writer_check --report rust/artifacts/postgres-process-release.json
+          python rust/tests/test_content_parity.py rust/target/release/examples/content_check --report rust/artifacts/content-release.json
+      - name: Preserve evidence and dependency lock
+        if: ${{ always() }}
+        uses: actions/upload-artifact@v7
+        with:
+          name: rust-wire-${{ github.sha }}
+          path: |
+            rust/artifacts/
+            rust/Cargo.lock
+          if-no-files-found: warn

rust/.gitignore

@@ -0,0 +1,2 @@
+/target/
+/artifacts/