castrum 0.7.0

package/src/bench/tasks/token.ts

@@ -0,0 +1,20 @@
+import * as native from "../../baseline";
+import { rust } from "../../rust-ffi";
+import type { BenchTask } from "../types";
+
+export function tokenTasks(): BenchTask[] {
+  return [
+    {
+      name: "native:random_token",
+      run: () => native.nativeRandomToken(32).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:random_token",
+      run: () => rust.randomToken(32).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+  ];
+}

package/src/bench/tasks/url.ts

@@ -0,0 +1,34 @@
+import * as native from "../../baseline";
+import { rust } from "../../rust-ffi";
+import type { BenchFixtures } from "../fixtures";
+import type { BenchTask } from "../types";
+
+export function urlTasks(f: BenchFixtures): BenchTask[] {
+  return [
+    {
+      name: "native:url_encode",
+      run: () => native.nativeUrlEncode("hello world & foo=bar").length,
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:url_encode",
+      run: () => rust.urlEncode(f.urlEncodeInput).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "native:url_decode",
+      run: () =>
+        native.nativeUrlDecode("hello%20world%20%26%20foo%3Dbar").length,
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:url_decode",
+      run: () => rust.urlDecode(f.urlDecodeInput).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+  ];
+}

package/src/bench/tasks/validation.ts

@@ -0,0 +1,57 @@
+import * as native from "../../baseline";
+import { rust } from "../../rust-ffi";
+import type { BenchFixtures } from "../fixtures";
+import type { BenchTask } from "../types";
+
+export function validationTasks(f: BenchFixtures): BenchTask[] {
+  return [
+    {
+      name: "native:validate_email",
+      run: () => (native.nativeValidateEmail(f.emailOk) ? 1 : 0),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:validate_email",
+      run: () => rust.validateEmail(f.emailOk),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "native:validate_uuid",
+      run: () => (native.nativeValidateUuid(f.uuidOk) ? 1 : 0),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:validate_uuid",
+      run: () => rust.validateUuid(f.uuidOk),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "native:validate_ipv4",
+      run: () => (native.nativeValidateIpv4(f.ipv4Ok) ? 1 : 0),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:validate_ipv4",
+      run: () => rust.validateIpv4(f.ipv4Ok),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "native:validate_ipv6",
+      run: () => (native.nativeValidateIpv6(f.ipv6Ok) ? 1 : 0),
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:validate_ipv6",
+      run: () => rust.validateIpv6(f.ipv6Ok),
+      iterations: 1000,
+      warmup: 100,
+    },
+  ];
+}

package/src/bench/tasks/websocket.ts

@@ -0,0 +1,21 @@
+import * as native from "../../baseline";
+import { rust } from "../../rust-ffi";
+import type { BenchFixtures } from "../fixtures";
+import type { BenchTask } from "../types";
+
+export function websocketTasks(f: BenchFixtures): BenchTask[] {
+  return [
+    {
+      name: "native:ws_accept_key",
+      run: () => native.nativeWsAcceptKey(f.wsKey).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+    {
+      name: "rust:ws_accept_key",
+      run: () => rust.wsAcceptKey(f.wsKeyBytes).byteLength,
+      iterations: 1000,
+      warmup: 100,
+    },
+  ];
+}

package/src/bench/types.ts

@@ -0,0 +1,60 @@
+export interface BenchResult {
+  name: string;
+  iterations: number;
+  avgMs: number;
+  p50Ms: number;
+  p95Ms: number;
+  opsPerSec: number;
+  checksum: string;
+}
+
+export interface ConcurrentBenchResult {
+  name: string;
+  iterations: number;
+  concurrency: number;
+  totalOps: number;
+  totalMs: number;
+  avgMs: number;
+  p50Ms: number;
+  p95Ms: number;
+  opsPerSec: number;
+  checksum: string;
+}
+
+export interface StressBenchResult {
+  name: string;
+  durationMs: number;
+  totalOps: number;
+  opsPerSec: number;
+  avgMs: number;
+  checksum: string;
+}
+
+export interface BenchTask {
+  name: string;
+  run: () => unknown;
+  iterations: number;
+  warmup: number;
+}
+
+export interface ConcurrentBenchTask {
+  name: string;
+  op: string;
+  payload: unknown;
+  concurrency: number;
+  iterationsPerSlot: number;
+  warmupPerSlot: number;
+}
+
+export interface StressBenchTask {
+  name: string;
+  run: () => unknown;
+  durationMs: number;
+  warmupMs: number;
+}
+
+export interface ComparisonReport {
+  label: string;
+  nativeName: string;
+  rustName: string;
+}

package/src/data/json-rows.ts

@@ -0,0 +1,33 @@
+import { encoder } from "../shared/bytes";
+
+export interface JsonRowNested {
+  version: number;
+  createdAt: string;
+}
+
+export interface JsonRow {
+  id: number;
+  name: string;
+  active: boolean;
+  score: number;
+  tags: string[];
+  nested: JsonRowNested;
+}
+
+export function createJsonRows(rows: number): JsonRow[] {
+  return Array.from({ length: rows }, (_, i) => ({
+    id: i,
+    name: `user_${i}`,
+    active: i % 2 === 0,
+    score: i * 1.25,
+    tags: ["alpha", "beta", "gamma"],
+    nested: {
+      version: i % 10,
+      createdAt: "2026-01-01T00:00:00Z",
+    },
+  }));
+}
+
+export function jsonRowsBytes(rows: number): Uint8Array {
+  return encoder.encode(JSON.stringify(createJsonRows(rows)));
+}

