Merge branch 'main' into feat/minds

Author: LaGodxy

.cargo/audit.toml

@@ -13,4 +13,6 @@ ignore = [
     "RUSTSEC-2025-0134",
     # time: DoS via stack exhaustion — transitive dep via serde_with, pinned by soroban-sdk 22.0.0
     "RUSTSEC-2026-0009",
+    # libcrux-poly1305: CVSS 4.0 parsing issue in advisory tooling; tracked upstream
+    "RUSTSEC-2026-0073",
 ]

.cargo/config.toml

@@ -8,4 +8,6 @@ linker = "clang"
 linker = "clang"
 
 [build]
-target = "x86_64-pc-windows-gnu"
+# Use the Linux host target by default so CI (Linux runners) can build/tests.
+# Change this if you intentionally need a Windows cross-target here.
+target = "x86_64-unknown-linux-gnu"

.github/workflows/analytics-aggregate.yml

@@ -0,0 +1,24 @@
+name: Analytics aggregate
+
+on:
+  push:
+    branches:
+      - feature/search-analytics-tracking
+  schedule:
+    - cron: '0 2 * * *' # nightly at 02:00 UTC
+
+jobs:
+  aggregate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+      - name: Run aggregator
+        run: |
+          node scripts/analytics/aggregate_search_events.js
+      - name: Smoke test suggestions
+        run: |
+          node scripts/analytics/smoke_test_suggestions.js

.github/workflows/blue-green-deploy.yml

@@ -0,0 +1,63 @@
+name: Blue-Green Deploy to EKS
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch: {}
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    env:
+      IMAGE_NAME: ghcr.io/${{ github.repository }}/myapp
+      K8S_NAMESPACE: default
+      AWS_REGION: ${{ secrets.AWS_REGION }}
+      EKS_CLUSTER_NAME: ${{ secrets.EKS_CLUSTER_NAME }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        if: env.AWS_REGION != ''
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push image
+        id: build
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          tags: |
+            "${{ env.IMAGE_NAME }}:latest"
+            "${{ env.IMAGE_NAME }}:${{ github.sha }}"
+      - name: Configure kubectl (EKS)
+        if: env.AWS_REGION != ''
+        run: |
+          aws eks update-kubeconfig --region ${{ secrets.AWS_REGION }} --name ${{ secrets.EKS_CLUSTER_NAME }}
+
+      - name: Deploy (Blue-Green)
+        env:
+          IMAGE: ${{ env.IMAGE_NAME }}:${{ github.sha }}
+          K8S_NAMESPACE: ${{ env.K8S_NAMESPACE }}
+        run: |
+          chmod +x ./scripts/blue-green-deploy.sh
+          ./scripts/blue-green-deploy.sh "$IMAGE" "$K8S_NAMESPACE"
+
+      - name: Notify on failure and rollback
+        if: failure()
+        run: |
+          chmod +x ./scripts/blue-green-rollback.sh
+          ./scripts/blue-green-rollback.sh "$K8S_NAMESPACE"