package/src/ingress/constants.ts

@@ -0,0 +1,56 @@
+// src/ingress/constants.ts — SINGLE SOURCE OF TRUTH for ingress binary layout constants
+// These are read from the Rust native addon to eliminate duplication across:
+//   - src/ingress/index.ts
+//   - bench/servers/ingress-server.ts
+//   - Any future consumers
+//
+// IMPORTANT: Do NOT hardcode these values. They come from Rust's ingress_constants.rs
+// and are typed on the NativeAddon interface (src/native/index.ts).
+
+import addon from "../native";
+
+// ── Output buffer layout ───────────────────────────────────
+export const OUT_VERDICT: number = addon.INGRESS_OUT_VERDICT;
+export const OUT_ERROR_CODE: number = addon.INGRESS_OUT_ERROR_CODE;
+export const OUT_STATUS: number = addon.INGRESS_OUT_STATUS;
+export const OUT_FLAGS: number = addon.INGRESS_OUT_FLAGS;
+export const OUT_RATE_LIMIT: number = addon.INGRESS_OUT_RATE_LIMIT;
+export const OUT_RATE_REMAINING: number = addon.INGRESS_OUT_RATE_REMAINING;
+export const OUT_RATE_RESET: number = addon.INGRESS_OUT_RATE_RESET;
+export const OUT_RETRY_AFTER: number = addon.INGRESS_OUT_RETRY_AFTER;
+export const OUT_COOKIES_JSON_LEN: number = addon.INGRESS_OUT_COOKIES_JSON_LEN;
+export const OUT_QUERY_JSON_LEN: number = addon.INGRESS_OUT_QUERY_JSON_LEN;
+export const OUT_HEADER_VARIANT: number = addon.INGRESS_OUT_HEADER_VARIANT;
+export const OUT_BODY_JSON_LEN: number = addon.INGRESS_OUT_BODY_JSON_LEN;
+export const OUT_DATA_START: number = addon.INGRESS_OUT_DATA_START;
+
+// ── Flags ──────────────────────────────────────────────────
+export const FLAG_HAS_COOKIES: number = addon.INGRESS_FLAG_HAS_COOKIES;
+export const FLAG_HAS_QUERY: number = addon.INGRESS_FLAG_HAS_QUERY;
+export const FLAG_BODY_VALID_JSON: number = addon.INGRESS_FLAG_BODY_VALID_JSON;
+export const FLAG_SCHEMA_VALID: number = addon.INGRESS_FLAG_SCHEMA_VALID;
+export const FLAG_CORS_ALLOWED: number = addon.INGRESS_FLAG_CORS_ALLOWED;
+export const FLAG_IS_PREFLIGHT: number = addon.INGRESS_FLAG_IS_PREFLIGHT;
+export const FLAG_RATE_LIMITED: number = addon.INGRESS_FLAG_RATE_LIMITED;
+export const FLAG_HTTPS: number = addon.INGRESS_FLAG_HTTPS;
+export const FLAG_TRUSTED_PROXY: number = addon.INGRESS_FLAG_TRUSTED_PROXY;
+export const FLAG_BODY_TRUNCATED: number = addon.INGRESS_FLAG_BODY_TRUNCATED;
+
+// ── Header variant bits ────────────────────────────────────
+export const HV_JSON: number = addon.INGRESS_HV_JSON;
+export const HV_CORS_SIMPLE: number = addon.INGRESS_HV_CORS_SIMPLE;
+export const HV_CORS_PREFLIGHT: number = addon.INGRESS_HV_CORS_PREFLIGHT;
+export const HV_RATE_ACTIVE: number = addon.INGRESS_HV_RATE_ACTIVE;
+export const HV_RATE_LIMITED: number = addon.INGRESS_HV_RATE_LIMITED;
+export const HV_COUNT: number = addon.INGRESS_HV_COUNT;
+
+// ── Error codes ────────────────────────────────────────────
+export const ERR_CODE_NONE: number = addon.INGRESS_ERR_NONE;
+export const ERR_CODE_CORS_PREFLIGHT: number = addon.INGRESS_ERR_CORS_PREFLIGHT;
+export const ERR_CODE_RATE_LIMITED: number = addon.INGRESS_ERR_RATE_LIMITED;
+export const ERR_CODE_BODY_TOO_LARGE: number = addon.INGRESS_ERR_BODY_TOO_LARGE;
+export const ERR_CODE_INVALID_JSON: number = addon.INGRESS_ERR_INVALID_JSON;
+export const ERR_CODE_SCHEMA_VALIDATION: number = addon.INGRESS_ERR_SCHEMA_VALIDATION;
+export const ERR_CODE_BAD_REQUEST: number = addon.INGRESS_ERR_BAD_REQUEST;
+export const ERR_CODE_REQUEST_TOO_LARGE: number = addon.INGRESS_ERR_REQUEST_TOO_LARGE;
+export const ERR_CODE_INTERNAL: number = addon.INGRESS_ERR_INTERNAL;